New answers tagged sftp
0
Rsync into chroot is tricky :) You'll need to setup minimal environment for /bin/sh and /usr/bin/rsync within the chrooted directory (destination-side) in order for it to work.
See the whole article here, the rsync-environment setup is by the end
https://medium.com/@deltazero/linux-remote-backup-rsync-chroot-d797ba6babe5
0
In /etc/ssh/sshd_config file add this:
Match user myuser
PasswordAuthentication yes
ChrootDirectory /home/myuser/serverfolder
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
Note that you also have change this:
Subsystem sftp /usr/lib/openssh/sftp-server
to this
Subsystem sftp internal-sftp
in the same /etc/ssh/sshd_config ...
0
In order to clearify the comments above:
If you have sftp configured using a jail (chroot environment), you cannot log without additional configuration affort. The log cannot be written in the chroot environment, you need to create a mount bind or a socket.
I would recommend using a socket, as it is a feature delivered by syslog-ng as well as rsyslog (and ...
2
For HA sftp best option for production grade solution will be aws sftp https://aws.amazon.com/sftp/ or some production grade sftp server.
1
Just to clarify:
The point of asymmetric key encryption is for the sender to be able to encrypt data without having the key necessary to decrypt it. This means that the public key truly can be public, but it also means that the private key should be kept safe at all times and definitely should never be transferred across an untrusted link.
The new third-...
Top 50 recent answers are included
