[{"_1":2,"_181":-5,"_182":-5},"loaderData",{"_3":4,"_17":18,"_25":26,"_160":161},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","routes/_layout",{"_19":-5,"_20":21,"_22":21,"_23":11,"_24":21},"username","isAskGordonEnabled",true,"isUsingNewTemplate","showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_89":90,"_111":112,"_149":-5,"_150":11,"_151":21,"_152":11,"_153":-5,"_154":11,"_155":-5,"_156":157,"_158":113,"_159":-7},"canonicalUrl","https://hub.docker.com/r/eleneo/sftp/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","eleneo","reponame","sftp","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":73,"_74":75,"_80":11,"_81":82,"_86":33,"_87":88},"categories",[],"content_types",[44],"image","date_registered","2021-05-20T14:48:37.429424Z","description","sftp container","is_private","last_updated","2021-05-21T07:54:48.565721Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",34415,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# SFTP\n\n![GitHub Workflow Status](https://img.shields.io/github/workflow/status/eleneo/sftp/build?logo=github) ![GitHub stars](https://img.shields.io/github/stars/eleneo/sftp?logo=github) ![Docker Stars](https://img.shields.io/docker/stars/eleneo/sftp?label=stars&logo=docker) ![Docker Pulls](https://img.shields.io/docker/pulls/eleneo/sftp?label=pulls&logo=docker)\n\n![OpenSSH logo](https://raw.githubusercontent.com/eleneo/sftp/master/openssh.png \"Powered by OpenSSH\")\n\n# Supported tags and respective `Dockerfile` links\n\n- [`debian`, `latest` (*Dockerfile*)](https://github.com/eleneo/sftp/blob/master/Dockerfile) ![Docker Image Size (debian)](https://img.shields.io/docker/image-size/eleneo/sftp/debian?label=debian&logo=debian&style=plastic)\n- [`alpine` (*Dockerfile*)](https://github.com/eleneo/sftp/blob/master/Dockerfile-alpine) ![Docker Image Size (alpine)](https://img.shields.io/docker/image-size/eleneo/sftp/alpine?label=alpine&logo=Alpine%20Linux&style=plastic)\n\n# Securely share your files\n\nEasy to use SFTP ([SSH File Transfer Protocol](https://en.wikipedia.org/wiki/SSH_File_Transfer_Protocol)) server with [OpenSSH](https://en.wikipedia.org/wiki/OpenSSH).\n\n# Usage\n\n- Define users in (1) command arguments, (2) `SFTP_USERS` environment variable\n or (3) in file mounted as `/etc/sftp/users.conf` (syntax:\n `user:pass[:e][:uid[:gid[:dir1[,dir2]...]]] ...`, see below for examples)\n - Set UID/GID manually for your users if you want them to make changes to\n your mounted volumes with permissions matching your host filesystem.\n - Directory names at the end will be created under user's home directory with\n write permission, if they aren't already present.\n- Mount volumes\n - The users are chrooted to their home directory, so you can mount the\n volumes in separate directories inside the user's home directory\n (/home/user/**mounted-directory**) or just mount the whole **/home** directory.\n Just remember that the users can't create new files directly under their\n own home directory, so make sure there are at least one subdirectory if you\n want them to upload files.\n - For consistent server fingerprint, mount your own host keys (i.e. `/etc/ssh/ssh_host_*`)\n\n# Examples\n\n## Simplest docker run example\n\n```\ndocker run -p 22:22 -d eleneo/sftp foo:pass:::upload\n```\n\nUser \"foo\" with password \"pass\" can login with sftp and upload files to a folder called \"upload\". No mounted directories or custom UID/GID. Later you can inspect the files and use `--volumes-from` to mount them somewhere else (or see next example).\n\n## Sharing a directory from your computer\n\nLet's mount a directory and set UID:\n\n```\ndocker run \\\n -v /upload:/home/foo/upload \\\n -p 2222:22 -d eleneo/sftp \\\n foo:pass:1001\n```\n\n### Using Docker Compose:\n\n```\nsftp:\n image: eleneo/sftp\n volumes:\n - /upload:/home/foo/upload\n ports:\n - \"2222:22\"\n command: foo:pass:1001\n```\n\n### Logging in\n\nThe OpenSSH server runs by default on port 22, and in this example, we are forwarding the container's port 22 to the host's port 2222. To log in with the OpenSSH client, run: `sftp -P 2222 foo@`\n\n## Store users in config\n\n```\ndocker run \\\n -v /users.conf:/etc/sftp/users.conf:ro \\\n -v mySftpVolume:/home \\\n -p 2222:22 -d eleneo/sftp\n```\n\n/users.conf:\n\n```\nfoo:123:1001:100\nbar:abc:1002:100\nbaz:xyz:1003:100\n```\n\n## Encrypted password\n\nAdd `:e` behind password to mark it as encrypted. Use single quotes if using terminal.\n\n```\ndocker run \\\n -v /share:/home/foo/share \\\n -p 2222:22 -d eleneo/sftp \\\n 'foo:$1$0G2g0GSt$ewU0t6GXG15.0hWoOX8X9.:e:1001'\n```\n\nTip: you can use [eleneo/makepasswd](https://hub.docker.com/r/eleneo/makepasswd/) to generate encrypted passwords:\n`echo -n \"your-password\" | docker run -i --rm eleneo/makepasswd --crypt-md5 --clearfrom=-`\n\n## Logging in with SSH keys\n\nMount public keys in the user's `.ssh/keys/` directory. All keys are automatically appended to `.ssh/authorized_keys` (you can't mount this file directly, because OpenSSH requires limited file permissions). In this example, we do not provide any password, so the user `foo` can only login with his SSH key.\n\n```\ndocker run \\\n -v /id_rsa.pub:/home/foo/.ssh/keys/id_rsa.pub:ro \\\n -v /id_other.pub:/home/foo/.ssh/keys/id_other.pub:ro \\\n -v /share:/home/foo/share \\\n -p 2222:22 -d eleneo/sftp \\\n foo::1001\n```\n\n### SSH Key with Environements variables\nYou can set the ssh key by environnements variables\n\n| Variable | Description | |\n| ---------------- | --------------- | ---- |\n| `RSAKEY` | Private RSA KEY | |\n| `RSAKEY_PUB` | Public RSA KEY | |\n| `ED25519KEY` | Private EDKEY | |\n| `ED25519KEY_PUB` | Public EDKEYKEY | |\n\n> Variable value need to be encoded in base64\n\n## Providing your own SSH host key (recommended)\n\nThis container will generate new SSH host keys at first run. To avoid that your users get a MITM warning when you recreate your container (and the host keys changes), you can mount your own host keys.\n\n```\ndocker run \\\n -v /ssh_host_ed25519_key:/etc/ssh/ssh_host_ed25519_key \\\n -v /ssh_host_rsa_key:/etc/ssh/ssh_host_rsa_key \\\n -v /share:/home/foo/share \\\n -p 2222:22 -d eleneo/sftp \\\n foo::1001\n```\n\nTip: you can generate your keys with these commands:\n\n```\nssh-keygen -t ed25519 -f ssh_host_ed25519_key < /dev/null\nssh-keygen -t rsa -b 4096 -f ssh_host_rsa_key < /dev/null\n```\n\n## Execute custom scripts or applications\n\nPut your programs in `/etc/sftp.d/` and it will automatically run when the container starts.\nSee next section for an example.\n\n## Bindmount dirs from another location\n\nIf you are using `--volumes-from` or just want to make a custom directory available in user's home directory, you can add a script to `/etc/sftp.d/` that bindmounts after container starts.\n\n```\n#!/bin/bash\n# File mounted as: /etc/sftp.d/bindmount.sh\n# Just an example (make your own)\n\nfunction bindmount() {\n if [ -d \"$1\" ]; then\n mkdir -p \"$2\"\n fi\n mount --bind $3 \"$1\" \"$2\"\n}\n\n# Remember permissions, you may have to fix them:\n# chown -R :users /data/common\n\nbindmount /data/admin-tools /home/admin/tools\nbindmount /data/common /home/dave/common\nbindmount /data/common /home/peter/common\nbindmount /data/docs /home/peter/docs --read-only\n```\n\n**NOTE:** Using `mount` requires that your container runs with the `CAP_SYS_ADMIN` capability turned on. [See this answer for more information](https://github.com/eleneo/sftp/issues/60#issuecomment-332909232).\n\n# What's the difference between Debian and Alpine?\n\nThe biggest differences are in size and OpenSSH version. [Alpine](https://hub.docker.com/_/alpine/) is 10 times smaller than [Debian](https://hub.docker.com/_/debian/). OpenSSH version can also differ, as it's two different teams maintaining the packages. Debian is generally considered more stable and only bugfixes and security fixes are added after each Debian release (about 2 years). Alpine has a faster release cycle (about 6 months) and therefore newer versions of OpenSSH. As I'm writing this, Debian has version 7.4 while Alpine has version 7.5. Recommended reading: [Comparing Debian vs Alpine for container & Docker apps](https://www.turnkeylinux.org/blog/alpine-vs-debian)\n\n# What version of OpenSSH do I get?\n\nIt depends on which linux distro and version you choose (see available images at the top). You can see what version you get by checking the distro's packages online. I have provided direct links below for easy access.\n\n- [List of `openssh` packages on Alpine releases](https://pkgs.alpinelinux.org/packages?name=openssh&branch=&repo=main&arch=x86_64)\n- [List of `openssh-server` packages on Debian releases](https://packages.debian.org/search?keywords=openssh-server&searchon=names&exact=1&suite=all§ion=main)\n\n**Note:** The time when this image was last built can delay the availability of an OpenSSH release. Since this is an automated build linked with [debian](https://hub.docker.com/_/debian/) and [alpine](https://hub.docker.com/_/alpine/) repos, the build will depend on how often they push changes (out of my control). Typically this can take 1-5 days, but it can also take longer. You can of course make this more predictable by cloning this repo and run your own build manually.\n","has_starred","hub_user","srenno","immutable_tags_settings",{"_76":11,"_77":78},"enabled","rules",[79],".*","is_automated","permissions",{"_83":21,"_84":11,"_85":11},"read","write","admin","user","storage_size",101109336,"orgData",{"_91":92,"_93":94,"_95":96,"_97":33,"_98":99,"_100":101,"_102":99,"_103":104,"_105":106,"_107":101,"_108":101,"_109":101,"_110":21},"id","85cfb52ede174b5ba6e8ee31dc43b7d2","uuid","85cfb52e-de17-4b5b-a6e8-ee31dc43b7d2","type","organization","orgname","full_name","ELENEO","location","","company","profile_url","https://www.eleneo.fr","date_joined","2017-08-01T21:25:05.378434Z","gravatar_url","gravatar_email","badge","is_active","recentTags",[113],{"_114":44,"_115":116,"_117":118,"_91":119,"_120":121,"_50":138,"_139":116,"_140":33,"_141":56,"_57":142,"_143":144,"_145":129,"_146":138,"_147":66,"_148":21},"content_type","creator",2010465,"full_size",67955607,150593397,"images",[122],{"_123":124,"_125":126,"_127":101,"_128":129,"_130":131,"_132":133,"_134":101,"_135":-5,"_136":118,"_63":66,"_137":-5},"architecture","amd64","digest","sha256:ffa0a20f93a55d15c5dc3d71d46511ba35c7c19fb8660466ccf6a2941ae9ef66","features","last_pulled","2026-09-22T01:56:14.349273866Z","last_pushed","2021-05-21T07:54:49Z","os","linux","os_features","os_version","size","variant","2021-05-21T07:54:48.229869Z","last_updater","last_updater_username","media_type","latest","repository",13769497,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":162,"_169":170,"_156":179,"_180":11},{"_40":163,"_42":164,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":165,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":73,"_74":166,"_80":11,"_81":168,"_86":33,"_87":88},[],[44],[56],{"_76":11,"_77":167},[79],{"_83":21,"_84":11,"_85":11},"tags",{"_171":64,"_172":-5,"_173":-5,"_174":175},"count","next","previous","results",[176],{"_114":44,"_115":116,"_117":118,"_91":119,"_120":177,"_50":138,"_139":116,"_140":33,"_141":56,"_57":142,"_143":144,"_145":129,"_146":138,"_147":66,"_148":21},[178],{"_123":124,"_125":126,"_127":101,"_128":129,"_130":131,"_132":133,"_134":101,"_135":-5,"_136":118,"_63":66,"_137":-5},[],"canDeleteTags","actionData","errors"]

eleneo/sftp

Tags for eleneo/sftp