Instead of keeping any files directly in the /var/lib/tftpboot base directory I’ll use mktemp to create incoming and outgoing directories with hard-to-guess names. This can lead to dissemination of copyrighted firmware images or config files that may contain passwords and other sensitive information. The default configuration below allows switches and other devices to download files but, if you have predictable filenames, then anyone can download those files if you configure TFTP Server on your notebook. Step 1: Install TFTP and TFTP server $ sudo apt update sudo apt install tftp-hpa tftpd-hpa This allows me to do switch firmware upgrades and backup configuration files regardless of environment since my notebook is always with me. The following example is similar to the configuration I run on my personal Ubuntu notebook and home Ubuntu servers. And since TFTP is lightweight without any user authentication care should be taken to prevent access to or overwriting of critical files. Note: Community TFTP documentation is on the Ubuntu Wiki but this short guide adds extra steps to help secure and safeguard your TFTP server.Įvery Data Centre Engineer should have a TFTP server somewhere on their network whether it be running on a production host or running on their own notebook for disaster recovery.

Tftp server linux