166 commands · 10 cheat sheets · Linux
Processes, Services, and System master quick reference
Browse 166 commands from 10 focused cheat sheets on page 1 of 1. Each example opens its matching detailed section.
Processes, Services, and System · 16 commands
Core Dumps, strace, and Linux Debugging Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| List recent core dumps | coredumpctl list --since today --no-pager | View examples |
| Inspect one crash | coredumpctl info 4242 --no-pager | View examples |
| Filter by executable | coredumpctl list COREDUMP_EXE=/usr/local/bin/app \
--no-pager | View examples |
| Extract a core safely | umask 077; coredumpctl dump 4242 --output=app.core | View examples |
| Open latest matching dump | coredumpctl debug /usr/local/bin/app | View examples |
| Produce a batch backtrace | gdb --nx --batch --quiet -ex 'thread apply all bt full' \
/usr/local/bin/app app.core | View examples |
| Inspect core resource limit | ulimit -c | View examples |
| Inspect kernel core handler | sysctl kernel.core_pattern | View examples |
| Trace a new command | strace -f -tt -T -s 256 -o trace.log -- \
/usr/local/bin/app --check | View examples |
| Trace file and network calls | strace -f -e trace=%file,%network -o trace.log -- \
/usr/local/bin/app --check | View examples |
| Attach to a process | sudo strace -f -p 4242 -e trace=%file -o trace.log | View examples |
| Summarize system calls | strace -f -c -- /usr/local/bin/app --check | View examples |
| Read a kernel stack | sudo cat /proc/4242/stack | View examples |
| Inspect process status | cat /proc/4242/status | View examples |
| Record mapped objects | cat /proc/4242/maps | View examples |
| Read an ELF build ID | readelf -n /usr/local/bin/app | sed -n '/Build ID/p' | View examples |
Processes, Services, and System · 16 commands
Linux Boot and initramfs Diagnostics Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| Show effective kernel arguments | cat /proc/cmdline | View examples |
| Inspect boot loader status | bootctl status | View examples |
| Identify the running kernel | uname -r | View examples |
| List recorded boots | journalctl --list-boots | View examples |
| Read previous boot errors | journalctl --boot=-1 --priority=warning --no-pager | View examples |
| Read current kernel boot log | journalctl --dmesg --boot --no-pager | View examples |
| Summarize boot time | systemd-analyze time | View examples |
| Show critical chain | systemd-analyze critical-chain | View examples |
| Rank unit activation time | systemd-analyze blame | View examples |
| Inspect initrd dependencies | systemctl list-dependencies initrd.target | View examples |
| List a dracut image | lsinitrd /boot/initramfs-$(uname -r).img | View examples |
| List an initramfs-tools image | lsinitramfs /boot/initrd.img-$(uname -r) | View examples |
| Print detected dracut arguments | dracut --print-cmdline | View examples |
| Inspect a newly built image | lsinitrd /tmp/initramfs-test.img | View examples |
| Boot to emergency target | systemd.unit=emergency.target | View examples |
| Pause in dracut initramfs | rd.break=pre-mount | View examples |
Processes, Services, and System · 14 commands
Linux Kernel Modules and sysctl Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| Show running kernel | uname -r | View examples |
| List loaded modules | lsmod | View examples |
| Inspect module metadata | modinfo e1000e | View examples |
| Simulate module load | sudo modprobe --dry-run --verbose e1000e | View examples |
| Load a module | sudo modprobe e1000e | View examples |
| Remove a module safely | sudo modprobe --remove e1000e | View examples |
| Inspect effective modprobe config | modprobe --show-config | View examples |
| List boot-load entries | systemd-analyze cat-config modules-load.d | View examples |
| Read one sysctl | sysctl vm.swappiness | View examples |
| Change a runtime sysctl | sudo sysctl -w vm.swappiness=10 | View examples |
| Check a staged sysctl file | systemd-analyze cat-config sysctl.d | View examples |
| Apply system sysctl files | sudo sysctl --system | View examples |
| Inspect kernel messages | journalctl --dmesg --boot --no-pager | View examples |
| Read live module parameters | find /sys/module/e1000e/parameters -maxdepth 1 -type f \
-print | View examples |
Processes, Services, and System · 16 commands
Linux Package Management Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| Search APT packages | apt search --names-only nginx | View examples |
| Inspect APT metadata | apt show nginx | View examples |
| Search DNF packages | dnf search nginx | View examples |
| Inspect DNF metadata | dnf info nginx | View examples |
| Refresh APT indexes | sudo apt update | View examples |
| Upgrade APT packages | sudo apt upgrade | View examples |
| Install with APT | sudo apt install nginx | View examples |
| Check DNF updates | dnf check-upgrade | View examples |
| Upgrade with DNF | sudo dnf upgrade | View examples |
| Install with DNF | sudo dnf install nginx | View examples |
| Search Flatpak apps | flatpak search org.gnome.TextEditor | View examples |
| Install a Flatpak app | flatpak install flathub org.gnome.TextEditor | View examples |
| List package files | dpkg -L nginx | View examples |
| Verify RPM files | rpm -V nginx | View examples |
| Remove an APT package | sudo apt remove nginx | View examples |
| Inspect DNF transactions | dnf history list | View examples |
Processes, Services, and System · 19 commands
Linux Processes Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| List all processes | ps -ef | View examples |
| List your processes | ps -u "$USER" -o pid,ppid,stat,%cpu,%mem,comm | View examples |
| Inspect one PID | ps -p 4242 -o pid,ppid,user,stat,lstart,cmd | View examples |
| Show a process tree | ps -ef --forest | View examples |
| Monitor processes live | top | View examples |
| Find an exact name | pgrep -a -x nginx | View examples |
| Search full commands | pgrep -a -u "$USER" -f "python3 -m http.server" | View examples |
| Start a background job | python3 -m http.server 8000 >server.log 2>&1 & | View examples |
| Capture the latest PID | server_pid=$! | View examples |
| List shell jobs | jobs -l | View examples |
| Resume in foreground | fg %1 | View examples |
| Resume in background | bg %1 | View examples |
| Wait for a child process | wait "$server_pid" | View examples |
| Keep a command running | nohup python3 -m http.server 8000 >server.log 2>&1 & | View examples |
| Request termination | kill -TERM 4242 | View examples |
| Force termination | kill -KILL 4242 | View examples |
| Signal an exact name | pkill -TERM -x nginx | View examples |
| Start with lower priority | nice -n 10 gzip archive.tar | View examples |
| Change process priority | renice -n 5 -p 4242 | View examples |
Processes, Services, and System · 16 commands
Linux Time Synchronization and chrony Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| Show synchronization state | chronyc tracking | View examples |
| List source selection | chronyc -n sources -v | View examples |
| Show source statistics | chronyc -n sourcestats -v | View examples |
| Count source activity | chronyc activity | View examples |
| Wait for bounded accuracy | chronyc waitsync 60 0.01 0.1 10 | View examples |
| Explain source state | chronyc selectdata -a | View examples |
| Refresh source addresses | sudo chronyc refresh | View examples |
| Mark sources online | sudo chronyc online | View examples |
| Collect measurements quickly | sudo chronyc burst 4/4 | View examples |
| Step remaining correction | sudo chronyc makestep | View examples |
| Print parsed configuration | sudo chronyd -p -f /etc/chrony.conf | View examples |
| Configure an NTP pool | pool time.example.net iburst maxsources 4 | View examples |
| Limit startup stepping | makestep 1.0 3 | View examples |
| Enable RTC synchronization | rtcsync | View examples |
| Read leap seconds from tzdata | leapsectz right/UTC | View examples |
| Persist NTS state | ntsdumpdir /var/lib/chrony | View examples |
Processes, Services, and System · 17 commands
logrotate and Linux Log Retention Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| Debug a configuration | sudo logrotate --debug /etc/logrotate.conf | View examples |
| Run verbosely | sudo logrotate --verbose /etc/logrotate.conf | View examples |
| Test with isolated state | sudo logrotate --state /run/app-logrotate.state \
--verbose /etc/logrotate.d/app | View examples |
| Force a rotation | sudo logrotate --force /etc/logrotate.d/app | View examples |
| Rotate by size | size 100M | View examples |
| Cap between intervals | maxsize 500M | View examples |
| Keep archive generations | rotate 14 | View examples |
| Expire old archives | maxage 90 | View examples |
| Use sortable date suffixes | dateext | View examples |
| Compress archives | compress | View examples |
| Delay compression | delaycompress | View examples |
| Create replacement securely | create 0640 app adm | View examples |
| Run scripts once | sharedscripts | View examples |
| Signal the writer | postrotate | View examples |
| Copy then truncate in place | copytruncate | View examples |
| Drop rotation identity | su app adm | View examples |
| Inspect rotation scheduling | systemctl status logrotate.timer logrotate.service \
--no-pager | View examples |
Processes, Services, and System · 23 commands
systemd Services and Journal Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| List loaded services | systemctl list-units --type=service | View examples |
| List installed unit files | systemctl list-unit-files --type=service | View examples |
| Inspect service status | systemctl status nginx.service | View examples |
| Test active state | systemctl is-active --quiet nginx.service | View examples |
| Read unit properties | systemctl show nginx.service \
--property=ActiveState,SubState,MainPID | View examples |
| Show unit source | systemctl cat nginx.service | View examples |
| Show dependencies | systemctl list-dependencies nginx.service | View examples |
| Start a service | sudo systemctl start nginx.service | View examples |
| Stop a service | sudo systemctl stop nginx.service | View examples |
| Restart a service | sudo systemctl restart nginx.service | View examples |
| Reload service configuration | sudo systemctl reload nginx.service | View examples |
| Enable and start | sudo systemctl enable --now nginx.service | View examples |
| Disable and stop | sudo systemctl disable --now nginx.service | View examples |
| Reload unit definitions | sudo systemctl daemon-reload | View examples |
| Create a drop-in override | sudo systemctl edit nginx.service | View examples |
| Read one unit's journal | journalctl --unit=nginx.service --no-pager | View examples |
| Limit to current boot | journalctl --boot=0 | View examples |
| Read previous boot | journalctl --boot=-1 | View examples |
| Filter by time | journalctl --since='1 hour ago' --until=now | View examples |
| Filter error priorities | journalctl --priority=err --boot=0 | View examples |
| Follow a unit live | journalctl --follow --unit=nginx.service | View examples |
| Emit JSON records | journalctl --unit=nginx.service --output=json --lines=20 | View examples |
| Read kernel messages | journalctl --dmesg --boot=0 | View examples |
Processes, Services, and System · 15 commands
systemd Timers and Scheduled Jobs Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| List timers | systemctl list-timers --all | View examples |
| Inspect one timer | systemctl status backup.timer | View examples |
| Read timer properties | systemctl show backup.timer -p NextElapseUSecRealtime -p \
LastTriggerUSec -p Triggers | View examples |
| Validate a calendar | systemd-analyze calendar 'Mon..Fri 02:00' | View examples |
| Calendar schedule | OnCalendar=Mon..Fri *-*-* 02:00:00 | View examples |
| Catch a missed run | Persistent=true | View examples |
| Delay after boot | OnBootSec=15min | View examples |
| Delay after activation | OnUnitActiveSec=6h | View examples |
| Set timing accuracy | AccuracySec=1min | View examples |
| Spread starts | RandomizedDelaySec=30min | View examples |
| Keep host delay stable | FixedRandomDelay=true | View examples |
| Select activated unit | Unit=backup.service | View examples |
| Enable and start timer | sudo systemctl enable --now backup.timer | View examples |
| Test work directly | sudo systemctl start backup.service | View examples |
| Read job logs | journalctl --unit=backup.service --since=today | View examples |
Processes, Services, and System · 14 commands
udev Rules and Linux Device Events Cheat Sheet
| Use | Syntax | Examples |
|---|---|---|
| Inspect a device | udevadm info --query=all --name=/dev/sdb | View examples |
| Walk parent attributes | udevadm info --attribute-walk --name=/dev/sdb | View examples |
| Resolve sysfs path | udevadm info --query=path --name=/dev/sdb | View examples |
| Monitor kernel and udev events | udevadm monitor --kernel --udev --property | View examples |
| Filter event monitoring | udevadm monitor --udev --property \
--subsystem-match=block | View examples |
| Verify rule syntax | udevadm verify /etc/udev/rules.d/70-backup-disk.rules | View examples |
| Test rule evaluation | udevadm test --action=add /sys/class/block/sdb | View examples |
| Test a builtin | udevadm test-builtin blkid /sys/class/block/sdb | View examples |
| Reload rules | sudo udevadm control --reload | View examples |
| Preview a trigger scope | udevadm trigger --dry-run --verbose \
--subsystem-match=block | View examples |
| Retrigger one device | sudo udevadm trigger --action=change \
/sys/class/block/sdb | View examples |
| Check the event queue | udevadm settle --timeout=10 | View examples |
| Read udev daemon logs | journalctl --unit=systemd-udevd --boot --no-pager | View examples |
| Export the udev database | udevadm info --export-db | View examples |



