Difference between revisions of "John's Linux page"

From ProgClub
Jump to: navigation, search
(→‎Networking: net-tools vs iproute2)
(36 intermediate revisions by the same user not shown)
Line 30: Line 30:
  
 
  echo 0 > /proc/sys/vm/swappiness
 
  echo 0 > /proc/sys/vm/swappiness
 +
 +
== Hardware information ==
 +
 +
For information about the hardware attached to your system, check out:
 +
 +
# lshw
 +
 +
And for CPUs:
 +
 +
# lscpu
 +
 +
And for PCI devices:
 +
 +
# lspci
 +
 +
And for [https://en.wikipedia.org/wiki/Direct_Media_Interface DMI] info:
 +
 +
# dmidecode
 +
 +
Or the grand daddy of them all:
 +
 +
# hwinfo
 +
 +
There's also inxi, e.g.:
 +
 +
$ inxi -b
 +
 +
System:    Host: tact Kernel: 4.9.0-4-amd64 x86_64 (64 bit) Desktop: KDE Plasma 5.8.6
 +
            Distro: Debian GNU/Linux 9 (stretch)
 +
Machine:  Device: desktop Mobo: ASUSTeK model: STRIX Z270F GAMING v: Rev 1.xx
 +
            UEFI [Legacy]: American Megatrends v: 0906 date: 03/22/2017
 +
CPU:      Quad core Intel Core i7-7700K (-HT-MCP-) speed/max: 799/4600 MHz
 +
Graphics:  Card: Intel Device 5912
 +
            Display Server: X.Org 1.19.2 drivers: modesetting (unloaded: fbdev,vesa)
 +
            Resolution: 1920x1080@60.00hz, 1920x1080@60.00hz
 +
            GLX Renderer: Mesa DRI Intel Kabylake GT2 GLX Version: 3.0 Mesa 13.0.6
 +
Network:  Card: Intel Ethernet Connection (2) I219-V driver: e1000e
 +
Drives:    HDD Total Size: 13026.6GB (42.0% used)
 +
RAID:      Devices: 1: /dev/md1 2: /dev/md0
 +
Info:      Processes: 355 Uptime: 11 days Memory: 21198.3/32043.3MB Client: Shell (bash) inxi: 2.3.5
  
 
= Environment =
 
= Environment =
Line 137: Line 177:
 
  $ free -m
 
  $ free -m
  
= Disk management =
+
= Video/display management =
  
== Checking available disk space ==
+
== Viewing EDID data for attached monitor ==
  
$ df -h
+
To view [https://en.wikipedia.org/wiki/Extended_Display_Identification_Data EDID] data for an attached monitor (requires the [https://packages.debian.org/stable/main/edid-decode edid-decode] package):
  
== Getting disk information ==
+
$ cd /sys/class/drm
 +
$ ls
 +
$ cd card0-HDMI-A-1
 +
$ edid-decode edid
  
# lsblk
+
= Process management =
  
And
+
== Using 'top' for dynamic resource usage reporting ==
  
# cat /proc/partitions
+
To run top:
  
Or the Grand Daddy of them all:
+
$ top
  
# lshw -class disk
+
See [https://www.thegeekstuff.com/2010/01/15-practical-unix-linux-top-command-examples/ 15 Practical Linux Top Command Examples] for some hints on usage.
  
(Requires the lshw package.)
+
To see usage for a specific user run e.g.:
  
== Getting partition UUID and file-system type ==
+
$ top -u jj5
  
# blkid
+
To see full command-line press 'c'.
  
== Checking for SSD vs magnetic disk ==
+
== Changing memory reporting in 'top' ==
  
# cat /sys/block/sda/queue/rotational
+
To run top:
  
Will be 0 for SSD and 1 for magnetic.
+
$ top
  
= File management =
+
Press 'E' to switch between memory units (KiB, MiB, GiB, etc.)
  
== Listing only directories ==
+
Press 'M' to sort by memory utilisation.
  
$ ls -l | egrep '^d'
+
Press 'm' to switch between various display modes.
  
== Listing only files ==
+
= Disk management =
  
$ ls -l | egrep -v '^d'
+
== Listing disk drives ==
  
== Listing hidden files ==
+
# fdisk -l
  
$ ls -al .[!.]*
+
(That's an L for "list")
  
== Creating a symbolic link ==
+
== Checking available disk space ==
  
  $ ln -s /path/to/target link-name
+
  $ df -h
  
== Creating a hard-link ==
+
== Getting disk information ==
  
  $ ln /path/to/target file-name
+
  # lsblk
  
== Changing the owner of a file ==
+
And
  
  $ chown user:group <files>
+
  # cat /proc/partitions
  
E.g.
+
Or the Grand Daddy of them all:
  
  $ chown jj5:staff README
+
  # lshw -class disk
$ chown root:root *
 
  
To apply recursively into sub-directories use -R,
+
(Requires the lshw package.)
  
$ chown -R root:root /etc/*
+
== Getting partition UUID and file-system type ==
  
== Changing file permissions ==
+
# blkid
  
{|class="wikitable"
+
== Checking for SSD vs magnetic disk ==
|+ Object codes
 
! User !! Group !! Other
 
|-
 
| u    || g    || o
 
|}
 
  
{|class="wikitable"
+
# cat /sys/block/sda/queue/rotational
|+ Permission codes
 
! Read !! Write !! Exectue
 
|-
 
| r    || w    || x
 
|-
 
| 4    || 2    || 1
 
|}
 
  
{|class="wikitable"
+
Will be 0 for SSD and 1 for magnetic.
|+ Numeric codes
 
! 0
 
| None
 
|-
 
! 1
 
| Execute
 
|-
 
! 2
 
| Write
 
|-
 
! 3
 
| Write, Execute
 
|-
 
! 4
 
| Read
 
|-
 
! 5
 
| Read, Execute
 
|-
 
! 6
 
| Read, Write
 
|-
 
! 7
 
| Read, Write, Execute
 
|}
 
  
See [http://catcode.com/teachmod/numeric2.html Numeric Mode in Action].
+
= Monitoring disk I/O =
  
$ chmod <user numeric code><group numeric code><other numeric code> <files>
+
There's an app for that! iotop.
$ chmod <object codes>+|-<permission codes> <files>
 
  
E.g.
+
== Using iotop, top for disks ==
  
  $ chmod 600 my-private-file
+
  # iotop -oPa
$ chmod go-rwx my-private-file
 
$ chmod u+rw my-private-file
 
$ chmod +x my-script
 
  
== Updating config files ==
+
= File management =
  
If you get given a new config file called new.conf and you want to integrate it with your old config file old.conf then:
+
== Listing only directories ==
  
  $ cp old.conf updated.conf
+
  $ ls -l | egrep '^d'
$ merge -A updated.conf new.conf old.conf
 
  
Then go through and edit updated.conf resolving all the merge errors, picking and choosing what to update and what to keep. When you're done copy updated.conf to old.conf so it becomes the new config file.
+
== Listing only files ==
  
The merge program is a part of the RCS package. If you don't have it:
+
$ ls -l | egrep -v '^d'
  
$ sudo apt-get install rcs
+
== Listing hidden files ==
  
== Listing open files ==
+
$ ls -al .[!.]*
  
Use lsof to list open files. E.g.:
+
== Creating a symbolic link ==
  
  # lsof
+
  $ ln -s /path/to/target link-name
  
See man lsof for options.
+
== Creating a hard-link ==
  
== List permissions on a whole directory path ==
+
$ ln /path/to/target file-name
  
E.g.:
+
== Changing the owner of a file ==
  
  $ namei -om /home/jj5/workspace
+
  $ chown user:group <files>
  
Outputs:
+
E.g.
  
  f: /home/jj5/workspace/
+
  $ chown jj5:staff README
  drwxr-xr-x root root /
+
$ chown root:root *
  drwxr-xr-x root root home
 
  drwxr-xr-x jj5  jj5  jj5
 
  drwxr-xr-x jj5  jj5  workspace
 
  
== Counting non-blank lines in a file ==
+
To apply recursively into sub-directories use -R,
  
E.g.:
+
$ chown -R root:root /etc/*
  
$ cat foo.c | sed '/^\s*$/d' | wc -l
+
== Changing file permissions ==
  
= File searching =
+
{|class="wikitable"
 +
|+ Object codes
 +
! User !! Group !! Other
 +
|-
 +
| u    || g    || o
 +
|}
  
== Finding a file with a particular name ==
+
{|class="wikitable"
 +
|+ Permission codes
 +
! Read !! Write !! Exectue
 +
|-
 +
| r    || w    || x
 +
|-
 +
| 4    || 2    || 1
 +
|}
  
$ find -iname "*some-part-of-the-file-name*"
+
{|class="wikitable"
 
+
|+ Numeric codes
Will start searching from the current directory, so maybe
+
! 0
 
+
| None
$ cd /
+
|-
 
+
! 1
first. For a case-sensitive search:
+
| Execute
 +
|-
 +
! 2
 +
| Write
 +
|-
 +
! 3
 +
| Write, Execute
 +
|-
 +
! 4
 +
| Read
 +
|-
 +
! 5
 +
| Read, Execute
 +
|-
 +
! 6
 +
| Read, Write
 +
|-
 +
! 7
 +
| Read, Write, Execute
 +
|}
  
$ find -name "*eXaCT CaSE*"
+
See [http://catcode.com/teachmod/numeric2.html Numeric Mode in Action].
  
== Finding a file with particular content ==
+
$ chmod <user numeric code><group numeric code><other numeric code> <files>
 +
$ chmod <object codes>+|-<permission codes> <files>
  
To search in /etc/ for a file with particular content:
+
E.g.
  
  $ grep -R "search-string" /etc/*
+
  $ chmod 600 my-private-file
 +
$ chmod go-rwx my-private-file
 +
$ chmod u+rw my-private-file
 +
$ chmod +x my-script
  
To search the current directory for *.cs files containing the word "Up":
+
== Updating config files ==
  
$ find . -name '*.cs' -exec grep --color=auto -H Up {} \;
+
If you get given a new config file called new.conf and you want to integrate it with your old config file old.conf then:
  
== Using the locate command to find files ==
+
$ cp old.conf updated.conf
 +
$ merge -A updated.conf new.conf old.conf
  
$ locate part-of-filename
+
Then go through and edit updated.conf resolving all the merge errors, picking and choosing what to update and what to keep. When you're done copy updated.conf to old.conf so it becomes the new config file.
  
E.g.
+
The merge program is a part of the RCS package. If you don't have it:
  
  $ locate texvc
+
  $ sudo apt-get install rcs
  
== Updating locate command's database ==
+
== Listing open files ==
  
# updatedb
+
Use lsof to list open files. E.g.:
  
= Job control =
+
# lsof
  
== Stopping a running process ==
+
See man lsof for options.
  
Press Ctrl+Z to stop a running process.
+
== List permissions on a whole directory path ==
  
== Listing current jobs and their status ==
+
E.g.:
  
  $ jobs
+
  $ namei -om /home/jj5/workspace
  
== Resuming a stopped job in the backgroud ==
+
Outputs:
  
To resume a stopped process in the background
+
f: /home/jj5/workspace/
 +
  drwxr-xr-x root root /
 +
  drwxr-xr-x root root home
 +
  drwxr-xr-x jj5  jj5  jj5
 +
  drwxr-xr-x jj5  jj5  workspace
  
$ bg %1
+
== Counting non-blank lines in a file ==
  
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
+
E.g.:
  
== Resuming a stopped job in the foreground ==
+
$ cat foo.c | sed '/^\s*$/d' | wc -l
  
To resume a stopped process in the foreground
+
== Cloning one directory to another with rsync ==
  
$ fg %1
+
E.g.:
  
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
+
rsync --stats --human-readable --recursive --del --force --times --links --hard-links --executability --numeric-ids --owner --group --perms --sparse /data/source/ /data/target/
  
== Killing a stopped job ==
+
= Symbolic-link management =
  
To kill a job
+
== Data used by sym-linked files:
  
$ kill %1
+
This will de-reference the sym-links in the current directory and tell you how much data the files pointed to by the sym-links are using:
  
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
+
jj5@tact:/data/backup/unity/latest$ du -hD * | sort -h
  
== Periodically run a program and watch its output ==
+
= File searching =
  
$ watch /your/command
+
== Finding a file with a particular name ==
  
= Debian/Ubuntu package management =
+
$ find -iname "*some-part-of-the-file-name*"
  
Also see [https://wiki.debian.org/WhereIsIt Where "is" it?] on the Debian Wiki.
+
Will start searching from the current directory, so maybe
  
== configuring debconf ==
+
$ cd /
  
# dpkg-reconfigure debconf
+
first. For a case-sensitive search:
  
Set priority to low to get asked detailed questions.
+
$ find -name "*eXaCT CaSE*"
  
== Showing list of installed packages ==
+
== Finding a file with particular content ==
  
# dpkg --get-selections
+
To search in /etc/ for a file with particular content:
  
== Searching for installed package ==
+
$ grep -R "search-string" /etc/*
  
# dpkg --get-selections | grep package-name
+
To search the current directory for *.cs files containing the word "Up":
  
or
+
$ find . -name '*.cs' -exec grep --color=auto -H Up {} \;
  
# aptitude search package-name
+
== Finding a list of files with particular content ==
  
== Showing which files are installed as part of a package ==
+
E.g. to find all the files with the word 'creativity':
  
  # dpkg -L package-name
+
  $ grep -R creativity . | sed 's/:/ /' | awk '{ print $1 }' | sort | uniq
  
== Installing a package ==
+
== Using the locate command to find files ==
  
  # apt-get install package-name
+
  $ locate part-of-filename
  
== Uninstalling a package ==
+
E.g.
  
  # apt-get remove package-name
+
  $ locate texvc
  
== Showing system architecture ==
+
== Updating locate command's database ==
  
  $ dpkg --print-architecture
+
  # updatedb
  
== Showing which package a file belongs to ==
+
= Job control =
  
$ which echo
+
== Stopping a running process ==
/bin/echo
 
$ dpkg -S /bin/echo
 
coreutils: /bin/echo
 
$ dpkg -l | grep coreutils
 
ii  coreutils                        6.10-6                  The GNU core utilities
 
  
== Showing package information ==
+
Press Ctrl+Z to stop a running process.
  
$ apt-cache showpkg coreutils
+
== Listing current jobs and their status ==
  
Or for even more information:
+
$ jobs
  
$ apt-cache show coreutils
+
== Resuming a stopped job in the backgroud ==
  
== List all installed packages with package version info ==
+
To resume a stopped process in the background
  
  dpkg-query -l
+
  $ bg %1
  
== Reporting which version of a package is installed ==
+
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
  
$ dpkg -l | grep package-name
+
== Resuming a stopped job in the foreground ==
  
E.g.:
+
To resume a stopped process in the foreground
  
  root@hope:~/letsencrypt# dpkg -l | grep augeas
+
  $ fg %1
ii  augeas-lenses                  0.7.0-1ubuntu1                Set of lenses needed by libaugeas0 to parse
 
ii  libaugeas0                      0.7.0-1ubuntu1                The augeas configuration editing library and
 
  
= Networking =
+
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
  
== net-tools vs iproute2 ==
+
== Killing a stopped job ==
  
The older 'net-tools' package has been replaced with 'iproute2' e.g. in [https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#iproute2 stretch].
+
To kill a job
  
{|class="wikitable"
+
  $ kill %1
! legacy net-tools commands
 
! iproute2 replacement commands
 
|-
 
| arp      || ip n (ip neighbor)
 
|-
 
| ifconfig || ip a (ip addr), ip link, ip -s (ip -stats)
 
|-
 
| iptunnel || ip tunnel
 
|-
 
| iwconfig || iw
 
|-
 
| nameif  || ip link, ifrename
 
|-
 
| netstat || ss, ip route (for netstat-r), ip -s link (for netstat -i), ip maddr (for netstat-g)
 
|-
 
| route    || ip r (ip route)
 
|}
 
  
== Restart networking ==
+
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
  
For servers:
+
== Periodically run a program and watch its output ==
  
  # service networking restart
+
  $ watch /your/command
  
For desktops:
+
= Debian/Ubuntu package management =
  
# service network-manager restart
+
Also see [https://wiki.debian.org/WhereIsIt Where "is" it?] on the Debian Wiki.
  
== Pinging with particular packet size ==
+
== configuring debconf ==
  
  $ ping -M do -s <packet size in bytes> <host>
+
  # dpkg-reconfigure debconf
  
E.g.
+
Set priority to low to get asked detailed questions.
  
$ ping -M do -s 1400 charity.progclub.org
+
== Showing list of installed packages ==
  
== Setting [http://en.wikipedia.org/wiki/Maximum_segment_size MSS] for a particular IP address on a particular interface ==
+
# dpkg --get-selections
  
# ip route add <host> dev <interface> advmss <packet size>
+
== Searching for installed package ==
  
E.g.
+
# dpkg --get-selections | grep package-name
  
# ip route add 10.0.0.1 dev eth0 advmss 1400
+
or
  
== Dropping configured MMS for a particular IP address ==
+
# aptitude search package-name
  
# ip route flush <host>
+
== Showing which files are installed as part of a package ==
  
E.g.
+
# dpkg -L package-name
  
# ip route flush 10.0.0.1
+
== Installing a package ==
  
== Listing open ports and socket information ==
+
# apt-get install package-name
  
Including which process is listening on which port.
+
== Uninstalling a package ==
  
  # netstat -tulpn
+
  # apt-get remove package-name
  
Or use the 'ss' command:
+
== Showing system architecture ==
  
  # ss -s
+
  $ dpkg --print-architecture
# ss -l
 
# ss -pl
 
# ss -o state established '( dport = :smtp or sport = :smtp )'
 
  
== Listing open IPv4 connections ==
+
== Showing which package a file belongs to ==
  
  # lsof -Pnl +M -i4
+
  $ which echo
 +
/bin/echo
 +
$ dpkg -S /bin/echo
 +
coreutils: /bin/echo
 +
$ dpkg -l | grep coreutils
 +
ii  coreutils                        6.10-6                  The GNU core utilities
  
You might need to install the lsof package:
+
== Showing package information ==
  
  # apt-get install lsof
+
  $ apt-cache showpkg coreutils
  
== Query for DNS MX record ==
+
Or for even more information:
  
  $ nslookup
+
  $ apt-cache show coreutils
> server 127.0.0.1
 
> set q=mx
 
> mail.blackbrick.com
 
  
== Using nmap to list open ports on remote host ==
+
== List all installed packages with package version info ==
  
To check the 1,000 most common ports:
+
dpkg-query -l
  
# nmap server.example.com
+
== Reporting which version of a package is installed ==
  
Or for a specific port range (e.g. 101 to 102):
+
$ dpkg -l | grep package-name
  
# nmap -p 101-102 server.example.com
+
E.g.:
  
Or for all ports (1 to 65,535):
+
root@hope:~/letsencrypt# dpkg -l | grep augeas
 +
ii  augeas-lenses                  0.7.0-1ubuntu1                Set of lenses needed by libaugeas0 to parse
 +
ii  libaugeas0                      0.7.0-1ubuntu1                The augeas configuration editing library and
  
# nmap -p- server.example.com
+
== Comprehensive upgrade ==
  
== Links ==
+
Try the following:
  
* [http://www.cyberciti.biz/faq/linux-unix-open-ports/ HowTo: UNIX / Linux Open TCP / UDP Ports]
+
# apt-get update
 +
# apt-get dist-upgrade
 +
# apt-get autoremove
 +
# apt-get remove $(deborphan)
 +
# update-flashplugin-nonfree --install
  
= IPTables =
+
= Networking =
  
== Applying firewall rules ==
+
== net-tools vs iproute2 ==
  
For configuration info see [http://articles.slicehost.com/2008/4/25/ubuntu-hardy-setup-page-1 this article].
+
The older 'net-tools' package has been replaced with 'iproute2' e.g. in [https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#iproute2 stretch].
  
$ sudo vim /etc/iptables.test.rules
+
{|class="wikitable"
$ sudo /sbin/iptables -F
+
! legacy net-tools commands
$ sudo /sbin/iptables-restore < /etc/iptables.test.rules
+
! iproute2 replacement commands
$ sudo iptables -L
+
|-
$ sudo -s
+
| arp      || ip n (ip neighbor)
# iptables-save > /etc/iptables.up.rules
+
|-
  # exit
+
| ifconfig || ip a (ip addr), ip link, ip -s (ip -stats)
 
+
|-
= IPSec =
+
| iptunnel || ip tunnel
 
+
|-
== Disabling IPSec ==
+
| iwconfig || iw
 +
|-
 +
| nameif  || ip link, ifrename
 +
|-
 +
| netstat || ss, ip route (for netstat-r), ip -s link (for netstat -i), ip maddr (for netstat-g)
 +
|-
 +
| route    || ip r (ip route)
 +
|}
  
# setkey -FP
+
== Restart networking ==
  
= OpenSSL =
+
For servers:
  
== Debugging IMAPS with OpenSSL ==
+
# service networking restart
  
# openssl s_client -connect localhost:993
+
For desktops:
> a1 LOGIN username@host password
 
> a2 LOGOUT
 
  
== Debugging HTTPS with OpenSSL ==
+
# service network-manager restart
  
$ openssl s_client -connect www.example.com:443
+
== Pinging with particular packet size ==
GET /example.html HTTP/1.1
 
host: www.example.com
 
  
== Links ==
+
$ ping -M do -s <packet size in bytes> <host>
 +
 
 +
E.g.
  
* [http://www.madboa.com/geek/openssl/ OpenSSL Command-Line HOWTO]
+
$ ping -M do -s 1400 charity.progclub.org
  
= Pluggable Authentication Modules (PAM) =
+
== Setting [http://en.wikipedia.org/wiki/Maximum_segment_size MSS] for a particular IP address on a particular interface ==
  
== Links ==
+
# ip route add <host> dev <interface> advmss <packet size>
  
* [http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-pam.html 42.4. Pluggable Authentication Modules (PAM)]
+
E.g.
  
= SSH =
+
# ip route add 10.0.0.1 dev eth0 advmss 1400
  
== Configuring SSH key login ==
+
== Dropping configured MMS for a particular IP address ==
  
On the client machine generate a key-pair (if necessary, check for existing ~/.ssh/id_rsa.pub):
+
# ip route flush <host>
  
$ ssh-keygen -t rsa
+
E.g.
  
Copy the public key from the client to the server:
+
# ip route flush 10.0.0.1
  
$ scp ~/.ssh/id_rsa.pub user@example.org:
+
== Listing open ports and socket information ==
  
Configure the authorized keys on the server:
+
Including which process is listening on which port.
  
  $ ssh user@example.org
+
  # netstat -tulpn
$ mkdir ~/.ssh
 
$ chmod go-w .ssh
 
$ cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
 
$ chmod 600 ~/.ssh/authorized_keys
 
$ rm ~/id_rsa.pub
 
  
== Tunneling over SSH ==
+
Or use the 'ss' command:
  
For example, connecting a remote MySQL server to the localhost:
+
# ss -s
 +
# ss -l
 +
# ss -pl
 +
# ss -o state established '( dport = :smtp or sport = :smtp )'
  
$ ssh -L 3306:localhost:3306 jselliot@ssh.progsoc.org
+
== Listing open IPv4 connections ==
  
If the machine you want to connect to is not the localhost of the machine you're ssh'ing to,
+
# lsof -Pnl +M -i4
  
  $ ssh -L 3306:muspell.progsoc.uts.edu.au:3306 ssh.progsoc.uts.edu.au
+
You might need to install the lsof package:
  
The -L stanza is localport:remotehost:remoteport where localport is a
+
# apt-get install lsof
port on your machine, forwarded to remoteport on remotehost.
 
  
== Tunneling over SSH with PuTTY ==
+
== Query for DNS MX record ==
  
See [http://www.anchor.com.au/hosting/support/MySQL/Connecting_to_mysql_remotely Connecting to the MySQL database remotely (via an SSH Tunnel)]
+
$ nslookup
 +
> server 127.0.0.1
 +
> set q=mx
 +
> mail.blackbrick.com
  
* run putty.exe
+
== Query for DNS SOA record ==
* Connection -> SSH -> Tunnels
+
 
** Port forwarding: source port to 3306
+
$ dig @ns2.staticmagic.net -t SOA staticmagic.net
** destination: 127.0.0.1:3306
 
** check Local
 
** click Add
 
  
== Enabling verbose SSH logging ==
+
== Using nmap to list open ports on remote host ==
  
To see what's going on with your ssh connections,
+
To check the 1,000 most common ports:
  
  $ ssh -v user@host
+
  # nmap server.example.com
  
Or
+
Or for a specific port range (e.g. 101 to 102):
  
  $ ssh -vv user@host
+
  # nmap -p 101-102 server.example.com
  
== Unlocking SSH key for session ==
+
Or for all ports (1 to 65,535):
  
  jj5@orac:~/.config/autostart$ cat ssh-add.desktop
+
  # nmap -p- server.example.com
[Desktop Entry]
 
Type=Application
 
Name=ssh-add
 
Comment=Adds my private key to my session.
 
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
 
  
== Links ==
+
== Network monitoring ==
  
* [http://blogs.perl.org/users/smylers/2011/08/ssh-productivity-tips.html SSH Can Do That? Productivity Tips for Working with Remote Servers]
+
See [http://www.binarytides.com/linux-commands-monitor-network/ here] for details. Basically:
* [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html PuTTY Download Page]
 
  
= Standard IO =
+
# Overall bandwidth: nload, bmon, slurm, bwm-ng, cbm, speedometer, netload
 +
# Overall bandwidth (batch style output): vnstat, ifstat, dstat, collectl
 +
# Bandwidth per socket connection: iftop, iptraf, tcptrack, pktstat, netwatch, trafshow
 +
# Bandwidth per process: nethogs
  
== cat EOF ==
+
== Links ==
  
$ cat > output <<EOF
+
* [http://www.cyberciti.biz/faq/linux-unix-open-ports/ HowTo: UNIX / Linux Open TCP / UDP Ports]
> text
 
> EOF
 
  
$ cat output
+
= IPTables =
text
 
  
= Script =
+
== Applying firewall rules ==
  
== Creating a session log with script ==
+
For configuration info see [http://articles.slicehost.com/2008/4/25/ubuntu-hardy-setup-page-1 this article].
  
  $ script -t 2> timing
+
  $ sudo vim /etc/iptables.test.rules
 
+
$ sudo /sbin/iptables -F
The session log is in the file 'typescript' and the timing data is in 'timing'.
+
$ sudo /sbin/iptables-restore < /etc/iptables.test.rules
 +
$ sudo iptables -L
 +
$ sudo -s
 +
# iptables-save > /etc/iptables.up.rules
 +
# exit
  
== Replaying a scripted session ==
+
= Bind9 =
  
$ scriptreplay timing
+
== Viewing Bind9 querylog ==
  
Uses the default file 'typescript' and the 'timing' file as specified.
+
$ sudo rndc querylog
 +
$ tail -f /var/log/syslog
  
= Screen =
+
= IPSec =
  
== Creating a new screen or reconnecting to a detached screen ==
+
== Disabling IPSec ==
  
  $ screen -R
+
  # setkey -FP
  
== Detaching a screen ==
+
= OpenSSL =
  
$ screen -D
+
== Debugging IMAPS with OpenSSL ==
  
== Reconnecting to screen ==
+
# openssl s_client -connect localhost:993
 +
> a1 LOGIN username@host password
 +
> a2 LOGOUT
  
$ screen -D
+
== Debugging HTTPS with OpenSSL ==
$ screen -R
 
  
I have a script in ~/bin/reconnect like so,
+
$ openssl s_client -connect www.example.com:443
 +
GET /example.html HTTP/1.1
 +
host: www.example.com
  
#!/bin/bash
+
== Links ==
screen -D
 
screen -R
 
  
This will detach your last screen, and reconnect it on the current terminal.
+
* [http://www.madboa.com/geek/openssl/ OpenSSL Command-Line HOWTO]
  
= Vim =
+
= Pluggable Authentication Modules (PAM) =
  
== First, why Vim? ==
+
== Links ==
  
Read [http://www.viemu.com/a-why-vi-vim.html Why, oh WHY, do those #?@! nutheads use vi?]
+
* [http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-pam.html 42.4. Pluggable Authentication Modules (PAM)]
  
== Visual modes ==
+
= SSH =
  
Use 'v' for visual mode, 'V' for visual line mode and Ctrl+V for visual block mode.
+
== Configuring SSH key login ==
  
== Configuring spaces instead of tabs ==
+
On the client machine generate a key-pair (if necessary, check for existing ~/.ssh/id_rsa.pub):
  
I use two spaces instead of tabs. To configure, edit your .vimrc file:
+
$ ssh-keygen -t rsa
  
$ vim ~/.vimrc
+
Copy the public key from the client to the server:
  
and include the following lines:
+
$ scp ~/.ssh/id_rsa.pub user@example.org:
  
set tabstop=2
+
Configure the authorized keys on the server:
set shiftwidth=2
 
set expandtab
 
  
== Configuring syntax highlighting ==
+
$ ssh user@example.org
 +
$ mkdir ~/.ssh
 +
$ chmod go-w .ssh
 +
$ cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
 +
$ chmod 600 ~/.ssh/authorized_keys
 +
$ rm ~/id_rsa.pub
  
See [http://www.cyberciti.biz/faq/turn-on-or-off-color-syntax-highlighting-in-vi-or-vim/ here].
+
== Tunneling over SSH ==
  
Use:
+
For example, connecting a remote MySQL server to the localhost:
  
  :syntax on
+
  $ ssh -L 3306:localhost:3306 jselliot@ssh.progsoc.org
  
to turn on syntax highlighting.
+
If the machine you want to connect to is not the localhost of the machine you're ssh'ing to,
  
Use:
+
  $ ssh -L 3306:muspell.progsoc.uts.edu.au:3306 ssh.progsoc.uts.edu.au
  
:syntax off
+
The -L stanza is localport:remotehost:remoteport where localport is a
 +
port on your machine, forwarded to remoteport on remotehost.
  
to turn off syntax highlighting.
+
== Tunneling over SSH with PuTTY ==
  
To always use syntax highlighting:
+
See [http://www.anchor.com.au/hosting/support/MySQL/Connecting_to_mysql_remotely Connecting to the MySQL database remotely (via an SSH Tunnel)]
  
$ vim ~/.vimrc
+
* run putty.exe
 +
* Connection -> SSH -> Tunnels
 +
** Port forwarding: source port to 3306
 +
** destination: 127.0.0.1:3306
 +
** check Local
 +
** click Add
  
and add:
+
== Enabling verbose SSH logging ==
  
syntax on
+
To see what's going on with your ssh connections,
  
To get a list of supported colour schemes open vim and type:
+
$ ssh -v user@host
  
:colorscheme[space][Ctrl+D]
+
Or
  
To always use a particular colorscheme edit ~/.vimrc and add (for example):
+
$ ssh -vv user@host
  
colorscheme desert
+
== Unlocking SSH key for session ==
  
== Inserting a TAB character when expandtab is on ==
+
jj5@orac:~/.config/autostart$ cat ssh-add.desktop
 
+
[Desktop Entry]
The problem here is that you have configured vim to insert spaces, but for a particular file (e.g. a Makefile) you need to insert a character.
+
Type=Application
 +
Name=ssh-add
 +
Comment=Adds my private key to my session.
 +
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
  
Press Ctrl+V TAB to insert a literal tab character.
+
== Links ==
  
Or you can disable tab expansion altogether with:
+
* [http://blogs.perl.org/users/smylers/2011/08/ssh-productivity-tips.html SSH Can Do That? Productivity Tips for Working with Remote Servers]
 +
* [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html PuTTY Download Page]
  
:set expandtab!
+
= Standard IO =
  
== Changing 2 space indent to 4 space indent (e.g. for python files) ==
+
== cat EOF ==
  
  :%s/^\s*/&&/g
+
  $ cat > output <<EOF
 +
> text
 +
> EOF
  
For more information [https://www.progclub.org/blog/2013/08/10/vim-reformat-a-python-file-to-have-4-space-indentations/ see here].
+
$ cat output
 +
text
  
== Recording and replaying a macro ==
+
= Script =
  
To record a macro press 'q' and then a number between 1 and 9. E.g. press "q1". The macro is now recording. When you've finished issuing your commands press 'q' again to finish recording. To replay a macro press '@' followed by the number of the macro. That is, if you pressed "q1" to record the macro, press "@1" to replay the macro. To replay the last macro again press "@@".
+
== Creating a session log with script ==
  
== Deleting to end of line ==
+
$ script -t 2> timing
  
d$
+
The session log is in the file 'typescript' and the timing data is in 'timing'.
  
== Deleting to beginning of line ==
+
== Replaying a scripted session ==
  
  d^
+
  $ scriptreplay timing
  
== Finding text ==
+
Uses the default file 'typescript' and the 'timing' file as specified.
  
To search forward for "text":
+
= Screen =
  
/text
+
== Creating a new screen or reconnecting to a detached screen ==
  
To search backward for "text":
+
$ screen -R
  
?text
+
== Detaching a screen ==
  
To repeat the last search in a forward direction press 'n', or to search again backwards press 'N'.
+
$ screen -D
  
== Finding and replacing text ==
+
== Reconnecting to screen ==
  
To replace the first instance of "search" on the current line with "destroy":
+
$ screen -D
 +
$ screen -R
  
:s/search/destroy/
+
I have a script in ~/bin/reconnect like so,
  
To replace all instances of "search" on the current line with "destroy":
+
#!/bin/bash
 +
screen -D
 +
screen -R
  
:s/search/destroy/g
+
This will detach your last screen, and reconnect it on the current terminal.
  
To replace all instances of "search" on lines 13 to 37 with "destroy":
+
== Scrolling in screen ==
  
:13,37 s/search/destroy/g
+
See [https://www.saltycrane.com/blog/2008/01/how-to-scroll-in-gnu-screen/ How to scroll in GNU Screen]. Basically press Ctrl+A ESC then use Page Up and Page Down. Press ESC again to exit copy mode. As usual you can use Ctrl+[ in place of ESC.
  
To replace all instances of "search" in the entire file with "destroy":
+
= Vim =
  
:%s/search/destroy/g
+
== First, why Vim? ==
  
== Changing DOS/Windows line-endings to Unix line-endings ==
+
Read [http://www.viemu.com/a-why-vi-vim.html Why, oh WHY, do those #?@! nutheads use vi?]
  
To set the line-ending to Unix line endings run the command:
+
== Visual modes ==
  
:setlocal ff=unix
+
Use 'v' for visual mode, 'V' for visual line mode and Ctrl+V for visual block mode.
  
More information on managing file formats [http://vim.wikia.com/wiki/File_format available here].
+
== Configuring spaces instead of tabs ==
  
== Disabling auto-indent etc. to paste from clipboard ==
+
I use two spaces instead of tabs. To configure, edit your .vimrc file:
  
To disable smart indenting when you're going to paste in text:
+
$ vim ~/.vimrc
  
:set paste
+
and include the following lines:
  
To turn it off again:
+
set tabstop=2
 +
set shiftwidth=2
 +
set expandtab
  
:set nopaste
+
== Configuring syntax highlighting ==
  
There's more info in this article: [http://vim.wikia.com/wiki/Toggle_auto-indenting_for_code_paste Toggle auto-indenting for code paste]
+
See [http://www.cyberciti.biz/faq/turn-on-or-off-color-syntax-highlighting-in-vi-or-vim/ here].
  
== Positioning windows ==
+
Use:
  
Use -o for horizontal split, e.g.:
+
:syntax on
  
vim -o a.txt b.txt
+
to turn on syntax highlighting.
  
Use -O for vertical split, e.g.:
+
Use:
  
  vim -o a.txt b.txt
+
  :syntax off
  
Use ^W to navigate windows then use directional keys h, j, k, l, etc.
+
to turn off syntax highlighting.
  
Use ^W and &lt; or &gt; to resize windows.
+
To always use syntax highlighting:
  
== To indent a block of text in Vim ==
+
$ vim ~/.vimrc
  
Use the > command. E.g. to indent five lines:
+
and add:
  
  5 > >
+
  syntax on
  
Press . (dot) to keep indenting.
+
To get a list of supported colour schemes open vim and type:
  
Or inside a block (e.g. curly brace, HTML/XML element, etc.) you can put your cursor in the element on on the curly brace and then:
+
:colorscheme[space][Ctrl+D]
  
> %
+
To always use a particular colorscheme edit ~/.vimrc and add (for example):
  
See [http://stackoverflow.com/questions/235839/indent-multiple-lines-quickly-in-vi#235841 here] for more.
+
colorscheme desert
  
== Open a file in a new window/tab ==
+
== Inserting a TAB character when expandtab is on ==
  
To open a file on the left hand side:
+
The problem here is that you have configured vim to insert spaces, but for a particular file (e.g. a Makefile) you need to insert a character.
  
:vert new filename.ext
+
Press Ctrl+V TAB to insert a literal tab character.
  
Note: ':vnew filename.ext' and ':vsp filename.ext' also work.
+
Or you can disable tab expansion altogether with:
  
To open a file at the top:
+
:set expandtab!
  
:new filename.ext
+
== Changing 2 space indent to 4 space indent (e.g. for python files) ==
  
See [http://stackoverflow.com/questions/10760310/how-to-open-a-new-file-in-vim-in-a-new-window#10762678 here] for more.
+
:%s/^\s*/&&/g
  
== Explore files in Vim ==
+
For more information [https://www.progclub.org/blog/2013/08/10/vim-reformat-a-python-file-to-have-4-space-indentations/ see here].
  
Enter:
+
== Recording and replaying a macro ==
  
:Explore
+
To record a macro press 'q' and then a number between 1 and 9. E.g. press "q1". The macro is now recording. When you've finished issuing your commands press 'q' again to finish recording. To replay a macro press '@' followed by the number of the macro. That is, if you pressed "q1" to record the macro, press "@1" to replay the macro. To replay the last macro again press "@@".
 +
 
 +
== Deleting to end of line ==
  
== Switch between Vim tabs ==
+
d$
  
Use gt and gT.
+
== Deleting to beginning of line ==
  
== Switch between Vim windows ==
+
d^
  
To toggle between open windows use:
+
== Finding text ==
  
Ctrl+W W
+
To search forward for "text":
  
To move in a direction use:
+
/text
  
Ctrl+W h/j/k/l
+
To search backward for "text":
  
See [http://superuser.com/questions/280500/how-does-one-switch-between-windows-on-vim#280501 here] for more.
+
?text
  
 +
To repeat the last search in a forward direction press 'n', or to search again backwards press 'N'.
  
== Links ==
+
== Finding and replacing text ==
  
* [http://www.vim.org/ Vim: the editor]
+
To replace the first instance of "search" on the current line with "destroy":
* [http://yannesposito.com/Scratch/en/blog/Learn-Vim-Progressively/ Learn Vim Progressively]
 
* [http://michael.peopleofhonoronly.com/vim/ Vim cheat sheet for programmers]
 
* [http://stackoverflow.com/questions/4781070/how-to-insert-tab-character-when-expandtab-option-is-on-in-vim How to insert Tab character when expandtab option is ON in VIM]
 
* [https://www.linux.com/learn/tutorials/8255-vim-tips-the-basics-of-search-and-replace Vim tips: the basics of search and replace]
 
* [http://vim.wikia.com/wiki/File_format File format]
 
* [http://www.viemu.com/a_vi_vim_graphical_cheat_sheet_tutorial.html Graphical vi-vim Cheat Sheet and Tutorial]
 
* [http://www.angelwatt.com/coding/notes/vim-commands.html Vim Commands Cheat Sheet]
 
  
= Write =
+
:s/search/destroy/
  
== Talking to other users on the system ==
+
To replace all instances of "search" on the current line with "destroy":
  
'''write''' is a unix command for talking to other users on the system. To use '''write''':
+
:s/search/destroy/g
  
1. SSH to <username>@<hostname> and login with your username and password.
+
To replace all instances of "search" on lines 13 to 37 with "destroy":
  
2. Issue the following command to find out who is logged onto the system:
+
:13,37 s/search/destroy/g
  
$ who
+
To replace all instances of "search" in the entire file with "destroy":
  
3. Issue the following command to talk to a specific user:
+
:%s/search/destroy/g
  
$ write <username>
+
== Changing DOS/Windows line-endings (CRLF) to Unix line-endings ==
  
4. Enter the message you'd like to send the user, followed by Ctrl+C to send. Press Ctrl+D to cancel.
+
To set the line-ending to Unix line endings run the command:
  
= Date =
+
:setlocal ff=unix
  
== Reporting the time on the server ==
+
More information on managing file formats [http://vim.wikia.com/wiki/File_format available here].
  
$ date
+
== Disabling auto-indent etc. to paste from clipboard ==
  
== Reporting UTC time ==
+
To disable smart indenting when you're going to paste in text:
  
  $ date --utc
+
  :set paste
  
== Getting the date in yyyy-MM-dd-hhmmss format ==
+
To turn it off again:
  
  $ date="`date +%F-%H%M%S`"
+
  :set nopaste
  
== Getting the year in four digits ==
+
There's more info in this article: [http://vim.wikia.com/wiki/Toggle_auto-indenting_for_code_paste Toggle auto-indenting for code paste]
  
$ year="`date +%Y`"
+
== Positioning windows ==
  
== Getting the month in two digits ==
+
Use -o for horizontal split, e.g.:
  
  $ month="`date +%m`"
+
  vim -o a.txt b.txt
  
== Getting the day of the month in two digits ==
+
Use -O for vertical split, e.g.:
  
  $ day="`date +%d`"
+
  vim -o a.txt b.txt
  
== Getting yesterday's date ==
+
Use ^W to navigate windows then use directional keys h, j, k, l, etc.
  
$ date --date='1 day ago' +%Y-%m-%d
+
Use ^W and &lt; or &gt; to resize windows.
  
= MySQL =
+
== To indent a block of text in Vim ==
  
== Run mysql without authentication/authorisation ==
+
Use the > command. E.g. to indent five lines:
  
  # service mysql stop
+
  5 > >
# mysqld_safe --skip-grant-tables &
 
  
Then you can connect without a password, e.g.:
+
Press . (dot) to keep indenting.
  
# mysql -u root mysql
+
Or inside a block (e.g. curly brace, HTML/XML element, etc.) you can put your cursor in the element on on the curly brace and then:
  
To stop the unauthenticated service:
+
> %
  
# mysqladmin shutdown
+
See [http://stackoverflow.com/questions/235839/indent-multiple-lines-quickly-in-vi#235841 here] for more.
  
Then restart a normal service:
+
== Open a file in a new window/tab ==
  
# service mysql start
+
To open a file on the left hand side:
  
== Logging all database queries ==
+
:vert new filename.ext
  
# vim /etc/mysql/my.cnf
+
Note: ':vnew filename.ext' and ':vsp filename.ext' also work.
  
In the [mysqld] section add:
+
To open a file at the top:
  
  log=/tmp/mysql.log
+
  :new filename.ext
  
Then:
+
See [http://stackoverflow.com/questions/10760310/how-to-open-a-new-file-in-vim-in-a-new-window#10762678 here] for more.
  
# service mysql restart
+
== Explore files in Vim ==
  
Watch the log with:
+
Enter:
  
  # tail -f /tmp/mysql.log
+
  :Explore
  
== Dumping a MySQL database ==
+
== Switch between Vim tabs ==
  
You can dump the database into a file using:
+
Use gt and gT.
 
$ mysqldump -h hostname -u user --password=password databasename > filename
 
  
== Loading a MySQL database from a dump file ==
+
== Switch between Vim windows ==
  
You can create a database using:
+
To toggle between open windows use:
  
  $ echo create database databasename | mysql -h hostname -u user -p
+
  Ctrl+W W
  
You can restore a database using:
+
To move in a direction use:
 
$ mysql -h hostname -u user --password=password databasename < filename
 
  
== Creating a MySQL user ==
+
Ctrl+W h/j/k/l
  
# mysql -h localhost -u root --password=<password>
+
See [http://superuser.com/questions/280500/how-does-one-switch-between-windows-on-vim#280501 here] for more.
mysql> create user 'username'@'localhost' identified by '<password>';
 
  
== Granting all MySQL user permissions ==
+
== Insert block comment in Vim ==
  
# mysql -h localhost -u root --password=<password>
+
See [https://stackoverflow.com/a/253391/868138 here].
mysql> grant all privileges on dbname.* to user@host;
 
 
 
== Select domain name from email address ==
 
  
SELECT SUBSTR( email, INSTR( email, '@' ) + 1 )
+
So it's:
  
= Apache =
+
# Ctrl+V (Note: not Shift+V!)
 +
# Up/Down to select rows
 +
# Shift+I
 +
# Enter your text, e.g. '#' or '//'
 +
# Ctrl+[ (or 'Esc')
  
== Maintaining .htaccess passwords ==
+
== Navigate to matching tag ==
  
To add or modify the password for a user:
+
To navigate to the matching beginning or end tag use '%'.
  
$ htpasswd /etc/apache2/passwd username
+
You can also use e.g. '[{' to match the previous '{', or e.g. '])' to match the next ')'.
  
== Configuring PHP session timeout in .htaccess ==
+
== Auto-format HTML tags ==
  
For a session timeout of 9 hours:
+
Stolen from [https://www.quora.com/How-do-you-auto-format-HTML-in-Vim here].
  
php_value session.cookie_lifetime 32400
+
# first join all the lines - ggVGgJ
php_value session.gc_maxlifetime 32400
+
# Now break tags to new lines - :%s/>\s*</>\r</g
 +
# Now set filetype - :set ft=html (you can do this before too)
 +
# Now Indent - ggVG=
  
== Disabling PHP magic quotes in .htaccess ==
+
== Links ==
  
php_flag magic_quotes_gpc Off
+
* [http://www.vim.org/ Vim: the editor]
 +
* [http://yannesposito.com/Scratch/en/blog/Learn-Vim-Progressively/ Learn Vim Progressively]
 +
* [http://michael.peopleofhonoronly.com/vim/ Vim cheat sheet for programmers]
 +
* [http://stackoverflow.com/questions/4781070/how-to-insert-tab-character-when-expandtab-option-is-on-in-vim How to insert Tab character when expandtab option is ON in VIM]
 +
* [https://www.linux.com/learn/tutorials/8255-vim-tips-the-basics-of-search-and-replace Vim tips: the basics of search and replace]
 +
* [http://vim.wikia.com/wiki/File_format File format]
 +
* [http://www.viemu.com/a_vi_vim_graphical_cheat_sheet_tutorial.html Graphical vi-vim Cheat Sheet and Tutorial]
 +
* [http://www.angelwatt.com/coding/notes/vim-commands.html Vim Commands Cheat Sheet]
  
== Requiring HTTP Auth in .htaccess ==
+
= Write =
  
AuthType Basic
+
== Talking to other users on the system ==
AuthName "Speak Friend And Enter"
 
AuthUserFile /home/jj5/.htpasswd
 
Require valid-user
 
  
== Restarting Apache ==
+
'''write''' is a unix command for talking to other users on the system. To use '''write''':
  
The hard way
+
1. SSH to <username>@<hostname> and login with your username and password.
  
$ sudo /etc/init.d/apache2 restart
+
2. Issue the following command to find out who is logged onto the system:
  
The graceful way (avoids dropping active connections)
+
$ who
  
$ sudo apache2ctl graceful
+
3. Issue the following command to talk to a specific user:
  
== Allowing directory browsing ==
+
$ write <username>
  
To show directory index pages, in the apache config file:
+
4. Enter the message you'd like to send the user, followed by Ctrl+C to send. Press Ctrl+D to cancel.
  
<Directory /var/www/data>
+
= Date =
  Options Indexes
 
</Directory>
 
  
= C =
+
== Reporting the time on the server ==
  
== Locating memset function ==
+
$ date
  
The memset function is in &lt;string.h> as described in this article [http://www.java-samples.com/showtutorial.php?tutorialid=591 Using memset(), memcpy(), and memmove() in C]
+
== Reporting UTC time ==
  
== Links ==
+
$ date --utc
  
* [http://www.ibm.com/developerworks/linux/library/l-memory/ Inside memory management]
+
== Getting the date in yyyy-MM-dd-hhmmss format ==
  
= PHP =
+
$ date="`date +%F-%H%M%S`"
  
== Including a file relative to the including file ==
+
== Getting the year in four digits ==
  
  require_once( dirname( __FILE__ ) . '/relative/path/to.php' );
+
  $ year="`date +%Y`"
  
== Enabling error reporting ==
+
== Getting the month in two digits ==
  
  error_reporting( E_ALL | E_STRICT );
+
  $ month="`date +%m`"
ini_set( 'display_errors', 'On' );
 
  
== Setting an error handler ==
+
== Getting the day of the month in two digits ==
  
  set_error_handler( "error_handler", E_ALL | E_STRICT );
+
  $ day="`date +%d`"
  
function error_handler( $error_code, $error_message, $error_file, $error_line, $error_context ) {
+
== Getting yesterday's date ==
  // ...
 
}
 
  
== Disable HTML content in var_dump ==
+
$ date --date='1 day ago' +%Y-%m-%d
  
ini_set( 'html_errors', 'off' );
+
== Converting Unix time (seconds since epoch) ==
  
= BASH scripting =
+
For timestamp '1501370200':
  
For a primer on bash scripting see [http://www.progsoc.org/tfm/tfm03/node37.html TFM: Erotic Fantasy: /bin/sh Programming].
+
$ date -d @1501370200 +%F-%H%M%S
  
== Telling a script to run in bash ==
+
== Running timedatectl from systemd ==
  
The first line of the file should be:
+
There's a new command bundled with systmed:
  
  #!/bin/bash
+
  # timedatectl
  
== Checking if a command-line argument was passed in ==
+
It reports on (and controls) how the system time is configured.
  
if [ -n "$1" ]; then
+
= MySQL =
  echo "Missing parameter 1.";
 
  exit 1;
 
fi
 
  
== Checking if a command-line argument was not passed in ==
+
== Run mysql without authentication/authorisation ==
  
  if [ "$1" = "" ]; then
+
  # service mysql stop
  echo "Missing parameter 1.";
+
  # mysqld_safe --skip-grant-tables &
  exit 1;
 
  fi
 
  
Or:
+
Then you can connect without a password, e.g.:
  
  if [ -z "$1" ]; then
+
  # mysql -u root mysql
  echo "Missing parameter 1.";
 
  exit 1;
 
fi
 
  
== Checking command exit status ==
+
To stop the unauthenticated service:
  
  cd /my/path
+
  # mysqladmin shutdown
if [ "$?" -ne "0" ]; then
 
  echo "Cannot change dir.";
 
  exit 1;
 
fi
 
  
== Checking if a directory doesn't exist ==
+
Then restart a normal service:
  
  if [ ! -d "/my/dir" ]; then
+
  # service mysql start
  mkdir /my/dir
 
fi
 
  
== Deleting old backups ==
+
== Logging all database queries ==
  
To keep only the latest five backups:
+
# vim /etc/mysql/my.cnf
  
  find . -maxdepth 1 -type f -printf '%T@ %p\0' | sort -r -z -n | awk 'BEGIN { RS="\0"; ORS="\0"; FS="" } NR > 5 { sub("^[0-9]*(.[0-9]*)? ", ""); print }' | xargs -0 rm -f
+
In the [mysqld] section add:
 +
 
 +
log=/tmp/mysql.log
 +
 
 +
Then:
 +
 
 +
# service mysql restart
 +
 
 +
Watch the log with:
 +
 
 +
# tail -f /tmp/mysql.log
 +
 
 +
== Dumping a MySQL database ==
 +
 
 +
You can dump the database into a file using:
 +
 +
$ mysqldump -h hostname -u user --password=password databasename > filename
 +
 
 +
== Loading a MySQL database from a dump file ==
 +
 
 +
You can create a database using:
 +
 
 +
$ echo create database databasename | mysql -h hostname -u user -p
 +
 
 +
You can restore a database using:
 +
 +
$ mysql -h hostname -u user --password=password databasename < filename
 +
 
 +
== Creating a MySQL user ==
 +
 
 +
# mysql -h localhost -u root --password=<password>
 +
mysql> create user 'username'@'localhost' identified by '<password>';
 +
 
 +
== Granting all MySQL user permissions ==
 +
 
 +
# mysql -h localhost -u root --password=<password>
 +
mysql> grant all privileges on dbname.* to user@host;
 +
 
 +
== Select domain name from email address ==
 +
 
 +
SELECT SUBSTR( email, INSTR( email, '@' ) + 1 )
 +
 
 +
== Check if MySQL connection is encrypted with TLS/SSL ==
 +
 
 +
Check the SSL version in use:
 +
 
 +
show status like 'Ssl_version';
 +
 
 +
Or check the cipher in use:
 +
 
 +
show status like 'Ssl_cipher';
 +
 
 +
= Apache =
 +
 
 +
== Maintaining .htaccess passwords ==
 +
 
 +
To add or modify the password for a user:
 +
 
 +
$ htpasswd /etc/apache2/passwd username
 +
 
 +
== Configuring PHP session timeout in .htaccess ==
 +
 
 +
For a session timeout of 9 hours:
 +
 
 +
php_value session.cookie_lifetime 32400
 +
php_value session.gc_maxlifetime 32400
 +
 
 +
== Disabling PHP magic quotes in .htaccess ==
 +
 
 +
php_flag magic_quotes_gpc Off
 +
 
 +
== Requiring HTTP Auth in .htaccess ==
 +
 
 +
AuthType Basic
 +
AuthName "Speak Friend And Enter"
 +
AuthUserFile /home/jj5/.htpasswd
 +
Require valid-user
 +
 
 +
== Restarting Apache ==
 +
 
 +
The hard way
 +
 
 +
$ sudo /etc/init.d/apache2 restart
 +
 
 +
The graceful way (avoids dropping active connections)
 +
 
 +
$ sudo apache2ctl graceful
 +
 
 +
== Allowing directory browsing ==
 +
 
 +
To show directory index pages, in the apache config file:
 +
 
 +
<Directory /var/www/data>
 +
  Options Indexes
 +
</Directory>
 +
 
 +
= C =
 +
 
 +
== Locating memset function ==
 +
 
 +
The memset function is in &lt;string.h> as described in this article [http://www.java-samples.com/showtutorial.php?tutorialid=591 Using memset(), memcpy(), and memmove() in C]
 +
 
 +
== Links ==
 +
 
 +
* [http://www.ibm.com/developerworks/linux/library/l-memory/ Inside memory management]
 +
 
 +
= PHP =
 +
 
 +
== Including a file relative to the including file ==
 +
 
 +
require_once( dirname( __FILE__ ) . '/relative/path/to.php' );
 +
 
 +
== Enabling error reporting ==
 +
 
 +
error_reporting( E_ALL | E_STRICT );
 +
ini_set( 'display_errors', 'On' );
 +
 
 +
== Setting an error handler ==
 +
 
 +
set_error_handler( "error_handler", E_ALL | E_STRICT );
 +
 
 +
function error_handler( $error_code, $error_message, $error_file, $error_line, $error_context ) {
 +
  // ...
 +
}
 +
 
 +
== Disable HTML content in var_dump ==
 +
 
 +
ini_set( 'html_errors', 'off' );
 +
 
 +
= BASH scripting =
 +
 
 +
For a primer on bash scripting see [http://www.progsoc.org/tfm/tfm03/node37.html TFM: Erotic Fantasy: /bin/sh Programming].
 +
 
 +
== Telling a script to run in bash ==
 +
 
 +
The first line of the file should be:
 +
 
 +
#!/bin/bash
 +
 
 +
== Checking if a command-line argument was passed in ==
 +
 
 +
if [ -n "$1" ]; then
 +
  echo "Missing parameter 1.";
 +
  exit 1;
 +
fi
 +
 
 +
== Checking if a command-line argument was not passed in ==
 +
 
 +
if [ "$1" = "" ]; then
 +
  echo "Missing parameter 1.";
 +
  exit 1;
 +
fi
 +
 
 +
Or:
 +
 
 +
if [ -z "$1" ]; then
 +
  echo "Missing parameter 1.";
 +
  exit 1;
 +
fi
 +
 
 +
== Checking command exit status ==
 +
 
 +
cd /my/path
 +
if [ "$?" -ne "0" ]; then
 +
  echo "Cannot change dir.";
 +
  exit 1;
 +
fi
 +
 
 +
== Checking if a file does/doesn't exist ==
 +
 
 +
Check if file exists:
 +
 
 +
if [ -f "/my/file" ]; then
 +
  cat /my/file
 +
fi
 +
 
 +
Check if file doesn't exist:
 +
 
 +
if [ ! -f "/my/file" ]; then
 +
  touch /my/file
 +
fi
 +
 
 +
== Checking if a directory does/doesn't exist ==
 +
 
 +
Check if directory exists:
 +
 
 +
if [ -d "/my/dir" ]; then
 +
  rmdir /my/dir
 +
fi
 +
 
 +
Check if directory doesn't exist:
 +
 
 +
if [ ! -d "/my/dir" ]; then
 +
  mkdir /my/dir
 +
fi
 +
 
 +
== Deleting old backups ==
 +
 
 +
To keep only the latest five backups:
 +
 
 +
  find . -maxdepth 1 -type f -printf '%T@ %p\0' | sort -r -z -n | awk 'BEGIN { RS="\0"; ORS="\0"; FS="" } NR > 5 { sub("^[0-9]*(.[0-9]*)? ", ""); print }' | xargs -0 rm -f
 +
 
 +
This script stolen from [http://stackoverflow.com/questions/25785/delete-all-but-the-most-recent-x-files-in-bash stackoverflow].
 +
 
 +
Requires GNU find for -printf, GNU sort for -z, GNU awk for "\0" and GNU xargs for -0, but handles files with embedded newlines or spaces.
 +
 
 +
== Changing into the script's directory ==
 +
 
 +
cd "`dirname $0`"
 +
 
 +
== Getting the absolute path of a relative path ==
 +
 
 +
readlink -f ./some/path
 +
 
 +
== Creating a temp directory ==
 +
 
 +
dir=`mktemp -d` && cd $dir
 +
 
 +
== Reading secret input from stdin ==
 +
 
 +
You can read a secret, such as a password, like this:
 +
 
 +
echo -n "Enter passphrase: "
 +
stty -echo
 +
read passphrase;
 +
stty echo
 +
echo ""
 +
 
 +
After running the above the secret will be in the $passphrase environment variable.
 +
 
 +
== String replacements in bash ==
 +
 
 +
See the [http://www.tldp.org/LDP/abs/html/string-manipulation.html string manipulation] doco. Basically, to replace first occurrence:
 +
 
 +
result=${var/find/replace}
 +
 
 +
To replace all occurrences:
 +
 
 +
result=${var//find/replace}
 +
 
 +
A practical example, get an ISO date and turn it into a path:
 +
 
 +
date="$(date +%Y-%m-%d)"
 +
work_dir=${date//-//}
 +
 
 +
== Sending a HEREDOC to a file ==
 +
 
 +
cat << EOF > /tmp/yourfilehere
 +
These contents will be written to the file.
 +
        This line is indented.
 +
EOF
 +
 
 +
== Bash case/switch statement ==
 +
 
 +
See [http://tldp.org/LDP/Bash-Beginners-Guide/html/sect_07_03.html using case statements], e.g.:
 +
 
 +
case $space in
 +
[1-6]*)
 +
  Message="All is quiet."
 +
  ;;
 +
[7-8]*)
 +
  Message="Start thinking about cleaning out some stuff.  There's a partition that is $space % full."
 +
  ;;
 +
9[1-8])
 +
  Message="Better hurry with that new disk...  One partition is $space % full."
 +
  ;;
 +
99)
 +
  Message="I'm drowning here!  There's a partition at $space %!"
 +
  ;;
 +
*)
 +
  Message="I seem to be running with an nonexistent amount of disk space..."
 +
  ;;
 +
esac
 +
 
 +
== Using dotglob shopt to match dot-files ==
 +
 
 +
To enable dot-file matching in globs, set the dotglob shell option:
  
This script stolen from [http://stackoverflow.com/questions/25785/delete-all-but-the-most-recent-x-files-in-bash stackoverflow].
+
$ shopt -s dotglob
  
Requires GNU find for -printf, GNU sort for -z, GNU awk for "\0" and GNU xargs for -0, but handles files with embedded newlines or spaces.
+
= Sed =
  
== Changing into the script's directory ==
+
== Find and replace with sed ==
  
cd "`dirname $0`"
+
To update the current file use '-i'. E.g.:
  
== Getting the absolute path of a relative path ==
+
sed -i 's/search-text/replace-text/' file
  
readlink -f ./some/path
+
= Awk =
  
== Creating a temp directory ==
+
== Listing IP addresses in an Apache web log ==
  
  dir=`mktemp -d` && cd $dir
+
  awk '/GET \/path\/for\/url/ { print $1 }' /var/log/apache2/access.log | sort | uniq
  
== Reading secret input from stdin ==
+
== Printing space-separated field ==
  
You can read a secret, such as a password, like this:
+
echo 'no no yes no' | awk '{print $3}'
  
echo -n "Enter passphrase: "
+
== Printing delimited field ==
stty -echo
 
read passphrase;
 
stty echo
 
echo ""
 
  
After running the above the secret will be in the $passphrase environment variable.
+
echo 'no:no:yes:no' | awk -F ':' '{print $3}'
  
== String replacements in bash ==
+
= Subversion =
  
See the [http://www.tldp.org/LDP/abs/html/string-manipulation.html string manipulation] doco. Basically, to replace first occurrence:
+
== Setting svn:externals from the command-line ==
  
result=${var/find/replace}
+
See [http://beerpla.net/2009/06/20/how-to-properly-set-svn-svnexternals-property-in-svn-command-line/ here].
  
To replace all occurrences:
+
To set an svn:externals from the command-line:
  
  result=${var//find/replace}
+
  svn propset svn:externals 'rdfind-php https://www.progclub.org/svn/pcrepo/rdfind.php/branches/0.1' .
 +
svn ci -m 'Adding svn:externals for rdfind-php...'
 +
svn up
  
A practical example, get an ISO date and turn it into a path:
+
Or to use a file:
  
  date="$(date +%Y-%m-%d)"
+
  svn propset svn:externals -F svn.externals .
work_dir=${date//-//}
 
  
[[Category: Help]]
+
== Setting svn:ignore from the command line ==
  
= Sed =
+
See [http://tedone.typepad.com/blog/2010/03/setting-svnignore-from-the-command-line.html here].
  
== Find and replace with sed ==
+
$ svn propset svn:ignore [file|folder] [path]
  
To update the current file use '-i'. E.g.:
+
Or use a file and apply recursively:
  
  sed -i 's/search-text/replace-text/' file
+
  $ svn propset svn:ignore -RF ./svn-ignore-list.txt .
  
= Awk =
+
= Git =
  
== Listing IP addresses in an Apache web log ==
+
== Showing status of working copy ==
  
  awk '/GET \/path\/for\/url/ { print $1 }' /var/log/apache2/access.log | sort | uniq
+
  git status
  
== Printing space-separated field ==
+
== Showing repo history ==
  
  echo 'no no yes no' | awk '{print $3}'
+
  git log
  
== Printing delimited field ==
+
== Showing remote repositories (including 'origin') ==
  
  echo 'no:no:yes:no' | awk -F ':' '{print $3}'
+
  git remote -v
  
= Subversion =
+
== Handy git aliases ==
  
== Setting svn:externals from the command-line ==
+
Save these to your ~/.gitconfig file.
  
See [http://beerpla.net/2009/06/20/how-to-properly-set-svn-svnexternals-property-in-svn-command-line/ here].
+
For a nicer view of history than standard 'git log' -- colourful, one-line-per commit, etc:
  
To set an svn:externals from the command-line:
+
  graph = !git log --all --graph --color --abbrev-commit --pretty=oneline
  
svn propset svn:externals 'rdfind-php https://www.progclub.org/svn/pcrepo/rdfind.php/branches/0.1' .
+
To show only the files that have changed, rather than the full line-by-line content:
svn ci -m 'Adding svn:externals for rdfind-php...'
 
svn up
 
  
Or to use a file:
+
  dif  = !git diff --name-status
  
svn propset svn:externals -F svn.externals .
+
= IRC =
  
== Setting svn:ignore from the command line ==
+
== Instructing ChanServ to op an admin ==
  
See [http://tedone.typepad.com/blog/2010/03/setting-svnignore-from-the-command-line.html here].
+
/msg ChanServ op #channel user
  
$ svn propset svn:ignore [file|folder] [path]
+
E.g.
  
Or use a file and apply recursively:
+
/msg ChanServ op #gnurc jj5
  
$ svn propset svn:ignore -RF ./svn-ignore-list.txt .
+
Sub 'op' for 'deop' to remove op privilege.
  
= Git =
+
= C++ =
  
== Showing status of working copy ==
+
== C++ books ==
  
git status
+
=== Books I want ===
  
== Showing repo history ==
+
* [http://smile.amazon.com/dp/1785283073 Boost.Asio C++ Network Programming 2ed]
 +
* [http://smile.amazon.com/dp/1783986549 Boost.Asio C++ Network Programming Cookbook]
  
git log
+
* [http://www.amazon.com/dp/020170353X Accelerated C++] by Andrew Koening
 +
* [http://www.amazon.com/dp/0321334876 Effective C++] by Scott Meyers
 +
* [http://www.amazon.com/dp/1491903996 Effective Modern C++] by Scott Meyers
 +
* [http://www.amazon.com/dp/020163371X More Effective C++] by Scott Meyers
 +
* [http://www.amazon.com/dp/0201749629 Effective STL] by Scott Meyers
 +
* [http://www.amazon.com/dp/0201615622 Exceptional C++] by Herb Sutter
 +
* [http://www.amazon.com/dp/020170434X More Exceptional C++] by Herb Sutter
 +
* [http://www.amazon.com/dp/0201760428 Exceptional C++ Style] by Herb Sutter
 +
* [http://www.amazon.com/dp/0321227255 C++ Template Metaprogramming] by David Abrahams
 +
* [http://www.amazon.com/dp/059652269X 97 Things Every Software Architect Should Know] by Richard Monson-Haefel
 +
* [http://www.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries] by Robert Demming
  
== Showing remote repositories (including 'origin') ==
+
=== Books I own ===
  
git remote -v
+
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 4ed] by Bjarne Stroustrup
 
+
* [http://smile.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries]
== Handy git aliases ==
+
* [http://smile.amazon.com/dp/1849514887 Boost C++ Application Development Cookbook]
 
+
* [http://smile.amazon.com/dp/1782163263 Boost.Asio C++ Network Programming]
Save these to your ~/.gitconfig file.
+
* [http://www.amazon.com/dp/0321113586 C++ Coding Standards] by Herb Sutter &#x2713;
 
+
* [http://www.amazon.com/dp/0201704315 Modern C++ Design] by Andrei Alexandrescu &#x2713;
For a nicer view of history than standard 'git log' -- colourful, one-line-per commit, etc:
+
* [http://www.amazon.com/dp/0596809484 97 Things Every Programmer Should Know] by Kevlin Henney &#x2713;
 +
* [http://www.amazon.com/dp/0321133544 Beyond the C++ Standard Library] by Björn Karlsson &#x2713;
 +
* [http://www.amazon.com/dp/9491028014 Introduction to the Boost C++ Libraries; Volume I - Foundations] by Robert Demming &#x2713;
 +
* [http://www.amazon.com/dp/0123850037 API Design for C++] by Martin Reddy &#x2713;
 +
* [http://www.amazon.com/dp/B00CB23URA Advanced C++ Metaprogramming] by Davide Di Gennaro &#x2713;
 +
** Note: the next version of this book is: [http://www.amazon.com/dp/1484210115 Advanced Metaprogramming in Classic C++]
 +
* [http://www.amazon.com/dp/1933988770 C++ Concurrency in Action: Practical Multithreading] by Anthony Williams &#x2713;
  
  graph = !git log --all --graph --color --abbrev-commit --pretty=oneline
+
=== Books I'm not reading ===
  
To show only the files that have changed, rather than the full line-by-line content:
+
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 3ed] by Bjarne Stroustrup &#x2713;
 +
** Note: 3ed is obsolete. Buy 4ed (above).
  
  dif  = !git diff --name-status
+
=== Books I've read ===
  
= IRC =
+
* [http://www.amazon.com/dp/0596004966 C++ Pocket Reference] by Kyle Loudon &#x2713;
  
== Instructing ChanServ to op an admin ==
+
== C++ blogs/articles ==
  
/msg ChanServ op #channel user
+
* [http://blogs.msdn.com/b/hsutter/ Herb Sutter's MSDN blog]
 +
* [http://herbsutter.com/ Herb Sutter's personal blog]
 +
* [http://herbsutter.com/gotw/ Herb Sutter's Guru of the Week (GotW)] updated from [http://gotw.ca/gotw/ gotw.ca]
  
E.g.
+
== C++ performance tips ==
  
/msg ChanServ op #gnurc jj5
+
* ++c can be faster than c++.
 +
* use const for everything that you possibly can.
 +
* use 'inline' when you need to define a function in a header. Typically only do that if it's small and the increase in code size from inlining is worth the cost to avoid the cost of a function call. For anything except trivially small functions you'll probably need to profile to know if it's worth it.
 +
* don't use registers.
 +
* const [http://www.gotw.ca/gotw/081.htm rarely affects performance].
 +
* debunking a number of [http://www.open-std.org/jtc1/sc22/wg21/docs/TR18015.pdf C++ myths that won't die].
 +
* std::sort<> is typically faster than qsort() because it can avoid indirection at runtime.
 +
* if you've got parallelisation going on, you may be able to just replace a std::for_each with a parallel equivalent.
 +
* read about [http://stackoverflow.com/questions/579887/how-expensive-is-rtti performance cost of RTTI] (Run Time Type Information) and [http://stackoverflow.com/questions/4486609/when-can-compiling-c-without-rtti-cause-problems how to disable it]
 +
* don't use dynamic_cast because it is slow (typeid is faster but still relies on RTTI)
 +
* prefer unique_ptr to shared_ptr when possible. unique_ptr has less overhead.
 +
* [http://sunsite.uakom.sk/sunworldonline/swol-02-1996/swol-02-perf.html Which is better, static or dynamic linking?]
 +
* [http://stackoverflow.com/questions/2550281/floating-point-vs-integer-calculations-on-modern-hardware Integer vs Floating-Point performance]
 +
 
 +
= systemd =
  
Sub 'op' for 'deop' to remove op privilege.
+
[https://en.wikipedia.org/wiki/Systemd systemd] is an init system used in most Linux distributions to bootstrap the user space and manage all processes subsequently.
  
= C++ =
+
== Following a service log ==
  
== C++ books ==
+
e.g. for bind9:
  
=== Books I want ===
+
# journalctl -f -u bind9
  
* [http://smile.amazon.com/dp/1785283073 Boost.Asio C++ Network Programming 2ed]
+
or for everything:
* [http://smile.amazon.com/dp/1783986549 Boost.Asio C++ Network Programming Cookbook]
 
  
* [http://www.amazon.com/dp/020170353X Accelerated C++] by Andrew Koening
+
# journalctl -f
* [http://www.amazon.com/dp/0321334876 Effective C++] by Scott Meyers
+
 
* [http://www.amazon.com/dp/1491903996 Effective Modern C++] by Scott Meyers
+
== System status ==
* [http://www.amazon.com/dp/020163371X More Effective C++] by Scott Meyers
+
 
* [http://www.amazon.com/dp/0201749629 Effective STL] by Scott Meyers
+
To see spawned services hierarchy:
* [http://www.amazon.com/dp/0201615622 Exceptional C++] by Herb Sutter
+
 
* [http://www.amazon.com/dp/020170434X More Exceptional C++] by Herb Sutter
+
# systemctl status
* [http://www.amazon.com/dp/0201760428 Exceptional C++ Style] by Herb Sutter
 
* [http://www.amazon.com/dp/0321227255 C++ Template Metaprogramming] by David Abrahams
 
* [http://www.amazon.com/dp/059652269X 97 Things Every Software Architect Should Know] by Richard Monson-Haefel
 
* [http://www.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries] by Robert Demming
 
  
=== Books I own ===
+
Or for a specific service e.g.:
  
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 4ed] by Bjarne Stroustrup
+
# systemctl status networking
* [http://smile.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries]
+
 
* [http://smile.amazon.com/dp/1849514887 Boost C++ Application Development Cookbook]
+
= SaltStack =
* [http://smile.amazon.com/dp/1782163263 Boost.Asio C++ Network Programming]
+
 
* [http://www.amazon.com/dp/0321113586 C++ Coding Standards] by Herb Sutter &#x2713;
+
== Running a command on specified minions ==
* [http://www.amazon.com/dp/0201704315 Modern C++ Design] by Andrei Alexandrescu &#x2713;
 
* [http://www.amazon.com/dp/0596809484 97 Things Every Programmer Should Know] by Kevlin Henney &#x2713;
 
* [http://www.amazon.com/dp/0321133544 Beyond the C++ Standard Library] by Björn Karlsson &#x2713;
 
* [http://www.amazon.com/dp/9491028014 Introduction to the Boost C++ Libraries; Volume I - Foundations] by Robert Demming &#x2713;
 
* [http://www.amazon.com/dp/0123850037 API Design for C++] by Martin Reddy &#x2713;
 
* [http://www.amazon.com/dp/B00CB23URA Advanced C++ Metaprogramming] by Davide Di Gennaro &#x2713;
 
** Note: the next version of this book is: [http://www.amazon.com/dp/1484210115 Advanced Metaprogramming in Classic C++]
 
* [http://www.amazon.com/dp/1933988770 C++ Concurrency in Action: Practical Multithreading] by Anthony Williams &#x2713;
 
  
=== Books I'm not reading ===
+
salt 'host' cmd.run 'update-locale'
  
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 3ed] by Bjarne Stroustrup &#x2713;
+
== Running a command on all minions ==
** Note: 3ed is obsolete. Buy 4ed (above).
 
  
=== Books I've read ===
+
salt '*' cmd.run 'update-locale'
  
* [http://www.amazon.com/dp/0596004966 C++ Pocket Reference] by Kyle Loudon &#x2713;
+
== Listing active jobs ==
  
== C++ blogs/articles ==
+
salt-run jobs.active
  
* [http://blogs.msdn.com/b/hsutter/ Herb Sutter's MSDN blog]
+
== Listing available grains ==
* [http://herbsutter.com/ Herb Sutter's personal blog]
 
* [http://herbsutter.com/gotw/ Herb Sutter's Guru of the Week (GotW)] updated from [http://gotw.ca/gotw/ gotw.ca]
 
  
== C++ performance tips ==
+
salt 'example' grains.items
  
* ++c can be faster than c++.
+
== Listing available pillar ==
* use const for everything that you possibly can.
 
* use 'inline' when you need to define a function in a header. Typically only do that if it's small and the increase in code size from inlining is worth the cost to avoid the cost of a function call. For anything except trivially small functions you'll probably need to profile to know if it's worth it.
 
* don't use registers.
 
* const [http://www.gotw.ca/gotw/081.htm rarely affects performance].
 
* debunking a number of [http://www.open-std.org/jtc1/sc22/wg21/docs/TR18015.pdf C++ myths that won't die].
 
* std::sort<> is typically faster than qsort() because it can avoid indirection at runtime.
 
* if you've got parallelisation going on, you may be able to just replace a std::for_each with a parallel equivalent.
 
* read about [http://stackoverflow.com/questions/579887/how-expensive-is-rtti performance cost of RTTI] (Run Time Type Information) and [http://stackoverflow.com/questions/4486609/when-can-compiling-c-without-rtti-cause-problems how to disable it]
 
* don't use dynamic_cast because it is slow (typeid is faster but still relies on RTTI)
 
* prefer unique_ptr to shared_ptr when possible. unique_ptr has less overhead.
 
* [http://sunsite.uakom.sk/sunworldonline/swol-02-1996/swol-02-perf.html Which is better, static or dynamic linking?]
 
* [http://stackoverflow.com/questions/2550281/floating-point-vs-integer-calculations-on-modern-hardware Integer vs Floating-Point performance]
 
  
= systemd =
+
salt 'example' pillar.items
  
[https://en.wikipedia.org/wiki/Systemd systemd] is an init system used in most Linux distributions to bootstrap the user space and manage all processes subsequently.
+
== Reporting a grain value ==
  
== Following a service log ==
+
e.g. for the 'mem_total' grain:
  
e.g. for bind9:
+
salt '*' grains.item mem_total
  
# journalctl -f -u bind9
+
= KDE =
  
or for everything:
+
== Running user login script (X11/XOrg/XWindows) ==
  
# journalctl -f
+
A way to run user login scripts which works for KDE Plasma (and apparently other [https://en.wikipedia.org/wiki/X.Org_Server X.Org Server X Window System] environments) is to create a *.desktop file in ~/.config/autostart/. For example I have a ~/.config/autostart/ssh-add.desktop file with the following contents to register my SSH key in the SSH Agent:
  
== System status ==
+
  [Desktop Entry]
 
+
  Type=Application
To see spawned services hierarchy:
+
Name=ssh-add
 
+
  Comment=Adds my private key to my session.
  # systemctl status
+
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
 
 
Or for a specific service e.g.:
 
 
 
  # systemctl status networking
 
 
 
= SaltStack =
 
 
 
== Running a command on specified minions ==
 
 
 
  salt 'host' cmd.run 'update-locale'
 
 
 
== Running a command on all minions ==
 
 
 
salt '*' cmd.run 'update-locale'
 

Revision as of 14:26, 5 February 2018

Hi there, I'm John. I just wanted a page where I could document various Linux things that I bump into. This is that page. Thank you ProgClub. :)

Note: I have some other disorganised notes on UNIX, which include a few tips for MacOS. I also have some tips for OS X.

System

Determining which Debian/Ubuntu release your are running

$ lsb_release -r

Or for more information:

$ lsb_release

Determining which Unix you are running

$ uname

Or,

$ uname -a

Configuring system swappiness

Swappiness is a number between 0 and 100 that regulates how much the system uses the swap file. I like setting this value to 0 to keep my apps as responsive as possible. Create a file /etc/sysctl.d/local.conf and add this line:

vm.swappiness = 0

If you want to set the value for the current session only:

echo 0 > /proc/sys/vm/swappiness

Hardware information

For information about the hardware attached to your system, check out:

# lshw

And for CPUs:

# lscpu

And for PCI devices:

# lspci

And for DMI info:

# dmidecode

Or the grand daddy of them all:

# hwinfo

There's also inxi, e.g.:

$ inxi -b

System:    Host: tact Kernel: 4.9.0-4-amd64 x86_64 (64 bit) Desktop: KDE Plasma 5.8.6
           Distro: Debian GNU/Linux 9 (stretch)
Machine:   Device: desktop Mobo: ASUSTeK model: STRIX Z270F GAMING v: Rev 1.xx
           UEFI [Legacy]: American Megatrends v: 0906 date: 03/22/2017
CPU:       Quad core Intel Core i7-7700K (-HT-MCP-) speed/max: 799/4600 MHz
Graphics:  Card: Intel Device 5912
           Display Server: X.Org 1.19.2 drivers: modesetting (unloaded: fbdev,vesa)
           Resolution: 1920x1080@60.00hz, 1920x1080@60.00hz
           GLX Renderer: Mesa DRI Intel Kabylake GT2 GLX Version: 3.0 Mesa 13.0.6
Network:   Card: Intel Ethernet Connection (2) I219-V driver: e1000e
Drives:    HDD Total Size: 13026.6GB (42.0% used)
RAID:      Devices: 1: /dev/md1 2: /dev/md0
Info:      Processes: 355 Uptime: 11 days Memory: 21198.3/32043.3MB Client: Shell (bash) inxi: 2.3.5

Environment

Configuring vim as your editor

Sometimes all you need is:

$ export EDITOR=/usr/bin/vim

Which works for svn, for example. Add it to your ~/.profile file to have it set for all login sessions.

Other times you need to run

# update-alternatives --config editor

And then select vim from the list. This is what you do to configure your visudo editor.

Configuring your locale

$ sudo /usr/sbin/locale-gen en_AU.UTF-8
$ sudo /usr/sbin/update-locale LANG=en_AU.UTF-8

User and group management

Adding a user

To add a new user on a linux system:

# useradd username
# passwd username

To have the home directory created from '/etc/skel' use the 'adduser' script instead:

# adduser username

Adding a user to a group

To add an existing user to an existing group:

# gpasswd -a username group

e.g. to add user 'jj5' to the 'sudo' group:

# gpasswd -a jj5 sudo

Alternatively you can use adduser, passing the username and group:

# adduser username group

e.g. to add user 'sclaughl' to the 'staff' group:

# adduser sclaughl staff

Disabling a user account

You can disable a user account with:

# passwd -l user

Note: that's a lower-case L, not a one.

Enabling a disabled user account

To can re-enable a locked user account with:

# passwd -u user

Finding which user you are logged in as

To determine which user you are running as enter the command:

$ whoami

Finding which groups you are a member of

To find which groups you are a member of:

$ groups

or

$ groups username

Where 'username' is the username of the user you are querying, e.g.:

$ groups jj5

Finding who else is logged in to the system

To see who else is logged in,

$ who

Running a command as a particular user

To run "svn update" as the user www-data:

$ sudo su -c "svn update" www-data

Memory management

Checking available memory

To report memory statistics in megabytes:

$ free -m

Video/display management

Viewing EDID data for attached monitor

To view EDID data for an attached monitor (requires the edid-decode package):

$ cd /sys/class/drm
$ ls
$ cd card0-HDMI-A-1
$ edid-decode edid

Process management

Using 'top' for dynamic resource usage reporting

To run top:

$ top

See 15 Practical Linux Top Command Examples for some hints on usage.

To see usage for a specific user run e.g.:

$ top -u jj5

To see full command-line press 'c'.

Changing memory reporting in 'top'

To run top:

$ top

Press 'E' to switch between memory units (KiB, MiB, GiB, etc.)

Press 'M' to sort by memory utilisation.

Press 'm' to switch between various display modes.

Disk management

Listing disk drives

# fdisk -l

(That's an L for "list")

Checking available disk space

$ df -h

Getting disk information

# lsblk

And

# cat /proc/partitions

Or the Grand Daddy of them all:

# lshw -class disk

(Requires the lshw package.)

Getting partition UUID and file-system type

# blkid

Checking for SSD vs magnetic disk

# cat /sys/block/sda/queue/rotational

Will be 0 for SSD and 1 for magnetic.

Monitoring disk I/O

There's an app for that! iotop.

Using iotop, top for disks

# iotop -oPa

File management

Listing only directories

$ ls -l | egrep '^d'

Listing only files

$ ls -l | egrep -v '^d'

Listing hidden files

$ ls -al .[!.]*

Creating a symbolic link

$ ln -s /path/to/target link-name

Creating a hard-link

$ ln /path/to/target file-name

Changing the owner of a file

$ chown user:group <files>

E.g.

$ chown jj5:staff README
$ chown root:root *

To apply recursively into sub-directories use -R,

$ chown -R root:root /etc/*

Changing file permissions

Object codes
User Group Other
u g o
Permission codes
Read Write Exectue
r w x
4 2 1
Numeric codes
0 None
1 Execute
2 Write
3 Write, Execute
4 Read
5 Read, Execute
6 Read, Write
7 Read, Write, Execute

See Numeric Mode in Action.

$ chmod <user numeric code><group numeric code><other numeric code> <files>
$ chmod <object codes>+|-<permission codes> <files>

E.g.

$ chmod 600 my-private-file
$ chmod go-rwx my-private-file
$ chmod u+rw my-private-file
$ chmod +x my-script

Updating config files

If you get given a new config file called new.conf and you want to integrate it with your old config file old.conf then:

$ cp old.conf updated.conf
$ merge -A updated.conf new.conf old.conf

Then go through and edit updated.conf resolving all the merge errors, picking and choosing what to update and what to keep. When you're done copy updated.conf to old.conf so it becomes the new config file.

The merge program is a part of the RCS package. If you don't have it:

$ sudo apt-get install rcs

Listing open files

Use lsof to list open files. E.g.:

# lsof

See man lsof for options.

List permissions on a whole directory path

E.g.:

$ namei -om /home/jj5/workspace

Outputs:

f: /home/jj5/workspace/
 drwxr-xr-x root root /
 drwxr-xr-x root root home
 drwxr-xr-x jj5  jj5  jj5
 drwxr-xr-x jj5  jj5  workspace

Counting non-blank lines in a file

E.g.:

$ cat foo.c | sed '/^\s*$/d' | wc -l

Cloning one directory to another with rsync

E.g.:

rsync --stats --human-readable --recursive --del --force --times --links --hard-links --executability --numeric-ids --owner --group --perms --sparse /data/source/ /data/target/

Symbolic-link management

== Data used by sym-linked files:

This will de-reference the sym-links in the current directory and tell you how much data the files pointed to by the sym-links are using:

jj5@tact:/data/backup/unity/latest$ du -hD * | sort -h

File searching

Finding a file with a particular name

$ find -iname "*some-part-of-the-file-name*"

Will start searching from the current directory, so maybe

$ cd /

first. For a case-sensitive search:

$ find -name "*eXaCT CaSE*"

Finding a file with particular content

To search in /etc/ for a file with particular content:

$ grep -R "search-string" /etc/*

To search the current directory for *.cs files containing the word "Up":

$ find . -name '*.cs' -exec grep --color=auto -H Up {} \;

Finding a list of files with particular content

E.g. to find all the files with the word 'creativity':

$ grep -R creativity . | sed 's/:/ /' | awk '{ print $1 }' | sort | uniq

Using the locate command to find files

$ locate part-of-filename

E.g.

$ locate texvc

Updating locate command's database

# updatedb

Job control

Stopping a running process

Press Ctrl+Z to stop a running process.

Listing current jobs and their status

$ jobs

Resuming a stopped job in the backgroud

To resume a stopped process in the background

$ bg %1

where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').

Resuming a stopped job in the foreground

To resume a stopped process in the foreground

$ fg %1

where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').

Killing a stopped job

To kill a job

$ kill %1

where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').

Periodically run a program and watch its output

$ watch /your/command

Debian/Ubuntu package management

Also see Where "is" it? on the Debian Wiki.

configuring debconf

# dpkg-reconfigure debconf 

Set priority to low to get asked detailed questions.

Showing list of installed packages

# dpkg --get-selections

Searching for installed package

# dpkg --get-selections | grep package-name

or

# aptitude search package-name

Showing which files are installed as part of a package

# dpkg -L package-name

Installing a package

# apt-get install package-name

Uninstalling a package

# apt-get remove package-name

Showing system architecture

$ dpkg --print-architecture

Showing which package a file belongs to

$ which echo
/bin/echo
$ dpkg -S /bin/echo
coreutils: /bin/echo
$ dpkg -l | grep coreutils
ii  coreutils                         6.10-6                   The GNU core utilities

Showing package information

$ apt-cache showpkg coreutils

Or for even more information:

$ apt-cache show coreutils

List all installed packages with package version info

dpkg-query -l

Reporting which version of a package is installed

$ dpkg -l | grep package-name

E.g.:

root@hope:~/letsencrypt# dpkg -l | grep augeas
ii  augeas-lenses                   0.7.0-1ubuntu1                 Set of lenses needed by libaugeas0 to parse 
ii  libaugeas0                      0.7.0-1ubuntu1                 The augeas configuration editing library and

Comprehensive upgrade

Try the following:

# apt-get update
# apt-get dist-upgrade
# apt-get autoremove
# apt-get remove $(deborphan)
# update-flashplugin-nonfree --install

Networking

net-tools vs iproute2

The older 'net-tools' package has been replaced with 'iproute2' e.g. in stretch.

legacy net-tools commands iproute2 replacement commands
arp ip n (ip neighbor)
ifconfig ip a (ip addr), ip link, ip -s (ip -stats)
iptunnel ip tunnel
iwconfig iw
nameif ip link, ifrename
netstat ss, ip route (for netstat-r), ip -s link (for netstat -i), ip maddr (for netstat-g)
route ip r (ip route)

Restart networking

For servers:

# service networking restart

For desktops:

# service network-manager restart

Pinging with particular packet size

$ ping -M do -s <packet size in bytes> <host>

E.g.

$ ping -M do -s 1400 charity.progclub.org

Setting MSS for a particular IP address on a particular interface

# ip route add <host> dev <interface> advmss <packet size>

E.g.

# ip route add 10.0.0.1 dev eth0 advmss 1400

Dropping configured MMS for a particular IP address

# ip route flush <host>

E.g.

# ip route flush 10.0.0.1

Listing open ports and socket information

Including which process is listening on which port.

# netstat -tulpn

Or use the 'ss' command:

# ss -s
# ss -l
# ss -pl
# ss -o state established '( dport = :smtp or sport = :smtp )'

Listing open IPv4 connections

# lsof -Pnl +M -i4

You might need to install the lsof package:

# apt-get install lsof

Query for DNS MX record

$ nslookup
> server 127.0.0.1
> set q=mx
> mail.blackbrick.com

Query for DNS SOA record

$ dig @ns2.staticmagic.net -t SOA staticmagic.net

Using nmap to list open ports on remote host

To check the 1,000 most common ports:

# nmap server.example.com

Or for a specific port range (e.g. 101 to 102):

# nmap -p 101-102 server.example.com

Or for all ports (1 to 65,535):

# nmap -p- server.example.com

Network monitoring

See here for details. Basically:

  1. Overall bandwidth: nload, bmon, slurm, bwm-ng, cbm, speedometer, netload
  2. Overall bandwidth (batch style output): vnstat, ifstat, dstat, collectl
  3. Bandwidth per socket connection: iftop, iptraf, tcptrack, pktstat, netwatch, trafshow
  4. Bandwidth per process: nethogs

Links

IPTables

Applying firewall rules

For configuration info see this article.

$ sudo vim /etc/iptables.test.rules
$ sudo /sbin/iptables -F
$ sudo /sbin/iptables-restore < /etc/iptables.test.rules
$ sudo iptables -L
$ sudo -s
# iptables-save > /etc/iptables.up.rules
# exit

Bind9

Viewing Bind9 querylog

$ sudo rndc querylog
$ tail -f /var/log/syslog

IPSec

Disabling IPSec

# setkey -FP

OpenSSL

Debugging IMAPS with OpenSSL

# openssl s_client -connect localhost:993
> a1 LOGIN username@host password
> a2 LOGOUT

Debugging HTTPS with OpenSSL

$ openssl s_client -connect www.example.com:443
GET /example.html HTTP/1.1
host: www.example.com

Links

Pluggable Authentication Modules (PAM)

Links

SSH

Configuring SSH key login

On the client machine generate a key-pair (if necessary, check for existing ~/.ssh/id_rsa.pub):

$ ssh-keygen -t rsa

Copy the public key from the client to the server:

$ scp ~/.ssh/id_rsa.pub user@example.org:

Configure the authorized keys on the server:

$ ssh user@example.org
$ mkdir ~/.ssh
$ chmod go-w .ssh
$ cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
$ chmod 600 ~/.ssh/authorized_keys
$ rm ~/id_rsa.pub

Tunneling over SSH

For example, connecting a remote MySQL server to the localhost:

$ ssh -L 3306:localhost:3306 jselliot@ssh.progsoc.org

If the machine you want to connect to is not the localhost of the machine you're ssh'ing to,

 $ ssh -L 3306:muspell.progsoc.uts.edu.au:3306 ssh.progsoc.uts.edu.au

The -L stanza is localport:remotehost:remoteport where localport is a port on your machine, forwarded to remoteport on remotehost.

Tunneling over SSH with PuTTY

See Connecting to the MySQL database remotely (via an SSH Tunnel)

  • run putty.exe
  • Connection -> SSH -> Tunnels
    • Port forwarding: source port to 3306
    • destination: 127.0.0.1:3306
    • check Local
    • click Add

Enabling verbose SSH logging

To see what's going on with your ssh connections,

$ ssh -v user@host

Or

$ ssh -vv user@host

Unlocking SSH key for session

jj5@orac:~/.config/autostart$ cat ssh-add.desktop 
[Desktop Entry]
Type=Application
Name=ssh-add
Comment=Adds my private key to my session.
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'

Links

Standard IO

cat EOF

$ cat > output <<EOF
> text
> EOF
$ cat output
text

Script

Creating a session log with script

$ script -t 2> timing

The session log is in the file 'typescript' and the timing data is in 'timing'.

Replaying a scripted session

$ scriptreplay timing

Uses the default file 'typescript' and the 'timing' file as specified.

Screen

Creating a new screen or reconnecting to a detached screen

$ screen -R

Detaching a screen

$ screen -D

Reconnecting to screen

$ screen -D
$ screen -R

I have a script in ~/bin/reconnect like so,

#!/bin/bash
screen -D
screen -R

This will detach your last screen, and reconnect it on the current terminal.

Scrolling in screen

See How to scroll in GNU Screen. Basically press Ctrl+A ESC then use Page Up and Page Down. Press ESC again to exit copy mode. As usual you can use Ctrl+[ in place of ESC.

Vim

First, why Vim?

Read Why, oh WHY, do those #?@! nutheads use vi?

Visual modes

Use 'v' for visual mode, 'V' for visual line mode and Ctrl+V for visual block mode.

Configuring spaces instead of tabs

I use two spaces instead of tabs. To configure, edit your .vimrc file:

$ vim ~/.vimrc

and include the following lines:

set tabstop=2
set shiftwidth=2
set expandtab

Configuring syntax highlighting

See here.

Use:

:syntax on

to turn on syntax highlighting.

Use:

:syntax off

to turn off syntax highlighting.

To always use syntax highlighting:

$ vim ~/.vimrc

and add:

syntax on

To get a list of supported colour schemes open vim and type:

:colorscheme[space][Ctrl+D]

To always use a particular colorscheme edit ~/.vimrc and add (for example):

colorscheme desert

Inserting a TAB character when expandtab is on

The problem here is that you have configured vim to insert spaces, but for a particular file (e.g. a Makefile) you need to insert a character.

Press Ctrl+V TAB to insert a literal tab character.

Or you can disable tab expansion altogether with:

:set expandtab!

Changing 2 space indent to 4 space indent (e.g. for python files)

:%s/^\s*/&&/g

For more information see here.

Recording and replaying a macro

To record a macro press 'q' and then a number between 1 and 9. E.g. press "q1". The macro is now recording. When you've finished issuing your commands press 'q' again to finish recording. To replay a macro press '@' followed by the number of the macro. That is, if you pressed "q1" to record the macro, press "@1" to replay the macro. To replay the last macro again press "@@".

Deleting to end of line

d$

Deleting to beginning of line

d^

Finding text

To search forward for "text":

/text

To search backward for "text":

?text

To repeat the last search in a forward direction press 'n', or to search again backwards press 'N'.

Finding and replacing text

To replace the first instance of "search" on the current line with "destroy":

:s/search/destroy/

To replace all instances of "search" on the current line with "destroy":

:s/search/destroy/g

To replace all instances of "search" on lines 13 to 37 with "destroy":

:13,37 s/search/destroy/g

To replace all instances of "search" in the entire file with "destroy":

:%s/search/destroy/g

Changing DOS/Windows line-endings (CRLF) to Unix line-endings

To set the line-ending to Unix line endings run the command:

:setlocal ff=unix

More information on managing file formats available here.

Disabling auto-indent etc. to paste from clipboard

To disable smart indenting when you're going to paste in text:

:set paste

To turn it off again:

:set nopaste

There's more info in this article: Toggle auto-indenting for code paste

Positioning windows

Use -o for horizontal split, e.g.:

vim -o a.txt b.txt

Use -O for vertical split, e.g.:

vim -o a.txt b.txt

Use ^W to navigate windows then use directional keys h, j, k, l, etc.

Use ^W and < or > to resize windows.

To indent a block of text in Vim

Use the > command. E.g. to indent five lines:

5 > >

Press . (dot) to keep indenting.

Or inside a block (e.g. curly brace, HTML/XML element, etc.) you can put your cursor in the element on on the curly brace and then:

> %

See here for more.

Open a file in a new window/tab

To open a file on the left hand side:

:vert new filename.ext

Note: ':vnew filename.ext' and ':vsp filename.ext' also work.

To open a file at the top:

:new filename.ext

See here for more.

Explore files in Vim

Enter:

:Explore

Switch between Vim tabs

Use gt and gT.

Switch between Vim windows

To toggle between open windows use:

Ctrl+W W

To move in a direction use:

Ctrl+W h/j/k/l

See here for more.

Insert block comment in Vim

See here.

So it's:

  1. Ctrl+V (Note: not Shift+V!)
  2. Up/Down to select rows
  3. Shift+I
  4. Enter your text, e.g. '#' or '//'
  5. Ctrl+[ (or 'Esc')

Navigate to matching tag

To navigate to the matching beginning or end tag use '%'.

You can also use e.g. '[{' to match the previous '{', or e.g. '])' to match the next ')'.

Auto-format HTML tags

Stolen from here.

  1. first join all the lines - ggVGgJ
  2. Now break tags to new lines - :%s/>\s*</>\r</g
  3. Now set filetype - :set ft=html (you can do this before too)
  4. Now Indent - ggVG=

Links

Write

Talking to other users on the system

write is a unix command for talking to other users on the system. To use write:

1. SSH to <username>@<hostname> and login with your username and password.

2. Issue the following command to find out who is logged onto the system:

$ who

3. Issue the following command to talk to a specific user:

$ write <username>

4. Enter the message you'd like to send the user, followed by Ctrl+C to send. Press Ctrl+D to cancel.

Date

Reporting the time on the server

$ date

Reporting UTC time

$ date --utc

Getting the date in yyyy-MM-dd-hhmmss format

$ date="`date +%F-%H%M%S`"

Getting the year in four digits

$ year="`date +%Y`"

Getting the month in two digits

$ month="`date +%m`"

Getting the day of the month in two digits

$ day="`date +%d`"

Getting yesterday's date

$ date --date='1 day ago' +%Y-%m-%d

Converting Unix time (seconds since epoch)

For timestamp '1501370200':

$ date -d @1501370200 +%F-%H%M%S

Running timedatectl from systemd

There's a new command bundled with systmed:

# timedatectl

It reports on (and controls) how the system time is configured.

MySQL

Run mysql without authentication/authorisation

# service mysql stop
# mysqld_safe --skip-grant-tables &

Then you can connect without a password, e.g.:

# mysql -u root mysql

To stop the unauthenticated service:

# mysqladmin shutdown

Then restart a normal service:

# service mysql start

Logging all database queries

# vim /etc/mysql/my.cnf

In the [mysqld] section add:

log=/tmp/mysql.log

Then:

# service mysql restart

Watch the log with:

# tail -f /tmp/mysql.log

Dumping a MySQL database

You can dump the database into a file using:

$ mysqldump -h hostname -u user --password=password databasename > filename

Loading a MySQL database from a dump file

You can create a database using:

$ echo create database databasename | mysql -h hostname -u user -p

You can restore a database using:

$ mysql -h hostname -u user --password=password databasename < filename

Creating a MySQL user

# mysql -h localhost -u root --password=<password>
mysql> create user 'username'@'localhost' identified by '<password>';

Granting all MySQL user permissions

# mysql -h localhost -u root --password=<password>
mysql> grant all privileges on dbname.* to user@host;

Select domain name from email address

SELECT SUBSTR( email, INSTR( email, '@' ) + 1 )

Check if MySQL connection is encrypted with TLS/SSL

Check the SSL version in use:

show status like 'Ssl_version';

Or check the cipher in use:

show status like 'Ssl_cipher';

Apache

Maintaining .htaccess passwords

To add or modify the password for a user:

$ htpasswd /etc/apache2/passwd username

Configuring PHP session timeout in .htaccess

For a session timeout of 9 hours:

php_value session.cookie_lifetime 32400
php_value session.gc_maxlifetime 32400

Disabling PHP magic quotes in .htaccess

php_flag magic_quotes_gpc Off

Requiring HTTP Auth in .htaccess

AuthType Basic
AuthName "Speak Friend And Enter"
AuthUserFile /home/jj5/.htpasswd
Require valid-user

Restarting Apache

The hard way

$ sudo /etc/init.d/apache2 restart

The graceful way (avoids dropping active connections)

$ sudo apache2ctl graceful

Allowing directory browsing

To show directory index pages, in the apache config file:

<Directory /var/www/data>
  Options Indexes
</Directory>

C

Locating memset function

The memset function is in <string.h> as described in this article Using memset(), memcpy(), and memmove() in C

Links

PHP

Including a file relative to the including file

require_once( dirname( __FILE__ ) . '/relative/path/to.php' );

Enabling error reporting

error_reporting( E_ALL | E_STRICT );
ini_set( 'display_errors', 'On' );

Setting an error handler

set_error_handler( "error_handler", E_ALL | E_STRICT );
function error_handler( $error_code, $error_message, $error_file, $error_line, $error_context ) {
  // ...
}

Disable HTML content in var_dump

ini_set( 'html_errors', 'off' );

BASH scripting

For a primer on bash scripting see TFM: Erotic Fantasy: /bin/sh Programming.

Telling a script to run in bash

The first line of the file should be:

#!/bin/bash

Checking if a command-line argument was passed in

if [ -n "$1" ]; then
  echo "Missing parameter 1.";
  exit 1;
fi

Checking if a command-line argument was not passed in

if [ "$1" = "" ]; then
  echo "Missing parameter 1.";
  exit 1;
fi

Or:

if [ -z "$1" ]; then
  echo "Missing parameter 1.";
  exit 1;
fi

Checking command exit status

cd /my/path
if [ "$?" -ne "0" ]; then
  echo "Cannot change dir.";
  exit 1;
fi

Checking if a file does/doesn't exist

Check if file exists:

if [ -f "/my/file" ]; then
  cat /my/file
fi

Check if file doesn't exist:

if [ ! -f "/my/file" ]; then
  touch /my/file
fi

Checking if a directory does/doesn't exist

Check if directory exists:

if [ -d "/my/dir" ]; then
  rmdir /my/dir
fi

Check if directory doesn't exist:

if [ ! -d "/my/dir" ]; then
  mkdir /my/dir
fi

Deleting old backups

To keep only the latest five backups:

find . -maxdepth 1 -type f -printf '%T@ %p\0' | sort -r -z -n | awk 'BEGIN { RS="\0"; ORS="\0"; FS="" } NR > 5 { sub("^[0-9]*(.[0-9]*)? ", ""); print }' | xargs -0 rm -f

This script stolen from stackoverflow.

Requires GNU find for -printf, GNU sort for -z, GNU awk for "\0" and GNU xargs for -0, but handles files with embedded newlines or spaces.

Changing into the script's directory

cd "`dirname $0`"

Getting the absolute path of a relative path

readlink -f ./some/path

Creating a temp directory

dir=`mktemp -d` && cd $dir

Reading secret input from stdin

You can read a secret, such as a password, like this:

echo -n "Enter passphrase: "
stty -echo
read passphrase;
stty echo
echo ""

After running the above the secret will be in the $passphrase environment variable.

String replacements in bash

See the string manipulation doco. Basically, to replace first occurrence:

result=${var/find/replace}

To replace all occurrences:

result=${var//find/replace}

A practical example, get an ISO date and turn it into a path:

date="$(date +%Y-%m-%d)"
work_dir=${date//-//}

Sending a HEREDOC to a file

cat << EOF > /tmp/yourfilehere
These contents will be written to the file.
        This line is indented.
EOF

Bash case/switch statement

See using case statements, e.g.:

case $space in
[1-6]*)
  Message="All is quiet."
  ;;
[7-8]*)
  Message="Start thinking about cleaning out some stuff.  There's a partition that is $space % full."
  ;;
9[1-8])
  Message="Better hurry with that new disk...  One partition is $space % full."
  ;;
99)
  Message="I'm drowning here!  There's a partition at $space %!"
  ;;
*)
  Message="I seem to be running with an nonexistent amount of disk space..."
  ;;
esac

Using dotglob shopt to match dot-files

To enable dot-file matching in globs, set the dotglob shell option:

$ shopt -s dotglob

Sed

Find and replace with sed

To update the current file use '-i'. E.g.:

sed -i 's/search-text/replace-text/' file

Awk

Listing IP addresses in an Apache web log

awk '/GET \/path\/for\/url/ { print $1 }' /var/log/apache2/access.log | sort | uniq

Printing space-separated field

echo 'no no yes no' | awk '{print $3}'

Printing delimited field

echo 'no:no:yes:no' | awk -F ':' '{print $3}'

Subversion

Setting svn:externals from the command-line

See here.

To set an svn:externals from the command-line:

svn propset svn:externals 'rdfind-php https://www.progclub.org/svn/pcrepo/rdfind.php/branches/0.1' .
svn ci -m 'Adding svn:externals for rdfind-php...'
svn up

Or to use a file:

svn propset svn:externals -F svn.externals .

Setting svn:ignore from the command line

See here.

$ svn propset svn:ignore [file|folder] [path]

Or use a file and apply recursively:

$ svn propset svn:ignore -RF ./svn-ignore-list.txt .

Git

Showing status of working copy

git status

Showing repo history

git log

Showing remote repositories (including 'origin')

git remote -v

Handy git aliases

Save these to your ~/.gitconfig file.

For a nicer view of history than standard 'git log' -- colourful, one-line-per commit, etc:

 graph = !git log --all --graph --color --abbrev-commit --pretty=oneline

To show only the files that have changed, rather than the full line-by-line content:

 dif   = !git diff --name-status

IRC

Instructing ChanServ to op an admin

/msg ChanServ op #channel user

E.g.

/msg ChanServ op #gnurc jj5

Sub 'op' for 'deop' to remove op privilege.

C++

C++ books

Books I want

Books I own

Books I'm not reading

Books I've read

C++ blogs/articles

C++ performance tips

  • ++c can be faster than c++.
  • use const for everything that you possibly can.
  • use 'inline' when you need to define a function in a header. Typically only do that if it's small and the increase in code size from inlining is worth the cost to avoid the cost of a function call. For anything except trivially small functions you'll probably need to profile to know if it's worth it.
  • don't use registers.
  • const rarely affects performance.
  • debunking a number of C++ myths that won't die.
  • std::sort<> is typically faster than qsort() because it can avoid indirection at runtime.
  • if you've got parallelisation going on, you may be able to just replace a std::for_each with a parallel equivalent.
  • read about performance cost of RTTI (Run Time Type Information) and how to disable it
  • don't use dynamic_cast because it is slow (typeid is faster but still relies on RTTI)
  • prefer unique_ptr to shared_ptr when possible. unique_ptr has less overhead.
  • Which is better, static or dynamic linking?
  • Integer vs Floating-Point performance

systemd

systemd is an init system used in most Linux distributions to bootstrap the user space and manage all processes subsequently.

Following a service log

e.g. for bind9:

# journalctl -f -u bind9

or for everything:

# journalctl -f

System status

To see spawned services hierarchy:

# systemctl status

Or for a specific service e.g.:

# systemctl status networking

SaltStack

Running a command on specified minions

salt 'host' cmd.run 'update-locale'

Running a command on all minions

salt '*' cmd.run 'update-locale'

Listing active jobs

salt-run jobs.active

Listing available grains

salt 'example' grains.items

Listing available pillar

salt 'example' pillar.items

Reporting a grain value

e.g. for the 'mem_total' grain:

salt '*' grains.item mem_total

KDE

Running user login script (X11/XOrg/XWindows)

A way to run user login scripts which works for KDE Plasma (and apparently other X.Org Server X Window System environments) is to create a *.desktop file in ~/.config/autostart/. For example I have a ~/.config/autostart/ssh-add.desktop file with the following contents to register my SSH key in the SSH Agent:

[Desktop Entry]
Type=Application
Name=ssh-add
Comment=Adds my private key to my session.
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'