Linux cheatsheet

Basic

• cd [directory] : change directory
  • cd !$ : change directory to last arg
• ls [directory] : list files & directories
  • -l : list
  • -a : all (hidden too)
  • -h : human sizes
• cp [src] [dst] : copy src to dst
  • -r : recursive (directory)
• rm [file or directory] : remove file or directory
  • -r : recursive (directory)
  • -f : force
• mkdir [directory] : create directory
  • -p : create parent directories as needed
• ln -s [target] [symlink] : create a symlink
• ln [target] [hardlink] : create a hardlink (same inode)
• touch [file] : create empty file, mark file as newly edited
• source [file] : execute a .sh file within the current shell
• cat [file] : print file to the screen
• tree -a : print directory hierarchy
  • -a : show all files (hidden)
  • -L [max depth] : max depth
• tail -n [num of lines] [file] : show last N lines of a file
• file [file] : get file type
• stat [file] : get file info (modified, access, creation time)
• man [cmd] : show manual for cmd
• tldr [cmd]` : show short help for cmd
• pwd : show current directory
• which [cmd] : show where cmd is located
• find : find files
  • find [directory] -name [file] : find file in directory
  • find [directory] -name *.[ext] : find all files of a given type
  • find [directory] -type f -exec grep "[text]" '{}' \; -print : find text in files
  • find / -name "[pattern]" 2>/dev/null : find all and ignore errors

Permissions

• sudo [cmd] : run a cmd as root
• chmod [file] : change file permissions
  • -R : recursive
  • +x : make a file executable
  • +rw : make a file read-write
  • -w : make a file read-only
• chown [owner]:[group] [file] : change the owner of a file
• groups [user] : list groups of a user
• cat /etc/group : list all groups

Environment variables

• export [var]=[name] : set an env variable
• echo $[var] : print env variable
• echo $PATH : show system PATH
• export PATH=$PATH:[directory path] : add directory to system PATH
• echo "export PATH=$PATH:[directory path]" >> ~/.bashrc : change the system PATH permanently

Other

• ssh -p [port] [user]@[ip] : login to SSH
• scp [src path] [user]@[ip]:[dst path] : copy file to remote
  • -p [port] : specify port
  • -r : recursive (directory)
• scp [user]@[ip]:[src path] [dst path] : copy file from remote
• reboot : reboot system
• poweroff : shutdown system
• wget : ?
• tar -czvf [output file] [input dir] : create tar file (tar.gz)
• tar -xvf [input file] -C [output dir] : extract tar file
• zip : ?
• unzip : ?
• hexdump : dump file as hexa
• find . -name [file] | entr [cmd] : run a cmd whenever a file changes
• time [cmd] : time execution of cmd

Disk

• lsblk : list disk
• fdisk -l : disk info
• fdisk [disk] : partition disk
• mount [disk name] [directory] : mount disk
• umount [directory] : unmount disk
• cat /proc/mounts : mount info
• cat /etc/fstab : list mounted disks

Info

• fastfetch : system info
• uname -a : show kernel version
• lscpu : list CPU info
• lspci : list PCI devices (Bus:Device.Function)
  • -v : verbose
  • -vv : very verbose
  • -tv : tree
  • -k : kernel modules/drivers in use
  • -n : ID of PCI device (VendorID:deviceID)
• lsusb : list USB devices
  • -v : verbose
  • -t : tree
• nvidia-smi : show GPU info
• ifconfig : show network info
• sudo iftop -P : list TCP sockets
• netstat -nat : list TCP sockets
• du -shc * | sort -rh : show size of files in directory
  • -s : summary
  • -h : human readable
  • -c : show total
  • -b : bytes
  • --apparent size
  • -d [max depth] : max depth
• du -sh [directory] : show size of directory
• df : show disks usage
• free -h --si : show how much RAM
• htop : list process, kill process
• btop : list process, kill process
• sensors : show temperature
• watch -t -n 1 "sensors | grep 'Core 0:'" : show CPU temperature
• nmap -Pn -p- -v [ip] : find open ports
• strace : trace syscalls
• cat /proc/[pid] : procfs, running processes
• cat /proc/meminfo : memory info
• cat /proc/cpuinfo : CPU info (CPUID)
• cat /proc/interrupts : interrupts in
• cat /proc/ioports : IO ports
• cat /proc/iomem : MMIO
• cat /proc/driver/nvidia/ : GPU info
• cat /proc/stat : all process stats
• cat /proc/[pid]/stat : process stats

Kernel

• lsmod : list kernel modules
  • also cat /proc/modules
• modprobe [module] : load kernel module and dependencies
• insmod [module].ko : install kernel module
• rmmod [module] : remove kernel module
• modinfo -F [info] [module]: get info about kernel module
• dmesg | tail -n 5 : show kernel log
  • -W : show live
• ls -l /dev : list device files
  • major, minor
• cat /proc/devices : list assigned device numbers
• mknod [device] c [major] [minor] : create character device
• rmnod [device]
• head -c 1 [file] : output the first byte of a file

Paths

• . : current directory
• .. : parent directory
• ~ : home directory
• ../relative/path : relative path
• /absolute/path : absolute path

Pipes

• A | B : run A and transfer its output to B
• A & B : run A then B
• A && B : run A then B only if A succeeds
• | grep [some string] : filter out stdout

Redirect

• > : stdout
• < : stdin
• &> : stdout + stderr
• 0> : stdin
• 1> : stdout
• 2> : stderr
• 2>&1 : stderr to stdout, can use cmd | tee out.txt to also print on screen

Bash profile

• ~/.bashrc
  • executed every new shell
• ~/.bash_profile
  • executed once per login
  • inherit ~/.bashrc

Filesystem

FSH

• /proc : procfs, running processes
• /dev : udev, devices files
• /sys : sysfs, devices/bus/drivers/kernel
  • /sys/bus/pci/devices

Time

• stat [file]

1
2
3
4
5
6
7

mtime : modified time, last write
atime : access time, last read
    depends on mount options:
        relatime : update atime not every read
        noatime : don't update atime
ctime : change time, last metadata write or last data write
btime : creation/birth time, first created

Linux binaries

• AppImage (Universal linux binary)
• snap (Ubuntu)
• flatpak (Fedora)

Docker

• docker images : list images
• docker ps -a : list containers
• docker pull [image] : download image from docker registry (docker hub)
• docker rmi [image] : remove image
• docker image prune : remove untagged images
• docker build -t [image] . : build image from Dockerfile
  • --nocache : don't use cache
  • --build-arg [var]=[value] : pass env vars
• docker run -d --name [container] [image] : start container from image
  • -d : run container in background
  • -it : run container interactively
  • -p [host_port]:[container_port] : open ports
  • --restart=unless-stopped : start container when docker starts
• docker rm -f [container] : stop and remove container
• docker logs -f [container] : check container stdout
• docker exec -it [container] /bin/bash : explore container
• docker inspect [container] : inspect container
• docker network ls : list docker networks
• docker network prune : remove unused docker networks
• docker scan [image] : check image for vulnerabilities
• sudo systemctl status docker : check docker status
• sudo systemctl enable docker : start docker at boot