podman-quadlet-cookbook/vsftpd

Podman Quadlet: vsftpd

Overview

vsftpd (Very Secure FTP Daemon) is started as a Podman Quadlet. It provides a secure FTP server with TLS support.

This cookbook:

• Builds a custom vsftpd container image locally.
• Supports TLS encryption with automatic certificate loading from Let's Encrypt (integrates with the lego cookbook).
• Maps system users into the container for authentication.
• Includes a timer to periodically rebuild the container image.
• Reloads certificates automatically when renewed.

Prerequisites

• Configuration file /etc/quadlets/vsftpd/vsftpd.conf.d/local.conf must exist.
• For TLS support, the lego cookbook should be configured to provide certificates.

Usage

In a separate terminal, follow the logs.

sudo make tail-logs

Install the Podman Quadlets and start vsftpd.

sudo make clean install

You should see the vsftpd-build.service building the vsftpd container image. Then, the vsftpd.service should start up.

Verify vsftpd is running:

sudo systemctl status vsftpd.service

Test FTP connectivity:

ftp localhost

Or with TLS:

lftp -u username localhost

When Let's Encrypt certificates are renewed, the vsftpd-load-renewed-certificate.service automatically reloads them.

Restart the vsftpd.target unit.

sudo systemctl restart vsftpd.target

Finally, remove the quadlets, their configuration and their data.

sudo make uninstall clean

Integration tests

sudo make test