scp phezu kwe-SFTP: ukubhala izindlela ezikude ezixazululeka ngempela

Umyalo we-scp owasemsebenzini kusikripthi iminyaka eminingi ungase uhluleke kuklayenti yamanje ngephutha lendlela elingahlobene nakancane nomhubhe. I-VPN yathwala amabhayithi; iklayenti lacela iseva igama iseva engakwazanga ukulixazulula. I-OpenSSH scp yamanje idlulisa nge-SFTP ngokuzenzakalelayo, futhi i-SFTP ayenzi ukunwetshwa kwesitayela se-shell njengoba kwenza iphrothokholi yakudala. Ukulandela umyalo kusukela ku-akhawunti yakho ukuya ngaphandle kukhombisa lapho indlela ihunyushwa khona ngempela.

Qala nge-akhawunti, bese uqala ngombhalo wemibhalo engawubhala

Ikoloni lihlukanisa izindawo zamagama ezimbili, futhi uhlangothi lwesokunxele kuphela olungolomshini okutaipha kuwo. Konke okulandela lokho kuxazululwa iseva, ngaphansi kwe-akhawunti oqinisekise ngayo, ngaphakathi kwanoma yikuphi ukubuka kwesistimu yamafayela okunakho leyo akhawunti. Qinisekisa kokubili ngaphambi kokuhlanganisa umyalo, ngoba indlela elungile kumqondisi ayilungile ngokuzenzakalelayo kumsebenzisi wokudlulisa. Lowo mehluko uwumthombo wamaphutha amaningi ezimvume abonakala njengokuphazamiseka kwenethiwekhi.

Buza iseva ngokubuka kwayo: ssh [email protected] pwd kanye ne-ssh [email protected] ls -ld /srv/archive. Uma umyalo wesibili ubika ukuthi imvume inqatshiwe, umhubhe ulungile futhi indlela ayisebenziseki kuleyo akhawunti. Lungisa ubunikazi noma khetha enye indawo oya kuyo esikhundleni sokwandisa izimvume ukuze ukudlulisa kuqhubeke.

Ukucushwa kwe-SFTP okukhawulelwe kungase kwethule i-chroot njengempande yesistimu yamafayela. Ngaphakathi kwalokho kubuka indlela ephelele iphelele ngaphakathi kwe-chroot, okungeyona indawo efanayo nomqondisi ayibona kusibungu.

Shono izinhlangothi zombili zekoloni ngokucacile

Ukulayisha kufanele kusho igama lefayela elikude esikhundleni sokucabanga ukuthi igama lesisekelo lendawo lizokwamukeleka ngaphesheya.

scp q3-invoice.csv [email protected]:/home/transfer/drop/q3-invoice.csv

Ukulanda kufanele kusho indawo yendawo ngesizathu esifanayo ncamashi. Izindawo zamagama ezimbili zizimele, futhi isikripthi esicabanga ukuthi ziyafana siyaphuka okokuqala lapho isihlahla esikude sisebenzisa ukuhlelwa okuhlukile.

scp [email protected]:/srv/archive/2026-q3.csv ./2026-q3.csv

Gwema i-~otheruser kusikripthi esinakekelwayo. Ukunweba umbhalo wasekhaya werye i-akhawunti kwakuyisici se-shell ekude, futhi iseva ye-SFTP ingase ingakusebenzisi ukunwetshwa okulingisa lokho. Bhala indlela ephelele i-akhawunti engayivula ngempela, futhi faka izindlela zendawo ezinezikhala kumacaphuno esikhundleni sokukopisha izingqimba zamacaphuno ezibhalelwe i-shell kuseva.

Yazi ukuthi i-scp yakho isebenzisa iphrothokholi iphi ngempela

Kusukela ku-OpenSSH 9.0 iklayenti lisebenzisa i-SFTP ngokuzenzakalelayo, futhi izinsaba ziyayamukela noma ziyibuyisela emuva leyo ndlela yokuziphatha ngesimiso sazo. Intambo yenguqulo isho ukuthi iklayenti lihlose ukwenzani, kodwa ukwakhiwa komthengisi kungase kwehluke ku-upstream, ngakho hlola iklayenti olishaya ngempela: ssh -V.

Iziphrothokholi ezimbili zixazulula amagama ngendlela ehlukile. I-SCP yakudala icela i-shell yomsebenzisi okude ukuthi inwebe indlela, ngakho amakhadi okufanekisa nama-tilde asingathwa yileyo shell ngemithetho yayo. I-SFTP isikhundla salokho ikhipha imisebenzi yokudlulisa amafayela, ngakho ikhadi lokufanekisa lisinwetshwa iklayenti noma alinwetshwa nakancane. Kokubili kuhamba ngaphakathi kwe-SSH kuye emshinini ofanayo, yingakho isibungu esisodwa singaziphatha ngendlela ehlukile ngaphansi kwamaklayenti amabili.

I-scp -v iphrinta isistimu engaphansi eyicelayo, futhi umugqa wesistimu engaphansi sftp uqinisekisa ukuthi indlela yesimanje iyasetshenziswa. I-scp -O iphoqa iphrothokholi yakudala lapho isekelwa futhi idingeka ngempela, futhi iletha imithetho yayo yamacaphuno. Akuyona inketho ye-VPN, akuyona indlela yokunika amandla okuthile kuseva, futhi akuyona isizathu sokukhulula ukuhlolwa kokhiye wesibungu.

Hlola indlela ngaphambi kokuthi isikripthi sincike kuyo

Inkinga yendlela ivela ngesikhathi esibi kakhulu, emsebenzini ozenzakalelayo ebusuku kungekho ozibukayo. Qala uqinisekise indawo oya kuyo ngefayela elincane kanye ne-akhawunti eqondile esetshenziswa umsebenzi, futhi gcina lowo myalo wokuhlola eduze kwencazelo yomsebenzi. Uma ukuhlola kudinga enye i-akhawunti noma omunye umbhalo wemibhalo, nomsebenzi uzokudinga.

Hlola nohlangothi lweseva. I-grep -i subsystem /etc/ssh/sshd_config ikhombisa ukuthi isistimu engaphansi ye-SFTP icushiwe yini, futhi i-sftp -b /dev/null [email protected] iphuma ngempumelelo kuphela lapho leyo sistimu engaphansi iphendula. Isibungu esamukela ukungena nge-SSH kodwa singenayo isistimu engaphansi siyahluleka kukho konke ukudlulisa kwesimanje nakuba sibonakala siphilile ngokuphelele ekuhloleni kokungena.

Rekhoda inguqulo yeklayenti, iphrothokholi esetshenziswayo kanye nendlela ekude ephelele kumanothi omsebenzi. Lapho ukuthuthukiswa okulandelayo kushintsha okuzenzakalelayo, lowo mnothi uwumehluko phakathi kokulungisa kwemizuzu emihlanu nentambama egcwele ukuqagela.