Complete command index
Browse 521 verified commands by task. Every detail page explains the executable, flags, expected output, compatibility, and risk before copy.
Browse error explanationsSystem & Identity47
- Show system uptime and load averages
uptimelinux · macos - Print kernel, architecture, and system information
uname -alinux · macos - Show the current user and group identities
idlinux · macos - List environment variables alphabetically
env | sortlinux · macos - Print the current time in ISO 8601 format
date -Isecondslinux · macos - Show recent system reboot history
last reboot | head -10linux · macos - Show Windows operating system and hardware information
Get-ComputerInfo | Select-Object WindowsProductName,WindowsVersion,OsArchitecture,CsTotalPhysicalMemorywindows - Inventory Windows startup commands across registry and profiles
Get-CimInstance Win32_StartupCommand | Sort-Object Location,Name | Select-Object Name,Command,Location,User | Format-Table -Wrapwindows - List active login sessions
loginctl list-sessionslinux - Inspect one login session
loginctl show-session 2 -p Name,Remote,Type,Class,Statelinux - List users known to logind
loginctl list-userslinux - Show clock, timezone, and synchronization state
timedatectl statuslinux - Show time synchronization details
timedatectl timesync-statuslinux - Search available time zones
timedatectl list-timezones | rg '^Europe/' | headlinux - Show hostname and operating system identity
hostnamectl statuslinux - Export host identity as JSON
hostnamectl status --json=shortlinux - Print only the static hostname
hostnamectl hostnamelinux - List IPv4 kernel networking parameters
sysctl -a 2>/dev/null | rg '^net\.ipv4\.' | headlinux - Show whether IPv4 forwarding is enabled
sysctl net.ipv4.ip_forwardlinux - Show the current swap tendency
sysctl vm.swappinesslinux - Show all shell resource limits
ulimit -alinux - Show the current open-file limit
ulimit -nlinux - Show the current process limit
ulimit -ulinux - List loaded kernel modules
lsmod | head -12linux - Find loaded network and firewall modules
lsmod | rg '^(nf_|ip_|xt_)'linux - Find loaded filesystem modules
lsmod | rg '^(xfs|btrfs|ext4|zfs)'linux - Inspect kernel module metadata
modinfo nf_conntrack | head -12linux - List parameters accepted by a kernel module
modinfo -p nf_conntracklinux - Print the installed kernel module path
modinfo -n nf_conntracklinux - Inspect udev properties for a device
udevadm info --query=property --name={{device}}linux - Check whether the udev event queue is empty
udevadm settle --timeout=5 --exit-if-exists={{device}}linux - Simulate udev rules for a device
udevadm test /sys/class/block/sda 2>&1 | tail -12linux - Show processor architecture and topology
lscpulinux - Export CPU topology as JSON
lscpu -Jlinux - Show per-CPU topology and online state
lscpu -e=CPU,NODE,SOCKET,CORE,ONLINElinux - List attached USB devices
lsusblinux - Show the USB device tree
lsusb -tlinux - Inspect one USB vendor and product
lsusb -v -d 046d:c534 2>/dev/null | head -15linux - List PCI devices with kernel drivers
lspci -klinux - List PCI network controllers
lspci -nn | rg -i 'ethernet|network'linux - Show the PCI bus tree
lspci -tvlinux - Show chrony synchronization and clock offset
chronyc trackinglinux - Show chrony time sources and reachability
chronyc sources -vlinux - Show chrony source activity
chronyc activitylinux - Show Windows operating system health fields
Get-CimInstance Win32_OperatingSystem | Select-Object Caption,Version,LastBootUpTime,FreePhysicalMemorywindows - Show Windows BIOS and firmware identity
Get-CimInstance Win32_BIOS | Select-Object Manufacturer,SMBIOSBIOSVersion,ReleaseDate,SerialNumberwindows - List Windows physical memory modules
Get-CimInstance Win32_PhysicalMemory | Select-Object BankLabel,Capacity,Speed,Manufacturer,PartNumberwindows
Processes & Performance38
- Show the ten processes using the most memory
ps aux | sort -nrk 4,4 | head -10linux · macos - Show the ten processes using the most CPU
ps aux | sort -nrk 3,3 | head -10linux · macos - Show Linux memory and swap usage
free -hlinux - Capture one non-interactive process snapshot
top -b -n 1 | head -20linux - Show the ten processes using the most CPU time
Get-Process | Sort-Object CPU -Descending | Select-Object -First 10windows - Show the ten processes using the most memory
Get-Process | Sort-Object WorkingSet64 -Descending | Select-Object -First 10windows - Rank processes by CPU with memory, age, and full command
ps -eo pid,ppid,user,%cpu,%mem,rss,etime,stat,command --sort=-%cpu | head -{{count}}linux - Show a process subtree with PIDs and command arguments
pstree -aps {{processId}}linux - Show the boot critical path and activation delays
systemd-analyze critical-chainlinux - Inspect Linux CPU, memory, and I/O pressure stall metrics
grep -H . /proc/pressure/{cpu,memory,io}linux - Sample scheduler, memory, paging, I/O, and CPU pressure
vmstat -w {{seconds}} {{count}}linux - Take a batch snapshot of cgroup CPU, memory, and I/O usage
systemd-cgtop --batch --iterations=1 --depth={{count}}linux - Trace file-related system calls from a running Linux process
sudo strace -f -p {{pid}} -e trace=%file -s 256linux - Summarize system call counts, errors, and time for a program
strace -c {{executable}}linux - Find open files that were deleted
lsof +L1linux - Show processes using a path
lsof {{path}}linux - List established TCP connections with owners
lsof -nP -iTCP -sTCP:ESTABLISHEDlinux - Show processes using a mounted filesystem
fuser -vm {{path}}linux - Show the process using a TCP port
fuser -v {{port}}/tcplinux - Show process IDs using a file
fuser {{file}}linux - Sample extended device I/O statistics
iostat -xz 1 3linux - Show CPU and device utilization in MiB
iostat -m 1 2linux - Export one I/O sample as JSON
iostat -o JSON -x 1 1linux - Sample scheduler, memory, I/O, and CPU state
vmstat 1 5linux - Show per-disk counters with vmstat
vmstat -dlinux - Show active kernel slab caches
vmstat -m | head -10linux - Sample per-process CPU usage
pidstat -u 1 3linux - Sample per-process page faults and memory
pidstat -r 1 3linux - Sample process context switches
pidstat -w 1 3linux - Read today's CPU utilization history
sar -ulinux - Read network device history
sar -n DEVlinux - Read memory utilization history
sar -rlinux - List matching processes with full commands
pgrep -af {{pattern}}linux - List processes owned by a user
pgrep -u {{user}} -alinux - Print the newest matching process
pgrep -n -a {{pattern}}linux - Show hardware temperature and fan sensors
sensorslinux - Export sensor readings as JSON
sensors -jlinux - Show only sensor alarms
sensors | rg -i 'alarm|crit' | headlinux
Storage & Filesystems51
- Show free disk space in human-readable units
df -hlinux · macos - Find the 20 largest files and folders here
du -ah . | sort -rh | head -20linux · macos - Show filesystem inode usage
df -ilinux · macos - Refresh a folder size every two seconds
watch -n 2 du -sh {{folder}}linux · macos - Find the twenty largest files below a folder
Get-ChildItem {{folder}} -File -Recurse -ErrorAction SilentlyContinue | Sort-Object Length -Descending | Select-Object -First 20 FullName,Lengthwindows - Show filesystem drives and free space
Get-PSDrive -PSProvider FileSystemwindows - Rank the largest directories one level below a path
du -xhd 1 {{path}} 2>/dev/null | sort -hr | head -{{count}}linux - Sample per-process disk I/O and rank active writers
pidstat -d {{seconds}} {{count}} | awk '$4 ~ /^[0-9]+$/ {print}' | sort -k6,6nr | head -{{lines}}linux - Sample extended device latency and utilization statistics
iostat -xz {{seconds}} {{count}}linux - Rank directories by the number of files they contain
find {{path}} -xdev -type f -printf '%h\n' | sort | uniq -c | sort -nr | head -{{count}}linux - Find deleted files that still consume disk space
sudo lsof -nP +L1 | sort -k7 -nr | head -{{count}}linux · macos - Verify fstab syntax, mount targets, and referenced devices
sudo findmnt --verify --verboselinux - Show the block-device tree with filesystems
lsblk -flinux - Export block devices as JSON
lsblk -J -o NAME,SIZE,TYPE,MOUNTPOINTSlinux - Show storage discard and rotational capabilities
lsblk -D -o NAME,ROTA,DISC-GRAN,DISC-MAX,DISC-ZEROlinux - Show the filesystem backing a path
findmnt -T {{path}}linux - Verify fstab entries without mounting
findmnt --verify --verboselinux - Export mounted filesystems as JSON
findmnt -J -o TARGET,SOURCE,FSTYPE,OPTIONSlinux - Read the SMART overall health result
smartctl -H {{device}}linux - Read important SMART device attributes
smartctl -A {{device}}linux - Read the SMART error log
smartctl -l error {{device}}linux - Scan configured Linux software RAID arrays
mdadm --detail --scanlinux - Inspect a software RAID array
mdadm --detail /dev/md0linux - Show kernel RAID synchronization state
cat /proc/mdstatlinux - List logical volumes with devices
lvs -o lv_name,vg_name,lv_size,lv_attr,deviceslinux - List LVM physical volume allocation
pvs -o pv_name,vg_name,pv_size,pv_freelinux - Show logical volume segment mapping
lvs --segments -o lv_name,segtype,stripes,deviceslinux - Show ZFS pool health and device state
zpool status -xlinux - List ZFS pool capacity and fragmentation
zpool list -o name,size,alloc,free,frag,cap,healthlinux - Show recent ZFS pool administration history
zpool history -il | tail -10linux - List ZFS datasets and space usage
zfs list -o name,used,avail,refer,mountpointlinux - List ZFS snapshots by creation time
zfs list -t snapshot -o name,used,creation -s creationlinux - Show local and inherited ZFS properties
zfs get -s local,inherited compression,quota,reservation {{dataset}}linux - Show Btrfs allocation and free-space estimates
btrfs filesystem usage -T {{path}}linux - Show Btrfs device error counters
btrfs device stats {{path}}linux - List Btrfs subvolumes below a path
btrfs subvolume list {{path}}linux - Show XFS geometry for a mounted filesystem
xfs_info {{path}}linux - Estimate XFS metadata and data usage
xfs_estimate -v {{path}}linux - Check XFS consistency without modifying it
xfs_repair -n {{device}}linux - Show ext filesystem superblock settings
tune2fs -l {{device}} | head -25linux - Show ext filesystem check counters
tune2fs -l {{device}} | rg 'Mount count|Check interval|Last checked'linux - Show ext reserved block settings
tune2fs -l {{device}} | rg 'Reserved block count|Reserved block percentage'linux - List filesystem checkers available to fsck
fsck -Nlinux - Check an ext filesystem without writing
e2fsck -fn {{device}}linux - Check a FAT filesystem without writing
fsck.fat -n {{device}}linux - List macOS disks and APFS containers
diskutil listmacos - Inspect a macOS disk or volume
diskutil info /macos - List APFS containers and volumes
diskutil apfs list | head -40macos - Show Windows volume health and free space
Get-Volume | Sort-Object DriveLetter | Select-Object DriveLetter,FileSystemLabel,FileSystem,HealthStatus,SizeRemaining,Sizewindows - Show Windows physical disk health
Get-PhysicalDisk | Select-Object FriendlyName,MediaType,HealthStatus,OperationalStatus,Sizewindows - Show Windows disk reliability counters
Get-PhysicalDisk | Get-StorageReliabilityCounter | Select-Object DeviceId,Temperature,ReadErrorsTotal,WriteErrorsTotal,Wearwindows
Files & Text52
- Find files modified in the last 24 hours
find . -type f -mtime -1linux · macos - Search recursively for text with line numbers
rg -n {{needle}} {{path}}linux · macos - Create a compressed tar archive from a folder
tar -czf {{archiveFile}} {{folder}}linux · macos - Show only two directory levels with tree -L 2
tree -L 2 {{path}}linux · macos - Find empty files below the current directory
find . -type f -empty -printlinux · macos - Delete empty directories below the current directory
find . -type d -empty -deletelinux · macos - Count files below the current directory
find . -type f | wc -llinux · macos - List files inside a ZIP archive
unzip -l {{archiveFile}}linux · macos - Copy a file directly to the macOS clipboard
pbcopy < {{file}}macos - Save the macOS clipboard to a file
pbpaste > {{file}}macos - Open a folder in Finder
open {{folder}}macos - Search the Spotlight index from the terminal
mdfind {{query}}macos - Show hidden files in Finder
defaults write com.apple.finder AppleShowAllFiles -bool true && killall Findermacos - Find files modified in the last 24 hours
Get-ChildItem {{folder}} -File -Recurse | Where-Object LastWriteTime -gt (Get-Date).AddDays(-1)windows - Search recursively for text in files
Get-ChildItem {{folder}} -File -Recurse | Select-String -Pattern {{pattern}}windows - Create a ZIP archive from a folder
Compress-Archive -Path {{folder}} -DestinationPath {{archiveFile}}windows - Extract a ZIP archive to a folder
Expand-Archive -Path {{archiveFile}} -DestinationPath {{destination}}windows - Pretty-print and colorize a JSON document
jq . {{file}}linux · macos · windows - Extract active users from a JSON array as TSV
jq -r '.[] | select(.active == true) | [.name, .email] | @tsv' {{file}}linux · macos · windows - Sum a numeric CSV column while skipping the header
awk -F, -v column={{column}} 'NR>1 {sum += $column} END {printf "%.2f\n", sum}' {{file}}linux · macos - Rank repeated lines by frequency
sort {{file}} | uniq -c | sort -nr | head -{{count}}linux · macos - Find duplicate files by SHA-256 content hash
find {{path}} -type f -print0 | xargs -0 sha256sum | sort | uniq -w64 -dDlinux - List recently modified files ordered by size
find {{path}} -type f -mtime -{{days}} -printf '%s\t%TY-%Tm-%Td %TH:%TM\t%p\n' | sort -nr | head -{{count}}linux - Count files by extension without breaking on spaces
find {{path}} -type f -printf '%f\n' | awk -F. 'NF==1 {ext="[none]"} NF>1 {ext=tolower($NF)} {count[ext]++} END {for (ext in count) print count[ext], ext}' | sort -nrlinux - Compare two directory trees without reading file bodies
diff -qr {{source}} {{destination}}linux · macos - Search text with line numbers and surrounding context
rg -n -C {{lines}} --glob '{{glob}}' {{pattern}} {{path}}linux · macos · windows - List only matching files inside a compressed tar archive
tar -tzf {{archiveFile}} | rg {{pattern}}linux · macos - Extract active users from JSON with PowerShell
Get-Content {{file}} -Raw | ConvertFrom-Json | Where-Object Active | Select-Object Name,Email | Format-Table -AutoSizewindows - Sum a CSV property with PowerShell
(Import-Csv {{file}} | Measure-Object -Property {{property}} -Sum).Sumwindows - Group duplicate files by SHA-256 hash in PowerShell
Get-ChildItem {{folder}} -File -Recurse | Get-FileHash -Algorithm SHA256 | Group-Object Hash | Where-Object Count -gt 1 | ForEach-Object Groupwindows - Compare relative file inventories of two folders
Compare-Object (Get-ChildItem {{source}} -File -Recurse | ForEach-Object FullName) (Get-ChildItem {{destination}} -File -Recurse | ForEach-Object FullName)windows - Inspect file metadata and timestamps
stat {{file}}linux - Print compact ownership and mode metadata
stat -c '%A %a %U:%G %s %n' {{file}}linux - Inspect filesystem metadata for a path
stat -f {{path}}linux - List top-level JSON keys
jq -r 'keys[]' data.jsonlinux - Find every JSON path containing null
jq -c 'paths(null) as $p | $p' data.jsonlinux - Filter JSON objects by a field
jq -c '.items[] | select(.status == "failed") | {id,status}' data.jsonlinux - List top-level YAML keys
yq '. | keys | .[]' config.yamllinux - Convert YAML to JSON
yq -o=json config.yamllinux - Filter YAML array entries by a field
yq '.services[] | select(.enabled == true) | .name' config.yamllinux - Print selected whitespace-delimited columns
awk '{print $1, $3}' {{file}} | headlinux - Count records by the first field
awk '{count[$1]++} END {for (key in count) print count[key], key}' {{file}} | sort -nr | headlinux - Print lines between two matching markers
awk '/BEGIN INCIDENT/{show=1} show; /END INCIDENT/{show=0}' {{file}}linux - Print a specific line range from a file
sed -n '20,35p' {{file}}linux - Print a match and the following three lines
sed -n '/ERROR/,+3p' {{file}} | head -20linux - Print non-empty, non-comment configuration lines
sed -e '/^[[:space:]]*#/d' -e '/^[[:space:]]*$/d' /etc/ssh/sshd_configlinux - List files containing a fixed string
rg -l -F {{pattern}} {{path}} | head -20linux - Search text and print ripgrep statistics
rg --stats {{pattern}} {{path}}linux - List file types known to ripgrep
rg --type-list | head -12linux - List archive members with metadata
tar -tvf {{archive}} | head -20linux - Compare archive members with filesystem files
tar -df {{archive}}linux - List archive members and print byte totals
tar -tvf {{archive}} --totals >/dev/nulllinux
Network & DNS79
- List listening TCP ports and their processes
lsof -iTCP -sTCP:LISTEN -n -Plinux · macos - List listening Linux sockets with process details
ss -lntuplinux - Fetch only the HTTP response headers
curl -I {{url}}linux · macos - Resolve a hostname to its IP address
dig +short {{domain}}linux · macos - Print your current public IP address
curl -s https://api.ipify.orglinux · macos - Send four ICMP probes to a host
ping -c 4 {{host}}linux · macos - Trace the network path to a host
traceroute {{host}}linux · macos - Show Linux network interfaces and addresses
ip -brief addresslinux · macos - Measure HTTP response timing
curl -o /dev/null -s -w 'dns=%{time_namelookup}s connect=%{time_connect}s total=%{time_total}s\n' {{url}}linux · macos - Check whether a TCP port accepts connections
nc -vz {{host}} {{port}}linux · macos - Look up DNS records for a host
host {{domain}}linux · macos - Show the default network route
ip route show defaultlinux · macos - Count established TCP connections
ss -H state established | wc -llinux - Flush the macOS DNS cache
sudo dscacheutil -flushcache && sudo killall -HUP mDNSRespondermacos - List listening TCP connections and owning processes
Get-NetTCPConnection -State Listen | Sort-Object LocalPortwindows - Test a remote TCP port from PowerShell
Test-NetConnection -ComputerName {{host}} -Port {{port}}windows - List configured IP addresses
Get-NetIPAddress | Sort-Object InterfaceAlias,AddressFamilywindows - Resolve a DNS name in PowerShell
Resolve-DnsName {{domain}}windows - Fetch HTTP response metadata in PowerShell
Invoke-WebRequest -Uri {{url}} -Method Headwindows - Check a list of URLs concurrently and print status codes
xargs -P {{workers}} -n 1 curl -sS -o /dev/null -w '%{http_code}\t%{url_effective}\n' < {{file}}linux · macos - Break an HTTP request into DNS, TCP, TLS, TTFB, and total time
curl -sS -o /dev/null -w 'status=%{http_code} dns=%{time_namelookup}s tcp=%{time_connect}s tls=%{time_appconnect}s ttfb=%{time_starttransfer}s total=%{time_total}s remote=%{remote_ip}\n' {{url}}linux · macos · windows - Trace every HTTP status and Location header in a redirect chain
curl -sS -I -L {{url}} | awk 'BEGIN{IGNORECASE=1} /^HTTP\// || /^location:/ {gsub("\r",""); print}'linux · macos - Query the useful DNS record set for a domain
for type in A AAAA MX NS TXT CAA; do echo "--- $type ---"; dig +short {{domain}} $type; donelinux · macos - Trace DNS delegation from the root to the authoritative answer
dig +trace +nodnssec {{domain}}linux · macos - Compare an A record across three public DNS resolvers
for resolver in 1.1.1.1 8.8.8.8 9.9.9.9; do printf '%-9s ' "$resolver"; dig +short @${resolver} {{domain}} A | paste -sd, -; donelinux · macos - Request DNSSEC validation and expose the authenticated-data flag
dig +dnssec {{domain}} A | awk '/flags:/{print} /ANSWER SECTION:/{show=1;next} show && NF==0{exit} show{print}'linux · macos - Enumerate accepted TLS ciphers and their grades
nmap --script ssl-enum-ciphers -p {{port}} {{host}}linux · macos · windows - Rank remote IPs by established TCP connection count
ss -Hnt state established | awk '{print $5}' | sed -E 's/^\[?([^]]+)\]?:[0-9]+$/\1/' | sort | uniq -c | sort -nr | head -{{count}}linux - Summarize listening TCP sockets by address and owning process
ss -lntpH | awk '{printf "%-24s %-10s %s\n", $4, $2, $NF}' | sort -k1,1linux - Resolve the exact Linux route, source address, and next hop to a host
ip route get {{host}}linux - Sort the neighbor table by interface and reachability state
ip -j neigh show | jq -r '.[] | [.dev,.dst,(.lladdr // "-"),(.state[0] // "UNKNOWN")] | @tsv' | sortlinux - Capture and decode twenty DNS queries and responses
sudo tcpdump -ni {{interface}} -c {{count}} -vvv 'port 53'linux · macos - Capture new TCP connection attempts without payload data
sudo tcpdump -ni {{interface}} -c {{count}} 'tcp[tcpflags] & tcp-syn != 0'linux · macos - Discover live hosts on an authorized subnet without port scanning
nmap -sn {{subnet}}linux · macos · windows - Run a report-mode path quality test with loss and latency statistics
mtr --report --report-cycles {{count}} --wide {{host}}linux · macos - Measure bidirectional TCP throughput against an iperf3 server
iperf3 -c {{host}} -p {{port}} --bidir --time {{seconds}} --format mlinux · macos · windows - Query common DNS record types from PowerShell
'A','AAAA','MX','NS','TXT','CAA' | ForEach-Object { Resolve-DnsName {{domain}} -Type $_ -ErrorAction SilentlyContinue | Select-Object @{N='Type';E={$_.Type}},Name,IPAddress,NameExchange,Strings }windows - Join listening TCP ports to their owning process details
Get-NetTCPConnection -State Listen | Sort-Object LocalPort | ForEach-Object { $p=Get-Process -Id $_.OwningProcess -ErrorAction SilentlyContinue; [pscustomobject]@{Address=$_.LocalAddress;Port=$_.LocalPort;PID=$_.OwningProcess;Process=$p.ProcessName;Path=$p.Path} } | Format-Table -AutoSizewindows - Resolve the best Windows route and source address to a destination
Find-NetRoute -RemoteIPAddress {{host}} | Select-Object InterfaceAlias,NextHop,RouteMetric,SourceAddresswindows - Test common web ports concurrently from PowerShell
80,443,8080,8443 | ForEach-Object -Parallel { $port=$_; $ok=Test-NetConnection {{host}} -Port $port -InformationLevel Quiet; [pscustomobject]@{Port=$port;Reachable=$ok} } -ThrottleLimit 4windows - Inspect a process file descriptors, sockets, and deleted files
sudo lsof -nP -p {{processId}} | head -{{count}}linux · macos - Send a zero-I/O UDP port probe with netcat
nc -vzu -w 3 {{host}} {{port}}linux · macos - Send a raw HTTP HEAD request through netcat
printf 'HEAD / HTTP/1.0\r\nHost: %s\r\n\r\n' {{host}} | nc -w 5 {{host}} {{port}}linux · macos - List listening TCP and UDP ports with owning processes
sudo netstat -tulpnlinux - List established TCP connections without DNS lookups
netstat -tn | awk '$6=="ESTABLISHED"'linux - Show the kernel routing table with netstat
netstat -rnlinux · macos - Show network interface packet and error counters with netstat
netstat -ilinux · macos - Trace network system calls from a running Linux process
sudo strace -f -p {{pid}} -e trace=%network -s 256linux - Show only failed network system calls from a curl request
strace -f -e trace=%network -e status=failed curl {{url}}linux - Resolve the kernel route to an address
ip route get {{address}}linux - Show failed and incomplete neighbor entries
ip neigh show nud failed,incompletelinux - Show compact interface state and MTU
ip -br linklinux - Show negotiated Ethernet link settings
ethtool {{interface}}linux - Show non-zero Ethernet driver counters
ethtool -S {{interface}} | awk '$2 != 0 {print}' | head -20linux - Show the driver and firmware for an interface
ethtool -i {{interface}}linux - Show NetworkManager device state
nmcli -f DEVICE,TYPE,STATE,CONNECTION devicelinux - Show active NetworkManager connection details
nmcli -f NAME,UUID,TYPE,DEVICE connection show --activelinux - Show DNS settings managed by NetworkManager
nmcli -f GENERAL.DEVICE,IP4.DNS,IP4.DOMAIN device showlinux - Show per-link resolver configuration
resolvectl statuslinux - Resolve a domain through systemd-resolved
resolvectl query {{domain}}linux - Show resolver cache and transaction statistics
resolvectl statisticslinux - Capture ten TCP SYN packets on an interface
tcpdump -ni {{interface}} -c 10 'tcp[tcpflags] & tcp-syn != 0'linux - Capture twenty DNS packets with names decoded
tcpdump -ni {{interface}} -c 20 port 53linux - Capture traffic to or from one host
tcpdump -ni {{interface}} -c 20 host {{address}}linux - List capture interfaces visible to tshark
tshark -Dlinux - Summarize TCP conversations from a capture
tshark -r capture.pcapng -q -z conv,tcplinux - Extract HTTP error responses from a capture
tshark -r capture.pcapng -Y 'http.response.code >= 400' -T fields -e frame.time -e ip.src -e http.response.codelinux - Run a ten-cycle path quality report
mtr -rwzc 10 {{host}}linux - Run an MTR report using TCP port 443
mtr --tcp --port {{port}} -rwzc 10 {{host}}linux - Export path quality as JSON
mtr -j -c 5 {{host}}linux - Show the remote IP and HTTP status for a URL
curl -sS -o /dev/null -w 'remote_ip=%{remote_ip} status=%{http_code}\n' {{url}}linux - Show negotiated TLS and certificate verification
curl -sS -o /dev/null -w 'tls=%{ssl_version} verify=%{ssl_verify_result}\n' {{url}}linux - Follow redirects and print response headers
curl -sSIL --max-redirs 5 {{url}}linux - Query the authoritative SOA record
dig +noall +answer {{domain}} SOAlinux - Trace DNS delegation from the root
dig +trace {{domain}} | tail -15linux - Request DNSSEC validation details
dig +dnssec {{domain}} A | rg 'flags:|ANSWER SECTION|RRSIG' -A3linux - Show Windows network adapter state and speed
Get-NetAdapter | Sort-Object Name | Select-Object Name,Status,LinkSpeed,MacAddress,InterfaceDescriptionwindows - Show Windows adapter packet errors and discards
Get-NetAdapterStatistics | Select-Object Name,ReceivedPacketErrors,OutboundPacketErrors,ReceivedDiscardedPackets,OutboundDiscardedPacketswindows - Show enabled protocol bindings for an adapter
Get-NetAdapterBinding -Name 'Ethernet' | Where-Object Enabled | Select-Object DisplayName,ComponentIDwindows
Services & Logs55
- Show priority errors from the current boot
journalctl -p err -blinux - Show the latest kernel messages
dmesg | tail -30linux - List failed systemd services
systemctl --failedlinux - Find every log file below the current directory
find . -type f -name '*.log' -printlinux · macos - List services managed by Homebrew
brew services listmacos - List running Windows services
Get-Service | Where-Object Status -eq 'Running'windows - List stopped Windows services
Get-Service | Where-Object Status -eq 'Stopped'windows - Follow new lines appended to a log file
Get-Content {{file}} -Tail 100 -Waitwindows - Show the latest Windows system errors
Get-WinEvent -FilterHashtable @{LogName='System'; Level=2} -MaxEvents 20windows - Detect services and versions on selected TCP ports
nmap -sV --version-light -p {{ports}} {{host}}linux · macos · windows - Read one service log for the last hour with precise timestamps
journalctl -u {{service}} --since '1 hour ago' -o short-iso-precise --no-pagerlinux - Print status details for every failed systemd unit
systemctl --failed --no-legend | awk '{print $1}' | xargs -r systemctl status --no-pager --lines={{lines}}linux - Show what depends on a systemd service
systemctl list-dependencies --reverse --all {{service}}linux - Show kernel and service warnings from the current boot
journalctl -b -p warning..alert --no-pager -o short-isolinux - Review successful and failed sudo activity for today
journalctl _COMM=sudo --since today -o short-iso --no-pagerlinux - Map Windows services to processes, accounts, and start modes
Get-CimInstance Win32_Service | Sort-Object State,Name | Select-Object Name,State,StartMode,StartName,ProcessId,@{N='Process';E={(Get-Process -Id $_.ProcessId -ErrorAction SilentlyContinue).ProcessName}} | Format-Table -AutoSizewindows - List scheduled tasks whose last run failed
Get-ScheduledTask | Get-ScheduledTaskInfo | Where-Object LastTaskResult -ne 0 | Sort-Object LastRunTime -Descending | Select-Object TaskName,LastRunTime,LastTaskResult,NextRunTimewindows - Correlate recent Windows system errors by provider and event ID
Get-WinEvent -FilterHashtable @{LogName='System';Level=2;StartTime=(Get-Date).AddHours(-{{hours}})} | Group-Object ProviderName,Id | Sort-Object Count -Descending | Select-Object Count,@{N='ProviderAndId';E={$_.Name}},@{N='Newest';E={($_.Group | Sort-Object TimeCreated -Descending | Select-Object -First 1).TimeCreated}}windows - Connect to a TCP service and read its banner with netcat
printf '\n' | nc -v -w 5 {{host}} {{port}}linux · macos - List enabled service unit files
systemctl list-unit-files --type=service --state=enabledlinux - Show key runtime properties for a service
systemctl show {{unit}} -p ActiveState,SubState,MainPID,ExecMainStatuslinux - Show reverse dependencies for a unit
systemctl list-dependencies --reverse {{unit}}linux - Read service logs since a precise time
journalctl -u {{unit}} --since '2026-07-24 10:00:00' --no-pagerlinux - List recorded boots with identifiers
journalctl --list-bootslinux - Show journal disk usage
journalctl --disk-usagelinux - Validate the NGINX configuration
nginx -tlinux - Dump the resolved NGINX configuration
nginx -T 2>&1 | head -30linux - Show NGINX build options and modules
nginx -V 2>&1linux - Validate the Apache HTTP Server configuration
apachectl configtestlinux - Show Apache virtual-host routing
apachectl -Slinux - List loaded Apache modules
apachectl -Mlinux - Validate an HAProxy configuration
haproxy -c -f /etc/haproxy/haproxy.cfglinux - Show HAProxy version and build features
haproxy -vv | head -20linux - Show recent HAProxy configuration parse errors
haproxy -c -V -f /etc/haproxy/haproxy.cfg 2>&1 | tail -20linux - Check whether PostgreSQL accepts connections
pg_isready -h {{host}} -p 5432 -d {{database}}linux - Show PostgreSQL server version and recovery state
psql -d {{database}} -Atc "select version(), pg_is_in_recovery();"linux - Summarize PostgreSQL sessions by state
psql -d {{database}} -c "select state, count(*) from pg_stat_activity group by state order by state;"linux - Check whether MySQL responds
mysqladmin -h {{host}} pinglinux - Show MySQL server version and uptime
mysql -h {{host}} -NBe "select @@version, @@hostname, uptime from performance_schema.global_status where variable_name='Uptime';"linux - Show MySQL thread and connection counters
mysql -h {{host}} -e "show global status where Variable_name in ('Threads_connected','Threads_running','Max_used_connections');"linux - Check whether Redis responds
redis-cli -h {{host}} -p 6379 PINGlinux - Show compact Redis server and memory state
redis-cli -h {{host}} --no-auth-warning INFO server memory | rg '^(redis_version|uptime_in_seconds|used_memory_human|maxmemory_human):'linux - Run a bounded Redis intrinsic latency sample
timeout 5 redis-cli -h {{host}} --intrinsic-latency 2linux - List loaded macOS launch services
launchctl list | head -15macos - Inspect a macOS launch service
launchctl print system/com.apple.sshd | head -30macos - List disabled macOS launch services
launchctl print-disabled system | head -30macos - Show macOS errors from the last hour
log show --last 1h --style compact --predicate 'messageType == error' | tail -30macos - Show recent macOS logs for a process
log show --last 30m --style compact --predicate 'process == "sshd"' | tail -30macos - Summarize macOS unified-log storage
log statsmacos - List Windows event providers matching a name
Get-WinEvent -ListProvider '*Service*' | Select-Object -First 10 Namewindows - Show Windows boot and shutdown events
Get-WinEvent -FilterHashtable @{LogName='System'; Id=12,13,6005,6006} -MaxEvents 20 | Select-Object TimeCreated,Id,ProviderName,Messagewindows - Show Windows Service Control Manager errors
Get-WinEvent -FilterHashtable @{LogName='System'; ProviderName='Service Control Manager'; Level=2} -MaxEvents 20 | Select-Object TimeCreated,Id,Messagewindows - Rotate a MySQL user to a server-generated random password
mysql -u {{adminUser}} -p -e "ALTER USER '{{targetUser}}'@'{{accountHost}}' IDENTIFIED BY RANDOM PASSWORD;"linux - Create a compressed transaction-consistent MySQL database backup
mysqldump --single-transaction --quick --routines --triggers --events --hex-blob -u {{adminUser}} -p {{database}} | gzip -1 > {{backupFile}}linux - Restore a compressed SQL backup into a MySQL database
gzip -dc {{backupFile}} | mysql --binary-mode=1 -u {{adminUser}} -p {{database}}linux
Security & Access56
- Inspect a remote TLS certificate
openssl s_client -connect {{host}}:{{port}} -servername {{host}} </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer -dateslinux · macos - Calculate the SHA-256 checksum of a file
sha256sum {{file}}linux · macos - Make a file executable with chmod +x
chmod +x {{file}}linux · macos - Calculate a file SHA-256 hash
Get-FileHash {{file}} -Algorithm SHA256windows - Generate a cryptographically random Base64 password
openssl rand -base64 {{count}}linux · macos · windows - Generate a cryptographically random Base64 password in PowerShell
[Convert]::ToBase64String([Security.Cryptography.RandomNumberGenerator]::GetBytes({{count}}))windows - Calculate how many days remain on a remote TLS certificate
end=$(openssl s_client -connect {{host}}:{{port}} -servername {{host}} </dev/null 2>/dev/null | openssl x509 -noout -enddate | cut -d= -f2); echo "notAfter=$end"; echo "daysRemaining=$(( ($(date -d "$end" +%s) - $(date +%s)) / 86400 ))"linux - Print subjects, issuers, and validity dates for a TLS chain
openssl s_client -showcerts -connect {{host}}:{{port}} -servername {{host}} </dev/null 2>/dev/null | openssl crl2pkcs7 -nocrl -certfile /dev/stdin | openssl pkcs7 -print_certs -nooutlinux - Show the negotiated TLS protocol, cipher, and peer certificate
openssl s_client -brief -connect {{host}}:{{port}} -servername {{host}} </dev/null 2>&1 | rg 'Protocol|Ciphersuite|Peer certificate|Verification'linux · macos - Inspect a remote TLS certificate with OpenSSL from PowerShell
'' | openssl s_client -connect {{host}}:{{port}} -servername {{host}} 2>$null | openssl x509 -noout -subject -issuer -dates -fingerprintwindows - Show the latest failed login attempts with source addresses
sudo lastb -Fai | head -{{count}}linux - Audit world-writable files without crossing filesystems
sudo find {{path}} -xdev -type f -perm -0002 -printf '%M\t%u:%g\t%p\n' | sortlinux - Inventory SUID and SGID executables on one filesystem
sudo find {{path}} -xdev -type f \( -perm -4000 -o -perm -2000 \) -printf '%M\t%u:%g\t%p\n' | sortlinux - Find machine certificates expiring within a number of days
Get-ChildItem Cert:\LocalMachine\My | Where-Object NotAfter -lt (Get-Date).AddDays({{days}}) | Sort-Object NotAfter | Select-Object Subject,Thumbprint,NotAfter,HasPrivateKeywindows - Show all WireGuard interfaces, peers, endpoints, and traffic
sudo wg show alllinux - Show the latest WireGuard handshake timestamp for every peer
sudo wg show all latest-handshakeslinux - Show WireGuard receive and transmit counters for every peer
sudo wg show all transferlinux - Show recent OpenVPN service logs
journalctl -u openvpn --since {{since}} --no-pagerlinux - List established strongSwan IKE and IPsec security associations
sudo swanctl --list-saslinux - Show the effective OpenSSH client configuration for a host
ssh -G {{host}} | sortlinux · macos - Diagnose an SSH connection without opening an interactive shell
ssh -vvv -o BatchMode=yes -o ConnectTimeout=10 {{user}}@{{host}} truelinux · macos - Fetch the SSH host keys offered by a server
ssh-keyscan -H -p {{port}} {{host}}linux · macos - Connect to an SSH host through a jump server
ssh -J {{jumpUser}}@{{jumpHost}} {{user}}@{{host}}linux · macos - List the complete nftables ruleset
nft list rulesetlinux - List nftables rules with handles
nft -a list rulesetlinux - Validate an nftables file without applying it
nft --check --file /etc/nftables.conflinux - List IPv4 filter rules with counters
iptables -L -n -v --line-numberslinux - List IPv4 NAT rules with counters
iptables -t nat -L -n -v --line-numberslinux - Export the current IPv4 ruleset
iptables-savelinux - Show UFW state, policy, and rules
ufw status verboselinux - List UFW rules with deletion numbers
ufw status numberedlinux - Show the raw rules managed by UFW
ufw show raw | head -30linux - List active firewalld zones and interfaces
firewall-cmd --get-active-zoneslinux - Show all settings for the active public zone
firewall-cmd --zone=public --list-alllinux - List firewalld policy objects
firewall-cmd --get-policieslinux - Verify a certificate against the local trust store
openssl verify {{certificate}}linux - Print a certificate SHA-256 fingerprint
openssl x509 -in {{certificate}} -noout -fingerprint -sha256linux - Print certificate subject and validity dates
openssl x509 -in {{certificate}} -noout -subject -issuer -dateslinux - Print effective SSH client settings for a host
ssh -G {{host}} | rg '^(hostname|user|port|identityfile|proxyjump) 'linux - List SSH algorithms supported by the client
ssh -Q cipher | head -10linux - Fetch a server ED25519 host key
ssh-keyscan -t ed25519 -p 22 {{host}} 2>/dev/nulllinux - List active Linux Audit rules
auditctl -llinux - Show Linux Audit daemon kernel status
auditctl -slinux - Summarize today's Linux Audit events
ausearch --start today --raw | aureport --summarylinux - Show SELinux mode and policy
sestatuslinux - Show SELinux contexts for a path
ls -lZ {{path}} | head -12linux - Show recent SELinux AVC denials
ausearch -m AVC,USER_AVC -ts recent | tail -30linux - Show AppArmor policy and process counts
aa-statuslinux - List enforced AppArmor profiles
aa-status --enforcedlinux - Show recent AppArmor denials
journalctl -k --since -1h | rg 'apparmor="DENIED"' | tail -20linux - Show enabled Fail2ban jails
fail2ban-client statuslinux - Show Fail2ban jail counters and banned IPs
fail2ban-client status sshdlinux - Show recent Fail2ban decisions
journalctl -u fail2ban --since -1h --no-pager | tail -30linux - Assess a macOS application with Gatekeeper
spctl --assess --type execute --verbose=4 /Applications/Safari.appmacos - Show the macOS assessment subsystem status
spctl --statusmacos - Inspect a macOS application's signing identity
codesign -dv --verbose=4 /Applications/Safari.app 2>&1 | head -20macos
Transfer & Sync24
- Copy a folder with progress and metadata
rsync -avh --progress {{source}} {{destination}}linux · macos - Preview an exact rsync directory mirror with deletions
rsync -avhn --delete --itemize-changes {{source}} {{destination}}linux · macos - Resume an interrupted download and keep the remote filename
curl --fail --location --continue-at - --remote-name {{url}}linux · macos · windows - List files in a remote FTP directory with curl
curl --fail --show-error --list-only --user {{user}} ftp://{{host}}/{{remotePath}}/linux · macos - Download a file from FTP while keeping its remote filename
curl --fail --show-error --remote-name --user {{user}} ftp://{{host}}/{{remoteFile}}linux · macos - Upload one local file to an FTP server with curl
curl --fail --show-error --user {{user}} --upload-file {{localFile}} ftp://{{host}}/{{remotePath}}/linux · macos - Validate a ProFTPD configuration without starting the server
proftpd --configtest -c {{configFile}}linux - Show active ProFTPD sessions and current transfers
ftpwholinux - Show recent ProFTPD service logs
journalctl -u proftpd --since {{since}} --no-pagerlinux - Show enabled settings from the vsftpd configuration
grep -Ev '^[[:space:]]*(#|$)' {{configFile}}linux - Show recent vsftpd service logs
journalctl -u vsftpd --since {{since}} --no-pagerlinux - Find successful and failed logins in a vsftpd log
grep -Ei 'OK LOGIN|FAIL LOGIN' {{logFile}}linux - Show active Pure-FTPd users, transfers, and bandwidth
pure-ftpwholinux - List Pure-FTPd virtual users
pure-pw listlinux - Show recent Pure-FTPd service logs
journalctl -u pure-ftpd --since {{since}} --no-pagerlinux - Preview an rsync transfer to a remote host
rsync -avhn --itemize-changes {{source}} {{user}}@{{host}}:{{destination}}linux · macos - Preview an rsync mirror that would delete extra destination files
rsync -avhn --delete --itemize-changes {{source}} {{destination}}linux · macos - Resume a large interrupted rsync transfer
rsync -avh --partial --append-verify --progress {{source}} {{destination}}linux · macos - Copy one local file to a remote host with SCP
scp -P {{port}} {{localFile}} {{user}}@{{host}}:{{remotePath}}linux · macos - Copy one remote file to the current directory with SCP
scp -P {{port}} {{user}}@{{host}}:{{remoteFile}} .linux · macos - Recursively copy a local directory to a remote host with SCP
scp -r -P {{port}} {{localDirectory}} {{user}}@{{host}}:{{remotePath}}linux · macos - Preview rsync changes with itemized output
rsync -avhn --itemize-changes {{path}}/ /tmp/backup/linux - Preview rsync transfer statistics
rsync -an --stats {{path}}/ /tmp/backup/linux - Preview rsync differences using checksums
rsync -acn --itemize-changes {{path}}/ /tmp/backup/linux
Containers & Orchestration47
- Show running Docker containers
docker pslinux · macos - Follow the last 100 log lines from a container
docker logs -f --tail 100 {{container}}linux · macos - Show Docker disk usage
docker system dflinux · macos - Start a Compose stack in the background
docker compose up -dlinux · macos - Take a one-shot container resource snapshot
docker stats --no-streamlinux · macos - List local Docker images
docker image lslinux · macos - Inspect a container as structured JSON
docker inspect {{container}}linux · macos - Open an interactive shell in a running container
docker exec -it {{container}} /bin/shlinux · macos - Follow logs from a Compose service
docker compose logs -f --tail 100 {{service}}linux · macos - Remove unused dangling Docker images
docker image prunelinux · macos - List unhealthy Docker containers with their health output
docker ps --filter health=unhealthy --format '{{.ID}}\t{{.Names}}\t{{.Status}}'linux · macos · windows - Map every container to its bind mounts and volumes
docker ps -aq | xargs docker inspect --format '{{.Name}}{{range .Mounts}}\t{{.Type}}:{{.Source}} -> {{.Destination}}{{end}}'linux · macos - Print a container environment in deterministic order
docker inspect --format '{{range .Config.Env}}{{println .}}{{end}}' {{container}} | sortlinux · macos - Show container names and addresses on a Docker network
docker network inspect {{network}} --format '{{range $id, $c := .Containers}}{{$c.Name}}\t{{$c.IPv4Address}}\t{{$c.MacAddress}}{{println}}{{end}}'linux · macos · windows - Inspect Docker image layers with full commands and sizes
docker history --no-trunc --format '{{.Size}}\t{{.CreatedBy}}' {{image}}linux · macos · windows - Extract recent error-level lines from a container
docker logs --since {{minutes}}m --timestamps {{container}} 2>&1 | rg -i 'error|fatal|panic|exception' | tail -{{count}}linux · macos - Render and validate the resolved Docker Compose configuration
docker compose -f {{file}} config --quiet && docker compose -f {{file}} configlinux · macos · windows - Create a compressed backup of a Docker volume
docker run --rm -v {{volume}}:/source:ro -v {{destination}}:/backup alpine tar -czf /backup/{{archiveFile}} -C /source .linux · macos · windows - Print a sortable one-shot Docker resource table
docker stats --no-stream --format '{{.Name}}\t{{.CPUPerc}}\t{{.MemUsage}}\t{{.NetIO}}\t{{.BlockIO}}' | sort -k2 -hrlinux · macos - Inventory repository tags, IDs, sizes, and immutable digests
docker image ls --digests --format '{{.Repository}}:{{.Tag}}\t{{.ID}}\t{{.Size}}\t{{.Digest}}'linux · macos · windows - Rank Kubernetes pods by total container restart count
kubectl get pods -A -o json | jq -r '.items[] | [.metadata.namespace,.metadata.name,([.status.containerStatuses[]?.restartCount] | add // 0)] | @tsv' | sort -k3,3nr | head -{{count}}linux · macos · windows - Rank Kubernetes pods by memory consumption
kubectl top pods -A --no-headers | sort -k4 -hr | head -{{count}}linux · macos - Show recent Kubernetes warning events in chronological order
kubectl get events -A --field-selector type=Warning --sort-by=.lastTimestamp -o custom-columns='TIME:.lastTimestamp,NAMESPACE:.metadata.namespace,REASON:.reason,OBJECT:.involvedObject.name,MESSAGE:.message'linux · macos · windows - Inventory every Kubernetes deployment and container image
kubectl get deployments -A -o json | jq -r '.items[] | .metadata as $m | .spec.template.spec.containers[] | [$m.namespace,$m.name,.name,.image] | @tsv' | sortlinux · macos · windows - Watch a deployment rollout with an explicit timeout
kubectl rollout status deployment/{{deployment}} -n {{namespace}} --timeout={{seconds}}slinux · macos · windows - Print the active Kubernetes context, cluster, user, and namespace
kubectl config view --minify -o json | jq -r '.contexts[0].name as $c | .contexts[0].context | "context=\($c) cluster=\(.cluster) user=\(.user) namespace=\(.namespace // "default")"'linux · macos · windows - Inventory Helm releases across every namespace
helm list -A -o json | jq -r '.[] | [.namespace,.name,.chart,.app_version,.status,.updated] | @tsv' | sortlinux · macos · windows - Render a Helm chart and preview its Kubernetes diff
helm template {{release}} {{chart}} -n {{namespace}} -f {{file}} | kubectl diff -n {{namespace}} -f -linux · macos · windows - Summarize Terraform plan actions by resource
terraform show -json {{file}} | jq -r '.resource_changes[] | [.address, (.change.actions | join(" -> "))] | @tsv'linux · macos · windows - Preview an Ansible playbook with check mode and diffs
ansible-playbook -i {{inventoryFile}} {{playbookFile}} --check --diff --limit {{host}}linux · macos - Inspect a multi-platform container image manifest
docker buildx imagetools inspect {{image}}linux · macos · windows - Map resolved Compose services to images and published ports
docker compose -f {{file}} config --format json | jq -r '.services | to_entries[] | [.key,.value.image,([.value.ports[]?.published] | join(","))] | @tsv'linux · macos · windows - Show the active Docker context and endpoint
docker context show && docker context inspect --format '{{json .Endpoints.docker.Host}}' "$(docker context show)"linux · macos · windows - Read recent Docker daemon events
docker events --since 10m --until 0s --format '{{.Time}} {{.Type}} {{.Action}} {{.Actor.Attributes.name}}' | tail -20linux · macos · windows - List container health checks and current status
docker ps --format '{{.Names}}' | xargs -r docker inspect --format '{{.Name}} {{if .State.Health}}{{.State.Health.Status}}{{else}}no-healthcheck{{end}}'linux · macos · windows - Show Kubernetes node readiness and versions
kubectl get nodes -o widelinux · macos · windows - Describe a Kubernetes Pod and its recent events
kubectl -n {{namespace}} describe pod {{pod}}linux · macos · windows - Read logs from the previous Pod container instance
kubectl -n {{namespace}} logs {{pod}} --previous --tail=100linux · macos · windows - Show Helm release status and resources
helm -n {{namespace}} status {{release}}linux · macos · windows - Show Helm release revision history
helm -n {{namespace}} history {{release}}linux · macos · windows - Render a Helm chart locally for inspection
helm template {{release}} ./chart -n {{namespace}} | head -40linux · macos · windows - Validate Terraform configuration files
terraform validatelinux · macos · windows - Show Terraform provider requirements
terraform providerslinux · macos · windows - List resources tracked in Terraform state
terraform state list | head -30linux · macos · windows - Render the resolved Ansible inventory graph
ansible-inventory -i {{inventory}} --graphlinux - Check an Ansible playbook's syntax
ansible-playbook -i {{inventory}} playbook.yml --syntax-checklinux - List Ansible playbook tasks and tags
ansible-playbook -i {{inventory}} playbook.yml --list-tasks --list-tagslinux
Version Control21
- Print the latest Git commit in one compact line
git log -1 --onelinelinux · macos · windows - Show concise branch and working-tree status
git status --short --branchlinux · macos · windows - Draw a compact graph of all Git branches
git log --oneline --graph --decorate --alllinux · macos · windows - Summarize changed files and line counts in Git
git diff --statlinux · macos · windows - List branches ordered by their latest commit
git branch --sort=-committerdatelinux · macos · windows - Preview untracked files Git would remove
git clean -ndlinux · macos · windows - Discard uncommitted changes in one file
git restore {{file}}linux · macos · windows - List branches already merged into the current branch
git branch --mergedlinux · macos · windows - Show Git remotes and their URLs
git remote -vlinux · macos · windows - List saved Git stashes
git stash listlinux · macos · windows - Rank repository contributors by commit count
git shortlog -sne --all | sort -nr | head -{{count}}linux · macos · windows - Rank files by how often they changed in Git history
git log --pretty=format: --name-only --diff-filter=ACMRT | sed '/^$/d' | sort | uniq -c | sort -nr | head -{{count}}linux · macos - Search every Git revision for a text pattern
git grep -n {{pattern}} $(git rev-list --all)linux · macos - Build compact release notes between two Git tags
git log {{fromTag}}..{{toTag}} --no-merges --pretty=format:'- %s (%h, %an)'linux · macos · windows - Show local commits that have not reached the upstream branch
git log --oneline --decorate @{upstream}..HEADlinux · macos · windows - Find the largest objects stored in a Git repository
git verify-pack -v .git/objects/pack/*.idx | sort -k3 -nr | head -{{count}} | while read object type size rest; do echo "$size $object $(git rev-list --objects --all | rg "^$object ")"; donelinux · macos - List unique contributors between two release tags
git log {{fromTag}}..{{toTag}} --format='%aN <%aE>' | sort -fulinux · macos - List recent failed GitHub Actions runs with URLs
gh run list --status failure --limit {{count}} --json workflowName,headBranch,conclusion,createdAt,url --jq '.[] | [.createdAt,.workflowName,.headBranch,.conclusion,.url] | @tsv'linux · macos · windows - List Git worktrees with branch details
git worktree list --porcelainlinux · macos · windows - Show recent Git reference movements
git reflog --date=iso -15linux · macos · windows - Summarize Git object database size
git count-objects -vHlinux · macos · windows
Mail Services50
- List all messages currently in the Exim mail queue
exim -bplinux - Inspect the headers of a queued Exim message
exim -Mvh {{messageId}}linux - Inspect the body of a queued Exim message
exim -Mvb {{messageId}}linux - List the Postfix mail queue
postqueue -plinux - Show the current system mail queue
mailqlinux - Follow the Exim service log
journalctl -u exim4 -flinux - Count messages currently in the Exim queue
exim -bpclinux - List frozen Exim message identifiers
exiqgrep -z -ilinux - Force an immediate delivery attempt for one Exim message
exim -M {{messageId}}linux - Request immediate delivery of queued Postfix mail
postqueue -flinux - Find all Exim messages sent from an email address
awk -v sender={{sender}} '$4=="<=" && $5==sender' {{logFile}}linux - Find all Exim delivery events sent to an email address
awk -v recipient={{recipient}} '($4=="=>" || $4=="==" || $4=="**") && $5==recipient' {{logFile}}linux - Find Exim messages sent from one address to another
awk -v sender={{sender}} -v recipient={{recipient}} '$4=="<=" && $5==sender {seen[$3]=1} ($4=="=>" || $4=="==" || $4=="**") && $5==recipient && seen[$3] {print}' {{logFile}}linux - Show the complete Exim log trace for a message ID
exigrep {{messageId}} {{logFile}}linux - Find all Postfix messages sent from an email address
awk -v sender={{sender}} 'index($0, "from=<" sender ">")' {{logFile}}linux - Find all Postfix deliveries sent to an email address
awk -v recipient={{recipient}} 'index($0, "to=<" recipient ">")' {{logFile}}linux - Find Postfix messages sent from one address to another
awk -v sender={{sender}} -v recipient={{recipient}} 'index($0,"from=<" sender ">"){id=$6; sub(/:$/,"",id); seen[id]=1} index($0,"to=<" recipient ">"){id=$6; sub(/:$/,"",id); if(seen[id]) print}' {{logFile}}linux - Show every Postfix log line for a queue ID
grep -F {{queueId}} {{logFile}}linux - List users currently connected to Dovecot
doveadm wholinux - Show active Dovecot sessions for one user
doveadm who {{user}}linux - Show recent errors reported by the running Dovecot server
doveadm log errorslinux - Find every log destination used by Dovecot
doveadm log findlinux - Inspect Dovecot user database fields for an account
doveadm user {{user}}linux - Count queued Exim recipients by destination domain
exim -bp | exiqsumm | sort -nrk 1,1 | head -20linux - List frozen Exim messages older than one day
exiqgrep -z -o 86400 -ilinux - Trace Exim address routing without sending mail
exim -bt user@example.comlinux - Export the Postfix queue as JSON lines
postqueue -j | head -5linux - Count Postfix queue entries by queue name
postqueue -j | jq -r '.queue_name' | sort | uniq -c | sort -nrlinux - Show non-default Postfix configuration
postconf -nlinux - List authenticated Dovecot sessions
doveadm wholinux - Inspect Dovecot user database fields
doveadm user user@example.comlinux - Show Dovecot mailbox status for a user
doveadm mailbox status -u user@example.com 'messages unseen recent vsize' INBOXlinux - List queued Exim message IDs from one sender
exiqgrep -f {{senderRegex}} -ilinux - List queued Exim message IDs for one recipient
exiqgrep -r {{recipientRegex}} -ilinux - List Exim message IDs queued for more than one day
exiqgrep -o {{seconds}} -ilinux - List non-frozen Exim message IDs
exiqgrep -x -ilinux - Print one effective Exim configuration option
exim -bP {{option}}linux - Show the Exim retry rule selected for an address or domain
exim -brt {{address}}linux - List effective Postfix master.cf services
postconf -Mlinux - Show the default value of one Postfix parameter
postconf -d {{parameter}}linux - Print only the effective value of one Postfix parameter
postconf -h {{parameter}}linux - Query a Postfix lookup table without modifying it
postmap -q {{key}} {{map}}linux - Place one Postfix queued message on hold
postsuper -h {{queueId}}linux - Release one held Postfix message
postsuper -H {{queueId}}linux - Print Dovecot settings changed from their defaults
dovecot -nlinux - Show Dovecot service process and capacity status
doveadm service statuslinux - Inspect Dovecot authentication fields for one user
doveadm auth lookup {{user}}linux - Summarize messages, unseen mail, and size for every mailbox
doveadm mailbox status -u {{user}} 'messages unseen vsize' '*'linux - Show current Dovecot quota usage for one user
doveadm quota get -u {{user}}linux - Dump current Dovecot server metrics
doveadm stats dumplinux