--- CHROOT SFTP ---

### Create a group and user
groupadd sftpusers
useradd -g sftpusers -d /incoming -s /sbin/nologin guestuser
passwd guestuser


### Edit sshd_config so it does the chroot
 vi /etc/ssh/sshd_config 
#Subsystem       sftp    /usr/libexec/openssh/sftp-server
Subsystem       sftp    internal-sftp 

# bottm of file
Match Group sftpusers
        ChrootDirectory /sftp/%u
        ForceCommand internal-sftp

### Make the Directories
mkdir /sftp
mkdir /sftp/guestuser
mkdir /sftp/guestuser/incoming
chown guestuser:sftpusers /sftp/guestuser/incoming

### Confirm the permissions
ls -ld /sftp/guestuser/incoming
ls -ld /sftp/guestuser
ls -ld /sftp

### Restart sshd
systemctl restart sshd

### Do a test sftp from remote server.

AALRMAG has a alternate scheme ...
For a single user to go to a specific not-jailed directory (other users require typical access).
Create the user and change the home dir to the specific directory.
Change the shell entry in /etc/passwd to  /bin/false.

Test sftp and ssh for the user