New answers tagged

0

Rsync into chroot is tricky :) You'll need to setup minimal environment for /bin/sh and /usr/bin/rsync within the chrooted directory (destination-side) in order for it to work. See the whole article here, the rsync-environment setup is by the end https://medium.com/@deltazero/linux-remote-backup-rsync-chroot-d797ba6babe5


0

In /etc/ssh/sshd_config file add this: Match user myuser PasswordAuthentication yes ChrootDirectory /home/myuser/serverfolder X11Forwarding no AllowTcpForwarding no ForceCommand internal-sftp Note that you also have change this: Subsystem sftp /usr/lib/openssh/sftp-server to this Subsystem sftp internal-sftp in the same /etc/ssh/sshd_config ...


0

In order to clearify the comments above: If you have sftp configured using a jail (chroot environment), you cannot log without additional configuration affort. The log cannot be written in the chroot environment, you need to create a mount bind or a socket. I would recommend using a socket, as it is a feature delivered by syslog-ng as well as rsyslog (and ...


2

For HA sftp best option for production grade solution will be aws sftp https://aws.amazon.com/sftp/ or some production grade sftp server.


1

Just to clarify: The point of asymmetric key encryption is for the sender to be able to encrypt data without having the key necessary to decrypt it. This means that the public key truly can be public, but it also means that the private key should be kept safe at all times and definitely should never be transferred across an untrusted link. The new third-...


Top 50 recent answers are included