Create SFTP User / Group with CHROOT option in Linux / Unix

This is the ad hoc tutorial on how to create sftp user with chroot option in CentOS. We will create a single sftp user with chroot folder defined as web sources folder. Additionally, we will create separate sftp group with the users having dynamic chrooted home folder.

•   Link to Google Docs Document
•   Watch this Tutorial on Youtube

Below content is complementary to the video tutorial above.

Scenario 1:
We have a web sources folder and we need to create sftp user with chrooted web sources folder

Install necessary utils if needed:

Create the corresponding user:

Edit sshd_config file:

Add the following lines at the end of sshd_config file:

Important Notes:
1. Only single Subsystem line is allowed in sshd_config file, so comment others if any.
2. Every element in ChrootDirectory path must be owned by root [also additionally has an executable permission if needed].
3. All the content inside the chroot directory must be accessible by the sftp user.
4. The final element in the chroot path must be at least readable by the sftp user.
5. https://en.wikipedia.org/wiki/Chmod – to learn about permissions:
numerical permission for directory = 777 – umask.
numerical permission for file = 666 – umask.

Restart the sshd service:

or

Scenario 2:
We will create separate Group so that each user of this Group will have its home directory chrooted

Create the group and the user:

Edit sshd_config file:

Add the following to the sshd_config file:

Restart the sshd service:

or

If you want to delete user:

Related resources:

•   Link to Google Docs Document
•   Watch this Tutorial on Youtube