115 commands · 6 cheat sheets · Linux

Containers, Virtualization, and Performance master quick reference

Browse 115 commands from 6 focused cheat sheets on page 1 of 1. Each example opens its matching detailed section.

Containers, Virtualization, and Performance · 16 commands

cgroup v2 Resource Control Cheat Sheet

Open full cheat sheet
UseSyntaxExamples
Confirm cgroup v2stat -fc %T /sys/fs/cgroupView examples
Show current cgroupcat /proc/self/cgroupView examples
List available controllerscat /sys/fs/cgroup/cgroup.controllersView examples
Find unit cgroupsystemctl show api.service -p ControlGroupView examples
Run a limited scopesystemd-run --user --scope -p MemoryHigh=768M -p \ MemoryMax=1G -p CPUQuota=150% make -j4View examples
Apply memory throttleMemoryHigh=768MView examples
Apply hard memory limitMemoryMax=1GView examples
Read memory eventscat \ /sys/fs/cgroup/system.slice/api.service/memory.eventsView examples
Set relative CPU weightCPUWeight=200View examples
Cap CPU bandwidthCPUQuota=150%View examples
Set relative I/O weightIOWeight=200View examples
Limit tasksTasksMax=512View examples
List member processescat /sys/fs/cgroup/system.slice/api.service/cgroup.procsView examples
Enable child controllersprintf '%s\n' '+cpu +memory +pids' | sudo tee \ /sys/fs/cgroup/ops.slice/cgroup.subtree_controlView examples
Watch cgroup usagesystemd-cgtop --depth=3View examples
Read CPU pressurecat /sys/fs/cgroup/system.slice/api.service/cpu.pressureView examples

Containers, Virtualization, and Performance · 20 commands

Containers with Podman Cheat Sheet

Open full cheat sheet
UseSyntaxExamples
Inspect engine and hostpodman info --format jsonView examples
Check subordinate ID rangesgetent subuid "$USER"; getent subgid "$USER"View examples
Pull an immutable imagepodman pull docker.io/library/nginx@sha256:DIGESTView examples
Run with a read-only rootpodman run --read-only --cap-drop=all \ --security-opt=no-new-privileges --tmpfs \ /tmp:rw,noexec,nosuid,nodev IMAGEView examples
Publish only on loopbackpodman run -p 127.0.0.1:8080:8080 IMAGEView examples
Bound memory and CPUspodman run --memory=512m --cpus=1.5 --pids-limit=256 \ IMAGEView examples
Create an application networkpodman network create app-netView examples
Create a named volumepodman volume create app-dataView examples
Relabel a private bind mountpodman run -v /srv/app/config:/app/config:ro,Z IMAGEView examples
Create a secret from standard inputprintf '%s' "$DB_PASSWORD" | podman secret create db_password -View examples
Mount a runtime secretpodman run --secret db_password,type=mount IMAGEView examples
Provide a build secretpodman build --secret id=npmrc,src="$HOME/.npmrc" -t \ localhost/app:build .View examples
Regenerate rootless unitssystemctl --user daemon-reloadView examples
Verify generated servicesystemd-analyze --user --generators=true verify \ app.serviceView examples
Inspect health statepodman inspect --format '{{.State.Health.Status}}' appView examples
Stream lifecycle eventspodman events --filter container=appView examples
Preview automatic updatespodman auto-update --dry-runView examples
Export a named volumepodman volume export app-data --output app-data.tarView examples
Archive an OCI imagepodman save --format oci-archive --output app-image.tar \ IMAGEView examples
Run Podman diagnosticspodman system check --quickView examples

Containers, Virtualization, and Performance · 15 commands

Linux Namespaces, unshare, and nsenter Cheat Sheet

Open full cheat sheet
UseSyntaxExamples
List namespace objectslsnsView examples
Inspect one processlsns --task 4242View examples
Read namespace linksreadlink \ /proc/4242/ns/{user,mnt,pid,net,uts,ipc,cgroup,time}View examples
Compare namespace identitystat -Lc '%i' /proc/self/ns/net /proc/4242/ns/netView examples
Map current user to rootunshare --user --map-root-user --mount /bin/shView examples
Preserve numeric identityunshare --user --map-current-user idView examples
Create private mount viewunshare --user --map-root-user --mount --propagation \ private /bin/shView examples
Create PID namespaceunshare --user --map-root-user --pid --fork --mount-proc \ --kill-child /bin/shView examples
Isolate hostnameunshare --user --map-root-user --uts sh -c \ 'hostname lab && hostname'View examples
Create network namespacesudo unshare --net --fork ip link showView examples
Enter mount namespacesudo nsenter --target 4242 --mount -- findmntView examples
Enter network namespacesudo nsenter --target 4242 --net -- ip address showView examples
Enter target environmentsudo nsenter --target 4242 --all --root --wd -- /bin/shView examples
Persist UTS namespacesudo unshare --uts=/run/namespaces/app-uts hostname \ app-sandboxView examples
Release namespace handlesudo umount /run/namespaces/app-utsView examples

Containers, Virtualization, and Performance · 17 commands

Linux Performance Observability Cheat Sheet

Open full cheat sheet
UseSyntaxExamples
Show load and uptimeuptimeView examples
Sample system activityvmstat 1 5View examples
Count available CPUsnprocView examples
Sample every CPUmpstat -P ALL 1 5View examples
Sample process CPUpidstat -u -p ALL 1 5View examples
Summarize memoryfree --humanView examples
Sample process memorypidstat -r -p ALL 1 5View examples
Read memory pressurecat /proc/pressure/memoryView examples
Sample extended device I/Oiostat -xz 1 5View examples
Sample process I/Opidstat -d -p ALL 1 5View examples
Read I/O pressurecat /proc/pressure/ioView examples
Read historical CPU datasar -u -f /var/log/sa/sa12View examples
Sample queue and loadsar -q ALL 1 5View examples
Measure a bounded commandperf stat -- openssl speed -seconds 5 sha256View examples
List available eventsperf listView examples
Sample one processsudo perf record --call-graph dwarf --pid 4242 -- sleep \ 30View examples
Read a profileperf report --stdio --input=perf.dataView examples

Containers, Virtualization, and Performance · 23 commands

perf, ftrace, and eBPF Observability Cheat Sheet

Open full cheat sheet
UseSyntaxExamples
Measure one commandperf stat -- sleep 10View examples
Measure one processsudo perf stat --pid 1234 -- sleep 10View examples
List available perf eventsperf listView examples
List dynamic probessudo perf probe --listView examples
Record process call graphssudo perf record --call-graph dwarf --pid 1234 -- sleep \ 30View examples
Open a perf reportperf report --stdio --input perf.dataView examples
Profile one process livesudo perf top --pid 1234View examples
Trace one process syscallssudo timeout 10 perf trace --pid 1234View examples
Locate tracefsfindmnt -t tracefs -o TARGET,SOURCE,OPTIONSView examples
List ftrace tracerssudo cat /sys/kernel/tracing/available_tracersView examples
List tracepointssudo cat /sys/kernel/tracing/available_eventsView examples
Stream ftrace outputsudo cat /sys/kernel/tracing/trace_pipeView examples
Clear the trace buffersudo sh -c ': > /sys/kernel/tracing/trace'View examples
Disable global tracingsudo sh -c 'echo 0 > /sys/kernel/tracing/tracing_on'View examples
Probe BPF supportsudo bpftool feature probe kernelView examples
List loaded BPF programssudo bpftool prog showView examples
List BPF mapssudo bpftool map showView examples
List matching probessudo bpftrace --list 'tracepoint:sched:sched_process_*'View examples
Count process executionssudo timeout 30 bpftrace -e \ 'tracepoint:sched:sched_process_exec { @[comm] = count(); }'View examples
Show bpftrace environmentbpftrace --infoView examples
Check kernel lockdowncat /sys/kernel/security/lockdownView examples
Read perf restrictionssysctl kernel.perf_event_paranoid kernel.kptr_restrictView examples
Inspect profile artifactstat --format='%a %U:%G %s %n' perf.dataView examples

Containers, Virtualization, and Performance · 24 commands

QEMU, KVM, and libvirt Cheat Sheet

Open full cheat sheet
UseSyntaxExamples
Inspect CPU virtualization flagslscpu | grep -E 'Virtualization|Hypervisor vendor'View examples
Validate the KVM hostsudo virt-host-validate qemuView examples
Show the active libvirt URIvirsh --connect qemu:///system uriView examples
Inspect domain capabilitiesvirsh --connect qemu:///system domcapabilitiesView examples
List every domainvirsh --connect qemu:///system list --allView examples
Inspect domain statevirsh --connect qemu:///system dominfo prod-vmView examples
Export inactive domain XMLvirsh --connect qemu:///system dumpxml --inactive \ prod-vmView examples
Request a graceful shutdownvirsh --connect qemu:///system shutdown prod-vmView examples
Create a qcow2 diskqemu-img create -f qcow2 ./prod-vm.qcow2 80GView examples
Inspect image metadataqemu-img info --backing-chain \ /var/lib/libvirt/images/prod-vm.qcow2View examples
List storage-pool volumesvirsh --connect qemu:///system vol-list default \ --detailsView examples
Map guest disks to sourcesvirsh --connect qemu:///system domblklist prod-vm \ --detailsView examples
Query guest filesystemsvirsh --connect qemu:///system domfsinfo prod-vmView examples
Inspect vCPU placementvirsh --connect qemu:///system vcpuinfo prod-vmView examples
List domain interfacesvirsh --connect qemu:///system domiflist prod-vmView examples
List DHCP leasesvirsh --connect qemu:///system net-dhcp-leases defaultView examples
Inspect network configurationvirsh --connect qemu:///system net-dumpxml defaultView examples
List snapshot ancestryvirsh --connect qemu:///system snapshot-list prod-vm \ --treeView examples
Start a defined live backupvirsh --connect qemu:///system backup-begin prod-vm \ --backupxml /etc/libvirt/backup/prod-vm.xmlView examples
Inspect a block jobvirsh --connect qemu:///system blockjob prod-vm vda \ --info --bytesView examples
Check an offline imageqemu-img check /srv/backups/prod-vm/prod-vm.qcow2View examples
Check destination CPU compatibilityvirsh --connect qemu+ssh://hv2/system \ hypervisor-cpu-compare prod-vm.migratable.xml --error \ --validateView examples
Inspect domain security labelsvirsh --connect qemu:///system dominfo prod-vm | grep -E '^Security'View examples
Read the QEMU domain logsudo journalctl -u 'virtqemud*' --since -30minView examples
Back to Containers, Virtualization, and Performance cheat sheets
CMDMEMO TERMINALREAD ONLY