Based on MarkusMcNugen Docker container
It's a fork of Atmoz/sftp and runs on top of phusion/baseimage(Ubuntu 16.04 LTS). It has fail2ban added and extremely clever config mechanizm which allows use Azure File Share as persistent storage for server keys, sshd_config, fail2ban jail.conf and user ssh keys.
- Check and modify deploysftp_persistentserverkeys_v1.json template.
- Create storage account
- Create 2 file shares: config and upload
- Under config create folders: fail2ban, sshd and userkeys
- Under config/sshd create 2 folders: keys and scripts
- Upload shares/config/sshd/sshd_config file under config/sshd
- Upload shares/config/fail2ban/jail.conf file under config/fail2ban
- Upload server keys under config/sshd/keys
- Upload shares/config/sshd/scripts/persistentkeys.sh script under config/sshd/scripts
- Upload user pub ssh key under config/userkeys - file must be named after username of the user.
- Check deploy.txt about instructions on how to deploy your sftp Azure Container Instance using deploysftp_persistentkeys_v1.json template inculded in this repo.
'shares' folder in this repo contains all the shares needed on Azure File Share and represents the entire directory structure described above, use it as reference.
Check and modify deploysftp_persistentserverkeys_v1.json template. This template is based on Azure/azure-quickstart-templates
The script config/sshd/scripts/persistentkeys.sh is used to copy server ssh key from Azure File Share to /etc/ssh and modify keys access permissions to 600.
Included here config/sshd/sshd_config file was modified to point for server keys under /etc/ssh/
Included here config/fail2ban/jail.conf file was modified to disable ssh jail. If you want this enabled - edit this file or do not upload it to your Azure File Share at all. By default it is enabled in the container.
For more detailed instructions and information about MarkusNcNugen docker contaner: https://hub.docker.com/r/markusmcnugen/sftp/
For more detailed instructions and information about Atmoz docker container: https://hub.docker.com/r/atmoz/sftp/