Setting Up an SFTP Server on Linux: A Step-by-Step Guide

Blog

Linux server distributions pack a punch. They can handle whatever you throw their way. If they don’t meet your needs right out of the box, you can tweak them to fit perfectly.

Let’s talk about SFTP. It’s an FTP service integrated into Secure Shell (SSH), letting you securely transfer files between your machine and the server.

Today, I’ll guide you through setting up an SFTP server. The plan is to create a user whose account is limited strictly to SFTP logins. Once you nail this down, adding more users becomes straightforward. This method will work across all Linux distributions.

Ready to dive in?

What You’ll Need
You need access to an admin account. Once you have that, let’s get started.

Create an SFTP Directory
First, we’ll set up the directory for your FTP data. Open a terminal, switch to the root user by typing su, and enter the root password. Then run these commands:

mkdir -p /data
chmod 701 /data

Create the SFTP Group and User
Next, let’s form a dedicated group for SFTP users. Use this command:

groupadd sftp_users

We’ll create a user who belongs to this group but doesn’t have standard login privileges. You can name the user as you see fit. Here’s the command for that:

useradd -g sftp_users -d /upload -s /sbin/nologin USERNAME

Replace USERNAME with your chosen name. After that, set a password for the user:

passwd USERNAME

Create the User’s SFTP Directory
Now it’s time to create a specific upload directory for the new user and set the right permissions. Run these commands:

mkdir -p /data/USERNAME/upload
chown -R root:sftp_users /data/USERNAME
chown -R USERNAME:sftp_users /data/USERNAME/upload

Again, replace USERNAME with the name you used before.

Configure SSHD
Next, let’s edit the SSH daemon configuration file. Open it with:

nano /etc/ssh/sshd_config

At the bottom, add:

Match Group sftp_users
ChrootDirectory /data/%u
ForceCommand internal-sftp

Save the file and restart SSH:

systemctl restart sshd

Logging In
You’re ready to log in. From another machine with SSH installed, open a terminal and type:

sftp USERNAME@SERVER_IP

Replace USERNAME with your user name and SERVER_IP with your SFTP server’s IP address. Enter the password when prompted. After successful login, you’ll see the SFTP prompt. Type pwd to check your current directory; it should show /upload.

Setting up an SFTP server on Linux is straightforward and budget-friendly. You can now offer a secure way for staff and clients to manage file transfers. Enjoy the ease and security of your new SFTP server!