Connexion
If you’re using RHEL, CentOS, Rocky, Fedora, or Alma Linux, you may encounter situations where you must list files in a package before installing it. Similarly, there might be instances where you need to locate a specific configuration file after installing the package. In this guide, I’ll provide a quick tip for developers and sysadmins […]
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to list package files with dnf in Linux (RHEL, CentOS, Rocky, Fedora, and Alma Linux) appeared first on nixCraft.
Am I using X11 (Xorg) or Wayland? Here is how to check for Wayland or Xorg (X11) Linux desktops using the CLI and GUI options.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to check for Wayland or Xorg (X11) Linux desktop appeared first on nixCraft.
Sometimes we must kill a process or user account by tty name in Linux. It would be best if you used w command or who command to print users accessing tty and then run the pkill command against processes whose controlling terminal is listed by the -t option.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to kill process or user by tty name in Linux appeared first on nixCraft.
The latest version of OpenSUSE Linux, version 15.5 "Leap," has been released. This version offers unparalleled stability due to its use of the SUSE Linux Enterprise (SLE) source and community developments. Hence, this makes it the best choice for a stable Linux experience for users, developers, and system administrators. This page explains how to upgrade from OpenSUSE 15.4 to 15.5 using the CLI.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade OpenSUSE 15.4 to 15.5 using the CLI appeared first on nixCraft.
The FreeBSD Release Engineering Team is announcing the availability of FreeBSD version 13.2-RELEASE on 11/April/2023. It is the third release of the stable/13 branches. I updated my FreeBSD version 13.1 to 13.2 using the CLI over an ssh-based session. Here are my quick notes.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade FreeBSD 13.1 to 13.2 release appeared first on nixCraft.
Do you want to refresh and reload the group membership on Linux without rebooting the Linux machine or logging in again? Try the newgrp command to log in to a new group without logging in again or reboot the system.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to refresh and reload group membership on Linux without a reboot or logging in again appeared first on nixCraft.
Right now, the most advanced OpenSUSE version is 15.4. It is an opportunity for desktop and server users running the previous 15.3 release to update to the latest software stack. The procedure for upgrading OpenSUSE 15.3 to 15.4 is simple to follow. This tutorial will walk you through the process of upgrading OpenSUSE 15.3 to 15.4.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade OpenSUSE 15.3 to 15.4 using the CLI appeared first on nixCraft.
Do you want to set or update the AWS EC2 or Lightsail hostname without a reboot when using Amazon Linux 2? Here is how to set or change the hostname on Amazon Linux 2 distribution using the ssh client.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to change hostname on Amazon Linux 2 without reboot appeared first on nixCraft.
I am a new Ubuntu Linux 22.04 LTS server user. How do I set up an OpenVPN Server on Ubuntu Linux version 22.04 server to shield my browsing activity from bad guys on public Wi-Fi, set protective parameter vpn for developers and more?
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Ubuntu 22.04 LTS Set Up OpenVPN Server In 5 Minutes appeared first on nixCraft.
Like every other solo developer and sysadmin, I do stuff using ssh. Some stuff is automated using scripts, and others require ssh login. For example, one of my scripts logs into my Linux and FreeBSD server using public ssh keys and does a particular type of work for me. I have a dedicated user account for that purpose called autovivek on Raspberry PI 4 for Ansible and custom script automation. Here is how it works:
{rpi4:~}$ ssh autovivek@192.168.2.17 /path/to/taks1
In other cases, it sends scripts and then executes them on the remote server named 192.168.2.17. Sounds good, right? So, when I need to make backups and other tasks, I lock down the autovivek user account on the server so that it will not modify data on disks. For example, here is how to lock down a user account:
{linux-server:~}$ sudo usermod -L -e 1 autovivek
## OR ##
{freebsd-server:~}$ sudo pw lock -n autovivek
However, I soon discovered that a user named autovivek can still log into the server and make changes despite being locked down on both Linux and FreeBSD servers.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post A cautionary tale about locking Linux & FreeBSD user accounts appeared first on nixCraft.
Linux comes with three commands for developers, sysadmins and users to set up a hierarchy of applications, typically displayed as a menu. In other words, these commands allow third-party software to add menu items that work for all desktops. In addition, it allows Linux system administrators to edit menus in a way that affects all desktops using the following commands to install and edit desktop files on Linux to make Desktop entries:
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to install and edit desktop files on Linux (Desktop entries) appeared first on nixCraft.
I am a new Debian Linux 11 server user. How do I set up an OpenVPN Server on Debian Linux version 11 server to shield my browsing activity from bad guys on public Wi-Fi, and more?
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Debian 11 Set Up OpenVPN Server In 5 Minutes appeared first on nixCraft.
I already wrote about setting up wildcard Let’s Encrypt SSL/TLS with AWS Route53 DNS for Nginx or Apache. One of my clients decided to use Cloudflare CDN and DNS at some point. They changed their DNS to Cloudflare. Naturally, their wildcard certificate failed because it was using Route53 DNS authentication to issue the certificate. Let us see how to convert existing or expired TLS/SSL certification renewal from AWS Route53 to Cloudflare.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How To Convert AWS Route53 to Cloudflare Let’s Encrypt DNS challenge with acme.sh appeared first on nixCraft.
I already wrote about migrating from CentOS 8 to CentOS Stream. I also have a guide about migrating from CentOS 8 to Rocky Linux. Today, I am working on another side project with my partner, and I wanted to try out AlmaLinux. Hence, this quick post will list steps to convert existing VM or bare metal server from CentOS 8 to AlmaLinux 8. The server currently acts as API for mobile apps, including PostgreSQL, Redis, Python+Django, Apache web server, and SELinux and firewalld.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to migrate from CentOS 8 to AlmaLinux (conversion) appeared first on nixCraft.
While working with the client's system, I noticed that the database would come under load due to increased demand. After reviewing the code, the developer and I conclude that something like memcached will improve performance by caching queries. This page explains how to install a memcached server on OpenSUSE or SUSE enterprise Linux server using the ssh command.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to install memcached on OpenSUSE / SUSE Linux appeared first on nixCraft.
I already wrote about migrating from CentOS 8 to CentOS Stream. Now, I am migrating Linode VM from CentOS 8 to Rocky Linux 8. The server runs a very simple workload that includes PHP 8.1, MariaDB server and Nginx, and SELinux and firewalld.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to migrate from CentOS 8 to Rocky Linux (conversion) appeared first on nixCraft.
As you know, CentOS 8 is ending soon. Red Hat is making the shift from CentOS 8 to CentOS Stream. CentOS stream places itself between Fedora Linux and RHEL. It is not 100% RHEL clone but ahead of RHEL development. Think of it as a midstream distro. Of course, if you need 100% RHEL compatibility, then you need Rocky Linux or AlmaLinux. However, the CentOS stream is more than sufficient for me as I only need Apache, Perl, and Python for my use case. This page explains how to migrate the existing installation of CentOS 8 stable to CentOS Stream without reinstalling a new operating system.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to migrate from CentOS 8 to CentOS stream conversion appeared first on nixCraft.
The most advanced OpenSUSE version is 15.3 and is an opportunity for both desktop and server users on the previous 15.2 release to update OpenSUSE Linux to get the newest software stack. It is easy to follow the procedure to upgrade OpenSUSE 15.2 to 15.3. In this tutorial, we will explain how to upgrade OpenSUSE 15.2 to 15.3.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to upgrade OpenSUSE 15.2 to 15.3 using the CLI appeared first on nixCraft.
So you want to see a list of all packages installed on your SUSE Linux or OpenSUSE Linux system? Try these simple tips for listing all packages.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to list all installed packages on OpenSUSE/SUSE Linux appeared first on nixCraft.
{nixCraft Patreon supporters content}
All Linux and Unix servers are managed manually or by automation tools such as Ansible using ssh. For example, say you have a server at Linode or AWS. Then you copy your public ssh key to a remote cloud server. Once copied, you can now login to those servers without a password as long as ssh keys are matched. It is the best practice. Unfortunately, you are not protecting ssh keys stored on a local desktop or dev machine at $HOME/.ssh/ directory. If your keys are stolen, an attacker can get access to all of your cloud servers, including backup servers. To avoid this mess, we can protect our ssh keys stored on local dev/desktop machines using physical security keys such as YubiKey.
The post How To Set Up SSH Keys With YubiKey as two-factor authentication (U2F/FIDO2) appeared first on Opensource Flare✨.
Michael Lucas is a famous IT book author. Perhaps best know for FreeBSD, OpenBSD, and Unix book series. He worked as a system administrator for many years and has now become a full-time book writer. Lately, I did a quick Q and A with Michael about his journey as a professional book author and his daily workflow for writing books.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post Interview with Michael Lucas *BSD, Unix, IT and other books author appeared first on nixCraft.
The FreeBSD project released FreeBSD version 13. The new version comes with updated software and features for a wild variety of architectures. The latest release provides performance improvements and better support for FreeBSD. One can benefit greatly using an upgraded version of FreeBSD. Let us see what's new and quickly update FreeBSD 12 to 13 using the CLI.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post FreeBSD 13 released: Here is how to upgrade FreeBSD 12 to 13 appeared first on nixCraft.
Typically we use the lscpu command or /proc/cpuinfo command on Linux to check CPU information. I recently found another simplistic yet fancier CPU architecture fetching tool inspired by neofetch, pfetch or screenfetch. Let us see how to install cpufetch on Linux, macOS, Android, and Windows to fetch CPU details.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post cpufetch – awesome CPU architecture info tool for Linux and macOS appeared first on nixCraft.
The du (disk usage) command summarizes directory trees' sizes, including all of their contents and individual files' sizes on Linux and Unix-like systems such as macOS. It helps track down space hogs. In other words, we can list directories and files that consume large amounts of space on a hard disk drive. Let us see the ncdu command, a curses-based version of the well-known du command.
Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit
The post How to install ncdu on Linux / Unix to see disk usage appeared first on nixCraft.
Amazon Simple Email Service (SES) is a hosted cloud-based email service to send and receive email using your email addresses and domains. Typically SES is used for sending bulk email or routing emails without hosting MTA. One can use the CLI or server-side programming languages such as PHP or Python to transfer an email via SES. This quick tutorial will show you how to route all outgoing emails with Postfix and Amazon AWS SES on Red Hat Enterprise Linux (RHEL) or CentOS version 8.
The post How to send emails with Postfix and Amazon AWS SES on RHEL/CentOS 8 appeared first on nixCraft.
I talked about yum-cron that provides auto yum updates nightly via cron. However, this package is no longer available on CentOS/RHEL 8 or Fedora Linux 29 or above. So how do you enable and install updates atomically on a CentOS/RHEL version 8.x? They have a new package called dnf-automatic. This page explains how to install and then enable dnf-automatic to install updates for you in the background.
The post How to enable automatic updates for RHEL/CentOS 8 appeared first on nixCraft.
We can easily add a key file to LUKS disk encryption on Linux when running the cryptsetup command. A key file is used as the passphrase to unlock an encrypted volume. The passphrase allows Linux users to open encrypted disks utilizing a keyboard or over an ssh-based session. There are different types of key files we can add and enable LUKS disk encryption on Linux as per our needs:
Let us see how to enable LUKS disk encryption with a key file.
The post How to enable LUKS disk encryption with keyfile on Linux appeared first on nixCraft.
Bonsai (盆栽) is nothing but planting in a try. It is old age Japanese art of growing small trees in pots. Now you can do that with your Linux or Unix terminal easily for fun and profit. Let us look into the Bonsai tree generator called cbonsai created in Clang and Bash.
The post Linux Desktop Fun: Bonsai tree generator for CLI lovers appeared first on nixCraft.
Any logged-in unprivileged user can abuse an old bug in sudo to gain root privileges. It was rated as an important security issue for Linux and Unix-like operating systems. The Qualys research team has discovered the heap overflow vulnerability in sudo itself has been hiding in plain sight for nearly 10 years. The bug allows any local users to gain root access without authentication (no user's password needed). We need to apply patches to our operating systems as soon as possible.
The post Critical bug in sudo puts Linux and Unix systems at risk appeared first on nixCraft.
As you know, Red Hat recently announced that CentOS Linux 8, as a rebuild of RHEL 8, will end in 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux. The news met with a strong reaction from the open-source community and CentOS users. Today, Red Hat released a new option where RHEL developer subscriptions can now be used in production environments. The developers and team can have up to 16 systems. In other words, it is a no-cost RHEL that small groups and developers can use to build packages and in production environments.
The post Red Hat introduces new no-cost RHEL option appeared first on nixCraft.
How do I install or add Brotli compression support to Nginx on OpenSUSE Linux to speed up my webpages and apps?
The post OpenSUSE install Brotli module for Nginx appeared first on nixCraft.
On Linux, we encrypt our partitions and entire disk using Linux Unified Key Setup-on-disk-format (LUKS) for security and privacy reasons. We unlock LUKS protected disk by providing a passphrase at boot time. You need to be in front of your computer or use a remote console to open the encrypted disk under Linux at boot time. However, if your system is in the basement, remote datacenter/office, or upstairs office, you won't able to unlock and boot your Linux box. We can use the Dropbear SSH server for LUKS encrypted Debian or Ubuntu or any other Linux distro via SSH to solve this problem. Let us see how to unlock LUKS using Dropbear SSH keys in Linux at boot time.
The post How to unlock LUKS using Dropbear SSH keys remotely in Linux appeared first on nixCraft.
The last ten years in the computer and IT security world are crippled with so many vulnerabilities. We saw massive cloud computing adoption and end-users using mobile devices with high speed 4G LTE networks. A threat actor may have exploited such weakness in modern computers and networks. Let us look into top vulnerabilities and the attack surface in this decade (2010-2020) that affected Linux/Unix, macOS, IT, cloud-computing, and computers in general.
The post Significant vulnerabilities that crippled IT world this decade (2010-2020) appeared first on nixCraft.
A text editor is an essential tool for both developers and sysadmin, especially when dealing with text based sessions. We use a text editor to create, edit, and update text. A text editor is used for many things. Some use them to write documents. Some people write code and others use it to edit Linux and Unix configuration files locally or remote servers running in the cloud. Let us see the top 6 text editors for Linux, macOS, and Unix command-line users/developers.
The post Top 6 awesome text editors for Linux and Unix command-line users/developers appeared first on nixCraft.
We use encryption to protect mobile devices. For instance, I always use LUKS disk encryption to protect all files stored on my SSD. Dm-crypt (Cryptsetup and LUKS) open-source disk encryption is transparent disk encryption and a great way to keep your data secure. However, changing passphrase is a bit of a challenge for new Linux users and developers. This step-by-step guide explains how to find LUKS slots assigned to you and change your passphrase on a Debian/Ubuntu, CentOS/RHEL, OpenSUSE/SUSE other Linux distros.
The post How to change LUKS disk encryption passphrase in Linux appeared first on nixCraft.
I use the reboot command to reboot our PostgreSQL server running on RHEL 7. We have a development server running on CentOS 7 too. However, sometimes I noticed database corruption or file issues. Is there is a safe reboot command that will do a graceful reboot for our CentOS or RHEL 7 server without causing any issues? What is the best way to appropriately restart CentOS/RHEL over ssh?
The post How to restart CentOS or RHEL server safely appeared first on nixCraft.
The bashtop is an impressive Linux resource monitor that shows usage and stats for processor, memory, disks, and network. However, it suffers from bash itself, and cross-platform support is a nightmare. Now we have the Python port of bashtop. We can use a resource monitor that shows usage and stats for CPU, RAM, SSD (hard disk), network, and processes information in a lovely format.
The post bpytop – Awesome Linux, macOS and FreeBSD resource monitor appeared first on nixCraft.
As you know, Red Hat and IBM shocked the Linux community by killing CentOS 8 stable. There will be no CentOS Linux. Red Hat announced that there would be only CentOS Stream, which will act as a rolling version, and it will be used as next RHEL. Now we have a possible alternative called Rocky Linux.
The post CentOS Linux reborn as Rocky Linux enterprise operating system appeared first on nixCraft.
Current GNU/Bash maintainer Chet Ramey announced the latest major release, Bash 5.1, on December 7th, 2020. Bash is the default shell on many Linux distros and popular among developers, especially those working with Linux containers. It is the fifth major release of bash. It came with a new enhanced random number generation and added a new variable called SRANDOM. Let us see how to install and use newly released GNU/BASH 5.1 on Linux.
The post GNU/Bash 5.1 released with the random ${SRANDOM} number engine appeared first on nixCraft.
CentOS is an acronym for Community Enterprise Operating System, and it is a 100% rebuild of RHEL (Red Hat Enterprise Linux). While RHEL costs money, CentOS offered as a free community-supported enterprise Linux distro. Developers and companies who are good at Linux and don't want to pay RHEL support fees always selected CentOS to save money and get enterprise-class software. However, the free ride is over. Red Hat announced that CentOS Linux 8, as a rebuild of RHEL 8, will end at 2021. CentOS Stream continues after that date, serving as the upstream (development) branch of Red Hat Enterprise Linux.
The post CentOS Linux 8 will end in 2021 and shifts focus to CentOS Stream appeared first on nixCraft.
How do I install MySQL server 8.0 on CentOS 8 Linux server running on Linode and AWS cloud? How do I add and set up a new MySQL user and database account on the newly created CentOS server?
The post How to install MySQL server on CentOS 8 Linux appeared first on nixCraft.
How do I check the TLS/SSL certificate expiration date from my Linux or Unix shell prompt? How can I find the TLS certificate expiry date from Linux and Unix shell scripts?
The post How to check TLS/SSL certificate expiration date from command-line appeared first on nixCraft.
So how do you stream audio from your Apple iOS or Google Android phone to your laptop speaker? Let us see how to set up a Bluetooth speaker to stream audio from your Android / iOS mobile phone to your Linux based laptop or desktop that got better audio speakers.
The post Linux set up bluetooth speaker to stream audio from your Android / iOS mobile phone appeared first on nixCraft.
Want to display a message or banner before OpenSSH (SSHD server) authentication? Try this simple tip to show the banner or ASCII logo on your Linux or Unix system.
The post Quick tip: Display banner/message before OpenSSH authentication appeared first on nixCraft.
Are you looking to send a temporary email right from your Linux or Unix terminal? Look no further. Try tmpmail command-line utility that allows you to generate a temporary email address for receiving emails. Underneath the script uses 1secmail's API to receive the emails.
The post tmpmail – A temporary email right from Linux / Unix terminal appeared first on nixCraft.
Can you explain how to install Java on Ubuntu 20.04 LTS Linux system?
The post How to Install Java on Ubuntu 20.04 LTS Linux appeared first on nixCraft.
I am using a CentOS/RHEL 6/7/8 server. How do I check from the command line if a reboot is required for my CentOS host? How do I check if a host powered by CentOS Enterprise Linux needs to reboot after running the yum update command?
The post How to check if CentOS / RHEL needs a full reboot appeared first on nixCraft.
How do I use the ssh-agent command for non-interactive authentication on Linux and Unix-like systems such as macOS or FreeBSD desktop? My private key is protected with a passphrase or password. So I need have to enter the passphrase to use the ssh private key for authentication multiple times. How can I tell ssh ask the passphrase one time only?
The post How to use ssh-agent for authentication on Linux / Unix appeared first on nixCraft.
How do I use the systemctl command to view status of a systemd service on Linux operating systems?
The post How to view status of a service on Linux using systemctl appeared first on nixCraft.
One of my PHP and bash scripts depends upon less command to display the help system to other users. But, whenever they run less on a particular version of CentOS or RHEL cloud server, they get an error that reads as: "bash: less: command not found." How do I install less utility on CentOS or RHEL (Red Hat Enterprise Linux)/Fedora Linux server? How can I configure Linux containers such as Docker or Podman to install less automatically?
The post How to install less on CentOS / RHEL / Fedora appeared first on nixCraft.
Lateo.net - Flux RSS en pagaille (pour en ajouter : @ moi) 