Linux command reference
687 commands — synopsis, the flags that matter and real examples for each.
Create, extract, and manage 7z archives with high compression ratios.
Generate an AppArmor security profile for an application by monitoring its behavior.
Interactive tool to update AppArmor security profiles based on system audit logs.
Display the current AppArmor security profile status and loaded policy information.
Convert program addresses to source file names and line numbers.
Encrypt and decrypt files or streams using the age encryption format with simple, modern cryptography.
Advanced Intrusion Detection Environment (AIDE) checks file integrity by comparing current file attributes against a previously generated database.
Alacritty is a GPU-accelerated terminal emulator written in Rust, designed for speed and simplicity.
Alertmanager handles alerts sent by client applications and manages their deduplication, grouping, and routing to receivers like email, PagerDuty, and Slack.
Create or display shell aliases, which are custom shortcuts for commands.
Command-line tool for managing and querying Alertmanager alerts and silence rules.
Run ad hoc commands and playbooks across remote hosts using SSH without requiring agents.
Execute Ansible playbooks to automate infrastructure configuration and orchestration across multiple hosts.
Encrypt and decrypt sensitive data in Ansible playbooks and variable files.
Play audio files or streams on a Linux sound card using ALSA.
Search the manual page names and descriptions for a keyword.
Command-line interface for managing Debian packages; install, update, remove, and search for software.
Query the APT package cache for package information and dependencies.
apt-get is the command-line tool for managing packages in Debian-based Linux distributions.
Mark or unmark packages as automatically or manually installed, or hold them from upgrades.
Record audio from the sound card to a file using ALSA.
ArgoCd is a declarative, GitOps continuous delivery tool for Kubernetes that automates application deployment from Git repositories.
aria2c is a lightweight multi-protocol download utility that supports HTTP, HTTPS, FTP, BitTorrent, and Metalink with parallel connections and resumable downloads.
Display and manipulate the system ARP cache, mapping IP addresses to MAC addresses on the local network.
Record and share terminal sessions as animated text files.
asdf is a version manager that lets you install and switch between multiple versions of programming languages and tools.
atop is a system monitor for Linux that displays real-time per-process and system-wide resource usage including CPU, memory, disk I/O, and network activity.
Atuin is a magical shell history search tool that syncs, backs up, and intelligently searches your command history across machines.
Generate SELinux policy allow rules from audit logs of denied access attempts.
Configure and manage the Linux audit daemon to log system calls and file access for security monitoring.
Generates audit framework reports from the Linux audit logs.
Search the audit log for events matching specified criteria.
Automatically scales CPU frequency and power management based on system load and battery status.
Generates a shell script that automatically configures software source code packages.
Copy or symlink the GNU gettext infrastructure files into a package source tree to enable internationalization support.
Automatically update GNU Autotools configuration scripts by re-running autoconf, automake, and related tools in the correct order.
Automatically restart SSH sessions and tunnels when they drop.
Browse for mDNS/DNS-SD services available on the local network.
awk is a text processing language that scans files line-by-line, splits records into fields, and performs pattern-action operations.
AWS Command Line Interface for managing Amazon Web Services resources from the terminal.
The Azure CLI command-line interface for managing Azure cloud resources and services.
Search a device for bad blocks and optionally mark them as unusable.
A cat clone with syntax highlighting, line numbers, and git integration for viewing file contents.
Beets is a music library manager and tagger that organizes your music collection automatically.
Resume a suspended job in the background.
BIND 9 is a DNS server and resolver that translates domain names to IP addresses on the Internet.
Format Python code automatically to a consistent style following PEP 8 conventions.
Locate and identify block devices and their attributes like UUID, filesystem type, and labels.
bmon is a portable bandwidth monitor and rate estimator that shows real-time network interface statistics.
Manage the EFI boot loader and boot environment on systemd-boot systems.
Borg Backup is a deduplicating backup program that creates space-efficient, encrypted backups with a focus on security and performance.
A cross-platform graphical process/system monitor with an intuitive terminal UI showing CPU, memory, disks, networks, and processes.
Inspect and manage eBPF programs and maps on the Linux kernel.
bpftrace is a high-level tracing language for dynamic instrumentation of the Linux kernel and applications using eBPF.
btm (Bottom) is a cross-platform system monitor written in Rust that displays CPU, memory, disk, and network usage in an interactive terminal UI.
btop is a modern, interactive system monitor displaying CPU, memory, disk, and network usage with a colorful, user-friendly interface.
Manage Btrfs filesystems, volumes, and subvolumes with administrative and monitoring tools.
Build OCI container images using rootless or root commands without requiring a daemon.
Bun is a fast JavaScript runtime and package manager that serves as a drop-in replacement for Node.js and npm.
Introspect and interact with D-Bus message bus system and services.
Compress or decompress files using the Burrows-Wheeler block-sorting text compression algorithm.
Caddy is a powerful, enterprise-ready open source web server with automatic HTTPS.
Display a calendar for a specified month or year.
Command-line interface for managing Calico networking and security policies in Kubernetes clusters.
Display or work with POSIX capability sets for the current process or check capability support.
Cargo is Rust's package manager and build system for creating, testing, and distributing Rust projects.
Concatenate and print files to standard output.
Change the current working directory in the shell.
Automatically obtain, renew, and manage SSL/TLS certificates from Let's Encrypt.
Change the SELinux security context of files and directories.
Display practical examples and cheatsheets for command-line tools directly in your terminal.
chezmoi is a dotfile manager that securely manages your configuration files across multiple machines.
Change the group ownership of files or directories.
Scans the system for signs of rootkit infection and suspicious files.
Change file and directory permissions using symbolic or octal notation.
Change the owner and/or group of files or directories.
Run a command or interactive shell with a different root directory.
Run processes with a specified CPU scheduling class and priority, or change scheduling parameters of running processes.
Command-line tool for managing and debugging Cilium network policies and connectivity.
Scan files and directories for malware using the ClamAV antivirus engine.
Clang is a C/C++/Objective-C compiler frontend that uses LLVM as its backend, providing fast compilation and detailed diagnostics.
Clang C++ compiler that translates C++ source code into machine-executable binaries.
Command-line client for connecting to and querying a ClickHouse database server.
CMake is a cross-platform build system generator that creates platform-specific build files from CMakeLists.txt configuration files.
collectd is a daemon that collects system and application performance metrics and can store or forward them to various backends.
Format input into multiple columns with aligned text.
Compare two sorted files line by line and output unique and common lines.
conntrack is a userspace tool for querying and managing netfilter connection tracking state.
Consul is a distributed service mesh and service discovery tool that manages service registration, health checking, and network configuration across infrastructure.
containerd is a daemon that manages container lifecycle and image operations on Linux systems.
Retrieve and analyze core dump files from the systemd journal.
Sign and verify container images and artifacts using cryptographic signatures.
Display a message spoken by an ASCII art cow (or other animal).
Copy files and directories.
Fetch and display detailed CPU information including model, architecture, and performance details.
Display and modify CPU power-related settings and frequencies on Linux systems.
Crane is a tool for reading, writing, and manipulating container images without requiring a container runtime.
crictl is a command-line interface for interacting with container runtimes that implement the Kubernetes Container Runtime Interface (CRI).
Install, list, edit, or remove cron jobs for the current user.
cryptsetup manages LUKS encrypted volumes and dm-crypt device mappings on Linux.
Split a file into pieces based on context lines or line numbers.
A suite of command-line tools for converting, querying, and analyzing CSV files.
Top-like monitoring tool for container metrics and resource usage.
Transfer data from or to a server using URLs, supporting HTTP, HTTPS, FTP, and many other protocols.
Remove sections from each line of files or stdin.
dash is a POSIX-compliant shell designed for speed and minimal size, commonly used as /bin/sh on modern Linux systems.
Display or set the system date and time.
Copy and convert data at the block level, useful for disk imaging, cloning, and low-level data manipulation.
Build a Debian package from source, handling dependencies and package creation automatically.
Deno is a modern runtime for JavaScript and TypeScript with built-in security, formatting, and testing capabilities.
Report file system disk space usage.
Create Debian package templates for a new software project.
Compare two files line by line and show their differences.
Query DNS servers to look up domain names, IP addresses, and other DNS records.
direnv is an environment switcher for the shell that loads and unloads environment variables based on the current directory.
Print or control the kernel ring buffer messages.
Read and decode DMI (SMBIOS) system information from the BIOS.
DNF is a package manager for Linux systems that installs, updates, and removes software packages from configured repositories.
Generate the DNF package manager cache from repository metadata.
A lightweight DNS forwarder and DHCP server for small networks and embedded systems.
Manage Docker containers, images, networks, and volumes from the command line.
Build images with BuildKit, supporting multiple platforms, caching, and advanced container image creation.
Define and run multi-container Docker applications using a YAML configuration file.
doctl is the command-line interface for DigitalOcean's cloud platform, managing droplets, databases, Kubernetes clusters, and other cloud resources.
doggo is a modern DNS client for querying DNS records with colorized output and multiple output formats.
Display and validate Dovecot configuration settings.
Dovecot is an open-source IMAP and POP3 mail server that stores and retrieves emails for mail clients.
dpkg is the low-level package manager for Debian and Ubuntu systems, handling installation, removal, and management of .deb files.
Build a Debian package from source code in a directory tree.
Unpacks, examines, and manipulates Debian package archives (.deb files).
dracut generates a bootable initramfs image for the Linux kernel.
drill is a DNS lookup tool that performs DNS queries and displays results in a human-readable format, similar to dig but with a simpler output.
dstat is a versatile replacement for vmstat, iostat, netstat and ifstat that displays system resource statistics in real-time with customizable output.
Summarize disk usage of files and directories, showing how much space each one occupies.
duf is a disk usage analyzer that shows how much space directories and files consume in an easy-to-read format.
Duplicati is a backup client for encrypted, incremental backups to cloud storage and other destinations.
Duplicity backs up files encrypted and incremental to local or remote storage, supporting multiple backends.
dust is a user-friendly alternative to du that shows disk space usage in a visually intuitive way with ASCII trees and percentages.
Check and repair ext2/ext3/ext4 filesystems for consistency errors.
Display a line of text or variables to standard output.
Manipulate EFI boot entries and boot order on UEFI systems.
Elvish is an expressive programming language and shell for Linux and other Unix-like systems.
Emacs is a highly extensible and customizable text editor and computing environment.
Run a command in a modified environment or display environment variables.
Download and flash firmware to ESP8266 and ESP32 microcontrollers over serial or network.
Control plane for etcd, a distributed key-value store for managing cluster configuration and service discovery.
Display and change ethernet device settings including speed, duplex, autonegotiation, and driver statistics.
Read, write, and manipulate image metadata (EXIF, IPTC, XMP, and more).
exiv2 is a command-line utility and library for reading, writing, and manipulating EXIF, IPTC, and XMP metadata in image files.
Convert tabs to spaces in text files.
Set or display environment variables in the current shell and its child processes.
A modern replacement for ls that lists directory contents with colors, git integration, and better defaults.
Interact with the Fail2ban server to manage jails, view status, and configure bans.
Run a command in an environment where file ownership and permissions appear to be modified without actual root privileges.
Falco is a runtime security monitoring and detection engine that tracks system calls and kernel events to detect suspicious behavior and policy violations.
Automatically control fan speeds based on temperature readings from hwmon sensors.
fastfetch displays system information in a fast, visually appealing format with customizable output.
A fast alternative to find that searches for files and directories with simpler syntax and colorized output.
fdisk is a command-line utility for creating, deleting, and managing disk partitions on Linux systems.
Bring a background job to the foreground.
Display large ASCII art text banners in the terminal.
Figma is a web-based design and prototyping tool with a Linux desktop application for collaborative UI/UX design.
Determine file type by examining contents and metadata.
Search for files in a directory hierarchy matching specified criteria.
Control the firewalld daemon and manage firewall rules dynamically without restarting the service.
fish is a user-friendly interactive shell and command language with syntax highlighting, autosuggestions, and intelligent tab completion.
Build, install, and manage Flatpak applications and runtimes in isolated environments.
Manage file locks from the shell, allowing exclusive or shared access to files or file descriptors.
Fluent Bit is a lightweight log processor and forwarder that collects logs from various sources and sends them to multiple destinations.
Fluentd is an open-source data collector that unifies logging across multiple sources and destinations.
Flux is a container-native resource manager and job scheduler for HPC clusters and Kubernetes environments.
Command-line interface for Fly.io, managing applications, deployments, and infrastructure on the Fly platform.
fmt reformats text to a specified line length, wrapping paragraphs and removing extra whitespace.
fnm is a fast Node.js version manager that lets you install and switch between multiple Node.js versions without affecting system binaries.
A fast GPU-based terminal emulator written in C using Wayland and X11.
Display a random, often humorous quotation or saying from a database of fortunes.
fpm is a tool for building packages in multiple formats (deb, rpm, tar, etc.) from source code, directories, or other packages.
Display total, used, and free memory in the system.
Check and repair a Linux filesystem.
Discard unused blocks on mounted filesystems to optimize SSD performance and reclaim space.
Manage firmware updates for devices on your system.
A command-line JSON processor that uses JavaScript for querying, filtering, and transforming JSON data interactively.
A general-purpose command-line fuzzy finder that filters input interactively with a search interface.
GNU C++ compiler that compiles C++ source code into executables or object files.
GNU C compiler that translates C source code into executable programs or object files.
Google Cloud command-line interface for managing Google Cloud resources and services.
GNU Debugger — interactive debugging tool for inspecting and controlling program execution.
Display the current SELinux enforcement mode of the system.
Get entries from administrative databases (passwd, group, hosts, services, protocols, networks, etc.).
Display the capabilities of a running process.
Ghostty is a fast, native GPU-accelerated terminal emulator written in Zig with modern features and excellent performance.
A blazing fast terminal-based UI for Git written in Rust.
A cross-platform system monitoring tool that displays real-time CPU, memory, disk, and network statistics in a curses-based dashboard.
Render markdown files and stdin to the terminal with syntax highlighting and formatting.
GraphicsMagick is a collection of tools and libraries for reading, writing, and manipulating images in many formats.
GnuTLS client for testing TLS/SSL connections and debugging certificate issues.
Go is a compiled programming language designed for building fast, reliable, and efficient software.
Goss is a quick and easy server validation tool that checks system state against a YAML specification file.
Encrypt, decrypt, and sign files or data using the GNU Privacy Guard implementation of OpenPGP.
Encrypt, decrypt, and sign files or messages using GnuPG 2 with public-key cryptography.
gping is a ping utility with a real-time graphical display showing response times over time.
gPodder is a podcast client that downloads and manages RSS feeds from podcasts.
Display GPU utilization and memory usage for NVIDIA GPUs in a formatted table.
Command-line utility for managing Grafana server configuration, plugins, and authentication.
Search for lines matching a pattern in files or stdin.
Capture screenshots or record video on Wayland compositors.
Create a new group account on the system.
Grype is a vulnerability scanner for container images and filesystems that detects known security vulnerabilities in software dependencies.
gtop is a system monitoring dashboard that displays real-time CPU, memory, disk, and network usage in the terminal.
Decompress files compressed with gzip, restoring them to their original form.
Compress or decompress files using the DEFLATE algorithm.
Control Hetzner Cloud resources from the command line.
Get and set SATA/IDE device parameters and performance characteristics.
Output the first part of files.
Helix is a post-modern text editor written in Rust with built-in LSP support, tree-sitter syntax highlighting, and modal editing.
Helm is the package manager for Kubernetes that helps you define, install, and upgrade Kubernetes applications.
Display or manipulate the command history list in the current bash session.
Perform DNS lookups to find IP addresses or hostnames associated with a domain.
hostapd is a user-space daemon for access point and authentication server management on Linux.
Query and change the system hostname and other host settings.
Extract data from HTML using CSS selectors, similar to jq for JSON.
Display and interact with a real-time view of processes and system resource usage.
Command-line interface for interacting with Hugging Face Hub, managing models, datasets, and user authentication.
hwinfo displays detailed information about hardware components on a Linux system.
A post-mortem debugger for analyzing core dumps and examining process memory on Linux.
Control and query the Hyprland wayland compositor from the command line.
Print user and group IDs and names for the current user or a specified user.
Display bandwidth usage on an interface by socket connections in real-time.
ImageMagick is a suite of command-line tools for creating, editing, and converting images in batch or interactively.
inxi displays comprehensive system information including hardware, CPU, memory, storage, graphics, and network details in a human-readable format.
Report CPU and input/output statistics for devices and partitions.
Display I/O usage by process on the system, sorted by I/O bandwidth in real-time.
Show and manipulate routing, network devices, interfaces, and tunnels.
Show and manipulate IP addresses on network interfaces.
Show and manipulate network device properties and state.
Show and manipulate IP routing tables.
Manage IP routing policy rules that determine which routing table to use for packets.
Create, modify, and delete IP tunnel interfaces for encapsulating network traffic.
iperf3 measures network bandwidth and performance between two hosts using TCP, UDP, or SCTP protocols.
Manage IP sets – collections of IP addresses, networks, ports, or MAC addresses for use with netfilter firewall rules.
iptables is a command-line firewall utility for configuring Linux kernel netfilter packet filtering rules and network address translation (NAT).
istioctl is the command-line tool for managing and debugging Istio service mesh deployments.
Interactive wireless control tool for managing WiFi connections on iwd (Internet Wireless Daemon) systems.
iwd is a wireless daemon that manages Wi-Fi connections on Linux systems with a minimal, efficient design.
Connect two JACK audio ports together.
Jaeger is a distributed tracing platform for monitoring and troubleshooting microservices-based distributed systems.
Display status of jobs in the current shell session.
Joplin is a free, open-source note-taking and to-do application with synchronization and encryption capabilities.
Query and display messages from the systemd journal.
Parse, filter, and transform JSON data from the command line.
A handy way to save and run project-specific commands.
k3s is a lightweight Kubernetes distribution that bundles the entire Kubernetes control plane and worker components into a single binary with minimal dependencies.
A terminal UI and visual dashboard for managing Kubernetes clusters interactively.
Kak is a code editor that combines the elegance of Vi with the power of Kakoune's multiple selections and client-server architecture.
Kakoune is a modal text editor designed around the idea of selection-first, multiple-cursor editing.
Kanshi is a dynamic output configuration manager for Wayland compositors that automatically applies display profiles based on connected outputs.
kdig is a DNS lookup tool from KNOT DNS that performs DNS queries with advanced features and detailed output.
ISC Kea DHCPv4 server for assigning IPv4 addresses and network configuration to clients.
GNOME Console (kgx) is a simple terminal emulator for the GNOME desktop environment.
Send a signal to a process, typically to terminate it.
Send a signal to all processes matching a given name.
kind is a tool for running local Kubernetes clusters using Docker containers as cluster nodes.
kitty is a fast, feature-rich GPU-based terminal emulator written in C and Python.
Load and unload Linux kernel modules with a unified interface for modprobe, insmod, rmmod, and lsmod functionality.
Kompose translates Docker Compose files into Kubernetes manifests.
Kopia is a fast, secure, and efficient backup and restore tool that deduplicates data and supports multiple storage backends.
Create device mappings for partitions on a loop device or disk image.
krew is a package manager for kubectl plugins that helps discover, install, and manage kubectl extensions.
kube-proxy is a network proxy that runs on each Kubernetes node to maintain network rules for service abstraction and load balancing.
Bootstrap a Kubernetes cluster with kubeadm, a tool for initializing and managing cluster control planes and worker nodes.
kubectl is the command-line interface for controlling Kubernetes clusters and managing containerized applications.
kubelet is the primary agent that runs on each Kubernetes node to manage pods and ensure containers are running in desired state.
Kustomize lets you customize Kubernetes object configurations without modifying the original YAML files.
Show a listing of last logins and logouts on the system.
Control and manage lazy.nvim, the Neovim plugin manager.
A simple terminal UI for managing Docker containers, images, and volumes with keyboard navigation.
A simple terminal UI for git commands, providing an interactive interface for staging, committing, branching, and other git operations.
Configure dynamic linker run-time bindings and maintain the dynamic linker cache.
Print the shared object dependencies of ELF binaries and libraries.
A pager program that displays file contents one screen at a time, allowing backward and forward navigation.
Prepare a package to use libtool by adding necessary build files and macros.
Linkerd is a service mesh that adds observability, reliability, and security to Kubernetes clusters without requiring application code changes.
lintian checks Debian packages for compliance with policy and common mistakes.
A command-line interface for SQLite databases with syntax highlighting, completion, and history.
Command-line interface for running Large Language Models locally using llama.cpp.
Start an inference server for Large Language Models using llama.cpp with HTTP API endpoints.
LLDB is a next-generation debugger that debugs programs, attaches to running processes, and inspects core dumps.
Create links between files, allowing the same file to be accessed by different names or paths.
Control the system locale and keyboard layout settings.
Find files by name using a pre-built database of the filesystem.
Control the systemd login manager to inspect and manage user logins, sessions, and seats.
Rotates, compresses, and removes old log files based on rules configured in /etc/logrotate.conf and /etc/logrotate.d/.
Loki is a log aggregation system designed to store and query logs from Kubernetes clusters and other sources efficiently.
lolcat displays text in rainbow colors with optional animation effects.
Display lines beginning with a given string, using binary search on a sorted file.
List directory contents and file information.
List all block devices and their mount points in a tree or list format.
Display information about the CPU architecture and details from /proc/cpuinfo.
List detailed hardware information about the system including CPU, memory, disks, network devices, and more.
Display the status of modules in the Linux kernel.
List all namespaces on the system with their type, PID, and parent namespace information.
List open files and the processes that opened them.
List all PCI devices on the system with vendor and device information.
List SCSI devices and associated block devices on the system.
List all USB devices connected to the system with their vendor and product IDs.
Trace library calls made by a program and display their arguments and return values.
Create a logical volume in an LVM volume group.
Extend the size of a logical volume on a Linux LVM system.
Remove a logical volume from a volume group.
Display information about logical volumes in a volume group.
Scan all disks for Logical Volume Manager (LVM) physical volumes and report the status of logical volumes.
Lynis is a security and configuration auditing tool for Linux/Unix systems that scans for vulnerabilities, misconfigurations, and compliance issues.
LZ4 is an extremely fast lossless compression algorithm and command-line tool for compressing and decompressing files.
lzop compresses or decompresses files using the LZO algorithm for fast compression/decompression.
Control the systemd machine registry and manage virtual machines and containers.
ImageMagick's primary command-line tool for reading, converting, and manipulating images in over 200 formats.
Send and receive email messages from the command line.
Display the mail queue of pending messages waiting to be delivered.
Send and receive email messages from the command line.
Build packages from source using a PKGBUILD recipe in Arch Linux.
Mako is a lightweight templating engine for Python that generates text output from templates with embedded Python logic.
Display manual pages for Linux commands, system calls, and file formats.
MariaDB Galera Cluster server with multi-master synchronous replication for high availability and load distribution.
masscan is an asynchronous TCP port scanner designed to scan the entire Internet quickly.
Midnight Commander is a visual file manager and shell for Unix-like systems with a Norton Commander-style interface.
Create, manage, and monitor Linux software RAID arrays.
mdcat renders Markdown files in the terminal with syntax highlighting and formatting.
Meson is a modern build system designed to be fast, user-friendly, and language-agnostic for compiling software projects.
A modern, intuitive terminal-based text editor with mouse support and built-in plugins.
View or manipulate media-independent interface status and configuration for Ethernet devices.
minicom is a menu-driven communication program for interacting with serial devices and modems.
minikube is a tool that runs a single-node Kubernetes cluster locally for development and testing.
Mise is a polyglot runtime version manager that installs and manages multiple language runtimes and tools from a single configuration file.
mkcert is a simple tool for making locally-trusted development certificates with no configuration.
Create one or more directories.
Create a filesystem on a block device or partition.
Create a Btrfs filesystem on one or more block devices.
Create an ext4 filesystem on a device or partition.
Create an XFS filesystem on a device or partition.
Create an initial ramdisk (initramfs) image for the Linux kernel.
Miller is a command-line tool for querying, transforming, and reformatting data in CSV, JSON, TSV, and other formats.
Build RPM packages in isolated chroot environments to ensure clean, reproducible builds without affecting the host system.
Load or remove Linux kernel modules with automatic dependency resolution.
Manage UEFI Secure Boot keys and Machine Owner Key (MOK) settings.
Interactive MongoDB shell for connecting to MongoDB servers and executing database operations.
Export data from a MongoDB instance to BSON or JSON format for backup or migration purposes.
Restore a MongoDB database from a dump created by mongodump.
Interactive MongoDB shell for connecting to and querying MongoDB databases.
Display text files one screen at a time with pagination.
Mobile Shell provides a responsive remote terminal connection that survives network changes and roaming.
Publish a message to an MQTT broker using the Mosquitto client.
Subscribe to MQTT topics and receive published messages from a Mosquitto broker.
Attach a filesystem or storage device to the directory tree so its contents become accessible.
Control the Music Player Daemon (mpd) from the command line.
Music Player Daemon (MPD) is a flexible, powerful server-side application for playing audio files and managing music libraries.
Report processor-related statistics and monitor CPU performance in real-time.
A command-line interface for interacting with MQTT brokers, allowing publish/subscribe operations and broker management.
Combines traceroute and ping functionality to diagnose network paths and measure latency to a destination host.
mutt is a text-based email client for reading, composing, and managing email from the command line.
Move or rename files and directories.
A terminal-based MySQL client with syntax highlighting, auto-completion, and smart suggestions.
Static type checker for Python that finds bugs by analyzing code without running it.
MySQL command-line client for connecting to and interacting with MySQL databases.
mysqlcheck checks, repairs, optimizes, and analyzes MySQL tables.
mysqldump creates logical backups of MySQL databases by generating SQL statements to recreate tables and data.
namcap analyzes Arch Linux packages for common packaging mistakes and policy violations.
Check the syntax and validity of a BIND named configuration file.
Check the syntax and validity of a DNS zone file.
nano is a simple, user-friendly terminal text editor for creating and editing files.
Read and write data across network connections using TCP or UDP.
ncmpcpp is a featureful ncurses-based client for Music Player Daemon (MPD) with a playlist browser and search capabilities.
neofetch displays system information and ASCII art logo in the terminal.
nerdctl is a Docker-compatible CLI for containerd, providing a user-friendly interface for managing containers and images.
Display network traffic usage by process in real-time.
Display network connections, routing tables, interface statistics, masquerade connections, and multicast memberships.
Query and control the state of the systemd network manager.
nft is the command-line tool for configuring the netfilter packet filtering framework using the nftables ruleset language.
Network grep: search for and display packets matching a pattern on a network interface.
Run a command with a modified CPU scheduling priority.
A small build system with a focus on speed, designed to drive compilation of large projects.
Number the lines of files, outputting them with line numbers prepended.
List symbols from object files and executables, showing their addresses, sizes, and types.
nmap is a network mapper that scans hosts and ports to discover network topology, open services, and potential security weaknesses.
NetworkManager command-line interface for controlling network connections and devices.
nnn is a terminal file manager that navigates directories and manages files with a keyboard-centric interface.
Run a command immune to hangups, with output redirected to a file.
Nomad is a flexible workload orchestrator that deploys and manages containers, VMs, and batch jobs across on-premise and cloud infrastructure.
Run a program in a namespace context by entering the namespaces of another process.
Query DNS servers to resolve hostnames or IP addresses.
Nushell is a modern shell and command language with structured data pipelines and a focus on usability.
Convert numbers to or from human-readable formats (e.g., 1K, 2M, 3G).
Neovim is a highly extensible text editor built on Vim principles with modern features like async I/O, built-in LSP support, and Lua scripting.
Node Version Manager (nvm) allows you to install and switch between multiple versions of Node.js and npm.
Interact with NVMe (Non-Volatile Memory Express) solid-state drives and manage their settings.
Monitor GPU usage and temperature in the terminal with an interactive top-like interface.
Display information from object files such as symbols, sections, disassembly, and headers.
The Oil shell is a modern Unix shell that improves upon bash with better syntax, error handling, and performance.
Ollama is a command-line tool to run large language models locally on your machine.
OpenDKIM is a milter-based implementation of DKIM (DomainKeys Identified Mail) signing and verification for sendmail and other mail transfer agents.
Test DKIM keys and configuration for OpenDKIM to verify they are properly set up and functional.
OpenSSL is a toolkit for working with SSL/TLS certificates, cryptographic operations, and secure communications.
Generate RSA private keys for cryptographic operations.
Create and process certificate requests (PKCS#10 format) for X.509 certificates.
OpenSSL TLS/SSL client for testing and debugging SSL/TLS connections to remote servers.
Display and sign X.509 certificates, including extracting fields, converting formats, and validating certificate chains.
Push and pull OCI artifacts (container images, charts, signatures) to and from OCI-compliant registries.
Query the state of your Linux system using SQL-like syntax; part of the osquery ecosystem for systems monitoring and incident response.
Interactive query tool for osquery that lets you write SQL queries to inspect system state and security events.
OpenTelemetry Collector is a vendor-agnostic agent that receives, processes, and exports telemetry data from applications and infrastructure.
p7zip is a command-line file archiver that compresses and extracts 7z format archives with high compression ratios.
pacman is the package manager for Arch Linux and Arch-based distributions, handling installation, removal, and updates of software packages.
Interact with the PulseAudio sound server daemon to query and change its configuration.
Control the PulseAudio sound server and manage audio devices, sinks, sources, and streams.
Pandoc converts documents between different markup and word processing formats.
Create, resize, and manage disk partitions interactively or via command line.
Inform the operating system kernel of partition table changes without rebooting.
pass is a simple password manager that stores passwords encrypted with GPG in a directory hierarchy on disk.
Change user password or password-related information.
Merge lines of files side-by-side, combining corresponding lines with a delimiter.
Apply a unified diff patch file to one or more source files.
Personal builder: constructs Debian packages in a clean chroot environment to verify build dependencies and package integrity.
Compress or decompress files in parallel using the bzip2 algorithm.
Performance Co-Pilot - a system performance monitoring and analysis framework.
Analyze CPU performance, trace system events, and profile running processes.
Take a base backup of a PostgreSQL cluster without connecting to the database server.
Extract a PostgreSQL database into a script file or archive.
Check the connection status of a PostgreSQL server.
Restore a PostgreSQL database from an archive file created by pg_dump.
pgbench is a simple program for running benchmark tests against a PostgreSQL database.
A command-line interface for PostgreSQL with auto-completion and syntax highlighting.
Search for processes by name and print their process IDs.
PHP command-line interface for executing PHP scripts and running an interactive shell.
PHP FastCGI Process Manager (FPM) - a high-performance process manager for PHP scripts.
Pi-hole is a network-wide DNS sinkhole and ad blocker that runs on Linux to block ads and malware domains.
A minimal dumb-terminal emulator and serial port communication program.
Report per-process CPU, memory, I/O, and context switch statistics.
pigz is a parallel implementation of gzip that compresses files using multiple processors for faster compression and decompression.
Send ICMP ECHO_REQUEST packets to network hosts to check connectivity and measure latency.
Display GPIO pinout information for Raspberry Pi and other single-board computers.
PlatformIO is a cross-platform, open-source ecosystem for IoT development with support for embedded boards, microcontrollers, and FPGA platforms.
pip is the package installer for Python, used to install and manage Python packages from PyPI and other indexes.
pipx installs and runs Python applications in isolated virtual environments.
pkg-config is a helper tool used when compiling applications and libraries to find installed packages, obtain their compiler and linker flags, and check package versions.
Query information about installed libraries and their compile/link flags.
Send signals to processes by name or other attributes instead of by process ID.
PlatformIO is a cross-platform, open-source build system and IDE for embedded systems and IoT development.
Display the memory map of a process, showing virtual memory layout and memory usage per mapping.
Fast, disk space efficient package manager for JavaScript and Node.js projects that uses a content-addressable filesystem to store dependencies.
Podman is a tool for managing containers and container images using Open Container Initiative (OCI) standards, providing a Docker-compatible command interface.
Poetry is a Python dependency manager and packaging tool that simplifies project setup, dependency resolution, and package distribution.
Display or set configuration parameters for the Postfix mail server.
Postfix mail server control and management command for starting, stopping, and monitoring the mail system.
List, flush, or manage the Postfix mail queue.
Postfix superintendent utility for managing the queue and configuration.
Monitor and analyze power consumption on Linux systems, identifying power-hungry processes and suggesting optimizations.
Format text files for printing with pagination, headers, footers, and multi-column layouts.
Format and print text using a template string with variable substitution.
Get and set process resource limits.
A modern replacement for ps that lists running processes with a more readable and user-friendly output format.
Prometheus is a time-series database and monitoring system that collects metrics from applications and infrastructure.
Promtail is a log collector agent that ships logs to Loki for storage and querying.
Validate and test Prometheus configuration files, rules, and alert templates.
Display information about running processes.
psql is an interactive terminal for PostgreSQL that lets you execute SQL queries and manage databases.
Display a tree of processes showing parent-child relationships.
Pulumi is an infrastructure as code platform for building, deploying, and managing cloud resources using programming languages.
Initialize a physical volume for use with LVM (Logical Volume Manager).
Display information about physical volumes in LVM.
List all physical volumes visible to the system, optionally discovering new ones.
Display or concatenate PipeWire graph objects and their properties.
Command-line interface for managing PipeWire audio and video streams, devices, and configuration.
Create connections between PipeWire ports to route audio and video between applications.
Create virtual loopback audio devices for PipeWire to route audio between applications.
Play audio files or streams using PipeWire audio server.
Record audio from PipeWire sources to a file.
Print the full pathname of the current working directory.
pyenv manages multiple Python versions on a single system, allowing you to switch between them per-project or globally.
A command-line tool to encrypt and decrypt files using age, a simple, modern, and secure file encryption format.
Railway is a command-line tool for deploying and managing applications on the Railway platform.
A terminal file manager with VI key bindings and a column view showing file hierarchy and preview pane.
Interactive configuration tool for Raspberry Pi system settings.
rbenv is a version manager for Ruby that lets you install, switch between, and manage multiple Ruby versions per project or globally.
Rclone is a command-line program to sync files and directories to and from cloud storage services.
A graphical browser interface for managing files on cloud storage services via rclone.
Display information about ELF object files, including headers, sections, symbols, and relocations.
redis-benchmark is a utility to measure Redis server performance by running load tests with configurable parameters.
Command-line interface for interacting with Redis servers and executing Redis commands.
Alter the scheduling priority of running processes.
Resize an ext2, ext3, or ext4 filesystem to a new size.
Resolve hostnames, IP addresses, resource records, and services using systemd-resolved.
A fast, secure, and efficient backup program that stores encrypted backups in local or remote repositories.
Restore SELinux security context for files and directories.
Reverse lines characterwise.
Show and control wireless device power states (WiFi, Bluetooth, cellular).
A fast, line-oriented search tool that recursively searches directories for a regex pattern, similar to grep but with sensible defaults and better performance.
Control Rhythmbox music player from the command line or send files to play.
rkhunter is a rootkit and malware scanner that searches for hidden processes, backdoors, and suspicious files on Linux systems.
Remove files or directories.
Remove empty directories from the filesystem.
Controls operation of a BIND DNS server by sending commands to the rndc socket.
Update the Raspberry Pi firmware to the latest version from the official repository.
Query, install, update, and manage RPM package files on Red Hat-based Linux systems.
Build RPM packages from source code and spec files.
Manage GPG keys used for RPM package signature verification.
rsnapshot is a filesystem snapshot utility that creates incremental backups of entire directories using rsync and hard links.
rspamd is a fast and modular spam filtering system that uses machine learning and rule-based detection to classify emails.
rsync is a fast, versatile file synchronization tool that efficiently transfers and synchronizes files between local and remote systems.
rsyslog is a system logging daemon that receives, processes, and forwards system messages according to configurable rules.
rtx is a polyglot runtime manager that installs and manages multiple programming language versions and tools.
A fast Python linter and code formatter written in Rust that checks code for style, logic errors, and security issues.
A CLI tool for spawning and running containers according to the OCI Runtime Specification.
rustup is the Rust toolchain installer and version manager for managing multiple Rust versions and targets.
Rye is an experimental, all-in-one Python project manager that handles virtual environments, dependencies, and packaging.
Collect, report, and save system activity information including CPU, memory, disk I/O, and network statistics.
Build Debian packages in a clean chroot environment using schroot.
Manipulate process CPU affinity and scheduling parameters on Linux.
Securely copy files between hosts using SSH protocol.
Display system information and ASCII art logo in the terminal.
Display keys pressed on screen in real-time, useful for presentations and screencasts.
A modern, user-friendly replacement for sed that finds and replaces text with regex support and intuitive syntax.
Access and modify SCSI device parameters and VPD pages.
Analyze and display SELinux policy violation alerts from the audit log.
sed is a stream editor that performs text transformations on input using regular expressions and editing commands.
Manage SELinux policy components including users, roles, types, and file contexts.
Display temperature, voltage, and fan speed readings from hardware sensors.
Detect hardware monitoring chips and generate a configuration file for lm-sensors.
serverspec is a Ruby-based framework for testing and validating server infrastructure configuration and state.
Run a System V init script or manage systemd services for system daemons.
Set the current SELinux enforcement mode (Enforcing, Permissive, or Disabled).
A scriptable disk partition editor for creating, modifying, and deleting disk partitions.
Interactive secure file transfer program using SSH.
ShellCheck is a static analysis tool that finds bugs and potential issues in shell scripts.
shfmt formats shell script files according to a consistent style.
Securely overwrite files to make them unrecoverable before deletion.
Generate random permutations of input lines or numbers.
Inspect and manipulate container images and image repositories.
Display a steam locomotive animation on the terminal when you mistype 'ls'.
Display kernel slab cache statistics in real-time, showing memory usage of kernel objects.
Delay for a specified amount of time.
Read entire input into a JSON array.
Display or set SMART (Self-Monitoring, Analysis and Reporting Technology) attributes and thresholds on storage devices.
Install, manage, and control snap packages on Linux systems.
snapper is a command-line tool for creating and managing LVM snapshots and Btrfs subvolume snapshots for system backup and recovery.
snapraid is a backup program that stores redundancy information and can recover corrupted files from disk failures without requiring a full backup copy.
socat is a relay for bidirectional data transfer between two independent data channels.
sops is a simple tool for managing secrets in YAML, JSON, ENV, INI and BINARY files using encryption.
Sort lines of text files in ascending or descending order based on specified keys and options.
SpamAssassin is a mail filter that uses various techniques to identify and score spam messages.
Split a file into smaller pieces by lines, bytes, or patterns.
Spot is a command-line tool for finding and analyzing duplicated content across files and directories.
Launch Spotify desktop application from the command line with optional arguments.
Interactive command-line interface for SQLite databases.
Display socket statistics and network connection information, replacing the deprecated netstat command.
OpenSSH remote login client for securely connecting to remote systems over the network.
Add private key identities to the SSH authentication agent.
ssh-agent is a program that holds private SSH keys in memory and provides them to SSH clients when needed, eliminating the need to type passphrases repeatedly.
Install your public SSH key on a remote machine to enable password-less authentication.
Generate, manage, and convert SSH public and private key pairs for authentication.
Mount a remote filesystem over SSH using FUSE.
Starship is a minimal, blazing-fast, and infinitely customizable shell prompt written in Rust.
Display detailed file and filesystem information including permissions, ownership, timestamps, and inode data.
Stow is a symlink farm manager that deploys software packages into a target directory by creating symbolic links to files in package directories.
Trace system calls and signals made by a process to diagnose problems and understand program behavior.
Synchronize files and directories between local and remote systems using the Secure Technology Stack protocol.
Switch to another user account, or become the superuser (root).
Execute a command as another user, typically the superuser (root), with privilege escalation.
Run a login shell as root or another user with a complete environment.
Set the desktop background image for Wayland compositors running Sway.
Idle management daemon for Wayland compositors that runs commands after a period of inactivity.
swayimg is a lightweight image viewer for Wayland/Sway with keyboard-driven navigation and minimal dependencies.
Screen locker for Wayland compositors that turns the screen off after a timeout.
Send messages to a running Sway window manager instance and receive responses.
SwayNC is a GTK notification daemon and control center for Sway and other Wayland compositors.
Syft generates a software bill of materials (SBOM) from container images and filesystems to identify all software components.
Syncthing is a continuous file synchronization program that syncs files between devices over the network securely and efficiently.
View and modify kernel parameters at runtime without reboot.
Control the systemd system and service manager.
Analyze systemd boot performance and service dependencies.
Recursively show the contents of Linux control group hierarchies and their resource limits.
Show top control groups by their resource usage (CPU, memory, I/O).
Establish and manage temporary mount points for filesystems.
Spawn and manage lightweight containers with systemd, providing process and resource isolation.
Resolve domain names, IPv4/IPv6 addresses, and DNS records using systemd's resolver service.
Run a program in a new systemd unit, useful for setting resource limits, cgroups, and tracking processes.
Create, delete, and clean up temporary files and directories according to systemd tmpfiles.d configuration files.
Display the last part of files, useful for viewing log files and monitoring output in real time.
Create, extract, and manage tape archive files for backing up or distributing groups of files.
task is a command-line task management tool for organizing, tracking, and managing to-do items and projects.
Retrieve or set the CPU affinity (processor mask) of running processes.
Capture and display network packets in real-time or save them to a file for analysis.
Kill TCP connections by dropping packets matching a specified pattern.
Read from standard input and write to standard output and files simultaneously.
Telegraf is a plugin-driven server agent for collecting and reporting metrics from systems, applications, and services.
tempo is a command-line tool for managing and playing back music files with tempo adjustment capabilities.
Terraform is an infrastructure-as-code tool that provisions and manages cloud resources declaratively across multiple providers.
Tilix is a tiling terminal emulator for Linux that supports splitting panes, tabs, and session management.
Run a program and report how long it takes, plus resource usage.
Query and change the system time and date settings, timezone, and NTP synchronization status.
Run a command with a time limit, killing it if it exceeds the specified duration.
Timeshift is a system restore utility that creates incremental filesystem snapshots using rsync or BTRFS, allowing you to roll back your system to a previous state.
Display simple, practical examples for command-line tools from the tldr community.
TLP is a power management tool that optimizes battery life and thermal performance on Linux laptops.
Display detailed power management and battery statistics from the TLP power management daemon.
OpenTofu is an infrastructure as code tool for building, changing, and versioning infrastructure safely and efficiently.
Display and update sorted information about the most CPU and memory intensive processes.
Create empty files or update the access and modification times of existing files.
Translate or delete characters from input text.
Traceroute prints the route packets take to reach a network host, showing each hop (gateway) along the path.
Display directory structure as a tree with indented lines showing files and subdirectories.
Tripwire is a file integrity monitoring tool that detects unauthorized changes to system files and directories.
Trivy is a simple and comprehensive vulnerability scanner for containers, filesystems, and repositories.
Capture and analyze network packets from the command line, the non-GUI version of Wireshark.
Adjust tunable file system parameters on ext2, ext3, and ext4 file systems.
Display processor frequency, idle, and thermal statistics on modern Intel and AMD processors.
udevadm controls the udev device manager and queries device information.
Uncomplicated Firewall (ufw) is a user-friendly interface for managing iptables firewall rules on Linux.
Set or display the file mode creation mask that determines default permissions for new files and directories.
Unmount file systems from the directory tree.
Print system information like kernel name, version, hardware platform, and hostname.
Control and monitor the Unbound DNS resolver daemon remotely.
Convert spaces to tabs in text files.
Filter or report on repeated lines in a file or input stream.
Extract, test, and list files from RAR archives.
Run a program in a new set of Linux namespaces, isolating it from the system.
Extract files from ZIP archives.
Decompress files compressed with the Zstandard (zstd) compression algorithm.
Display how long the system has been running, along with current load average and number of logged-in users.
Create a new user account on the system.
Delete a user account and optionally remove their home directory and mail spool.
Modify a user account's login name, UID, groups, home directory, shell, and other attributes.
uv is an extremely fast Python package installer and resolver written in Rust, designed as a drop-in replacement for pip and pip-tools.
Valgrind is a dynamic analysis tool that detects memory errors, memory leaks, and profiling issues in programs.
Vaultwarden is a lightweight, self-hosted password manager server compatible with Bitwarden clients.
Query and control the Raspberry Pi's GPU and system parameters via the VideoCore GPU.
Vector is a lightweight, open-source data pipeline tool for collecting, transforming, and routing logs and metrics.
Velero is a backup and disaster recovery tool for Kubernetes clusters and persistent volumes.
Create a new LVM volume group from one or more physical volumes.
Display information about volume groups in LVM (Logical Volume Manager).
Scan all disks for volume group metadata and display information about discovered volume groups.
A highly configurable text editor that improves upon vi with additional features and modes.
VisiData is an interactive terminal spreadsheet tool for exploring, analyzing, and transforming tabular data from various formats.
vmstat reports virtual memory statistics and system activity including processes, memory, paging, block I/O, interrupts, and CPU usage.
Display information about currently logged-in users and their activities.
Execute a program periodically, full screen, showing output differences.
Count lines, words, and characters in files or standard input.
A GPU-accelerated cross-platform terminal emulator written in Rust with modern features like multiplexing and ligature support.
wf-recorder is a simple screen recording tool for Wayland compositors that captures video and audio to a file.
Configure and manage WireGuard VPN interfaces and peers.
Set up and tear down WireGuard VPN interfaces with a simple configuration file.
Download files from the web using HTTP, HTTPS, or FTP protocols.
Locate the binary, source, and manual page files for a command.
Locate a command in the user's PATH and display its full path.
Display information about users currently logged in to the system.
Print the username of the current user.
Wipe filesystem, raid, and partition-table signatures from a device.
Wireshark is a graphical network protocol analyzer that captures and displays network traffic in real-time.
Copy text or files to the Wayland clipboard.
Paste text from the Wayland clipboard to standard output.
Manage outputs and modes for Wayland compositors using wlr-output-management.
Control Wayland compositors and their outputs using the wlr-control protocol.
Command-line interface for interacting with wpa_supplicant wireless authentication daemon.
Control audio devices, sinks, sources, and volume via PipeWire's command-line interface.
Build and execute commands from standard input, passing lines as arguments.
Install, uninstall, or manage desktop icon themes and resources following the XDG Icon Theme specification.
Query and set MIME type associations for files and URLs on the desktop.
Open a file or URL with the user's preferred application.
Get the path to XDG user directories like Desktop, Documents, Downloads, Music, Pictures, Public, Templates, and Videos.
Expand the size of a mounted XFS filesystem to use available space on the underlying device.
Display information about XFS filesystems, including geometry, block size, and mount options.
Repair a corrupted or inconsistent XFS filesystem.
xonsh is a Python-powered shell that combines the best of Unix shells and Python scripting.
Compress or decompress files using the XZ compression format with high compression ratios.
Yet Another Dotfiles Manager — a git-based system for managing dotfiles with support for encryption and multiple configurations.
Yarn is a fast, reliable, and secure dependency manager for JavaScript packages.
yq is a lightweight YAML, JSON, XML and CSV query and transformation tool that works like jq but for structured data formats.
Download videos from YouTube and other video platforms with customizable formats, subtitles, and metadata.
yum is a package manager that installs, updates, and removes software packages on Red Hat-based Linux systems.
Manage ZFS filesystems, volumes, snapshots, and storage pools.
Automatically create and manage ZFS snapshots on a configurable schedule.
Receives a ZFS dataset stream and reconstructs the dataset on the receiving system.
Send ZFS dataset snapshots or incremental changes to stdout for backup, replication, or transfer to another system.
Create or modify compressed archive files in ZIP format.
A smarter cd command that learns your most-used directories and lets you jump to them with minimal typing.
Create, destroy, and manage ZFS storage pools.
Zsh is an interactive login shell and command interpreter for Unix systems with advanced scripting features and customization.
zstd is a fast real-time compression algorithm that provides high compression ratios with faster speed than gzip or bzip2.
Multi-threaded Zstandard compression utility for parallel compression and decompression of files.