Difference between revisions of "John's Linux page"

From ProgClub
Jump to: navigation, search
 
(31 intermediate revisions by the same user not shown)
Line 8: Line 8:
  
 
Quick jump to: [[#NetBeans|NetBeans]].
 
Quick jump to: [[#NetBeans|NetBeans]].
 +
 +
= References =
 +
 +
== Command-line ==
 +
 +
See [https://zaiste.net/posts/shell-commands-rust/ Shell Commands I Wish I Knew Earlier] for some interesting options.
  
 
= System =
 
= System =
 +
 +
== Reporting system specifications from the command-line ==
 +
 +
Try any of these:
 +
 +
# neofetch
 +
# inxi
 +
# hwinfo --short
 +
 +
You may need to install the relevant package.
  
 
== Determining which Debian/Ubuntu release your are running ==
 
== Determining which Debian/Ubuntu release your are running ==
Line 30: Line 46:
  
 
  $ uname -a
 
  $ uname -a
 +
 +
== Determining which Linux kernel you are running ==
 +
 +
$ uname -r
  
 
== Configuring system swappiness ==
 
== Configuring system swappiness ==
Line 46: Line 66:
  
 
  # lshw
 
  # lshw
 
And for CPUs:
 
 
# lscpu
 
  
 
And for PCI devices:
 
And for PCI devices:
Line 83: Line 99:
 
  Info:      Processes: 355 Uptime: 11 days Memory: 21198.3/32043.3MB Client: Shell (bash) inxi: 2.3.5
 
  Info:      Processes: 355 Uptime: 11 days Memory: 21198.3/32043.3MB Client: Shell (bash) inxi: 2.3.5
  
== Viewing syslog and other logs with KSystemLog ==
+
=== Motherboard info ===
 +
 
 +
# dmidecode -t 2
 +
 
 +
=== CPU info ===
 +
 
 +
# lscpu
 +
 
 +
or:
 +
 
 +
# cat /proc/cpuinfo
  
Run the 'KSystemLog' program under KDE for a handy log viewer GUI.
+
=== RAM info ===
  
= Power =
+
# dmidecode --type memory
  
== Reporting on PowerShield DEFENDER UPS status ==
+
=== PCI info ===
  
To see the status of the [https://powershield.com.au/powersheild_product/defender/ PowerShield DEFENDER] systems on John's LAN:
+
# lspci -v
  
$ upsc defender
+
=== Drive info ===
  
E.g.:
+
# cat /proc/partitions
  
jj5@orac:~$ upsc defender
+
and:
Init SSL without certificate database
 
battery.charge: 100
 
battery.voltage: 27.40
 
battery.voltage.high: 26.00
 
battery.voltage.low: 20.80
 
battery.voltage.nominal: 24.0
 
device.type: ups
 
driver.name: blazer_usb
 
driver.parameter.pollinterval: 2
 
driver.parameter.port: auto
 
driver.parameter.synchronous: no
 
driver.version: 2.7.4
 
driver.version.internal: 0.12
 
input.current.nominal: 5.0
 
input.frequency: 50.1
 
input.frequency.nominal: 50
 
input.voltage: 242.6
 
input.voltage.fault: 242.6
 
input.voltage.nominal: 240
 
output.voltage: 242.6
 
ups.beeper.status: disabled
 
ups.delay.shutdown: 30
 
ups.delay.start: 180
 
ups.load: 14
 
ups.productid: 5161
 
ups.status: OL
 
ups.type: offline / line interactive
 
ups.vendorid: 0665
 
  
== Run commands on PowerShield DEFENDER UPS batteries ==
+
# hdparm -I /dev/sda
  
You can run "instant commands" using the '''upscmd''' command.
+
and:
  
We use the 'beeper.toggle' instant command in our Salt Stack config to disable the beeper, see e.g.:
+
# smartctl --info /dev/sda
  
diligence:/srv/salt/conf/app/defender-1200.sls
+
You can check if a drive is SSD or not with:
  
To see "instant commands" supported by the PowerShield DEFENDER:
+
# cat /sys/block/sde/queue/rotational
  
  $ upscmd -l defender
+
  0=SSD
 +
1=HDD
  
E.g.:
+
== Viewing syslog and other logs with KSystemLog ==
  
jj5@orac:~$ upscmd -l defender
+
Run the 'KSystemLog' program under KDE for a handy log viewer GUI.
Instant commands supported on UPS [defender]:
 
 
beeper.toggle - Toggle the UPS beeper
 
load.off - Turn off the load immediately
 
load.on - Turn on the load immediately
 
shutdown.return - Turn off the load and return when power is back
 
shutdown.stayoff - Turn off the load and remain off
 
shutdown.stop - Stop a shutdown in progress
 
test.battery.start - Start a battery test
 
test.battery.start.deep - Start a deep battery test
 
test.battery.start.quick - Start a quick battery test
 
test.battery.stop - Stop the battery test
 
  
= Environment =
+
= CPU =
  
== Configuring vim as your editor ==
+
== Monitoring CPU clock speed ==
  
Sometimes all you need is:
+
Try something like this:
  
  $ export EDITOR=/usr/bin/vim
+
  $ watch 'grep MHz /proc/cpuinfo | awk "{ print \$4 }" | sort -n'
  
Which works for svn, for example. Add it to your ~/.profile file to have it set for all login sessions.
+
= Power =
  
Other times you need to run
+
== Reporting on PowerShield DEFENDER UPS status ==
  
# update-alternatives --config editor
+
Before running `upsc` ensure service is running:
  
And then select vim from the list. This is what you do to configure your visudo editor.
+
# upsdrvctl start
  
== Configuring your locale ==
+
To see the status of the [https://powershield.com.au/powersheild_product/defender/ PowerShield DEFENDER] systems on John's LAN:
  
  $ sudo /usr/sbin/locale-gen en_AU.UTF-8
+
  $ upsc defender
$ sudo /usr/sbin/update-locale LANG=en_AU.UTF-8
 
  
= User and group management =
+
E.g.:
  
== Adding a user ==
+
jj5@orac:~$ upsc defender
 +
Init SSL without certificate database
 +
battery.charge: 100
 +
battery.voltage: 27.40
 +
battery.voltage.high: 26.00
 +
battery.voltage.low: 20.80
 +
battery.voltage.nominal: 24.0
 +
device.type: ups
 +
driver.name: blazer_usb
 +
driver.parameter.pollinterval: 2
 +
driver.parameter.port: auto
 +
driver.parameter.synchronous: no
 +
driver.version: 2.7.4
 +
driver.version.internal: 0.12
 +
input.current.nominal: 5.0
 +
input.frequency: 50.1
 +
input.frequency.nominal: 50
 +
input.voltage: 242.6
 +
input.voltage.fault: 242.6
 +
input.voltage.nominal: 240
 +
output.voltage: 242.6
 +
ups.beeper.status: disabled
 +
ups.delay.shutdown: 30
 +
ups.delay.start: 180
 +
ups.load: 14
 +
ups.productid: 5161
 +
ups.status: OL
 +
ups.type: offline / line interactive
 +
ups.vendorid: 0665
  
To add a new user on a linux system:
+
== Run commands on PowerShield DEFENDER UPS batteries ==
  
# useradd username
+
You can run "instant commands" using the '''upscmd''' command.
# passwd username
 
  
To have the home directory created from '/etc/skel' use the 'adduser' script instead:
+
We use the 'beeper.toggle' instant command in our Salt Stack config to disable the beeper, see e.g.:
  
  # adduser username
+
  diligence:/srv/salt/conf/app/defender-1200.sls
  
== Adding a user to a group ==
+
To see "instant commands" supported by the PowerShield DEFENDER:
  
To add an existing user to an existing group:
+
$ upscmd -l defender
  
# gpasswd -a username group
+
E.g.:
  
e.g. to add user 'jj5' to the 'sudo' group:
+
jj5@orac:~$ upscmd -l defender
 +
Instant commands supported on UPS [defender]:
 +
 +
beeper.toggle - Toggle the UPS beeper
 +
load.off - Turn off the load immediately
 +
load.on - Turn on the load immediately
 +
shutdown.return - Turn off the load and return when power is back
 +
shutdown.stayoff - Turn off the load and remain off
 +
shutdown.stop - Stop a shutdown in progress
 +
test.battery.start - Start a battery test
 +
test.battery.start.deep - Start a deep battery test
 +
test.battery.start.quick - Start a quick battery test
 +
test.battery.stop - Stop the battery test
  
# gpasswd -a jj5 sudo
+
= Service management =
  
Alternatively you can use adduser, passing the username and group:
+
== Report running services ==
  
  # adduser username group
+
  # service --status-all
  
e.g. to add user 'sclaughl' to the 'staff' group:
+
= Environment =
  
# adduser sclaughl staff
+
== Configuring vim as your editor ==
  
== Disabling a user account ==
+
Sometimes all you need is:
  
You can disable a user account with:
+
$ export EDITOR=/usr/bin/vim
  
# passwd -l user
+
Which works for svn, for example. Add it to your ~/.profile file to have it set for all login sessions.
  
Note: that's a lower-case L, not a one.
+
Other times you need to run
  
== Enabling a disabled user account ==
+
# update-alternatives --config editor
  
To can re-enable a locked user account with:
+
And then select vim from the list. This is what you do to configure your visudo editor.
  
# passwd -u user
+
== Configuring your locale ==
  
== Finding which user you are logged in as ==
+
$ sudo /usr/sbin/locale-gen en_AU.UTF-8
 +
$ sudo /usr/sbin/update-locale LANG=en_AU.UTF-8
  
To determine which user you are running as enter the command:
+
= User and group management =
  
$ whoami
+
== Adding a user ==
  
== Finding which groups you are a member of ==
+
To add a new user on a linux system:
  
To find which groups you are a member of:
+
# useradd username
 +
# passwd username
  
$ groups
+
To have the home directory created from '/etc/skel' use the 'adduser' script instead:
  
or
+
# adduser username
  
$ groups username
+
== Adding a user to a group ==
  
Where 'username' is the username of the user you are querying, e.g.:
+
To add an existing user to an existing group:
  
  $ groups jj5
+
  # gpasswd -a username group
  
== Finding who else is logged in to the system ==
+
e.g. to add user 'jj5' to the 'sudo' group:
  
To see who else is logged in,
+
# gpasswd -a jj5 sudo
  
$ who
+
Alternatively you can use adduser, passing the username and group:
  
== Running a command as a particular user ==
+
# adduser username group
  
To run "svn update" as the user www-data:
+
e.g. to add user 'sclaughl' to the 'staff' group:
  
  $ sudo su -c "svn update" www-data
+
  # adduser sclaughl staff
  
== Reporting user and group info for the current user ==
+
== Disabling a user account ==
  
$ id
+
You can disable a user account with:
  
= Memory management =
+
# passwd -l user
  
== Checking available memory ==
+
Note: that's a lower-case L, not a one.
  
To report memory statistics in megabytes:
+
== Enabling a disabled user account ==
  
$ free -m
+
To can re-enable a locked user account with:
  
== Check for swap thrashing ==
+
# passwd -u user
  
Check your virtual memory status with vmstat:
+
== Finding which user you are logged in as ==
  
$ vmstat
+
To determine which user you are running as enter the command:
  
== Report memory type ==
+
$ whoami
  
Report on RAM DIMMs:
+
== Finding which groups you are a member of ==
  
# dmidecode --type 17
+
To find which groups you are a member of:
  
Report on RAM and CPU cache:
+
$ groups
  
# lshw -short -C memory
+
or
  
Or for more detail:
+
$ groups username
  
# lshw -C memory
+
Where 'username' is the username of the user you are querying, e.g.:
  
= Video/display management =
+
$ groups jj5
  
== Viewing EDID data for attached monitor ==
+
== Finding who else is logged in to the system ==
  
To view [https://en.wikipedia.org/wiki/Extended_Display_Identification_Data EDID] data for an attached monitor (requires the [https://packages.debian.org/stable/main/edid-decode edid-decode] package):
+
To see who else is logged in,
  
  $ cd /sys/class/drm
+
  $ who
$ ls
 
$ cd card0-HDMI-A-1
 
$ edid-decode edid
 
  
= Process management =
+
== Running a command as a particular user ==
  
== Using 'top' for dynamic resource usage reporting ==
+
To run "svn update" as the user www-data:
  
To run top:
+
$ sudo su -c "svn update" www-data
  
$ top
+
== Reporting user and group info for the current user ==
  
See [https://www.thegeekstuff.com/2010/01/15-practical-unix-linux-top-command-examples/ 15 Practical Linux Top Command Examples] for some hints on usage.
+
$ id
  
To see usage for a specific user run e.g.:
+
= Memory management =
  
$ top -u jj5
+
== Checking available memory ==
  
To see full command-line press 'c'.
+
To report memory statistics in megabytes:
  
When you're in 'top' you can:
+
$ free -m
  
* press '1' (one) to toggle CPU aggregation
+
== Check for swap thrashing ==
* press < and > to change the sort column
 
  
== Changing memory reporting in 'top' ==
+
Check your virtual memory status with vmstat:
  
To run top:
+
$ vmstat
  
$ top
+
== Report memory type ==
  
Press 'E' to switch between top memory units (KiB, MiB, GiB, etc.)
+
Report on RAM DIMMs:
  
Press 'e' to switch between bottom memory units (KiB, MiB, GiB, etc.)
+
# dmidecode --type 17
  
Press 'M' to sort by memory utilisation.
+
Report on RAM and CPU cache (including L1, L2, and L3):
  
Press 'm' to switch between various display modes.
+
# lshw -short -C memory
  
== Showing full command-line in 'top' ==
+
Or for more detail:
  
To see the full command-line for processes run with -c:
+
# lshw -C memory
  
$ top -c
+
= Video/display management =
  
== Listing all processes currently running which were started in your current shell session ==
+
== Viewing EDID data for attached monitor ==
  
$ ps -fl
+
To view [https://en.wikipedia.org/wiki/Extended_Display_Identification_Data EDID] data for an attached monitor (requires the [https://packages.debian.org/stable/main/edid-decode edid-decode] package):
  
== Killing specific processes ==
+
$ cd /sys/class/drm
 +
$ ls
 +
$ cd card0-HDMI-A-1
 +
$ edid-decode edid
  
# ps aux | grep -e "this\|that" | grep -v grep | tr -s " " | cut -d " " -f 2 | xargs kill -9
+
= Process management =
  
== Run a command for a specified time using timeout ==
+
== Using 'top' for dynamic resource usage reporting ==
  
$ timeout 3 ping jj5.net
+
To run top:
  
= Disk management =
+
$ top
  
== Creating a partition table ==
+
See [https://www.thegeekstuff.com/2010/01/15-practical-unix-linux-top-command-examples/ 15 Practical Linux Top Command Examples] for some hints on usage.
  
# parted /dev/xvdf
+
To see usage for a specific user run e.g.:
  
  mktable msdos
+
  $ top -u jj5
  
== Creating a partition ==
+
To see full command-line press 'c'.
  
# parted /dev/xvdf
+
When you're in 'top' you can:
  
u MiB
+
* press '1' (one) to toggle CPU aggregation
mkpart primary 1 100%
+
* press < and > to change the sort column
  
== Creating an ext4 file-system ==
+
== Changing memory reporting in 'top' ==
  
# mkfs.ext4 /dev/xvdf1
+
To run top:
  
== Listing disk drives ==
+
$ top
  
# fdisk -l
+
Press 'E' to switch between top memory units (KiB, MiB, GiB, etc.)
 +
 
 +
Press 'e' to switch between bottom memory units (KiB, MiB, GiB, etc.)
  
(That's an L for "list")
+
Press 'M' to sort by memory utilisation.
  
== Checking available disk space ==
+
Press 'm' to switch between various display modes.
  
$ df -h
+
== Showing full command-line in 'top' ==
  
== Getting disk information ==
+
To see the full command-line for processes run with -c:
  
  # lsblk
+
  $ top -c
  
And
+
== Listing all processes currently running which were started in your current shell session ==
  
  # cat /proc/partitions
+
  $ ps -fl
  
Or the Grand Daddy of them all:
+
== Killing specific processes ==
  
  # lshw -class disk
+
  # ps aux | grep -e "this\|that" | grep -v grep | tr -s " " | cut -d " " -f 2 | xargs kill -9
  
(Requires the lshw package.)
+
== Run a command for a specified time using timeout ==
  
== Getting partition UUID and file-system type ==
+
$ timeout 3 ping jj5.net
  
# blkid
+
= Disk management =
  
== Checking for SSD vs magnetic disk ==
+
== Power-off a hard drive ==
  
# cat /sys/block/sda/queue/rotational
+
For instance if it's a USB drive or in a mobile rack and you want to remove it.
  
Will be 0 for SSD and 1 for magnetic.
+
# udisksctl power-off -b /dev/sdi
  
== Monitoring a ZFS server ==
+
== Reporting ext4 file-systems mounted without noatime ==
  
So some commands I run to keep an eye on my new ZFS servers:
+
$ cat /proc/mounts | grep ext | grep -v noatime | sort
  
# top
+
== Creating a partition table ==
# iotop
 
# nethogs
 
# watch free -h
 
# watch slabtop -o
 
# slabtop
 
# watch cat /proc/meminfo
 
# perf top
 
# watch "df -h | grep -v -e tmpfs -e udev -e by-uuid"
 
# watch zpool iostat -v
 
# zpool iostat -v 2
 
# watch 'zpool list; echo; zfs list'
 
# watch zfs get compressratio -o all
 
# watch cat /proc/spl/kstat/zfs/arcstats
 
  
If you have a scrub or resilvering in progress you can report on progress with:
+
# parted /dev/xvdf
  
  # watch zpool status -v
+
  mktable msdos
  
You can poke about in internals, e.g.:
+
== Creating a partition ==
  
  # cat /proc/spl/kstat/zfs/arcstats
+
  # parted /dev/xvdf
  
  root@orac:/sys/module/zfs/parameters# tail *
+
  u MiB
 +
mkpart primary 1 100%
  
You can report on property values with e.g.:
+
== Creating an ext4 file-system ==
  
  # zfs get all data
+
  # mkfs.ext4 /dev/xvdf1
  
If you want to get funky:
+
== Listing disk drives ==
  
  # cd /tmp
+
  # fdisk -l
# perf record -ag #(Ctrl+C after ~15 seconds)
 
# perf report --stdio
 
  
You can search for ZFS files like e.g. this:
+
(That's an L for "list")
  
root@orac:/# find / -name '*zfs*' -or -name '*zpool*'
+
== Checking available disk space ==
  
You can report history of a zpool:
+
$ df -h
  
# zpool history $poolname
+
== Getting disk information ==
  
You can get a report on the dedup tables:
+
# lsblk
  
# zpool status -D $poolname
+
And
  
Or more detailed dedup table info:
+
# cat /proc/partitions
  
# zdb -DDD $poolname
+
Or the Grand Daddy of them all:
  
Note in the output see [https://unix.stackexchange.com/a/405700 here] for details, basically:
+
# lshw -class disk
  
{|class="wikitable"
+
(Requires the lshw package.)
! Abbr  !! Description
 
|-
 
| LSIZE  || logical size (in memory)
 
|-
 
| PSIZE  || physical size
 
|-
 
| DSIZE  || size on disk
 
|-
 
| refcnt || reference count
 
|}
 
  
== How to tell if zfs scrub is running ==
+
== Getting partition UUID and file-system type ==
  
You can get the status from the "scan:" line from:
+
# blkid
  
$ zpool status
+
== Checking for SSD vs magnetic disk ==
  
== Measure data throughput ==
+
# cat /sys/block/sda/queue/rotational
  
Use the 'pv' command from the 'pv' package, e.g.:
+
Will be 0 for SSD and 1 for magnetic.
  
# cat /dev/sda | pv | cat > /dev/null
+
== Monitoring a ZFS server ==
  
Or for ZFS:
+
So some commands I run to keep an eye on my new ZFS servers:
  
  # zfs send data/example | pv | cat > /dev/null
+
  # top
 +
# iotop
 +
# nethogs
 +
# watch free -h
 +
# watch slabtop -o
 +
# slabtop
 +
# watch cat /proc/meminfo
 +
# perf top
 +
# watch "df -h | grep -v -e tmpfs -e udev -e by-uuid"
 +
# watch zpool iostat -v
 +
# zpool iostat -v 2
 +
# watch 'zpool list; echo; zfs list'
 +
# watch zfs get compressratio -o all
 +
# watch cat /proc/spl/kstat/zfs/arcstats
  
== Using Smartctl, Smartd and Hddtemp on Debian ==
+
If you have a scrub or resilvering in progress you can report on progress with:
  
For notes on using smartctl see [https://www.lisenet.com/2014/using-smartctl-smartd-and-hddtemp-on-debian/ Using Smartctl, Smartd and Hddtemp on Debian].
+
# watch zpool status -v
  
== Report hard disk usage ==
+
You can poke about in internals, e.g.:
  
So you might want to know how much data a process reads or writes to a hard disk. You can monitor process total disk utilisation with the 'iotop' command. Run 'iotop' and then press 'a' for --accumulated.
+
# cat /proc/spl/kstat/zfs/arcstats
  
== Report hard disk temperatures ==
+
root@orac:/sys/module/zfs/parameters# tail *
  
E.g.
+
You can report on property values with e.g.:
  
  # hddtemp /dev/sd[a-e]
+
  # zfs get all data
  
== Burning an ISO image to USB on Mac ==
+
If you want to get funky:
  
First insert your USB key and find the appropriate disk with:
+
# cd /tmp
 +
# perf record -ag #(Ctrl+C after ~15 seconds)
 +
# perf report --stdio
  
# diskutil list
+
You can search for ZFS files like e.g. this:
  
Then unmount it with:
+
root@orac:/# find / -name '*zfs*' -or -name '*zpool*'
  
# diskutil unmountDisk /dev/disk4
+
You can report history of a zpool:
  
Then copy ISO image with 'dd':
+
# zpool history $poolname
  
# dd if=ubuntu-18.04.1-desktop-amd64.iso of=/dev/disk4
+
You can get a report on the dedup tables:
  
You can get dd to report progress by sending it the SIGINFO signal:
+
# zpool status -D $poolname
  
# kill -s info 12345
+
Or more detailed dedup table info:
  
== Listing all ext4 file systems ==
+
# zdb -DDD $poolname
  
To see a list only of the mounted ext4 file systems:
+
Note in the output see [https://unix.stackexchange.com/a/405700 here] for details, basically:
  
  # df -t ext4
+
{|class="wikitable"
 +
! Abbr  !! Description
 +
|-
 +
| LSIZE  || logical size (in memory)
 +
|-
 +
| PSIZE  || physical size
 +
|-
 +
| DSIZE || size on disk
 +
|-
 +
| refcnt || reference count
 +
|}
  
== Report hierarchical file system mount points and mount options ==
+
== How to tell if zfs scrub is running ==
  
$ findmnt
+
You can get the status from the "scan:" line from:
  
== Report the mount point for the current working directory ==
+
$ zpool status
  
$ findmnt "$PWD"
+
== Measure data throughput ==
  
= Monitoring disk I/O =
+
Use the 'pv' command from the 'pv' package, e.g.:
  
There's an app for that! iotop.
+
# cat /dev/sda | pv | cat > /dev/null
  
== Using iotop, top for disks ==
+
Or for ZFS:
  
  # iotop -oPa
+
  # zfs send data/example | pv | cat > /dev/null
  
== Monitor disk I/O for performance issues ==
+
== Using Smartctl, Smartd and Hddtemp on Debian ==
  
# watch iostat
+
For notes on using smartctl see [https://www.lisenet.com/2014/using-smartctl-smartd-and-hddtemp-on-debian/ Using Smartctl, Smartd and Hddtemp on Debian].
  
Or e.g.
+
== Report hard disk usage ==
  
# watch iostat -xd /dev/sd[abc]
+
So you might want to know how much data a process reads or writes to a hard disk. You can monitor process total disk utilisation with the 'iotop' command. Run 'iotop' and then press 'a' for --accumulated.
  
Or use groupings like this command for 'tact':
+
== Report hard disk temperatures ==
  
$ iostat -g system nvme0n1 -g fast sda sdb -g data sdc sdd -d 2
+
E.g.
  
= Monitoring a system =
+
# hddtemp /dev/sd[a-e]
  
== Simple ZFS monitoring ==
+
== Burning an ISO image to USB on Mac ==
  
# watch iostat
+
First insert your USB key and find the appropriate disk with:
# iotop
 
# zpool iostat -v 5
 
# watch 'hddtemp /dev/sd[a-e]; echo; zpool list; echo; zfs list'
 
# nethogs
 
# top
 
  
= Monitoring temperature =
+
# diskutil list
  
See [https://askubuntu.com/a/854029 temperature without third-party apps] for:
+
Then unmount it with:
  
  $ cat /sys/class/thermal/thermal_zone*/temp
+
  # diskutil unmountDisk /dev/disk4
  
and:
+
Then copy ISO image with 'dd':
  
  $ paste <(cat /sys/class/thermal/thermal_zone*/type) <(cat /sys/class/thermal/thermal_zone*/temp) | column -s $'\t' -t | sed 's/\(.\)..$/.\1°C/'
+
  # dd if=ubuntu-18.04.1-desktop-amd64.iso of=/dev/disk4
  
== Monitoring CPU temperature ==
+
You can get dd to report progress by sending it the SIGINFO signal:
  
  $ watch sensors
+
  # kill -s info 12345
  
== Monitoring HDD temperature ==
+
== Listing all ext4 file systems ==
  
For e.g. SATA drives sda to sdd:
+
To see a list only of the mounted ext4 file systems:
  
  # watch hddtemp /dev/sd[a-d]
+
  # df -t ext4
  
= ZFS =
+
== Report hierarchical file system mount points and mount options ==
  
== How can I determine the current size of the ARC in ZFS, and how does the ARC relate to free or cache memory? ==
+
$ findmnt
  
See [https://superuser.com/q/1137416 How can I determine the current size of the ARC in ZFS, and how does the ARC relate to free or cache memory?]
+
== Report the mount point for the current working directory ==
  
  $ cat /proc/spl/kstat/zfs/arcstats
+
  $ findmnt "$PWD"
  
Then:
+
= Monitoring disk I/O =
  
c is the target size of the ARC in bytes
+
There's an app for that! iotop.
c_max is the maximum size of the ARC in bytes
 
size is the current size of the ARC in bytes
 
  
== Stopping a ZFS scrub in progress ==
+
== Using iotop, top for disks ==
  
  # zpool scrub -s $pool
+
  # iotop -oPa
  
e.g. for the 'data' pool:
+
== Monitor disk I/O for performance issues ==
  
  # zpool scrub -s data
+
  # watch iostat
  
= File management =
+
Or e.g.
  
== Listing files by size ==
+
# watch iostat -xd /dev/sd[abc]
  
Use capital S for Size:
+
Or use groupings like this command for 'tact':
  
  $ ls -S
+
  $ iostat -g system nvme0n1 -g fast sda sdb -g data sdc sdd -d 2
  
== Listing only directories ==
+
= Monitoring a system =
  
$ ls -l | egrep '^d'
+
== Simple ZFS monitoring ==
  
== Listing only files ==
+
# watch iostat
 +
# iotop
 +
# zpool iostat -v 5
 +
# watch 'hddtemp /dev/sd[a-e]; echo; zpool list; echo; zfs list'
 +
# nethogs
 +
# top
  
$ ls -l | egrep -v '^d'
+
= Monitoring temperature =
  
== Listing hidden files ==
+
See [https://askubuntu.com/a/854029 temperature without third-party apps] for:
  
  $ ls -al .[!.]*
+
  $ cat /sys/class/thermal/thermal_zone*/temp
  
== Creating a symbolic link ==
+
and:
  
  $ ln -s /path/to/target link-name
+
  $ paste <(cat /sys/class/thermal/thermal_zone*/type) <(cat /sys/class/thermal/thermal_zone*/temp) | column -s $'\t' -t | sed 's/\(.\)..$/.\1°C/'
  
== Creating a hard-link ==
+
== Monitoring CPU temperature ==
  
  $ ln /path/to/target file-name
+
  $ watch sensors
  
== Changing the owner of a file ==
+
== Monitoring HDD temperature ==
  
$ chown user:group <files>
+
For e.g. SATA drives sda to sdd:
  
E.g.
+
# watch hddtemp /dev/sd[a-d]
  
$ chown jj5:staff README
+
= ZFS =
$ chown root:root *
+
 
 +
== How can I determine the current size of the ARC in ZFS, and how does the ARC relate to free or cache memory? ==
  
To apply recursively into sub-directories use -R,
+
See [https://superuser.com/q/1137416 How can I determine the current size of the ARC in ZFS, and how does the ARC relate to free or cache memory?]
  
  $ chown -R root:root /etc/*
+
  $ cat /proc/spl/kstat/zfs/arcstats
  
== Changing file permissions ==
+
Then:
  
{|class="wikitable"
+
c is the target size of the ARC in bytes
|+ Object codes
+
c_max is the maximum size of the ARC in bytes
! User !! Group !! Other
+
size is the current size of the ARC in bytes
|-
 
| u    || g    || o
 
|}
 
  
{|class="wikitable"
+
== Stopping a ZFS scrub in progress ==
|+ Permission codes
 
! Read !! Write !! Exectue
 
|-
 
| r    || w    || x
 
|-
 
| 4    || 2    || 1
 
|}
 
  
{|class="wikitable"
+
# zpool scrub -s $pool
|+ Numeric codes
+
 
! 0
+
e.g. for the 'data' pool:
| None
 
|-
 
! 1
 
| Execute
 
|-
 
! 2
 
| Write
 
|-
 
! 3
 
| Write, Execute
 
|-
 
! 4
 
| Read
 
|-
 
! 5
 
| Read, Execute
 
|-
 
! 6
 
| Read, Write
 
|-
 
! 7
 
| Read, Write, Execute
 
|}
 
  
See [http://catcode.com/teachmod/numeric2.html Numeric Mode in Action].
+
# zpool scrub -s data
  
$ chmod <user numeric code><group numeric code><other numeric code> <files>
+
= File management =
$ chmod <object codes>+|-<permission codes> <files>
 
  
E.g.
+
== Listing files by size ==
  
$ chmod 600 my-private-file
+
Use capital S for Size:
$ chmod go-rwx my-private-file
 
$ chmod u+rw my-private-file
 
$ chmod +x my-script
 
  
== Updating config files ==
+
$ ls -S
  
If you get given a new config file called new.conf and you want to integrate it with your old config file old.conf then:
+
== Listing only directories ==
  
  $ cp old.conf updated.conf
+
  $ ls -l | egrep '^d'
$ merge -A updated.conf new.conf old.conf
 
  
Then go through and edit updated.conf resolving all the merge errors, picking and choosing what to update and what to keep. When you're done copy updated.conf to old.conf so it becomes the new config file.
+
== Listing only files ==
  
The merge program is a part of the RCS package. If you don't have it:
+
$ ls -l | egrep -v '^d'
  
$ sudo apt-get install rcs
+
== Listing hidden files ==
  
== Listing open files ==
+
$ ls -al .[!.]*
  
Use lsof to list open files. E.g.:
+
== Creating a symbolic link ==
  
  # lsof
+
  $ ln -s /path/to/target link-name
  
See man lsof for options.
+
== Creating a hard-link ==
  
== List permissions on a whole directory path ==
+
$ ln /path/to/target file-name
  
E.g.:
+
== Changing the owner of a file ==
  
  $ namei -om /home/jj5/workspace
+
  $ chown user:group <files>
  
Outputs:
+
E.g.
  
  f: /home/jj5/workspace/
+
  $ chown jj5:staff README
  drwxr-xr-x root root /
+
$ chown root:root *
  drwxr-xr-x root root home
 
  drwxr-xr-x jj5  jj5  jj5
 
  drwxr-xr-x jj5  jj5  workspace
 
  
== Counting non-blank lines in a file ==
+
To apply recursively into sub-directories use -R,
  
E.g.:
+
$ chown -R root:root /etc/*
  
$ cat foo.c | sed '/^\s*$/d' | wc -l
+
== Changing file permissions ==
  
== Cloning one directory to another with rsync ==
+
{|class="wikitable"
 +
|+ Object codes
 +
! User !! Group !! Other
 +
|-
 +
| u    || g    || o
 +
|}
  
E.g.:
+
{|class="wikitable"
 +
|+ Permission codes
 +
! Read !! Write !! Exectue
 +
|-
 +
| r    || w    || x
 +
|-
 +
| 4    || 2    || 1
 +
|}
  
rsync --acls --xattrs --stats --human-readable --recursive --del --force --times --links --hard-links --executability --numeric-ids --owner --group --perms --sparse --compress-level=0 /data/source/ hostname:/data/target/
+
{|class="wikitable"
 
+
|+ Numeric codes
== Counting number of files in current directory and all subdirectories ==
+
! 0
 +
| None
 +
|-
 +
! 1
 +
| Execute
 +
|-
 +
! 2
 +
| Write
 +
|-
 +
! 3
 +
| Write, Execute
 +
|-
 +
! 4
 +
| Read
 +
|-
 +
! 5
 +
| Read, Execute
 +
|-
 +
! 6
 +
| Read, Write
 +
|-
 +
! 7
 +
| Read, Write, Execute
 +
|}
  
$ ls -AlhR . | egrep '^-' | wc -l
+
See [http://catcode.com/teachmod/numeric2.html Numeric Mode in Action].
  
== Counting number of directories in current directory and all subdirectories ==
+
$ chmod <user numeric code><group numeric code><other numeric code> <files>
 +
$ chmod <object codes>+|-<permission codes> <files>
  
$ ls -AlhR . | egrep '^d' | wc -l
+
E.g.
  
== Getting the status of a 'dd' process ==
+
$ chmod 600 my-private-file
 +
$ chmod go-rwx my-private-file
 +
$ chmod u+rw my-private-file
 +
$ chmod +x my-script
  
First figure out the 'dd' process number, with e.g. 'top' or 'ps aux | grep dd'
+
== Updating config files ==
  
Then send the dd process the SIGINFO signal, which for dd process 40947 would be:
+
If you get given a new config file called new.conf and you want to integrate it with your old config file old.conf then:
  
  # kill -s info 40947
+
  $ cp old.conf updated.conf
 +
$ merge -A updated.conf new.conf old.conf
  
The dd process will report its status in the terminal its running in.
+
Then go through and edit updated.conf resolving all the merge errors, picking and choosing what to update and what to keep. When you're done copy updated.conf to old.conf so it becomes the new config file.
  
== Transferring a large file via FAT32 file system ==
+
The merge program is a part of the RCS package. If you don't have it:
  
So the maximum file size supported by a FAT32 file system (commonly used on USB keys) is 4 GB per file. If you have a file larger than 4 GB you can split it into parts and then reassemble the parts once transferred:
+
$ sudo apt-get install rcs
  
$ split -b 4000m input.tgz input.tgz-parts-
+
== Listing open files ==
  
Then copy the small files and reassemble:
+
Use lsof to list open files. E.g.:
  
  $ cat input.tgz-parts-* > output.tgz
+
  # lsof
  
= NFS =
+
See man lsof for options.
  
== List NFS shares ==
+
== List permissions on a whole directory path ==
  
To e.g. show NFS shares on 'love':
+
E.g.:
  
  $ showmount -e love
+
  $ namei -om /home/jj5/workspace
  
= Compression =
+
Outputs:
  
== How to use pigz with tar ==
+
f: /home/jj5/workspace/
 +
  drwxr-xr-x root root /
 +
  drwxr-xr-x root root home
 +
  drwxr-xr-x jj5  jj5  jj5
 +
  drwxr-xr-x jj5  jj5  workspace
  
See [https://stackoverflow.com/a/39904353 here]:
+
== Counting non-blank lines in a file ==
  
$ tar cf - paths-to-archive | pigz --best -p 8 > archive.tgz
+
E.g.:
  
Note: don't use --best unless you're being stingy, running without it will be much faster.
+
$ cat foo.c | sed '/^\s*$/d' | wc -l
  
Also from [https://stackoverflow.com/a/50586833 here]:
+
== Cloning one directory to another with rsync ==
  
Fast pack:
+
E.g.:
  
tar -I 'pigz --fast' -cf my.tar.gz whatver
+
rsync --acls --xattrs --stats --human-readable --recursive --del --force --times --links --hard-links --executability --numeric-ids --owner --group --perms --sparse --compress-level=0 /data/source/ hostname:/data/target/
  
Best pack:
+
== Counting number of files in current directory and all subdirectories ==
  
  tar -I 'pigz --best' -cf my.tar.gz whatver
+
  $ ls -AlhR . | egrep '^-' | wc -l
  
Fast unpack:
+
== Counting number of directories in current directory and all subdirectories ==
  
  tar -I pigz -xf my.tar.gz
+
  $ ls -AlhR . | egrep '^d' | wc -l
  
== Best compression with tar ==
+
== Getting the status of a 'dd' process ==
  
From [https://superuser.com/questions/514260/how-to-obtain-maximum-compression-with-tar-gz#544643 here]:
+
First figure out the 'dd' process number, with e.g. 'top' or 'ps aux | grep dd'
  
export GZIP=-9
+
Then send the dd process the SIGINFO signal, which for dd process 40947 would be:
tar cvzf file.tar.gz /path/to/directory
 
  
or
+
# kill -s info 40947
  
env GZIP=-9 tar cvzf file.tar.gz /path/to/directory
+
The dd process will report its status in the terminal its running in.
  
== Best parallel compression with pigz ==
+
== Transferring a large file via FAT32 file system ==
  
$ pigz --best
+
So the maximum file size supported by a FAT32 file system (commonly used on USB keys) is 4 GB per file. If you have a file larger than 4 GB you can split it into parts and then reassemble the parts once transferred:
  
== Best parallel compression with xz ==
+
$ split -b 4000m input.tgz input.tgz-parts-
  
$ xz -9e -T 0
+
Then copy the small files and reassemble:
  
== Reporting compression ratios with xz ==
+
$ cat input.tgz-parts-* > output.tgz
  
e.g.
+
== Find the difference between two directories ==
  
  root@love:/data/image/archive# xz -l *
+
  $ diif -qr $DIR_A $DIR_B
Strms  Blocks  Compressed Uncompressed  Ratio  Check  Filename
 
    1      3    372.2 MiB    442.3 MiB  0.841  CRC64  1999.txz
 
    1      29  5,281.3 MiB  5,542.5 MiB  0.953  CRC64  2001.txz
 
    1      11  1,364.3 MiB  2,084.3 MiB  0.655  CRC64  2002.txz
 
    1      9    568.5 MiB  1,660.2 MiB  0.342  CRC64  2003.txz
 
    1    639    66.8 GiB    119.6 GiB  0.558  CRC64  2004.txz
 
    1    313    12.7 GiB    58.6 GiB  0.217  CRC64  2005.txz
 
    1    414    35.0 GiB    77.4 GiB  0.452  CRC64  2006.txz
 
    1    485    44.5 GiB    90.9 GiB  0.490  CRC64  2007.txz
 
    1  1,690    150.0 GiB    316.8 GiB  0.473  CRC64  2008.txz
 
    1      3    457.9 MiB    526.0 MiB  0.871  CRC64  2009.txz
 
    1    168    27.3 GiB    31.4 GiB  0.868  CRC64  2010.txz
 
    1      4    477.1 MiB    702.8 MiB  0.679  CRC64  2011.txz
 
-------------------------------------------------------------------------------
 
    12  3,768    344.6 GiB    705.5 GiB  0.488  CRC64  12 files
 
  
= Symbolic-link management =
+
== Merging two directories ==
  
== Data used by sym-linked files:
+
$ cp -RT source/ destination/
  
This will de-reference the sym-links in the current directory and tell you how much data the files pointed to by the sym-links are using:
+
Files from source will be merged into destination.
  
jj5@tact:/data/backup/unity/latest$ du -hD * | sort -h
+
== Generating a replacement file ==
  
= File searching =
+
So you generate the file into a temp file, then hard link the temp file to where you want the replacement to go, then you delete the temp file:
  
== Finding a file with a particular name ==
+
$ generate-file.sh > file.txt.tmp
 +
$ ln -f file.txt.tmp file.txt
 +
$ rm file.txt.tmp
  
$ find -iname "*some-part-of-the-file-name*"
+
= NFS =
  
Will start searching from the current directory, so maybe
+
== List NFS shares ==
  
$ cd /
+
To e.g. show NFS shares on 'love':
  
first. For a case-sensitive search:
+
$ showmount -e love
  
$ find -name "*eXaCT CaSE*"
+
= Compression =
  
== Finding a file with particular content ==
+
== How to use pigz with tar ==
  
To search in /etc/ for a file with particular content:
+
See [https://stackoverflow.com/a/39904353 here]:
  
  $ grep -R "search-string" /etc/*
+
  $ tar cf - paths-to-archive | pigz --best -p 8 > archive.tgz
  
To search the current directory for *.cs files containing the word "Up":
+
Note: don't use --best unless you're being stingy, running without it will be much faster.
  
$ find . -name '*.cs' -exec grep --color=auto -H Up {} \;
+
Also from [https://stackoverflow.com/a/50586833 here]:
  
== Finding a list of files with particular content ==
+
Fast pack:
  
E.g. to find all the files with the word 'creativity':
+
tar -I 'pigz --fast' -cf my.tar.gz whatver
  
$ grep -R creativity . | sed 's/:/ /' | awk '{ print $1 }' | sort | uniq
+
Best pack:
  
== Using the locate command to find files ==
+
tar -I 'pigz --best' -cf my.tar.gz whatver
  
$ locate part-of-filename
+
Fast unpack:
  
E.g.
+
tar -I pigz -xf my.tar.gz
  
$ locate texvc
+
== Best compression with tar ==
  
== Updating locate command's database ==
+
From [https://superuser.com/questions/514260/how-to-obtain-maximum-compression-with-tar-gz#544643 here]:
  
  # updatedb
+
  export GZIP=-9
 +
tar cvzf file.tar.gz /path/to/directory
  
== Select a random line from a text file ==
+
or
  
  $ shuf -n 1 input.txt
+
  env GZIP=-9 tar cvzf file.tar.gz /path/to/directory
  
== Extra context for grep ==
+
== Best parallel compression with pigz ==
  
If you need to show extra lines before or after your grep results use -B NUM to set how many lines before the match and -A NUM for the number of lines after the match:
+
$ pigz --best
  
$ grep -B 3 -A 1 ...
+
== Best parallel compression with xz ==
  
= Job control =
+
$ xz -9e -T 0
  
== Stopping a running process ==
+
== Reporting compression ratios with xz ==
  
Press Ctrl+Z to stop a running process.
+
e.g.
  
== Listing current jobs and their status ==
+
root@love:/data/image/archive# xz -l *
 
+
Strms  Blocks  Compressed Uncompressed  Ratio  Check  Filename
  $ jobs
+
    1      3    372.2 MiB    442.3 MiB  0.841  CRC64  1999.txz
 +
    1      29  5,281.3 MiB  5,542.5 MiB  0.953  CRC64  2001.txz
 +
    1      11  1,364.3 MiB  2,084.3 MiB  0.655  CRC64  2002.txz
 +
    1      9    568.5 MiB  1,660.2 MiB  0.342  CRC64  2003.txz
 +
    1    639    66.8 GiB    119.6 GiB  0.558  CRC64  2004.txz
 +
    1    313    12.7 GiB    58.6 GiB  0.217  CRC64  2005.txz
 +
    1    414    35.0 GiB    77.4 GiB  0.452  CRC64  2006.txz
 +
    1    485    44.5 GiB    90.9 GiB  0.490  CRC64  2007.txz
 +
    1  1,690    150.0 GiB    316.8 GiB  0.473  CRC64  2008.txz
 +
    1      3    457.9 MiB    526.0 MiB  0.871  CRC64  2009.txz
 +
    1    168    27.3 GiB    31.4 GiB  0.868  CRC64  2010.txz
 +
    1      4    477.1 MiB    702.8 MiB  0.679  CRC64  2011.txz
 +
-------------------------------------------------------------------------------
 +
    12  3,768    344.6 GiB    705.5 GiB  0.488 CRC64  12 files
  
== Resuming a stopped job in the backgroud ==
+
= Symbolic-link management =
  
To resume a stopped process in the background
+
== Data used by sym-linked files:
  
$ bg %1
+
This will de-reference the sym-links in the current directory and tell you how much data the files pointed to by the sym-links are using:
  
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
+
jj5@tact:/data/backup/unity/latest$ du -hD * | sort -h
  
== Resuming a stopped job in the foreground ==
+
= File searching =
  
To resume a stopped process in the foreground
+
== Finding a file with a particular name ==
  
  $ fg %1
+
  $ find -iname "*some-part-of-the-file-name*"
  
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
+
Will start searching from the current directory, so maybe
  
== Killing a stopped job ==
+
$ cd /
  
To kill a job
+
first. For a case-sensitive search:
  
  $ kill %1
+
  $ find -name "*eXaCT CaSE*"
  
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
+
== Finding a file with particular content ==
  
== Periodically run a program and watch its output ==
+
To search in /etc/ for a file with particular content:
  
  $ watch /your/command
+
  $ grep -R "search-string" /etc/*
  
= Debian/Ubuntu package management =
+
To search the current directory for *.cs files containing the word "Up":
  
Also see [https://wiki.debian.org/WhereIsIt Where "is" it?] on the Debian Wiki.
+
$ find . -name '*.cs' -exec grep --color=auto -H Up {} \;
  
== configuring debconf ==
+
== Finding a list of files with particular content ==
  
# dpkg-reconfigure debconf
+
E.g. to find all the files with the word 'creativity':
  
Set priority to low to get asked detailed questions.
+
$ grep -R creativity . | sed 's/:/ /' | awk '{ print $1 }' | sort | uniq
  
== Showing list of installed packages ==
+
== Using the locate command to find files ==
  
  # dpkg --get-selections
+
  $ locate part-of-filename
  
== Searching for installed package ==
+
E.g.
  
  # dpkg --get-selections | grep package-name
+
  $ locate texvc
  
or
+
== Updating locate command's database ==
  
  # aptitude search package-name
+
  # updatedb
  
== Showing which files are installed as part of a package ==
+
== Select a random line from a text file ==
  
  # dpkg -L package-name
+
  $ shuf -n 1 input.txt
  
== Installing a package ==
+
== Extra context for grep ==
  
# apt-get install package-name
+
If you need to show extra lines before or after your grep results use -B NUM to set how many lines before the match and -A NUM for the number of lines after the match:
  
== Uninstalling a package ==
+
$ grep -B 3 -A 1 ...
  
# apt-get remove package-name
+
= Job control =
  
== Showing system architecture ==
+
== Stopping a running process ==
  
$ dpkg --print-architecture
+
Press Ctrl+Z to stop a running process.
  
== Showing which package a file belongs to ==
+
== Listing current jobs and their status ==
  
  $ which echo
+
  $ jobs
/bin/echo
 
$ dpkg -S /bin/echo
 
coreutils: /bin/echo
 
$ dpkg -l | grep coreutils
 
ii  coreutils                        6.10-6                  The GNU core utilities
 
  
== Showing package information ==
+
== Resuming a stopped job in the backgroud ==
  
$ apt-cache showpkg coreutils
+
To resume a stopped process in the background
  
Or for even more information:
+
$ bg %1
  
$ apt-cache show coreutils
+
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
  
== List all installed packages with package version info ==
+
== Resuming a stopped job in the foreground ==
  
dpkg-query -l
+
To resume a stopped process in the foreground
  
== Reporting which version of a package is installed ==
+
$ fg %1
 +
 
 +
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
  
$ dpkg -l | grep package-name
+
== Killing a stopped job ==
  
E.g.:
+
To kill a job
  
  root@hope:~/letsencrypt# dpkg -l | grep augeas
+
  $ kill %1
ii  augeas-lenses                  0.7.0-1ubuntu1                Set of lenses needed by libaugeas0 to parse
 
ii  libaugeas0                      0.7.0-1ubuntu1                The augeas configuration editing library and
 
  
== Comprehensive upgrade ==
+
where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').
  
Try the following:
+
== Periodically run a program and watch its output ==
  
  # apt-get update
+
  $ watch /your/command
# apt-get dist-upgrade
 
# apt-get autoremove
 
# apt-get remove $(deborphan)
 
# update-flashplugin-nonfree --install
 
  
== Searching all available packages ==
+
= Debian/Ubuntu package management =
  
$ apt-cache search . | sort -d | less
+
Also see [https://wiki.debian.org/WhereIsIt Where "is" it?] on the Debian Wiki.
  
= Networking =
+
== configuring debconf ==
  
== net-tools vs iproute2 ==
+
# dpkg-reconfigure debconf
  
The older 'net-tools' package has been replaced with 'iproute2' e.g. in [https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#iproute2 stretch].
+
Set priority to low to get asked detailed questions.
  
{|class="wikitable"
+
== Showing list of installed packages ==
! legacy net-tools commands
 
! iproute2 replacement commands
 
|-
 
| arp      || ip n (ip neighbor)
 
|-
 
| ifconfig || ip a (ip addr), ip link, ip -s (ip -stats)
 
|-
 
| iptunnel || ip tunnel
 
|-
 
| iwconfig || iw
 
|-
 
| nameif  || ip link, ifrename
 
|-
 
| netstat  || ss, ip route (for netstat-r), ip -s link (for netstat -i), ip maddr (for netstat-g)
 
|-
 
| route    || ip r (ip route)
 
|}
 
  
== Restart networking ==
+
# dpkg --get-selections
  
For servers:
+
== Searching for installed package ==
  
  # service networking restart
+
  # dpkg --get-selections | grep package-name
  
For desktops:
+
or
  
  # service network-manager restart
+
  # aptitude search package-name
  
== Pinging with particular packet size ==
+
== Showing which files are installed as part of a package ==
  
  $ ping -M do -s <packet size in bytes> <host>
+
  # dpkg -L package-name
  
E.g.
+
== Installing a package ==
  
  $ ping -M do -s 1400 charity.progclub.org
+
  # apt-get install package-name
  
== Setting [http://en.wikipedia.org/wiki/Maximum_segment_size MSS] for a particular IP address on a particular interface ==
+
== Uninstalling a package ==
  
  # ip route add <host> dev <interface> advmss <packet size>
+
  # apt-get remove package-name
  
E.g.
+
== Showing system architecture ==
  
  # ip route add 10.0.0.1 dev eth0 advmss 1400
+
  $ dpkg --print-architecture
  
== Dropping configured MMS for a particular IP address ==
+
== Showing which package a file belongs to ==
  
  # ip route flush <host>
+
  $ which echo
 +
/bin/echo
 +
$ dpkg -S /bin/echo
 +
coreutils: /bin/echo
 +
$ dpkg -l | grep coreutils
 +
ii  coreutils                        6.10-6                  The GNU core utilities
  
E.g.
+
== Showing package information ==
  
  # ip route flush 10.0.0.1
+
  $ apt-cache showpkg coreutils
  
== Listing open ports and socket information ==
+
Or for even more information:
  
Including which process is listening on which port.
+
$ apt-cache show coreutils
  
# netstat -tulpn
+
== List all installed packages with package version info ==
  
Or use the 'ss' command:
+
dpkg-query -l
  
# ss -s
+
== Reporting which version of a package is installed ==
# ss -l
 
# ss -pl
 
# ss -o state established '( dport = :smtp or sport = :smtp )'
 
  
== Listing open IPv4 connections ==
+
$ dpkg -l | grep package-name
  
# lsof -Pnl +M -i4
+
E.g.:
  
You might need to install the lsof package:
+
root@hope:~/letsencrypt# dpkg -l | grep augeas
 +
ii  augeas-lenses                  0.7.0-1ubuntu1                Set of lenses needed by libaugeas0 to parse
 +
ii  libaugeas0                      0.7.0-1ubuntu1                The augeas configuration editing library and
  
# apt-get install lsof
+
== Comprehensive upgrade ==
  
== Query for DNS MX record ==
+
Try the following:
  
  $ nslookup
+
  # apt-get update
  > server 127.0.0.1
+
# apt-get dist-upgrade
  > set q=mx
+
  # apt-get autoremove
  > mail.blackbrick.com
+
  # apt-get remove $(deborphan)
 +
  # update-flashplugin-nonfree --install
  
== Query for DNS SOA record ==
+
== Searching all available packages ==
  
  $ dig @ns2.staticmagic.net -t SOA staticmagic.net
+
  $ apt-cache search . | sort -d | less
  
== Using nmap to list open ports on remote host ==
+
== Reporting unattended upgrades status ==
  
To check the 1,000 most common ports:
+
See [https://askubuntu.com/questions/934807/unattended-upgrades-status#934863 here] for more info.
  
  # nmap server.example.com
+
  # tail -f /var/log/unattended-upgrades/unattended-upgrades.log
  
Or for a specific port range (e.g. 101 to 102):
+
== Searching for Debian packages and versions ==
  
# nmap -p 101-102 server.example.com
+
* [https://packages.debian.org/search?keywords=dnscrypt-proxy Debian package search]
  
Or for all ports (1 to 65,535):
+
= Networking =
  
# nmap -p- server.example.com
+
== Determining throughput between two hosts ==
  
== Network monitoring ==
+
# apt install iperf3
  
See [http://www.binarytides.com/linux-commands-monitor-network/ here] for details. Basically:
+
On the server:
  
# Overall bandwidth: nload, bmon, slurm, bwm-ng, cbm, speedometer, netload
+
# iperf3 -s
# Overall bandwidth (batch style output): vnstat, ifstat, dstat, collectl
 
# Bandwidth per socket connection: iftop, iptraf, tcptrack, pktstat, netwatch, trafshow
 
# Bandwidth per process: nethogs
 
  
== nload ==
+
On the client:
  
You can watch network traffic in real-time with nload:
+
# iperf3 -c $SERVER_IP
  
# nload -u M
+
For more info see: [https://www.cyberciti.biz/faq/how-to-test-the-network-speedthroughput-between-two-linux-servers/ How to test the network speed/throughput between two Linux servers].
  
== Reporting network (NIC) speed ==
+
== net-tools vs iproute2 ==
  
From [https://askubuntu.com/questions/431911/how-can-i-verify-the-speed-of-my-nic-in-ubuntu#431912 here]:
+
The older 'net-tools' package has been replaced with 'iproute2' e.g. in [https://www.debian.org/releases/stretch/amd64/release-notes/ch-information.en.html#iproute2 stretch].
  
# dmesg | grep eth0
+
{|class="wikitable"
# mii-tool -v eth0
+
! legacy net-tools commands
# ethtool eth0
+
! iproute2 replacement commands
 
+
|-
Note: use ifconfig to get device name.
+
| arp      || ip n (ip neighbor)
 
+
|-
== Path MTU discovery ==
+
| ifconfig || ip a (ip addr), ip link, ip -s (ip -stats)
 
+
|-
To do a [https://en.wikipedia.org/wiki/Path_MTU_Discovery Path MTU Discovery], from the iputils-tracepath package:
+
| iptunnel || ip tunnel
 +
|-
 +
| iwconfig || iw
 +
|-
 +
| nameif  || ip link, ifrename
 +
|-
 +
| netstat  || ss, ip route (for netstat-r), ip -s link (for netstat -i), ip maddr (for netstat-g)
 +
|-
 +
| route    || ip r (ip route)
 +
|}
  
# tracepath host.example.com
+
== Restart networking ==
  
== Listing available Ethernet devices ==
+
For servers:
  
To see a list of NICs available on the host:
+
# service networking restart
  
$ cat /proc/net/dev
+
For desktops:
  
Also
+
# service network-manager restart
  
$ ip link
+
== Pinging with particular packet size ==
  
== 59 Linux Networking commands and scripts ==
+
$ ping -M do -s <packet size in bytes> <host>
  
See [https://haydenjames.io/linux-networking-commands-scripts/ 59 Linux Networking commands and scripts].
+
E.g.
  
== Links ==
+
$ ping -M do -s 1400 charity.progclub.org
  
* [http://www.cyberciti.biz/faq/linux-unix-open-ports/ HowTo: UNIX / Linux Open TCP / UDP Ports]
+
== Setting [http://en.wikipedia.org/wiki/Maximum_segment_size MSS] for a particular IP address on a particular interface ==
  
= IPTables =
+
# ip route add <host> dev <interface> advmss <packet size>
  
== Applying firewall rules ==
+
E.g.
  
For configuration info see [http://articles.slicehost.com/2008/4/25/ubuntu-hardy-setup-page-1 this article].
+
# ip route add 10.0.0.1 dev eth0 advmss 1400
  
$ sudo vim /etc/iptables.test.rules
+
== Dropping configured MMS for a particular IP address ==
$ sudo /sbin/iptables -F
 
$ sudo /sbin/iptables-restore < /etc/iptables.test.rules
 
$ sudo iptables -L
 
$ sudo -s
 
# iptables-save > /etc/iptables.up.rules
 
# exit
 
  
= ufw =
+
# ip route flush <host>
  
== Denying hosts with ufw ==
+
E.g.
  
See [[Admin_reference#Denying_hosts_with_UFW|denying hosts with ufw]].
+
# ip route flush 10.0.0.1
  
= Bind9 =
+
== Listing open ports and socket information ==
  
== Viewing Bind9 querylog ==
+
Including which process is listening on which port.
  
  $ sudo rndc querylog
+
  # netstat -tulpn
$ tail -f /var/log/syslog
 
  
= IPSec =
+
Or use the 'ss' command:
  
== Disabling IPSec ==
+
# ss -s
 +
# ss -l
 +
# ss -pl
 +
# ss -o state established '( dport = :smtp or sport = :smtp )'
  
# setkey -FP
+
== Listing open IPv4 connections ==
  
= OpenSSL =
+
# lsof -Pnl +M -i4
  
== Debugging IMAPS with OpenSSL ==
+
You might need to install the lsof package:
  
  # openssl s_client -connect localhost:993
+
  # apt-get install lsof
> a1 LOGIN username@host password
 
> a2 LOGOUT
 
  
== Debugging HTTPS with OpenSSL ==
+
== Query for DNS MX record ==
  
  $ openssl s_client -connect www.example.com:443
+
  $ nslookup
  GET /example.html HTTP/1.1
+
  > server 127.0.0.1
  host: www.example.com
+
  > set q=mx
 +
> mail.blackbrick.com
  
== Links ==
+
== Query for DNS SOA record ==
  
* [http://www.madboa.com/geek/openssl/ OpenSSL Command-Line HOWTO]
+
$ dig @ns2.staticmagic.net -t SOA staticmagic.net
  
= Pluggable Authentication Modules (PAM) =
+
== Using nmap to list open ports on remote host ==
  
== Links ==
+
To check the 1,000 most common ports:
  
* [http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-pam.html 42.4. Pluggable Authentication Modules (PAM)]
+
# nmap server.example.com
  
= SSH =
+
Or for a specific port range (e.g. 101 to 102):
  
== Configuring SSH key login ==
+
# nmap -p 101-102 server.example.com
  
On the client machine generate a key-pair (if necessary, check for existing ~/.ssh/id_rsa.pub):
+
Or for all ports (1 to 65,535):
  
  $ ssh-keygen -t rsa
+
  # nmap -p- server.example.com
  
Copy the public key from the client to the server:
+
== Network monitoring ==
  
$ scp ~/.ssh/id_rsa.pub user@example.org:
+
See [http://www.binarytides.com/linux-commands-monitor-network/ here] for details. Basically:
  
Configure the authorized keys on the server:
+
# Overall bandwidth: nload, bmon, slurm, bwm-ng, cbm, speedometer, netload
 +
# Overall bandwidth (batch style output): vnstat, ifstat, dstat, collectl
 +
# Bandwidth per socket connection: iftop, iptraf, tcptrack, pktstat, netwatch, trafshow
 +
# Bandwidth per process: nethogs
  
$ ssh user@example.org
+
== nload ==
$ mkdir ~/.ssh
 
$ chmod go-w .ssh
 
$ cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
 
$ chmod 600 ~/.ssh/authorized_keys
 
$ rm ~/id_rsa.pub
 
  
== Tunneling over SSH ==
+
You can watch network traffic in real-time with nload:
  
For example, connecting a remote MySQL server to the localhost:
+
# nload -u M
  
$ ssh -L 3306:localhost:3306 jselliot@ssh.progsoc.org
+
== Reporting network (NIC) speed ==
  
If the machine you want to connect to is not the localhost of the machine you're ssh'ing to,
+
From [https://askubuntu.com/questions/431911/how-can-i-verify-the-speed-of-my-nic-in-ubuntu#431912 here]:
  
  $ ssh -L 3306:muspell.progsoc.uts.edu.au:3306 ssh.progsoc.uts.edu.au
+
# dmesg | grep eth0
 +
# mii-tool -v eth0
 +
# ethtool eth0
  
The -L stanza is localport:remotehost:remoteport where localport is a
+
Note: use ifconfig to get device name.
port on your machine, forwarded to remoteport on remotehost.
 
  
== Tunneling over SSH with PuTTY ==
+
== Path MTU discovery ==
  
See [http://www.anchor.com.au/hosting/support/MySQL/Connecting_to_mysql_remotely Connecting to the MySQL database remotely (via an SSH Tunnel)]
+
To do a [https://en.wikipedia.org/wiki/Path_MTU_Discovery Path MTU Discovery], from the iputils-tracepath package:
  
* run putty.exe
+
# tracepath host.example.com
* Connection -> SSH -> Tunnels
 
** Port forwarding: source port to 3306
 
** destination: 127.0.0.1:3306
 
** check Local
 
** click Add
 
  
== Enabling verbose SSH logging ==
+
== Listing available Ethernet devices ==
  
To see what's going on with your ssh connections,
+
To see a list of NICs available on the host:
  
  $ ssh -v user@host
+
  $ cat /proc/net/dev
  
Or
+
Also
  
  $ ssh -vv user@host
+
  $ ip link
  
== Unlocking SSH key for session ==
+
== 59 Linux Networking commands and scripts ==
  
jj5@orac:~/.config/autostart$ cat ssh-add.desktop
+
See [https://haydenjames.io/linux-networking-commands-scripts/ 59 Linux Networking commands and scripts].
[Desktop Entry]
 
Type=Application
 
Name=ssh-add
 
Comment=Adds my private key to my session.
 
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
 
  
 
== Links ==
 
== Links ==
  
* [http://blogs.perl.org/users/smylers/2011/08/ssh-productivity-tips.html SSH Can Do That? Productivity Tips for Working with Remote Servers]
+
* [http://www.cyberciti.biz/faq/linux-unix-open-ports/ HowTo: UNIX / Linux Open TCP / UDP Ports]
* [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html PuTTY Download Page]
 
  
= Standard IO =
+
= IPTables =
  
== cat EOF ==
+
== Applying firewall rules ==
  
$ cat > output <<EOF
+
For configuration info see [http://articles.slicehost.com/2008/4/25/ubuntu-hardy-setup-page-1 this article].
> text
 
> EOF
 
  
  $ cat output
+
  $ sudo vim /etc/iptables.test.rules
  text
+
  $ sudo /sbin/iptables -F
 +
$ sudo /sbin/iptables-restore < /etc/iptables.test.rules
 +
$ sudo iptables -L
 +
$ sudo -s
 +
# iptables-save > /etc/iptables.up.rules
 +
# exit
  
= Script =
+
== Blocking an IP address with iptables ==
  
== Creating a session log with script ==
+
To drop IP address 1.2.3.4:
  
  $ script -t 2> timing
+
  # iptables -A INPUT -s 1.2.3.4 -j DROP
  
The session log is in the file 'typescript' and the timing data is in 'timing'.
+
= ufw =
  
== Replaying a scripted session ==
+
== Denying hosts with ufw ==
  
$ scriptreplay timing
+
See [[Admin_reference#Denying_hosts_with_UFW|denying hosts with ufw]].
  
Uses the default file 'typescript' and the 'timing' file as specified.
+
= Bind9 =
  
= Screen =
+
== Viewing Bind9 querylog ==
  
== Creating a new screen or reconnecting to a detached screen ==
+
$ sudo rndc querylog
 +
$ tail -f /var/log/syslog
  
$ screen -R
+
= IPSec =
  
== Detaching a screen ==
+
== Disabling IPSec ==
  
  $ screen -D
+
  # setkey -FP
  
== Reconnecting to screen ==
+
= OpenSSL =
  
$ screen -D
+
== Debugging IMAPS with OpenSSL ==
$ screen -R
 
  
I have a script in ~/bin/reconnect like so,
+
# openssl s_client -connect localhost:993
 +
> a1 LOGIN username@host password
 +
> a2 LOGOUT
  
#!/bin/bash
+
== Debugging HTTPS with OpenSSL ==
screen -D
 
screen -R
 
  
This will detach your last screen, and reconnect it on the current terminal.
+
$ openssl s_client -connect www.example.com:443
 +
GET /example.html HTTP/1.1
 +
host: www.example.com
  
== Scrolling in screen ==
+
== Links ==
  
See [https://www.saltycrane.com/blog/2008/01/how-to-scroll-in-gnu-screen/ How to scroll in GNU Screen]. Basically press Ctrl+A ESC then use Page Up and Page Down. Press ESC again to exit copy mode. As usual you can use Ctrl+[ in place of ESC.
+
* [http://www.madboa.com/geek/openssl/ OpenSSL Command-Line HOWTO]
  
= tmux =
+
= Pluggable Authentication Modules (PAM) =
  
== Live collaboration with tmux ==
+
== Links ==
  
User A:
+
* [http://www.centos.org/docs/5/html/Deployment_Guide-en-US/ch-pam.html 42.4. Pluggable Authentication Modules (PAM)]
  
tmux -S /tmp/collab
+
= SSH =
chmod 777 /tmp/collab
 
  
User B:
+
== Configuring SSH key login ==
  
tmux -S /tmp/collab attach
+
On the client machine generate a key-pair (if necessary, check for existing ~/.ssh/id_rsa.pub):
  
= Vim =
+
$ ssh-keygen -t rsa
  
== First, why Vim? ==
+
Copy the public key from the client to the server:
  
Read [http://www.viemu.com/a-why-vi-vim.html Why, oh WHY, do those #?@! nutheads use vi?]
+
$ scp ~/.ssh/id_rsa.pub user@example.org:
  
== Visual modes ==
+
Configure the authorized keys on the server:
  
Use 'v' for visual mode, 'V' for visual line mode and Ctrl+V for visual block mode.
+
$ ssh user@example.org
 +
$ mkdir ~/.ssh
 +
$ chmod go-w .ssh
 +
$ cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
 +
$ chmod 600 ~/.ssh/authorized_keys
 +
$ rm ~/id_rsa.pub
  
== Configuring spaces instead of tabs ==
+
== Tunneling over SSH ==
  
I use two spaces instead of tabs. To configure, edit your .vimrc file:
+
For example, connecting a remote MySQL server to the localhost:
  
  $ vim ~/.vimrc
+
  $ ssh -L 3306:localhost:3306 jselliot@ssh.progsoc.org
  
and include the following lines:
+
If the machine you want to connect to is not the localhost of the machine you're ssh'ing to,
  
set tabstop=2
+
  $ ssh -L 3306:muspell.progsoc.uts.edu.au:3306 ssh.progsoc.uts.edu.au
set shiftwidth=2
 
set expandtab
 
  
== Configuring syntax highlighting ==
+
The -L stanza is localport:remotehost:remoteport where localport is a
 +
port on your machine, forwarded to remoteport on remotehost.
  
See [http://www.cyberciti.biz/faq/turn-on-or-off-color-syntax-highlighting-in-vi-or-vim/ here].
+
== Tunneling over SSH with PuTTY ==
  
Use:
+
See [http://www.anchor.com.au/hosting/support/MySQL/Connecting_to_mysql_remotely Connecting to the MySQL database remotely (via an SSH Tunnel)]
  
:syntax on
+
* run putty.exe
 +
* Connection -> SSH -> Tunnels
 +
** Port forwarding: source port to 3306
 +
** destination: 127.0.0.1:3306
 +
** check Local
 +
** click Add
  
to turn on syntax highlighting.
+
== Enabling verbose SSH logging ==
  
Use:
+
To see what's going on with your ssh connections,
  
  :syntax off
+
  $ ssh -v user@host
  
to turn off syntax highlighting.
+
Or
  
To always use syntax highlighting:
+
$ ssh -vv user@host
  
$ vim ~/.vimrc
+
== Unlocking SSH key for session ==
  
and add:
+
jj5@orac:~/.config/autostart$ cat ssh-add.desktop
 
+
[Desktop Entry]
  syntax on
+
Type=Application
 +
Name=ssh-add
 +
Comment=Adds my private key to my session.
 +
  Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
  
To get a list of supported colour schemes open vim and type:
+
== Links ==
  
:colorscheme[space][Ctrl+D]
+
* [http://blogs.perl.org/users/smylers/2011/08/ssh-productivity-tips.html SSH Can Do That? Productivity Tips for Working with Remote Servers]
 +
* [http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html PuTTY Download Page]
  
To always use a particular colorscheme edit ~/.vimrc and add (for example):
+
= Standard IO =
  
colorscheme desert
+
== cat EOF ==
  
== Inserting a TAB character when expandtab is on ==
+
$ cat > output <<EOF
 +
> text
 +
> EOF
  
The problem here is that you have configured vim to insert spaces, but for a particular file (e.g. a Makefile) you need to insert a character.
+
$ cat output
 +
text
  
Press Ctrl+V TAB to insert a literal tab character.
+
= Script =
  
Or you can disable tab expansion altogether with:
+
== Creating a session log with script ==
  
  :set expandtab!
+
  $ script -t 2> timing
  
== Changing 2 space indent to 4 space indent (e.g. for python files) ==
+
The session log is in the file 'typescript' and the timing data is in 'timing'.
  
:%s/^\s*/&&/g
+
== Replaying a scripted session ==
  
For more information [https://www.progclub.org/blog/2013/08/10/vim-reformat-a-python-file-to-have-4-space-indentations/ see here].
+
$ scriptreplay timing
  
== Recording and replaying a macro ==
+
Uses the default file 'typescript' and the 'timing' file as specified.
  
To record a macro press 'q' and then a number between 1 and 9. E.g. press "q1". The macro is now recording. When you've finished issuing your commands press 'q' again to finish recording. To replay a macro press '@' followed by the number of the macro. That is, if you pressed "q1" to record the macro, press "@1" to replay the macro. To replay the last macro again press "@@".
+
= Screen =
  
== Deleting to end of line ==
+
== Creating a new screen or reconnecting to a detached screen ==
  
  d$
+
  $ screen -R
  
== Deleting to beginning of line ==
+
== Detaching a screen ==
  
  d^
+
  $ screen -D
  
== Finding text ==
+
== Reconnecting to screen ==
  
To search forward for "text":
+
$ screen -D
 +
$ screen -R
  
/text
+
I have a script in ~/bin/reconnect like so,
  
To search backward for "text":
+
#!/bin/bash
 +
screen -D
 +
screen -R
  
?text
+
This will detach your last screen, and reconnect it on the current terminal.
  
To repeat the last search in a forward direction press 'n', or to search again backwards press 'N'.
+
== Scrolling in screen ==
  
== Finding and replacing text ==
+
See [https://www.saltycrane.com/blog/2008/01/how-to-scroll-in-gnu-screen/ How to scroll in GNU Screen]. Basically press Ctrl+A ESC then use Page Up and Page Down. Press ESC again to exit copy mode. As usual you can use Ctrl+[ in place of ESC.
  
To replace the first instance of "search" on the current line with "destroy":
+
= tmux =
  
:s/search/destroy/
+
== Live collaboration with tmux ==
  
To replace all instances of "search" on the current line with "destroy":
+
User A:
  
  :s/search/destroy/g
+
  tmux -S /tmp/collab
 +
chmod 777 /tmp/collab
  
To replace all instances of "search" on lines 13 to 37 with "destroy":
+
User B:
  
  :13,37 s/search/destroy/g
+
  tmux -S /tmp/collab attach
  
To replace all instances of "search" in the entire file with "destroy":
+
= Vim =
  
:%s/search/destroy/g
+
== First, why Vim? ==
  
== Changing DOS/Windows line-endings (CRLF) to Unix line-endings ==
+
Read [http://www.viemu.com/a-why-vi-vim.html Why, oh WHY, do those #?@! nutheads use vi?]
  
To set the line-ending to Unix line endings run the command:
+
== Visual modes ==
  
:setlocal ff=unix
+
Use 'v' for visual mode, 'V' for visual line mode and Ctrl+V for visual block mode.
  
More information on managing file formats [http://vim.wikia.com/wiki/File_format available here].
+
== Configuring spaces instead of tabs ==
  
== Disabling auto-indent etc. to paste from clipboard ==
+
I use two spaces instead of tabs. To configure, edit your .vimrc file:
  
To disable smart indenting when you're going to paste in text:
+
$ vim ~/.vimrc
  
:set paste
+
and include the following lines:
  
To turn it off again:
+
set tabstop=2
 +
set shiftwidth=2
 +
set expandtab
  
:set nopaste
+
== Configuring syntax highlighting ==
  
There's more info in this article: [http://vim.wikia.com/wiki/Toggle_auto-indenting_for_code_paste Toggle auto-indenting for code paste]
+
See [http://www.cyberciti.biz/faq/turn-on-or-off-color-syntax-highlighting-in-vi-or-vim/ here].
  
== Positioning windows ==
+
Use:
  
Use -o for horizontal split, e.g.:
+
:syntax on
  
vim -o a.txt b.txt
+
to turn on syntax highlighting.
  
Use -O for vertical split, e.g.:
+
Use:
  
  vim -o a.txt b.txt
+
  :syntax off
  
Use ^W to navigate windows then use directional keys h, j, k, l, etc.
+
to turn off syntax highlighting.
  
Use ^W and &lt; or &gt; to resize windows.
+
To always use syntax highlighting:
  
== To indent a block of text in Vim ==
+
$ vim ~/.vimrc
  
Use the > command. E.g. to indent five lines:
+
and add:
  
  5 > >
+
  syntax on
  
Press . (dot) to keep indenting.
+
To get a list of supported colour schemes open vim and type:
  
Or inside a block (e.g. curly brace, HTML/XML element, etc.) you can put your cursor in the element on on the curly brace and then:
+
:colorscheme[space][Ctrl+D]
  
> %
+
To always use a particular colorscheme edit ~/.vimrc and add (for example):
  
See [http://stackoverflow.com/questions/235839/indent-multiple-lines-quickly-in-vi#235841 here] for more.
+
colorscheme desert
  
== Open a file in a new window/tab ==
+
== Inserting a TAB character when expandtab is on ==
  
To open a file on the left hand side:
+
The problem here is that you have configured vim to insert spaces, but for a particular file (e.g. a Makefile) you need to insert a character.
  
:vert new filename.ext
+
Press Ctrl+V TAB to insert a literal tab character.
  
Note: ':vnew filename.ext' and ':vsp filename.ext' also work.
+
Or you can disable tab expansion altogether with:
  
To open a file at the top:
+
:set expandtab!
  
:new filename.ext
+
== Changing 2 space indent to 4 space indent (e.g. for python files) ==
  
See [http://stackoverflow.com/questions/10760310/how-to-open-a-new-file-in-vim-in-a-new-window#10762678 here] for more.
+
:%s/^\s*/&&/g
  
== Explore files in Vim ==
+
For more information [https://www.progclub.org/blog/2013/08/10/vim-reformat-a-python-file-to-have-4-space-indentations/ see here].
  
Enter:
+
== Recording and replaying a macro ==
  
:Explore
+
To record a macro press 'q' and then a number between 1 and 9. E.g. press "q1". The macro is now recording. When you've finished issuing your commands press 'q' again to finish recording. To replay a macro press '@' followed by the number of the macro. That is, if you pressed "q1" to record the macro, press "@1" to replay the macro. To replay the last macro again press "@@".
  
== Switch between Vim tabs ==
+
== Deleting to end of line ==
  
Use gt and gT.
+
d$
  
== Switch between Vim windows ==
+
== Deleting to beginning of line ==
  
To toggle between open windows use:
+
d^
  
Ctrl+W W
+
== Finding text ==
  
To move in a direction use:
+
To search forward for "text":
  
  Ctrl+W h/j/k/l
+
  /text
  
See [http://superuser.com/questions/280500/how-does-one-switch-between-windows-on-vim#280501 here] for more.
+
To search backward for "text":
  
== Insert block comment in Vim ==
+
?text
 +
 
 +
To repeat the last search in a forward direction press 'n', or to search again backwards press 'N'.
  
See [https://stackoverflow.com/a/253391/868138 here] for line-commenting.
+
== Finding and replacing text ==
  
So it's:
+
To replace the first instance of "search" on the current line with "destroy":
  
# Ctrl+V (Note: not Shift+V!)
+
:s/search/destroy/
# Up/Down to select rows
 
# Shift+I
 
# Enter your text, e.g. '#' or '//'
 
# Ctrl+[ (or 'Esc')
 
  
== Navigate to matching tag ==
+
To replace all instances of "search" on the current line with "destroy":
  
To navigate to the matching beginning or end tag use '%'.
+
:s/search/destroy/g
  
You can also use e.g. '[{' to match the previous '{', or e.g. '])' to match the next ')'.
+
To replace all instances of "search" on lines 13 to 37 with "destroy":
  
== Auto-format HTML tags ==
+
:13,37 s/search/destroy/g
  
Stolen from [https://www.quora.com/How-do-you-auto-format-HTML-in-Vim here].
+
To replace all instances of "search" in the entire file with "destroy":
  
# first join all the lines - ggVGgJ
+
:%s/search/destroy/g
# Now break tags to new lines - :%s/>\s*</>\r</g
 
# Now set filetype - :set ft=html (you can do this before too)
 
# Now Indent - ggVG=
 
  
== Links ==
+
== Changing DOS/Windows line-endings (CRLF) to Unix line-endings ==
  
* [http://www.vim.org/ Vim: the editor]
+
To set the line-ending to Unix line endings run the command:
* [http://yannesposito.com/Scratch/en/blog/Learn-Vim-Progressively/ Learn Vim Progressively]
 
* [http://michael.peopleofhonoronly.com/vim/ Vim cheat sheet for programmers]
 
* [http://stackoverflow.com/questions/4781070/how-to-insert-tab-character-when-expandtab-option-is-on-in-vim How to insert Tab character when expandtab option is ON in VIM]
 
* [https://www.linux.com/learn/tutorials/8255-vim-tips-the-basics-of-search-and-replace Vim tips: the basics of search and replace]
 
* [http://vim.wikia.com/wiki/File_format File format]
 
* [http://www.viemu.com/a_vi_vim_graphical_cheat_sheet_tutorial.html Graphical vi-vim Cheat Sheet and Tutorial]
 
* [http://www.angelwatt.com/coding/notes/vim-commands.html Vim Commands Cheat Sheet]
 
  
== Create PDF from text using Vim ==
+
:setlocal ff=unix
  
Generate PDF from input.txt with:
+
More information on managing file formats [http://vim.wikia.com/wiki/File_format available here].
  
$ vim input.txt -c "hardcopy > doc.ps | q" && ps2pdf doc.ps
+
== Disabling auto-indent etc. to paste from clipboard ==
  
Examine output with:
+
To disable smart indenting when you're going to paste in text:
  
  $ okular doc.pdf
+
  :set paste
  
= Write =
+
To turn it off again:
  
== Talking to other users on the system ==
+
:set nopaste
  
'''write''' is a unix command for talking to other users on the system. To use '''write''':
+
There's more info in this article: [http://vim.wikia.com/wiki/Toggle_auto-indenting_for_code_paste Toggle auto-indenting for code paste]
  
1. SSH to <username>@<hostname> and login with your username and password.
+
== Positioning windows ==
  
2. Issue the following command to find out who is logged onto the system:
+
Use -o for horizontal split, e.g.:
  
  $ who
+
  vim -o a.txt b.txt
  
3. Issue the following command to talk to a specific user:
+
Use -O for vertical split, e.g.:
  
  $ write <username>
+
  vim -o a.txt b.txt
  
4. Enter the message you'd like to send the user, followed by Ctrl+C to send. Press Ctrl+D to cancel.
+
Use ^W to navigate windows then use directional keys h, j, k, l, etc.
  
= Date =
+
Use ^W and &lt; or &gt; to resize windows.
  
== Reporting the time on the server ==
+
== To indent a block of text in Vim ==
  
$ date
+
Use the > command. E.g. to indent five lines:
  
== Reporting UTC time ==
+
5 > >
  
$ date --utc
+
Press . (dot) to keep indenting.
  
== Getting the date in yyyy-MM-dd-hhmmss format ==
+
Or inside a block (e.g. curly brace, HTML/XML element, etc.) you can put your cursor in the element on on the curly brace and then:
  
  $ date="`date +%F-%H%M%S`"
+
  > %
  
== Getting the year in four digits ==
+
See [http://stackoverflow.com/questions/235839/indent-multiple-lines-quickly-in-vi#235841 here] for more.
  
$ year="`date +%Y`"
+
== Open a file in a new window/tab ==
  
== Getting the month in two digits ==
+
To open a file on the left hand side:
  
  $ month="`date +%m`"
+
  :vert new filename.ext
  
== Getting the day of the month in two digits ==
+
Note: ':vnew filename.ext' and ':vsp filename.ext' also work.
  
$ day="`date +%d`"
+
To open a file at the top:
  
== Getting yesterday's date ==
+
:new filename.ext
  
$ date --date='1 day ago' +%Y-%m-%d
+
See [http://stackoverflow.com/questions/10760310/how-to-open-a-new-file-in-vim-in-a-new-window#10762678 here] for more.
  
== Converting Unix time (seconds since epoch) ==
+
== Explore files in Vim ==
  
For timestamp '1501370200':
+
Enter:
  
  $ date -d @1501370200 +%F-%H%M%S
+
  :Explore
  
== Running timedatectl from systemd ==
+
== Switch between Vim tabs ==
  
There's a new command bundled with systmed:
+
Use gt and gT.
  
# timedatectl
+
== Switch between Vim windows ==
  
It reports on (and controls) how the system time is configured.
+
To toggle between open windows use:
  
= MySQL =
+
Ctrl+W W
  
== Run mysql without authentication/authorisation ==
+
To move in a direction use:
  
  # service mysql stop
+
  Ctrl+W h/j/k/l
# mysqld_safe --skip-grant-tables &
 
  
Then you can connect without a password, e.g.:
+
See [http://superuser.com/questions/280500/how-does-one-switch-between-windows-on-vim#280501 here] for more.
  
# mysql -u root mysql
+
== Insert block comment in Vim ==
  
To stop the unauthenticated service:
+
See [https://stackoverflow.com/a/253391/868138 here] for line-commenting.
  
# mysqladmin shutdown
+
So it's:
  
Then restart a normal service:
+
# Ctrl+V (Note: not Shift+V!)
 +
# Up/Down to select rows
 +
# Shift+I
 +
# Enter your text, e.g. '#' or '//'
 +
# Ctrl+[ (or 'Esc')
  
# service mysql start
+
== Navigate to matching tag ==
  
== Logging all database queries ==
+
To navigate to the matching beginning or end tag use '%'.
  
# vim /etc/mysql/my.cnf
+
You can also use e.g. '[{' to match the previous '{', or e.g. '])' to match the next ')'.
  
In the [mysqld] section add:
+
== Auto-format HTML tags ==
  
log=/tmp/mysql.log
+
Stolen from [https://www.quora.com/How-do-you-auto-format-HTML-in-Vim here].
  
Then:
+
# first join all the lines - ggVGgJ
 +
# Now break tags to new lines - :%s/>\s*</>\r</g
 +
# Now set filetype - :set ft=html (you can do this before too)
 +
# Now Indent - ggVG=
  
# service mysql restart
+
== Links ==
  
Watch the log with:
+
* [http://www.vim.org/ Vim: the editor]
 +
* [http://yannesposito.com/Scratch/en/blog/Learn-Vim-Progressively/ Learn Vim Progressively]
 +
* [http://michael.peopleofhonoronly.com/vim/ Vim cheat sheet for programmers]
 +
* [http://stackoverflow.com/questions/4781070/how-to-insert-tab-character-when-expandtab-option-is-on-in-vim How to insert Tab character when expandtab option is ON in VIM]
 +
* [https://www.linux.com/learn/tutorials/8255-vim-tips-the-basics-of-search-and-replace Vim tips: the basics of search and replace]
 +
* [http://vim.wikia.com/wiki/File_format File format]
 +
* [http://www.viemu.com/a_vi_vim_graphical_cheat_sheet_tutorial.html Graphical vi-vim Cheat Sheet and Tutorial]
 +
* [http://www.angelwatt.com/coding/notes/vim-commands.html Vim Commands Cheat Sheet]
  
# tail -f /tmp/mysql.log
+
== Create PDF from text using Vim ==
  
== Dumping a MySQL database ==
+
Generate PDF from input.txt with:
  
You can dump the database into a file using:
+
  $ vim input.txt -c "hardcopy > doc.ps | q" && ps2pdf doc.ps
 
  $ mysqldump -h hostname -u user --password=password databasename > filename
 
  
== Loading a MySQL database from a dump file ==
+
Examine output with:
  
You can create a database using:
+
$ okular doc.pdf
  
$ echo create database databasename | mysql -h hostname -u user -p
+
= Write =
  
You can restore a database using:
+
== Talking to other users on the system ==
 
$ mysql -h hostname -u user --password=password databasename < filename
 
  
== Creating a MySQL user ==
+
'''write''' is a unix command for talking to other users on the system. To use '''write''':
  
# mysql -h localhost -u root --password=<password>
+
1. SSH to <username>@<hostname> and login with your username and password.
mysql> create user 'username'@'localhost' identified by '<password>';
 
  
== Granting all MySQL user permissions ==
+
2. Issue the following command to find out who is logged onto the system:
  
  # mysql -h localhost -u root --password=<password>
+
  $ who
mysql> grant all privileges on dbname.* to user@host;
 
  
== Select domain name from email address ==
+
3. Issue the following command to talk to a specific user:
  
  SELECT SUBSTR( email, INSTR( email, '@' ) + 1 )
+
  $ write <username>
  
== Check if MySQL connection is encrypted with TLS/SSL ==
+
4. Enter the message you'd like to send the user, followed by Ctrl+C to send. Press Ctrl+D to cancel.
  
Check the SSL version in use:
+
= Date =
  
show status like 'Ssl_version';
+
== Reporting the time on the server ==
  
Or check the cipher in use:
+
$ date
  
show status like 'Ssl_cipher';
+
== Reporting UTC time ==
  
= Apache =
+
$ date --utc
  
== Reporting loaded Apache modules ==
+
== Getting the date in yyyy-MM-dd-hhmmss format ==
  
  # apache2ctl -M
+
  $ date="`date +%F-%H%M%S`"
  
== Maintaining .htaccess passwords ==
+
== Getting the year in four digits ==
  
To add or modify the password for a user:
+
$ year="`date +%Y`"
  
$ htpasswd /etc/apache2/passwd username
+
== Getting the month in two digits ==
  
== Configuring PHP session timeout in .htaccess ==
+
$ month="`date +%m`"
  
For a session timeout of 9 hours:
+
== Getting the day of the month in two digits ==
  
  php_value session.cookie_lifetime 32400
+
  $ day="`date +%d`"
php_value session.gc_maxlifetime 32400
 
  
== Disabling PHP magic quotes in .htaccess ==
+
== Getting yesterday's date ==
  
  php_flag magic_quotes_gpc Off
+
  $ date --date='1 day ago' +%Y-%m-%d
  
== Requiring HTTP Auth in .htaccess ==
+
== Converting Unix time (seconds since epoch) ==
  
AuthType Basic
+
For timestamp '1501370200':
AuthName "Speak Friend And Enter"
 
AuthUserFile /home/jj5/.htpasswd
 
Require valid-user
 
  
== Restarting Apache ==
+
$ date -d @1501370200 +%F-%H%M%S
  
The hard way
+
== Running timedatectl from systemd ==
  
$ sudo /etc/init.d/apache2 restart
+
There's a new command bundled with systmed:
  
The graceful way (avoids dropping active connections)
+
# timedatectl
  
$ sudo apache2ctl graceful
+
It reports on (and controls) how the system time is configured.
  
== Allowing directory browsing ==
+
= MySQL (and MariaDB) =
  
To show directory index pages, in the apache config file:
+
== Run mysql without authentication/authorisation ==
  
  <Directory /var/www/data>
+
  # service mysql stop
  Options Indexes
+
  # mysqld_safe --skip-grant-tables &
  </Directory>
 
  
= C =
+
Then you can connect without a password, e.g.:
  
== Locating memset function ==
+
# mysql -u root mysql
  
The memset function is in &lt;string.h> as described in this article [http://www.java-samples.com/showtutorial.php?tutorialid=591 Using memset(), memcpy(), and memmove() in C]
+
To stop the unauthenticated service:
  
== Links ==
+
# mysqladmin shutdown
  
* [http://www.ibm.com/developerworks/linux/library/l-memory/ Inside memory management]
+
Then restart a normal service:
  
= PHP =
+
# service mysql start
  
== Including a file relative to the including file ==
+
== Logging all database queries ==
  
  require_once( dirname( __FILE__ ) . '/relative/path/to.php' );
+
  # vim /etc/mysql/my.cnf
  
== Enabling error reporting ==
+
In the [mysqld] section add:
  
  error_reporting( E_ALL | E_STRICT );
+
  log=/tmp/mysql.log
ini_set( 'display_errors', 'On' );
 
  
== Setting an error handler ==
+
Then:
  
  set_error_handler( "error_handler", E_ALL | E_STRICT );
+
  # service mysql restart
  
function error_handler( $error_code, $error_message, $error_file, $error_line, $error_context ) {
+
Watch the log with:
  // ...
 
}
 
  
== Disable HTML content in var_dump ==
+
# tail -f /tmp/mysql.log
  
ini_set( 'html_errors', 'off' );
+
Or:
  
== Report PHP modules ==
+
SET GLOBAL log_output = 'FILE';
 +
SET GLOBAL general_log_file = 'my_logs.txt';
 +
SET GLOBAL general_log = 'ON';
  
$ php -m
+
my_logs.txt will be in /var/lib/mysql
  
== PHP Security Best Practices For Sys Admins ==
+
== Dumping a MySQL database ==
  
See [https://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html Linux 25 PHP Security Best Practices For Sys Admins].
+
You can dump the database into a file using:  
 +
 +
$ mysqldump -h hostname -u user --password=password databasename > filename
  
= BASH scripting =
+
== Loading a MySQL database from a dump file ==
  
For a primer on bash scripting see [http://www.progsoc.org/tfm/tfm03/node37.html TFM: Erotic Fantasy: /bin/sh Programming].
+
You can create a database using:
  
== Telling a script to run in bash ==
+
$ echo create database databasename | mysql -h hostname -u user -p
  
The first line of the file should be:
+
You can restore a database using:
 +
 +
$ mysql -h hostname -u user --password=password databasename < filename
  
  #!/bin/bash
+
== Creating a MySQL user ==
 +
 
 +
  # mysql -h localhost -u root --password=<password>
 +
mysql> create user 'username'@'localhost' identified by '<password>';
  
== Checking if a command-line argument was passed in ==
+
== Granting all MySQL user permissions ==
  
  if [ -n "$1" ]; then
+
  # mysql -h localhost -u root --password=<password>
  echo "Missing parameter 1.";
+
mysql> grant all privileges on dbname.* to user@host;
  exit 1;
 
fi
 
  
== Checking if a command-line argument was not passed in ==
+
== Select domain name from email address ==
  
  if [ "$1" = "" ]; then
+
  SELECT SUBSTR( email, INSTR( email, '@' ) + 1 )
  echo "Missing parameter 1.";
 
  exit 1;
 
fi
 
  
Or:
+
== Check if MySQL connection is encrypted with TLS/SSL ==
  
if [ -z "$1" ]; then
+
Check the SSL version in use:
  echo "Missing parameter 1.";
 
  exit 1;
 
fi
 
  
== Checking command exit status ==
+
show status like 'Ssl_version';
  
cd /my/path
+
Or check the cipher in use:
if [ "$?" -ne "0" ]; then
 
  echo "Cannot change dir.";
 
  exit 1;
 
fi
 
  
== Checking if a file does/doesn't exist ==
+
show status like 'Ssl_cipher';
  
Check if file exists:
+
== Report on server config ==
  
if [ -f "/my/file" ]; then
+
See [https://dev.mysql.com/doc/refman/5.7/en/show.html SHOW Statements] for the full list, but check out:
  cat /my/file
 
fi
 
  
Check if file doesn't exist:
+
SHOW VARIABLES
  
if [ ! -f "/my/file" ]; then
+
and
  touch /my/file
 
fi
 
  
== Checking if a directory does/doesn't exist ==
+
SHOW STATUS
  
Check if directory exists:
+
and
  
  if [ -d "/my/dir" ]; then
+
  SHOW PROCESSLIST
  rmdir /my/dir
 
fi
 
  
Check if directory doesn't exist:
+
== Monitor MySQL activity ==
  
  if [ ! -d "/my/dir" ]; then
+
  $ watch "mysql -t -e 'show processlist'"
  mkdir /my/dir
 
fi
 
  
== Deleting old backups ==
+
= Apache =
  
To keep only the latest five backups:
+
== Reporting loaded Apache modules ==
  
  find . -maxdepth 1 -type f -printf '%T@ %p\0' | sort -r -z -n | awk 'BEGIN { RS="\0"; ORS="\0"; FS="" } NR > 5 { sub("^[0-9]*(.[0-9]*)? ", ""); print }' | xargs -0 rm -f
+
  # apache2ctl -M
  
This script stolen from [http://stackoverflow.com/questions/25785/delete-all-but-the-most-recent-x-files-in-bash stackoverflow].
+
== Maintaining .htaccess passwords ==
  
Requires GNU find for -printf, GNU sort for -z, GNU awk for "\0" and GNU xargs for -0, but handles files with embedded newlines or spaces.
+
To add or modify the password for a user:
  
== Changing into the script's directory ==
+
$ htpasswd /etc/apache2/passwd username
  
cd "`dirname $0`"
+
== Configuring PHP session timeout in .htaccess ==
  
== Getting the absolute path of a relative path ==
+
For a session timeout of 9 hours:
  
  readlink -f ./some/path
+
  php_value session.cookie_lifetime 32400
 +
php_value session.gc_maxlifetime 32400
  
== Creating a temp directory ==
+
== Disabling PHP magic quotes in .htaccess ==
  
  dir=`mktemp -d` && cd $dir
+
  php_flag magic_quotes_gpc Off
  
== Reading secret input from stdin ==
+
== Requiring HTTP Auth in .htaccess ==
  
You can read a secret, such as a password, like this:
+
AuthType Basic
 +
AuthName "Speak Friend And Enter"
 +
AuthUserFile /home/jj5/.htpasswd
 +
Require valid-user
  
echo -n "Enter passphrase: "
+
== Restarting Apache ==
stty -echo
 
read passphrase;
 
stty echo
 
echo ""
 
  
After running the above the secret will be in the $passphrase environment variable.
+
The hard way
  
== String replacements in bash ==
+
$ sudo /etc/init.d/apache2 restart
  
See the [http://www.tldp.org/LDP/abs/html/string-manipulation.html string manipulation] doco. Basically, to replace first occurrence:
+
The graceful way (avoids dropping active connections)
  
  result=${var/find/replace}
+
  $ sudo apache2ctl graceful
  
To replace all occurrences:
+
== Allowing directory browsing ==
 +
 
 +
To show directory index pages, in the apache config file:
 +
 
 +
<Directory /var/www/data>
 +
  Options Indexes
 +
</Directory>
 +
 
 +
= C =
  
result=${var//find/replace}
+
== Locating memset function ==
  
A practical example, get an ISO date and turn it into a path:
+
The memset function is in &lt;string.h> as described in this article [http://www.java-samples.com/showtutorial.php?tutorialid=591 Using memset(), memcpy(), and memmove() in C]
  
date="$(date +%Y-%m-%d)"
+
== Links ==
work_dir=${date//-//}
 
  
== Sending a HEREDOC to a file ==
+
* [http://www.ibm.com/developerworks/linux/library/l-memory/ Inside memory management]
  
cat << EOF > /tmp/yourfilehere
+
= PHP =
These contents will be written to the file.
 
        This line is indented.
 
EOF
 
  
== Bash case/switch statement ==
+
== Including a file relative to the including file ==
  
See [http://tldp.org/LDP/Bash-Beginners-Guide/html/sect_07_03.html using case statements], e.g.:
+
require_once( dirname( __FILE__ ) . '/relative/path/to.php' );
  
case $space in
+
== Enabling error reporting ==
[1-6]*)
 
  Message="All is quiet."
 
  ;;
 
[7-8]*)
 
  Message="Start thinking about cleaning out some stuff.  There's a partition that is $space % full."
 
  ;;
 
9[1-8])
 
  Message="Better hurry with that new disk...  One partition is $space % full."
 
  ;;
 
99)
 
  Message="I'm drowning here!  There's a partition at $space %!"
 
  ;;
 
*)
 
  Message="I seem to be running with an nonexistent amount of disk space..."
 
  ;;
 
esac
 
  
== Using dotglob shopt to match dot-files ==
+
error_reporting( E_ALL | E_STRICT );
 +
ini_set( 'display_errors', 'On' );
  
To enable dot-file matching in globs, set the dotglob shell option:
+
== Setting an error handler ==
  
  $ shopt -s dotglob
+
  set_error_handler( "error_handler", E_ALL | E_STRICT );
  
== Stopping a script from running if it previously exited due to error ==
+
  function error_handler( $error_code, $error_message, $error_file, $error_line, $error_context ) {
 
+
   // ...
persistentDataDir=/var/lib/something
 
  alarm() {
 
   touch $persistentDataDir/alarm
 
 
  }
 
  }
trap alarm ERR
 
[ -f $persistentDataDir/alarm ] && exit 1
 
  
== Make sure only one instance of a script is running at a time ==
+
== Disable HTML content in var_dump ==
  
  ephemeralDataDir=/var/run/something
+
  ini_set( 'html_errors', 'off' );
unlock() {
 
  rmdir $ephemeralDataDir/lock
 
}
 
mkdir $ephemeralDataDir/lock || exit 1;
 
trap unlock EXIT
 
  
== BASH programming advice ==
+
== Report PHP modules ==
  
See [https://blog.yossarian.net/2020/01/23/Anybody-can-write-good-bash-with-a-little-effort Anybody can write good bash (with a little effort)].
+
$ php -m
  
== Run a command using arguments that come from an array ==
+
== PHP Security Best Practices For Sys Admins ==
  
See [https://unix.stackexchange.com/a/412647/356289 here]:
+
See [https://www.cyberciti.biz/tips/php-security-best-practices-tutorial.html Linux 25 PHP Security Best Practices For Sys Admins].
  
#!/bin/bash
+
= BASH scripting =
tabs=("first tab" "second tab")
 
args=()
 
for t in "${tabs[@]}" ; do
 
  args+=(-t "$t")
 
done
 
app "${args[@]}"
 
  
== Display a CSV in columnar or tabular format ==
+
For a primer on bash scripting see [http://www.progsoc.org/tfm/tfm03/node37.html TFM: Erotic Fantasy: /bin/sh Programming].
  
$ column -t -s , data.csv
+
== Telling a script to run in bash ==
  
= Sed =
+
The first line of the file should be:
  
== Find and replace with sed ==
+
#!/bin/bash
  
To update the current file use '-i'. E.g.:
+
== Checking if a command-line argument was passed in ==
  
  sed -i 's/search-text/replace-text/' file
+
  if [ -n "$1" ]; then
 +
  echo "Missing parameter 1.";
 +
  exit 1;
 +
fi
  
= Awk =
+
== Checking if a command-line argument was not passed in ==
  
== Listing IP addresses in an Apache web log ==
+
if [ "$1" = "" ]; then
 +
  echo "Missing parameter 1.";
 +
  exit 1;
 +
fi
  
awk '/GET \/path\/for\/url/ { print $1 }' /var/log/apache2/access.log | sort | uniq
+
Or:
  
== Printing space-separated field ==
+
if [ -z "$1" ]; then
 +
  echo "Missing parameter 1.";
 +
  exit 1;
 +
fi
  
echo 'no no yes no' | awk '{print $3}'
+
== Checking command exit status ==
  
== Printing delimited field ==
+
cd /my/path
 +
if [ "$?" -ne "0" ]; then
 +
  echo "Cannot change dir.";
 +
  exit 1;
 +
fi
  
echo 'no:no:yes:no' | awk -F ':' '{print $3}'
+
== Checking if a file does/doesn't exist ==
  
= Subversion =
+
Check if file exists:
  
== Setting svn:externals from the command-line ==
+
if [ -f "/my/file" ]; then
 +
  cat /my/file
 +
fi
  
See [http://beerpla.net/2009/06/20/how-to-properly-set-svn-svnexternals-property-in-svn-command-line/ here].
+
Check if file doesn't exist:
  
To set an svn:externals from the command-line:
+
if [ ! -f "/my/file" ]; then
 +
  touch /my/file
 +
fi
  
svn propset svn:externals 'rdfind-php https://www.progclub.org/svn/pcrepo/rdfind.php/branches/0.1' .
+
== Checking if a directory does/doesn't exist ==
svn ci -m 'Adding svn:externals for rdfind-php...'
 
svn up
 
  
Or to use a file:
+
Check if directory exists:
  
  svn propset svn:externals -F svn.externals .
+
  if [ -d "/my/dir" ]; then
 +
  rmdir /my/dir
 +
fi
  
== Setting svn:ignore from the command line ==
+
Check if directory doesn't exist:
  
See [http://tedone.typepad.com/blog/2010/03/setting-svnignore-from-the-command-line.html here].
+
if [ ! -d "/my/dir" ]; then
 +
  mkdir /my/dir
 +
fi
  
$ svn propset svn:ignore [file|folder] [path]
+
== Deleting old backups ==
  
Or use a file and apply recursively:
+
To keep only the latest five backups:
  
  $ svn propset svn:ignore -RF ./svn-ignore-list.txt .
+
  find . -maxdepth 1 -type f -printf '%T@ %p\0' | sort -r -z -n | awk 'BEGIN { RS="\0"; ORS="\0"; FS="" } NR > 5 { sub("^[0-9]*(.[0-9]*)? ", ""); print }' | xargs -0 rm -f
  
= Git =
+
This script stolen from [http://stackoverflow.com/questions/25785/delete-all-but-the-most-recent-x-files-in-bash stackoverflow].
  
== Showing status of working copy ==
+
Requires GNU find for -printf, GNU sort for -z, GNU awk for "\0" and GNU xargs for -0, but handles files with embedded newlines or spaces.
  
git status
+
== Changing into the script's directory ==
  
== Showing repo history ==
+
cd "`dirname $0`"
  
git log
+
== Getting the absolute path of a relative path ==
  
== Showing remote repositories (including 'origin') ==
+
readlink -f ./some/path
  
git remote -v
+
== Creating a temp directory ==
  
== Handy git aliases ==
+
dir=`mktemp -d` && cd $dir
  
Save these to your ~/.gitconfig file.
+
== Reading secret input from stdin ==
  
For a nicer view of history than standard 'git log' -- colourful, one-line-per commit, etc:
+
You can read a secret, such as a password, like this:
  
  graph = !git log --all --graph --color --abbrev-commit --pretty=oneline
+
echo -n "Enter passphrase: "
 +
stty -echo
 +
read passphrase;
 +
stty echo
 +
echo ""
  
To show only the files that have changed, rather than the full line-by-line content:
+
After running the above the secret will be in the $passphrase environment variable.
  
  dif  = !git diff --name-status
+
== String replacements in bash ==
  
== Show git remote URL ==
+
See the [http://www.tldp.org/LDP/abs/html/string-manipulation.html string manipulation] doco. Basically, to replace first occurrence:
  
  git config --get remote.origin.url
+
  result=${var/find/replace}
  
= IRC =
+
To replace all occurrences:
  
== Instructing ChanServ to op an admin ==
+
result=${var//find/replace}
  
/msg ChanServ op #channel user
+
A practical example, get an ISO date and turn it into a path:
  
E.g.
+
date="$(date +%Y-%m-%d)"
 +
work_dir=${date//-//}
  
/msg ChanServ op #gnurc jj5
+
== Sending a HEREDOC to a file ==
  
Sub 'op' for 'deop' to remove op privilege.
+
cat << EOF > /tmp/yourfilehere
 +
These contents will be written to the file.
 +
        This line is indented.
 +
EOF
  
= C++ =
+
== Bash case/switch statement ==
  
== C++ books ==
+
See [http://tldp.org/LDP/Bash-Beginners-Guide/html/sect_07_03.html using case statements], e.g.:
  
=== Books I want ===
+
case $space in
 
+
[1-6]*)
* [http://smile.amazon.com/dp/1785283073 Boost.Asio C++ Network Programming 2ed]
+
  Message="All is quiet."
* [http://smile.amazon.com/dp/1783986549 Boost.Asio C++ Network Programming Cookbook]
+
  ;;
 
+
[7-8]*)
* [http://www.amazon.com/dp/020170353X Accelerated C++] by Andrew Koening
+
  Message="Start thinking about cleaning out some stuff. There's a partition that is $space % full."
* [http://www.amazon.com/dp/0321334876 Effective C++] by Scott Meyers
+
  ;;
* [http://www.amazon.com/dp/1491903996 Effective Modern C++] by Scott Meyers
+
9[1-8])
* [http://www.amazon.com/dp/020163371X More Effective C++] by Scott Meyers
+
  Message="Better hurry with that new disk... One partition is $space % full."
* [http://www.amazon.com/dp/0201749629 Effective STL] by Scott Meyers
+
  ;;
* [http://www.amazon.com/dp/0201615622 Exceptional C++] by Herb Sutter
+
99)
* [http://www.amazon.com/dp/020170434X More Exceptional C++] by Herb Sutter
+
  Message="I'm drowning here!  There's a partition at $space %!"
* [http://www.amazon.com/dp/0201760428 Exceptional C++ Style] by Herb Sutter
+
  ;;
* [http://www.amazon.com/dp/0321227255 C++ Template Metaprogramming] by David Abrahams
+
*)
* [http://www.amazon.com/dp/059652269X 97 Things Every Software Architect Should Know] by Richard Monson-Haefel
+
  Message="I seem to be running with an nonexistent amount of disk space..."
* [http://www.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries] by Robert Demming
+
  ;;
 +
esac
  
=== Books I own ===
+
== Using dotglob shopt to match dot-files ==
  
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 4ed] by Bjarne Stroustrup
+
To enable dot-file matching in globs, set the dotglob shell option:
* [http://smile.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries]
 
* [http://smile.amazon.com/dp/1849514887 Boost C++ Application Development Cookbook]
 
* [http://smile.amazon.com/dp/1782163263 Boost.Asio C++ Network Programming]
 
* [http://www.amazon.com/dp/0321113586 C++ Coding Standards] by Herb Sutter &#x2713;
 
* [http://www.amazon.com/dp/0201704315 Modern C++ Design] by Andrei Alexandrescu &#x2713;
 
* [http://www.amazon.com/dp/0596809484 97 Things Every Programmer Should Know] by Kevlin Henney &#x2713;
 
* [http://www.amazon.com/dp/0321133544 Beyond the C++ Standard Library] by Björn Karlsson &#x2713;
 
* [http://www.amazon.com/dp/9491028014 Introduction to the Boost C++ Libraries; Volume I - Foundations] by Robert Demming &#x2713;
 
* [http://www.amazon.com/dp/0123850037 API Design for C++] by Martin Reddy &#x2713;
 
* [http://www.amazon.com/dp/B00CB23URA Advanced C++ Metaprogramming] by Davide Di Gennaro &#x2713;
 
** Note: the next version of this book is: [http://www.amazon.com/dp/1484210115 Advanced Metaprogramming in Classic C++]
 
* [http://www.amazon.com/dp/1933988770 C++ Concurrency in Action: Practical Multithreading] by Anthony Williams &#x2713;
 
  
=== Books I'm not reading ===
+
$ shopt -s dotglob
 +
 
 +
== Stopping a script from running if it previously exited due to error ==
 +
 
 +
persistentDataDir=/var/lib/something
 +
alarm() {
 +
  touch $persistentDataDir/alarm
 +
}
 +
trap alarm ERR
 +
[ -f $persistentDataDir/alarm ] && exit 1
  
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 3ed] by Bjarne Stroustrup &#x2713;
+
== Make sure only one instance of a script is running at a time ==
** Note: 3ed is obsolete. Buy 4ed (above).
 
  
=== Books I've read ===
+
ephemeralDataDir=/var/run/something
 +
unlock() {
 +
  rmdir $ephemeralDataDir/lock
 +
}
 +
mkdir $ephemeralDataDir/lock || exit 1;
 +
trap unlock EXIT
  
* [http://www.amazon.com/dp/0596004966 C++ Pocket Reference] by Kyle Loudon &#x2713;
+
== BASH programming advice ==
  
== C++ blogs/articles ==
+
See [https://blog.yossarian.net/2020/01/23/Anybody-can-write-good-bash-with-a-little-effort Anybody can write good bash (with a little effort)].
  
* [http://blogs.msdn.com/b/hsutter/ Herb Sutter's MSDN blog]
+
== Run a command using arguments that come from an array ==
* [http://herbsutter.com/ Herb Sutter's personal blog]
 
* [http://herbsutter.com/gotw/ Herb Sutter's Guru of the Week (GotW)] updated from [http://gotw.ca/gotw/ gotw.ca]
 
  
== C++ performance tips ==
+
See [https://unix.stackexchange.com/a/412647/356289 here]:
  
* ++c can be faster than c++.
+
#!/bin/bash
* use const for everything that you possibly can.
+
tabs=("first tab" "second tab")
* use 'inline' when you need to define a function in a header. Typically only do that if it's small and the increase in code size from inlining is worth the cost to avoid the cost of a function call. For anything except trivially small functions you'll probably need to profile to know if it's worth it.
+
args=()
* don't use registers.
+
for t in "${tabs[@]}" ; do
* const [http://www.gotw.ca/gotw/081.htm rarely affects performance].
+
  args+=(-t "$t")
* debunking a number of [http://www.open-std.org/jtc1/sc22/wg21/docs/TR18015.pdf C++ myths that won't die].
+
done
* std::sort<> is typically faster than qsort() because it can avoid indirection at runtime.
+
app "${args[@]}"
* if you've got parallelisation going on, you may be able to just replace a std::for_each with a parallel equivalent.
 
* read about [http://stackoverflow.com/questions/579887/how-expensive-is-rtti performance cost of RTTI] (Run Time Type Information) and [http://stackoverflow.com/questions/4486609/when-can-compiling-c-without-rtti-cause-problems how to disable it]
 
* don't use dynamic_cast because it is slow (typeid is faster but still relies on RTTI)
 
* prefer unique_ptr to shared_ptr when possible. unique_ptr has less overhead.
 
* [http://sunsite.uakom.sk/sunworldonline/swol-02-1996/swol-02-perf.html Which is better, static or dynamic linking?]
 
* [http://stackoverflow.com/questions/2550281/floating-point-vs-integer-calculations-on-modern-hardware Integer vs Floating-Point performance]
 
  
= systemd =
+
== Display a CSV in columnar or tabular format ==
  
[https://en.wikipedia.org/wiki/Systemd systemd] is an init system used in most Linux distributions to bootstrap the user space and manage all processes subsequently.
+
$ column -t -s , data.csv
  
== Following a service log ==
+
== Maximum command line length ==
  
e.g. for bind9:
+
Technically this is an operating system limit, not a BASH limit.
  
  # journalctl -f -u bind9
+
  $ getconf ARG_MAX    # Get argument limit in bytes/chars
  
or for everything:
+
= Sed =
  
# journalctl -f
+
== Find and replace with sed ==
  
== System status ==
+
To update the current file use '-i'. E.g.:
  
To see spawned services hierarchy:
+
sed -i 's/search-text/replace-text/' file
  
# systemctl status
+
= Awk =
  
Or for a specific service e.g.:
+
== Listing IP addresses in an Apache web log ==
  
  # systemctl status networking
+
  awk '/GET \/path\/for\/url/ { print $1 }' /var/log/apache2/access.log | sort | uniq
  
= SaltStack =
+
== Printing space-separated field ==
  
== Running a command on specified minions ==
+
echo 'no no yes no' | awk '{print $3}'
  
From the salt master:
+
== Printing delimited field ==
  
  salt 'host' cmd.run 'update-locale'
+
  echo 'no:no:yes:no' | awk -F ':' '{print $3}'
  
From the salt minion:
+
= Subversion =
  
salt-call cmd.run 'update-locale'
+
== Setting svn:externals from the command-line ==
  
== Running a command on all minions ==
+
See [http://beerpla.net/2009/06/20/how-to-properly-set-svn-svnexternals-property-in-svn-command-line/ here].
  
salt '*' cmd.run 'update-locale'
+
To set an svn:externals from the command-line:
  
== Running a specific state file ==
+
svn propset svn:externals 'rdfind-php https://www.progclub.org/svn/pcrepo/rdfind.php/branches/0.1' .
 +
svn ci -m 'Adding svn:externals for rdfind-php...'
 +
svn up
  
From the salt master:
+
Or to use a file:
  
  salt $MINION_ID state.sls $STATE_FILE
+
  svn propset svn:externals -F svn.externals .
  
From the salt minion:
+
== Setting svn:ignore from the command line ==
  
salt-call state.sls $STATE_FILE
+
See [http://tedone.typepad.com/blog/2010/03/setting-svnignore-from-the-command-line.html here].
  
== Listing active jobs ==
+
$ svn propset svn:ignore [file|folder] [path]
 +
 
 +
Or use a file and apply recursively:
 +
 
 +
$ svn propset svn:ignore -RF ./svn-ignore-list.txt .
 +
 
 +
= Git =
  
salt-run jobs.active
+
== Showing status of working copy ==
  
== Listing available grains ==
+
git status
  
salt 'example' grains.items
+
== Showing repo history ==
  
== Listing available pillar ==
+
git log
  
salt 'example' pillar.items
+
== Showing remote repositories (including 'origin') ==
  
== Reporting a grain value ==
+
git remote -v
  
e.g. for the 'mem_total' grain:
+
== Handy git aliases ==
  
salt '*' grains.item mem_total
+
Save these to your ~/.gitconfig file.
  
== Passing a variable into a Jinja template from a salt state (SLS) ==
+
For a nicer view of history than standard 'git log' -- colourful, one-line-per commit, etc:
  
e.g.: to pass 'zabbix_deb_{pkg,url}' variables into the source.txt template:
+
  graph = !git log --all --graph --color --abbrev-commit --pretty=oneline
  
<nowiki>/srv/zabbix/release/{{ zabbix_deb_pkg }}.txt:</nowiki>
+
To show only the files that have changed, rather than the full line-by-line content:
  file.managed:
+
 
    - template: jinja
+
  dif  = !git diff --name-status
    - user: root
+
 
    - group: root
+
== Show git remote URL ==
    - mode: 644
+
 
    - source: salt://file/srv/zabbix/release/source.txt
+
git config --get remote.origin.url
    - require:
 
      - file: /srv/zabbix/release
 
    - default:
 
      <nowiki>zabbix_deb_pkg: {{ zabbix_deb_pkg }}</nowiki>
 
      <nowiki>zabbix_deb_url: {{ zabbix_deb_url }}</nowiki>
 
  
= KDE =
+
= IRC =
  
== Running user login script (X11/XOrg/XWindows) ==
+
== Instructing ChanServ to op an admin ==
  
A way to run user login scripts which works for KDE Plasma (and apparently other [https://en.wikipedia.org/wiki/X.Org_Server X.Org Server X Window System] environments) is to create a *.desktop file in ~/.config/autostart/. For example I have a ~/.config/autostart/ssh-add.desktop file with the following contents to register my SSH key in the SSH Agent:
+
/msg ChanServ op #channel user
  
[Desktop Entry]
+
E.g.
Type=Application
 
Name=ssh-add
 
Comment=Adds my private key to my session.
 
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
 
  
== Standard KDE shortcut key bindings ==
+
/msg ChanServ op #gnurc jj5
  
{|class="wikitable"
+
Sub 'op' for 'deop' to remove op privilege.
! Name          !! Shortcut !! Command
 
|-
 
| Insert comment || F1      || xdotool type "$(date +%Y-%m-%d ) $USER - "
 
|-
 
| Insert sydtime || F4      || xdotool type "$(date +%Y-%m-%d-%H%M%S)"
 
|-
 
| Konsole        || Meta+T  || konsole
 
|-
 
| Dolphin        || Meta+E  || dolphin
 
|-
 
| Kate          || Ctrl+Shift+F12 || kate
 
|-
 
| KCalc          || Ctrl+Shift+F11 || kcalc
 
|-
 
| Firefox        || Ctrl+Shift+F10 || firefox
 
|}
 
  
= VirtualBox =
+
= C++ =
  
== Mounting a VirtualBox VDI file ==
+
== C++ books ==
  
Note: instead of doing this consider booting with a live CD.
+
=== Books I want ===
  
See [https://askubuntu.com/questions/19430/mount-a-virtualbox-drive-image-vdi/50290#50290 here]:
+
* [http://smile.amazon.com/dp/1785283073 Boost.Asio C++ Network Programming 2ed]
 +
* [http://smile.amazon.com/dp/1783986549 Boost.Asio C++ Network Programming Cookbook]
  
Install qemu if necessary:
+
* [http://www.amazon.com/dp/020170353X Accelerated C++] by Andrew Koening
 +
* [http://www.amazon.com/dp/0321334876 Effective C++] by Scott Meyers
 +
* [http://www.amazon.com/dp/1491903996 Effective Modern C++] by Scott Meyers
 +
* [http://www.amazon.com/dp/020163371X More Effective C++] by Scott Meyers
 +
* [http://www.amazon.com/dp/0201749629 Effective STL] by Scott Meyers
 +
* [http://www.amazon.com/dp/0201615622 Exceptional C++] by Herb Sutter
 +
* [http://www.amazon.com/dp/020170434X More Exceptional C++] by Herb Sutter
 +
* [http://www.amazon.com/dp/0201760428 Exceptional C++ Style] by Herb Sutter
 +
* [http://www.amazon.com/dp/0321227255 C++ Template Metaprogramming] by David Abrahams
 +
* [http://www.amazon.com/dp/059652269X 97 Things Every Software Architect Should Know] by Richard Monson-Haefel
 +
* [http://www.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries] by Robert Demming
  
# apt install qemu
+
=== Books I own ===
  
Then you'll need to load the network block device module:
+
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 4ed] by Bjarne Stroustrup
 +
* [http://smile.amazon.com/dp/9491028022 Introduction to the Boost C++ Libraries; Volume II - Advanced Libraries]
 +
* [http://smile.amazon.com/dp/1849514887 Boost C++ Application Development Cookbook]
 +
* [http://smile.amazon.com/dp/1782163263 Boost.Asio C++ Network Programming]
 +
* [http://www.amazon.com/dp/0321113586 C++ Coding Standards] by Herb Sutter &#x2713;
 +
* [http://www.amazon.com/dp/0201704315 Modern C++ Design] by Andrei Alexandrescu &#x2713;
 +
* [http://www.amazon.com/dp/0596809484 97 Things Every Programmer Should Know] by Kevlin Henney &#x2713;
 +
* [http://www.amazon.com/dp/0321133544 Beyond the C++ Standard Library] by Björn Karlsson &#x2713;
 +
* [http://www.amazon.com/dp/9491028014 Introduction to the Boost C++ Libraries; Volume I - Foundations] by Robert Demming &#x2713;
 +
* [http://www.amazon.com/dp/0123850037 API Design for C++] by Martin Reddy &#x2713;
 +
* [http://www.amazon.com/dp/B00CB23URA Advanced C++ Metaprogramming] by Davide Di Gennaro &#x2713;
 +
** Note: the next version of this book is: [http://www.amazon.com/dp/1484210115 Advanced Metaprogramming in Classic C++]
 +
* [http://www.amazon.com/dp/1933988770 C++ Concurrency in Action: Practical Multithreading] by Anthony Williams &#x2713;
  
# rmmod nbd
+
=== Books I'm not reading ===
# modprobe nbd max_part=16
 
  
Attach the .vdi image to one of the nbd you just created:
+
* [http://www.amazon.com/dp/0321563840 The C++ Programming Language 3ed] by Bjarne Stroustrup &#x2713;
 +
** Note: 3ed is obsolete. Buy 4ed (above).
  
# qemu-nbd -c /dev/nbd0 drive.vdi
+
=== Books I've read ===
  
Now you will get a /dev/nbd0 block device, along with several /dev/nbd0p* partition device nodes.
+
* [http://www.amazon.com/dp/0596004966 C++ Pocket Reference] by Kyle Loudon &#x2713;
  
# mount /dev/nbd0p1 /mnt
+
== C++ blogs/articles ==
  
Once you are done, unmount everything and disconnect the device:
+
* [http://blogs.msdn.com/b/hsutter/ Herb Sutter's MSDN blog]
 +
* [http://herbsutter.com/ Herb Sutter's personal blog]
 +
* [http://herbsutter.com/gotw/ Herb Sutter's Guru of the Week (GotW)] updated from [http://gotw.ca/gotw/ gotw.ca]
  
# qemu-nbd -d /dev/nbd0
+
== C++ performance tips ==
 +
 
 +
* ++c can be faster than c++.
 +
* use const for everything that you possibly can.
 +
* use 'inline' when you need to define a function in a header. Typically only do that if it's small and the increase in code size from inlining is worth the cost to avoid the cost of a function call. For anything except trivially small functions you'll probably need to profile to know if it's worth it.
 +
* don't use registers.
 +
* const [http://www.gotw.ca/gotw/081.htm rarely affects performance].
 +
* debunking a number of [http://www.open-std.org/jtc1/sc22/wg21/docs/TR18015.pdf C++ myths that won't die].
 +
* std::sort<> is typically faster than qsort() because it can avoid indirection at runtime.
 +
* if you've got parallelisation going on, you may be able to just replace a std::for_each with a parallel equivalent.
 +
* read about [http://stackoverflow.com/questions/579887/how-expensive-is-rtti performance cost of RTTI] (Run Time Type Information) and [http://stackoverflow.com/questions/4486609/when-can-compiling-c-without-rtti-cause-problems how to disable it]
 +
* don't use dynamic_cast because it is slow (typeid is faster but still relies on RTTI)
 +
* prefer unique_ptr to shared_ptr when possible. unique_ptr has less overhead.
 +
* [http://sunsite.uakom.sk/sunworldonline/swol-02-1996/swol-02-perf.html Which is better, static or dynamic linking?]
 +
* [http://stackoverflow.com/questions/2550281/floating-point-vs-integer-calculations-on-modern-hardware Integer vs Floating-Point performance]
 +
 
 +
= systemd =
  
= Elasticsearch =
+
[https://en.wikipedia.org/wiki/Systemd systemd] is an init system used in most Linux distributions to bootstrap the user space and manage all processes subsequently.
  
== Report on health of your Elasticsearch cluster ==
+
== Following a service log ==
  
$ curl http://localhost:9200/_cluster/health?pretty
+
e.g. for bind9:
  
= Zabbix =
+
# journalctl -f -u bind9
  
== Zabbix Agent on Mac OS X ==
+
or for everything:
  
Download and install agent.
+
# journalctl -f
  
Config file is here: /usr/local/etc/zabbix/zabbix_agentd.conf
+
== System status ==
  
Unload agent with:
+
To see spawned services hierarchy:
  
  # launchctl unload /Library/LaunchDaemons/com.zabbix.zabbix_agentd.plist
+
# systemctl status
 +
 
 +
Or for a specific service e.g.:
 +
 
 +
# systemctl status networking
 +
 
 +
= SaltStack =
 +
 
 +
== Running a command on specified minions ==
 +
 
 +
From the salt master:
 +
 
 +
salt 'host' cmd.run 'update-locale'
 +
 
 +
From the salt minion:
 +
 
 +
salt-call cmd.run 'update-locale'
 +
 
 +
== Running a command on all minions ==
 +
 
 +
salt '*' cmd.run 'update-locale'
 +
 
 +
== Running a specific state file ==
 +
 
 +
From the salt master:
 +
 
 +
salt $MINION_ID state.sls $STATE_FILE
 +
 
 +
From the salt minion:
 +
 
 +
salt-call state.sls $STATE_FILE
 +
 
 +
== Listing active jobs ==
 +
 
 +
salt-run jobs.active
 +
 
 +
== Listing available grains ==
 +
 
 +
salt 'example' grains.items
 +
 
 +
== Listing available pillar ==
 +
 
 +
salt 'example' pillar.items
 +
 
 +
== Reporting a grain value ==
 +
 
 +
e.g. for the 'mem_total' grain:
 +
 
 +
salt '*' grains.item mem_total
 +
 
 +
== Passing a variable into a Jinja template from a salt state (SLS) ==
 +
 
 +
e.g.: to pass 'zabbix_deb_{pkg,url}' variables into the source.txt template:
 +
 
 +
<nowiki>/srv/zabbix/release/{{ zabbix_deb_pkg }}.txt:</nowiki>
 +
  file.managed:
 +
    - template: jinja
 +
    - user: root
 +
    - group: root
 +
    - mode: 644
 +
    - source: salt://file/srv/zabbix/release/source.txt
 +
    - require:
 +
      - file: /srv/zabbix/release
 +
    - default:
 +
      <nowiki>zabbix_deb_pkg: {{ zabbix_deb_pkg }}</nowiki>
 +
      <nowiki>zabbix_deb_url: {{ zabbix_deb_url }}</nowiki>
 +
 
 +
= KDE =
 +
 
 +
== Running user login script (X11/XOrg/XWindows) ==
 +
 
 +
A way to run user login scripts which works for KDE Plasma (and apparently other [https://en.wikipedia.org/wiki/X.Org_Server X.Org Server X Window System] environments) is to create a *.desktop file in ~/.config/autostart/. For example I have a ~/.config/autostart/ssh-add.desktop file with the following contents to register my SSH key in the SSH Agent:
 +
 
 +
[Desktop Entry]
 +
Type=Application
 +
Name=ssh-add
 +
Comment=Adds my private key to my session.
 +
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'
 +
 
 +
== Standard KDE shortcut key bindings ==
 +
 
 +
{|class="wikitable"
 +
! Name          !! Shortcut !! Command
 +
|-
 +
| Send Ctrl+D    || Pause    || xdotool key "ctrl+d"
 +
|-
 +
| Insert comment || F1      || xdotool type "$(date +%Y-%m-%d ) $USER - "
 +
|-
 +
| Insert sydtime || F4      || xdotool type "$(date +%Y-%m-%d-%H%M%S)"
 +
|-
 +
| Konsole        || Meta+T  || konsole
 +
|-
 +
| Dolphin        || Meta+E  || dolphin
 +
|-
 +
| Firefox        || ScrollLock || firefox
 +
|-
 +
| Kate          || Ctrl+Shift+F12 || kate
 +
|-
 +
| KCalc          || Ctrl+Shift+F11 || kcalc
 +
|}
 +
 
 +
== Shutting down KDE/Plasma ==
 +
 
 +
# /etc/init.d/sddm stop
 +
 
 +
= VirtualBox =
 +
 
 +
== Mounting a VirtualBox VDI file ==
 +
 
 +
Note: instead of doing this consider booting with a live CD.
 +
 
 +
See [https://askubuntu.com/questions/19430/mount-a-virtualbox-drive-image-vdi/50290#50290 here]:
 +
 
 +
Install qemu if necessary:
 +
 
 +
# apt install qemu
 +
 
 +
Then you'll need to load the network block device module:
 +
 
 +
# rmmod nbd
 +
# modprobe nbd max_part=16
 +
 
 +
Attach the .vdi image to one of the nbd you just created:
 +
 
 +
# qemu-nbd -c /dev/nbd0 drive.vdi
 +
 
 +
Now you will get a /dev/nbd0 block device, along with several /dev/nbd0p* partition device nodes.
 +
 
 +
# mount /dev/nbd0p1 /mnt
 +
 
 +
Once you are done, unmount everything and disconnect the device:
 +
 
 +
# qemu-nbd -d /dev/nbd0
 +
 
 +
= Elasticsearch =
 +
 
 +
== Report on health of your Elasticsearch cluster ==
 +
 
 +
$ curl http://localhost:9200/_cluster/health?pretty
 +
 
 +
= Zabbix =
 +
 
 +
== Zabbix Agent on Mac OS X ==
 +
 
 +
Download and install agent.
 +
 
 +
Config file is here: /usr/local/etc/zabbix/zabbix_agentd.conf
 +
 
 +
Unload agent with:
 +
 
 +
  # launchctl unload /Library/LaunchDaemons/com.zabbix.zabbix_agentd.plist
 +
 
 +
Load agent with:
 +
 
 +
# launchctl load /Library/LaunchDaemons/com.zabbix.zabbix_agentd.plist
 +
 
 +
To add a 'pki' group:
 +
 
 +
# dseditgroup -o create pki
 +
 
 +
To monitor syslog on Mac OS X:
 +
 
 +
# tail -f /var/log/system.log
 +
 
 +
== Installing Zabbix Agent from source on Mac OS X ==
 +
 
 +
Download sources from https://www.zabbix.com/download_sources
 +
 
 +
$ brew update
 +
$ brew install openssl
 +
$ brew install pcre
 +
jj5@condor:~/Desktop/zabbix-4.4.7$ ./configure --enable-agent --with-openssl=/usr/local/opt/openssl/
 +
jj5@condor:~/Desktop/zabbix-4.4.7$ sudo make install
 +
 
 +
= NetBeans =
 +
 
 +
== NetBeans shortcut keys ==
 +
 
 +
{|class="wikitable sortable"
 +
! Keys        !! Action
 +
|-
 +
| Ctrl+W      || Close active window
 +
|-
 +
| Alt+Shift+K  || Open in Terminal
 +
|-
 +
| Ctrl+U U    || Convert selected text to uppercase
 +
|-
 +
| Ctrl+U L    || Convert selected text to lowercase
 +
|}
  
Load agent with:
+
= XML =
  
# launchctl load /Library/LaunchDaemons/com.zabbix.zabbix_agentd.plist
+
== How to pretty-print an XML file ==
  
To add a 'pki' group:
+
$ xmllint --format input.xml > output.xml
  
# dseditgroup -o create pki
+
= ApacheBench =
  
To monitor syslog on Mac OS X:
+
== Run a benchmark with ApacheBench ==
 
 
# tail -f /var/log/system.log
 
  
== Installing Zabbix Agent from source on Mac OS X ==
+
$ ab -n 1000 -c 100 https://www.example.com/
 
 
Download sources from https://www.zabbix.com/download_sources
 
 
 
$ brew update
 
$ brew install openssl
 
$ brew install pcre
 
jj5@condor:~/Desktop/zabbix-4.4.7$ ./configure --enable-agent --with-openssl=/usr/local/opt/openssl/
 
jj5@condor:~/Desktop/zabbix-4.4.7$ sudo make install
 
 
 
= NetBeans =
 
 
 
== NetBeans shortcut keys ==
 
 
 
{|class="wikitable sortable"
 
! Keys        !! Action
 
|-
 
| Ctrl+W      || Close active window
 
|-
 
| Alt+Shift+K  || Open in Terminal
 
|-
 
| Ctrl+U U    || Convert selected text to uppercase
 
|-
 
| Ctrl+U L    || Convert selected text to lowercase
 
|}
 

Latest revision as of 03:24, 28 February 2024

Hi there, I'm John. I just wanted a page where I could document various Linux things that I bump into. This is that page. Thank you ProgClub. :)

Note: I have some other disorganised notes on UNIX, which include a few tips for MacOS. I also have some tips for OS X.

Note: the info on this page is probably Ubuntu (and Debian as an outside chance) specific, because I use Ubuntu pretty much everywhere these days.

You might also be interested in John's hacks.

Quick jump to: NetBeans.

References

Command-line

See Shell Commands I Wish I Knew Earlier for some interesting options.

System

Reporting system specifications from the command-line

Try any of these:

# neofetch
# inxi
# hwinfo --short

You may need to install the relevant package.

Determining which Debian/Ubuntu release your are running

$ lsb_release -r

Or for more information:

$ lsb_release

Determining which Linux/Unix you are running

$ uname

Or,

$ uname -mrs

Or,

$ uname -a

Determining which Linux kernel you are running

$ uname -r

Configuring system swappiness

Swappiness is a number between 0 and 100 that regulates how much the system uses the swap file. I like setting this value to 0 to keep my apps as responsive as possible. Create a file /etc/sysctl.d/local.conf and add this line:

vm.swappiness = 0

If you want to set the value for the current session only:

echo 0 > /proc/sys/vm/swappiness

Hardware information

For information about the hardware attached to your system, check out:

# lshw

And for PCI devices:

# lspci

And for DMI info:

# dmidecode

Note that the dmidecode command (above) will give you information about your system's motherboard. For motherboard info look for 'System Information' and/or 'Base Board Information'.

Or the grand daddy of them all:

# hwinfo

There's also inxi, e.g.:

$ inxi -b

System:    Host: tact Kernel: 4.9.0-4-amd64 x86_64 (64 bit) Desktop: KDE Plasma 5.8.6
           Distro: Debian GNU/Linux 9 (stretch)
Machine:   Device: desktop Mobo: ASUSTeK model: STRIX Z270F GAMING v: Rev 1.xx
           UEFI [Legacy]: American Megatrends v: 0906 date: 03/22/2017
CPU:       Quad core Intel Core i7-7700K (-HT-MCP-) speed/max: 799/4600 MHz
Graphics:  Card: Intel Device 5912
           Display Server: X.Org 1.19.2 drivers: modesetting (unloaded: fbdev,vesa)
           Resolution: 1920x1080@60.00hz, 1920x1080@60.00hz
           GLX Renderer: Mesa DRI Intel Kabylake GT2 GLX Version: 3.0 Mesa 13.0.6
Network:   Card: Intel Ethernet Connection (2) I219-V driver: e1000e
Drives:    HDD Total Size: 13026.6GB (42.0% used)
RAID:      Devices: 1: /dev/md1 2: /dev/md0
Info:      Processes: 355 Uptime: 11 days Memory: 21198.3/32043.3MB Client: Shell (bash) inxi: 2.3.5

Motherboard info

# dmidecode -t 2

CPU info

# lscpu

or:

# cat /proc/cpuinfo

RAM info

# dmidecode --type memory

PCI info

# lspci -v

Drive info

# cat /proc/partitions

and:

# hdparm -I /dev/sda

and:

# smartctl --info /dev/sda

You can check if a drive is SSD or not with:

# cat /sys/block/sde/queue/rotational
0=SSD
1=HDD

Viewing syslog and other logs with KSystemLog

Run the 'KSystemLog' program under KDE for a handy log viewer GUI.

CPU

Monitoring CPU clock speed

Try something like this:

$ watch 'grep MHz /proc/cpuinfo | awk "{ print \$4 }" | sort -n'

Power

Reporting on PowerShield DEFENDER UPS status

Before running `upsc` ensure service is running:

# upsdrvctl start

To see the status of the PowerShield DEFENDER systems on John's LAN:

$ upsc defender

E.g.:

jj5@orac:~$ upsc defender
Init SSL without certificate database
battery.charge: 100
battery.voltage: 27.40
battery.voltage.high: 26.00
battery.voltage.low: 20.80
battery.voltage.nominal: 24.0
device.type: ups
driver.name: blazer_usb
driver.parameter.pollinterval: 2
driver.parameter.port: auto
driver.parameter.synchronous: no
driver.version: 2.7.4
driver.version.internal: 0.12
input.current.nominal: 5.0
input.frequency: 50.1
input.frequency.nominal: 50
input.voltage: 242.6
input.voltage.fault: 242.6
input.voltage.nominal: 240
output.voltage: 242.6
ups.beeper.status: disabled
ups.delay.shutdown: 30
ups.delay.start: 180
ups.load: 14
ups.productid: 5161
ups.status: OL
ups.type: offline / line interactive
ups.vendorid: 0665

Run commands on PowerShield DEFENDER UPS batteries

You can run "instant commands" using the upscmd command.

We use the 'beeper.toggle' instant command in our Salt Stack config to disable the beeper, see e.g.:

diligence:/srv/salt/conf/app/defender-1200.sls

To see "instant commands" supported by the PowerShield DEFENDER:

$ upscmd -l defender

E.g.:

jj5@orac:~$ upscmd -l defender
Instant commands supported on UPS [defender]:

beeper.toggle - Toggle the UPS beeper
load.off - Turn off the load immediately
load.on - Turn on the load immediately
shutdown.return - Turn off the load and return when power is back
shutdown.stayoff - Turn off the load and remain off
shutdown.stop - Stop a shutdown in progress
test.battery.start - Start a battery test
test.battery.start.deep - Start a deep battery test
test.battery.start.quick - Start a quick battery test
test.battery.stop - Stop the battery test

Service management

Report running services

# service --status-all

Environment

Configuring vim as your editor

Sometimes all you need is:

$ export EDITOR=/usr/bin/vim

Which works for svn, for example. Add it to your ~/.profile file to have it set for all login sessions.

Other times you need to run

# update-alternatives --config editor

And then select vim from the list. This is what you do to configure your visudo editor.

Configuring your locale

$ sudo /usr/sbin/locale-gen en_AU.UTF-8
$ sudo /usr/sbin/update-locale LANG=en_AU.UTF-8

User and group management

Adding a user

To add a new user on a linux system:

# useradd username
# passwd username

To have the home directory created from '/etc/skel' use the 'adduser' script instead:

# adduser username

Adding a user to a group

To add an existing user to an existing group:

# gpasswd -a username group

e.g. to add user 'jj5' to the 'sudo' group:

# gpasswd -a jj5 sudo

Alternatively you can use adduser, passing the username and group:

# adduser username group

e.g. to add user 'sclaughl' to the 'staff' group:

# adduser sclaughl staff

Disabling a user account

You can disable a user account with:

# passwd -l user

Note: that's a lower-case L, not a one.

Enabling a disabled user account

To can re-enable a locked user account with:

# passwd -u user

Finding which user you are logged in as

To determine which user you are running as enter the command:

$ whoami

Finding which groups you are a member of

To find which groups you are a member of:

$ groups

or

$ groups username

Where 'username' is the username of the user you are querying, e.g.:

$ groups jj5

Finding who else is logged in to the system

To see who else is logged in,

$ who

Running a command as a particular user

To run "svn update" as the user www-data:

$ sudo su -c "svn update" www-data

Reporting user and group info for the current user

$ id

Memory management

Checking available memory

To report memory statistics in megabytes:

$ free -m

Check for swap thrashing

Check your virtual memory status with vmstat:

$ vmstat

Report memory type

Report on RAM DIMMs:

# dmidecode --type 17

Report on RAM and CPU cache (including L1, L2, and L3):

# lshw -short -C memory

Or for more detail:

# lshw -C memory

Video/display management

Viewing EDID data for attached monitor

To view EDID data for an attached monitor (requires the edid-decode package):

$ cd /sys/class/drm
$ ls
$ cd card0-HDMI-A-1
$ edid-decode edid

Process management

Using 'top' for dynamic resource usage reporting

To run top:

$ top

See 15 Practical Linux Top Command Examples for some hints on usage.

To see usage for a specific user run e.g.:

$ top -u jj5

To see full command-line press 'c'.

When you're in 'top' you can:

  • press '1' (one) to toggle CPU aggregation
  • press < and > to change the sort column

Changing memory reporting in 'top'

To run top:

$ top

Press 'E' to switch between top memory units (KiB, MiB, GiB, etc.)

Press 'e' to switch between bottom memory units (KiB, MiB, GiB, etc.)

Press 'M' to sort by memory utilisation.

Press 'm' to switch between various display modes.

Showing full command-line in 'top'

To see the full command-line for processes run with -c:

$ top -c

Listing all processes currently running which were started in your current shell session

$ ps -fl

Killing specific processes

# ps aux | grep -e "this\|that" | grep -v grep | tr -s " " | cut -d " " -f 2 | xargs kill -9

Run a command for a specified time using timeout

$ timeout 3 ping jj5.net

Disk management

Power-off a hard drive

For instance if it's a USB drive or in a mobile rack and you want to remove it.

# udisksctl power-off -b /dev/sdi

Reporting ext4 file-systems mounted without noatime

$ cat /proc/mounts | grep ext | grep -v noatime | sort

Creating a partition table

# parted /dev/xvdf
mktable msdos

Creating a partition

# parted /dev/xvdf
u MiB
mkpart primary 1 100%

Creating an ext4 file-system

# mkfs.ext4 /dev/xvdf1

Listing disk drives

# fdisk -l

(That's an L for "list")

Checking available disk space

$ df -h

Getting disk information

# lsblk

And

# cat /proc/partitions

Or the Grand Daddy of them all:

# lshw -class disk

(Requires the lshw package.)

Getting partition UUID and file-system type

# blkid

Checking for SSD vs magnetic disk

# cat /sys/block/sda/queue/rotational

Will be 0 for SSD and 1 for magnetic.

Monitoring a ZFS server

So some commands I run to keep an eye on my new ZFS servers:

# top
# iotop
# nethogs
# watch free -h
# watch slabtop -o
# slabtop
# watch cat /proc/meminfo
# perf top
# watch "df -h | grep -v -e tmpfs -e udev -e by-uuid"
# watch zpool iostat -v
# zpool iostat -v 2
# watch 'zpool list; echo; zfs list'
# watch zfs get compressratio -o all
# watch cat /proc/spl/kstat/zfs/arcstats

If you have a scrub or resilvering in progress you can report on progress with:

# watch zpool status -v

You can poke about in internals, e.g.:

# cat /proc/spl/kstat/zfs/arcstats
root@orac:/sys/module/zfs/parameters# tail *

You can report on property values with e.g.:

# zfs get all data

If you want to get funky:

# cd /tmp
# perf record -ag #(Ctrl+C after ~15 seconds)
# perf report --stdio

You can search for ZFS files like e.g. this:

root@orac:/# find / -name '*zfs*' -or -name '*zpool*'

You can report history of a zpool:

# zpool history $poolname

You can get a report on the dedup tables:

# zpool status -D $poolname

Or more detailed dedup table info:

# zdb -DDD $poolname

Note in the output see here for details, basically:

Abbr Description
LSIZE logical size (in memory)
PSIZE physical size
DSIZE size on disk
refcnt reference count

How to tell if zfs scrub is running

You can get the status from the "scan:" line from:

$ zpool status

Measure data throughput

Use the 'pv' command from the 'pv' package, e.g.:

# cat /dev/sda | pv | cat > /dev/null

Or for ZFS:

# zfs send data/example | pv | cat > /dev/null

Using Smartctl, Smartd and Hddtemp on Debian

For notes on using smartctl see Using Smartctl, Smartd and Hddtemp on Debian.

Report hard disk usage

So you might want to know how much data a process reads or writes to a hard disk. You can monitor process total disk utilisation with the 'iotop' command. Run 'iotop' and then press 'a' for --accumulated.

Report hard disk temperatures

E.g.

# hddtemp /dev/sd[a-e]

Burning an ISO image to USB on Mac

First insert your USB key and find the appropriate disk with:

# diskutil list

Then unmount it with:

# diskutil unmountDisk /dev/disk4

Then copy ISO image with 'dd':

# dd if=ubuntu-18.04.1-desktop-amd64.iso of=/dev/disk4

You can get dd to report progress by sending it the SIGINFO signal:

# kill -s info 12345

Listing all ext4 file systems

To see a list only of the mounted ext4 file systems:

# df -t ext4

Report hierarchical file system mount points and mount options

$ findmnt

Report the mount point for the current working directory

$ findmnt "$PWD"

Monitoring disk I/O

There's an app for that! iotop.

Using iotop, top for disks

# iotop -oPa

Monitor disk I/O for performance issues

# watch iostat

Or e.g.

# watch iostat -xd /dev/sd[abc]

Or use groupings like this command for 'tact':

$ iostat -g system nvme0n1 -g fast sda sdb -g data sdc sdd -d 2

Monitoring a system

Simple ZFS monitoring

# watch iostat
# iotop
# zpool iostat -v 5
# watch 'hddtemp /dev/sd[a-e]; echo; zpool list; echo; zfs list'
# nethogs
# top

Monitoring temperature

See temperature without third-party apps for:

$ cat /sys/class/thermal/thermal_zone*/temp

and:

$ paste <(cat /sys/class/thermal/thermal_zone*/type) <(cat /sys/class/thermal/thermal_zone*/temp) | column -s $'\t' -t | sed 's/\(.\)..$/.\1°C/'

Monitoring CPU temperature

$ watch sensors

Monitoring HDD temperature

For e.g. SATA drives sda to sdd:

# watch hddtemp /dev/sd[a-d]

ZFS

How can I determine the current size of the ARC in ZFS, and how does the ARC relate to free or cache memory?

See How can I determine the current size of the ARC in ZFS, and how does the ARC relate to free or cache memory?

$ cat /proc/spl/kstat/zfs/arcstats

Then:

c is the target size of the ARC in bytes
c_max is the maximum size of the ARC in bytes
size is the current size of the ARC in bytes

Stopping a ZFS scrub in progress

# zpool scrub -s $pool

e.g. for the 'data' pool:

# zpool scrub -s data

File management

Listing files by size

Use capital S for Size:

$ ls -S

Listing only directories

$ ls -l | egrep '^d'

Listing only files

$ ls -l | egrep -v '^d'

Listing hidden files

$ ls -al .[!.]*

Creating a symbolic link

$ ln -s /path/to/target link-name

Creating a hard-link

$ ln /path/to/target file-name

Changing the owner of a file

$ chown user:group <files>

E.g.

$ chown jj5:staff README
$ chown root:root *

To apply recursively into sub-directories use -R,

$ chown -R root:root /etc/*

Changing file permissions

Object codes
User Group Other
u g o
Permission codes
Read Write Exectue
r w x
4 2 1
Numeric codes
0 None
1 Execute
2 Write
3 Write, Execute
4 Read
5 Read, Execute
6 Read, Write
7 Read, Write, Execute

See Numeric Mode in Action.

$ chmod <user numeric code><group numeric code><other numeric code> <files>
$ chmod <object codes>+|-<permission codes> <files>

E.g.

$ chmod 600 my-private-file
$ chmod go-rwx my-private-file
$ chmod u+rw my-private-file
$ chmod +x my-script

Updating config files

If you get given a new config file called new.conf and you want to integrate it with your old config file old.conf then:

$ cp old.conf updated.conf
$ merge -A updated.conf new.conf old.conf

Then go through and edit updated.conf resolving all the merge errors, picking and choosing what to update and what to keep. When you're done copy updated.conf to old.conf so it becomes the new config file.

The merge program is a part of the RCS package. If you don't have it:

$ sudo apt-get install rcs

Listing open files

Use lsof to list open files. E.g.:

# lsof

See man lsof for options.

List permissions on a whole directory path

E.g.:

$ namei -om /home/jj5/workspace

Outputs:

f: /home/jj5/workspace/
 drwxr-xr-x root root /
 drwxr-xr-x root root home
 drwxr-xr-x jj5  jj5  jj5
 drwxr-xr-x jj5  jj5  workspace

Counting non-blank lines in a file

E.g.:

$ cat foo.c | sed '/^\s*$/d' | wc -l

Cloning one directory to another with rsync

E.g.:

rsync --acls --xattrs --stats --human-readable --recursive --del --force --times --links --hard-links --executability --numeric-ids --owner --group --perms --sparse --compress-level=0 /data/source/ hostname:/data/target/

Counting number of files in current directory and all subdirectories

$ ls -AlhR . | egrep '^-' | wc -l

Counting number of directories in current directory and all subdirectories

$ ls -AlhR . | egrep '^d' | wc -l

Getting the status of a 'dd' process

First figure out the 'dd' process number, with e.g. 'top' or 'ps aux | grep dd'

Then send the dd process the SIGINFO signal, which for dd process 40947 would be:

# kill -s info 40947

The dd process will report its status in the terminal its running in.

Transferring a large file via FAT32 file system

So the maximum file size supported by a FAT32 file system (commonly used on USB keys) is 4 GB per file. If you have a file larger than 4 GB you can split it into parts and then reassemble the parts once transferred:

$ split -b 4000m input.tgz input.tgz-parts-

Then copy the small files and reassemble:

$ cat input.tgz-parts-* > output.tgz

Find the difference between two directories

$ diif -qr $DIR_A $DIR_B

Merging two directories

$ cp -RT source/ destination/

Files from source will be merged into destination.

Generating a replacement file

So you generate the file into a temp file, then hard link the temp file to where you want the replacement to go, then you delete the temp file:

$ generate-file.sh > file.txt.tmp
$ ln -f file.txt.tmp file.txt
$ rm file.txt.tmp

NFS

List NFS shares

To e.g. show NFS shares on 'love':

$ showmount -e love

Compression

How to use pigz with tar

See here:

$ tar cf - paths-to-archive | pigz --best -p 8 > archive.tgz

Note: don't use --best unless you're being stingy, running without it will be much faster.

Also from here:

Fast pack:

tar -I 'pigz --fast' -cf my.tar.gz whatver

Best pack:

tar -I 'pigz --best' -cf my.tar.gz whatver

Fast unpack:

tar -I pigz -xf my.tar.gz

Best compression with tar

From here:

export GZIP=-9
tar cvzf file.tar.gz /path/to/directory

or

env GZIP=-9 tar cvzf file.tar.gz /path/to/directory

Best parallel compression with pigz

$ pigz --best

Best parallel compression with xz

$ xz -9e -T 0

Reporting compression ratios with xz

e.g.

root@love:/data/image/archive# xz -l *
Strms  Blocks   Compressed Uncompressed  Ratio  Check   Filename
    1       3    372.2 MiB    442.3 MiB  0.841  CRC64   1999.txz
    1      29  5,281.3 MiB  5,542.5 MiB  0.953  CRC64   2001.txz
    1      11  1,364.3 MiB  2,084.3 MiB  0.655  CRC64   2002.txz
    1       9    568.5 MiB  1,660.2 MiB  0.342  CRC64   2003.txz
    1     639     66.8 GiB    119.6 GiB  0.558  CRC64   2004.txz
    1     313     12.7 GiB     58.6 GiB  0.217  CRC64   2005.txz
    1     414     35.0 GiB     77.4 GiB  0.452  CRC64   2006.txz
    1     485     44.5 GiB     90.9 GiB  0.490  CRC64   2007.txz
    1   1,690    150.0 GiB    316.8 GiB  0.473  CRC64   2008.txz
    1       3    457.9 MiB    526.0 MiB  0.871  CRC64   2009.txz
    1     168     27.3 GiB     31.4 GiB  0.868  CRC64   2010.txz
    1       4    477.1 MiB    702.8 MiB  0.679  CRC64   2011.txz
-------------------------------------------------------------------------------
   12   3,768    344.6 GiB    705.5 GiB  0.488  CRC64   12 files

Symbolic-link management

== Data used by sym-linked files:

This will de-reference the sym-links in the current directory and tell you how much data the files pointed to by the sym-links are using:

jj5@tact:/data/backup/unity/latest$ du -hD * | sort -h

File searching

Finding a file with a particular name

$ find -iname "*some-part-of-the-file-name*"

Will start searching from the current directory, so maybe

$ cd /

first. For a case-sensitive search:

$ find -name "*eXaCT CaSE*"

Finding a file with particular content

To search in /etc/ for a file with particular content:

$ grep -R "search-string" /etc/*

To search the current directory for *.cs files containing the word "Up":

$ find . -name '*.cs' -exec grep --color=auto -H Up {} \;

Finding a list of files with particular content

E.g. to find all the files with the word 'creativity':

$ grep -R creativity . | sed 's/:/ /' | awk '{ print $1 }' | sort | uniq

Using the locate command to find files

$ locate part-of-filename

E.g.

$ locate texvc

Updating locate command's database

# updatedb

Select a random line from a text file

$ shuf -n 1 input.txt

Extra context for grep

If you need to show extra lines before or after your grep results use -B NUM to set how many lines before the match and -A NUM for the number of lines after the match:

$ grep -B 3 -A 1 ...

Job control

Stopping a running process

Press Ctrl+Z to stop a running process.

Listing current jobs and their status

$ jobs

Resuming a stopped job in the backgroud

To resume a stopped process in the background

$ bg %1

where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').

Resuming a stopped job in the foreground

To resume a stopped process in the foreground

$ fg %1

where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').

Killing a stopped job

To kill a job

$ kill %1

where '1' is the job number reported by bash when you pressed Ctrl+Z (or ran 'jobs').

Periodically run a program and watch its output

$ watch /your/command

Debian/Ubuntu package management

Also see Where "is" it? on the Debian Wiki.

configuring debconf

# dpkg-reconfigure debconf 

Set priority to low to get asked detailed questions.

Showing list of installed packages

# dpkg --get-selections

Searching for installed package

# dpkg --get-selections | grep package-name

or

# aptitude search package-name

Showing which files are installed as part of a package

# dpkg -L package-name

Installing a package

# apt-get install package-name

Uninstalling a package

# apt-get remove package-name

Showing system architecture

$ dpkg --print-architecture

Showing which package a file belongs to

$ which echo
/bin/echo
$ dpkg -S /bin/echo
coreutils: /bin/echo
$ dpkg -l | grep coreutils
ii  coreutils                         6.10-6                   The GNU core utilities

Showing package information

$ apt-cache showpkg coreutils

Or for even more information:

$ apt-cache show coreutils

List all installed packages with package version info

dpkg-query -l

Reporting which version of a package is installed

$ dpkg -l | grep package-name

E.g.:

root@hope:~/letsencrypt# dpkg -l | grep augeas
ii  augeas-lenses                   0.7.0-1ubuntu1                 Set of lenses needed by libaugeas0 to parse 
ii  libaugeas0                      0.7.0-1ubuntu1                 The augeas configuration editing library and

Comprehensive upgrade

Try the following:

# apt-get update
# apt-get dist-upgrade
# apt-get autoremove
# apt-get remove $(deborphan)
# update-flashplugin-nonfree --install

Searching all available packages

$ apt-cache search . | sort -d | less

Reporting unattended upgrades status

See here for more info.

# tail -f /var/log/unattended-upgrades/unattended-upgrades.log

Searching for Debian packages and versions

Networking

Determining throughput between two hosts

# apt install iperf3

On the server:

# iperf3 -s

On the client:

# iperf3 -c $SERVER_IP

For more info see: How to test the network speed/throughput between two Linux servers.

net-tools vs iproute2

The older 'net-tools' package has been replaced with 'iproute2' e.g. in stretch.

legacy net-tools commands iproute2 replacement commands
arp ip n (ip neighbor)
ifconfig ip a (ip addr), ip link, ip -s (ip -stats)
iptunnel ip tunnel
iwconfig iw
nameif ip link, ifrename
netstat ss, ip route (for netstat-r), ip -s link (for netstat -i), ip maddr (for netstat-g)
route ip r (ip route)

Restart networking

For servers:

# service networking restart

For desktops:

# service network-manager restart

Pinging with particular packet size

$ ping -M do -s <packet size in bytes> <host>

E.g.

$ ping -M do -s 1400 charity.progclub.org

Setting MSS for a particular IP address on a particular interface

# ip route add <host> dev <interface> advmss <packet size>

E.g.

# ip route add 10.0.0.1 dev eth0 advmss 1400

Dropping configured MMS for a particular IP address

# ip route flush <host>

E.g.

# ip route flush 10.0.0.1

Listing open ports and socket information

Including which process is listening on which port.

# netstat -tulpn

Or use the 'ss' command:

# ss -s
# ss -l
# ss -pl
# ss -o state established '( dport = :smtp or sport = :smtp )'

Listing open IPv4 connections

# lsof -Pnl +M -i4

You might need to install the lsof package:

# apt-get install lsof

Query for DNS MX record

$ nslookup
> server 127.0.0.1
> set q=mx
> mail.blackbrick.com

Query for DNS SOA record

$ dig @ns2.staticmagic.net -t SOA staticmagic.net

Using nmap to list open ports on remote host

To check the 1,000 most common ports:

# nmap server.example.com

Or for a specific port range (e.g. 101 to 102):

# nmap -p 101-102 server.example.com

Or for all ports (1 to 65,535):

# nmap -p- server.example.com

Network monitoring

See here for details. Basically:

  1. Overall bandwidth: nload, bmon, slurm, bwm-ng, cbm, speedometer, netload
  2. Overall bandwidth (batch style output): vnstat, ifstat, dstat, collectl
  3. Bandwidth per socket connection: iftop, iptraf, tcptrack, pktstat, netwatch, trafshow
  4. Bandwidth per process: nethogs

nload

You can watch network traffic in real-time with nload:

# nload -u M

Reporting network (NIC) speed

From here:

# dmesg | grep eth0
# mii-tool -v eth0
# ethtool eth0

Note: use ifconfig to get device name.

Path MTU discovery

To do a Path MTU Discovery, from the iputils-tracepath package:

# tracepath host.example.com

Listing available Ethernet devices

To see a list of NICs available on the host:

$ cat /proc/net/dev

Also

$ ip link

59 Linux Networking commands and scripts

See 59 Linux Networking commands and scripts.

Links

IPTables

Applying firewall rules

For configuration info see this article.

$ sudo vim /etc/iptables.test.rules
$ sudo /sbin/iptables -F
$ sudo /sbin/iptables-restore < /etc/iptables.test.rules
$ sudo iptables -L
$ sudo -s
# iptables-save > /etc/iptables.up.rules
# exit

Blocking an IP address with iptables

To drop IP address 1.2.3.4:

# iptables -A INPUT -s 1.2.3.4 -j DROP

ufw

Denying hosts with ufw

See denying hosts with ufw.

Bind9

Viewing Bind9 querylog

$ sudo rndc querylog
$ tail -f /var/log/syslog

IPSec

Disabling IPSec

# setkey -FP

OpenSSL

Debugging IMAPS with OpenSSL

# openssl s_client -connect localhost:993
> a1 LOGIN username@host password
> a2 LOGOUT

Debugging HTTPS with OpenSSL

$ openssl s_client -connect www.example.com:443
GET /example.html HTTP/1.1
host: www.example.com

Links

Pluggable Authentication Modules (PAM)

Links

SSH

Configuring SSH key login

On the client machine generate a key-pair (if necessary, check for existing ~/.ssh/id_rsa.pub):

$ ssh-keygen -t rsa

Copy the public key from the client to the server:

$ scp ~/.ssh/id_rsa.pub user@example.org:

Configure the authorized keys on the server:

$ ssh user@example.org
$ mkdir ~/.ssh
$ chmod go-w .ssh
$ cat ~/id_rsa.pub >> ~/.ssh/authorized_keys
$ chmod 600 ~/.ssh/authorized_keys
$ rm ~/id_rsa.pub

Tunneling over SSH

For example, connecting a remote MySQL server to the localhost:

$ ssh -L 3306:localhost:3306 jselliot@ssh.progsoc.org

If the machine you want to connect to is not the localhost of the machine you're ssh'ing to,

 $ ssh -L 3306:muspell.progsoc.uts.edu.au:3306 ssh.progsoc.uts.edu.au

The -L stanza is localport:remotehost:remoteport where localport is a port on your machine, forwarded to remoteport on remotehost.

Tunneling over SSH with PuTTY

See Connecting to the MySQL database remotely (via an SSH Tunnel)

  • run putty.exe
  • Connection -> SSH -> Tunnels
    • Port forwarding: source port to 3306
    • destination: 127.0.0.1:3306
    • check Local
    • click Add

Enabling verbose SSH logging

To see what's going on with your ssh connections,

$ ssh -v user@host

Or

$ ssh -vv user@host

Unlocking SSH key for session

jj5@orac:~/.config/autostart$ cat ssh-add.desktop 
[Desktop Entry]
Type=Application
Name=ssh-add
Comment=Adds my private key to my session.
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'

Links

Standard IO

cat EOF

$ cat > output <<EOF
> text
> EOF
$ cat output
text

Script

Creating a session log with script

$ script -t 2> timing

The session log is in the file 'typescript' and the timing data is in 'timing'.

Replaying a scripted session

$ scriptreplay timing

Uses the default file 'typescript' and the 'timing' file as specified.

Screen

Creating a new screen or reconnecting to a detached screen

$ screen -R

Detaching a screen

$ screen -D

Reconnecting to screen

$ screen -D
$ screen -R

I have a script in ~/bin/reconnect like so,

#!/bin/bash
screen -D
screen -R

This will detach your last screen, and reconnect it on the current terminal.

Scrolling in screen

See How to scroll in GNU Screen. Basically press Ctrl+A ESC then use Page Up and Page Down. Press ESC again to exit copy mode. As usual you can use Ctrl+[ in place of ESC.

tmux

Live collaboration with tmux

User A:

tmux -S /tmp/collab
chmod 777 /tmp/collab

User B:

tmux -S /tmp/collab attach

Vim

First, why Vim?

Read Why, oh WHY, do those #?@! nutheads use vi?

Visual modes

Use 'v' for visual mode, 'V' for visual line mode and Ctrl+V for visual block mode.

Configuring spaces instead of tabs

I use two spaces instead of tabs. To configure, edit your .vimrc file:

$ vim ~/.vimrc

and include the following lines:

set tabstop=2
set shiftwidth=2
set expandtab

Configuring syntax highlighting

See here.

Use:

:syntax on

to turn on syntax highlighting.

Use:

:syntax off

to turn off syntax highlighting.

To always use syntax highlighting:

$ vim ~/.vimrc

and add:

syntax on

To get a list of supported colour schemes open vim and type:

:colorscheme[space][Ctrl+D]

To always use a particular colorscheme edit ~/.vimrc and add (for example):

colorscheme desert

Inserting a TAB character when expandtab is on

The problem here is that you have configured vim to insert spaces, but for a particular file (e.g. a Makefile) you need to insert a character.

Press Ctrl+V TAB to insert a literal tab character.

Or you can disable tab expansion altogether with:

:set expandtab!

Changing 2 space indent to 4 space indent (e.g. for python files)

:%s/^\s*/&&/g

For more information see here.

Recording and replaying a macro

To record a macro press 'q' and then a number between 1 and 9. E.g. press "q1". The macro is now recording. When you've finished issuing your commands press 'q' again to finish recording. To replay a macro press '@' followed by the number of the macro. That is, if you pressed "q1" to record the macro, press "@1" to replay the macro. To replay the last macro again press "@@".

Deleting to end of line

d$

Deleting to beginning of line

d^

Finding text

To search forward for "text":

/text

To search backward for "text":

?text

To repeat the last search in a forward direction press 'n', or to search again backwards press 'N'.

Finding and replacing text

To replace the first instance of "search" on the current line with "destroy":

:s/search/destroy/

To replace all instances of "search" on the current line with "destroy":

:s/search/destroy/g

To replace all instances of "search" on lines 13 to 37 with "destroy":

:13,37 s/search/destroy/g

To replace all instances of "search" in the entire file with "destroy":

:%s/search/destroy/g

Changing DOS/Windows line-endings (CRLF) to Unix line-endings

To set the line-ending to Unix line endings run the command:

:setlocal ff=unix

More information on managing file formats available here.

Disabling auto-indent etc. to paste from clipboard

To disable smart indenting when you're going to paste in text:

:set paste

To turn it off again:

:set nopaste

There's more info in this article: Toggle auto-indenting for code paste

Positioning windows

Use -o for horizontal split, e.g.:

vim -o a.txt b.txt

Use -O for vertical split, e.g.:

vim -o a.txt b.txt

Use ^W to navigate windows then use directional keys h, j, k, l, etc.

Use ^W and < or > to resize windows.

To indent a block of text in Vim

Use the > command. E.g. to indent five lines:

5 > >

Press . (dot) to keep indenting.

Or inside a block (e.g. curly brace, HTML/XML element, etc.) you can put your cursor in the element on on the curly brace and then:

> %

See here for more.

Open a file in a new window/tab

To open a file on the left hand side:

:vert new filename.ext

Note: ':vnew filename.ext' and ':vsp filename.ext' also work.

To open a file at the top:

:new filename.ext

See here for more.

Explore files in Vim

Enter:

:Explore

Switch between Vim tabs

Use gt and gT.

Switch between Vim windows

To toggle between open windows use:

Ctrl+W W

To move in a direction use:

Ctrl+W h/j/k/l

See here for more.

Insert block comment in Vim

See here for line-commenting.

So it's:

  1. Ctrl+V (Note: not Shift+V!)
  2. Up/Down to select rows
  3. Shift+I
  4. Enter your text, e.g. '#' or '//'
  5. Ctrl+[ (or 'Esc')

Navigate to matching tag

To navigate to the matching beginning or end tag use '%'.

You can also use e.g. '[{' to match the previous '{', or e.g. '])' to match the next ')'.

Auto-format HTML tags

Stolen from here.

  1. first join all the lines - ggVGgJ
  2. Now break tags to new lines - :%s/>\s*</>\r</g
  3. Now set filetype - :set ft=html (you can do this before too)
  4. Now Indent - ggVG=

Links

Create PDF from text using Vim

Generate PDF from input.txt with:

$ vim input.txt -c "hardcopy > doc.ps | q" && ps2pdf doc.ps

Examine output with:

$ okular doc.pdf

Write

Talking to other users on the system

write is a unix command for talking to other users on the system. To use write:

1. SSH to <username>@<hostname> and login with your username and password.

2. Issue the following command to find out who is logged onto the system:

$ who

3. Issue the following command to talk to a specific user:

$ write <username>

4. Enter the message you'd like to send the user, followed by Ctrl+C to send. Press Ctrl+D to cancel.

Date

Reporting the time on the server

$ date

Reporting UTC time

$ date --utc

Getting the date in yyyy-MM-dd-hhmmss format

$ date="`date +%F-%H%M%S`"

Getting the year in four digits

$ year="`date +%Y`"

Getting the month in two digits

$ month="`date +%m`"

Getting the day of the month in two digits

$ day="`date +%d`"

Getting yesterday's date

$ date --date='1 day ago' +%Y-%m-%d

Converting Unix time (seconds since epoch)

For timestamp '1501370200':

$ date -d @1501370200 +%F-%H%M%S

Running timedatectl from systemd

There's a new command bundled with systmed:

# timedatectl

It reports on (and controls) how the system time is configured.

MySQL (and MariaDB)

Run mysql without authentication/authorisation

# service mysql stop
# mysqld_safe --skip-grant-tables &

Then you can connect without a password, e.g.:

# mysql -u root mysql

To stop the unauthenticated service:

# mysqladmin shutdown

Then restart a normal service:

# service mysql start

Logging all database queries

# vim /etc/mysql/my.cnf

In the [mysqld] section add:

log=/tmp/mysql.log

Then:

# service mysql restart

Watch the log with:

# tail -f /tmp/mysql.log

Or:

SET GLOBAL log_output = 'FILE';
SET GLOBAL general_log_file = 'my_logs.txt';
SET GLOBAL general_log = 'ON';

my_logs.txt will be in /var/lib/mysql

Dumping a MySQL database

You can dump the database into a file using:

$ mysqldump -h hostname -u user --password=password databasename > filename

Loading a MySQL database from a dump file

You can create a database using:

$ echo create database databasename | mysql -h hostname -u user -p

You can restore a database using:

$ mysql -h hostname -u user --password=password databasename < filename

Creating a MySQL user

# mysql -h localhost -u root --password=<password>
mysql> create user 'username'@'localhost' identified by '<password>';

Granting all MySQL user permissions

# mysql -h localhost -u root --password=<password>
mysql> grant all privileges on dbname.* to user@host;

Select domain name from email address

SELECT SUBSTR( email, INSTR( email, '@' ) + 1 )

Check if MySQL connection is encrypted with TLS/SSL

Check the SSL version in use:

show status like 'Ssl_version';

Or check the cipher in use:

show status like 'Ssl_cipher';

Report on server config

See SHOW Statements for the full list, but check out:

SHOW VARIABLES

and

SHOW STATUS

and

SHOW PROCESSLIST

Monitor MySQL activity

$ watch "mysql -t -e 'show processlist'"

Apache

Reporting loaded Apache modules

# apache2ctl -M

Maintaining .htaccess passwords

To add or modify the password for a user:

$ htpasswd /etc/apache2/passwd username

Configuring PHP session timeout in .htaccess

For a session timeout of 9 hours:

php_value session.cookie_lifetime 32400
php_value session.gc_maxlifetime 32400

Disabling PHP magic quotes in .htaccess

php_flag magic_quotes_gpc Off

Requiring HTTP Auth in .htaccess

AuthType Basic
AuthName "Speak Friend And Enter"
AuthUserFile /home/jj5/.htpasswd
Require valid-user

Restarting Apache

The hard way

$ sudo /etc/init.d/apache2 restart

The graceful way (avoids dropping active connections)

$ sudo apache2ctl graceful

Allowing directory browsing

To show directory index pages, in the apache config file:

<Directory /var/www/data>
  Options Indexes
</Directory>

C

Locating memset function

The memset function is in <string.h> as described in this article Using memset(), memcpy(), and memmove() in C

Links

PHP

Including a file relative to the including file

require_once( dirname( __FILE__ ) . '/relative/path/to.php' );

Enabling error reporting

error_reporting( E_ALL | E_STRICT );
ini_set( 'display_errors', 'On' );

Setting an error handler

set_error_handler( "error_handler", E_ALL | E_STRICT );
function error_handler( $error_code, $error_message, $error_file, $error_line, $error_context ) {
  // ...
}

Disable HTML content in var_dump

ini_set( 'html_errors', 'off' );

Report PHP modules

$ php -m

PHP Security Best Practices For Sys Admins

See Linux 25 PHP Security Best Practices For Sys Admins.

BASH scripting

For a primer on bash scripting see TFM: Erotic Fantasy: /bin/sh Programming.

Telling a script to run in bash

The first line of the file should be:

#!/bin/bash

Checking if a command-line argument was passed in

if [ -n "$1" ]; then
  echo "Missing parameter 1.";
  exit 1;
fi

Checking if a command-line argument was not passed in

if [ "$1" = "" ]; then
  echo "Missing parameter 1.";
  exit 1;
fi

Or:

if [ -z "$1" ]; then
  echo "Missing parameter 1.";
  exit 1;
fi

Checking command exit status

cd /my/path
if [ "$?" -ne "0" ]; then
  echo "Cannot change dir.";
  exit 1;
fi

Checking if a file does/doesn't exist

Check if file exists:

if [ -f "/my/file" ]; then
  cat /my/file
fi

Check if file doesn't exist:

if [ ! -f "/my/file" ]; then
  touch /my/file
fi

Checking if a directory does/doesn't exist

Check if directory exists:

if [ -d "/my/dir" ]; then
  rmdir /my/dir
fi

Check if directory doesn't exist:

if [ ! -d "/my/dir" ]; then
  mkdir /my/dir
fi

Deleting old backups

To keep only the latest five backups:

find . -maxdepth 1 -type f -printf '%T@ %p\0' | sort -r -z -n | awk 'BEGIN { RS="\0"; ORS="\0"; FS="" } NR > 5 { sub("^[0-9]*(.[0-9]*)? ", ""); print }' | xargs -0 rm -f

This script stolen from stackoverflow.

Requires GNU find for -printf, GNU sort for -z, GNU awk for "\0" and GNU xargs for -0, but handles files with embedded newlines or spaces.

Changing into the script's directory

cd "`dirname $0`"

Getting the absolute path of a relative path

readlink -f ./some/path

Creating a temp directory

dir=`mktemp -d` && cd $dir

Reading secret input from stdin

You can read a secret, such as a password, like this:

echo -n "Enter passphrase: "
stty -echo
read passphrase;
stty echo
echo ""

After running the above the secret will be in the $passphrase environment variable.

String replacements in bash

See the string manipulation doco. Basically, to replace first occurrence:

result=${var/find/replace}

To replace all occurrences:

result=${var//find/replace}

A practical example, get an ISO date and turn it into a path:

date="$(date +%Y-%m-%d)"
work_dir=${date//-//}

Sending a HEREDOC to a file

cat << EOF > /tmp/yourfilehere
These contents will be written to the file.
        This line is indented.
EOF

Bash case/switch statement

See using case statements, e.g.:

case $space in
[1-6]*)
  Message="All is quiet."
  ;;
[7-8]*)
  Message="Start thinking about cleaning out some stuff.  There's a partition that is $space % full."
  ;;
9[1-8])
  Message="Better hurry with that new disk...  One partition is $space % full."
  ;;
99)
  Message="I'm drowning here!  There's a partition at $space %!"
  ;;
*)
  Message="I seem to be running with an nonexistent amount of disk space..."
  ;;
esac

Using dotglob shopt to match dot-files

To enable dot-file matching in globs, set the dotglob shell option:

$ shopt -s dotglob

Stopping a script from running if it previously exited due to error

persistentDataDir=/var/lib/something
alarm() {
  touch $persistentDataDir/alarm
}
trap alarm ERR
[ -f $persistentDataDir/alarm ] && exit 1

Make sure only one instance of a script is running at a time

ephemeralDataDir=/var/run/something
unlock() {
  rmdir $ephemeralDataDir/lock
}
mkdir $ephemeralDataDir/lock || exit 1;
trap unlock EXIT

BASH programming advice

See Anybody can write good bash (with a little effort).

Run a command using arguments that come from an array

See here:

#!/bin/bash
tabs=("first tab" "second tab")
args=()
for t in "${tabs[@]}" ; do 
  args+=(-t "$t")
done
app "${args[@]}"

Display a CSV in columnar or tabular format

$ column -t -s , data.csv

Maximum command line length

Technically this is an operating system limit, not a BASH limit.

$ getconf ARG_MAX    # Get argument limit in bytes/chars

Sed

Find and replace with sed

To update the current file use '-i'. E.g.:

sed -i 's/search-text/replace-text/' file

Awk

Listing IP addresses in an Apache web log

awk '/GET \/path\/for\/url/ { print $1 }' /var/log/apache2/access.log | sort | uniq

Printing space-separated field

echo 'no no yes no' | awk '{print $3}'

Printing delimited field

echo 'no:no:yes:no' | awk -F ':' '{print $3}'

Subversion

Setting svn:externals from the command-line

See here.

To set an svn:externals from the command-line:

svn propset svn:externals 'rdfind-php https://www.progclub.org/svn/pcrepo/rdfind.php/branches/0.1' .
svn ci -m 'Adding svn:externals for rdfind-php...'
svn up

Or to use a file:

svn propset svn:externals -F svn.externals .

Setting svn:ignore from the command line

See here.

$ svn propset svn:ignore [file|folder] [path]

Or use a file and apply recursively:

$ svn propset svn:ignore -RF ./svn-ignore-list.txt .

Git

Showing status of working copy

git status

Showing repo history

git log

Showing remote repositories (including 'origin')

git remote -v

Handy git aliases

Save these to your ~/.gitconfig file.

For a nicer view of history than standard 'git log' -- colourful, one-line-per commit, etc:

 graph = !git log --all --graph --color --abbrev-commit --pretty=oneline

To show only the files that have changed, rather than the full line-by-line content:

 dif   = !git diff --name-status

Show git remote URL

git config --get remote.origin.url

IRC

Instructing ChanServ to op an admin

/msg ChanServ op #channel user

E.g.

/msg ChanServ op #gnurc jj5

Sub 'op' for 'deop' to remove op privilege.

C++

C++ books

Books I want

Books I own

Books I'm not reading

Books I've read

C++ blogs/articles

C++ performance tips

  • ++c can be faster than c++.
  • use const for everything that you possibly can.
  • use 'inline' when you need to define a function in a header. Typically only do that if it's small and the increase in code size from inlining is worth the cost to avoid the cost of a function call. For anything except trivially small functions you'll probably need to profile to know if it's worth it.
  • don't use registers.
  • const rarely affects performance.
  • debunking a number of C++ myths that won't die.
  • std::sort<> is typically faster than qsort() because it can avoid indirection at runtime.
  • if you've got parallelisation going on, you may be able to just replace a std::for_each with a parallel equivalent.
  • read about performance cost of RTTI (Run Time Type Information) and how to disable it
  • don't use dynamic_cast because it is slow (typeid is faster but still relies on RTTI)
  • prefer unique_ptr to shared_ptr when possible. unique_ptr has less overhead.
  • Which is better, static or dynamic linking?
  • Integer vs Floating-Point performance

systemd

systemd is an init system used in most Linux distributions to bootstrap the user space and manage all processes subsequently.

Following a service log

e.g. for bind9:

# journalctl -f -u bind9

or for everything:

# journalctl -f

System status

To see spawned services hierarchy:

# systemctl status

Or for a specific service e.g.:

# systemctl status networking

SaltStack

Running a command on specified minions

From the salt master:

salt 'host' cmd.run 'update-locale'

From the salt minion:

salt-call cmd.run 'update-locale'

Running a command on all minions

salt '*' cmd.run 'update-locale'

Running a specific state file

From the salt master:

salt $MINION_ID state.sls $STATE_FILE

From the salt minion:

salt-call state.sls $STATE_FILE

Listing active jobs

salt-run jobs.active

Listing available grains

salt 'example' grains.items

Listing available pillar

salt 'example' pillar.items

Reporting a grain value

e.g. for the 'mem_total' grain:

salt '*' grains.item mem_total

Passing a variable into a Jinja template from a salt state (SLS)

e.g.: to pass 'zabbix_deb_{pkg,url}' variables into the source.txt template:

/srv/zabbix/release/{{ zabbix_deb_pkg }}.txt:
  file.managed:
    - template: jinja
    - user: root
    - group: root
    - mode: 644
    - source: salt://file/srv/zabbix/release/source.txt
    - require:
      - file: /srv/zabbix/release
    - default:
      zabbix_deb_pkg: {{ zabbix_deb_pkg }}
      zabbix_deb_url: {{ zabbix_deb_url }}

KDE

Running user login script (X11/XOrg/XWindows)

A way to run user login scripts which works for KDE Plasma (and apparently other X.Org Server X Window System environments) is to create a *.desktop file in ~/.config/autostart/. For example I have a ~/.config/autostart/ssh-add.desktop file with the following contents to register my SSH key in the SSH Agent:

[Desktop Entry]
Type=Application
Name=ssh-add
Comment=Adds my private key to my session.
Exec=/usr/bin/konsole -e 'ssh-add /home/$USER/.ssh/id_rsa'

Standard KDE shortcut key bindings

Name Shortcut Command
Send Ctrl+D Pause xdotool key "ctrl+d"
Insert comment F1 xdotool type "$(date +%Y-%m-%d ) $USER - "
Insert sydtime F4 xdotool type "$(date +%Y-%m-%d-%H%M%S)"
Konsole Meta+T konsole
Dolphin Meta+E dolphin
Firefox ScrollLock firefox
Kate Ctrl+Shift+F12 kate
KCalc Ctrl+Shift+F11 kcalc

Shutting down KDE/Plasma

# /etc/init.d/sddm stop

VirtualBox

Mounting a VirtualBox VDI file

Note: instead of doing this consider booting with a live CD.

See here:

Install qemu if necessary:

# apt install qemu

Then you'll need to load the network block device module:

# rmmod nbd
# modprobe nbd max_part=16

Attach the .vdi image to one of the nbd you just created:

# qemu-nbd -c /dev/nbd0 drive.vdi

Now you will get a /dev/nbd0 block device, along with several /dev/nbd0p* partition device nodes.

# mount /dev/nbd0p1 /mnt

Once you are done, unmount everything and disconnect the device:

# qemu-nbd -d /dev/nbd0

Elasticsearch

Report on health of your Elasticsearch cluster

$ curl http://localhost:9200/_cluster/health?pretty

Zabbix

Zabbix Agent on Mac OS X

Download and install agent.

Config file is here: /usr/local/etc/zabbix/zabbix_agentd.conf

Unload agent with:

# launchctl unload /Library/LaunchDaemons/com.zabbix.zabbix_agentd.plist

Load agent with:

# launchctl load /Library/LaunchDaemons/com.zabbix.zabbix_agentd.plist

To add a 'pki' group:

# dseditgroup -o create pki

To monitor syslog on Mac OS X:

# tail -f /var/log/system.log

Installing Zabbix Agent from source on Mac OS X

Download sources from https://www.zabbix.com/download_sources

$ brew update
$ brew install openssl
$ brew install pcre
jj5@condor:~/Desktop/zabbix-4.4.7$ ./configure --enable-agent --with-openssl=/usr/local/opt/openssl/
jj5@condor:~/Desktop/zabbix-4.4.7$ sudo make install

NetBeans

NetBeans shortcut keys

Keys Action
Ctrl+W Close active window
Alt+Shift+K Open in Terminal
Ctrl+U U Convert selected text to uppercase
Ctrl+U L Convert selected text to lowercase

XML

How to pretty-print an XML file

$ xmllint --format input.xml > output.xml

ApacheBench

Run a benchmark with ApacheBench

$ ab -n 1000 -c 100 https://www.example.com/