If you have ssh-agent (or whatever key-management your client machines use) on your client, then you'll only need to 'unlock' the ssh-keys once per login. If you don't want to be asked for login credentials, then you can setup ssh-keys between the client and the host. X11Forwarding noAnother question, when I'm trying download/upload it is asking again for password.Ĭan I remove this?Great that you got it working. Subsystem sftp /usr/lib/openssh/sftp-server spells out how to accomplish the chroot you seek with the openssh sftp server. Fail2ban will firewall block after more than 3 or 5 failed attempts from the same IP address. I always install the metapackage 'ssh' and 'fail2ban' to get both the ssh client and server programs. You can force more security by allowing only ssh-key/cert based authentication for logins too. If that's your intention, then you don't need chroot.īut if you care about security, then using sfp-server built-into the 'openssh-server' package is what you want.

The only way plain FTP makes sense is if you intend to share everything on the system with the entire world. If you've installed ssh, then there is an sftp-server included with instructions on how to setup a chroot for each user login. Plain FTP shouldn't be used since around 2002. those coming from MS-Windows) haven't been told this, I suppose.

Ubuntu ftp server 20.04