Linux command reference
564 commands — synopsis, the flags that matter and real examples for each.
Create, extract, and manage 7z archives with high compression ratios.
Generate an AppArmor security profile for an application by monitoring its behavior.
Interactive tool to update AppArmor security profiles based on system audit logs.
Display the current AppArmor security profile status and loaded policy information.
Convert program addresses to source file names and line numbers.
Encrypt and decrypt files or streams using the age encryption format with simple, modern cryptography.
Advanced Intrusion Detection Environment (AIDE) checks file integrity by comparing current file attributes against a previously generated database.
Alertmanager handles alerts sent by client applications and manages their deduplication, grouping, and routing to receivers like email, PagerDuty, and Slack.
Create or display shell aliases, which are custom shortcuts for commands.
Command-line tool for managing and querying Alertmanager alerts and silence rules.
Run ad hoc commands and playbooks across remote hosts using SSH without requiring agents.
Execute Ansible playbooks to automate infrastructure configuration and orchestration across multiple hosts.
Encrypt and decrypt sensitive data in Ansible playbooks and variable files.
Search the manual page names and descriptions for a keyword.
Command-line interface for managing Debian packages; install, update, remove, and search for software.
Query the APT package cache for package information and dependencies.
apt-get is the command-line tool for managing packages in Debian-based Linux distributions.
Mark or unmark packages as automatically or manually installed, or hold them from upgrades.
ArgoCd is a declarative, GitOps continuous delivery tool for Kubernetes that automates application deployment from Git repositories.
Display and manipulate the system ARP cache, mapping IP addresses to MAC addresses on the local network.
Record and share terminal sessions as animated text files.
asdf is a version manager that lets you install and switch between multiple versions of programming languages and tools.
atop is a system monitor for Linux that displays real-time per-process and system-wide resource usage including CPU, memory, disk I/O, and network activity.
Atuin is a magical shell history search tool that syncs, backs up, and intelligently searches your command history across machines.
Generate SELinux policy allow rules from audit logs of denied access attempts.
Configure and manage the Linux audit daemon to log system calls and file access for security monitoring.
Generates audit framework reports from the Linux audit logs.
Search the audit log for events matching specified criteria.
Automatically scales CPU frequency and power management based on system load and battery status.
Generates a shell script that automatically configures software source code packages.
Copy or symlink the GNU gettext infrastructure files into a package source tree to enable internationalization support.
Automatically update GNU Autotools configuration scripts by re-running autoconf, automake, and related tools in the correct order.
Automatically restart SSH sessions and tunnels when they drop.
Browse for mDNS/DNS-SD services available on the local network.
awk is a text processing language that scans files line-by-line, splits records into fields, and performs pattern-action operations.
AWS Command Line Interface for managing Amazon Web Services resources from the terminal.
The Azure CLI command-line interface for managing Azure cloud resources and services.
Search a device for bad blocks and optionally mark them as unusable.
A cat clone with syntax highlighting, line numbers, and git integration for viewing file contents.
Resume a suspended job in the background.
BIND 9 is a DNS server and resolver that translates domain names to IP addresses on the Internet.
Locate and identify block devices and their attributes like UUID, filesystem type, and labels.
bmon is a portable bandwidth monitor and rate estimator that shows real-time network interface statistics.
Borg Backup is a deduplicating backup program that creates space-efficient, encrypted backups with a focus on security and performance.
Inspect and manage eBPF programs and maps on the Linux kernel.
bpftrace is a high-level tracing language for dynamic instrumentation of the Linux kernel and applications using eBPF.
btm (Bottom) is a cross-platform system monitor written in Rust that displays CPU, memory, disk, and network usage in an interactive terminal UI.
btop is a modern, interactive system monitor displaying CPU, memory, disk, and network usage with a colorful, user-friendly interface.
Manage Btrfs filesystems, volumes, and subvolumes with administrative and monitoring tools.
Build OCI container images using rootless or root commands without requiring a daemon.
Introspect and interact with D-Bus message bus system and services.
Compress or decompress files using the Burrows-Wheeler block-sorting text compression algorithm.
Caddy is a powerful, enterprise-ready open source web server with automatic HTTPS.
Display a calendar for a specified month or year.
Command-line interface for managing Calico networking and security policies in Kubernetes clusters.
Display or work with POSIX capability sets for the current process or check capability support.
Cargo is Rust's package manager and build system for creating, testing, and distributing Rust projects.
Concatenate and print files to standard output.
Change the current working directory in the shell.
Automatically obtain, renew, and manage SSL/TLS certificates from Let's Encrypt.
Change the SELinux security context of files and directories.
Display practical examples and cheatsheets for command-line tools directly in your terminal.
Change the group ownership of files or directories.
Scans the system for signs of rootkit infection and suspicious files.
Change file and directory permissions using symbolic or octal notation.
Change the owner and/or group of files or directories.
Run a command or interactive shell with a different root directory.
Run processes with a specified CPU scheduling class and priority, or change scheduling parameters of running processes.
Command-line tool for managing and debugging Cilium network policies and connectivity.
Scan files and directories for malware using the ClamAV antivirus engine.
Clang is a C/C++/Objective-C compiler frontend that uses LLVM as its backend, providing fast compilation and detailed diagnostics.
Clang C++ compiler that translates C++ source code into machine-executable binaries.
Command-line client for connecting to and querying a ClickHouse database server.
CMake is a cross-platform build system generator that creates platform-specific build files from CMakeLists.txt configuration files.
collectd is a daemon that collects system and application performance metrics and can store or forward them to various backends.
Format input into multiple columns with aligned text.
Compare two sorted files line by line and output unique and common lines.
conntrack is a userspace tool for querying and managing netfilter connection tracking state.
Consul is a distributed service mesh and service discovery tool that manages service registration, health checking, and network configuration across infrastructure.
containerd is a daemon that manages container lifecycle and image operations on Linux systems.
Retrieve and analyze core dump files from the systemd journal.
Sign and verify container images and artifacts using cryptographic signatures.
Display a message spoken by an ASCII art cow (or other animal).
Copy files and directories.
Display and modify CPU power-related settings and frequencies on Linux systems.
crictl is a command-line interface for interacting with container runtimes that implement the Kubernetes Container Runtime Interface (CRI).
Install, list, edit, or remove cron jobs for the current user.
cryptsetup manages LUKS encrypted volumes and dm-crypt device mappings on Linux.
Split a file into pieces based on context lines or line numbers.
A suite of command-line tools for converting, querying, and analyzing CSV files.
Transfer data from or to a server using URLs, supporting HTTP, HTTPS, FTP, and many other protocols.
Remove sections from each line of files or stdin.
dash is a POSIX-compliant shell designed for speed and minimal size, commonly used as /bin/sh on modern Linux systems.
Display or set the system date and time.
Copy and convert data at the block level, useful for disk imaging, cloning, and low-level data manipulation.
Build a Debian package from source, handling dependencies and package creation automatically.
Report file system disk space usage.
Create Debian package templates for a new software project.
Compare two files line by line and show their differences.
Query DNS servers to look up domain names, IP addresses, and other DNS records.
direnv is an environment switcher for the shell that loads and unloads environment variables based on the current directory.
Print or control the kernel ring buffer messages.
Read and decode DMI (SMBIOS) system information from the BIOS.
DNF is a package manager for Linux systems that installs, updates, and removes software packages from configured repositories.
Generate the DNF package manager cache from repository metadata.
A lightweight DNS forwarder and DHCP server for small networks and embedded systems.
Manage Docker containers, images, networks, and volumes from the command line.
Build images with BuildKit, supporting multiple platforms, caching, and advanced container image creation.
Define and run multi-container Docker applications using a YAML configuration file.
doctl is the command-line interface for DigitalOcean's cloud platform, managing droplets, databases, Kubernetes clusters, and other cloud resources.
doggo is a modern DNS client for querying DNS records with colorized output and multiple output formats.
Display and validate Dovecot configuration settings.
Dovecot is an open-source IMAP and POP3 mail server that stores and retrieves emails for mail clients.
dpkg is the low-level package manager for Debian and Ubuntu systems, handling installation, removal, and management of .deb files.
Build a Debian package from source code in a directory tree.
Unpacks, examines, and manipulates Debian package archives (.deb files).
drill is a DNS lookup tool that performs DNS queries and displays results in a human-readable format, similar to dig but with a simpler output.
dstat is a versatile replacement for vmstat, iostat, netstat and ifstat that displays system resource statistics in real-time with customizable output.
Summarize disk usage of files and directories, showing how much space each one occupies.
duf is a disk usage analyzer that shows how much space directories and files consume in an easy-to-read format.
Duplicati is a backup client for encrypted, incremental backups to cloud storage and other destinations.
Duplicity backs up files encrypted and incremental to local or remote storage, supporting multiple backends.
dust is a user-friendly alternative to du that shows disk space usage in a visually intuitive way with ASCII trees and percentages.
Check and repair ext2/ext3/ext4 filesystems for consistency errors.
Display a line of text or variables to standard output.
Emacs is a highly extensible and customizable text editor and computing environment.
Run a command in a modified environment or display environment variables.
Control plane for etcd, a distributed key-value store for managing cluster configuration and service discovery.
Display and change ethernet device settings including speed, duplex, autonegotiation, and driver statistics.
Convert tabs to spaces in text files.
Set or display environment variables in the current shell and its child processes.
A modern replacement for ls that lists directory contents with colors, git integration, and better defaults.
Interact with the Fail2ban server to manage jails, view status, and configure bans.
Run a command in an environment where file ownership and permissions appear to be modified without actual root privileges.
Automatically control fan speeds based on temperature readings from hwmon sensors.
A fast alternative to find that searches for files and directories with simpler syntax and colorized output.
fdisk is a command-line utility for creating, deleting, and managing disk partitions on Linux systems.
Bring a background job to the foreground.
Display large ASCII art text banners in the terminal.
Determine file type by examining contents and metadata.
Search for files in a directory hierarchy matching specified criteria.
Control the firewalld daemon and manage firewall rules dynamically without restarting the service.
fish is a user-friendly interactive shell and command language with syntax highlighting, autosuggestions, and intelligent tab completion.
Build, install, and manage Flatpak applications and runtimes in isolated environments.
Manage file locks from the shell, allowing exclusive or shared access to files or file descriptors.
Fluent Bit is a lightweight log processor and forwarder that collects logs from various sources and sends them to multiple destinations.
Fluentd is an open-source data collector that unifies logging across multiple sources and destinations.
Flux is a container-native resource manager and job scheduler for HPC clusters and Kubernetes environments.
Command-line interface for Fly.io, managing applications, deployments, and infrastructure on the Fly platform.
fmt reformats text to a specified line length, wrapping paragraphs and removing extra whitespace.
fnm is a fast Node.js version manager that lets you install and switch between multiple Node.js versions without affecting system binaries.
Display a random, often humorous quotation or saying from a database of fortunes.
fpm is a tool for building packages in multiple formats (deb, rpm, tar, etc.) from source code, directories, or other packages.
Display total, used, and free memory in the system.
Check and repair a Linux filesystem.
Discard unused blocks on mounted filesystems to optimize SSD performance and reclaim space.
Manage firmware updates for devices on your system.
A command-line JSON processor that uses JavaScript for querying, filtering, and transforming JSON data interactively.
A general-purpose command-line fuzzy finder that filters input interactively with a search interface.
GNU C++ compiler that compiles C++ source code into executables or object files.
GNU C compiler that translates C source code into executable programs or object files.
Google Cloud command-line interface for managing Google Cloud resources and services.
GNU Debugger — interactive debugging tool for inspecting and controlling program execution.
Display the current SELinux enforcement mode of the system.
Get entries from administrative databases (passwd, group, hosts, services, protocols, networks, etc.).
Display the capabilities of a running process.
A blazing fast terminal-based UI for Git written in Rust.
A cross-platform system monitoring tool that displays real-time CPU, memory, disk, and network statistics in a curses-based dashboard.
Render markdown files and stdin to the terminal with syntax highlighting and formatting.
GnuTLS client for testing TLS/SSL connections and debugging certificate issues.
Go is a compiled programming language designed for building fast, reliable, and efficient software.
Goss is a quick and easy server validation tool that checks system state against a YAML specification file.
Encrypt, decrypt, and sign files or data using the GNU Privacy Guard implementation of OpenPGP.
Encrypt, decrypt, and sign files or messages using GnuPG 2 with public-key cryptography.
gping is a ping utility with a real-time graphical display showing response times over time.
Command-line utility for managing Grafana server configuration, plugins, and authentication.
Search for lines matching a pattern in files or stdin.
Create a new group account on the system.
Grype is a vulnerability scanner for container images and filesystems that detects known security vulnerabilities in software dependencies.
Decompress files compressed with gzip, restoring them to their original form.
Compress or decompress files using the DEFLATE algorithm.
Control Hetzner Cloud resources from the command line.
Get and set SATA/IDE device parameters and performance characteristics.
Output the first part of files.
Helix is a post-modern text editor written in Rust with built-in LSP support, tree-sitter syntax highlighting, and modal editing.
Helm is the package manager for Kubernetes that helps you define, install, and upgrade Kubernetes applications.
Display or manipulate the command history list in the current bash session.
Perform DNS lookups to find IP addresses or hostnames associated with a domain.
hostapd is a user-space daemon for access point and authentication server management on Linux.
Query and change the system hostname and other host settings.
Extract data from HTML using CSS selectors, similar to jq for JSON.
Display and interact with a real-time view of processes and system resource usage.
Command-line interface for interacting with Hugging Face Hub, managing models, datasets, and user authentication.
hwinfo displays detailed information about hardware components on a Linux system.
Print user and group IDs and names for the current user or a specified user.
Display bandwidth usage on an interface by socket connections in real-time.
inxi displays comprehensive system information including hardware, CPU, memory, storage, graphics, and network details in a human-readable format.
Report CPU and input/output statistics for devices and partitions.
Display I/O usage by process on the system, sorted by I/O bandwidth in real-time.
Show and manipulate routing, network devices, interfaces, and tunnels.
Show and manipulate IP addresses on network interfaces.
Show and manipulate network device properties and state.
Show and manipulate IP routing tables.
Manage IP routing policy rules that determine which routing table to use for packets.
Create, modify, and delete IP tunnel interfaces for encapsulating network traffic.
iperf3 measures network bandwidth and performance between two hosts using TCP, UDP, or SCTP protocols.
Manage IP sets – collections of IP addresses, networks, ports, or MAC addresses for use with netfilter firewall rules.
iptables is a command-line firewall utility for configuring Linux kernel netfilter packet filtering rules and network address translation (NAT).
istioctl is the command-line tool for managing and debugging Istio service mesh deployments.
Jaeger is a distributed tracing platform for monitoring and troubleshooting microservices-based distributed systems.
Display status of jobs in the current shell session.
Query and display messages from the systemd journal.
Parse, filter, and transform JSON data from the command line.
A handy way to save and run project-specific commands.
k3s is a lightweight Kubernetes distribution that bundles the entire Kubernetes control plane and worker components into a single binary with minimal dependencies.
A terminal UI and visual dashboard for managing Kubernetes clusters interactively.
kdig is a DNS lookup tool from KNOT DNS that performs DNS queries with advanced features and detailed output.
ISC Kea DHCPv4 server for assigning IPv4 addresses and network configuration to clients.
Send a signal to a process, typically to terminate it.
Send a signal to all processes matching a given name.
kind is a tool for running local Kubernetes clusters using Docker containers as cluster nodes.
Load and unload Linux kernel modules with a unified interface for modprobe, insmod, rmmod, and lsmod functionality.
Kompose translates Docker Compose files into Kubernetes manifests.
Create device mappings for partitions on a loop device or disk image.
krew is a package manager for kubectl plugins that helps discover, install, and manage kubectl extensions.
kube-proxy is a network proxy that runs on each Kubernetes node to maintain network rules for service abstraction and load balancing.
Bootstrap a Kubernetes cluster with kubeadm, a tool for initializing and managing cluster control planes and worker nodes.
kubectl is the command-line interface for controlling Kubernetes clusters and managing containerized applications.
kubelet is the primary agent that runs on each Kubernetes node to manage pods and ensure containers are running in desired state.
Kustomize lets you customize Kubernetes object configurations without modifying the original YAML files.
Show a listing of last logins and logouts on the system.
A simple terminal UI for managing Docker containers, images, and volumes with keyboard navigation.
A simple terminal UI for git commands, providing an interactive interface for staging, committing, branching, and other git operations.
Configure dynamic linker run-time bindings and maintain the dynamic linker cache.
Print the shared object dependencies of ELF binaries and libraries.
A pager program that displays file contents one screen at a time, allowing backward and forward navigation.
Prepare a package to use libtool by adding necessary build files and macros.
Linkerd is a service mesh that adds observability, reliability, and security to Kubernetes clusters without requiring application code changes.
lintian checks Debian packages for compliance with policy and common mistakes.
Command-line interface for running Large Language Models locally using llama.cpp.
Start an inference server for Large Language Models using llama.cpp with HTTP API endpoints.
LLDB is a next-generation debugger that debugs programs, attaches to running processes, and inspects core dumps.
Create links between files, allowing the same file to be accessed by different names or paths.
Control the system locale and keyboard layout settings.
Find files by name using a pre-built database of the filesystem.
Control the systemd login manager to inspect and manage user logins, sessions, and seats.
Rotates, compresses, and removes old log files based on rules configured in /etc/logrotate.conf and /etc/logrotate.d/.
Loki is a log aggregation system designed to store and query logs from Kubernetes clusters and other sources efficiently.
lolcat displays text in rainbow colors with optional animation effects.
Display lines beginning with a given string, using binary search on a sorted file.
List directory contents and file information.
List all block devices and their mount points in a tree or list format.
Display information about the CPU architecture and details from /proc/cpuinfo.
List detailed hardware information about the system including CPU, memory, disks, network devices, and more.
Display the status of modules in the Linux kernel.
List all namespaces on the system with their type, PID, and parent namespace information.
List open files and the processes that opened them.
List all PCI devices on the system with vendor and device information.
List SCSI devices and associated block devices on the system.
List all USB devices connected to the system with their vendor and product IDs.
Trace library calls made by a program and display their arguments and return values.
Create a logical volume in an LVM volume group.
Extend the size of a logical volume on a Linux LVM system.
Remove a logical volume from a volume group.
Display information about logical volumes in a volume group.
Scan all disks for Logical Volume Manager (LVM) physical volumes and report the status of logical volumes.
Lynis is a security and configuration auditing tool for Linux/Unix systems that scans for vulnerabilities, misconfigurations, and compliance issues.
LZ4 is an extremely fast lossless compression algorithm and command-line tool for compressing and decompressing files.
lzop compresses or decompresses files using the LZO algorithm for fast compression/decompression.
Control the systemd machine registry and manage virtual machines and containers.
Send and receive email messages from the command line.
Display the mail queue of pending messages waiting to be delivered.
Send and receive email messages from the command line.
Build packages from source using a PKGBUILD recipe in Arch Linux.
Display manual pages for Linux commands, system calls, and file formats.
MariaDB Galera Cluster server with multi-master synchronous replication for high availability and load distribution.
masscan is an asynchronous TCP port scanner designed to scan the entire Internet quickly.
Midnight Commander is a visual file manager and shell for Unix-like systems with a Norton Commander-style interface.
Create, manage, and monitor Linux software RAID arrays.
mdcat renders Markdown files in the terminal with syntax highlighting and formatting.
Meson is a modern build system designed to be fast, user-friendly, and language-agnostic for compiling software projects.
A modern, intuitive terminal-based text editor with mouse support and built-in plugins.
View or manipulate media-independent interface status and configuration for Ethernet devices.
minikube is a tool that runs a single-node Kubernetes cluster locally for development and testing.
Mise is a polyglot runtime version manager that installs and manages multiple language runtimes and tools from a single configuration file.
mkcert is a simple tool for making locally-trusted development certificates with no configuration.
Create one or more directories.
Create a filesystem on a block device or partition.
Create a Btrfs filesystem on one or more block devices.
Create an ext4 filesystem on a device or partition.
Create an XFS filesystem on a device or partition.
Miller is a command-line tool for querying, transforming, and reformatting data in CSV, JSON, TSV, and other formats.
Build RPM packages in isolated chroot environments to ensure clean, reproducible builds without affecting the host system.
Load or remove Linux kernel modules with automatic dependency resolution.
Manage UEFI Secure Boot keys and Machine Owner Key (MOK) settings.
Interactive MongoDB shell for connecting to MongoDB servers and executing database operations.
Export data from a MongoDB instance to BSON or JSON format for backup or migration purposes.
Restore a MongoDB database from a dump created by mongodump.
Interactive MongoDB shell for connecting to and querying MongoDB databases.
Display text files one screen at a time with pagination.
Mobile Shell provides a responsive remote terminal connection that survives network changes and roaming.
Attach a filesystem or storage device to the directory tree so its contents become accessible.
Report processor-related statistics and monitor CPU performance in real-time.
Combines traceroute and ping functionality to diagnose network paths and measure latency to a destination host.
mutt is a text-based email client for reading, composing, and managing email from the command line.
Move or rename files and directories.
MySQL command-line client for connecting to and interacting with MySQL databases.
mysqlcheck checks, repairs, optimizes, and analyzes MySQL tables.
mysqldump creates logical backups of MySQL databases by generating SQL statements to recreate tables and data.
namcap analyzes Arch Linux packages for common packaging mistakes and policy violations.
Check the syntax and validity of a BIND named configuration file.
Check the syntax and validity of a DNS zone file.
nano is a simple, user-friendly terminal text editor for creating and editing files.
Read and write data across network connections using TCP or UDP.
nerdctl is a Docker-compatible CLI for containerd, providing a user-friendly interface for managing containers and images.
Display network traffic usage by process in real-time.
Display network connections, routing tables, interface statistics, masquerade connections, and multicast memberships.
Query and control the state of the systemd network manager.
nft is the command-line tool for configuring the netfilter packet filtering framework using the nftables ruleset language.
Network grep: search for and display packets matching a pattern on a network interface.
Run a command with a modified CPU scheduling priority.
A small build system with a focus on speed, designed to drive compilation of large projects.
Number the lines of files, outputting them with line numbers prepended.
List symbols from object files and executables, showing their addresses, sizes, and types.
nmap is a network mapper that scans hosts and ports to discover network topology, open services, and potential security weaknesses.
NetworkManager command-line interface for controlling network connections and devices.
nnn is a terminal file manager that navigates directories and manages files with a keyboard-centric interface.
Run a command immune to hangups, with output redirected to a file.
Nomad is a flexible workload orchestrator that deploys and manages containers, VMs, and batch jobs across on-premise and cloud infrastructure.
Run a program in a namespace context by entering the namespaces of another process.
Query DNS servers to resolve hostnames or IP addresses.
Convert numbers to or from human-readable formats (e.g., 1K, 2M, 3G).
Neovim is a highly extensible text editor built on Vim principles with modern features like async I/O, built-in LSP support, and Lua scripting.
Node Version Manager (nvm) allows you to install and switch between multiple versions of Node.js and npm.
Interact with NVMe (Non-Volatile Memory Express) solid-state drives and manage their settings.
Display information from object files such as symbols, sections, disassembly, and headers.
Ollama is a command-line tool to run large language models locally on your machine.
OpenDKIM is a milter-based implementation of DKIM (DomainKeys Identified Mail) signing and verification for sendmail and other mail transfer agents.
Test DKIM keys and configuration for OpenDKIM to verify they are properly set up and functional.
OpenSSL is a toolkit for working with SSL/TLS certificates, cryptographic operations, and secure communications.
Generate RSA private keys for cryptographic operations.
Create and process certificate requests (PKCS#10 format) for X.509 certificates.
OpenSSL TLS/SSL client for testing and debugging SSL/TLS connections to remote servers.
Display and sign X.509 certificates, including extracting fields, converting formats, and validating certificate chains.
Interactive query tool for osquery that lets you write SQL queries to inspect system state and security events.
OpenTelemetry Collector is a vendor-agnostic agent that receives, processes, and exports telemetry data from applications and infrastructure.
p7zip is a command-line file archiver that compresses and extracts 7z format archives with high compression ratios.
pacman is the package manager for Arch Linux and Arch-based distributions, handling installation, removal, and updates of software packages.
Pandoc converts documents between different markup and word processing formats.
Create, resize, and manage disk partitions interactively or via command line.
Inform the operating system kernel of partition table changes without rebooting.
pass is a simple password manager that stores passwords encrypted with GPG in a directory hierarchy on disk.
Change user password or password-related information.
Merge lines of files side-by-side, combining corresponding lines with a delimiter.
Apply a unified diff patch file to one or more source files.
Personal builder: constructs Debian packages in a clean chroot environment to verify build dependencies and package integrity.
Compress or decompress files in parallel using the bzip2 algorithm.
Performance Co-Pilot - a system performance monitoring and analysis framework.
Analyze CPU performance, trace system events, and profile running processes.
Take a base backup of a PostgreSQL cluster without connecting to the database server.
Extract a PostgreSQL database into a script file or archive.
Check the connection status of a PostgreSQL server.
Restore a PostgreSQL database from an archive file created by pg_dump.
pgbench is a simple program for running benchmark tests against a PostgreSQL database.
Search for processes by name and print their process IDs.
PHP command-line interface for executing PHP scripts and running an interactive shell.
PHP FastCGI Process Manager (FPM) - a high-performance process manager for PHP scripts.
Pi-hole is a network-wide DNS sinkhole and ad blocker that runs on Linux to block ads and malware domains.
Report per-process CPU, memory, I/O, and context switch statistics.
pigz is a parallel implementation of gzip that compresses files using multiple processors for faster compression and decompression.
Send ICMP ECHO_REQUEST packets to network hosts to check connectivity and measure latency.
pkg-config is a helper tool used when compiling applications and libraries to find installed packages, obtain their compiler and linker flags, and check package versions.
Query information about installed libraries and their compile/link flags.
Send signals to processes by name or other attributes instead of by process ID.
Display the memory map of a process, showing virtual memory layout and memory usage per mapping.
Podman is a tool for managing containers and container images using Open Container Initiative (OCI) standards, providing a Docker-compatible command interface.
Display or set configuration parameters for the Postfix mail server.
Postfix mail server control and management command for starting, stopping, and monitoring the mail system.
List, flush, or manage the Postfix mail queue.
Postfix superintendent utility for managing the queue and configuration.
Monitor and analyze power consumption on Linux systems, identifying power-hungry processes and suggesting optimizations.
Format text files for printing with pagination, headers, footers, and multi-column layouts.
Format and print text using a template string with variable substitution.
Get and set process resource limits.
A modern replacement for ps that lists running processes with a more readable and user-friendly output format.
Prometheus is a time-series database and monitoring system that collects metrics from applications and infrastructure.
Promtail is a log collector agent that ships logs to Loki for storage and querying.
Validate and test Prometheus configuration files, rules, and alert templates.
Display information about running processes.
psql is an interactive terminal for PostgreSQL that lets you execute SQL queries and manage databases.
Display a tree of processes showing parent-child relationships.
Pulumi is an infrastructure as code platform for building, deploying, and managing cloud resources using programming languages.
Initialize a physical volume for use with LVM (Logical Volume Manager).
Display information about physical volumes in LVM.
List all physical volumes visible to the system, optionally discovering new ones.
Print the full pathname of the current working directory.
pyenv manages multiple Python versions on a single system, allowing you to switch between them per-project or globally.
A command-line tool to encrypt and decrypt files using age, a simple, modern, and secure file encryption format.
Railway is a command-line tool for deploying and managing applications on the Railway platform.
A terminal file manager with VI key bindings and a column view showing file hierarchy and preview pane.
rbenv is a version manager for Ruby that lets you install, switch between, and manage multiple Ruby versions per project or globally.
Rclone is a command-line program to sync files and directories to and from cloud storage services.
Display information about ELF object files, including headers, sections, symbols, and relocations.
redis-benchmark is a utility to measure Redis server performance by running load tests with configurable parameters.
Command-line interface for interacting with Redis servers and executing Redis commands.
Alter the scheduling priority of running processes.
Resize an ext2, ext3, or ext4 filesystem to a new size.
Resolve hostnames, IP addresses, resource records, and services using systemd-resolved.
A fast, secure, and efficient backup program that stores encrypted backups in local or remote repositories.
Restore SELinux security context for files and directories.
Reverse lines characterwise.
A fast, line-oriented search tool that recursively searches directories for a regex pattern, similar to grep but with sensible defaults and better performance.
rkhunter is a rootkit and malware scanner that searches for hidden processes, backdoors, and suspicious files on Linux systems.
Remove files or directories.
Remove empty directories from the filesystem.
Controls operation of a BIND DNS server by sending commands to the rndc socket.
Query, install, update, and manage RPM package files on Red Hat-based Linux systems.
Build RPM packages from source code and spec files.
Manage GPG keys used for RPM package signature verification.
rsnapshot is a filesystem snapshot utility that creates incremental backups of entire directories using rsync and hard links.
rspamd is a fast and modular spam filtering system that uses machine learning and rule-based detection to classify emails.
rsync is a fast, versatile file synchronization tool that efficiently transfers and synchronizes files between local and remote systems.
rsyslog is a system logging daemon that receives, processes, and forwards system messages according to configurable rules.
A CLI tool for spawning and running containers according to the OCI Runtime Specification.
rustup is the Rust toolchain installer and version manager for managing multiple Rust versions and targets.
Collect, report, and save system activity information including CPU, memory, disk I/O, and network statistics.
Build Debian packages in a clean chroot environment using schroot.
Manipulate process CPU affinity and scheduling parameters on Linux.
Securely copy files between hosts using SSH protocol.
Display keys pressed on screen in real-time, useful for presentations and screencasts.
A modern, user-friendly replacement for sed that finds and replaces text with regex support and intuitive syntax.
Access and modify SCSI device parameters and VPD pages.
Analyze and display SELinux policy violation alerts from the audit log.
sed is a stream editor that performs text transformations on input using regular expressions and editing commands.
Manage SELinux policy components including users, roles, types, and file contexts.
Display temperature, voltage, and fan speed readings from hardware sensors.
Detect hardware monitoring chips and generate a configuration file for lm-sensors.
serverspec is a Ruby-based framework for testing and validating server infrastructure configuration and state.
Run a System V init script or manage systemd services for system daemons.
Set the current SELinux enforcement mode (Enforcing, Permissive, or Disabled).
A scriptable disk partition editor for creating, modifying, and deleting disk partitions.
Interactive secure file transfer program using SSH.
ShellCheck is a static analysis tool that finds bugs and potential issues in shell scripts.
shfmt formats shell script files according to a consistent style.
Securely overwrite files to make them unrecoverable before deletion.
Generate random permutations of input lines or numbers.
Inspect and manipulate container images and image repositories.
Display a steam locomotive animation on the terminal when you mistype 'ls'.
Display kernel slab cache statistics in real-time, showing memory usage of kernel objects.
Delay for a specified amount of time.
Display or set SMART (Self-Monitoring, Analysis and Reporting Technology) attributes and thresholds on storage devices.
Install, manage, and control snap packages on Linux systems.
snapper is a command-line tool for creating and managing LVM snapshots and Btrfs subvolume snapshots for system backup and recovery.
snapraid is a backup program that stores redundancy information and can recover corrupted files from disk failures without requiring a full backup copy.
socat is a relay for bidirectional data transfer between two independent data channels.
sops is a simple tool for managing secrets in YAML, JSON, ENV, INI and BINARY files using encryption.
Sort lines of text files in ascending or descending order based on specified keys and options.
SpamAssassin is a mail filter that uses various techniques to identify and score spam messages.
Split a file into smaller pieces by lines, bytes, or patterns.
Interactive command-line interface for SQLite databases.
Display socket statistics and network connection information, replacing the deprecated netstat command.
OpenSSH remote login client for securely connecting to remote systems over the network.
Add private key identities to the SSH authentication agent.
ssh-agent is a program that holds private SSH keys in memory and provides them to SSH clients when needed, eliminating the need to type passphrases repeatedly.
Install your public SSH key on a remote machine to enable password-less authentication.
Generate, manage, and convert SSH public and private key pairs for authentication.
Mount a remote filesystem over SSH using FUSE.
Starship is a minimal, blazing-fast, and infinitely customizable shell prompt written in Rust.
Display detailed file and filesystem information including permissions, ownership, timestamps, and inode data.
Trace system calls and signals made by a process to diagnose problems and understand program behavior.
Switch to another user account, or become the superuser (root).
Execute a command as another user, typically the superuser (root), with privilege escalation.
Run a login shell as root or another user with a complete environment.
Syft generates a software bill of materials (SBOM) from container images and filesystems to identify all software components.
View and modify kernel parameters at runtime without reboot.
Control the systemd system and service manager.
Analyze systemd boot performance and service dependencies.
Recursively show the contents of Linux control group hierarchies and their resource limits.
Show top control groups by their resource usage (CPU, memory, I/O).
Establish and manage temporary mount points for filesystems.
Spawn and manage lightweight containers with systemd, providing process and resource isolation.
Resolve domain names, IPv4/IPv6 addresses, and DNS records using systemd's resolver service.
Run a program in a new systemd unit, useful for setting resource limits, cgroups, and tracking processes.
Create, delete, and clean up temporary files and directories according to systemd tmpfiles.d configuration files.
Display the last part of files, useful for viewing log files and monitoring output in real time.
Create, extract, and manage tape archive files for backing up or distributing groups of files.
task is a command-line task management tool for organizing, tracking, and managing to-do items and projects.
Retrieve or set the CPU affinity (processor mask) of running processes.
Capture and display network packets in real-time or save them to a file for analysis.
Kill TCP connections by dropping packets matching a specified pattern.
Read from standard input and write to standard output and files simultaneously.
Telegraf is a plugin-driven server agent for collecting and reporting metrics from systems, applications, and services.
tempo is a command-line tool for managing and playing back music files with tempo adjustment capabilities.
Terraform is an infrastructure-as-code tool that provisions and manages cloud resources declaratively across multiple providers.
Run a program and report how long it takes, plus resource usage.
Query and change the system time and date settings, timezone, and NTP synchronization status.
Run a command with a time limit, killing it if it exceeds the specified duration.
Timeshift is a system restore utility that creates incremental filesystem snapshots using rsync or BTRFS, allowing you to roll back your system to a previous state.
Display simple, practical examples for command-line tools from the tldr community.
TLP is a power management tool that optimizes battery life and thermal performance on Linux laptops.
Display detailed power management and battery statistics from the TLP power management daemon.
OpenTofu is an infrastructure as code tool for building, changing, and versioning infrastructure safely and efficiently.
Display and update sorted information about the most CPU and memory intensive processes.
Create empty files or update the access and modification times of existing files.
Translate or delete characters from input text.
Traceroute prints the route packets take to reach a network host, showing each hop (gateway) along the path.
Display directory structure as a tree with indented lines showing files and subdirectories.
Tripwire is a file integrity monitoring tool that detects unauthorized changes to system files and directories.
Trivy is a simple and comprehensive vulnerability scanner for containers, filesystems, and repositories.
Capture and analyze network packets from the command line, the non-GUI version of Wireshark.
Adjust tunable file system parameters on ext2, ext3, and ext4 file systems.
Display processor frequency, idle, and thermal statistics on modern Intel and AMD processors.
udevadm controls the udev device manager and queries device information.
Uncomplicated Firewall (ufw) is a user-friendly interface for managing iptables firewall rules on Linux.
Set or display the file mode creation mask that determines default permissions for new files and directories.
Unmount file systems from the directory tree.
Print system information like kernel name, version, hardware platform, and hostname.
Control and monitor the Unbound DNS resolver daemon remotely.
Convert spaces to tabs in text files.
Filter or report on repeated lines in a file or input stream.
Extract, test, and list files from RAR archives.
Run a program in a new set of Linux namespaces, isolating it from the system.
Extract files from ZIP archives.
Display how long the system has been running, along with current load average and number of logged-in users.
Create a new user account on the system.
Delete a user account and optionally remove their home directory and mail spool.
Modify a user account's login name, UID, groups, home directory, shell, and other attributes.
Valgrind is a dynamic analysis tool that detects memory errors, memory leaks, and profiling issues in programs.
Vector is a lightweight, open-source data pipeline tool for collecting, transforming, and routing logs and metrics.
Velero is a backup and disaster recovery tool for Kubernetes clusters and persistent volumes.
Create a new LVM volume group from one or more physical volumes.
Display information about volume groups in LVM (Logical Volume Manager).
Scan all disks for volume group metadata and display information about discovered volume groups.
A highly configurable text editor that improves upon vi with additional features and modes.
VisiData is an interactive terminal spreadsheet tool for exploring, analyzing, and transforming tabular data from various formats.
vmstat reports virtual memory statistics and system activity including processes, memory, paging, block I/O, interrupts, and CPU usage.
Display information about currently logged-in users and their activities.
Execute a program periodically, full screen, showing output differences.
Count lines, words, and characters in files or standard input.
Configure and manage WireGuard VPN interfaces and peers.
Set up and tear down WireGuard VPN interfaces with a simple configuration file.
Download files from the web using HTTP, HTTPS, or FTP protocols.
Locate the binary, source, and manual page files for a command.
Locate a command in the user's PATH and display its full path.
Display information about users currently logged in to the system.
Print the username of the current user.
Wipe filesystem, raid, and partition-table signatures from a device.
Wireshark is a graphical network protocol analyzer that captures and displays network traffic in real-time.
Build and execute commands from standard input, passing lines as arguments.
Expand the size of a mounted XFS filesystem to use available space on the underlying device.
Display information about XFS filesystems, including geometry, block size, and mount options.
Repair a corrupted or inconsistent XFS filesystem.
Compress or decompress files using the XZ compression format with high compression ratios.
yq is a lightweight YAML, JSON, XML and CSV query and transformation tool that works like jq but for structured data formats.
yum is a package manager that installs, updates, and removes software packages on Red Hat-based Linux systems.
Manage ZFS filesystems, volumes, snapshots, and storage pools.
Automatically create and manage ZFS snapshots on a configurable schedule.
Receives a ZFS dataset stream and reconstructs the dataset on the receiving system.
Send ZFS dataset snapshots or incremental changes to stdout for backup, replication, or transfer to another system.
Create or modify compressed archive files in ZIP format.
A smarter cd command that learns your most-used directories and lets you jump to them with minimal typing.
Create, destroy, and manage ZFS storage pools.
Zsh is an interactive login shell and command interpreter for Unix systems with advanced scripting features and customization.
zstd is a fast real-time compression algorithm that provides high compression ratios with faster speed than gzip or bzip2.