User Tools

Site Tools


servers:vsftpd

Information

  • vsftpd 1)

Prerequisites

Dependencies

sudo dnf install 'vsftpd'

Firewall

  • TODO: Update firewall link above to Fedora
sudo firewall-cmd --add-service='ftp' --permanent && sudo firewall-cmd --reload

SELinux

Verify

getsebool -a | grep 'ftp'

Service

sudo systemctl enable 'vsftpd' --now

Settings

General

  • For local_root, even though nas1 is used more frequently, Kodi clients are configured to start from the actual ftp root in order to go into the nas2 folder for media
  • To make nas1 convenient, set the root folder from FileZilla
sudo -e '/etc/vsftpd/vsftpd.conf' && sudo systemctl restart 'vsftpd'
# Custom
local_root=/var/ftp
force_dot_files=YES

Encryption Support

Generate Certs

  • Country: US
  • State: PA
  • Locality: Charleroi
  • Org Name: Realm of Espionage
  • Org Unit: NAS
  • YOUR Name: x
  • Email: x
sudo openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout '/etc/ssl/certs/vsftpd.pem' -out '/etc/ssl/certs/vsftpd.pem' && sudo chmod '600' '/etc/ssl/certs/vsftpd.pem'

Enable Encryption

  • :!: ssl_ciphers can be set to HIGH or any supported OpenSSL cipher, but the higher the cipher, the higher the performance hit 3)
sudo -e '/etc/vsftpd/vsftpd.conf' && sudo systemctl restart 'vsftpd'
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
require_ssl_reuse=YES

ssl_ciphers=AES128-SHA
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO

rsa_cert_file=/etc/ssl/certs/vsftpd.pem
rsa_private_key_file=/etc/ssl/certs/vsftpd.pem

fstab

PARTUUID

  • :!: Be sure to get the PARTUUID towards the end of the line, and not UUID
sudo blkid

fstab

  • :!: Change the x in PARTLABEL=
  • :!: This expects 1 drive each with a XFS partition
sudo mkdir -p '/var/ftp/nas1' '/var/ftp/nas2' && sudo -e '/etc/fstab'
# NAS
PARTUUID=x /var/ftp/nas1 xfs defaults 0 2
PARTUUID=x /var/ftp/nas2 xfs defaults 0 2
sudo mount --all

Permissions

chown

sudo chown --recursive 'espionage724':'espionage724' '/var/ftp/nas1' && sync
sudo chown --recursive 'espionage724':'espionage724' '/var/ftp/nas2' && sync

chmod

  • :!: 664 makes sense here, but FileZilla is unable to traverse directories. TODO: Figure this out
sudo chmod --recursive '774' '/var/ftp/nas1' && sync
sudo chmod --recursive '774' '/var/ftp/nas2' && sync

SELinux

sudo restorecon -F -I -R '/var/ftp/nas1' && sync
sudo restorecon -F -I -R '/var/ftp/nas2' && sync
2)
notes link to Workstation, but this can be done on Server
3)
specifically on Oak with a Phenom II X4, HIGH caps around 60-70MB/s, whereas AES128-SHA is 70-80MB/s, and no encryption is 100-110MB/s
servers/vsftpd.txt · Last modified: 2022/07/20 09:28 by Sean Rhone

Except where otherwise noted, content on this wiki is licensed under the following license: CC0 1.0 Universal
CC0 1.0 Universal Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki