# service psa-firewall stop
Category: Administration
# head -10 log.txt | grep <whatever>
Example for plesk mail log
# head -n 10 /usr/local/psa/var/log/maillog | grep @domain.com
Return 10 results
# grep -m 10 @domain.com /usr/local/psa/var/log/maillog
The mail sent by your server’s cron jobs are refused by the recipient server due to:
"Action: failed Final-Recipient: user;user@domain.com Status: 5.0.0 Remote-MTA: dns; inbound.smtp.domain.com Diagnostic-Code: smtp; 553 5.1.8 ... Domain of sender address root@hostname.domain.com does not exist"
Crontab will by default send from $LINUX_USER@$HOSTNAME. You can change this by connecting to the server via SSH, running “crontab -e”, and adding “MAILFROM=VALID_ADDRESS_HERE”. Ideally, the MAILFROM will be set to a mail account hosted on your server, but if it is a valid domain, the recipient address will accept it.
Basics
rDNS (Reverse DNS)
The Reverse DNS for an IP should be set to the EHLO value that is sent in the outgoing mail header. This is generally the HostName of the computer.
This value should also match the outgoing IP address used to send the mail.
On a multi-IP server, if the sending IP does not match the EHLO domain, you may be sending from Postfix. Switching to Qmail may cause the sending IP to match the primary IP on the server, which should correct any mis-matched IP/EHLO issues.
find /path/to/chmod -type d | xargs chmod -v 755 find /path/to/chmod -type f | xargs chmod -v 644
- cheat_sheet.org
- (C) William Hackmore, 2010
- The contents of this file are released under the GNU General Public License. Feel free to reuse the contents of this work, as long as the resultant works give proper attribution and are made publicly available under the GNU General Public License.
- Last updated 8/14/2012
- Best viewed in emacs org-mode.
- Command Reference:
- Basics:
- Getting help:
- Basics:
- View the manual for target command
man [command]
- Get help with a target command (probably the same as above, but not always):
[command] -h
- In case you forget the name of a command, print possible commands relating to [guess]:
apropos [guess]
- View index of help pages:
info
-
-
- Command Line Utilities:
- Basic File and Directory Operations:
- Command Line Utilities:
-
- Print current working directory:
pwd
- Show files in current directory:
ls
- Show maximum information about all files, including hidden:
ls -a
- Recurse into subdirectories and list those as well:
ls -r
- Move/rename a file or directory (be careful that you don’t move the source over a destination with the same name):
mv [source] [destination]
- Delete target forever (be very careful), use -r recursive flag for directories:
rm [target]
- Copy file or directory:
cp [source] [destination]
- Mount filesytem:
mount /dev/[device name] /media/[device name]
- Unmount:
umount /media/[device name]
- Forensically clone filesystems and do other low-level operations on files. Very dangerous:
dd
- Work with filesystems and partitions. (Easier, still quite dangerous):
fdisk
-
-
-
- System Administration:
-
-
- Execute command as an administrator (dangerous, but necessary for system administration tasks):
sudo [command]
- Become system administrator:
sudo -s
- Quit system administration:
exit
- Check distro repositories for software updates:
sudo apt-get update
- Download and install updates (update first):
sudo apt-get upgrade
- Search for package in the repositories:
apt-cache search [keyword]
- Get more detail on one specific package:
apt-cache show [package name]
- Download and install a package:
sudo apt-get install [package name]
- View the output of a command in a more convenient format:
[command] | less
-
-
-
- Working With Files:
-
-
- Print a file in terminal:
cat [file]
- Find files matching [filename]:
locate [filename]
- Search through [filename] for matches to [phrase]:
grep [phrase] [filename]
- Search through output of a command for [phrase]:
[command] | grep [phrase]
-
-
-
- Working With Processes:
-
-
- List all running processes:
ps -e
- Standard system monitor showing a more extensive view of all processes and system resources:
top
- Like top, but with a better, cleaner interface:
htop
- Stop a process from using all system resources and lagging computer:
nice [process name]
- Kill misbehaving process (use sparingly, last resort, try ‘nice’ command first):
pkill [process name]
-
-
-
- Compression and Encryption:
-
-
- Make a simple compressed backup of a file or directory:
tar -cvzf [backup output.tgz] [target file or directory]
- Open a compressed .tgz or .tar.gz file:
tar -xvf [target.tgz]
- Encrypt a file:
gpg -o [outputfilename.gpg] -c [target file]
- Decrypt a file:
gpg -o [outputfilename] -d [target.gpg]
- Zip and encrypt a directory simultaneously:
gpg-zip -o encrypted-filename.tgz.gpg -c -s file-to-be-encrypted
-
-
- The Bash shell:
- File Name expansions:
- The Bash shell:
-
- Current user’s home directory:
~/
- Current directory:
./
- Parent directory:
../
- Or even (Two parent directories down):
../../
- All files in target directory. (Be very careful.):
/*
-
-
-
- Output Redirects:
-
-
- Redirect output of one command into the input of another with a pipe:
[command 1] | [command 2]
- Or even:
[command 1] | [command 2] | [command 3]
- Redirect output to a file:
[command] > file
- Or:
[file] > [file]
- Or even, to redirect in a different direction:
[file] < [file]
- Append output rather than writing over the target file:
[file/command] >> [file]
- Works like |, but it writes output to both target and terminal:
tee [target]
-
-
-
- Controlling Execution:
-
-
- Wait until [command 1] is finished to execute [command 2]
[command 1] ; [command 2]
- Or even:
[command 1] ; [command 2] ; [command 3]
-
-
-
- Wildcards:
-
-
- Zero or more characters:
*
- Matches “phrase” and any number of trailing characters:
phrase*
- Matches any incidences of “phrase” with any trailing or leading chars:
*phrase*
- Matches any one char:
?
- Matches any of the characters listed inside brackets:
[chars]
- Matches a range of chars between a-z:
[a-z]
-
- Advanced:
- Command Line Utilities, Continued:
- Networking:
- Command Line Utilities, Continued:
- Advanced:
- Configure network interfaces:
ifconfig
- Configure wireless network interfaces:
iwconfig
- Connect to a remote server.
ssh [username]@[ipaddress]
- Forward x from target to current machine (Get a remote desktop. Very obscure and very useful):
ssh -x [username]@[ipaddress]
- Copy files over the network from one machine to another:
scp [source filename]:[username]@[ipaddress] [target filename]:[target username]@[target ipaddress]
- Copy only changes between files or directories (super efficient way to sync directories, works either locally or with remote servers using username@ipaddress:optionalport, just like ssh):
rsync [source] [target]
- Check to see if target is online and responding
ping [ip address]
- View network route to target:
traceroute6 [ip address]
- Network Monitor
netstat
- Manage standard linux firewall (advanced users only)
iptables
- Scan this machine to check for open ports:
nmap 127.0.0.1
-
-
-
-
- netcat:
-
-
-
- Listen for input from network on [recieving port], dump it to a file (possibly insecure):
netcat -l [recieving port] > file_copied
- Pipe the output of a command to a target ip and port over the network:
[command] | netcat -w [number of seconds before timeout] [target ip] [target port]
- Use tar to compress and output a file as a stream, pipe it to a target ip and port over the network:
sudo tar -czf - [filename] | netcat -w [number of seconds before timeout] [target ip] [target port]
-
-
-
- Users and Groups:
-
-
- Change owner of a file or directory:
chown
- Change privileges over file or directory:
chmod
- Create a new user:
adduser
- Change user privileges (be very careful with this one):
usermod
- Delete user”
deluser
- Print groups:
groups
- Create a new group:
groupadd
- Change group privileges:
groupmod
- Delete group:
delgroup
- Temporarily become a different user:
su [username]
- Print usernames of logged in users:
users
- Write one line to another user from your terminal:
talk
- Interactive talk program to talk to other users from terminal:
ytalk
-
-
-
- Working With Files, Continued:
-
-
- View what processes are using what files:
lsof
- View the differences between two files:
diff [file 1] [file 2]
- Output the top -n lines of [file]:
head -n [number of lines] [file]
- Like head, but it outputs the last -n lines:
tail
- Checksum a file:
md5sum [file]
- Checksum every file in a directory:
md5deep [directory]
- Checksum a file (safer algorithm with no hash collisions):
sha1sum
- Same operation as md5deep, but using sha1:
sha1deep
- Call [command] every -n seconds, and display output:
watch -n [number of seconds] [command]
- Execute [command], print how long it took:
time [command]
- View files in home from largest to smallest:
du -a ~/ | sort -n -r | less
- remove spaces from filenames in current directory
rename -n 's/[\s]/<i>/g' *</i>
- change capitals to lowercase in filenames in current directory
rename 'y/A-Z/a-z/' *
-
-
-
-
- Environment and Hardware:
-
-
-
- Print full date and time:
date
- Print the hostname of this machine:
echo $HOSTNAME
- Print information about current linux distro:
lsb_release -a
- Print linux kernel version:
uname -a
- Print information about kernel modules:
lsmod
- Configure kernel modules (never do this):
modprobe
- View Installed packages:
dpkg --get-selections
- Print environment variables:
printenv
- List hardware connected via PCI ports:
lspci
- List hardware connected via USB ports:
lsusb
- Print hardware info stored in BIOS:
sudo dmidecode
- Dump captured data off of wireless card:
dumpcap
- Dump info about keyboard drivers:
dumpkeys
-
-
-
-
- System Administration (Continued):
-
-
-
- Add a Personal Package Archive from Ubuntu Launchpad:
add-apt-repository
- Install a .deb file from command line:
sudo dpkg -i package.deb
-
-
-
- Python:
-
-
- update pip (Python package manager):
pip install -U pip
- search pip repos
pip
- create a virtual python environment
virtualenv [dirname] --no-site-packages
- connect to a virtual python environment
source [dirname]/bin/activate
- disconnect from a python environment:
deactivate
- install package into virtual python environment from outsie:
pip install [packagename]==[version_number] -E [dirname]
- export python virtual environment into a shareable format:
pip freeze -E [dirname] > requirements.txt
- import python virtual environment from a requirements.txt file:
pip install -E [dirname] -r requirements.txt
-
-
-
- git (all commands must be performed in the same directory as .git folder):
-
-
- Start a new git project:
git init
- Clone a git (target can be specified either locally or remotely, via any number of protocols):
git clone [target]
- Commit changes to a git:
git commit -m "[message]"
- Get info on current repository:
git status
- Show change log for current repository:
git log
- Update git directory from another repository:
git pull [target]
- Push branch to other repository:
git push [target]
- Create a new branch:
git branch [branchname]
- Switch to target branch:
git checkout [branchname]
- Delete a branch:
git branch -d [branchname]
- Merge two branches:
git merge [branchname] [branchname]
-
-
- Virtualization:
-
- clone a virtual machine (this works, it’s been tested):
vboxmanage clonehd [virtual machine name].vdi --format VDI ~/[target virtual machine name].vdi
- mount a shared virtual folder:
- you need to make sure you have the right kernel modules. You can do this with modprobe, but this package works instead in a ubuntu-specific way.
sudo apt-get install virtualbox-ose-guest-utils
sudo mount -t vboxsf [name of Shared folder specified in Virtualbox] [path of mountpoint]
-
-
- mysql:
-
- Get help:
help
- Show databases:
show databases;
- Choose a database to use:
use [database name here];
- Show database schema:
show tables;
- Delete database:
DROP DATABASE [databasename];
- New database:
CREATE DATABASE [databasename];
- Create a new user:
CREATE USER [username@localhost] IDENTIFIED BY '[password]' ;
- Show users:
select * from mysql.user;
- Delete a user:
delete from mysql.user WHERE User='[user_name]';
- Give user access to all tables (make them root). the “%” means that they can sign in remotely, from any machine, not just localhost.:
grant all privileges on *.* to someusr@"%" identified by '[password]';
- give certain privileges to a user on a certain database:
grant select,insert,update,delete,create,drop on [somedb].* to [someusr]@["%"] identified by '[password]';
- Tell mysql to use new user priv policies:
flush privileges;
- change user password:
use mysql;
update user set password='[password]'(‘[newpassword]’) where User='[user_name]’ ;
- mysql command line args:
- export text file with commands to rebuild all mysql tables:
mysqldump [databasename] > [dumpfilename.txt]
- restore from a dump:
mysql -u [username] -p < [dumpfilename.txt]
- dump entire database:
mysqldump -u [username] -p --opt [databasename] > [dumpfile.sql]
- restore from entire database dump:
mysql -u [username] -p --database=[databasename] < [dumpfile.sql]
Install RPMForge on CentOS 6
# wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm # rpm -Uvh rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm
Import RPMForge Repository Key in CentOS 6
# wget http://dag.wieers.com/rpm/packages/RPM-GPG-KEY.dag.txt # rpm --import RPM-GPG-KEY.dag.txt
Install Mtop in CentOS 6
Once you’ve installed and enabled RPMForge repository, let’s install MTOP using following YUM command.
# yum install mtop
To start Mtop program, you need to connect to your MySQL Server, using following command.
# mysql -u root -p
Then you need to create separate user called mysqltop and grant privileges to him under your MySQL server. To do, this just run the following commands in mysql shell.
mysql> grant super, reload, process on *.* to mysqltop; Query OK, 0 rows affected (0.00 sec) mysql> grant super, reload, process on *.* to mysqltop@localhost; Query OK, 0 rows affected (0.00 sec) mysql> flush privileges; Query OK, 0 rows affected (0.00 sec) mysql> quit; Bye
Let’s start the Mtop program.
# mtop
Sample Output:
load average: 0.03, 0.06, 0.08 mysqld 5.5.44-cll-lve up 4 day(s), 19:08 hrs 12 threads: 1 running, 0 cached. Queries/slow: 5/0 Cache Hit: 100.00% Opened tables: 0 RRN: 332 TLW: 1 SFJ: 0 SMP: 0 QPS: 0 ID USER HOST DB TIME COMMAND STATE INFO 39965 mysqltop localhost Query show full processlist
Monitor Remote MySQL Server using Mtop
# mtop –host=remotehost –dbuser=username –password=password –seconds=1
http://www.howtogeek.com/howto/40702/how-to-manage-and-use-lvm-logical-volume-management-in-ubuntu/
The fdisk shows a 256GB Drive. 50GB on root and the question is how to resize up to the 256GB drive for more space.
]# fdsik -l -bash: fdsik: command not found root@cpanel [~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup-lv_root 50G 27G 21G 56% / tmpfs 3.9G 0 3.9G 0% /dev/shm /dev/sda1 485M 96M 364M 21% /boot /dev/mapper/VolGroup-lv_home 1.1T 43G 996G 5% /home /dev/sdc1 917G 200M 871G 1% /backup root@cpanel [~]# fdisk -l Disk /dev/sdb: 1000.2 GB, 1000204886016 bytes 255 heads, 63 sectors/track, 121601 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x0004bb0e Device Boot Start End Blocks Id System /dev/sdb1 1 121602 976760832 8e Linux LVM Disk /dev/sda: 256.1 GB, 256060514304 bytes 255 heads, 63 sectors/track, 31130 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00062f67 Device Boot Start End Blocks Id System /dev/sda1 * 1 64 512000 83 Linux Partition 1 does not end on cylinder boundary. /dev/sda2 64 31131 249545728 8e Linux LVM Disk /dev/sdc: 1000.2 GB, 1000204886016 bytes 81 heads, 63 sectors/track, 382818 cylinders Units = cylinders of 5103 * 512 = 2612736 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0xa9b15e21 Device Boot Start End Blocks Id System /dev/sdc1 1 382818 976760095+ 83 Linux Disk /dev/mapper/VolGroup-lv_root: 53.7 GB, 53687091200 bytes 255 heads, 63 sectors/track, 6527 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00000000 Disk /dev/mapper/VolGroup-lv_swap: 8355 MB, 8355053568 bytes 255 heads, 63 sectors/track, 1015 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00000000 Disk /dev/mapper/VolGroup-lv_home: 1193.7 GB, 1193690529792 bytes 255 heads, 63 sectors/track, 145124 cylinders Units = cylinders of 16065 * 512 = 8225280 bytes Sector size (logical/physical): 512 bytes / 512 bytes I/O size (minimum/optimal): 512 bytes / 512 bytes Disk identifier: 0x00000000
# df -h Filesystem Size Used Avail Use% Mounted on /dev/mapper/VolGroup-lv_root 50G 27G 21G 56% / tmpfs 3.9G 0 3.9G 0% /dev/shm /dev/sda1 485M 96M 364M 21% /boot /dev/mapper/VolGroup-lv_home 1.1T 43G 996G 5% /home /dev/sdc1 917G 200M 871G 1% /backup
You can learn information about the volume group itself with ‘lvdisplay’, ‘vgscan’, ‘lvs’ and ‘vgdisplay’.
root@cpanel [~]# lvdisplay --maps --- Logical volume --- LV Path /dev/VolGroup/lv_root LV Name lv_root VG Name VolGroup LV UUID TYNmVB-vtiC-Gce6-FAsk-VXxi-CJDA-K4Pg8g LV Write Access read/write LV Creation host, time localhost.localdomain, 2014-08-29 13:01:37 -0400 LV Status available # open 1 LV Size 50.00 GiB Current LE 12800 Segments 1 Allocation inherit Read ahead sectors auto - currently set to 256 Block device 253:0 --- Segments --- Logical extents 0 to 12799: Type linear Physical volume /dev/sda2 Physical extents 0 to 12799 --- Logical volume --- LV Path /dev/VolGroup/lv_home LV Name lv_home VG Name VolGroup LV UUID PojYKo-WnwD-ywxH-6C0V-Ta7U-3sfE-x4szaI LV Write Access read/write LV Creation host, time localhost.localdomain, 2014-08-29 13:01:39 -0400 LV Status available # open 1 LV Size 1.09 TiB Current LE 284598 Segments 2 Allocation inherit Read ahead sectors auto - currently set to 256 Block device 253:3 --- Segments --- Logical extents 0 to 238465: Type linear Physical volume /dev/sdb1 Physical extents 0 to 238465 Logical extents 238466 to 284597: Type linear Physical volume /dev/sda2 Physical extents 12800 to 58931 --- Logical volume --- LV Path /dev/VolGroup/lv_swap LV Name lv_swap VG Name VolGroup LV UUID g2sdlK-rUv3-visr-NlMW-G3As-SOE2-07RDB1 LV Write Access read/write LV Creation host, time localhost.localdomain, 2014-08-29 13:04:05 -0400 LV Status available # open 1 LV Size 7.78 GiB Current LE 1992 Segments 1 Allocation inherit Read ahead sectors auto - currently set to 256 Block device 253:1 --- Segments --- Logical extents 0 to 1991: Type linear Physical volume /dev/sda2 Physical extents 58932 to 60923
LVS
lvs LV VG Attr LSize Pool Origin Data% Meta% Move Log Cpy%Sync Convert lv_home VolGroup -wi-ao---- 931.71g lv_root VolGroup -wi-ao---- 230.00g lv_swap VolGroup -wi-ao---- 7.78g
Both drives are in an LVM configuration. This allows you to create logical partitions that include either or both drives.
/dev/mapper/VolGroup-lv_root exists on the SDA drive (Physical volume /dev/sda2) and
/dev/mapper/VolGroup-lv_home exists on both the SDA and SDB drive. To remove the LVM configuration, re-installation would be necessary, but we can re-configure the LVM configuration so that /dev/mapper/VolGroup-lv_root is larger.
# mount -t nfs 10.0.0.43:/mnt/vol1 /mnt/nfs mount.nfs: rpc.statd is not running but is required for remote locking. mount.nfs: Either use '-o nolock' to keep locks local, or start statd. mount.nfs: an incorrect mount option was specified
Start the rpcbind service and/or the nfs services to mount the NFS share.
# service rpcbind start #service nfs start