vsftpd, the Very Secure FTP Daemon and the default FTP server of most Linux distributions, keeps every transfer FTPS encrypted, chrooted per user, with no known default login.
vsftpd, the Very Secure FTP Daemon, is one of the most widely deployed FTP servers in the world and the default FTP daemon of most Linux distributions. This image runs it in an FTPS first posture: explicit TLS is required on both the control and data channels, so credentials and file contents are always encrypted in transit and a plaintext login is refused. Every user is chrooted to its own home directory, anonymous access is refused, and the whole server is driven by a single hardened configuration file that you can extend with additional virtual users, quotas and bandwidth controls.
The cloudimg image is hardened and fully patched with vsftpd preconfigured to accept secure FTPS transfers out of the box. There is no known bootstrap credential: on first boot a unique FTP user, a strong random password and a unique self signed TLS certificate are generated for that specific instance and written to a root owned file, so no default login ships and no two instances share one. The FTP user is a virtual user, not a system account. Every instance is backed by a paired deploy guide and 24/7 cloudimg support.