Add users on-the-fly and reload public ssh keys?

[grasmanek94]

Is it possible to add users without restarting / re-creating the docker container? If yes, how?

And: Is it possible to reload/refresh the public keys for all users at run-time? If yes, how?

[ismailbaskin]

It's not possible without custom scripts.

[jamiegau]

Well that sucks. This tool looked great until this..

How about set up a 1min task that checks the users.conf file every minute, and if it has changed, re apply the configurations.

The main reason many people would be looking at this tool is because of transient and regularly changing sftp access requirements...

[markusdd]

I wish to strongly second this request.

We run atmoz/sftp in production for several key sftp servers and I do not wish to down the service for just adding a public key for a new user. Several of our CI hosts access those servers constantly and I get unneccesary fails because of a restart. Currently we add the keys to the keys directory as recommended, but as a second item we need to go into the container via docker exec -it and manually edit authorized_keys

Why is it a problem to run a cron-like second process which regulary updates the authorized_keys.

I would propose 5 minutes as a standard and provide a variable to change it through docker run.

[markusdd]

Is it possible to add users without restarting / re-creating the docker container? If yes, how?

And: Is it possible to reload/refresh the public keys for all users at run-time? If yes, how?

Use docker exec -it <container> bash and navigate to /home/youruser/.ssh and manually add the key to authorized_keys in addition to the keys directory.

[drakkan]

Maybe you could give a try to sftpgo

https://github.com/drakkan/sftpgo

you can add users on the fly using the REST API and/or the builtin Web interface

DISCLAIMER: I'm the author

[grasmanek94]

I have created a POC for this: https://github.com/atmoz/sftp/compare/master...grasmanek94:master

This is not extensively tested but seems to work.. what do you guys think?

Example file I use:

hhhh::2004::public,private
zzzzz::2005::public,private
yyyt::2006::public,private
iuhygujgkhugyu::2007::public,private