muqaddima
Hammaga salom! Mening ismim Sasha, men olti yildan ortiq vaqt davomida backend (Linux xizmatlari va API)ni sinab ko'rdim. Maqola g'oyasi menga tester do'stimning intervyu oldidan Linux buyruqlari haqida nimani o'qishi mumkinligini aytib berishni so'raganidan keyin keldi. Odatda, QA muhandisi lavozimiga nomzod asosiy buyruqlarni bilishi kerak (agar ular, albatta, Linux bilan ishlashni o'z ichiga olgan bo'lsa), lekin intervyuga tayyorgarlik ko'rayotganda qaysi buyruqlarni o'qishga arzigulikligini qayerdan bilasiz, agar sizda oz bo'lsa. yoki Linux bilan tajriba yo'qmi?
Shuning uchun, bu haqda ko'p marta yozilgan bo'lsa-da, men hali ham "Yangi boshlanuvchilar uchun Linux" maqolasini yozishga qaror qildim va bu erda Linuxdan foydalanadigan bo'limda (yoki kompaniyada) har qanday intervyu oldidan bilishingiz kerak bo'lgan asosiy buyruqlarni sanab o'tishga qaror qildim. Men qaysi buyruqlar va yordamchi dasturlar va qaysi parametrlar bilan tez-tez foydalanishim haqida o'yladim, hamkasblarimning fikr-mulohazalarini to'pladim va barchasini bitta maqolaga jamladim. Maqola 3 qismga bo'lingan: birinchidan, Linux terminalidagi kiritish-chiqarish asoslari haqida qisqacha ma'lumot, so'ngra eng asosiy buyruqlar haqida umumiy ma'lumot, uchinchi qismda Linuxda umumiy muammolarni hal qilish yo'llari tasvirlangan.
Har bir buyruqda ko'plab variantlar mavjud, ularning barchasi bu erda ro'yxatga olinmaydi. Siz har doim ` ni kiritishingiz mumkinodam <buyruq>` yoki `<buyruq> --yordam` jamoa haqida ko'proq ma'lumot olish uchun.
Misol:
[user@testhost ~]$ mkdir --help Usage: mkdir [OPTION]... DIRECTORY... Create the DIRECTORY(ies), if they do not already exist. Mandatory arguments to long options are mandatory for short options too. -m, --mode=MODE set file mode (as in chmod), not a=rwx - umask -p, --parents no error if existing, make parent directories as needed -v, --verbose print a message for each created directory -Z set SELinux security context of each created directory to the default type --context[=CTX] like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX --help display this help and exit --version output version information and exit GNU coreutils online help: <http://www.gnu.org/software/coreutils/> For complete documentation, run: info coreutils 'mkdir invocation'
Agar buyruqni bajarish uchun juda uzoq vaqt kerak bo'lsa, uni konsolda bosish orqali tugatishingiz mumkin Ctrl + C (jarayonga signal yuboriladi BELGI).
Buyruqning chiqishi haqida bir oz
Linuxda jarayon boshlanganda, ushbu jarayon uchun 3 ta standart ma'lumotlar oqimi yaratiladi: STDIN, stdout и stderr. Ular mos ravishda 0, 1 va 2 raqamlari bilan raqamlangan. Ammo endi biz qiziqamiz stdout va kamroq darajada, stderr. Ismlardan buni taxmin qilish oson stdout ma'lumotlarni chiqarish uchun ishlatiladi va stderr — xato xabarlarini ko'rsatish uchun. Linuxda buyruqni ishga tushirishda sukut bo'yicha stdout и stderr barcha ma'lumotlarni konsolga chiqaring, ammo buyruq chiqishi katta bo'lsa, uni faylga yo'naltirish qulay bo'lishi mumkin. Buni, masalan, shunday qilish mumkin:
[user@testhost ~]$ man signal > man_signal
Agar fayl mazmunini chiqarsak man_signal, keyin biz oddiygina ` buyrug'ini bajarsak, bu qanday bo'lishini ko'ramizodam signali`.
Qayta yo'naltirish operatsiyasi `>` sukut bo'yicha stdout. Qayta yo'naltirishni belgilashingiz mumkin stdout aniq: `1>`. Xuddi shunday, siz qayta yo'naltirishni belgilashingiz mumkin stderr:`2>`. Siz ushbu operatsiyalarni birlashtirib, oddiy buyruq chiqishi va xato xabari chiqishini ajratishingiz mumkin:
[user@testhost ~]$ man signal 1> man_signal 2> man_signal_error_log
Qayta yo'naltirish va stdoutva stderr quyidagi tarzda bitta faylga:
[user@testhost ~]$ man signal > man_signal 2>&1
Qayta yo'naltirish operatsiyasi `2> & 1` qayta yo'naltirishni anglatadi stderr ko'rsatilgan joyga stdout.
I/U bilan ishlash uchun yana bir qulay vosita (toʻgʻrirogʻi, bu jarayonlararo aloqa uchun qulay vositadir). quvur (yoki konveyer). Quvurlar ko'pincha bir nechta buyruqlarni yuborish uchun ishlatiladi: stdout buyruqlar yo'naltiriladi STDIN keyingi va zanjirda:
[user@testhost ~]$ ps aux | grep docker | tail -n 2
root 1045894 0.0 0.0 7512 3704 ? Sl 16:04 0:00 docker-containerd-shim -namespace moby -workdir /var/lib/docker/containerd/daemon/io.containerd.runtime.v1.linux/moby/2fbfddaf91c1bb7b9a0a6f788f3505dd7266f1139ad381d5b51ec1f47e1e7b28 -address /var/run/docker/containerd/docker-containerd.sock -containerd-binary /usr/bin/docker-containerd -runtime-root /var/run/docker/runtime-runc
531 1048313 0.0 0.0 110520 2084 pts/2 S+ 16:12 0:00 grep --color=auto docker
Asosiy Linux buyruqlari
pwd
Joriy (ishchi) katalogni ko'rsatish.
[user@testhost ~]$ pwd
/home/user
sana
Joriy tizim sanasi va vaqtini ko'rsating.
[user@testhost ~]$ date
Mon Dec 16 13:37:07 UTC 2019
[user@testhost ~]$ date +%s
1576503430
w
Ushbu buyruq tizimga kim kirganligini ko'rsatadi. Bundan tashqari, ekranda ish vaqti va LA (o'rtacha yuk) ham ko'rsatiladi.
[user@testhost ~]$ w
05:47:17 up 377 days, 17:57, 1 user, load average: 0,00, 0,01, 0,05
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
user pts/0 32.175.94.241 05:47 2.00s 0.01s 0.00s w
ls
Katalog tarkibini chop eting. Agar siz yo'ldan o'tmasangiz, joriy katalogning mazmuni ko'rsatiladi.
[user@testhost ~]$ pwd
/home/user
[user@testhost ~]$ ls
qqq
[user@testhost ~]$ ls /home/user
qqq
[user@testhost ~]$ ls /
bin boot cgroup dev etc home lib lib64 local lost+found media mnt opt proc root run sbin selinux srv swap sys tmp usr var
Shaxsan men ko'pincha variantlardan foydalanaman -l (uzun ro'yxat formati - fayllar haqida qo'shimcha ma'lumotga ega ustunga chiqarish), -t (fayl/katalogni o'zgartirish vaqti bo'yicha saralash) va -r (teskari saralash - bilan birgalikda -t eng so'nggi fayllar pastki qismida bo'ladi):
[user@testhost ~]$ ls -ltr /
total 4194416
drwxr-xr-x 2 root root 4096 Jan 6 2012 srv
drwxr-xr-x 2 root root 4096 Jan 6 2012 selinux
drwxr-xr-x 2 root root 4096 Jan 6 2012 mnt
drwxr-xr-x 2 root root 4096 Jan 6 2012 media
drwx------ 2 root root 16384 Oct 1 2017 lost+found
drwxr-xr-x 2 root root 4096 Oct 1 2017 local
drwxr-xr-x 13 root root 4096 Oct 1 2017 usr
drwxr-xr-x 11 root root 4096 Apr 10 2018 cgroup
drwxr-xr-x 4 root root 4096 Apr 10 2018 run
-rw------- 1 root root 4294967296 Sep 10 2018 swap
dr-xr-xr-x 10 root root 4096 Dec 13 2018 lib
drwxr-xr-x 6 root root 4096 Mar 7 2019 opt
drwxr-xr-x 20 root root 4096 Mar 19 2019 var
dr-xr-xr-x 10 root root 12288 Apr 9 2019 lib64
dr-xr-xr-x 2 root root 4096 Apr 9 2019 bin
dr-xr-xr-x 4 root root 4096 Apr 9 2019 boot
dr-xr-xr-x 2 root root 12288 Apr 9 2019 sbin
dr-xr-xr-x 3229 root root 0 Jul 2 10:19 proc
drwxr-xr-x 34 root root 4096 Oct 28 13:27 home
drwxr-xr-x 93 root root 4096 Oct 30 16:00 etc
dr-xr-x--- 11 root root 4096 Nov 1 13:02 root
dr-xr-xr-x 13 root root 0 Nov 13 20:28 sys
drwxr-xr-x 16 root root 2740 Nov 26 08:55 dev
drwxrwxrwt 3 root root 4096 Nov 26 08:57 tmp
2 ta maxsus katalog nomi mavjud: "."Va"..". Birinchisi joriy katalogni, ikkinchisi esa asosiy katalogni bildiradi. Ular, xususan, turli jamoalarda foydalanish uchun qulay bo'lishi mumkin ls:
[user@testhost home]$ pwd
/home
[user@testhost home]$ ls ..
bin boot cgroup dev etc home lib lib64 local lost+found media mnt opt proc root run sbin selinux srv swap sys tmp usr var
[user@testhost home]$ ls ../home/user/
qqq
Yashirin fayllarni ko'rsatish uchun foydali variant ham mavjud (" dan boshlab".") - -a:
[user@testhost ~]$ ls -a
. .. 1 .bash_history .bash_logout .bash_profile .bashrc .lesshst man_signal man_signal_error_log .mongorc.js .ssh temp test .viminfo
Variantdan ham foydalanishingiz mumkin -h — odam oʻqiy oladigan formatda chiqarish (fayl oʻlchamlariga eʼtibor bering):
[user@testhost ~]$ ls -ltrh
total 16K
-rwxrwx--x 1 user user 31 Nov 26 11:09 temp
-rw-rw-r-- 1 user user 6.0K Dec 3 16:02 1
drwxrwxr-x 2 user user 4.0K Dec 4 10:39 test
cd
Joriy katalogni o'zgartiring.
[user@testhost ~]$ pwd
/home/user
[user@testhost ~]$ cd /home/
[user@testhost home]$ pwd
/home
Agar siz katalog nomini argument sifatida kiritmasangiz, muhit o'zgaruvchisi ishlatiladi $ HOME, ya'ni uy katalogi. ` dan foydalanish ham qulay bo'lishi mumkin~` - maxsus belgi ma'nosi $ HOME:
[user@testhost etc]$ pwd
/etc
[user@testhost etc]$ cd ~/test/
[user@testhost test]$ pwd
/home/user/test
mkdir
Katalog yarating.
[user@testhost ~]$ mkdir test
[user@testhost ~]$ ls -ltr
total 38184
-rw-rw-r-- 1 user user 39091284 Nov 22 14:14 qqq
drwxrwxr-x 2 user user 4096 Nov 26 10:29 test
Ba'zan ma'lum bir katalog tuzilmasini yaratishingiz kerak bo'ladi: masalan, mavjud bo'lmagan katalog ichidagi katalog. Bir necha marta ketma-ket kirmaslik uchun mkdir, variantdan foydalanishingiz mumkin -p — bu ierarxiyadagi barcha etishmayotgan kataloglarni yaratish imkonini beradi. Shuningdek, ushbu variant bilan mkdir katalog mavjud bo'lsa, xato qaytarmaydi.
[user@testhost ~]$ ls
qqq test
[user@testhost ~]$ mkdir test2/subtest
mkdir: cannot create directory ‘test2/subtest’: No such file or directory
[user@testhost ~]$ mkdir -p test2/subtest
[user@testhost ~]$ ls
qqq test test2
[user@testhost ~]$ ls test2/
subtest
[user@testhost ~]$ mkdir test2/subtest
mkdir: cannot create directory ‘test2/subtest’: File exists
[user@testhost ~]$ mkdir -p test2/subtest
[user@testhost ~]$ ls test2/
subtest
rm
Faylni oʻchirish.
[user@testhost ~]$ ls
qqq test test2
[user@testhost ~]$ rm qqq
[user@testhost ~]$ ls
test test2
Variant -r kataloglarni barcha mazmuni bilan rekursiv yo'q qilish imkonini beradi, variant -f o'chirishda xatolarga e'tibor bermaslik imkonini beradi (masalan, mavjud bo'lmagan fayl haqida). Ushbu variantlar, qo'pol qilib aytganda, fayllar va kataloglarning butun ierarxiyasini kafolatlangan tarzda o'chirishga imkon beradi (agar foydalanuvchi buni qilish huquqiga ega bo'lsa), shuning uchun ulardan ehtiyotkorlik bilan foydalanish kerak (klassik hazil misoli "rm-rf /", muayyan sharoitlarda, butun tizim bo'lmasa, sizni o'chirib tashlaydi, uning ishlashi uchun muhim bo'lgan ko'plab fayllar).
[user@testhost ~]$ ls
test test2
[user@testhost ~]$ ls -ltr test2/
total 4
-rw-rw-r-- 1 user user 0 Nov 26 10:40 temp
drwxrwxr-x 2 user user 4096 Nov 26 10:40 temp_dir
[user@testhost ~]$ rm -rf test2
[user@testhost ~]$ ls
test
cp
Fayl yoki katalogdan nusxa oling.
[user@testhost ~]$ ls
temp test
[user@testhost ~]$ cp temp temp_clone
[user@testhost ~]$ ls
temp temp_clone test
Bu buyruqda ham variantlar mavjud -r и -f, ular kataloglar va papkalar ierarxiyasi boshqa joyga ko'chirilishini ta'minlash uchun ishlatilishi mumkin.
mv
Fayl yoki katalogni ko'chiring yoki nomini o'zgartiring.
[user@testhost ~]$ ls -ltr
total 4
drwxrwxr-x 2 user user 4096 Nov 26 10:29 test
-rw-rw-r-- 1 user user 0 Nov 26 10:45 temp
-rw-rw-r-- 1 user user 0 Nov 26 10:46 temp_clone
[user@testhost ~]$ ls test
[user@testhost ~]$ mv test test_renamed
[user@testhost ~]$ mv temp_clone test_renamed/
[user@testhost ~]$ ls
temp test_renamed
[user@testhost ~]$ ls test_renamed/
temp_clone
mushuk
Fayl (yoki fayllar) tarkibini chop eting.
[user@testhost ~]$ cat temp
Content of a file.
Lalalala...
Buyruqlarga ham e'tibor qaratish lozim Boshi (chiqish n faylning birinchi satrlari yoki baytlari) va Quyruq (u haqida keyinroq).
Quyruq
Chiqish n faylning oxirgi satrlari yoki baytlari.
[user@testhost ~]$ tail -1 temp
Lalalala...
Variant juda foydali -f — u real vaqtda faylda yangi maʼlumotlarni koʻrsatish imkonini beradi.
Kamroq
Ba'zan matn fayli juda katta va uni buyruq bilan ko'rsatish noqulay mushuk. Keyin buyruq yordamida uni ochishingiz mumkin Kamroq: fayl qismlarga bo'linadi; bu qismlar bo'ylab navigatsiya, qidirish va boshqa oddiy funksiyalar mavjud.
[user@testhost ~]$ less temp
Bundan foydalanish qulay bo'lishi mumkin Kamroq konveyer bilan (quvur):
[user@testhost ~]$ grep "ERROR" /tmp/some.log | less
ps
Jarayonlar ro'yxati.
[user@testhost ~]$ ps
PID TTY TIME CMD
761020 pts/2 00:00:00 bash
809720 pts/2 00:00:00 ps
Men o'zim odatda BSD opsiyalaridan foydalanaman "aux" - tizimdagi barcha jarayonlarni ko'rsatish (chunki ko'p jarayonlar bo'lishi mumkin, men ulardan faqat birinchi 5 tasini quvur liniyasi yordamida ko'rsatdim (quvur) va jamoa Boshi):
[user@testhost ~]$ ps aux | head -5
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 19692 2600 ? Ss Jul02 0:10 /sbin/init
root 2 0.0 0.0 0 0 ? S Jul02 0:03 [kthreadd]
root 4 0.0 0.0 0 0 ? I< Jul02 0:00 [kworker/0:0H]
root 6 0.0 0.0 0 0 ? I< Jul02 0:00 [mm_percpu_wq]
Ko'pchilik BSD opsiyalaridan ham foydalanadi "axjf", bu sizga jarayon daraxtini ko'rsatishga imkon beradi (bu erda men namoyish qilish uchun chiqishning bir qismini olib tashladim):
[user@testhost ~]$ ps axjf
PPID PID PGID SID TTY TPGID STAT UID TIME COMMAND
0 2 0 0 ? -1 S 0 0:03 [kthreadd]
2 4 0 0 ? -1 I< 0 0:00 _ [kworker/0:0H]
2 6 0 0 ? -1 I< 0 0:00 _ [mm_percpu_wq]
2 7 0 0 ? -1 S 0 4:08 _ [ksoftirqd/0]
...
...
...
1 4293 4293 4293 tty6 4293 Ss+ 0 0:00 /sbin/mingetty /dev/tty6
1 532967 532964 532964 ? -1 Sl 495 0:00 /opt/td-agent/embedded/bin/ruby /usr/sbin/td-agent --log /var/log/td-agent/td-agent.log --use-v1-config --group td-agent --daemon /var/run/td-agent/td-agent.pid
532967 532970 532964 532964 ? -1 Sl 495 803:06 _ /opt/td-agent/embedded/bin/ruby /usr/sbin/td-agent --log /var/log/td-agent/td-agent.log --use-v1-config --group td-agent --daemon /var/run/td-agent/td-agent.pid
1 537162 533357 532322 ? -1 Sl 0 5067:43 /usr/bin/dockerd --default-ulimit nofile=262144:262144 --dns=172.17.0.1
537162 537177 537177 537177 ? -1 Ssl 0 4649:28 _ docker-containerd --config /var/run/docker/containerd/containerd.toml
537177 537579 537579 537177 ? -1 Sl 0 4:48 | _ docker-containerd-shim -namespace moby -workdir /var/lib/docker/containerd/daemon/io.containerd.runtime.v1.linux/moby/0ee89b20deb3cf08648cd92e1f3e3c661ccffef7a0971
537579 537642 537642 537642 ? -1 Ss 1000 32:11 | | _ /usr/bin/python /usr/bin/supervisord -c /etc/supervisord/api.conf
537642 539764 539764 537642 ? -1 S 1000 0:00 | | _ sh -c echo "READY"; while read -r line; do echo "$line"; supervisorctl shutdown; done
537642 539767 539767 537642 ? -1 S 1000 5:09 | | _ php-fpm: master process (/etc/php73/php-fpm.conf)
539767 783097 539767 537642 ? -1 S 1000 0:00 | | | _ php-fpm: pool test
539767 783131 539767 537642 ? -1 S 1000 0:00 | | | _ php-fpm: pool test
539767 783185 539767 537642 ? -1 S 1000 0:00 | | | _ php-fpm: pool test
...
...
...
Ushbu buyruq juda ko'p turli xil variantlarga ega, shuning uchun siz undan faol foydalansangiz, hujjatlarni o'qib chiqishingizni maslahat beraman. Ko'p hollarda bilish kifoya "ps aux".
o'ldirish
Jarayonga signal yuboring. Odatiy bo'lib signal yuboriladi MAQSADLI MUDDAT, bu jarayonni tugatadi.
[user@testhost ~]$ ps ux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
531 1027147 0.0 0.0 119956 4260 ? S 14:51 0:00 sshd: user@pts/1
531 1027149 0.0 0.0 115408 3396 pts/1 Ss 14:51 0:00 -bash
531 1027170 0.0 0.0 119956 4136 ? R 14:51 0:00 sshd: user@pts/2
531 1027180 0.0 0.0 115408 3564 pts/2 Ss 14:51 0:00 -bash
531 1033727 0.0 0.0 107960 708 pts/1 S+ 15:17 0:00 sleep 300
531 1033752 0.0 0.0 117264 2604 pts/2 R+ 15:17 0:00 ps ux
[user@testhost ~]$ kill 1033727
[user@testhost ~]$ ps ux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
531 1027147 0.0 0.0 119956 4260 ? S 14:51 0:00 sshd: user@pts/1
531 1027149 0.0 0.0 115408 3396 pts/1 Ss+ 14:51 0:00 -bash
531 1027170 0.0 0.0 119956 4136 ? R 14:51 0:00 sshd: user@pts/2
531 1027180 0.0 0.0 115408 3564 pts/2 Ss 14:51 0:00 -bash
531 1033808 0.0 0.0 117268 2492 pts/2 R+ 15:17 0:00 ps ux
Jarayon signal ishlov beruvchilariga ega bo'lishi mumkinligi sababli, o'ldirish har doim ham kutilgan natijaga olib kelmaydi - jarayonning bir zumda yakunlanishi. Jarayonni aniq "o'ldirish" uchun siz jarayonga signal yuborishingiz kerak SIGKILL. Biroq, bu ma'lumotlarning yo'qolishiga olib kelishi mumkin (masalan, jarayonni tugatishdan oldin ba'zi ma'lumotlarni diskda saqlash kerak bo'lsa), shuning uchun siz ushbu buyruqni ehtiyotkorlik bilan ishlatishingiz kerak. Signal raqami SIGKILL - 9, shuning uchun buyruqning qisqa versiyasi quyidagicha ko'rinadi:
[user@testhost ~]$ ps ux | grep sleep
531 1034930 0.0 0.0 107960 636 pts/1 S+ 15:21 0:00 sleep 300
531 1034953 0.0 0.0 110516 2104 pts/2 S+ 15:21 0:00 grep --color=auto sleep
[user@testhost ~]$ kill -9 1034930
[user@testhost ~]$ ps ux | grep sleep
531 1035004 0.0 0.0 110516 2092 pts/2 S+ 15:22 0:00 grep --color=auto sleep
Qayd etilganlarga qo'shimcha ravishda MAQSADLI MUDDAT и SIGKILL Yana ko'p turli xil signallar mavjud, ularning ro'yxatini Internetda osongina topish mumkin. Va signallarni unutmang SIGKILL и NEXTSTOP to'xtatib bo'lmaydi yoki e'tiborsiz qoldirilmaydi.
Ping
Xostga ICMP paketini yuboring ECHO_REQUEST.
[user@testhost ~]$ ping google.com
PING google.com (172.217.15.78) 56(84) bytes of data.
64 bytes from iad23s63-in-f14.1e100.net (172.217.15.78): icmp_seq=1 ttl=47 time=1.85 ms
64 bytes from iad23s63-in-f14.1e100.net (172.217.15.78): icmp_seq=2 ttl=47 time=1.48 ms
64 bytes from iad23s63-in-f14.1e100.net (172.217.15.78): icmp_seq=3 ttl=47 time=1.45 ms
64 bytes from iad23s63-in-f14.1e100.net (172.217.15.78): icmp_seq=4 ttl=47 time=1.46 ms
64 bytes from iad23s63-in-f14.1e100.net (172.217.15.78): icmp_seq=5 ttl=47 time=1.45 ms
^C
--- google.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
rtt min/avg/max/mdev = 1.453/1.541/1.850/0.156 ms
sukut Ping qo'lda tugatilmaguncha ishlaydi. Shuning uchun variant foydali bo'lishi mumkin -c — yuborilgandan keyin paketlar soni Ping o'z-o'zidan yakunlanadi. Men ba'zan ishlatadigan yana bir variant -i, paketlarni yuborish orasidagi interval.
[user@testhost ~]$ ping -c 3 -i 5 google.com
PING google.com (172.217.5.238) 56(84) bytes of data.
64 bytes from iad30s07-in-f238.1e100.net (172.217.5.238): icmp_seq=1 ttl=47 time=1.55 ms
64 bytes from iad30s07-in-f14.1e100.net (172.217.5.238): icmp_seq=2 ttl=47 time=1.17 ms
64 bytes from iad30s07-in-f14.1e100.net (172.217.5.238): icmp_seq=3 ttl=47 time=1.16 ms
--- google.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 10006ms
rtt min/avg/max/mdev = 1.162/1.295/1.551/0.181 ms
sSH
OpenSSH SSH mijozi sizga masofaviy xostga ulanish imkonini beradi.
MacBook-Pro-User:~ user$ ssh [email protected]
Last login: Tue Nov 26 11:27:39 2019 from another_host
[user@testhost ~]$ hostname
testhost
SSH-dan foydalanishda juda ko'p nuanslar mavjud va bu mijoz ham juda ko'p imkoniyatlarga ega, shuning uchun agar xohlasangiz (yoki kerak bo'lsa) bu haqda o'qishingiz mumkin. .
scp
Xostlar o'rtasida fayllardan nusxa ko'chiring (bu foydalanish uchun sSH).
[user@testhost ~]$ pwd
/home/user
[user@testhost ~]$ ls
temp test_renamed
[user@testhost ~]$ exit
logout
Connection to 11.11.22.22 closed.
MacBook-Pro-Aleksandr:~ user$ scp [email protected]:/home/user/temp Downloads/
temp 100% 31 0.2KB/s 00:00
MacBook-Pro-Aleksandr:~ user$ cat Downloads/temp
Content of a file.
Lalalala...
rsync
Kataloglarni xostlar o'rtasida sinxronlashtirish uchun ham foydalanishingiz mumkin rsync (-a — arxiv rejimi, katalogning barcha tarkibini "xuddi shunday" nusxalash imkonini beradi, -v — qo'shimcha ma'lumotni konsolga chiqarish):
MacBook-Pro-User:~ user$ ls Downloads/user
ls: Downloads/user: No such file or directory
MacBook-Pro-User:~ user$ rsync -av user@testhost:/home/user Downloads
receiving file list ... done
user/
user/.bash_history
user/.bash_logout
user/.bash_profile
user/.bashrc
user/.lesshst
user/.mongorc.js
user/.viminfo
user/1
user/man_signal
user/man_signal_error_log
user/temp
user/.ssh/
user/.ssh/authorized_keys
user/test/
user/test/created_today
user/test/temp_clone
sent 346 bytes received 29210 bytes 11822.40 bytes/sec
total size is 28079 speedup is 0.95
MacBook-Pro-User:~ user$ ls -a Downloads/user
. .bash_history .bash_profile .lesshst .ssh 1 man_signal_error_log test
.. .bash_logout .bashrc .mongorc.js .viminfo man_signal temp
Echo
Matn qatorini ko'rsatish.
[user@testhost ~]$ echo "Hello"
Hello
Bu erda ko'rib chiqishga arziydigan variantlar -n - oxirida qatorni qo'shmang va -e — "" yordamida talqin qilishdan qochishni yoqish.
[user@testhost ~]$ echo "tHellon"
tHellon
[user@testhost ~]$ echo -n "tHellon"
tHellon[user@testhost ~]$
[user@testhost ~]$ echo -ne "tHellon"
Hello
Ushbu buyruq yordamida o'zgaruvchilar qiymatlarini ham ko'rsatishingiz mumkin. Masalan, Linuxda oxirgi tugallangan buyruqning chiqish kodi maxsus o'zgaruvchida saqlanadi $?, va shu tarzda siz oxirgi ishlayotgan ilovada qanday xatolik yuz berganligini aniq bilib olishingiz mumkin:
[user@testhost ~]$ ls # ошибки не будет
1 man_signal man_signal_error_log temp test
[user@testhost ~]$ echo $? # получим 0 — ошибки не было
0
[user@testhost ~]$ ls qwerty # будет ошибка
ls: cannot access qwerty: No such file or directory
[user@testhost ~]$ echo $? # получим 2 — Misuse of shell builtins (according to Bash documentation)
2
[user@testhost ~]$ echo $? # последний echo отработал без ошибок, получим 0
0
telnet
TELNET protokoli uchun mijoz. Boshqa xost bilan muloqot qilish uchun foydalaniladi.
[user@testhost ~]$ telnet example.com 80
Trying 93.184.216.34...
Connected to example.com.
Escape character is '^]'.
GET / HTTP/1.1
Host: example.com
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/html; charset=UTF-8
Date: Tue, 26 Nov 2019 11:59:18 GMT
Etag: "3147526947+gzip+ident"
Expires: Tue, 03 Dec 2019 11:59:18 GMT
Last-Modified: Thu, 17 Oct 2019 07:18:26 GMT
Server: ECS (dcb/7F3B)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 1256
... здесь было тело ответа, которое я вырезал руками ...
Agar siz TLS protokolidan foydalanishingiz kerak bo'lsa (sizga SSL uzoq vaqtdan beri eskirganligini eslatib o'taman), keyin telnet bu maqsadlar uchun mos emas. Ammo mijoz keladi openssl:
GET so'roviga javobni chiqarish bilan openssl dan foydalanishga misol
[user@testhost ~]$ openssl s_client -connect example.com:443
CONNECTED(00000003)
depth=2 C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root CA
verify return:1
depth=1 C = US, O = DigiCert Inc, CN = DigiCert SHA2 Secure Server CA
verify return:1
depth=0 C = US, ST = California, L = Los Angeles, O = Internet Corporation for Assigned Names and Numbers, OU = Technology, CN = www.example.org
verify return:1
---
Certificate chain
0 s:/C=US/ST=California/L=Los Angeles/O=Internet Corporation for Assigned Names and Numbers/OU=Technology/CN=www.example.org
i:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
1 s:/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
2 s:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
i:/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Global Root CA
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIQD9B43Ujxor1NDyupa2A4/jANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMTI4MDAwMDAwWhcN
MjAxMjAyMTIwMDAwWjCBpTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFDASBgNVBAcTC0xvcyBBbmdlbGVzMTwwOgYDVQQKEzNJbnRlcm5ldCBDb3Jw
b3JhdGlvbiBmb3IgQXNzaWduZWQgTmFtZXMgYW5kIE51bWJlcnMxEzARBgNVBAsT
ClRlY2hub2xvZ3kxGDAWBgNVBAMTD3d3dy5leGFtcGxlLm9yZzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBANDwEnSgliByCGUZElpdStA6jGaPoCkrp9vV
rAzPpXGSFUIVsAeSdjF11yeOTVBqddF7U14nqu3rpGA68o5FGGtFM1yFEaogEv5g
rJ1MRY/d0w4+dw8JwoVlNMci+3QTuUKf9yH28JxEdG3J37Mfj2C3cREGkGNBnY80
eyRJRqzy8I0LSPTTkhr3okXuzOXXg38ugr1x3SgZWDNuEaE6oGpyYJIBWZ9jF3pJ
QnucP9vTBejMh374qvyd0QVQq3WxHrogy4nUbWw3gihMxT98wRD1oKVma1NTydvt
hcNtBfhkp8kO64/hxLHrLWgOFT/l4tz8IWQt7mkrBHjbd2XLVPkCAwEAAaOCA8Ew
ggO9MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBRm
mGIC4AmRp9njNvt2xrC/oW2nvjCBgQYDVR0RBHoweIIPd3d3LmV4YW1wbGUub3Jn
ggtleGFtcGxlLmNvbYILZXhhbXBsZS5lZHWCC2V4YW1wbGUubmV0ggtleGFtcGxl
Lm9yZ4IPd3d3LmV4YW1wbGUuY29tgg93d3cuZXhhbXBsZS5lZHWCD3d3dy5leGFt
cGxlLm5ldDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNv
bS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5j
b20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG
CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC
AjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2lj
ZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMBAf8EAjAAMIIB
fwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb
37jjd80OyA3cEAAAAWdcMZVGAAAEAwBIMEYCIQCEZIG3IR36Gkj1dq5L6EaGVycX
sHvpO7dKV0JsooTEbAIhALuTtf4wxGTkFkx8blhTV+7sf6pFT78ORo7+cP39jkJC
AHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFnXDGWFQAABAMA
RzBFAiBvqnfSHKeUwGMtLrOG3UGLQIoaL3+uZsGTX3MfSJNQEQIhANL5nUiGBR6g
l0QlCzzqzvorGXyB/yd7nttYttzo8EpOAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC
wQApBo2yCJo32RMAAAFnXDGWnAAABAMARzBFAiEA5Hn7Q4SOyqHkT+kDsHq7ku7z
RDuM7P4UDX2ft2Mpny0CIE13WtxJAUr0aASFYZ/XjSAMMfrB0/RxClvWVss9LHKM
MA0GCSqGSIb3DQEBCwUAA4IBAQBzcIXvQEGnakPVeJx7VUjmvGuZhrr7DQOLeP4R
8CmgDM1pFAvGBHiyzvCH1QGdxFl6cf7wbp7BoLCRLR/qPVXFMwUMzcE1GLBqaGZM
v1Yh2lvZSLmMNSGRXdx113pGLCInpm/TOhfrvr0TxRImc8BdozWJavsn1N2qdHQu
N+UBO6bQMLCD0KHEdSGFsuX6ZwAworxTg02/1qiDu7zW7RyzHvFYA4IAjpzvkPIa
X6KjBtpdvp/aXabmL95YgBjT8WJ7pqOfrqhpcmOBZa6Cg6O1l4qbIFH/Gj9hQB5I
0Gs4+eH6F9h3SojmPTYkT+8KuZ9w84Mn+M8qBXUQoYoKgIjN
-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Los Angeles/O=Internet Corporation for Assigned Names and Numbers/OU=Technology/CN=www.example.org
issuer=/C=US/O=DigiCert Inc/CN=DigiCert SHA2 Secure Server CA
---
No client certificate CA names sent
Peer signing digest: SHA256
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4643 bytes and written 415 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES128-GCM-SHA256
Session-ID: 91950DC50FADB57BF026D2661E6CFAA1F522E5CA60D2310E106EE0E0FD6E70BD
Session-ID-ctx:
Master-Key: 704E9145253EEB4E9DC47E3DC6725D296D4A470EA296D54F71D65E74EAC09EB096EA1305CBEDD9E7020B8F72FD2B68A5
Key-Arg : None
Krb5 Principal: None
PSK identity: None
PSK identity hint: None
TLS session ticket lifetime hint: 7200 (seconds)
TLS session ticket:
0000 - 68 84 4e 77 be e3 f5 00-49 c5 44 40 53 4d b9 61 [email protected]
0010 - c9 fe df e4 05 51 d0 53-ae cf 89 4c b6 ef 6c 9e .....Q.S...L..l.
0020 - fe 12 9a f0 e8 e5 4e 87-42 89 ac af ca e5 4a 85 ......N.B.....J.
0030 - 38 08 26 e3 22 89 08 b5-62 c0 8b 7e b8 05 d3 54 8.&."...b..~...T
0040 - 8c 24 91 a7 b4 4f 79 ad-36 59 7c 69 2d e5 7f 62 .$...Oy.6Y|i-..b
0050 - f6 73 a3 8b 92 63 c1 e3-df 78 ba 8c 5a cc 82 50 .s...c...x..Z..P
0060 - 33 4e 13 4b 10 e4 97 31-cc b4 13 65 45 60 3e 13 3N.K...1...eE`>.
0070 - ac 9e b1 bb 4b 18 d9 16-ea ce f0 9b 5b 0c 8b bf ....K.......[...
0080 - fd 78 74 a0 1a ef c2 15-2a 0a 14 8d d1 3f 52 7a .xt.....*....?Rz
0090 - 12 6b c7 81 15 c4 c4 af-7e df c2 20 a8 dd 4b 93 .k......~.. ..K.
Start Time: 1574769867
Timeout : 300 (sec)
Verify return code: 0 (ok)
---
GET / HTTP/1.1
Host: example.com
HTTP/1.1 200 OK
Cache-Control: max-age=604800
Content-Type: text/html; charset=UTF-8
Date: Tue, 26 Nov 2019 12:04:38 GMT
Etag: "3147526947+ident"
Expires: Tue, 03 Dec 2019 12:04:38 GMT
Last-Modified: Thu, 17 Oct 2019 07:18:26 GMT
Server: ECS (dcb/7EC8)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 1256
<!doctype html>
<html>
<head>
<title>Example Domain</title>
<meta charset="utf-8" />
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<style type="text/css">
body {
background-color: #f0f0f2;
margin: 0;
padding: 0;
font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;
}
div {
width: 600px;
margin: 5em auto;
padding: 2em;
background-color: #fdfdff;
border-radius: 0.5em;
box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);
}
a:link, a:visited {
color: #38488f;
text-decoration: none;
}
@media (max-width: 700px) {
div {
margin: 0 auto;
width: auto;
}
}
</style>
</head>
<body>
<div>
<h1>Example Domain</h1>
<p>This domain is for use in illustrative examples in documents. You may use this
domain in literature without prior coordination or asking for permission.</p>
<p><a href="https://www.iana.org/domains/example">More information...</a></p>
</div>
</body>
</html>
Linuxda keng tarqalgan muammolarni hal qilish
Fayl egasini o'zgartiring
Buyruq yordamida fayl yoki katalog egasini o'zgartirishingiz mumkin chown:
[user@testhost ~]$ chown user:user temp
[user@testhost ~]$ ls -l temp
-rw-rw-r-- 1 user user 31 Nov 26 11:09 temp
Ushbu buyruq parametri ikki nuqta bilan ajratilgan holda yangi egasi va guruhga (ixtiyoriy) berilishi kerak. Bundan tashqari, katalog egasini o'zgartirganda, variant foydali bo'lishi mumkin -R - keyin egalari katalogning barcha mazmuni uchun o'zgaradi.
Fayl ruxsatlarini o'zgartiring
Ushbu muammoni buyruq yordamida hal qilish mumkin chmod. Misol sifatida, men ruxsat sozlamasini beraman "egasiga o'qish, yozish va bajarishga ruxsat beriladi, guruhga o'qish va yozishga ruxsat beriladi, qolganlarga hech narsa ruxsat etilmaydi":
[user@testhost ~]$ ls -l temp
-rw-rw-r-- 1 user user 31 Nov 26 11:09 temp
[user@testhost ~]$ chmod 760 temp
[user@testhost ~]$ ls -l temp
-rwxrw---- 1 user user 31 Nov 26 11:09 temp
Parametrdagi birinchi 7 (bu bit ko'rinishida 0b111) "egasi uchun barcha huquqlar", ikkinchi 6 (bit tasvirida bu 0b110) "o'qish va yozish" degan ma'noni anglatadi va 0 qolganlari uchun hech narsani anglatmaydi. . Bitmask uchta bitdan iborat: eng muhim ("o'ng") bit bajarish uchun javob beradi, keyingi ("o'rta") bit yozish uchun va eng muhim ("chap") bit o'qish uchun.
Shuningdek, siz maxsus belgilar yordamida ruxsatlarni o'rnatishingiz mumkin (mnemonik sintaksis). Misol uchun, quyidagi misol avval joriy foydalanuvchi uchun ijro huquqlarini olib tashlaydi va keyin ularni qayta o'zgartiradi:
[user@testhost ~]$ ls -l temp
-rwxrw---- 1 user user 31 Nov 26 11:09 temp
[user@testhost ~]$ chmod -x temp
[user@testhost ~]$ ls -l temp
-rw-rw---- 1 user user 31 Nov 26 11:09 temp
[user@testhost ~]$ chmod +x temp
[user@testhost ~]$ ls -l temp
-rwxrwx--x 1 user user 31 Nov 26 11:09 temp
Ushbu buyruq juda ko'p foydalanishga ega, shuning uchun men sizga bu haqda ko'proq o'qishni maslahat beraman (ayniqsa, mnemonik sintaksis haqida, masalan, ).
Ikkilik faylning mazmunini chop eting
Buni yordamchi dastur yordamida amalga oshirish mumkin hexdump. Quyida undan foydalanish misollari keltirilgan.
[user@testhost ~]$ cat temp
Content of a file.
Lalalala...
[user@testhost ~]$ hexdump -c temp
0000000 C o n t e n t o f a f i l
0000010 e . n L a l a l a l a . . . n
000001f
[user@testhost ~]$ hexdump -x temp
0000000 6f43 746e 6e65 2074 666f 6120 6620 6c69
0000010 2e65 4c0a 6c61 6c61 6c61 2e61 2e2e 000a
000001f
[user@testhost ~]$ hexdump -C temp
00000000 43 6f 6e 74 65 6e 74 20 6f 66 20 61 20 66 69 6c |Content of a fil|
00000010 65 2e 0a 4c 61 6c 61 6c 61 6c 61 2e 2e 2e 0a |e..Lalalala....|
0000001f
Ushbu yordam dasturidan foydalanib, siz boshqa formatlarda ma'lumotlarni chiqarishingiz mumkin, ammo bu ulardan foydalanishning eng foydali variantlari.
Fayllarni qidirish
Buyruq yordamida faylni uning nomining bir qismi bo'yicha katalog daraxtidan topishingiz mumkin topish:
[user@testhost ~]$ find test_dir/ -name "*le*"
test_dir/file_1
test_dir/file_2
test_dir/subdir/file_3
Boshqa qidiruv opsiyalari va filtrlari ham mavjud. Masalan, papkadagi fayllarni shu tarzda topishingiz mumkin sinov5 kundan ko'proq vaqt oldin yaratilgan:
[user@testhost ~]$ ls -ltr test
total 0
-rw-rw-r-- 1 user user 0 Nov 26 10:46 temp_clone
-rw-rw-r-- 1 user user 0 Dec 4 10:39 created_today
[user@testhost ~]$ find test/ -type f -ctime +5
test/temp_clone
Fayllardagi matnni qidirish
Jamoa bu vazifani engishda sizga yordam beradi grep. U juda ko'p foydalanishga ega, eng oddiyi bu erda misol sifatida keltirilgan.
[user@testhost ~]$ grep -nr "content" test_dir/
test_dir/file_1:1:test content for file_1
test_dir/file_2:1:test content for file_2
test_dir/subdir/file_3:1:test content for file_3
Buyruqdan foydalanishning mashhur usullaridan biri grep - uni quvur liniyasida ishlatish (quvur):
[user@testhost ~]$ sudo tail -f /var/log/test.log | grep "ERROR"
Variant -v effekt yaratishga imkon beradi grep'va teskari - faqat o'tkazilgan naqshni o'z ichiga olmaydigan satrlar grep.
O'rnatilgan paketlarni ko'rish
Umumjahon buyruq yo'q, chunki hamma narsa Linux tarqatilishiga va foydalaniladigan paketlar menejeriga bog'liq. Ehtimol, quyidagi buyruqlardan biri sizga yordam beradi:
yum list installed
apt list --installed
zypper se —installed-only
pacman -Qqe
dpkg -l
rpm -qa
Katalog daraxti qancha joy egallaganiga qarang
Buyruqni ishlatish variantlaridan biri du:
[user@testhost ~]$ du -h -d 1 test_dir/
8,0K test_dir/subdir
20K test_dir/
Siz parametr qiymatini o'zgartirishingiz mumkin -dkatalog daraxti haqida batafsil ma'lumot olish uchun. Buyruqni bilan birgalikda ham ishlatishingiz mumkin saralamoq:
[user@testhost ~]$ du -h -d 1 test_dir/ | sort -h
8,0K test_dir/subdir
16K test_dir/subdir_2
36K test_dir/
[user@testhost ~]$ du -h -d 1 test_dir/ | sort -h -r
36K test_dir/
16K test_dir/subdir_2
8,0K test_dir/subdir
Variant -h jamoa saralamoq inson o'qishi mumkin bo'lgan formatda yozilgan o'lchamlarni saralash imkonini beradi (masalan, 1K, 2G), variant -r ma’lumotlarni teskari tartibda saralash imkonini beradi.
Faylda, katalogdagi fayllarda "topish va almashtirish"
Ushbu operatsiya yordam dasturi yordamida amalga oshiriladi sed (bayroq yo'q g oxirida, satrdagi "eski matn" ning faqat birinchi paydo bo'lishi almashtiriladi):
sed -i 's/old-text/new-text/g' input.txt
Siz uni bir vaqtning o'zida bir nechta fayllar uchun ishlatishingiz mumkin:
[user@testhost ~]$ cat test_dir/file_*
test content for file_1
test content for file_2
[user@testhost ~]$ sed -i 's/test/edited/g' test_dir/file_*
[user@testhost ~]$ cat test_dir/file_*
edited content for file_1
edited content for file_2
Chiqishdan ustunni chizish
Bu vazifani engishga yordam beradi Qoyil. Ushbu misol buyruq chiqishining ikkinchi ustunini ko'rsatadi `ps ux`:
[user@testhost ~]$ ps ux | awk '{print $2}'
PID
11023
25870
25871
25908
25909
Shu bilan birga, shuni ham yodda tutish kerak Qoyil ancha boy funksiyalarga ega, shuning uchun buyruq satrida matn bilan ishlash kerak bo'lsa, ushbu buyruq haqida ko'proq o'qishingiz kerak.
Xost nomi bo'yicha IP manzilini toping
Bunga quyidagi buyruqlardan biri yordam beradi:
[user@testhost ~]$ host ya.ru
ya.ru has address 87.250.250.242
ya.ru has IPv6 address 2a02:6b8::2:242
ya.ru mail is handled by 10 mx.yandex.ru.
[user@testhost ~]$ dig +short ya.ru
87.250.250.242
[user@testhost ~]$ nslookup ya.ru
Server: 8.8.8.8
Address: 8.8.8.8#53
Non-authoritative answer:
Name: ya.ru
Address: 87.250.250.242
Tarmoq ma'lumotlari
Siz foydalanishingiz mumkin ifconfig:
[user@testhost ~]$ ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 47.89.93.67 netmask 255.255.224.0 broadcast 47.89.95.255
inet6 fd90::302:57ff:fe79:1 prefixlen 64 scopeid 0x20<link>
ether 04:01:57:79:00:01 txqueuelen 1000 (Ethernet)
RX packets 11912135 bytes 9307046034 (8.6 GiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 14696632 bytes 2809191835 (2.6 GiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 0 (Local Loopback)
RX packets 10 bytes 866 (866.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 10 bytes 866 (866.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
Yoki balki ip:
[user@testhost ~]$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 04:01:57:79:00:01 brd ff:ff:ff:ff:ff:ff
inet 47.89.93.67/19 brd 47.89.95.255 scope global eth0
valid_lft forever preferred_lft forever
inet6 fd90::302:57ff:fe79:1/64 scope link
valid_lft forever preferred_lft forever
3: ip_vti0: <NOARP> mtu 1500 qdisc noop state DOWN group default
link/ipip 0.0.0.0 brd 0.0.0.0
Bundan tashqari, agar siz, masalan, faqat IPv4 bilan qiziqsangiz, unda siz variantni qo'shishingiz mumkin -4:
[user@testhost ~]$ ip -4 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
inet 47.89.93.67/19 brd 47.89.95.255 scope global eth0
valid_lft forever preferred_lft forever
Ochiq portlarni ko'rish
Buning uchun yordamchi dasturdan foydalaning netstat. Masalan, barcha TCP va UDP tinglash portlarini portda tinglash jarayonining PID ko'rsatkichi va portning raqamli ko'rinishi bilan ko'rish uchun siz uni quyidagi variantlar bilan ishlatishingiz kerak:
[user@testhost ~]$ netstat -lptnu
Tizim ma'lumotlari
Ushbu ma'lumotni buyruq yordamida olishingiz mumkin nomlanmagan.
[user@testhost ~]$ uname -a
Linux alexander 3.10.0-123.8.1.el7.x86_64 #1 SMP Mon Sep 22 19:06:58 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
Chiqish qaysi formatda ishlab chiqarilganligini tushunish uchun siz murojaat qilishingiz mumkin Yordam bering'ushbu buyruq uchun:
[user@testhost ~]$ uname --help
Использование: uname [КЛЮЧ]…
Печатает определенные сведения о системе. Если КЛЮЧ не задан,
подразумевается -s.
-a, --all напечатать всю информацию, в следующем порядке,
кроме -p и -i, если они неизвестны:
-s, --kernel-name напечатать имя ядра
-n, --nodename напечатать имя машины в сети
-r, --release напечатать номер выпуска операционной системы
-v, --kernel-version напечатать версию ядра
-m, --machine напечатать тип оборудования машины
-p, --processor напечатать тип процессора или «неизвестно»
-i, --hardware-platform напечатать тип аппаратной платформы или «неизвестно»
-o, --operating-system напечатать имя операционной системы
--help показать эту справку и выйти
--version показать информацию о версии и выйти
Xotira haqida ma'lumot
Qancha RAM bandligini yoki bo'sh ekanligini tushunish uchun siz buyruqdan foydalanishingiz mumkin ozod.
[user@testhost ~]$ free -h
total used free shared buff/cache available
Mem: 3,9G 555M 143M 56M 3,2G 3,0G
Swap: 0B 0B 0B
Fayl tizimlari haqida ma'lumot (bo'sh disk maydoni)
komanda df o'rnatilgan fayl tizimlarida qancha joy bo'sh va bandligini ko'rish imkonini beradi.
[user@testhost ~]$ df -hT
Файловая система Тип Размер Использовано Дост Использовано% Cмонтировано в
/dev/vda1 ext4 79G 21G 55G 27% /
devtmpfs devtmpfs 2,0G 0 2,0G 0% /dev
tmpfs tmpfs 2,0G 0 2,0G 0% /dev/shm
tmpfs tmpfs 2,0G 57M 1,9G 3% /run
tmpfs tmpfs 2,0G 0 2,0G 0% /sys/fs/cgroup
tmpfs tmpfs 396M 0 396M 0% /run/user/1001
Variant -T fayl tizimi turi haqida xulosa chiqarish kerakligini bildiradi.
Tizimdagi vazifalar va turli statistik ma'lumotlar haqida ma'lumot
Buning uchun buyruqdan foydalaning eng. U turli xil ma'lumotlarni ko'rsatishga qodir: masalan, operativ xotiradan foydalanish bo'yicha yuqori jarayonlar yoki protsessor vaqtini ishlatish bo'yicha yuqori jarayonlar. Shuningdek, u xotira, protsessor, ish vaqti va LA (o'rtacha yuklanish) haqida ma'lumotlarni ko'rsatadi.
[user@testhost ~]$ top | head -10
top - 17:19:13 up 154 days, 6:59, 3 users, load average: 0.21, 0.21, 0.27
Tasks: 2169 total, 2 running, 2080 sleeping, 0 stopped, 0 zombie
Cpu(s): 1.7%us, 0.7%sy, 0.0%ni, 97.5%id, 0.0%wa, 0.0%hi, 0.1%si, 0.0%st
Mem: 125889960k total, 82423048k used, 43466912k free, 16026020k buffers
Swap: 0k total, 0k used, 0k free, 31094516k cached
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
25282 user 20 0 16988 3936 1964 R 7.3 0.0 0:00.04 top
4264 telegraf 20 0 2740m 240m 22m S 1.8 0.2 23409:39 telegraf
6718 root 20 0 35404 4768 3024 S 1.8 0.0 0:01.49 redis-server
Ushbu yordamchi dastur boy funksionallikka ega, shuning uchun siz uni tez-tez ishlatishingiz kerak bo'lsa, uning hujjatlarini o'qib chiqish yaxshiroqdir.
Tarmoq trafigini yig'ish
Linuxda tarmoq trafigini to'xtatish uchun yordamchi dastur ishlatiladi tcpdump. 12345 portidagi trafikni tashlash uchun siz quyidagi buyruqdan foydalanishingiz mumkin:
[user@testhost ~]$ sudo tcpdump -i any -A port 12345
Variant -A biz ASCII-da chiqishni ko'rishni xohlayotganimizni aytadi (shuning uchun bu matn protokollari uchun yaxshi), - men har qanday bizni tarmoq interfeysi qiziqtirmasligini bildiradi, port — qaysi port trafigini tashlash kerak. O'rniga port foydalanishingiz mumkin mezbon, yoki kombinatsiya mezbon и port (host A va port X). Yana bir foydali variant bo'lishi mumkin -n — chiqishdagi manzillarni xost nomlariga aylantirmang.
Agar trafik ikkilik bo'lsa-chi? Keyin variant bizga yordam beradi -X - hex va ASCIIda ma'lumotlarni chiqarish:
[user@testhost ~]$ sudo tcpdump -i any -X port 12345
Shuni hisobga olish kerakki, ikkala foydalanish holatida IP-paketlar chiqariladi, shuning uchun ularning har birining boshida ikkilik IP va TCP sarlavhalari bo'ladi. Bu so'rov uchun misol chiqishi "123" 12345 portida tinglayotgan serverga yuborildi:
[user@testhost ~]$ sudo tcpdump -i any -X port 12345
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
14:27:13.224762 IP localhost.49794 > localhost.italk: Flags [P.], seq 2262177478:2262177483, ack 3317210845, win 342, options [nop,nop,TS val 3196604972 ecr 3196590131], length 5
0x0000: 4510 0039 dfb6 4000 4006 5cf6 7f00 0001 E..9..@.@......
0x0010: 7f00 0001 c282 3039 86d6 16c6 c5b8 9edd ......09........
0x0020: 8018 0156 fe2d 0000 0101 080a be88 522c ...V.-........R,
0x0030: be88 1833 3132 330d 0a00 0000 0000 0000 ...3123.........
0x0040: 0000 0000 0000 0000 00 .........
Chiqish o'rniga
Albatta, Linuxda Habré, StackOverflow va boshqa saytlarda o'qishingiz mumkin bo'lgan yana ko'p qiziqarli narsalar mavjud (men sizga misol keltiraman. , bu ham ). Tizim ma'murlari va DevOps serverlarni sozlash uchun ko'plab buyruqlar va yordamchi dasturlardan foydalanadilar, lekin hatto testerlarda ham ro'yxatdagi buyruqlar etarli bo'lmasligi mumkin. Mijoz va server o'rtasidagi ba'zi qiyin vaqt tugashining to'g'riligini yoki bo'sh disk maydoni bo'lmaganda serverning ishlashini tekshirishingiz kerak bo'lishi mumkin. Men, masalan, hozirda ko'plab kompaniyalar tomonidan faol foydalaniladigan Docker haqida gapirmayapman. Ushbu ma'lumotnomaning davomi sifatida, xizmatlarni sinovdan o'tkazish jarayonida turli xil Linux konsol yordam dasturlaridan foydalanishning bir nechta misollarini ko'rib chiqish qiziq bo'ladimi? Izohlarda eng yaxshi jamoalaringizni ham baham ko'ring :)
Manba: www.habr.com