diff options
| -rw-r--r-- | PKGBUILD | 29 | ||||
| -rw-r--r-- | README.md | 23 | ||||
| l--------- | fortune-mod-rtfm-20161104-4-any.pkg.tar.xz | 1 | ||||
| -rw-r--r-- | fortune-rtfm | 10246 | ||||
| -rw-r--r-- | generate.sh | 23 | ||||
| -rw-r--r-- | pkg/fortune-mod-rtfm/.BUILDINFO | 232 | ||||
| -rw-r--r-- | pkg/fortune-mod-rtfm/.MTREE | bin | 0 -> 462 bytes | |||
| -rw-r--r-- | pkg/fortune-mod-rtfm/.PKGINFO | 14 | ||||
| -rw-r--r-- | pkg/fortune-mod-rtfm/usr/share/fortune/rtfm | 10246 | ||||
| -rw-r--r-- | pkg/fortune-mod-rtfm/usr/share/fortune/rtfm.dat | bin | 0 -> 4732 bytes | |||
| l--------- | src/fortune-rtfm | 1 | ||||
| -rw-r--r-- | src/rtfm | 10246 | ||||
| -rw-r--r-- | src/rtfm.dat | bin | 0 -> 4732 bytes | |||
| -rw-r--r-- | words | 44 |
14 files changed, 31105 insertions, 0 deletions
diff --git a/PKGBUILD b/PKGBUILD new file mode 100644 index 0000000..f4a89af --- /dev/null +++ b/PKGBUILD @@ -0,0 +1,29 @@ +# Contributor: aurélien DESBRIÈRES <aurelien@hackers.camp> + +pkgname=fortune-mod-rtfm +pkgver=20161104 +pkgrel=4 +pkgdesc="Fortune cookies: Read The Fucking Manual! Because most of people read them to late." +arch=('any') +license=('custom') +depends=('fortune-mod') +groups=('fortune-mods') +source=('fortune-rtfm') +md5sums=('60c61f79673ba6528adb4398ed64bd50') +url="ftp://ftp.hackers.camp/fortune-rtfm" + +build() { + if true; then # change true to false to have pure ASCII quotes + cp "${srcdir}/fortune-rtfm" "${srcdir}/rtfm" + else + sed "s/’/'/g; s/é/e/g; s/è/e/g;" "${srcdir}/fortune-rtfm" > "${srcdir}/rtfm" + fi + strfile "${srcdir}/rtfm" "${srcdir}/rtfm.dat" +} + +package() { + install -D -m644 "${srcdir}/rtfm" "${pkgdir}/usr/share/fortune/rtfm" + install -D -m644 "${srcdir}/rtfm.dat" "${pkgdir}/usr/share/fortune/rtfm.dat" +} + +md5sums=('3eb6def3cbff562feb545f73fbc0a0d3') diff --git a/README.md b/README.md new file mode 100644 index 0000000..baed518 --- /dev/null +++ b/README.md @@ -0,0 +1,23 @@ +# fortune-mod-rtfm +> Because the manual is that thing you try to read ever to late +> here a fortune-mod for that + +--- + +## How to? +git clone the stuff, then pacman -U fortune-mod-rtfm.xz +and + +Just write +```shell +command fortune rtfm +``` +To your .bashrc + + +Have fun! + + +### Bug ... Wishes or anything else? +aurelien@hackers.camp + diff --git a/fortune-mod-rtfm-20161104-4-any.pkg.tar.xz b/fortune-mod-rtfm-20161104-4-any.pkg.tar.xz new file mode 120000 index 0000000..70f375c --- /dev/null +++ b/fortune-mod-rtfm-20161104-4-any.pkg.tar.xz @@ -0,0 +1 @@ +/home/aurelien/build/packages/fortune-mod-rtfm-20161104-4-any.pkg.tar.xz
\ No newline at end of file diff --git a/fortune-rtfm b/fortune-rtfm new file mode 100644 index 0000000..a218f0a --- /dev/null +++ b/fortune-rtfm @@ -0,0 +1,10246 @@ +if - "use" a Perl module if a condition holds (also can "no" a module) +The "if" module is used to conditionally load or unload another module. The construct +will load MODULE only if CONDITION evaluates to true. The above statement has no effect unless +"CONDITION" is true. If the CONDITION does evaluate to true, then the above line has the same effect as: +The use of "=>" above provides necessary quoting of "MODULE". If you don't use the fat comma (eg you +% +select — synchronous I/O multiplexing +#include <sys/select.h> +int select(int nfds, fd_set *restrict readfds, +fd_set *restrict writefds, fd_set *restrict errorfds, +struct timeval *restrict timeout); +Refer to pselect(). +% +time - time a simple command or give resource usage +time [options] command [arguments...] +The time command runs the specified program command with the given arguments. When command finishes, +time writes a message to standard error giving timing statistics about this program run. These statis‐ +tics consist of (i) the elapsed real time between invocation and termination, (ii) the user CPU time (the +pathname (something like /usr/bin/time). +% +alias — define or display aliases +alias [alias-name[=string]...] +The alias utility shall create or redefine alias definitions or write the values of existing alias defi‐ +nitions to standard output. An alias definition provides a string value that shall replace a command name +An alias definition shall affect the current shell execution environment and the execution environments +% +bg — run jobs in the background +bg [job_id...] +If job control is enabled (see the description of set −m), the bg utility shall resume suspended jobs +ground jobs. If the job specified by job_id is already a running background job, the bg utility shall +have no effect and shall exit successfully. +Using bg to place a job into the background shall cause its process ID to become ``known in the current +% +bind — bind a name to a socket +#include <sys/socket.h> +int bind(int socket, const struct sockaddr *address, +socklen_t address_len); +The bind() function shall assign a local socket address address to a socket identified by descriptor +socket that has no local socket address assigned. Sockets created with the socket() function are ini‐ +tially unnamed; they are identified only by their address family. +% +break — exit from for, while, or until loop +break [n] +The break utility shall exit from the smallest enclosing for, while, or until loop, if any; or from the +nth enclosing loop if n is specified. The value of n is an unsigned decimal integer greater than or equal +outermost enclosing loop shall be exited. Execution shall continue with the command immediately following +the loop. +% +cd — change the working directory +cd [−L|−P] [directory] +cd − +The cd utility shall change the working directory of the current shell execution environment (see Section +the symbol curpath represents an intermediate value used to simplify the description of the algorithm +used by cd. There is no requirement that curpath be made visible to the application.) +% +command — execute a simple command +command [−p] command_name [argument...] +command [−p][−v|−V] command_name +The command utility shall cause the shell to treat the arguments as a simple command, suppressing the +If the command_name is the same as the name of one of the special built-in utilities, the special proper‐ +% +continue — continue for, while, or until loop +continue [n] +The continue utility shall return to the top of the smallest enclosing for, while, or until loop, or to +while or until loop or performing the next assignment of a for loop, and re-executing the loop if appro‐ +priate. +% +echo - display a line of text +echo [SHORT-OPTION]... [STRING]... +echo LONG-OPTION +Echo the STRING(s) to standard output. +-n do not output the trailing newline +-e enable interpretation of backslash escapes +-E disable interpretation of backslash escapes (default) +--help display this help and exit +% +eval — construct command by concatenating arguments +eval [argument...] +The eval utility shall construct a command by concatenating arguments together, separating each with a +<space> character. The constructed command shall be read and executed by the shell. +None. +% +exec — execute commands and open, close, or copy file descriptors +exec [command [argument...]] +The exec utility shall open, close, and/or copy file descriptors as specified by any redirections as part +of the command. +are opened with associated redirection statements, it is unspecified whether those file descriptors +remain open when the shell invokes another utility. Scripts concerned that child shells could misuse +% +exit — cause the shell to exit +exit [n] +The exit utility shall cause the shell to exit with the exit status specified by the unsigned decimal +undefined. +A trap on EXIT shall be executed before the shell terminates, except when the exit utility is invoked in +% +export — set the export attribute for variables +export name[=word]... +export −p +The shell shall give the export attribute to the variables corresponding to the specified names, which +shall cause them to be in the environment of subsequently executed commands. If the name of a variable is +followed by =word, then the value of that variable shall be set to word. +% +false - do nothing, unsuccessfully +false [ignored command line arguments] +false OPTION +Exit with a status code indicating failure. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +fc — process the command history list +fc [−r] [−e editor] [first [last]] +fc −l [−nr] [first [last]] +fc −s [old=new] [first] +The fc utility shall list, or shall edit and re-execute, commands previously entered to an interactive +sh. +% +fg — run jobs in the foreground +fg [job_id] +If job control is enabled (see the description of set −m), the fg utility shall move a background job +Using fg to place a job into the foreground shall remove its process ID from the list of those ``known in +% +getopts — parse utility options +getopts optstring name [arg...] +The getopts utility shall retrieve options and option-arguments from a list of parameters. It shall sup‐ +Each time it is invoked, the getopts utility shall place the value of the next option in the shell vari‐ +able specified by the name operand and the index of the next argument to be processed in the shell vari‐ +% +hash — remember or report utility locations +hash [utility...] +hash −r +The hash utility shall affect the way the current shell environment remembers the locations of utilities +fied, it shall add utility locations to its list of remembered locations or it shall purge the contents +of the list. When no arguments are specified, it shall report on the contents of the list. +% +history - GNU History Library +Many programs read input from the user a line at a time. The GNU History library is able to keep track +of those lines, associate arbitrary data with each line, and utilize information from previous lines in +composing new ones. +HISTORY EXPANSION +The history library supports a history expansion feature that is identical to the history expansion in +History expansions introduce words from the history list into the input stream, making it easy to repeat +commands, insert the arguments to a previous command into the current input line, or fix errors in previ‐ +ous commands quickly. +% +jobs — display status of jobs in the current session +jobs [−l|−p] [job_id...] +The jobs utility shall display the status of jobs that were started in the current shell environment; see +When jobs reports the termination status of a job, the shell shall remove its process ID from the list of +% +kill - terminate a process +kill [-signal|-s signal|-p] [-q value] [-a] [--] pid|name... +kill -l [number] | -L +The command kill sends the specified signal to the specified processes or process groups. If no signal +caught. +Most modern shells have a builtin kill function, with a usage rather similar to that of the command +described here. The --all, --pid, and --queue options, and the possibility to specify processes by com‐ +mand name, are local extensions. +If signal is 0, then no actual signal is sent, but error checking is still performed. +% +login, logout - write utmp and wtmp entries +#include <utmp.h> +void login(const struct utmp *ut); +int logout(const char *ut_line); +Link with -lutil. +The utmp file records who is currently using the system. The wtmp file records all logins and logouts. +The function login() takes the supplied struct utmp, ut, and writes it to both the utmp and the wtmp +file. +% +printf - format and print data +printf FORMAT [ARGUMENT]... +printf OPTION +Print ARGUMENT(s) according to FORMAT, or execute according to OPTION: +--help display this help and exit +--version +output version information and exit +FORMAT controls the output as in C printf. Interpreted sequences are: +\" double quote +% +pwd - print name of current/working directory +pwd [OPTION]... +Print the full filename of the current working directory. +-L, --logical +use PWD from environment, even if it contains symlinks +-P, --physical +avoid all symlinks +--help display this help and exit +--version +% +read — read a line from standard input +read [−r] var... +The read utility shall read a single line from standard input. +By default, unless the −r option is specified, <backslash> shall act as an escape character. An unescaped +<backslash> shall preserve the literal value of the following character, with the exception of a <new‐ +line>. If a <newline> follows the <backslash>, the read utility shall interpret this as line continua‐ +tion. The <backslash> and <newline> shall be removed before splitting the input into fields. All other +% +readonly — set the readonly attribute for variables +readonly name[=word]... +readonly −p +The variables whose names are specified shall be given the readonly attribute. The values of variables +with the readonly attribute cannot be changed by subsequent assignment, nor can those variables be unset +by the unset utility. If the name of a variable is followed by =word, then the value of that variable +shall be set to word. +% +return — return from a function or dot script +return [n] +The return utility shall cause the shell to stop executing the current function or dot script. If the +shell is not currently executing a function or dot script, the results are unspecified. +None. +% +set — set or unset options and positional parameters +set [−abCefhmnuvx] [−o option] [argument...] +set [+abCefhmnuvx] [+o option] [argument...] +set −− [argument...] +set −o +set +o +% +shift — shift positional parameters +shift [n] +the new number of positional parameters. +The value n shall be an unsigned decimal integer less than or equal to the value of the special parameter +% +test - check file types and compare values +test EXPRESSION +test +[ EXPRESSION ] +[ ] +[ OPTION +Exit with the status determined by EXPRESSION. +--help display this help and exit +--version +output version information and exit +% +times — write process times +times +The times utility shall write the accumulated user and system times for the shell and for all of its +child processes, in the following POSIX locale format: +"%dm%fs %dm%fs\n%dm%fs %dm%fs\n", <shell user minutes>, +<shell user seconds>, <shell system minutes>, +<shell system seconds>, <children user minutes>, +% +trap — trap signals +trap n [condition...] +trap [action condition...] +If the first operand is an unsigned decimal integer, the shell shall treat all operands as conditions, +and shall reset each condition to the default value. Otherwise, if there are operands, the first is +treated as an action and the remaining as conditions. +If action is '−', the shell shall reset each condition to the default value. If action is null (""), the +% +true - do nothing, successfully +true [ignored command line arguments] +true OPTION +Exit with a status code indicating success. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +type — write a description of command type +type name... +The type utility shall indicate how each argument would be interpreted if used as a command name. +None. +OPERANDS +% +ulimit — set or report file size limit +ulimit [−f] [blocks] +The ulimit utility shall set or report the file-size writing limit imposed on files written by the shell +increase the limit. +% +umask — get or set the file mode creation mask +umask [−S] [mask] +The umask utility shall set the file mode creation mask of the current shell execution environment (see +affect the initial value of the file permission bits of subsequently created files. If umask is called in +a subshell or separate utility execution environment, such as one of the following: +% +unalias — remove alias definitions +unalias alias-name... +unalias −a +Substitution. The aliases shall be removed from the current shell execution environment; see Section +% +unset — unset values and attributes of variables and functions +unset [−fv] name... +Each variable or function specified by name shall be unset. +If −v is specified, name refers to a variable name and the shell shall unset it and remove it from the +environment. Read-only variables cannot be unset. +If −f is specified, name refers to a function and the shell shall unset the function definition. +% +wait — await process completion +wait [pid...] +last command in each element of the asynchronous list shall become known in the current shell execution +If the wait utility is invoked with no operands, it shall wait until all process IDs known to the invok‐ +ing shell have terminated and exit with a zero exit status. +% +timedatectl - Control the system time and date +The following options are understood: +--no-ask-password +Do not query the user for authentication for privileged operations. +--adjust-system-clock +% +iptables-save — dump iptables rules to stdout +ip6tables-save — dump iptables rules to stdout +iptables-save [-M modprobe] [-c] [-t table] +ip6tables-save [-M modprobe] [-c] [-t table] +iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable +format to STDOUT. Use I/O-redirection provided by your shell to write to a file. +-M, --modprobe modprobe_program +Specify the path to the modprobe program. By default, iptables-save will inspect /proc/sys/ker‐ +nel/modprobe to determine the executable's path. +% +c_rehash - Create symbolic links to files named by the hash values +c_rehash [-old] [-h] [-n] [-v] [ directory...] +c_rehash scans directories and calculates a hash value of each ".pem", ".crt", ".cer", or ".crl" file in +the specified directory list and creates symbolic links for each file, where the name of the link is the +as many programs that use OpenSSL require directories to be set up like this in order to find +certificates. +If any directories are named on the command line, then those are processed in turn. If not, then the +SSL_CERT_DIR environment variable is consulted; this shold be a colon-separated list of directories, like +the Unix PATH variable. If that is not set then the default directory (installation-specific but often +/usr/local/ssl/certs) is processed. +% +gdbm_load - re-create a GDBM database from a dump file. +[--block-size=NUM] [--cache-size=NUM] [--mmap=NUM] +[--mode=MODE] [--no-meta] [--replace] +gdbm_load [-Vh] [--help] [--usage] [--version] +Create a gdbm database file DB_FILE from the dump file FILE. If the FILE argument is not supplied, out‐ +put the created database to the standard error. +If the input file is in ASCII dump format, the mode and ownership of the created database are restored +% +yes - output a string repeatedly until killed +yes [STRING]... +yes OPTION +Repeatedly output a line with all specified STRING(s), or 'y'. +--help display this help and exit +--version +output version information and exit +Written by David MacKenzie. +% +named-checkconf - named configuration file syntax checking tool +named-checkconf [-h] [-v] [-j] [-t directory] {filename} [-p] [-x] [-z] +named-checkconf checks the syntax, but not the semantics, of a named configuration file. The file is +parsed and checked for syntax errors, along with all files included by it. If no file is specified, +/etc/named.conf is read by default. +run, even if named-checkconf was successful. named-checkconf can be run on these files explicitly, +however. +-h +% +grotty - groff driver for typewriter-like devices +grotty [ -bBcdfhioruUv ] [ -Fdir ] [ files... ] +It is possible to have whitespace between the -F option and its parameter. +grotty translates the output of GNU troff into a form suitable for typewriter-like devices. Normally +the standard input. A filename of - also causes grotty to read the standard input. Output is written to +the standard output. +foreground colors; additionally, bold and italic attributes can be used at the same time (by using the BI +% +systemd-machine-id-setup - Initialize the machine ID in /etc/machine-id +systemd-machine-id-setup +information about this file. +If the tool is invoked without the --commit switch, /etc/machine-id is initialized with a valid, new +machined ID if it is missing or empty. The new machine ID will be acquired in the following fashion: +used to initialize the machine ID in /etc/machine-id. +% +bridge - show / manipulate bridge addresses and devices +OBJECT := { link | fdb | mdb | vlan | monitor } +bridge link set dev DEV [ cost COST ] [ priority PRIO ] [ state STATE] [ guard { on | off } ] [ hairpin +{ on | off } ] [ fastleave { on | off } ] [ root_block { on | off } ] [ learning { on | off } ] [ +learning_sync { on | off } ] [ flood { on | off } ] [ hwmode { vepa | veb } ] [ self ] [ master ] +bridge link [ show ] [ dev DEV ] +bridge fdb { add | append | del | replace } LLADDR dev DEV { local | static | dynamic } [ self ] [ master +] [ router ] [ use ] [ dst IPADDR ] [ vni VNI ] [ port PORT ] [ via DEVICE ] +% +grub-mkrelpath - make a system path relative to its root +grub-mkrelpath [OPTION...] PATH +Transform a system filename into GRUB one. +-?, --help +give this help list +--usage +give a short usage message +-V, --version +print program version +% +vgrename — rename a volume group +will refuse to run or give warning messages. +a Volume Group with the same name as the Volume Group containing your root filesystem the machine might +not even boot correctly. However, the two Volume Groups should have different UUIDs (unless the disk was +cloned) so you can rename one of the conflicting Volume Groups with vgrename. +% +rename - rename files +rename [options] expression replacement file... +rename will rename the specified files by replacing the first occurrence of expression in their name by +replacement. +-s, --symlink +Do not rename a symlink but its target. +-v, --verbose +Show which files where renamed, if any. +-V, --version +% +grub-install - install GRUB to a device +grub-install [OPTION...] [OPTION] [INSTALL_DEVICE] +Install GRUB on your drive. +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +pvck — check physical volume metadata +calVolume [PhysicalVolume...] +pvck checks physical volume LVM metadata for consistency. +--labelsector sector +parameter allows you to specify a different starting sector for the scan and is useful for recov‐ +ery situations. For example, suppose the partition table is corrupted or lost on /dev/sda, but +% +xfs_copy - copy the contents of an XFS filesystem +xfs_copy -V +argument must be the pathname of the device or file containing the XFS filesystem. The remaining argu‐ +ments specify one or more target devices or file names. If the pathnames specify devices, a copy of the +source XFS filesystem is created on each device. The target can also be the name of a regular file, in +xfs_copy creates the file. The length of the resulting file is equal to the size of the source filesys‐ +tem. However, if the file is created on an XFS filesystem, the file consumes roughly the amount of space +actually used in the source filesystem by the filesystem and the XFS log. The space saving is because +xfs_copy seeks over free blocks instead of copying them and the XFS filesystem supports sparse files +efficiently. +% +pacman - package manager utility +pacman <operation> [options] [targets] +Pacman is a package management utility that tracks installed packages on a Linux system. It features +dependency support, package groups, install and uninstall scripts, and the ability to sync your local +machine with a remote repository to automatically upgrade packages. Pacman packages are a zipped tar +format. +Invoking pacman involves specifying an operation with any potential options and targets to operate on. A +target is usually a package name, file name, URL, or a search string. Targets can be provided as command +line arguments. Additionally, if stdin is not from a terminal and a single hyphen (-) is passed as an +% +ip - show / manipulate routing, devices, policy routing and tunnels +ip [ -force ] -batch filename +OBJECT := { link | address | addrlabel | route | rule | neigh | ntable | tunnel | tuntap | maddress | +flush-attempts } | -o[neline] | -rc[vbuf] [size] | -t[imestamp] | -ts[hort] | -n[etns] name | +-a[ll] | -c[olor] } +-V, -Version +% +mk_cmds - error table compiler +mk_cmds file +Mk_cmds converts a table listing command names and associated help messages into a C source file suitable +The source file name must end with a suffix of ``.ct''; the file consists of a declaration supplying the +name of the command table: +command_table name +followed by entries of the form: +[ request | unimplemented ] name, " string "[, abbrev]...; +% +uniq - report or omit repeated lines +uniq [OPTION]... [INPUT [OUTPUT]] +Filter adjacent matching lines from INPUT (or standard input), writing to OUTPUT (or standard output). +With no options, matching lines are merged to the first occurrence. +Mandatory arguments to long options are mandatory for short options too. +-c, --count +prefix lines by the number of occurrences +-d, --repeated +only print duplicate lines, one for each group +% +ldattach - attach a line discipline to a serial line +The ldattach daemon opens the specified device file (which should refer to a serial device) and attaches +the line discipline ldisc to it for processing of the sent and/or received data. It then goes into the +background keeping the device open so that the line discipline stays loaded. +With no arguments, ldattach prints usage information. +LINE DISCIPLINES +% +gawk - pattern scanning and processing language +gawk [ POSIX or GNU style options ] -f program-file [ -- ] file ... +gawk [ POSIX or GNU style options ] [ -- ] program-text file ... +Gawk is the GNU Project's implementation of the AWK programming language. It conforms to the definition +AWK Programming Language, by Aho, Kernighan, and Weinberger. Gawk provides the additional features found +in the current version of Brian Kernighan's awk and a number of GNU-specific extensions. +The command line consists of options to gawk itself, the AWK program text (if not supplied via the -f or +--file options), and values to be made available in the ARGC and ARGV pre-defined AWK variables. +When gawk is invoked with the --profile option, it starts gathering profiling statistics from the execu‐ +tion of the program. Gawk runs more slowly in this mode, and automatically produces an execution profile +% +lookbib - search bibliographic databases +lookbib [ -v ] [ -istring ] [ -tn ] filename... +lookbib prints a prompt on the standard error (unless the standard input is not a terminal), reads from +the standard input a line containing a set of keywords, searches the bibliographic databases filename... +for references containing those keywords, prints any references found on the standard output, and repeats +this process until the end of input. For each database filename to be searched, if an index filename.i +It is possible to have whitespace between a command line option and its parameter. +-v Print the version number. +% +size - list section sizes and total size. +size [-A|-B|--format=compatibility] +[--help] +[-d|-o|-x|--radix=number] +[--common] +[-t|--totals] +[--target=bfdname] [-V|--version] +[objfile...] +The GNU size utility lists the section sizes---and the total size---for each of the object or archive +files objfile in its argument list. By default, one line of output is generated for each object file or +each module in an archive. +objfile... are the object files to be examined. If none are specified, the file "a.out" will be used. +% +join - join lines of two files on a common field +For each pair of input lines with identical join fields, write a line to standard output. The default +join field is the first, delimited by blanks. +-a FILENUM +-e EMPTY +replace missing input fields with EMPTY +% +idle - make process 0 idle +#include <unistd.h> +int idle(void); +idle() is an internal system call used during bootstrap. It marks the process's pages as swappable, low‐ +ers its priority, and enters the main scheduling loop. idle() never returns. +EPERM. +RETURN VALUE +% +refer - preprocess bibliographic references for groff +refer [ -benvCPRS ] [ -an ] [ -cfields ] [ -fn ] [ -ifields ] [ -kfield ] [ -lm,n ] [ -pfilename ] +[ -sfields ] [ -tn ] [ -Bfield.macro ] [ filename... ] +refer copies the contents of filename... to the standard output, except that lines between .[ and .] are +are to be processed. +Each citation specifies a reference. The citation can specify a reference that is contained in a biblio‐ +graphic database by giving a set of keywords that only that reference contains. Alternatively it can +specify a reference by supplying a database record in the citation. A combination of these alternatives +is also possible. +% +xzmore, lzmore - view xz or lzma compressed (text) files +xzmore [file...] +lzmore [file...] +time on a soft-copy terminal. +To use a pager other than the default more, set environment variable PAGER to the name of the desired +program. The name lzmore is provided for backward compatibility with LZMA Utils. +e or q When the prompt --More--(Next file: file) is printed, this command causes xzmore to exit. +s When the prompt --More--(Next file: file) is printed, this command causes xzmore to skip the next +file and continue. +% +sserver [ -p port ] [ -S keytab ] [ server_port ] +sserver, it performs a Kerberos authentication, and then sserver returns to sclient the Kerberos princi‐ +pal which was used for the Kerberos authentication. It makes a good test that Kerberos has been success‐ +fully installed on a machine. +The service name used by sserver and sclient is sample. Hence, sserver will require that there be a +The -S option allows for a different keytab than the default. +% +wc - print newline, word, and byte counts for each file +wc [OPTION]... [FILE]... +wc [OPTION]... --files0-from=F +Print newline, word, and byte counts for each FILE, and a total line if more than one FILE is specified. +A word is a non-zero-length sequence of characters delimited by white space. +With no FILE, or when FILE is -, read standard input. +word, character, byte, maximum line length. +-c, --bytes +print the byte counts +% +calc_tickadj - Calculates optimal value for tick given ntp drift file. +calc_tickadj [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +The calc_tickadj script uses provided ntp drift file to generate optimal tick value. Generally, ntpd can +do better job if the drift value is the smallest possible number. +The example output of +$ ./calc_tickadj +9999 usec; 9999779 nsec +$ cat /etc/ntp/drift +% +pcap-config - write libpcap compiler and linker flags to standard output +pcap-config [ --static ] [ --cflags | --libs | --additional-libs ] +When run with the --cflags option, pcap-config writes to the standard output the -I compiler flags +required to include libpcap's header files. When run with the --libs option, pcap-config writes to the +standard output the -L and -l linker flags required to link with libpcap, including -l flags for +libraries required by libpcap. When run with the --additional-libs option, pcap-config writes to the +standard output the -L and -l flags for libraries required by libpcap, but not the -lpcap flag to link +with libpcap itself. +By default, it writes flags appropriate for compiling with a dynamically-linked version of libpcap; the +--static flag causes it to write flags appropriate for compiling with a statically-linked version of +libpcap. +% +xfs_logprint - print the log of an XFS filesystem +xfs_logprint [ options ] device +the partition or logical volume containing the filesystem. The device can be a regular file if the -f +option is used. The contents of the filesystem remain undisturbed. There are two major modes of opera‐ +tion in xfs_logprint. +One mode is better for filesystem operation debugging. It is called the transactional view and is +enabled through the -t option. The transactional view prints only the portion of the log that pertains to +tries to display each transaction without regard to how they are split across log records. +The second mode starts printing out information from the beginning of the log. Some error blocks might +% +kswitch - switch primary ticket cache +kswitch {-c cachename|-p principal} +kswitch makes the specified credential cache the primary cache for the collection, if a cache collection +is available. +-c cachename +Directly specifies the credential cache to be made primary. +-p principal +Causes the cache collection to be searched for a cache containing credentials for principal. If +one is found, that collection is made primary. +% +hexdump - display file contents in hexadecimal, decimal, octal, or ascii +hexdump [options] file... +The hexdump utility is a filter which displays the specified files, or standard input if no files are +specified, in a user-specified format. +-b, --one-byte-octal +One-byte octal display. Display the input offset in hexadecimal, followed by sixteen space-sepa‐ +rated, three-column, zero-filled bytes of input data, in octal, per line. +% +btrfs - a toolbox to manage btrfs filesystems +btrfs <command> [<args>] +The btrfs utility is a toolbox for managing btrfs filesystems. There are command groups to work with +There are also standalone tools for some tasks like btrfs-convert or btrfstune that were separate +historically and/or haven’t been merged to the main utility. See section STANDALONE TOOLS for more +details. +Any command name can be shortened as far as it stays unambiguous, however it is recommended to use full +% +xzdec, lzmadec - Small .xz and .lzma decompressors +xzdec [option...] [file...] +lzmadec [option...] [file...] +xzdec is a liblzma-based decompression-only tool for .xz (and only .xz) files. xzdec is intended to work +xz --decompress --stdout (and possibly a few other commonly used options) to decompress .xz files. +lzmadec is identical to xzdec except that lzmadec supports .lzma files instead of .xz files. +To reduce the size of the executable, xzdec doesn't support multithreading or localization, and doesn't +read options from XZ_DEFAULTS and XZ_OPT environment variables. xzdec doesn't support displaying inter‐ +process instead of displaying progress information. +% +mii-tool - view, manipulate media-independent interface status +mii-tool [-v, --verbose] [-V, --version] [-R, --reset] [-r, --restart] [-w, --watch] [-l, --log] [-A, +--advertise=media,...] [-F, --force=media] [-p, --phy=addr] interface ... +Most fast ethernet adapters use an MII to autonegotiate link speed and duplex setting. +Most intelligent network devices use an autonegotiation protocol to communicate what media technologies +they support, and then select the fastest mutually supported media technology. The -A or --advertise +options can be used to tell the MII to only advertise a subset of its capabilities. Some passive +devices, such as single-speed hubs, are unable to autonegotiate. To handle such devices, the MII proto‐ +-F or --force options can be used to force the MII to operate in one mode, instead of autonegotiating. +The -A and -F options are mutually exclusive. +% +lsblk - list block devices +lsblk [options] [device...] +lsblk lists information about all available or the specified block devices. The lsblk command reads the +sysfs filesystem and udev db to gather information. +The command prints all block devices (except RAM disks) in a tree-like format by default. Use lsblk +--help to get a list of all available columns. +The default output, as well as the default output from options like --fs and --topology, is subject to +change. So whenever possible, you should avoid using default outputs in your scripts. Always explicitly +define expected columns by using --output columns-list in environments where a stable output is required. +% +watch - execute a program periodically, showing output fullscreen +watch [options] command +run until interrupted. +-d, --differences [permanent] +Highlight the differences between successive updates. Option will read optional argument that +changes highlight to be permanent, allowing to see what has changed at least once since first +iteration. +-n, --interval seconds +% +slattach - attach a network interface to a serial line +slattach [-dehlLmnqv] [-c command] [-p proto] [-s speed] [tty] +Slattach is a tiny little program that can be used to put a normal terminal ("serial") line into one of +several "network" modes, thus allowing you to use it for point-to-point links to other computers. +tty Path to a serial device like /dev/ttyS*, /dev/cua* or /dev/ptmx to spawn a new pseudo tty. +[-c command] +tions when a link goes down. +[-d] Enable debugging output. Useful when determining why a given setup doesn't work. +% +systemd-notify - Notify service manager about start-up completion and other daemon status changes +used to send arbitrary information, encoded in an environment-block-like list of strings. Most +importantly, it can be used for start-up completion notification. +set for the service unit this command is called from. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +xfs_io - debug the I/O path of an XFS filesystem +xfs_io [ -adfmrRstxT ] [ -c cmd ] ... [ -p prog ] file +xfs_io -V +than the raw XFS volume itself. These code paths include not only the obvious read/write/mmap interfaces +for manipulating files, but also cover all of the XFS extensions (such as space preallocation, additional +inode flags, etc). +gram exits. +% +pkttyagent - Textual authentication helper +pkttyagent [--version] [--help] +pkttyagent [--process { pid | pid,pid-start-time } | --system-bus-name busname] [--notify-fd fd] +[--fallback] +pkttyagent is used to start a textual authentication agent for the subject specified by either --process +or --system-bus-name. If neither of these options are given, the parent process is used. +To get notified when the authentication agent has been registered either listen to the Changed D-Bus +signal or use --notify-fd to pass the number of a file descriptor that has been passed to the program. +If --fallback is used, the textual authentication agent will not replace an existing authentication +% +more - file perusal filter for crt viewing +more [options] file... +Options are also taken from the environment variable MORE (make sure to precede them with a dash (-)) but +command-line options will override those. +-d Prompt with "[Press space to continue, 'q' to quit.]", and display "[Press 'h' for instructions.]" +instead of ringing the bell when an illegal key is pressed. +-l Do not pause after any line containing a ^L (form feed). +% +head - output the first part of files +head [OPTION]... [FILE]... +header giving the file name. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --bytes=[-]NUM +print the first NUM bytes of each file; with the leading '-', print all but the last NUM bytes of +each file +% +expr - evaluate expressions +expr EXPRESSION +expr OPTION +--help display this help and exit +--version +output version information and exit +Print the value of EXPRESSION to standard output. A blank line below separates increasing precedence +% +ipset — administration tool for IP sets +| version | - } +-file filename } +% +objdump - display information from object files. +objdump [-a|--archive-headers] +[-b bfdname|--target=bfdname] +[-C|--demangle[=style] ] +[-d|--disassemble] +[-D|--disassemble-all] +[-z|--disassemble-zeroes] +[-EB|-EL|--endian={big | little }] +[-f|--file-headers] +[-F|--file-offsets] +[--file-start-context] +[-g|--debugging] +[-e|--debugging-tags] +[-h|--section-headers|--headers] +[-i|--info] +% +gresource - GResource tool +gresource [--section SECTION] list FILE [PATH] +gresource [--section SECTION] details FILE [PATH] +gresource [--section SECTION] extract FILE PATH +gresource sections FILE +gresource offers a simple commandline interface to GResource. It lets you list and extract resources that +have been compiled into a resource file or included in an elf file (a binary or a shared library). +% +lvmdiskscan scans all SCSI, (E)IDE disks, multiple devices and a bunch of other block devices in the sys‐ +tem looking for LVM physical volumes. The size reported is the real device size. Define a filter in +-l, --lvmpartition +Only reports Physical Volumes. +% +numfmt - Convert numbers from/to human-readable strings +numfmt [OPTION]... [NUMBER]... +Reformat NUMBER(s), or the numbers from standard input if none are specified. +Mandatory arguments to long options are mandatory for short options too. +--debug +print warnings about invalid input +-d, --delimiter=X +use X instead of whitespace for field delimiter +--field=FIELDS +% +logsave - save the output of a command in a logfile +logsave [ -asv ] logfile cmd_prog [ ... ] +The logsave program will execute cmd_prog with the specified argument(s), and save a copy of its output +to logfile. If the containing directory for logfile does not exist, logsave will accumulate the output +in memory until it can be written out. A copy of the output will also be written to standard output. +If cmd_prog is a single hyphen ('-'), then instead of executing a program, logsave will take its input +from standard input and save it in logfile +logsave is useful for saving the output of initial boot scripts until the /var partition is mounted, so +the output can be written to /var/log. +% +certtool - GnuTLS certificate tool +certtool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +or non interactively by specifying the template command line option. +provide it using the environment variables GNUTLS_PIN and GNUTLS_SO_PIN. +-d number, --debug=number +% +systemd-socket-activate - Test socket activation of daemons +connection. +The daemon to launch and its options should be specified after options intended for +systemd-socket-activate. +If the --inetd option is given, the socket file descriptor will be used as the standard input and output +of the launched process. Otherwise, standard input and output will be inherited, and sockets will be +systemd-socket-activate will be passed through to the daemon, in the original positions. Other sockets +% +losetup - set up and control loop devices +Get info: +losetup loopdev +losetup -l [-a] +losetup -j file [-o offset] +Detach a loop device: +losetup -d loopdev... +Detach all associated loop devices: +% +passwd - change user password +passwd [options] [LOGIN] +the account or associated password validity period. +Password Changes +and compared against the stored password. The user has only one chance to enter the correct password. The +After the password has been entered, password aging information is checked to see if the user is +permitted to change the password at this time. If not, passwd refuses to change the password and exits. +% +unicode_stop - revert keyboard and console from unicode mode +unicode_stop +The unicode_stop command will more-or-less undo the effect of unicode_start. It puts the keyboard in +% +sudo, sudoedit — execute a command as another user +sudo -h | -K | -k | -V +sudo -v [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-u user] +sudo -l [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command] +sudo [-AbEHnPS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-r role] [-t type] +[-u user] [VAR=value] [-i | -s] [command] +sudoedit [-AknS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-u user] file ... +sudo allows a permitted user to execute a command as the superuser or another user, as specified by the +security policy. The invoking user's real (not effective) user ID is used to determine the user name with +which to query the security policy. +sudo supports a plugin architecture for security policies and input/output logging. Third parties can +develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. +% +groff - front-end for the groff document formatting system +groff [-abcegijklpstzCEGNRSUVXZ] [-d cs] [-D arg] [-f fam] [-F dir] [-I dir] [-K arg] [-L arg] [-m name] +[-M dir] [-n num] [-o list] [-P arg] [-r cn] [-T dev] [-w name] [-W name] [file ...] +groff -h | --help +groff -v | --version [option ...] +The groff program and macro suite is the implementation of a roff(7) system within the free software col‐ +lection GNU ⟨http://www.gnu.org⟩. The groff system has all features of the classical roff, but adds many +extensions. +% +tzselect - select a timezone +tzselect +The tzselect program asks the user for information about the current location, and outputs the resulting +timezone description to standard output. The output is suitable as a value for the TZ environment vari‐ +able. +All interaction with the user is done via standard input and standard error. +The exit status is zero if a timezone was successfully obtained from the user, nonzero otherwise. +ENVIRONMENT +% +modprobe - Add and remove modules from the Linux Kernel +modprobe [-v] [-V] [-C config-file] [-n] [-i] [-q] [-b] [modulename] [module parameters...] +modprobe [-r] [-v] [-n] [-i] [modulename...] +modprobe [-c] +modprobe [--dump-modversions] [filename] +modprobe intelligently adds or removes a module from the Linux kernel: note that for convenience, there +is no difference between _ and - in module names (automatic underscore conversion is performed). +modprobe looks in the module directory /lib/modules/`uname -r` for all the modules and other files, +modprobe will also use module options specified on the kernel command line in the form of +% +systemd-hwdb - hardware database management tool +systemd-hwdb [options] update +systemd-hwdb [options] query modalias +systemd-hwdb expects a command and command specific arguments. It manages the binary hardware database. +-h, --help +Print help text. +--usr +Generate in /usr/lib/udev instead of /etc/udev. +% +named - Internet domain name server +[-M option] [-m flag] [-n #cpus] [-p port] [-s] [-S #max-socks] [-t directory] [-U #listeners] +[-u user] [-v] [-V] [-X lock-file] [-x cache-file] +When invoked without arguments, named will read the default configuration file /etc/named.conf, read any +initial data, and listen for queries. +% +systemctl - Control the systemd system and service manager +manages. +The following options are understood: +-t, --type= +The argument should be a comma-separated list of unit types such as service and socket. +If one of the arguments is a unit type, when listing units, limit display to certain unit types. +% +geouplookup6 - look up country using IP Address or hostname +geouplookup6 [-d directory] [-f filename] [-v] <ipaddress|hostname> +geouplookup6 uses the GeoIP library and database to find the Country that an IP address or hostname orig‐ +inates from. You must install a database suitable for geoiplookup6. IE: GeoIPv6.dat +For example: +geoiplookup6 ipv6.google.com +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +unshare - run program with some namespaces unshared from parent +unshare [options] program [arguments] +Unshares the indicated namespaces from the parent process and then executes the specified program. +The namespaces can optionally be made persistent by bind mounting /proc/pid/ns/type files to a filesystem +The namespaces to be unshared are indicated via options. Unshareable namespaces are: +mount namespace +Mounting and unmounting filesystems will not affect the rest of the system (CLONE_NEWNS flag), +except for filesystems which are explicitly marked as shared (with mount --make-shared; see +% +mechanisms which use the standard libsasl database of user secrets. +the -d (delete user) flag. +% +pinky - lightweight finger +pinky [OPTION]... [USER]... +-l produce long format output for the specified USERs +-b omit the user's home directory and shell in long format +-h omit the user's project file in long format +-p omit the user's plan file in long format +-s do short format output, this is the default +-f omit the line of column headings in short format +% +tic - the terminfo entry-description compiler +The tic command translates a terminfo file from source format into compiled format. The compiled format +hashed database (one record per entry). The tic command writes only one type of entry, depending on how +it was built: +· For directory trees, the top-level directory, e.g., /usr/share/terminfo, specifies the location of +the database. +· For hashed databases, a filename is needed. If the given file is not found by that name, but can be +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +troff - the troff processor of the groff text formatting system +troff [-abcivzCERU] [-d cs] [-f fam] [-F dir] [-I dir] [-m name] [-M dir] [-n num] [-o list] [-r cn] +[-T name] [-w name] [-W name] [file ...] +appropriate order and with the appropriate options. +It is possible to have whitespace between a command line option and its parameter. +-a Generate an ASCII approximation of the typeset output. +% +gtester - test running utility +gtester [OPTION...] [testprogram] +gtester is a utility to run unit tests that have been written using the GLib test framework. +When called with the -o option, gtester writes an XML report of the test results, which can be converted +into HTML using the gtester-report utility. +-h, --help +print help and exit +-v, --version +print version information and exit +% +lexgrog - parse header information in man pages +lexgrog [-m|-c] [-dfw?V] [-E encoding] file ... +lexgrog is an implementation of the traditional “groff guess” utility in lex. It reads the list of files +on its command line as either man page source files or preformatted “cat” pages, and displays their name +and description as used by apropos and whatis, the list of preprocessing filters required by the man page +before it is passed to nroff or troff, or both. +grams that need to check man pages for correctness. If one of lexgrog's input files is “-”, it will read +from standard input; if any input file is compressed, a decompressed version will be read automatically. +-d, --debug +% +lvscan — scan (all disks) for Logical Volumes +lockingfailure] [-P|--partial] [--reportformat {basic|json}] [-v|--verbose] +lvscan scans all known volume groups or all supported LVM block devices in the system for defined Logical +Volumes. The output consists of one line for each Logical Volume indicating whether or not it is active, +obtain more-comprehensive information about the Logical Volumes. +--all Include information in the output about internal Logical Volumes that are components of normally- +accessible Logical Volumes, such as mirrors, but which are not independently accessible (e.g. not +% +msggrep - pattern matching on message catalog +msggrep [OPTION] [INPUTFILE] +Extracts all messages of a translation catalog that match a given pattern or belong to some given source +files. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +lvmconf — LVM configuration modifier +lvmconf [--disable-cluster] [--enable-cluster] [--enable-halvm] [--disable-halvm] [--file <configfile>] +[--lockinglib <lib>] [--lockinglibdir <dir>] [--services] [--mirrorservice] [--startstopservices] +lvmconf is a script that modifies the locking configuration in an lvm configuration file. See +lvm configuration if needed. +--disable-cluster +Set locking_type to the default non-clustered type. Also reset lvmetad use to its default. +--enable-cluster +Set locking_type to the default clustered type on this system. Also disable lvmetad use as it is +% +colrm - remove columns from a file +colrm [first [last]] +colrm removes selected columns from a file. Input is taken from standard input. Output is sent to stan‐ +dard output. +If called with one parameter the columns of each line will be removed starting with the specified first +column. If called with two parameters the columns from the first column to the last column will be +removed. +-V, --version +% +ntpdc - vendor-specific NTPD control program +ntpdc [-flags] [-flag [value]] [--option-name[[=| ]value]] [ host ...] +using a much more sane interface. +either in interactive mode or controlled using command line arguments. Extensive state and statistics +information is available through the ntpdc interface. In addition, nearly all the configuration options +ntpdc. +% +paste - merge lines of files +paste [OPTION]... [FILE]... +Write lines consisting of the sequentially corresponding lines from each FILE, separated by TABs, to +standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --delimiters=LIST +reuse characters from LIST instead of TABs +-s, --serial +% +vgsplit — split a volume group into two +vgsplit [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-c|--clustered {y|n}] [--commandprofile Pro‐ +[-p|--maxphysicalvolumes MaxPhysicalVolumes] [--[vg]metadatacopies NumberOfCopies|unmanaged|all] +[PhysicalVolumePath...] +The physical volumes moved can be specified either explicitly via PhysicalVolumePath, or implicitly by -n +moved. +for the new volume group can be specified with --alloc, --clustered, --maxlogicalvolumes, --metadatatype, +% +makepkg - package build utility +makepkg [options] [ENVVAR=value] [ENVVAR+=value] ... +makepkg is a script to automate the building of packages. The requirements for using the script are a +build-capable *nix platform and a custom build script for each package you wish to build (known as a +The advantage to a script-based build is that the work is only done once. Once you have the build script +for a package, makepkg will do the rest: download and validate source files, check dependencies, +configure the build-time settings, build the package, install the package into a temporary root, make +customizations, generate meta-info, and package the whole thing up for pacman to use. +makepkg uses your current locale by default and does not unset it when building packages. If you wish +% +mev - a program to report mouse events +mev [ options ] +The `mev' program is part of the gpm package. The information below is extracted from the texinfo file, +which is the preferred source of information. +The mev program is modeled after xev. It prints to stdout the mouse console events it gets. +mev's default behaviour is to get anything, but command line switches can be used to set the various +fields in the Gpm_Connect structure, in order to customize the program's behaviour. I'm using mev to han‐ +dle mouse events to Emacs. +Command line switches for mev are the following: +% +last, lastb - show a listing of last logged in users +last [options] [username...] [tty...] +lastb [options] [username...] [tty...] +last searches back through the /var/log/wtmp file (or the file designated by the -f option) and displays +a list of all users logged in (and out) since that file was created. One or more usernames and/or ttys +be abbreviated, thus last 0 is the same as last tty0. +When catching a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal, +terminate. +The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all +% +mandb - create or update the manual page index caches +mandb [-dqsucpt?V] [-C file] [manpath] +mandb [-dqsut] [-C file] -f filename ... +mandb is used to initialise or manually update index database caches that are usually maintained by man. +The caches contain information relevant to the current state of the manual page system and the informa‐ +tion stored within them is used by the man-db utilities to enhance their speed and functionality. +When creating or updating an index, mandb will warn of bad ROFF .so requests, bogus manual page filenames +and manual pages from which the whatis cannot be parsed. +Supplying mandb with an optional colon-delimited path will override the internal system manual page hier‐ +archy search path, determined from information found within the man-db configuration file. +% +showconsolefont - Show the current EGA/VGA console screen font +showconsolefont [ -V ] [ -v ] [ -C console ] +The showconsolefont command outputs the current console font to stdout. The option -v prints additional +-C allows one to indicate the console involved. Its argument is a pathname. +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +gzexe - compress executable files in place +gzexe name ... +The gzexe utility allows you to compress executables in place and have them automatically uncompress and +execute when you run them (at a penalty in performance). For example if you execute ``gzexe +/usr/bin/gdb'' it will create the following two files: +/usr/bin/gdb~ is the original file and /usr/bin/gdb is the self-uncompressing executable file. You can +remove /usr/bin/gdb~ once you are sure that /usr/bin/gdb works properly. +% +recode-sr-latin - convert Serbian text from Cyrillic to Latin script +recode-sr-latin [OPTION] +Recode Serbian text from Cyrillic to Latin script. The input text is read from standard input. The con‐ +verted text is output to standard output. +Informative output: +-h, --help +display this help and exit +-V, --version +output version information and exit +% +nice - run a program with modified scheduling priority +the process). +Mandatory arguments to long options are mandatory for short options too. +-n, --adjustment=N +--help display this help and exit +% +zforce - force a '.gz' extension on all gzip files +zforce [ name ... ] +% +lwresd - lightweight resolver daemon +lwresd [-c config-file] [-C config-file] [-d debug-level] [-f] [-g] [-i pid-file] [-m flag] [-n #cpus] +lwresd is the daemon providing name lookup services to clients that use the BIND 9 lightweight resolver +library. It is essentially a stripped-down, caching-only name server that answers queries using the BIND +9 lightweight resolver protocol rather than the DNS protocol. +is used for lightweight resolver requests and responses. +Incoming lightweight resolver requests are decoded by the server which then resolves them using the DNS +protocol. When the DNS lookup completes, lwresd encodes the answers in the lightweight resolver format +% +tput, reset - initialize a terminal or query terminfo database +tput [-Ttype] capname [parms ... ] +tput [-Ttype] init +tput [-Ttype] reset +tput [-Ttype] longname +tput -S << +tput -V +The tput utility uses the terminfo database to make the values of terminal-dependent capabilities and +name of the requested terminal type. The result depends upon the capability's type: +string +tput writes the string to the standard output. No trailing newline is supplied. +% +xfs_estimate - estimate the space that an XFS filesystem will take +xfs_estimate [ -h ] [ -b blocksize ] [ -i logsize ] +[ -e logsize ] [ -v ] directory ... +xfs_estimate -V +For each directory argument, xfs_estimate estimates the space that directory would take if it were copied +to an XFS filesystem. xfs_estimate does not cross mount points. The following definitions are used: +The xfs_estimate options are: +-b blocksize +% +request-key - Handle key instantiation callback requests from the kernel +/sbin/request-key <op> <key> <uid> <gid> <threadring> <processring> <sessionring> [<info>] +available. The kernel creates a partially set up key and then calls out to this program to instantiate +it. It is not intended to be called directly. +ERRORS +All errors will be logged to the syslog. +FILES +/etc/request-key.conf Instantiation handler configuration file. +/etc/request-key.d/<keytype>.conf Keytype specific configuration file. +% +vlock - Virtual Console lock program +vlock +vlock [ -a,--all ] [ -c,--current ] [ -h,--help ] [ -v,--version ] +sion(s) while still allowing other users to use the system on other virtual consoles. If desired, the +By default, only the current VC (virtual console) is locked. With the -a,-all option all VCs are locked. +The locked VCs cannot be unlocked without the invoker's password. And, for the paranoid, vlock makes it +a trying experience for those attempting to guess the password, so unauthorized access to session(s) is +highly unlikely. +% +psfxtable - handle Unicode character tables for console fonts +psfxtable [-i infont] [-o outfont] [-it intable] [-ot outtable] [-nt] +psfxtable handles the embedded Unicode character table for .psf format console fonts. It reads a font and +are links to it. +standard input. If no -it or -o or -ot option is given, no input table is read or no output font or out‐ +put table is written. +By default the output font (if any) will have a Unicode table when either the input font has one, or an +explicit table (which overrides an input font table) has been provided. The option -nt causes output of +% +kmod - Program to manage Linux Kernel modules +kmod is a multi-call binary which implements the programs used to control Linux Kernel modules. Most +users will only run it using its other names. +-V --version +Show the program version and exit. +-h --help +Show the help message. +% +vimdiff - edit two, three or four versions of a file with Vim and show differences +gvimdiff +Vimdiff starts Vim on two (or three or four) files. Each file gets its own window. The differences +version to another version of the same file. +When started as gvimdiff the GUI will be started, if available. +In each window the 'diff' option will be set, which causes the differences to be highlighted. +% +dnssec-verify - DNSSEC zone verification tool +dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-V] [-x] [-z] {zonefile} +dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the +-c class +Specifies the DNS class of the zone. +-E engine +Specifies the cryptographic hardware to use, when applicable. +% +vgcreate — create a volume group +vgcreate [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-c|--clustered {y|n}] [--com‐ +datacopies NumberOfCopies|unmanaged|all] [-s|--physicalextentsize PhysicalExtentSize[bBsSkKmMgGtTpPeE]] +[--reportformat {basic|json}] [--shared] [--systemid SystemID] [-t|--test] [-v|--verbose] [--version] +cePath. +% +expiry - check and enforce password expiration policy +expiry option +The expiry command checks (-c) the current password expiration and forces (-f) changes when required. It +is callable as a normal user command. +The options which apply to the expiry command are: +-c, --check +Check the password expiration of the current user. +-f, --force +Force a password change if the current user has an expired password. +% +vconfig [lots of long options] +The vconfig program allows you to create and remove vlan-devices on a vlan enabled kernel. Vlan-devices +are virtual ethernet devices which represents the virtual lans on the physical lan. +add [interface-name] [vlan-id] +Creates a vlan-device on [interface-name]. The resulting vlan-device will be called according to +the nameing convention set. +rem [vlan-device] +Removes the named vlan-device. +% +lvmetad — LVM metadata cache daemon +lvmetad [-l level[,level...]] [-p pidfile_path] [-s socket_path] [-t timeout_value] [-f] [-h] [-V] [-?] +The lvmetad daemon caches LVM metadata so that LVM commands can read metadata from the cache rather than +the normal work of the system. lvmetad can be a disadvantage when disk event notifications from the sys‐ +tem are unreliable. +lvmetad does not read metadata from disks itself. Instead, it relies on an LVM command, like pvscan +--cache, to read metadata from disks and send it to lvmetad to be cached. +New LVM disks that appear on the system must be scanned before lvmetad knows about them. If lvmetad does +not know about a disk, then LVM commands using lvmetad will also not know about it. When disks are added +or removed from the system, lvmetad must be updated. +% +repo-add - package database maintenance utility +repo-add [options] <path-to-db> <package|delta> [<package|delta> ...] +repo-remove [options] <path-to-db> <packagename|delta> [<packagename|delta> ...] +repo-add and repo-remove are two scripts to help build a package database for packages built with +repo-add will update a package database by reading a built package or package delta file. Multiple +packages and/or deltas to add can be specified on the command line. +If a matching “.sig” file is found alongside a package file, the signature will automatically be embedded +into the database. +% +c++filt - Demangle C++ and Java symbols. +c++filt [-_|--strip-underscore] +[-n|--no-strip-underscore] +[-p|--no-params] +[-t|--types] +[-i|--no-verbose] +[-s format|--format=format] +[--help] [--version] [symbol...] +The C++ and Java languages provide function overloading, which means that you can write many functions +with the same name, providing that each function takes parameters of different types. In order to be +able to distinguish these similarly named functions C++ and Java encode them into a low-level assembler +% +pkexec - Execute a command as another user +pkexec [--version] [--disable-internal-agent] [--help] +pkexec allows an authorized user to execute PROGRAM as another user. If PROGRAM is not specified, the +default shell will be run. If username is not specified, then the program will be executed as the +administrative super user, root. +RETURN VALUE +Upon successful completion, the return value is the return value of PROGRAM. If the calling process is +not authorized or an authorization could not be obtained through authentication or an error occured, +% +du - estimate file space usage +du [OPTION]... [FILE]... +du [OPTION]... --files0-from=F +Summarize disk usage of the set of FILEs, recursively for directories. +Mandatory arguments to long options are mandatory for short options too. +-0, --null +end each output line with NUL, not newline +-a, --all +write counts for all files, not just directories +% +There is an additional drawing command available: +\D'R dh dv' +Draw a rule (solid black rectangle), with one corner at the current position, and the diagonally +opposite corner at the current position +(dh,dv). Afterwards the current position will be at the +% +gperl - groff preprocessor for Perl parts in roff files +gperl [-] [--] [ filespec ....] +gperl -h|--help +gperl -v|--version +Perl part can be stored in groff strings or numerical registers based on the arguments at a final line of +a Perl part. +So far, there are only filespec or breaking options. +filespec are file names or the minus character - character for standard input. As usual, the argument -- +can be used in order to let all fowllowing arguments mean file names, even if the names begin with a +% +git - the stupid content tracker +git [--version] [--help] [-C <path>] [-c <name>=<value>] +[--exec-path[=<path>]] [--html-path] [--man-path] [--info-path] +[-p|--paginate|--no-pager] [--no-replace-objects] [--bare] +[--git-dir=<path>] [--work-tree=<path>] [--namespace=<name>] +<command> [<args>] +Git is a fast, scalable, distributed revision control system with an unusually rich command set that +provides both high-level operations and full access to internals. +See gittutorial(7) to get started, then see giteveryday(7) for a useful minimum set of commands. The Git +After you mastered the basic concepts, you can come back to this page to learn what commands Git offers. +% +igawk - gawk with include files +igawk [ all gawk options ] -f program-file [ -- ] file ... +igawk [ all gawk options ] [ -- ] program-text file ... +@include getopt.awk +in your program to include the file getopt.awk from either the current directory or one of the other +directories in the search path. +% +nl-classid-lookup - Lookup classid definitions +nl-classid-lookup [-hv] [-r] [--raw] name +nl-classid-lookup searches the classid database for a matching entry. It is used to resolve qdisc/class +names to classid values and vice versa. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +-r or --reverse +% +host - DNS lookup utility +{name} [server] +host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses +and vice versa. When no arguments or options are given, host prints a short summary of its command line +arguments and options. +address. server is an optional argument which is either the name or IP address of the name server that +host should query instead of the server or servers listed in /etc/resolv.conf. +% +stty - change and print terminal line settings +stty [-F DEVICE | --file=DEVICE] [SETTING]... +stty [-F DEVICE | --file=DEVICE] [-a|--all] +stty [-F DEVICE | --file=DEVICE] [-g|--save] +Print or change terminal characteristics. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +print all current settings in human-readable form +-g, --save +print all current settings in a stty-readable form +% +rarpd - answer RARP REQUESTs +arping [-aAvde] [-b bootdir] [interface] +is found in /etc/ethers database and obtained host name is resolvable to an IP address appropriate for +attached network, rarpd answers to client with RARPD reply carrying an IP address. +To allow multiple boot servers on the network rarpd optionally checks for presence Sun-like bootable im‐ +WARNING +% +swapon, swapoff - enable/disable devices and files for paging and swapping +swapon [options] [specialfile...] +swapoff [-va] [specialfile...] +swapon is used to specify devices on which paging and swapping are to take place. +to indicate a device by label or uuid. +Calls to swapon normally occur in the system boot scripts making all swap devices available, so that the +paging and swapping activity is interleaved across several devices and files. +swapoff disables swapping on the specified devices and files. When the -a flag is given, swapping is +disabled on all known swap devices and files (as found in /proc/swaps or /etc/fstab). +% +dnssec-settime - set the key timing metadata for a DNSSEC key +dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-A date/offset] +[-R date/offset] [-I date/offset] [-D date/offset] [-D sync date/offset] [-h] [-V] +[-v level] [-E engine] {keyfile} +dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, +-A, -R, -I, and -D options. The metadata can then be used by dnssec-signzone or other signing software to +determine when a key is to be published, whether it should be used for signing a zone, etc. +If none of these options is set on the command line, then dnssec-settime simply prints the key timing +metadata already stored in the key. +When key metadata fields are changed, both files of a key pair (Knnnn.+aaa+iiiii.key and +Knnnn.+aaa+iiiii.private) are regenerated. Metadata fields are stored in the private file. A +% +systemd-path - List and query system and user paths +file-hierarchy(7) available for querying. +When invoked without arguments, a list of known paths and their current values is shown. When at least +one argument is passed, the path with this name is queried and its value shown. The variables whose name +begins with "search-" do not refer to individual paths, but instead to a list of colon-separated search +paths, in their order of precedence. +The following options are understood: +% +cfdisk - display or manipulate a disk partition table +cfdisk [options] [device] +cfdisk is a curses-based program for partitioning any block device. The default device is /dev/sda. +functionality for CHS (Cylinder-Head-Sector) addressing. CHS has never been important for Linux, and +this addressing concept does not make any sense for new devices. +% +setsid - run a program in a new session +setsid [options] program [arguments] +setsid runs a program in a new session. +-c, --ctty +Set the controlling terminal to the current one. +-w, --wait +Wait for the execution of the program to end, and return the exit value of this program as the +return value of setsid. +-V, --version +% +xfs_freeze - suspend access to an XFS filesystem +xfs_freeze [ -f | -u ] mount-point +xfs_freeze -V +xfs_freeze halts new access to the filesystem and creates a stable image on disk. xfs_freeze is intended +to be used with volume managers and hardware RAID devices that support the creation of snapshots. +The mount-point argument is the pathname of the directory where the filesystem is mounted. The filesys‐ +The -f flag requests the specified XFS filesystem to be frozen from new modifications. When this is +selected, all ongoing transactions in the filesystem are allowed to complete, new write system calls are +% +dc - an arbitrary precision calculator +dc [-V] [--version] [-h] [--help] +[-e scriptexpression] [--expression=scriptexpression] +[-f scriptfile] [--file=scriptfile] +[file ...] +dc is a reverse-polish desk calculator which supports unlimited precision arithmetic. It also allows you +to define and call macros. Normally dc reads from the standard input; if any command arguments are given +to it, they are filenames, and dc reads and executes the contents of the files before reading from stan‐ +dard input. All normal output is to standard output; all error output is to standard error. +A reverse-polish calculator stores numbers on a stack. Entering a number pushes it on the stack. Arith‐ +metic operations pop arguments off the stack and push the results. +% +xfs_mdrestore - restores an XFS metadump image to a filesystem image +xfs_mdrestore [ -g ] source target +xfs_mdrestore -V +filesystem. The source argument specifies the location of the metadump image and the target argument +specifies the destination for the filesystem image. If the source is -, then the metadata image is read +rected to xfs_mdrestore. The target can be either a file or a device. +xfs_mdrestore should not be used to restore metadata onto an existing filesystem unless you are com‐ +pletely certain the target can be destroyed. +% +ssh-keyscan — gather ssh public keys +ssh-keyscan is a utility for gathering the public ssh host keys of a number of hosts. It was designed to +aid in building and verifying ssh_known_hosts files. ssh-keyscan provides a minimal interface suitable for +use by shell and perl scripts. +ssh-keyscan uses non-blocking socket I/O to contact as many hosts as possible in parallel, so it is very +those hosts are down or do not run ssh. For scanning, one does not need login access to the machines that +are being scanned, nor does the scanning process involve any encryption. +The options are as follows: +% +RR in it and it will create a .ds file with the DS RR in it. +It prints out the basename for this file (K<name>+<alg>+<id>). +-f Ignore SEP flag (i.e. make DS records for any key) +-n Write the result DS Resource Record to stdout instead of a file +% +rev - reverse lines characterwise +rev [option] [file...] +The rev utility copies the specified files to standard output, reversing the order of characters in every +line. If no files are specified, standard input is read. +-V, --version +Display version information and exit. +-h, --help +Display help text and exit. +% +hostnamectl - Control the system hostname +all kinds of special characters (e.g. "Lennart's Laptop"), the static hostname which is used to +initialize the kernel hostname at boot (e.g. "lennarts-laptop"), and the transient hostname which is a +fallback value received from network configuration. If a static hostname is set, and is valid (something +other than localhost), then the transient hostname is not used. +transient hostnames are limited to the usually accepted characters of Internet domain names. +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +dnssec-signzone - DNSSEC zone signing tool +dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] +[-K directory] [-k key] [-L serial] [-l domain] [-M domain] [-i interval] +[-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] +[-p] [-Q] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-V] +dnssec-signzone signs a zone. It generates NSEC and RRSIG records and produces a signed version of the +zone. The security status of delegations from the signed zone (that is, whether the child zones are +secure or not) is determined by the presence or absence of a keyset file for each child zone. +-a +Verify all generated signatures. +% +nl-pktloc-lookup - Lookup packet location definitions +nl-pktloc-lookup name +nl-pktloc-lookup --list +nl-pktloc-lookup searches the packet location database for a matching entry. It is used to resolve packet +location aliases to their definition, i.e. alignment, layer, offset, and mask. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +% +strip - Discard symbols from object files. +strip [-F bfdname |--target=bfdname] +[-I bfdname |--input-target=bfdname] +[-O bfdname |--output-target=bfdname] +[-s|--strip-all] +[-S|-g|-d|--strip-debug] +[--strip-dwo] +[-K symbolname |--keep-symbol=symbolname] +[-N symbolname |--strip-symbol=symbolname] +[-w|--wildcard] +[-x|--discard-all] [-X |--discard-locals] +[-R sectionname |--remove-section=sectionname] +[-o file] [-p|--preserve-dates] +[-D|--enable-deterministic-archives] +[-U|--disable-deterministic-archives] +% +ldns-keyfetcher - retrieve the DNSSEC DNSKEYs for a zone +ldns-keyfetcher is used to retrieve the DNSKEYs of a zone. +First it finds all authoritative nameservers of the zone by tracing it from the root down. All authorita‐ +tive nameservers are then queried (using TCP) for the DNSKEY RRset of the zone apex. If the results are +all the same, the key resource record set is printed. +-6 Only use IPv6 +% +makepkg-template - package build templating utility +makepkg-template [options] +makepkg-template is a script to ease the work of maintaining multiple similar PKGBUILDs. It allows you to +move most of the code from the PKGBUILD into a template file and uses markers to allow in-place updating +of existing PKGBUILDs if the template has been changed. +Template files can contain any code allowed in a PKGBUILD. You can think of them like external files +included with "." or "source", but they will be inlined into the PKGBUILD by makepkg-template so you do +not depend on the template file when building the package. +Markers are bash comments in the form of: +% +chpasswd - update passwords in batch mode +chpasswd [options] +The chpasswd command reads a list of user name and password pairs from standard input and uses this +information to update a group of existing users. Each line is of the format: +user_name:password +By default the passwords must be supplied in clear-text, and are encrypted by chpasswd. Also the password +age will be updated, if present. +By default, passwords are encrypted by PAM, but (even if not recommended) you can select a different +encryption method with the -e, -m, or -c options. +% +autoheader - Create a template header for configure +autoheader [OPTION]... [TEMPLATE-FILE] +Create a template file of C `#define' statements for `configure' to use. To this end, scan TEM‐ +PLATE-FILE, or `configure.ac' if present, or else `configure.in'. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +verbosely report processing +% +ldns-gen-zone - read a zonefile and print it while adding DS records and extra RR's +ldns-gen-zone ZONEFILE +ldns-gen-zone reads a DNS zone file and prints it. +It is build for speed, not for a nice formatting. The output has one resource record per line and no +pretty-printing makeup. +Existing DS records are also not stripped. +The idea is to use this tool for quickly generating a representative artificial zonefile from a real +zonefile, to use it for testing purposes. +% +infocmp - compare or print out terminfo descriptions +[-v n] [-s d| i| l| c] [-R subset] +[-w width] [-A directory] [-B directory] +[termname...] +infocmp can be used to compare a binary terminfo entry with other terminfo entries, rewrite a terminfo +description to take advantage of the use= terminfo field, or print out a terminfo description from the +lowed by the numeric fields, followed by the string fields. +Default Options +If no options are specified and zero or one termnames are specified, the -I option will be assumed. If +more than one termname is specified, the -d option will be assumed. +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +damaged filesystem. +requirement can be overridden using the -f option, but the resulting image file is very likely not going +% +cksum - checksum and count the bytes in a file +cksum [FILE]... +cksum [OPTION] +Print CRC checksum and byte counts of each FILE. +--help display this help and exit +--version +output version information and exit +Written by Q. Frank Xia. +% +the system. +See the various sub commands below. The following global options can be used: +-v, --verbose +Run in verbose mode with debug output. +-q, --quiet +% +-a number +-s salt +Use the given salt for the hash calculation. Salt value should be in hexadecimal format. +-t count +Use count iterations for the hash calculation. +% +pkgdelta - package delta generation utility +pkgdelta is used to create package delta files between two versions of the same package. These files are +with the previous versions of packages (in the package cache) to synthesize the upgraded version of the +--max-delta-size <ratio> +Only create delta files if the delta is smaller than ratio * package_size. Possible values: 0.0 to +% +visudo — edit the sudoers file +visudo [-chqsV] [-f sudoers] [-x output_file] +against multiple simultaneous edits, provides basic sanity checks, and checks for parse errors. If the +sudoers file is currently being edited you will receive a message to try again later. +honor the VISUAL or EDITOR environment variables unless they contain an editor in the aforementioned edi‐ +tors list. However, if visudo is configured with the --with-env-editor option or the env_editor Default +be a security hole since it allows the user to execute any program they wish simply by setting VISUAL or +EDITOR. +% +fsck - check and repair a Linux filesystem +fsck [-lsAVRTMNP] [-r [fd]] [-C [fd]] [-t fstype] [filesystem...] [--] [fs-specific-options] +fsck is used to check and optionally repair one or more Linux filesystems. filesys can be a device name +handle filesystems on different physical disk drives in parallel to reduce the total amount of time +needed to check all of them. +If no filesystems are specified on the command line, and the -A option is not specified, fsck will +The exit code returned by fsck is the sum of the following conditions: +% +zcmp, zdiff - compare compressed files +Zcmp and zdiff are used to invoke the cmp or the diff program on files compressed via gzip. All options +fed to cmp or diff. The input files are not modified. The exit status from cmp or diff is preserved. +BUGS +% +chattr - change file attributes on a Linux file system +chattr [ -RVf ] [ -v version ] [ -p project ] [ mode ] files... +chattr changes the file attributes on a Linux file system. +The format of a symbolic mode is +-=[aAcCdDeijsStTu]. +The operator '+' causes the selected attributes to be added to the existing attributes of the files; '-' +causes them to be removed; and '=' causes them to be the only attributes that the files have. +The letters 'aAcCdDeijsStTu' select the new attributes for the files: append only (a), no atime updates +(A), compressed (c), no copy on write (C), no dump (d), synchronous directory updates (D), extent format +(e), immutable (i), data journalling (j), project hierarchy (P), secure deletion (s), synchronous updates +(S), no tail-merging (t), top of directory hierarchy (T), and undeletable (u). +% +scmp_sys_resolver - Resolve system calls +in the optional ARCH argument. If the architecture is not supplied on the command line then the native +architecture is used. If the "-t" argument is specified along with a system call name, then the system +call will be translated as necessary for the given architecture. The "-t" argument has no effect if a +system call number is specified. +In some combinations of architecture and system call, a negative system call number will be displayed. A +negative system call number indicates that the system call is not defined for the given architecture and +is treated in a special manner by libseccomp depending on the operation. +-a ARCH +% +pfbtops - translate a PostScript font in .pfb format to ASCII +pfbtops [ -v ] [ pfb_file ] +pfbtops translates a PostScript font in .pfb format to ASCII, splitting overlong lines in text packets +into smaller chunks. If pfb_file is omitted the pfb file will be read from the standard input. The +ASCII format PostScript font will be written on the standard output. PostScript fonts for MS-DOS are +normally supplied in .pfb format. +The resulting ASCII format PostScript font can be used with groff. It must first be listed in +-v Print the version number. +% +fsck.xfs - do nothing, successfully +fsck.xfs [ filesys ... ] +exits with a zero exit status. +If you wish to check the consistency of an XFS filesystem, or repair a damaged or corrupt XFS filesystem, +FILES +/etc/fstab. +% +getfattr - get extended attributes of filesystem objects +getfattr [-hRLP] -n name [-e en] pathname... +getfattr [-hRLP] -d [-e en] [-m pattern] pathname... +For each file, getfattr displays the file name, and the set of extended attribute names (and optionally +values) which are associated with that file. +The output format of getfattr -d is as follows: +% +gdbmtool - examine and modify a GDBM database +gdbmtool [-lmNnqrs] [-b SIZE] [-c SIZE] [-f FILE] [--block-size=SIZE] +[--cache-size=SIZE] [--file FILE] [--newdb] [--no-lock] +[--no-mmap] [--norc] +[--quiet] [--read-only] [--synchronize] [DBFILE] +gdbmtool [-Vh] ][--help] [--usage] [--version] +The gdbmtool utility allows you to view and modify an existing GDBM database or to create a new one. +The DBFILE argument supplies the name of the database to open. If not supplied, the default name +junk.gdbm is used instead. If the named database does not exist, it will be created. An existing data‐ +base can be cleared (i.e. all records removed from it) using the --newdb option (see below). +% +logrotate ‐ rotates, compresses, and mails system logs +logrotate [-dv] [-f|--force] [-s|--state file] config_file .. +logrotate is designed to ease administration of systems that generate large numbers of log files. It +daily, weekly, monthly, or when it grows too large. +Normally, logrotate is run as a daily cron job. It will not modify a log more than once in one day +unless the criterion for that log is based on the log's size and logrotate is being run more than once +each day, or unless the -f or --force option is used. +given in earlier files, so the order in which the logrotate config files are listed is important. Nor‐ +mally, a single config file which includes any other config files which are needed should be used. See +% +kadmin [-O|-N] [-r realm] [-p principal] [-q query] [[-c cache_name]|[-k [-t keytab]]|-n] [-w password] +[-s admin_server[:port]] +kadmin.local [-r realm] [-p principal] [-q query] [-d dbname] [-e enc:salt ...] [-m] [-x db_args] +vide nearly identical functionalities; the difference is that kadmin.local directly accesses the KDC +man page will use "kadmin" to refer to both versions. kadmin provides for the maintenance of Kerberos +principals, password policies, and service key tables (keytabs). +The remote kadmin client uses Kerberos to authenticate to kadmind using the service principal kad‐ +min/ADMINHOST (where ADMINHOST is the fully-qualified hostname of the admin server) or kadmin/admin. If +% +grub-editenv - edit GRUB environment block +Tool to edit environment block. +Commands: +create Create a blank environment block file. +list List the current variables. +Set variables. +% +pwd - print name of current/working directory +pwd [OPTION]... +Print the full filename of the current working directory. +-L, --logical +use PWD from environment, even if it contains symlinks +-P, --physical +avoid all symlinks +--help display this help and exit +--version +% +setleds - set the keyboard leds +setleds [-v] [-L] [-D] [-F] [{+|-}num] [{+|-}caps] [{+|-}scroll] +Setleds reports and changes the led flag settings of a VT (namely NumLock, CapsLock and ScrollLock). +Without arguments, setleds prints the current settings. With arguments, it sets or clears the indicated +flags (and leaves the others unchanged). The settings before and after the change are reported if the -v +flag is given. +The led flag settings are specific for each VT (and the VT corresponding to stdin is used). +by the keyboard leds). +With option -D, setleds will change both the VT flags and their default settings (so that a subsequent +% +jfs_mkfs - create a JFS formatted partition +jfs_mkfs [options] device [ blocks ] +jfs_mkfs is used to create (format) a JFS partition. jfs_mkfs must be run as root. +system and/or JFS journal will be created. blocks is the number of blocks to be used for the file sys‐ +tem. If omitted, jfs_mkfs automatically figures the file system size. +WARNING +jfs_mkfs will destroy all data on the specified device! +% +getopt - parse command options (enhanced) +getopt optstring parameters +getopt [options] [--] optstring parameters +getopt [options] -o|--options optstring [options] [--] parameters +getopt is used to break up (parse) options in command lines for easy parsing by shell procedures, and to +The parameters getopt is called with can be divided into two parts: options which modify the way getopt +is not an option argument, or after the first occurrence of '--'. If no '-o' or '--options' option is +found in the first part, the first parameter of the second part is used as the short options string. +% +lvchange — change attributes of a logical volume +lvchange [-a|--activate [a][e|s|l]{y|n}] [--activationmode {complete|degraded|partial}] [--addtag Tag] +[-K|--ignoreactivationskip] [-k|--setactivationskip {y|n}] [--alloc AllocationPolicy] [-A|--autobackup +{y|n}] [--rebuild PhysicalVolume] [--cachemode {passthrough|writeback|writethrough}] [--cachepolicy Pol‐ +[--deltag Tag] [--detachprofile] [--discards {ignore|nopassdown|passdown}] [--errorwhenfull {y|n}] +[-h|-?|--help] [--ignorelockingfailure] [--ignoremonitoring] [--ignoreskippedcluster] [--metadataprofile +{y|n} [--major Major] [--minor Minor]] [--poll {y|n}] [--[raid]maxrecoveryrate Rate] [--[raid]minrecov‐ +eryrate Rate] [--[raid]syncaction {check|repair}] [--[raid]writebehind IOCount] [--[raid]writemostly +PhysicalVolume[:{y|n|t}]] [-r|--readahead {ReadAheadSectors|auto|none}] [--refresh] [--reportformat +{basic|json}] [--resync] [-S|--select Selection] [--sysinit] [-t|--test] [-v|--verbose] [-Z|--zero {y|n}] +[LogicalVolumePath...] +% +df - report file system disk space usage +df [OPTION]... [FILE]... +file system containing each file name argument. If no file name is given, the space available on all +If an argument is the absolute file name of a disk device node containing a mounted file system, df shows +version of df cannot show the space available on unmounted file systems, because on most kinds of systems +doing so requires very nonportable intimate knowledge of file system structures. +% +depmod - Generate modules.dep and map files. +depmod [-b basedir] [-e] [-E Module.symvers] [-F System.map] [-n] [-v] [-A] [-P prefix] [-w] [version] +depmod [-e] [-E Module.symvers] [-F System.map] [-m] [-n] [-v] [-P prefix] [-w] [version] [filename...] +Linux kernel modules can provide services (called "symbols") for other modules to use (using one of the +EXPORT_SYMBOL variants in the code). If a second module uses this symbol, that second module clearly +depends on the first module. These dependencies can get quite complex. +depmod creates a list of module dependencies by reading each module under /lib/modules/version and +determining what symbols it exports and what symbols it needs. By default, this list is written to +modules.dep, and a binary hashed version named modules.dep.bin, in the same directory. If filenames are +given on the command line, only those modules are examined (which is rarely useful unless all modules are +listed). depmod also creates a list of symbols provided by modules in the file named modules.symbols and +% +peekfd - peek at file descriptors of running processes +[-h,--help] pid [fd] [fd] ... +peekfd attaches to a running process and intercepts all reads and writes to file descriptors. You can +specify the desired file descriptor numbers or dump all of them. +-n Do not display headers indicating the source of the bytes dumped. +-c Also dump the requested file descriptor activity in any new child processes that are created. +% +faillog - display faillog records or set login failure limits +faillog [options] +faillog displays the contents of the failure log database (/var/log/faillog). It can also set the failure +counters and limits. When faillog is run without arguments, it only displays the faillog records of the +users who had a login failure. +The options which apply to the faillog command are: +-a, --all +Display (or act on) faillog records for all users having an entry in the faillog database. +The range of users can be restricted with the -u option. +% +btrfs-inspect-internal - query various internal information +btrfs inspect-internal <subcommand> <args> +simple UI to an ioctl or a more complex query that assembles the result from several internal structures. +The latter usually requires calls to privileged ioctls. +dump-super [options] <device> [device...] +(replaces the standalone tool btrfs-show-super) +Show btrfs superblock information stored on given devices in textual form. By default the first +superblock is printed, more details about all copies or additional backup data can be printed. +% +login - begin session on the system +login [ -p ] [ -h host ] [ -H ] [ -f username | username ] +login is used when signing onto a system. If no argument is given, login prompts for the username. +The user is then prompted for a password, where approprate. Echoing is disabled to prevent revealing the +password. Only a small number of password failures are permitted before login exits and the communica‐ +tions link is severed. +proceeding. He will be forced to provide his old password and the new password before continuing. +The user and group ID will be set according to their values in the /etc/passwd file. There is one excep‐ +% +grub-mknetdir - prepare a GRUB netboot directory. +grub-mknetdir [OPTION...] +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +--install-modules=MODULES +install only MODULES and their dependencies [default=all] +% +Reads an EQN equation (one line) as input; produces an image file (by default in Portable Network Graph‐ +ics format) suitable for the Web as output. +macros; nor do you need to have dollar-sign or other delimiters around the equation. +The output image will be clipped to the smallest possible bounding box that contains all the black pix‐ +border, force the background transparent, set the image's pixel density, or perform other useful trans‐ +formations. +% +shutdown - Halt, power-off or reboot the machine +wall message to be sent to all logged-in users before going down. +specified number of minutes m from now. "now" is an alias for "+0", i.e. for triggering an immediate +% +hddtemp - Utility to monitor hard drive temperature +hddtemp [options] [type:]disk... +hddtemp will give you the temperature of your hard drive by reading Self-Monitoring Analysis and Report‐ +ing Technology (S.M.A.R.T.) information on drives that support this feature. Only modern hard drives +have a temperature sensor. hddtemp supports reading S.M.A.R.T. information from SCSI drives too. +hddtemp can work as simple command line tool or as a daemon. +You can specify one or more device drive path, where each path can be prefixed with a type like PATA, +SATA or SCSI to force hddtemp too use one of these type (because detection can fail). +The program follows the usual GNU command line syntax, with long options starting with two dashes (`-'). +A summary of options is included below. +% +dhcpcd — a DHCP client +[-F, --fqdn FQDN] [-f, --config file] [-h, --hostname hostname] [-I, --clientid clientid] +[-i, --vendorclassid vendorclassid] [-j, --logfile logfile] [-l, --leasetime seconds] +[-m, --metric metric] [-O, --nooption option] [-o, --option option] [-Q, --require option] +[-r, --request address] [-S, --static value] [-s, --inform address[/cidr]] [--inform6] +[-t, --timeout seconds] [-u, --userclass class] [-v, --vendor code, value] +[-X, --blacklist address[/cidr]] [-Z, --denyinterfaces pattern] [-z, --allowinterfaces pattern] +[--inactive] [interface] [...] +dhcpcd -n, --rebind [interface] +dhcpcd -k, --release [interface] +dhcpcd -U, --dumplease interface +dhcpcd --version +dhcpcd -x, --exit [interface] +% +grodvi - convert groff output to TeX dvi format +grodvi [ -dlv ] [ -Fdir ] [ -ppapersize ] [ -wn ] [ files... ] +It is possible to have whitespace between a command line option and its parameter. +grodvi is a driver for groff that produces TeX dvi format. Normally it should be run by groff -Tdvi. +The dvi file generated by grodvi can be printed by any correctly-written dvi driver. The troff drawing +\D commands will not produce any output. +There is an additional drawing command available: +% +znew - recompress .Z files to .gz files +znew [ -ftv9PK] [ name.Z ... ] +Znew recompresses files from .Z (compress) format to .gz (gzip) format. If you want to recompress a file +already in gzip format, rename the file to force a .Z extension then apply znew. +-f Force recompression from .Z to .gz format even if a .gz file already exists. +-t Tests the new files before deleting originals. +-v Verbose. Display the name and percentage reduction for each file compressed. +-9 Use the slowest compression method (optimal compression). +% +od - dump files in octal and other formats +od [OPTION]... [FILE]... +od [-abcdfilosx]... [FILE] [[+]OFFSET[.][b]] +od --traditional [OPTION]... [FILE] [[+]OFFSET[.][b] [+][LABEL][.][b]] +Write an unambiguous representation, octal bytes by default, of FILE to standard output. With more than +one FILE argument, concatenate them in the listed order to form the input. +With no FILE, or when FILE is -, read standard input. +If first and second call formats both apply, the second format is assumed if the last operand begins with +at first byte printed, incremented when dump is progressing. For OFFSET and LABEL, a 0x or 0X prefix +% +thin_ls - List thin volumes within a pool. +thin_ls [options] {metadata device} +thin_ls Displays infomation about thin volumes in a pool. Pass the metadata device on the command line, +not the pool device. +-o, --format +Give a comma separated list of the fields to be output. Valid fields are: DEV, MAPPED_BLOCKS, +EXCLUSIVE_BLOCKS, SHARED_BLOCKS, MAPPED_SECTORS, EXCLUSIVE_SECTORS, SHARED_SECTORS, MAPPED_BYTES, +EXCLUSIVE_BYTES, SHARED_BYTES, MAPPED, EXCLUSIVE, SHARED, TRANSACTION CREATE_TIME, SNAP_TIME +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +pivot_root - change the root filesystem +pivot_root new_root put_old +pivot_root moves the root file system of the current process to the directory put_old and makes new_root +the latter for further details. +pivot_root and chroot are in the current PATH: +cd new_root +pivot_root . put_old +exec chroot . command +% +| --defcktname | --cflags | --libs [libraries]] +installed Kerberos libraries. +--all prints the version, vendor, prefix, and exec-prefix. +--version +prints the version number of the Kerberos installation. +% +chcon - change file security context +chcon [OPTION]... CONTEXT FILE... +chcon [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE... +chcon [OPTION]... --reference=RFILE FILE... +Change the SELinux security context of each FILE to CONTEXT. With --reference, change the security con‐ +text of each FILE to that of RFILE. +Mandatory arguments to long options are mandatory for short options too. +--dereference +affect the referent of each symbolic link (this is the default), rather than the symbolic link +itself +% +curl - transfer a URL +curl [options] [URL...] +curl is a tool to transfer data from or to a server, using one of the supported protocols (DICT, FILE, +SMTP, SMTPS, TELNET and TFTP). The command is designed to work without user interaction. +curl offers a busload of useful tricks like proxy support, user authentication, FTP upload, HTTP post, +SSL connections, cookies, file transfer resume, Metalink, and more. As you will see below, the number of +features will make your head spin! +URL +% +setkeycodes - load kernel scancode-to-keycode mapping table entries +setkeycodes scancode keycode ... +The setkeycodes command reads its arguments two at a time, each pair of arguments consisting of a scan‐ +code (given in hexadecimal) and a keycode (given in decimal). For each such pair, it tells the kernel +keyboard driver to map the specified scancode to the specified keycode. +duce scancodes that the kernel does not recognize. +THEORY +The usual PC keyboard produces a series of scancodes for each key press and key release. (Scancodes are +stream of keycodes (key press/release events). (Keycodes are shown by showkey.) Apart from a few scan‐ +% +tar — manipulate tape archives +tar [bundled-flags ⟨args⟩] [⟨file⟩ | ⟨pattern⟩ ...] +tar {-c} [options] [files | directories] +tar {-r | -u} -f archive-file [options] [files | directories] +tar {-t | -x} [options] [patterns] +zip, jar, ar, xar, rpm, 7-zip, and ISO 9660 cdrom images and can create tar, pax, cpio, ar, zip, 7-zip, and +shar archives. +torical implementations. See COMPATIBILITY below for details. +The other synopsis forms show the preferred usage. The first option to tar is a mode indicator from the +% +idnconv - codeset converter for named.conf and zone master files +idnconv [options..] [file...] +idnconv is a codeset converter for named configuration files and zone master files. idnconv performs +codeset conversion specified either by the command-line arguments or by the configuration file, and +writes the converted text to stdout. +If file name is specified, idnconv converts the contents of the file. Otherwise, idnconv converts stdin. +able as a general codeset converter. +OPERATION MODES +idnconv has two operation modes. +% +pkcheck - Check whether a process is authorized +pkcheck [--version] [--help] +pkcheck [--list-temp] +pkcheck [--revoke-temp] +pkcheck --action-id action {--process { pid | pid,pid-start-time | pid,pid-start-time,uid } | +--system-bus-name busname} [--allow-user-interaction] [--enable-internal-agent] +[--detail key value...] +pkcheck is used to check whether a process, specified by either --process (see below) or +--system-bus-name, is authorized for action. The --detail option can be used zero or more times to pass +details about action. If --allow-user-interaction is passed, pkcheck blocks while waiting for +% +ldns-walk - Retrieve the contents of a DNSSEC signed zone +ldns-walk [ OPTION ] ZONE +ldns-walk is used to retrieve the contents of a DNSSEC signed zone. It does this through NSEC-walking +(following the chain of NSEC records) and 'guessing' the next non-existent owner name for each NSEC. +can be circumvented by querying the authoritative nameserver directly (with the @ argument). +Of course the nameserver that is used must be DNSSEC-aware. +% +ddns-confgen - ddns key generation tool +tsig-keygen [-a algorithm] [-h] [-r randomfile] [name] +ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [-s name | -z zone] +tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG +signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the +rndc command channel. +When run as tsig-keygen, a domain name can be specified on the command line which will be used as the +name of the generated key. If no name is specified, the default is tsig-key. +When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that +can be used with nsupdate and named when setting up dynamic DNS, including an example update-policy +% +gio - GIO commandline tool +gio version +gio cat LOCATION... +gio copy [OPTION...] SOURCE... DESTINATION +gio info [OPTION...] LOCATION... +gio list [OPTION...] [LOCATION...] +gio mime MIMETYPE [HANDLER] +% +dbus-daemon - Message bus daemon +dbus-daemon +dbus-daemon [--version] [--session] [--system] [--config-file=FILE] [--print-address [=DESCRIPTOR]] +[--print-pid [=DESCRIPTOR]] [--fork] +dbus-daemon is the D-Bus message bus daemon. See http://www.freedesktop.org/software/dbus/ for more +information about the big picture. D-Bus is first a library that provides one-to-one communication +between any two applications; dbus-daemon is an application that uses this library to implement a message +bus daemon. Multiple programs connect to the message bus daemon and can exchange messages with one +another. +There are two standard message bus instances: the systemwide message bus (installed on many systems as +the "messagebus" init service) and the per-user-login-session message bus (started each time a user logs +% +thin_check - validate thin provisioning metadata on device or file +thin_check [options] {device|file} +thin_check checks thin provisioning metadata created by the device-mapper thin provisioning target on a +device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +jfs_fsck - initiate replay of the JFS transaction log, and check and repair a JFS formatted device +jfs_fsck [ -afnpvV ] [ -j journal_device ] [ --omit_journal_replay ] [ --replay_journal_only ] device +jfs_fsck is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any +errors found. +jfs_fsck must be run as root. +WARNING +jfs_fsck should only be used to check an unmounted file system or a file system that is mounted READ +ONLY. Using jfs_fsck to check a file system mounted other than READ ONLY could seriously damage the file +system! +% +cache_restore - restore cache metadata file to device or file +cache_restore [options] -i {device|file} -o {device|file} +cache_restore restores cache metadata created by the respective device-mapper target dumped into an XML +device or file. If restored to a metadata device , the metadata can be processed by the device-mapper +target. +-i, --input {device|file} +Input file or device with metadata. +-o, --output {device|file} +% +btrfstune - tune various filesystem parameters +btrfstune [options] <dev> [<dev>...] +btrfstune can be used to enable, disable or set various filesystem parameters. The filesystem must be +unmounted. +have kernel support for the features. You can find a complete list of features and kernel version of +their introduction at https://btrfs.wiki.kernel.org/index.php/Changelog#By_feature . Also, the manual +Some of the features could be enabled on a mounted filesystem. Please refer to the respective section in +% +script - make typescript of terminal session +script [options] [file] +script makes a typescript of everything displayed on your terminal. It is useful for students who need a +hardcopy record of an interactive session as proof of an assignment, as the typescript file can be +If the argument file is given, script saves the dialogue in this file. If no filename is given, the dia‐ +logue is saved in the file typescript. +-a, --append +Append the output to file or to typescript, retaining the prior contents. +% +btrfs-find-root - filter to find btrfs root +btrfs-find-root [options] <dev> +btrfs-find-root is used to find the satisfied root, you can filter by root tree’s objectid, generation, +level. +-a +Search through all the metadata extents, even the root is already found. +-g <generation> +Filter root tree by it’s original transaction id, tree root’s generation in default. +-o <objectid> +% +rshd - Remote shell server +rshd [OPTION...] +Remote shell server. +-a, --verify-hostname +ask hostname for verification +-l, --no-rhosts +ignore .rhosts file +-L, --log-sessions +log successful logins +% +free - Display amount of free and used memory in the system +free [options] +free displays the total amount of free and used physical and swap memory in the system, as well as the +buffers and caches used by the kernel. The information is gathered by parsing /proc/meminfo. The dis‐ +played columns are: +total Total installed memory (MemTotal and SwapTotal in /proc/meminfo) +used Used memory (calculated as total - free - buffers - cache) +free Unused memory (MemFree and SwapFree in /proc/meminfo) +shared Memory used (mostly) by tmpfs (Shmem in /proc/meminfo) +% +tfmtodit - create font files for use with groff -Tdvi +tfmtodit [ -sv ] [ -ggf_file ] [ -kskewchar ] tfm_file map_file font +tfmtodit creates a font file for use with groff -Tdvi. tfm_file is the name of the TeX font metric file +for the font. map_file is a file giving the groff names for characters in the font; this file should +consist of a sequence of lines of the form: +groff names of the character. If a character has no groff names but exists in the tfm file, then it will +be put in the groff font file as an unnamed character. font is the name of the groff font file. The +groff font file is written to font. +% +smartd - SMART Disk Monitoring Daemon +smartd [options] +other platforms.] +smartd is a daemon that monitors the Self-Monitoring, Analysis and Reporting Technology (SMART) system +built into most ATA/SATA and SCSI/SAS hard drives and solid-state drives. The purpose of SMART is to +monitor the reliability of the hard drive and predict drive failures, and to carry out different types of +lier standards (see REFERENCES below). +smartd will attempt to enable SMART monitoring on ATA devices (equivalent to smartctl -s on) and polls +% +lscpu - display information about the CPU architecture +lscpu [-a|-b|-c] [-x] [-s directory] [-e[=list]|-p[=list]] +lscpu -h|-V +lscpu gathers CPU architecture information from sysfs, /proc/cpuinfo and any applicable architecture-spe‐ +cific libraries (e.g. librtas on Powerpc). The command output can be optimized for parsing or for easy +readability by humans. The information includes, for example, the number of CPUs, threads, cores, sock‐ +ets, and Non-Uniform Memory Access (NUMA) nodes. There is also information about the CPU caches and +cache sharing, family, model, bogoMIPS, byte order, and stepping. +In virtualized environments, the CPU architecture information displayed reflects the configuration of the +guest operating system which is typically different from the physical (host) system. On architectures +that support retrieving physical topology information, lscpu also displays the number of physical sock‐ +ets, chips, cores in the host system. +% +ldns-mx - print out the mx record(s) for a domain +ldns-mx DOMAIN +ldns-mx is used to print out mx information of a domain. +ldns-mx has no options. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +bash - GNU Bourne-Again SHell +bash [options] [command_string | file] +Bash is an sh-compatible command language interpreter that executes commands read from the standard input +or from a file. Bash also incorporates useful features from the Korn and C shells (ksh and csh). +Bash is intended to be a conformant implementation of the Shell and Utilities portion of the IEEE POSIX +All of the single-character shell options documented in the description of the set builtin command can +% +fortune - print a random, hopefully interesting, adage +fortune [-acefilosw] [-n length] [ -m pattern] [[n%] file/dir/all] +When fortune is run with no arguments it prints out a random epigram. Epigrams are divided into several +categories, where each category is sub-divided into those which are potentially offensive and those which +are not. +Options +The options are as follows: +-a Choose from all lists of maxims, both offensive and not. (See the -o option for more information +on offensive fortunes.) +-c Show the cookie file from which the fortune came. +% +ldns-chaos - give some information about a nameserver +ldns-chaos retrieves all the addresses of the nameserver and then queries each address for its ver‐ +sion.bind and hostname.bind. +ldns-chaos is a bit more complex than ldns-mx. +ldns-chaos has no options. +Written by the ldns team as an example for ldns usage. +% +utmpdump - dump UTMP and WTMP files in raw format +utmpdump [options] [filename] +utmpdump is a simple program to dump UTMP and WTMP files in raw format, so they can be examined. utmp‐ +dump reads from stdin unless a filename is passed. +-f, --follow +Output appended data as the file grows. +-o, --output file +Write command output to file instead of standard output. +-r, --reverse +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +dmesg - print or control the kernel ring buffer +dmesg [options] +dmesg --clear +dmesg --read-clear [options] +dmesg --console-level level +dmesg --console-on +dmesg --console-off +dmesg is used to examine or control the kernel ring buffer. +The default action is to display all messages from the kernel ring buffer. +% +git-receive-pack - Receive what is pushed into the repository +git-receive-pack <directory> +Invoked by git send-pack and updates the repository with the information fed from the remote end. +send-pack side, and the program pair is meant to be used to push updates to remote repository. For pull +speaking, it is the local end git-receive-pack runs, but to the user who is sitting at the send-pack end, +it is updating the remote. Confused?) +There are other real-world examples of using update and post-update hooks found in the +% +efibootmgr - manipulate the EFI Boot Manager +... ] [ -O ] [ -p PART ] [ -q ] [ -t seconds ] [ -T ] [ -u ] [ -v ] [ -V ] [ -w ] [ -@ file ] +efibootmgr is a userspace application used to modify the Intel Extensible Firmware Interface (EFI) Boot +running boot option, and more. +<URL:http://developer.intel.com> +/sys/firmware/efi/vars or /sys/firmware/efi/efivars/. +% +link - call the link function to create a link to a file +link OPTION +--help display this help and exit +--version +output version information and exit +Written by Michael Stone. +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +which - shows the full path of (shell) commands. +which [options] [--] programname [...] +Which takes one or more arguments. For each of its arguments it prints to stdout the full path of the +executables that would have been executed when this argument had been entered at the shell prompt. It +does this by searching for an executable or script in the directories listed in the environment variable +--all, -a +Print all matching executables in PATH, not just the first. +% +git-shell - Restricted login shell for Git-only SSH access +chsh -s $(command -v git-shell) <user> +git clone <user>@localhost:/path/to/repo.git +ssh <user>@localhost +server-side Git commands implementing the pull/push functionality, plus custom commands present in a +subdirectory named git-shell-commands in the user’s home directory. +git shell accepts the following commands after the -c option: +git receive-pack <argument>, git upload-pack <argument>, git upload-archive <argument> +Call the corresponding server-side command to support the client’s git push, git fetch, or git +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +update-leap - leap-seconds file manager/updater +update-leap [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +update-leap will validate the file currently on the local system and if necessary, updates leap-second +definition file. +tion can be specified on the command line. +If the file does not exist, is not valid, has expired, or is expiring soon, a new copy will be down‐ +loaded. If the new copy validates, it is installed and NTP is (optionally) restarted. +% +idn [OPTION]... [STRINGS]... +Command line interface to the internationalized domain name library. +All strings are expected to be encoded in the preferred charset used by your locale. Use `--debug' to +find out what this charset is. You can override the charset used by setting environment variable +CHARSET. +To process a string that starts with `-', for example `-foo', use `--' to signal the end of parameters, +as in `idn --quiet -a -- -foo'. +% +will NOT list all the users in /etc/passwd, shadow, PAM, etc. only those created by SASL (via +-f file +use file for sasldb +% +xzdec, lzmadec - Small .xz and .lzma decompressors +xzdec [option...] [file...] +lzmadec [option...] [file...] +xzdec is a liblzma-based decompression-only tool for .xz (and only .xz) files. xzdec is intended to work +xz --decompress --stdout (and possibly a few other commonly used options) to decompress .xz files. +lzmadec is identical to xzdec except that lzmadec supports .lzma files instead of .xz files. +To reduce the size of the executable, xzdec doesn't support multithreading or localization, and doesn't +read options from XZ_DEFAULTS and XZ_OPT environment variables. xzdec doesn't support displaying inter‐ +process instead of displaying progress information. +% +hdparm - get/set SATA/IDE device parameters +hdparm [options] [device ...] +hdparm provides a command line interface to various kernel interfaces supported by the Linux +rectly only with the latest kernels. +When no options are given, -acdgkmur is assumed. For "Get/set" options, a query without the optional +parameter (e.g. -d) will query (get) the device state, and with a parameter (e.g., -d0) will set the +device state. +% +mkreiserfs - The create tool for the Linux ReiserFS filesystem. +mkreiserfs [ -dfV ] [ -b | --block-size N ] [ -h | --hash HASH ] [ -u | --uuid UUID ] [ -l | --label +LABEL ] [ --format FORMAT ] [ -q | --quiet ] [ -j | --journal-device FILE ] [ -s | --journal-size N ] [ +-o | --journal-offset N ] [ -t | --transaction-max-size N ] [ -B | --badblocks file ] device [ filesys‐ +tem-size ] +mkreiserfs creates a Linux ReiserFS filesystem on a device (usually a disk partition). +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +filesystem-size +is the size in blocks of the filesystem. If omitted, mkreiserfs will automatically set it. +% +isc-config.sh - Get information about the installed version of ISC BIND +isc-config.sh [--cflags] [--exec-prefix] [--libs] [--prefix] [--version] [libraries...] +isc-config.sh prints information related to the installed version of ISC BIND, such as the compiler and +linker flags required to compile and link programs that use ISC BIND libraries. +The optional libraries are used to report specific details for compiling and linking for the listed +listed on the command line. (Some libraries require other libraries, so are implied.) +--cflags +Prints the compiler command line options required to compile files that use ISC BIND. Use the +libraries command line argument(s) to print additional specific flags to pass to the C compiler. +% +ping - send ICMP ECHO_REQUEST to network hosts +[-M pmtudisc_option] [-N nodeinfo_option] [-w deadline] [-W timeout] [-p pattern] [-Q tos] [-s +packetsize] [-S sndbuf] [-t ttl] [-T timestamp option] [hop]... {destination} +ping uses the ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host +or gateway. ECHO_REQUEST datagrams (``pings'') have an IP and ICMP header, followed by a struct timeval +and then an arbitrary number of ``pad'' bytes used to fill out the packet. +-6. +% +and GNUTLS_SO_PIN. +% +grops - PostScript driver for groff +grops [-glmv] [-b n] [-c n] [-F dir] [-I dir] [-p papersize] [-P prologue] [-w n] [files ...] +grops translates the output of GNU troff to PostScript. Normally grops should be invoked by using the +groff command with a -Tps option. (Actually, this is the default for groff.) If no files are given, +grops reads the standard input. A filename of - also causes grops to read the standard input. Post‐ +Script output is written to the standard output. When grops is run by groff options can be passed to +grops using groff's -P option. +vention) if called with multiple file arguments. To print such concatenated output it is necessary to +deactivate DSC handling in the printing program or previewer. See section FONT INSTALLATION below for a +guide how to install fonts for grops. +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +reiserfsck - The checking tool for the ReiserFS filesystem. +reiserfsck [ -aprVy ] [ --rebuild-sb | --check | --fix-fixable | --rebuild-tree | --clean-attributes ] [ +-j | --journal device ] [ -z | --adjust-size ] [ -n | --nolog ] [ -B | --badblocks file ] [ -l | --log‐ +file file ] [ -q | --quiet ] [ -y | --yes ] [ -f | --force ] [ -S | --scan-whole-partition ] [ --no-jour‐ +nal-available ] device +Reiserfsck searches for a Reiserfs filesystem on a device, replays any necessary transactions, and either +checks or repairs the file system. +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +--rebuild-sb +% +autoreconf - Update generated configuration files +autoreconf [OPTION]... [DIRECTORY]... +Run `autoconf' (and `autoheader', `aclocal', `automake', `autopoint' (formerly `gettextize'), and +`libtoolize' where appropriate) repeatedly to remake the GNU Build System files in specified DIRECTORIES +and their subdirectories (defaulting to `.'). +By default, it only remakes those files that are older than their sources. If you install new versions +of the GNU Build System, you can make `autoreconf' remake all of the files by giving it the `--force' +option. +Operation modes: +-h, --help +print this help, then exit +% +crond - daemon to execute scheduled commands +crond [-c | -h | -i | -n | -p | -P | -s | -m<mailcommand>] +crond -x [ext,sch,proc,pars,load,misc,test,bit] +systemd is enabled, then unit file is installed into /lib/systemd/system/crond.service and daemon is +started by systemctl start crond.service command. It returns immediately, thus, there is no need to need +to start it with the '&' parameter. +Cron searches /var/spool/cron for crontab files which are named after accounts in /etc/passwd; The found +crontabs are loaded into the memory. Cron also searches for /etc/anacrontab and any files in the +and checks each job to see if it needs to be run in the current minute. When executing commands, any +output is mailed to the owner of the crontab (or to the user specified in the MAILTO environment variable +% +rmdir - remove empty directories +rmdir [OPTION]... DIRECTORY... +Remove the DIRECTORY(ies), if they are empty. +--ignore-fail-on-non-empty +ignore each failure that is solely because a directory +is non-empty +-p, --parents +remove DIRECTORY and its ancestors; e.g., 'rmdir -p a/b/c' is similar to 'rmdir a/b/c a/b a' +% +addftinfo - add information to troff font files for use with groff +addftinfo [ -v ] [ param-option value.... ] res unitwidth font +addftinfo reads a troff font file and adds some additional font-metric information that is used by the +groff system. The font file with the information added is written on the standard output. The informa‐ +tion added is guessed using some parametric information about the font and assumptions about the tradi‐ +tional troff names for characters. The main information added is the heights and depths of characters. +The res and unitwidth arguments should be the same as the corresponding parameters in the DESC file; font +is the name of the file describing the font; if font ends with I the font will be assumed to be italic. +–v prints the version number. +All other options change one of the parameters that are used to derive the heights and depths. Like the +% +write - send a message to another user +write user [ttyname] +write allows you to communicate with other users, by copying lines from your terminal to theirs. +When you run the write command, the user you are writing to gets a message of the form: +Message from yourname@yourhost on yourtty at hh:mm ... +Any further lines you enter will be copied to the specified user's terminal. If the other user wants to +reply, they must run write as well. +When you are done, type an end-of-file or interrupt character. The other user will see the message EOF +indicating that the conversation is over. +% +msgexec - process translations of message catalog +reads a translation from standard input. It is invoked once for each translation. Its output becomes +msgexec's output. msgexec's return code is the maximum return code across all invocations. +A special builtin command called '0' outputs the translation, followed by a null byte. The output of +"msgexec 0" is suitable as input for "xargs -0". +Command input: +--newline +add newline at the end of input +% +code. The tool has originally been developed as a second implementation for Libgcrypt to allow comparing +against the primary implementation and to be used for internal consistency checks. It should not be used +for sensitive data because no mechanisms to clear the stack etc are used. +The code has been written in a highly portable manner and requires only a few standard definitions to be +provided in a config.h file. +% +[-b bfdname|--target=bfdname] +[-C|--demangle[=style]] +[-e filename|--exe=filename] +[-f|--functions] [-s|--basename] +[-i|--inlines] +[-p|--pretty-print] +[-j|--section=name] +[-H|--help] [-V|--version] +[addr addr ...] +offset in a section of a relocatable object, it uses the debugging information to figure out which file +% +systemd-ask-password - Query the user for a system password +message specified on the command line. When run from a TTY it will query a password on the TTY and print +it to standard output. When run with no TTY or with --no-tty it will query the password system-wide and +allow active users to respond via several agents. The latter is only available to privileged processes. +The purpose of this tool is to query system-wide passwords — that is passwords not attached to a specific +user account. Examples include: unlocking encrypted hard disks when they are plugged in or at boot, +entering an SSL certificate passphrase for web and VPN servers. +Existing agents are: +% +pkg-config - Return metainformation about installed libraries +[--short-errors] [--silence-errors] [--errors-to-stdout] [--debug] [--cflags] [--libs] [--libs-only-L] +provides] [--print-requires] [--print-requires-private] [LIBRARIES...] +The pkg-config program is used to retrieve information about installed libraries in the system. It is +typically used to compile and link against one or more libraries. Here is a typical usage scenario in a +Makefile: +program: program.c +cc program.c $(pkg-config --cflags --libs gnomeui) +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +pacman-key - manage pacman's list of trusted keys +pacman-key [options] operation [targets] +pacman-key is a wrapper script for GnuPG used to manage pacman’s keyring, which is the collection of PGP +keys used to check signed packages and databases. It provides the ability to import and export keys, +fetch keys from keyservers and update the key trust database. +More complex keyring management can be achieved using GnuPG directly combined with the --homedir option +pointing at the pacman keyring (located in /etc/pacman.d/gnupg by default). +Invoking pacman-key consists of supplying an operation with any potential options and targets to operate +OPERATIONS +% +umount - unmount file systems +umount -a [-dflnrv] [-t fstype] [-O option...] +umount [-dflnrv] {directory|device}... +umount -h|-V +The umount command detaches the mentioned file system(s) from the file hierarchy. A file system is spec‐ +ified by giving the directory where it has been mounted. Giving the special device on which the file +on more than one directory. +it, or when some process has its working directory there, or when a swap file on it is in use. The +% +pam_tally - The login counter (tallying) module +pam_tally.so [file=/path/to/counter] [onerr=[fail|succeed]] [magic_root] [even_deny_root_account] +[deny=n] [lock_time=n] [unlock_time=n] [per_user] [no_lock_time] [no_reset] [audit] [silent] +[no_log_info] +pam_tally [--file /path/to/counter] [--user username] [--reset[=n]] [--quiet] +many attempts fail. +deprecated and will be removed in a future release. +pam_tally comes in two parts: pam_tally.so and pam_tally. The former is the PAM module and the latter, a +% +psfaddtable - add a Unicode character table to a console font +psfaddtable fontfile tablefile outfile +psfaddtable takes a console font in .psf format given by fontfile and merges it with the Unicode charac‐ +ter table given by tablefile to produce a font file with an embedded character table, which is written to +outfile. An input file name of "-" denotes standard input, and an output file name of "-" denotes stan‐ +dard output. If the fontfile already contains an embedded character table, it is ignored. +TABLE FILE FORMAT +Each line in the tablefile should be either blank, contain a comment (preceded by #), or contain a +sequence of numbers in either decimal (default), octal (preceded by 0), or hexadecimal (preceded by 0x) +format, separated by spaces or tabs. The first number on each line indicates the glyph slot in the font +% +fstrim - discard unused blocks on a mounted filesystem +fstrim [-a] [-o offset] [-l length] [-m minimum-size] [-v] mountpoint +fstrim is used on a mounted filesystem to discard (or "trim") blocks which are not in use by the filesys‐ +behavior based on range or size, as explained below. +The mountpoint argument is the pathname of the directory where the filesystem is mounted. +Running fstrim frequently, or even using mount -o discard, might negatively affect the lifetime of poor- +quality SSD devices. For most desktop and server systems a sufficient trimming frequency is once a week. +% +rm - remove files or directories +rm [OPTION]... [FILE]... +not remove directories. +If the -I or --interactive=once option is given, and there are more than three files or the -r, -R, or +--recursive are given, then rm prompts the user for whether to proceed with the entire operation. If the +response is not affirmative, the entire command is aborted. +Otherwise, if a file is unwritable, standard input is a terminal, and the -f or --force option is not +given, or the -i or --interactive=always option is given, rm prompts the user for whether to remove the +file. If the response is not affirmative, the file is skipped. +% +ddns-confgen - ddns key generation tool +tsig-keygen [-a algorithm] [-h] [-r randomfile] [name] +ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [-s name | -z zone] +tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG +signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the +rndc command channel. +When run as tsig-keygen, a domain name can be specified on the command line which will be used as the +name of the generated key. If no name is specified, the default is tsig-key. +When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that +can be used with nsupdate and named when setting up dynamic DNS, including an example update-policy +% +mklost+found - create a lost+found directory on a mounted Linux second extended file system +mklost+found +mklost+found is used to create a lost+found directory in the current working directory on a Linux second +extended file system. There is normally a lost+found directory in the root directory of each filesystem. +recover a filesystem, it does not need to allocate blocks in the filesystem to store a large number of +recovery. +There are none. +% +efivar - Tool to manipulate UEFI variables +efivar [OPTION...] +-L, --list-guids +list guids efivar knows about +-l, --list +list current variables +-p, --print +print variable specified by --name +-n, --name=<guid-name> +% +pr - convert text files for printing +pr [OPTION]... [FILE]... +Paginate or columnate FILE(s) for printing. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. ++FIRST_PAGE[:LAST_PAGE], --pages=FIRST_PAGE[:LAST_PAGE] +begin [stop] printing with page FIRST_[LAST_]PAGE +-COLUMN, --columns=COLUMN +output COLUMN columns and print columns down, unless -a is used. Balance number of lines in the +% +netctl - Control the netctl network profile manager +netctl [--help | --version] +manager. +The following commands are understood: +list +List all available profiles. Active profiles will be marked with a ‘*’. +% +vgmknodes — recreate volume group directory and logical volume special files +ones and removes unused ones. +--refresh +manually without a clustered lock manager. +% +killall - kill processes by name +killall [-Z, --context pattern] [-e, --exact] [-g, --process-group] [-i, --interactive] [-o, --older-than +TIME] [-q, --quiet] [-r, --regexp] [-s, --signal SIGNAL, -SIGNAL] [-u, --user user] [-v, --verbose] +killall -l +killall -V, --version +killall sends a signal to all processes running any of the specified commands. If no signal name is +specified, SIGTERM is sent. +If the command name is not regular expression (option -r) and contains a slash (/), processes executing +that particular file will be selected for killing, independent of their name. +% +ebrowse - create a class hierarchy database +ebrowse [options] [FILES...] +format. +ebrowse is used to create the database used by the class browser in Emacs. +The program follows the usual GNU command line syntax, with long options starting with two dashes ("-"). +-a, --append +append output to existing file +% +prlimit - get and set process resource limits +prlimit [options] [--resource[=limits] [--pid PID] +prlimit [options] [--resource[=limits] command [argument...] +Given a process id and one or more resources, prlimit tries to retrieve and/or modify the limits. +When command is given, prlimit will run this command with the given arguments. +The limits parameter is composed of a soft and a hard value, separated by a colon (:), in order to modify +the existing values. If no limits are given, prlimit will display the current values. If one of the +values is not given, then the existing one will be used. To specify the unlimited or infinity limit +% +zsoelim - satisfy .so requests in roff input +zsoelim [-CVh] [file ...] +zsoelim parses file arguments, or if none are specified, its standard input for lines of the form: +.so <filename> +These requests are replaced by the contents of the filename specified. If the request cannot be met, +ported depending upon compile time options. If the request can be met by a compressed file, this file is +decompressed using an appropriate decompressor and its output is used to satisfy the request. +Traditionally, soelim programs were used to allow roff preprocessors to be able to preprocess the files +% +[lock_time=n] [unlock_time=n] [root_unlock_time=n] [serialize] [audit] [silent] +[no_log_info] [debug] +many attempts fail. +manipulate the counter file. It can display user counts, set individual counts, or clear all counts. +% +etags, ctags - generate tag file for Emacs, vi +etags [-aCDGIQRVh] [-i file] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--no-defines] [--globals] [--no-globals] [--no-line-directive] [--include=file] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--output=tagfile] +[--class-qualify] [--regex=regexp] [--no-regex] [--help] [--version] file ... +ctags [-aCdgIQRVh] [-BtTuvwx] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--backward-search] [--cxref] [--no-defines] [--globals] [--no-globals] [--no-line-directive] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--class-qualify] +[--output=tagfile] [--regex=regexp] [--update] [--help] [--version] file ... +% +Compare three files line by line. +Mandatory arguments to long options are mandatory for short options too. +-A, --show-all +output all changes, bracketing conflicts +-e, --ed +output ed script incorporating changes from OLDFILE to YOURFILE into MYFILE +-E, --show-overlap +% +iconvconfig - create iconv module configuration cache +iconvconfig [options] [directory]... +tion file is used to determine the needed modules for a conversion. Loading and parsing such a configu‐ +The iconvconfig program reads iconv module configuration files and writes a fast-loading gconv module +configuration cache file. +In addition to the system provided gconv modules, the user can specify custom gconv module directories +with the environment variable GCONV_PATH. However, iconv module configuration caching is used only when +the environment variable GCONV_PATH is not set. +% +msginit - initialize a message catalog +msginit [OPTION] +Creates a new PO file, initializing the meta information with values from the user's environment. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +-i, --input=INPUTFILE +input POT file +If no input file is given, the current directory is searched for the POT file. If it is -, standard +input is read. +% +autoconf - Generate configuration scripts +autoconf [OPTION]... [TEMPLATE-FILE] +Generate a configuration script from a TEMPLATE-FILE if given, or `configure.ac' if present, or else +`configure.in'. Output is sent to the standard output if TEMPLATE-FILE is given, else into `configure'. +Operation modes: +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +update-ca-trust - manage consolidated and dynamic configuration of CA certificates and associated trust +Authority (CA) certificates and associated trust. +The feature is available for new applications that read the consolidated configuration files found in the +Parts of the new feature are also provided in a way to make it useful for legacy applications. +Many legacy applications expect CA certificates and trust configuration in a fixed location, contained in +% +resizepart - tell the kernel about the new size of a partition +resizepart device partition length +resizepart tells the Linux kernel about the new size of the specified partition. The command is a simple +wrapper around the "resize partition" ioctl. +PARAMETERS +device The disk device. +partition +The partition number. +% +unix_chkpwd [...] +unix_chkpwd is a helper program for the pam_unix module that verifies the password of the current user. +It also checks password and account expiration dates in shadow. It is not intended to be run directly +from the command line and logs a security violation if done so. +It is typically installed setuid root or setgid shadow. +The interface of the helper - command line options, and input/output data format are internal to the +pam_unix module and it should not be called directly from applications. +% +getfacl - get file access control lists +getfacl [-aceEsRLPtpndvh] file ... +getfacl [-aceEsRLPtpndvh] - +For each file, getfacl displays the file name, owner, the group, and the Access Control List (ACL). If a +directory has a default ACL, getfacl also displays the default ACL. Non-directories cannot have default +ACLs. +If getfacl is used on a file system that does not support ACLs, getfacl displays the access permissions +defined by the traditional file mode permission bits. +The output format of getfacl is as follows: +% +vimtutor - the Vim tutor +vimtutor [-g] [language] +Vimtutor starts the Vim tutor. It copies the tutor file first, so that it can be modified without chang‐ +ing the original file. +The Vimtutor is useful for people that want to learn their first Vim commands. +The optional argument -g starts vimtutor with gvim rather than vim, if the GUI version of vim is avail‐ +able, or falls back to Vim if gvim is not found. +The optional [language] argument is the two-letter name of a language, like "it" or "es". If the [lan‐ +guage] argument is missing, the language of the current locale will be used. If a tutor in this language +is available, it will be used. Otherwise the English version will be used. +% +partx - tell the kernel about the presence and numbering of on-disk partitions +partx [-a|-d|-P|-r|-s|-u] [-t type] [-n M:N] [-] disk +partx [-a|-d|-P|-r|-s|-u] [-t type] partition [disk] +Given a device or disk-image, partx tries to parse the partition table and list its contents. It can +also tell the kernel to add or remove partitions from its bookkeeping. +The disk argument is optional when a partition argument is provided. To force scanning a partition as if +it were a whole disk (for example to list nested subpartitions), use the argument "-" (hyphen-minus). +For example: +% +glib-compile-schemas - GSettings schema compiler +glib-compile-schemas [OPTION...] {DIRECTORY} +glib-compile-schemas compiles all the GSettings XML schema files in DIRECTORY into a binary file with the +name gschemas.compiled that can be used by GSettings. The XML schema files must have the filename +extension .gschema.xml. For a detailed description of the XML file format, see the GSettings +documentation. +specified in the XDG_DATA_DIRS environment variable. The usual location to install schema files is +In addition to schema files, glib-compile-schemas reads 'vendor override' files, which are key files that +can override default values for keys in the schemas. The group names in the key files are the schema id, +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +top - display Linux processes +top -hv|-bcHiOSs -d secs -n max -u|U user -p pid -o fld -w [cols] +The traditional switches `-' and whitespace are optional. +The top program provides a dynamic real-time view of a running system. It can display system summary +information as well as a list of processes or threads currently being managed by the Linux kernel. The +types of system summary information shown and the types, order and size of information displayed for pro‐ +cesses are all user configurable and that configuration can be made persistent across restarts. +The program provides a limited interactive interface for process manipulation as well as a much more +extensive interface for personal configuration -- encompassing every aspect of its operation. And +while top is referred to throughout this document, you are free to name the program anything you wish. +That new name, possibly an alias, will then be reflected on top's display and used when reading and writ‐ +% +systemd-nspawn - Spawn a namespace container for debugging, testing and building +as the process tree, the various IPC subsystems and the host and domain name. +--directory= command line option. By using the --machine= option an OS tree is automatically searched for +in a couple of locations, most importantly in /var/lib/machines, the suggested directory to place +container images installed on the system. +% +readlink - print resolved symbolic links or canonical file names +readlink [OPTION]... FILE... +Print value of a symbolic link or canonical file name +-f, --canonicalize +canonicalize by following every symlink in every component of the given name recursively; all but +the last component must exist +-e, --canonicalize-existing +canonicalize by following every symlink in every component of the given name recursively, all com‐ +ponents must exist +-m, --canonicalize-missing +% +insmod - Simple program to insert a module into the Linux Kernel +insmod [filename] [module options...] +instead, which is more clever and can handle module dependencies. +Only the most general of error messages are reported: as the work of trying to link the module is now +done inside the kernel, the dmesg usually gives more information about errors. +others. +% +bashbug - report a bug in bash +bashbug [--version] [--help] [email-address] +bashbug is a shell script to help the user compose and mail bug reports concerning bash in a standard +format. bashbug invokes the editor specified by the environment variable EDITOR on a temporary copy of +the bug report format outline. The user must fill in the appropriate fields and exit the editor. bashbug +then mails the completed report to bug-bash@gnu.org, or email-address. If the report cannot be mailed, +it is saved in the file dead.bashbug in the invoking user's home directory. +The bug report format outline consists of several sections. The first section provides information about +the machine, operating system, the bash version, and the compilation environment. The second section +should be filled in with a description of the bug. The third section should be a description of how to +reproduce the bug. The optional fourth section is for a proposed fix. Fixes are encouraged. +% +comm - compare two sorted files line by line +% +xargs - build and execute command lines from standard input +xargs [-0prtx] [-E eof-str] [-e[eof-str]] [--eof[=eof-str]] [--null] [-d delimiter] [--delimiter +delimiter] [-I replace-str] [-i[replace-str]] [--replace[=replace-str]] [-l[max-lines]] [-L max-lines] +[--max-lines[=max-lines]] [-n max-args] [--max-args=max-args] [-s max-chars] [--max-chars=max-chars] [-P +max-procs] [--max-procs=max-procs] [--process-slot-var=name] [--interactive] [--verbose] [--exit] +[--no-run-if-empty] [--arg-file=file] [--show-limits] [--version] [--help] [command [initial-arguments]] +ed by blanks (which can be protected with double or single quotes or a backslash) or newlines, and exe‐ +cutes the command (default is /bin/echo) one or more times with any initial-arguments followed by items +read from standard input. Blank lines on the standard input are ignored. +The command line for command is built up until it reaches a system-defined limit (unless the -n and -L +options are used). The specified command will be invoked as many times as necessary to use up the list +% +blkdeactivate — utility to deactivate block devices +blkdeactivate [-d dm_options] [-e] [-h] [-l lvm_options] [-m mpath_options] [-u] [-v] [device] +blkdeactivate utility deactivates block devices. If a device is mounted, the utility can unmount it auto‐ +matically before trying to deactivate. The utility currently supports device-mapper devices (DM), includ‐ +-d, --dmoption dm_options +% +usb-devices - print USB device details +usb-devices +usb-devices is a (bash) shell script that can be used to display details of USB buses in the system and +the devices connected to them. +The output of the script is similar to the usb/devices file available either under /proc/bus (if usbfs is +mounted), or under /sys/kernel/debug (if debugfs is mounted there). The script is primarily intended to +be used if the file is not available. +In contrast to the usb/devices file, this script only lists active interfaces (those marked with a "*" in +the usb/devices file) and their endpoints. +Be advised that there can be differences in the way information is sorted, as well as in the format of +% +systemd-tty-ask-password-agent - List or process pending systemd password requests +systemd-tty-ask-password-agent is a password agent that handles password requests of the system, for +example for hard disk encryption passwords or SSL certificate passwords that need to be queried at +boot-time or during runtime. +The following options are understood: +--list +Lists all currently pending system password requests. +% +tail - output the last part of files +tail [OPTION]... [FILE]... +header giving the file name. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --bytes=[+]NUM +output the last NUM bytes; or use -c +NUM to output starting with byte NUM of each file +-f, --follow[={name|descriptor}] +% +dmstats — device-mapper statistics management +dmsetup stats command [options] +dmstats command [device_name |--uuid uuid|--major major --minor minor] +dmstats clear device_name [--allprograms|--programid id] [--allregions|--regionid id] +dmstats create [device_name... |file_path...] [--alldevices] [--areas nr_areas|--areasize area_size] +[--bounds histogram_boundaries] [--filemap] [--nogroup] [--precise] [--start start_sector --length +length|--segments] [--userdata user_data] [--programid id] +dmstats delete [device_name] [--alldevices] [--allprograms|--programid id] [--allregions|--regionid id] +dmstats group [device_name] [--alias name] [--alldevices] [--regions regions] +dmstats help [-c|-C|--columns] +dmstats list [device_name] [--histogram] [--allprograms|--programid id] [--units units] [--area] +[--region] [--group] [--nosuffix] [--notimesuffix] [-v|--verbose[-v|--verbose]] +dmstats print [device_name] [--clear] [--allprograms|--programid id] [--allregions|--regionid id] +dmstats report [device_name] [--interval seconds] [--count count] [--units units] [--histogram] +% +systemd-cgls - Recursively show control group contents +systemd-cgls recursively shows the contents of the selected Linux control group hierarchy in a tree. If +arguments are specified, shows all member processes of the specified control groups plus all their +assumed in the systemd control group hierarchy. If no argument is specified and the current working +directory is beneath the control group mount point /sys/fs/cgroup, shows the contents of the control +group the working directory refers to. Otherwise, the full systemd control group hierarchy is shown. +By default, empty control groups are not shown. +The following options are understood: +% +groupdel - delete a group +groupdel [options] GROUP +The groupdel command modifies the system account files, deleting all entries that refer to GROUP. The +named group must exist. +The options which apply to the groupdel command are: +-h, --help +Display help message and exit. +-R, --root CHROOT_DIR +Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR +% +tftpd - Trivial File Transfer Protocol server +tftpd {directory} +requested via TFTP protocol, effectively chrooting tftpd to this directory. File names are validated not +It is in difference of variants of tftpd usually distributed with unix-like systems, which take a list of +directories and match file names to start from one of given prefixes or to some random default, when no +arguments were given. There are two reasons not to behave in this way: first, it is inconvenient, clients +are not expected to know something about layout of filesystem on server host. And second, TFTP protocol +% +git-upload-pack - Send objects packed back to git-fetch-pack +git-upload-pack [--[no-]strict] [--timeout=<n>] [--stateless-rpc] +[--advertise-refs] <directory> +Invoked by 'git fetch-pack', learns what +objects the other side is missing, and sends them after packing. +The UI for the protocol is on the 'git fetch-pack' side, and the +program pair is meant to be used to pull updates from a remote +repository. For push operations, see 'git send-pack'. +% +shuf - generate random permutations +shuf [OPTION]... [FILE] +shuf -e [OPTION]... [ARG]... +shuf -i LO-HI [OPTION]... +Write a random permutation of the input lines to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-e, --echo +treat each ARG as an input line +% +lsattr - list file attributes on a Linux second extended file system +lsattr [ -RVadlpv ] [ files... ] +the attributes and what they mean. +-R Recursively list attributes of directories and their contents. +-V Display the program version. +-a List all files in directories, including files that start with `.'. +-d List directories like other files, rather than listing their contents. +% +thin_delta - Print the differences in the mappings between two thin devices. +thin_delta [options] {device|file} +thin_delta allows you to compare the mappings in two thin volumes (snapshots allow common blocks between +thin volumes). +The numeric identifier for the first thin volume to diff. +The numeric identifier for the second thin volume to diff. +% +test - check file types and compare values +test EXPRESSION +test +[ EXPRESSION ] +[ ] +[ OPTION +Exit with the status determined by EXPRESSION. +--help display this help and exit +--version +output version information and exit +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +resolvconf — a framework for managing multiple DNS configurations +resolvconf -I +resolvconf [-m metric] [-p] [-x] -a interface[.protocol] <file +resolvconf [-f] -d interface[.protocol] +resolvconf [-x] -il pattern +resolvconf -u +ally, the host runs just one client and that updates /etc/resolv.conf. More modern systems frequently have +wired and wireless interfaces and there is no guarantee both are on the same network. With the advent of +VPN and other types of networking daemons, many things now contend for the contents of /etc/resolv.conf. +the argument -a interface[.protocol] instead of the filesystem. resolvconf then updates /etc/resolv.conf +% +chfn - change your finger information +chfn [-f full-name] [-o office] [-p office-phone] [-h home-phone] [-u] [-v] [username] +is displayed by the finger program. The Linux finger command will display four pieces of information +that can be changed by chfn: your real name, your work room and phone, and your home phone. +Any of the four pieces of information can be specified on the command line. If no information is given +on the command line, chfn enters interactive mode. +In interactive mode, chfn will prompt for each field. At a prompt, you can enter the new information, or +just press return to leave the field unchanged. Enter the keyword "none" to make the field blank. +chfn supports non-local entries (kerberos, LDAP, etc.) if linked with libuser, otherwise use ypchfn, +% +vgexport - make volume groups unknown to the system +ignore exported Volume Groups. vgexport clears the VG system ID, and vgimport sets the VG system ID to +match the host running vgimport (if the host has a system ID). +-a, --all +Export all inactive Volume Groups. +% +gitk - The Git repository browser +gitk [<options>] [<revision range>] [--] [<path>...] +graph, showing information related to each commit, and the files in the trees of each revision. +To control which revisions to show, gitk supports most options applicable to the git rev-list command. It +also supports a few options applicable to the git diff-* commands to control how the changes each commit +introduces are shown. Finally, it supports some gitk-specific options. +gitk generally only understands options with arguments in the sticked form (see gitcli(7)) due to +limitations in the command-line parser. +% +device. +label. +% +fsck.minix - check consistency of Minix filesystem +fsck.minix [options] device +fsck.minix performs a consistency check for the Linux MINIX filesystem. +The program assumes the filesystem is quiescent. fsck.minix should not be used on a mounted device +unless you can be sure nobody is writing to it. Remember that the kernel can write to device when it +searches for files. +The device name will usually have the following form: +% +lslogins - display information about known users in the system +lslogins [options] [-s|-u[=UID]] [-g groups] [-l logins] +Examine the wtmp and btmp logs, /etc/shadow (if necessary) and /etc/passwd and output the desired data. +The default action is to list info about all the users in the system. +Mandatory arguments to long options are mandatory for short options too. +-a, --acc-expiration +for more info). (Requires root privileges.) +% +w - Show who is logged on and what they are doing. +w [options] user [...] +w displays information about the users currently on the machine, and their processes. The header shows, +in this order, the current time, how long the system has been running, how many users are currently +The following entries are displayed for each user: login name, the tty name, the remote host, login time, +idle time, JCPU, PCPU, and the command line of their current process. +The JCPU time is the time used by all processes attached to the tty. It does not include past background +jobs, but does include currently running background jobs. +The PCPU time is the time used by the current process, named in the "what" field. +% +compile_et - error table compiler +compile_et file +Compile_et converts a table listing error-code names and associated messages into a C source file suit‐ +The source file name must end with a suffix of ``.et''; the file consists of a declaration supplying the +name (up to four characters long) of the error-code table: +error_table name +error_code name, " string " +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +attr - extended attributes on XFS filesystem objects +attr [ -LRSq ] -s attrname [ -V attrvalue ] pathname +attr [ -LRSq ] -g attrname pathname +attr [ -LRSq ] -r attrname pathname +attr [ -LRSq ] -l pathname +Extended attributes implement the ability for a user to attach name:value pairs to objects within the XFS +filesystem. +name. It is thus aimed specifically at users of the XFS filesystem - for filesystem independent extended +% +genl-ctrl-list - List available kernel-side Generic Netlink families +genl-ctrl-list [-d] +Queries the Generic Netlink controller in kernel and prints a list of all registered Generic Netlink fam‐ +ilies including the version of the interface that has been registered. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +-d or --details +% +ldns-test-edns - test if dns cache supports EDNS and DNSSEC. +ldns-test-edns [ -i ] { ip } +ldns-test-edns tests a DNS cache and checks if it supports EDNS0 and DNSSEC types so that it can be used +as a dnssec-enabled DNS cache. It sends two queries to the cache, one for the root key and one for a DS +record. These must succeed, the answer must have EDNS, that type and signatures. +If the IP address is good for DNSSEC, it is printed with 'OK'. Otherwise short description is given of +the failure. If OK is given, the cache should be good to use as a cache for a local configured DNSSEC +validator. +The tool assumes the root is signed and Sweden is signed. Also, the queries are sent with the CD flag, +the tool does not check that the results are validated, but that they can be validated. +% +ldns-update - send a dynamic update packet +ldns-update [ zone ] ip [ tsig_name tsig_als tsig_hmac ] +ldns-update is used to send a dynamic update packet. +zone Use this zone instead of trying to read it from the zonefile's SOA record. +ip Send the update to this IP address +tsig_name tsig_alg tsig_hmac +% +kprop [-r realm] [-f file] [-d] [-P port] [-s keytab] slave_host +-r realm +Specifies the realm of the master server. +-f file +Specifies the filename where the dumped principal database file is to be found; by default the +% +zmore - file perusal filter for crt viewing of compressed text +zmore [ name ... ] +Zmore is a filter which allows examination of compressed or plain text files one screenful at a time on a +soft-copy terminal. zmore works on files compressed with compress, pack or gzip, and also on uncom‐ +pressed files. If a file does not exist, zmore looks for a file of the same name with the addition of a +.gz, .z or .Z suffix. +Zmore normally pauses after each screenful, printing --More-- at the bottom of the screen. If the user +then types a carriage return, one more line is displayed. If the user hits a space, another screenful is +displayed. Other possibilities are enumerated later. +Zmore looks in the file /etc/termcap to determine terminal characteristics, and to determine the default +% +aclocal [OPTION]... +--automake-acdir=DIR +--system-acdir=DIR +directory holding third-party system-wide files +% +thin_rmap - output reverse map of a thin provisioned region of blocks from metadata device or file +thin_rmap [options] {device|file} +thin_rmap outputs the reverse mapping stored in the metadata on a device or file between a region of thin +provisioned pool blocks and the associated thin provisioned devices. +--region <block range> +output reverse map +-h, --help +Print help and exit. +% +msgunfmt - uncompile message catalog from binary format +msgunfmt [OPTION] [FILE]... +Convert binary message catalog to Uniforum style .po file. +Mandatory arguments to long options are mandatory for short options too. +Operation mode: +-j, --java +Java mode: input is a Java ResourceBundle class +--csharp +C# mode: input is a .NET .dll file +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +tsort - perform topological sort +tsort [OPTION] [FILE] +Write totally ordered list consistent with the partial ordering in FILE. +With no FILE, or when FILE is -, read standard input. +--help display this help and exit +--version +output version information and exit +Written by Mark Kettenis. +% +gpgsm - CMS encryption and signing tool +gpgsm [--homedir dir] [--options file] [options] command [args] +and the CMS protocol. It is mainly used as a backend for S/MIME mail processing. gpgsm includes a full +featured certificate management and complies with all rules defined for the German Sphinx project. +Commands are not distinguished from options except for the fact that only one command is allowed. +Commands not specific to the function +--version +% +fsadm — utility to resize or check filesystem on a device +fsadm [options] check device +fsadm [options] resize device [new_size] +-e|--ext-offline +-f|--force +Bypass some sanity checks. +% +pgrep, pkill - look up or signal processes based on name and other attributes +pgrep [options] pattern +pkill [options] pattern +pgrep looks through the currently running processes and lists the process IDs which match the selection +criteria to stdout. All the criteria have to match. For example, +$ pgrep -u root sshd +will only list the processes called sshd AND owned by root. On the other hand, +$ pgrep -u root,daemon +will list the processes owned by root OR daemon. +% +Process macros in FILEs. If no FILE or if FILE is `-', standard input is read. +Mandatory or optional arguments to long options are mandatory or optional for short options too. +Operation modes: +--help display this help and exit +--version +output version information and exit +-E, --fatal-warnings +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +msgfmt - compile message catalog to binary format +msgfmt [OPTION] filename.po ... +Generate binary message catalog from textual translation description. +Mandatory arguments to long options are mandatory for short options too. Similarly for optional argu‐ +ments. +Input file location: +filename.po ... +input files +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +nscd - name service cache daemon +Nscd is a daemon that provides a cache for the most common name service requests. The default configura‐ +There are two caches for each database: a positive one for items found, and a negative one for items not +--help will give you a list with all options and what they do. +% +xzless, lzless - view xz or lzma compressed (text) files +xzless [file...] +lzless [file...] +xzless is a filter that displays text from compressed files to a terminal. It works on files compressed +The command named lzless is provided for backward compatibility with LZMA Utils. +ENVIRONMENT +% +and improves the file access speed. +mount point of it and reduces fragmentation of all files in this mount point. +-c Get a current fragmentation count and an ideal fragmentation count, and calculate fragmentation +% +factor - factor numbers +factor [NUMBER]... +factor OPTION +Print the prime factors of each specified integer NUMBER. If none are specified on the command line, +read them from standard input. +--help display this help and exit +--version +output version information and exit +Written by Paul Rubin, Torbjorn Granlund, and Niels Moller. +% +strfile - create a random access file for storing strings +unstr - dump strings in pointer order +strfile [-iorsx] [-c char] sourcefile [outputfile] +unstr [-c char] datafile[.ext] [outputfile] +strfile reads a file containing groups of lines separated by a line containing a single percent `%' sign +(or other specified delimiter character) and creates a data file which contains a header structure and a +The output file, if not specified on the command line, is named sourcefile.dat. +The purpose of unstr is to undo the work of strfile. It prints out the strings contained in the source‐ +file, which is datafile.ext without its extension, or datafile if no extension is specified (in this +% +rtcwake - enter a system sleep state until specified wakeup time +rtcwake [options] [-d device] [-m standby_mode] {-s seconds|-t time_t} +specified time. It uses any RTC framework driver that supports standard driver model wakeup flags. +disk). Not all systems have persistent media that are appropriate for such suspend modes. +% +grog — guess options for a following groff command +grog [-C] [--run] [--warnings] [--ligatures] [ groff-option ....] [--] [ filespec ....] +grog -h | --help +grog -v | --version +to perform the input with the groff program. +The corresponding groff command is usually displayed in standard output. With the option --run, +the generated line is output into standard error and the generated groff command is run on the +standard output. +The option -v or --version prints information on the version number. Also -h or --help prints usage +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +nl - number lines of files +nl [OPTION]... [FILE]... +Write each FILE to standard output, with line numbers added. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --body-numbering=STYLE +use STYLE for numbering body lines +-d, --section-delimiter=CC +use CC for separating logical pages +% +git-cvsserver - A CVS server emulator for Git +SSH: +export CVS_SERVER="git cvsserver" +cvs -d :ext:user@server/path/repo.git co <HEAD_name> +pserver (/etc/inetd.conf): +cvspserver stream tcp nowait nobody /usr/bin/git-cvsserver git-cvsserver pserver +git-cvsserver [options] [pserver|server] [<directory> ...] +% +ocsptool - GnuTLS OCSP tool +ocsptool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Ocsptool is a program that can parse and print information about OCSP requests/responses, generate +requests and verify responses. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +grub-macbless - bless a mac file/directory +Mac-style bless on HFS or HFS+ +-p, --ppc +bless for ppc-based macs +-v, --verbose +print verbose messages. +% +iptables-restore — Restore IP Tables +ip6tables-restore — Restore IPv6 Tables +iptables-restore [-chntv] [-M modprobe] [-T name] [file] +ip6tables-restore [-chntv] [-M modprobe] [-T name] [file] +iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on +STDIN or in file. Use I/O redirection provided by your shell to read from a file or specify file as an +argument. +-c, --counters +restore the values of all packet and byte counters +% +tbl - format tables for troff +tbl [-Cv] [files ...] +tbl compiles descriptions of tables embedded within troff input files into commands that are understood +by troff. Normally, it should be invoked using the -t option of groff. It is highly compatible with +Unix tbl. The output generated by GNU tbl cannot be processed with Unix troff; it must be processed with +GNU troff. If no files are given on the command line or a filename of - is given, the standard input is +read. +-C Enable compatibility mode to recognize .TS and .TE even when followed by a character other than +space or newline. Leader characters (\a) are handled as interpreted. +% +networkctl - Query the status of network links +configuration syntax. +The following options are understood: +-a --all +Show all links with status. +-h, --help +% +gtester-report - test report formatting utility +gtester-report [option...] [gtester-log] +gtester-report is a script which converts the XML output generated by gtester into HTML. +-h, --help +print help and exit +-v, --version +print version information and exit +-s, --subunit +Output subunit. Needs python-subunit. +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +watchgnupg - Read and print logs from a socket +watchgnupg [--force] [--verbose] socketname +Most of the main utilities are able to write their log files to a Unix Domain socket if configured that +way. watchgnupg is a simple listener for such a socket. It ameliorates the output with a time stamp and +available for Windows. +watchgnupg is commonly invoked as +watchgnupg --force ~/.gnupg/S.log +watchgnupg understands these options: +% +sudo, sudoedit — execute a command as another user +sudo -h | -K | -k | -V +sudo -v [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-u user] +sudo -l [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command] +sudo [-AbEHnPS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-r role] [-t type] +[-u user] [VAR=value] [-i | -s] [command] +sudoedit [-AknS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-u user] file ... +sudo allows a permitted user to execute a command as the superuser or another user, as specified by the +security policy. The invoking user's real (not effective) user ID is used to determine the user name with +which to query the security policy. +sudo supports a plugin architecture for security policies and input/output logging. Third parties can +develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. +% +vercmp - version comparison utility +vercmp is used to determine the relationship between two given version numbers. It outputs values as +follows: +Version comparison operates as follows: +% +xxd - make a hexdump or do the reverse. +xxd -h[elp] +xxd [options] [infile [outfile]] +xxd -r[evert] [options] [infile [outfile]] +xxd creates a hex dump of a given file or standard input. It can also convert a hex dump back to its +`mail-safe' ASCII representation, but has the advantage of decoding to standard output. Moreover, it can +be used to perform binary file patching. +If no infile is given, standard input is read. If infile is specified as a `-' character, then input is +taken from standard input. If no outfile is given (or a `-' character is in its place), results are sent +to standard output. +% +tailf - follow the growth of a log file +tailf [option] file +days it's safe to use tail -f (from coreutils), in contrast to what the original documentation below +says. +updating the access time for the file, so a filesystem flush does not occur periodically when no log +activity is happening. +tailf is extremely useful for monitoring log files on a laptop when logging is infrequent and the user +wishes the hard disk to spin down to conserve battery life. +% +fallocate - preallocate or deallocate space to a file +fallocate [-c|-p|-z] [-o offset] -l length [-n] filename +fallocate -d [-o offset] [-l length] filename +fallocate is used to manipulate the allocated disk space for a file, either to deallocate or preallocate +it. For filesystems which support the fallocate system call, preallocation is done quickly by allocating +creating a file by filling it with zeroes. +% +colcrt - filter nroff output for CRT previewing +colcrt [options] [file...] +colcrt provides virtual half-line and reverse line feed sequences for terminals without such capability, +and on which overstriking is destructive. Half-line characters and underlining (changed to dashing `-') +are placed on new lines in between the normal output lines. +-, --no-underlining +Causes all half-lines to be printed, effectively double spacing the output. Normally, a minimal +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +mkfs.bfs - make an SCO bfs filesystem +mkfs.bfs [options] device [block-count] +mkfs.bfs creates an SCO bfs filesystem on a block device (usually a disk partition or a file accessed via +the loop device). +The block-count parameter is the desired size of the filesystem, in blocks. If nothing is specified, the +entire partition will be used. +-N, --inodes number +% +vipw, vigr - edit the password or group file +vipw [options] +vigr [options] +vipw edits the password file after setting the appropriate locks, and does any necessary processing after +the password file is unlocked. If the password file is already locked for editing by another user, vipw +file in the same manner as vipw does the passwd file. +ENVIRONMENT +If the following environment variable exists, it will be utilized by vipw and vigr: +% +gapplication - D-Bus application launcher +gapplication version +gapplication list-apps +gapplication launch APPID +gapplication launch APPID [FILE...] +gapplication list-actions APPID +gapplication action APPID ACTION [PARAMETER] +% +gettext - translate message +gettext [OPTION] [[TEXTDOMAIN] MSGID] +gettext [OPTION] -s [MSGID]... +The gettext program translates a natural language message into the user's language, by looking up the +translation in a message catalog. +Display native language translation of a textual message. +-d, --domain=TEXTDOMAIN +retrieve translated messages from TEXTDOMAIN +-e enable expansion of some escape sequences +% +veritysetup - manage dm-verity (block level verification) volumes +veritysetup <options> <action> <action args> +Veritysetup is used to configure dm-verity managed device-mapper mappings. +Device-mapper verity target provides read-only transparent integrity checking of block devices using ker‐ +nel crypto API. +The dm-verity devices are always read-only. +Veritysetup supports these operations: +format <data_device> <hash_device> +% +btrfs-map-logical - map btrfs logical extent to physical extent +btrfs-map-logical <options> <device> +btrfs-map-logical can be used to find out what the physical offsets are on the mirrors, the result is +dumped into stdout in default. +Mainly used for debug purpose. +-l|--logical <logical_num> +Logical extent to map. +-c|--copy <copy> +% +diff - compare files line by line +diff [OPTION]... FILES +Compare FILES line by line. +Mandatory arguments to long options are mandatory for short options too. +--normal +output a normal diff (the default) +-q, --brief +report only when files differ +-s, --report-identical-files +% +psktool - GnuTLS PSK tool +psktool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Program that generates random keys for use with TLS-PSK. The keys are stored in hexadecimal format in a +key file. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +AS - the portable GNU assembler. +as [-a[cdghlns][=file]] [--alternate] [-D] +[--compress-debug-sections] [--nocompress-debug-sections] +[--debug-prefix-map old=new] +[--defsym sym=val] [-f] [-g] [--gstabs] +[--help] [-I dir] [-J] +[-K] [-L] [--listing-lhs-width=NUM] +[--listing-cont-lines=NUM] [--keep-locals] +[--no-pad-sections] +[-o objfile] [-R] +[--hash-size=NUM] [--reduce-memory-overheads] +[--statistics] +[-v] [-version] [--version] +% +mkfs.minix - make a Minix filesystem +mkfs.minix [options] device [size-in-blocks] +mkfs.minix creates a Linux MINIX filesystem on a device (usually a disk partition). +The device is usually of the following form: +on a character device :-). +% +id - print real and effective user and group IDs +id [OPTION]... [USER] +Print user and group information for the specified USER, or (when USER omitted) for the current user. +-a ignore, for compatibility with other versions +-Z, --context +print only the security context of the process +-g, --group +print only the effective group ID +-G, --groups +% +xmlwf - Determines if an XML document is well-formed +xmlwf [-s] [-n] [-p] [-x] [-e encoding] [-w] [-d output-dir] [-c] [-m] [-r] [-t] [-v] [file ...] +xmlwf uses the Expat library to determine if an XML document is well-formed. It is non-validating. +If you do not specify any files on the command-line, and you have a recent version of xmlwf, the input +file will be read from standard input. +A well-formed document must adhere to the following rules: +xmlwf does not currently check for a valid XML declaration. +% +wipefs - wipe a signature from a device +wipefs [-ahnpqtV] [-o offset] device... +wipefs can erase filesystem, raid or partition-table signatures (magic strings) from the specified device +to make the signatures invisible for libblkid. +wipefs does not erase the filesystem itself nor any other data from the device. When used without any +options, wipefs lists all visible filesystems and the offsets of their basic signatures. +wipefs calls the BLKRRPART ioctl when it has erased a partition-table signature to inform the kernel +about the change. +command lists only the first offset where a magic string has been detected. The device is not scanned +% +Wget - The non-interactive network downloader. +wget [option]... [URL]... +GNU Wget is a free utility for non-interactive download of files from the Web. It supports HTTP, HTTPS, +and FTP protocols, as well as retrieval through HTTP proxies. +Wget is non-interactive, meaning that it can work in the background, while the user is not logged on. +contrast, most of the Web browsers require constant user's presence, which can be a great hindrance when +transferring a lot of data. +Wget can follow links in HTML, XHTML, and CSS pages, to create local versions of remote web sites, fully +downloading." While doing that, Wget respects the Robot Exclusion Standard (/robots.txt). Wget can be +% +vgs — report information about volume groups +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--namepre‐ +fixes] [--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--rows] [--separator +Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] [--unquoted] [-v|--verbose] [--version] [Vol‐ +vgs produces formatted output about volume groups. +--all List all volume groups. Equivalent to not specifying any volume groups. +% +hwclock - read or set the hardware clock (RTC) +hwclock [function] [option...] +hwclock is a tool for accessing the Hardware Clock. It can: display the Hardware Clock time; set the +Hardware Clock to a specified time; set the Hardware Clock from the System Clock; set the System Clock +from the Hardware Clock; compensate for Hardware Clock drift; correct the System Clock timescale; set the +kernel's timezone, NTP timescale, and epoch (Alpha only); compare the System and Hardware Clocks; and +predict future Hardware Clock values based on its drift rate. +option --update-drift was added. See their respective descriptions below. +FUNCTIONS +The following functions are mutually exclusive, only one can be given at a time. If none is given, the +% +xfs_rtcp - XFS realtime copy command +xfs_rtcp [ -e extsize ] [ -p ] source ... target +xfs_rtcp -V +xfs_rtcp copies a file to the realtime partition on an XFS filesystem. If there is more than one source +and target, the final argument (the target) must be a directory which already exists. +-e extsize +Sets the extent size of the destination realtime file. +-p Use if the size of the source file is not an even multiple of the block size of the destination +filesystem. When -p is specified xfs_rtcp will pad the destination file to a size which is an even +% +iptables [-t table] {-A|-C|-D} chain rule-specification +ip6tables [-t table] {-A|-C|-D} chain rule-specification +iptables [-t table] -I chain [rulenum] rule-specification +iptables [-t table] -R chain rulenum rule-specification +iptables [-t table] -D chain rulenum +iptables [-t table] -S [chain [rulenum]] +iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] +% +texindex - sort Texinfo index files +texindex [OPTION]... FILE... +Generate a sorted index for each TeX output FILE. Usually FILE... is specified as `foo.??' for a docu‐ +ment `foo.texi'. +-h, --help +display this help and exit +--version +display version information and exit +-- end option processing +% +xfs_mkfile - create an XFS file +xfs_mkfile [ -v ] [ -n ] [ -p ] size[k|b|m|g] filename ... +xfs_mkfile -V +xfs_mkfile creates one or more files. The file is padded with zeroes by default. The default size is in +bytes, but it can be flagged as kilobytes, blocks, megabytes, or gigabytes with the k, b, m, or g suf‐ +fixes, respectively. +-v Verbose. Report the names and sizes of created files. +-n No bytes. Create a holey file - that is, do not write out any data, just seek to end of file and +write a block. +% +autopoint - copies standard gettext infrastructure +autopoint [OPTION]... +Copies standard gettext infrastructure files into a source package. +--help print this help and exit +--version +print version information and exit +-f, --force +force overwriting of files that already exist +% +kbd_mode - report or set the keyboard mode +kbd_mode [ -a | -u | -k | -s ] [ -C CONSOLE ] +Without argument, kbd_mode prints the current keyboard mode (RAW, MEDIUMRAW or XLATE). With argument, it +sets the keyboard mode as indicated: +-s: scancode mode (RAW), +-k: keycode mode (MEDIUMRAW), +-a: ASCII mode (XLATE), +% +pam_timestamp_check - Check to see if the default timestamp is valid +pam_timestamp_check [-k] [-d] [target_user] +With no arguments pam_timestamp_check will check to see if the default timestamp is valid, or optionally +remove it. +-k +-d +Instead of returning validity using an exit status, loop indefinitely, polling regularly and printing +the status on standard output. +% +chroot - run command or interactive shell with special root directory +chroot OPTION +--groups=G_LIST +--userspec=USER:GROUP +specify user and group (ID or name) to use +--skip-chdir +do not change working directory to '/' +% +lsns - list namespaces +lsns [options] [namespace] +lsns lists information about all the currently accessible namespaces or about the given namespace. The +namespace identifier is an inode number. +The default output is subject to change. So whenever possible, you should avoid using default outputs in +your scripts. Always explicitly define expected columns by using the --output option together with a +columns list in environments where a stable output is required. +(see unshare --mount-proc for more details). lsns is not able to see persistent namespaces without pro‐ +% +lvmsadc — LVM system activity data collector +lvmsadc +% +lzmainfo - show information stored in the .lzma file header +lzmainfo [--help] [--version] [file...] +fied file, decodes the header, and prints it to standard output in human readable format. If no files +are given or file is -, standard input is read. +Usually the most interesting information is the uncompressed size and the dictionary size. Uncompressed +size can be shown only if the file is in the non-streamed .lzma format variant. The amount of memory +required to decompress the file is a few dozen kilobytes plus the dictionary size. +lzmainfo is included in XZ Utils primarily for backward compatibility with LZMA Utils. +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +envsubst - substitutes environment variables in shell format strings +envsubst [OPTION] [SHELL-FORMAT] +Substitutes the values of environment variables. +Operation mode: +-v, --variables +output the variables occurring in SHELL-FORMAT +Informative output: +-h, --help +display this help and exit +-V, --version +% +iconv - convert text from one character encoding to another +iconv [options] [-f from-encoding] [-t to-encoding] [inputfile]... +The iconv program reads in text in one encoding and outputs the text in another encoding. If no input +files are given, or if it is given as a dash (-), iconv reads from standard input. If no output file is +given, iconv writes to standard output. +If no from-encoding is given, the default is derived from the current locale's character encoding. If no +to-encoding is given, the default is derived from the current locale's character encoding. +-f from-encoding, --from-code=from-encoding +Use from-encoding for input characters. +% +kpropd [-r realm] [-A admin_server] [-a acl_file] [-f slave_dumpfile] [-F principal_database] [-p +program. If incremental propagation is enabled, it periodically requests incremental updates from the +master KDC. +When the slave receives a kprop request from the master, kpropd accepts the dumped KDC database and +database to the slave servers. Upon a successful download of the KDC database file, the slave Kerberos +server will have an up-to-date KDC database. +% +pgrep, pkill - look up or signal processes based on name and other attributes +pgrep [options] pattern +pkill [options] pattern +pgrep looks through the currently running processes and lists the process IDs which match the selection +criteria to stdout. All the criteria have to match. For example, +$ pgrep -u root sshd +will only list the processes called sshd AND owned by root. On the other hand, +$ pgrep -u root,daemon +will list the processes owned by root OR daemon. +% +fold - wrap each input line to fit in specified width +fold [OPTION]... [FILE]... +Wrap input lines in each FILE, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --bytes +count bytes rather than columns +-s, --spaces +break at spaces +% +chrt - manipulate the real-time attributes of a process +chrt [options] priority command [argument...] +chrt [options] -p [priority] pid +chrt sets or retrieves the real-time scheduling attributes of an existing pid, or runs command with the +given attributes. +POLICIES +-o, --other +-f, --fifo +Set scheduling policy to SCHED_FIFO. +% +sync - Synchronize cached writes to persistent storage +sync [OPTION] [FILE]... +Synchronize cached writes to persistent storage +If one or more files are specified, sync only them, or their containing file systems. +-d, --data +sync only file data, no unneeded metadata +-f, --file-system +sync the file systems that contain the files +--help display this help and exit +% +lvconvert — change LV type and other utilities +lvconvert [OPTION]... VolumeGroup/LogicalVolume +-b, --background +--cachepolicy Policy +--cachesettings Key=Value +-c, --chunksize ChunkSize[b|B|s|S|k|K|m|M|g|G] +--corelog +--discards {ignore|nopassdown|passdown} +-i, --interval Seconds +--merge +--mirrorlog {disk|core|mirrored} +-m, --mirrors Number +% +dpa - DNS Packet Analyzer. Analyze DNS packets in ip trace files +dpa [ OPTION ] TRACEFILE +uniques (i.e. count all different occurences). +-c expressionlist +Count occurrences of matching expressions +-f expression +Filter: only process packets that match the expression +-h Show usage +% +unlink - call the unlink function to remove the specified file +unlink FILE +unlink OPTION +Call the unlink function to remove the specified FILE. +--help display this help and exit +--version +output version information and exit +Written by Michael Stone. +% +ss - another utility to investigate sockets +ss [options] [ FILTER ] +ss is used to dump socket statistics. It allows showing information similar to netstat. It can display +more TCP and state informations than other tools. +established connection. +-h, --help +Show summary of options. +-V, --version +% +split - split a file into pieces +split [OPTION]... [FILE [PREFIX]] +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-a, --suffix-length=N +--additional-suffix=SUFFIX +append an additional SUFFIX to file names +% +dconf - Simple tool for manipulating a dconf database +dconf read KEY +dconf list DIR +dconf write KEY VALUE +dconf reset [-f] PATH +dconf compile OUTPUT KEYFILEDIR +dconf update +dconf watch PATH +% +iptables-restore — Restore IP Tables +ip6tables-restore — Restore IPv6 Tables +iptables-restore [-chntv] [-M modprobe] [-T name] [file] +ip6tables-restore [-chntv] [-M modprobe] [-T name] [file] +iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on +STDIN or in file. Use I/O redirection provided by your shell to read from a file or specify file as an +argument. +-c, --counters +restore the values of all packet and byte counters +% +tset, reset - terminal initialization +tset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +reset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +mination is done as follows, using the first terminal type found. +ting TERM according to the type passed to it by /etc/inittab.) +% +getent [option]... database key... +are configured in /etc/nsswitch.conf. If one or more key arguments are provided, then only the entries +that match the supplied keys will be displayed. Otherwise, if no key is provided, all entries will be +displayed (unless the database does not support enumeration). +enumerating each socket address structure returned. +% +rndc - name server control utility +rndc [-b source-address] [-c config-file] [-k key-file] [-s server] [-p port] [-q] [-r] [-V] [-y key_id] +{command} +rndc controls the operation of a name server. It supersedes the ndc utility that was provided in old BIND +releases. If rndc is invoked with no command line options or arguments, it prints a short summary of the +supported commands and the available options and their arguments. +rndc communicates with the name server over a TCP connection, sending commands authenticated with digital +signatures. In the current versions of rndc and named, the only supported authentication algorithms are +command request and the name server's response. All commands sent over the channel must be signed by a +key_id known to the server. +% +arping - send ARP REQUEST to a neighbour host +arping [-AbDfhqUV] [-c count] [-w deadline] [-s source] {-I interface} {destination} +Ping destination on device interface by ARP packets, using source address source. +-A The same as -U, but ARP REPLY packets used instead of ARP REQUEST. +-b Send only MAC level broadcasts. Normally arping starts from sending broadcast, and switch to uni‐ +cast after reply received. +Stop after sending count ARP REQUEST +timeout expires. +% +gobject-query - display a tree of types +gobject-query froots [OPTION...] +gobject-query tree [OPTION...] +gobject-query is a small utility that draws a tree of types. +gobject-query takes a mandatory argument that specifies whether it should iterate over the fundamental +types or print a type tree. +froots +iterate over fundamental roots +% +dbus-cleanup-sockets - clean up leftover sockets in a directory +dbus-cleanup-sockets [DIRECTORY] +The dbus-cleanup-sockets command cleans up unused D-Bus connection sockets. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +If given no arguments, dbus-cleanup-sockets cleans up sockets in the standard default socket directory +for the per-user-login-session message bus; this is usually /tmp. Optionally, you can pass a different +directory on the command line. +On Linux, this program is essentially useless, because D-Bus defaults to using "abstract sockets" that +exist only in memory and don't have a corresponding file in /tmp. +% +lvrename — rename a logical volume +[-v|--verbose] [--version] [-f|--force] [--noudevsync] [--reportformat {basic|json}] {OldLogicalVol‐ +lvrename renames an existing logical volume or an existing historical logical volume from OldLogicalVol‐ +--noudevsync +Disable udev synchronisation. The process will not wait for notification from udev. It will con‐ +tinue irrespective of any possible udev processing in the background. You should only use this if +% +msgattrib - attribute matching and manipulation on message catalog +msgattrib [OPTION] [INPUTFILE] +Filters the messages of a translation catalog according to their attributes, and manipulates the +attributes. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +isc-hmac-fixup - fixes HMAC keys generated by older versions of BIND +isc-hmac-fixup {algorithm} {secret} +Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer +incompatible with other DNS implementations. +versions of BIND, when using long keys. isc-hmac-fixup modifies those keys to restore compatibility. +To modify a key, run isc-hmac-fixup and specify the key's algorithm and secret on the command line. If +% +rcp - Remote copy +rcp [OPTION...] SOURCE DEST +rcp [OPTION...] SOURCE... DIRECTORY +rcp [OPTION...] --target-directory=DIRECTORY SOURCE... +Remote copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY. +-6, --ipv6 +use only IPv6 +-d, --target-directory[=DIRECTORY] +% +sed - stream editor for filtering and transforming text +sed [OPTION]... {script-only-if-no-other-script} [input-file]... +Sed is a stream editor. A stream editor is used to perform basic text transformations on an input stream +(a file or input from a pipeline). While in some ways similar to an editor which permits scripted edits +(such as ed), sed works by making only one pass over the input(s), and is consequently more efficient. +But it is sed's ability to filter text in a pipeline which particularly distinguishes it from other types +of editors. +-n, --quiet, --silent +suppress automatic printing of pattern space +-e script, --expression=script +% +run-parts - run scripts or programs in a directory +run-parts [--test] [--verbose] [--report] [--lsbsysinit] [--regex=RE] [--umask=umask] [--arg=argument] +[--exit-on-error] [--help] [--version] [--list] [--reverse] [--] DIRECTORY +run-parts -V +run-parts runs all the executable files named within constraints described below, found in directory +directory. Other files and directories are silently ignored. +If neither the --lsbsysinit option nor the --regex option is given then the names must consist entirely +If the --lsbsysinit option is given, then the names must not end in .dpkg-old or .dpkg-dist or .dpkg-new +or .dpkg-tmp, and must belong to one or more of the following namespaces: the LANANA-assigned namespace +% +ssh — OpenSSH SSH client (remote login program) +[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address] +[-S ctl_path] [-W host:port] [-w local_tun[:remote_tun]] [user@]hostname [command] +ssh (SSH client) is a program for logging into a remote machine and for executing commands on a remote +machine. It is intended to provide secure encrypted communications between two untrusted hosts over an +the secure channel. +ssh connects and logs into the specified hostname (with optional user name). The user must prove his/her +identity to the remote machine using one of several methods (see below). +% +flex - the fast lexical analyser generator +Generates programs that perform pattern-matching on text. +Table Compression: +-Ca, --align +trade off larger tables for better memory alignment +-Ce, --ecs +construct equivalence classes +-Cf do not compress tables; use -f representation +% +trust - Tool for operating on the trust policy store +trust list +trust extract --filter=<what> --format=<type> /path/to/destination +trust anchor /path/to/certificate.crt +trust is a command line tool to examine and modify the shared trust policy store. +See the various sub commands below. The following global options can be used: +-v, --verbose +Run in verbose mode with debug output. +% +preconv - convert encoding of input files to something GNU troff understands +preconv [-dr] [-e encoding] [files ...] +preconv -h | --help +preconv -v | --version +It is possible to have whitespace between the -e command line option and its parameter. +standard output. Currently, this means ASCII characters and ‘\[uXXXX]’ entities, where ‘XXXX’ is a hexa‐ +decimal number with four to six digits, representing a Unicode input code. Normally, preconv should be +invoked with the -k and -K options of groff. +-d Emit debugging messages to standard error (mainly the used encoding). +% +dircolors - color setup for ls +dircolors [OPTION]... [FILE] +Output commands to set the LS_COLORS environment variable. +Determine format of output: +-b, --sh, --bourne-shell +output Bourne shell code to set LS_COLORS +-c, --csh, --c-shell +output C shell code to set LS_COLORS +-p, --print-database +output defaults +% +thin_dump - dump thin provisioning metadata from device or file to standard output +thin_dump [options] {device|file} +thin_dump dumps binary thin provisioning metadata (optionally from alternate block; see option --meta‐ +data-snap) created by the device-mapper thin provisioning target on a device or file to standard output +for analysis or postprocessing in either XML or human readable format. XML formated metadata can be fed +device-mapper target) or file. +-f, --format {xml|human_readable} +Print output in XML or human readable format. +% +iptables-save — dump iptables rules to stdout +ip6tables-save — dump iptables rules to stdout +iptables-save [-M modprobe] [-c] [-t table] +ip6tables-save [-M modprobe] [-c] [-t table] +iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable +format to STDOUT. Use I/O-redirection provided by your shell to write to a file. +-M, --modprobe modprobe_program +Specify the path to the modprobe program. By default, iptables-save will inspect /proc/sys/ker‐ +nel/modprobe to determine the executable's path. +% +thin_repair - repair thin provisioning binary metadata from device/file to device/file +thin_repair [options] -i {device|file} -o {device|file} +thin_repair reads binary thin provisioning metadata created by the respective device-mapper target from +one device or file , repairs it and writes it to another device or file. If written to a metadata device +, the metadata can be processed by the device-mapper target. +-i, --input {device|file} +Input file or device with binary metadata. +-o, --output {device|file} +Output file or device for repaired binary metadata. If a file is used then it must be preallo‐ +% +msgcat - combines several message catalogs +msgcat [OPTION] [INPUTFILE]... +Concatenates and merges the specified PO files. Find messages which are common to two or more of the +extracted comments, and file positions will be cumulated, except that if --use-first is specified, they +will be taken from the first PO file to define them. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE ... +% +whatis - display one-line manual page descriptions +whatis [-dlv?V] [-r|-w] [-s list] [-m system[,...]] [-M path] [-L locale] [-C file] name ... +Each manual page has a short description available within it. whatis searches the manual page names and +displays the manual page descriptions of any name matched. +sary to quote the name or escape (\) the special characters to stop the shell from interpreting them. +index databases are used during the search, and are updated by the mandb program. Depending on your +pages have been installed. To produce an old style text whatis database from the relative index data‐ +base, issue the command: +% +dnssec-importkey - import DNSKEY records from external systems so they can be managed +dnssec-importkey [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-D date/offset] +[-D sync date/offset] [-h] [-v level] [-V] {keyfile} +dnssec-importkey {-f filename} [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] +[-D date/offset] [-D sync date/offset] [-h] [-v level] [-V] [dnsname] +dnssec-importkey reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY +.private files will be generated. +The newly-created .private file does not contain private key data, and cannot be used for signing. +However, having a .private file makes it possible to set publication (-P) and deletion (-D) times for the +% +logname - print user's login name +logname [OPTION] +Print the name of the current user. +--help display this help and exit +--version +output version information and exit +Written by FIXME: unknown. +REPORTING BUGS +% +cat - concatenate files and print on the standard output +cat [OPTION]... [FILE]... +Concatenate FILE(s) to standard output. +With no FILE, or when FILE is -, read standard input. +-A, --show-all +equivalent to -vET +-b, --number-nonblank +number nonempty output lines, overrides -n +-e equivalent to -vE +% +openvt - start a program on a new virtual terminal (VT). +openvt will find the first available VT, and run on it the given command with the given command options, +standard input, output and error are directed to that terminal. The current search path ($PATH) is used +to find the requested command. If no command is specified then the environment variable $SHELL is used. +-c, --console=VTNUMBER +plied VT for this to work; +-f, --force +Force opening a VT without checking whether it is already in use; +% +msgmerge - merge message catalog and template +msgmerge [OPTION] def.po ref.pot +Merges two Uniforum style .po files together. The def.po file is an existing PO file with translations +which will be taken over to the newly created file as long as they still match; comments will be pre‐ +served, but extracted comments and file positions will be discarded. The ref.pot file is the last cre‐ +ated PO file with up-to-date source references but old translations, or a PO Template file (generally +created by xgettext); any translations or comments in the file will be discarded, however dot comments +and file positions will be preserved. Where an exact match cannot be found, fuzzy matching is used to +produce better results. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +tc - show / manipulate traffic control settings +dle qdisc-id ] qdisc [ qdisc specific parameters ] +qdisc [ qdisc specific parameters ] +protocol prio priority filtertype [ filtertype specific parameters ] flowid flow-id +% +systemd-inhibit - Execute a program with an inhibition lock taken +lock will be acquired before the specified command line is executed and released afterwards. +being recorded, or similar operations that should not be interrupted. +% +thin_trim - Issue discard requests for free pool space (offline tool). +thin_trim [options] {device|file} +thin_trim sends discard requests to the pool device for unprovisioned areas. +--pool-inactive +Indicates you are aware the pool should be inactive. Suppresses a warning message and prompt. +-h, --help +Print help and exit. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +users - print the user names of users currently logged in to the current host +users [OPTION]... [FILE] +Output who is currently logged in according to FILE. If FILE is not specified, use /var/run/utmp. +/var/log/wtmp as FILE is common. +--help display this help and exit +--version +output version information and exit +Written by Joseph Arceneaux and David MacKenzie. +% +nsenter - run program with namespaces of other processes +nsenter [options] [program [arguments]] +Enters the namespaces of one or more other processes and then executes the specified program. Enterable +namespaces are: +mount namespace +Mounting and unmounting filesystems will not affect the rest of the system (CLONE_NEWNS flag), +except for filesystems which are explicitly marked as shared (with mount --make-shared; see /proc +/self/mountinfo for the shared flag). +UTS namespace +Setting hostname or domainname will not affect the rest of the system. (CLONE_NEWUTS flag) +% +tion to check how many free blocks are present as contiguous and aligned free space. The percentage of +contiguous free blocks of size and of alignment chunk_kb is reported. It also displays the minimum/maxi‐ +tion can be used to gauge the level of free space fragmentation in the filesystem. +-c chunk_kb +available in units of kilobytes (Kb). The chunk size must be a power of two and be larger than +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +cache_repair - repair cache binary metadata from device/file to device/file +cache_repair [options] -i {device|file} -o {device|file} +cache_repair reads binary cache metadata created by the respective device-mapper target from one device +or file , repairs it and writes it to another device or file. If written to a metadata device , the +metadata can be processed by the device-mapper target. +-i, --input {device|file} +Input file or device with binary metadata. +-o, --output {device|file} +Output file or device for repaired binary metadata. If a file is used then it must be preallo‐ +% +GNU Parted - a partition manipulation program +parted [options] [device [command [options...]...]] +parted is a program to manipulate disk partitions. It supports multiple partition table formats, includ‐ +ing MS-DOS and GPT. It is useful for creating space for new operating systems, reorganising disk usage, +and copying data to new hard disks. +Info format. +-h, --help +displays a help message +% +dig - DNS lookup utility +dig [@server] [-b address] [-c class] [-f filename] [-k filename] [-m] [-p port#] [-q name] [-t type] +dig [-h] +dig [global-queryopt...] [query...] +dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS +lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS +administrators use dig to troubleshoot DNS problems because of its flexibility, ease of use and clarity +of output. Other lookup tools tend to have less functionality than dig. +Although dig is normally used with command-line arguments, it also has a batch mode of operation for +% +dmsetup — low level logical volume management +dmsetup clear device_name +dmsetup create device_name [-u|--uuid uuid] [--addnodeoncreate|--addnodeonresume] [-n|--notable|--table +{table|table_file}] [--readahead {[+]sectors|auto|none}] +dmsetup deps [-o options] [device_name] +dmsetup help [-c|-C|--columns] +dmsetup info [device_name] +dmsetup info -c|-C|--columns [--count count] [--interval seconds] [--nameprefixes] [--noheadings] [-o +fields] [-O|--sort sort_fields] [--separator separator] [device_name] +dmsetup load device_name [--table {table|table_file}] +dmsetup ls [--target target_type] [--exec command] [--tree] [-o options] +dmsetup mangle [device_name] +dmsetup message device_name sector message +dmsetup mknodes [device_name] +dmsetup reload device_name [--table {table|table_file}] +% +mv - move (rename) files +mv [OPTION]... [-T] SOURCE DEST +mv [OPTION]... SOURCE... DIRECTORY +mv [OPTION]... -t DIRECTORY SOURCE... +Rename SOURCE to DEST, or move SOURCE(s) to DIRECTORY. +Mandatory arguments to long options are mandatory for short options too. +--backup[=CONTROL] +make a backup of each existing destination file +-b like --backup but does not accept an argument +% +grub-reboot - set the default boot entry for GRUB, for the next boot only +grub-reboot [OPTION] MENU_ENTRY +Set the default boot menu entry for GRUB, for the next boot only. +-h, --help +print this message and exit +-V, --version +print the version information and exit +--boot-directory=DIR +expect GRUB images under the directory DIR/grub instead of the /boot/grub directory +% +pldd - display dynamic shared objects linked into a process +pldd pid +pldd option +The pldd command displays a list of the dynamic shared objects that are linked into the process with the +-?, --help +Display program help message. +--usage +Display a short usage message. +% +ldns-zsplit - split up a zone file +-n NUMBER +Split after NUMBER RRs, ldns-zsplit will not split in the middle of an RRs. +Each part is saved with a numerical suffix, starting with .000. The largest suffix is thus .999. +-o ORIGIN +use ORIGIN as origin when reading the zonefile. +-z Sort the zone before splitting. +% +gsettings - GSettings configuration tool +gsettings get SCHEMA [:PATH] KEY +gsettings monitor SCHEMA [:PATH] [KEY] +gsettings writable SCHEMA [:PATH] KEY +gsettings range SCHEMA [:PATH] KEY +gsettings describe SCHEMA [:PATH] KEY +gsettings set SCHEMA [:PATH] KEY VALUE +gsettings reset SCHEMA [:PATH] KEY +% +lsipc - show information on IPC facilities currently employed in the system +lsipc [options] +lsipc shows information on the inter-process communication facilities for which the calling process has +read access. +-i, --id id +bined with one of the three resource options: -m, -q or -s. It is possible to override the +default output format for this option with the --list, --raw, --json or --export option. +-g, --global +% +resize_reiserfs - resizer tool for the ReiserFS filesystem +resize_reiserfs [ -s [+|-]size[K|M|G] ] [ -j dev ] [ -fqv ] device +The resize_reiserfs tool resizes an unmounted reiserfs file system. It enlarges or shrinks an reiserfs +file system located on a device so that it will have size bytes or size=old_size +(-) size bytes if the + +or - prefix is used. If the -s option is not specified, the filesystem will be resized to fill the given +ter is given in kilo-, mega-, gigabytes respectively. +The resize_reiserfs program does not manipulate the size of the device. If you wish to enlarge a filesys‐ +titions, by deleting the partition and recreating it with a larger size (assuming there is free space +after the partition in question). Make sure you re-create it with the same starting disk cylinder as +% +ldns-keygen - generate a DNSSEC key pair +ldns-keygen [ OPTION ] DOMAIN +with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the +DNSKEY record. +ldns-keygen can also be used to create symmetric keys (for TSIG) by selecting the appropriate algorithm: +file. +ldns-keygen prints the basename for the key files: K<name>+<alg>+<id> +% +-c, --iteration-count=NUM +-l, --buflen=NUM +Length of generated hash +-s, --salt=NUM +Length of salt +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +nameif - name network interfaces based on MAC addresses +nameif [-c configfile] [-s] +nameif [-c configfile] [-s] {interface macaddress} +nameif renames network interfaces based on mac addresses. When no arguments are given /etc/mactab is +read. Each line of it contains an interface name and a Ethernet MAC address. Comments are allowed start‐ +ing with #. Otherwise the interfaces specified on the command line are processed. nameif looks for the +interface with the given MAC address and renames it to the name given. +When the -s argument is given all error messages go to the syslog. +When the -c argument is given with a file name that file is read instead of /etc/mactab. +% +ranlib - generate index to archive. +ranlib [--plugin name] [-DhHvVt] archive +ranlib generates an index to the contents of an archive and stores it in the archive. The index lists +each symbol defined by a member of an archive that is a relocatable object file. +An archive with such an index speeds up linking to the library and allows routines in the library to call +each other without regard to their placement in the archive. +The GNU ranlib program is another form of GNU ar; running ranlib is completely equivalent to executing ar +-s. +% +jfs_fscklog - extract a JFS fsck service log into a file and/or format and display the extracted file +jfs_fscklog [ -d ] [ -e device ] [ -f output.file ] [ -p ] [ -V ] +jfs_fscklog with option -e device extracts the contents of either the most recent or immediately prior +(specified with option -p) JFS fsck service log from the specified device, and writes the output to a +If the -p option is used, the default file name is <pwd>fscklog.old. +jfs_fscklog with option -d formats and displays the contents of the extracted file. +jfs_fscklog with options -d and -e device extracts and displays the JFS fsck service log. +-d Format and display a previously extracted JFS fsck service log. +% +makeinfo [OPTION]... TEXINFO-FILE... +Translate Texinfo source documentation to various other formats, by default Info files suitable for read‐ +ing online with Emacs or standalone GNU Info. +not depend on the installed name. +General options: +--document-language=STR locale to use in translating Texinfo keywords +for the output document (default C). +--error-limit=NUM +% +psfgettable - extract the embedded Unicode character table from a console font +psfgettable fontfile [outfile] +psfgettable extracts the embedded Unicode character table from a .psf format console font into a human +the font is read from standard input. +% +iptables-xml — Convert iptables-save format to XML +iptables-xml [-c] [-v] +iptables-xml is used to convert the output of iptables-save into an easily manipulatable XML format to +STDOUT. Use I/O-redirection provided by your shell to write to a file. +-c, --combine +combine consecutive rules with the same matches but different targets. iptables does not currently +support more than one target per match, so this simulates that by collecting the targets from con‐ +secutive iptables rules into one action tag, but only when the rule matches are identical. Termi‐ +nating actions like RETURN, DROP, ACCEPT and QUEUE are not combined with subsequent targets. +-v, --verbose +Output xml comments containing the iptables line from which the XML is derived +% +fgconsole - print the number of the active VT. +fgconsole [--help|--version|--next-available] +If the active Virtual Terminal is /dev/ttyN, then prints N on standard output. +If the console is a serial console, then "serial" is printed instead. +--next-available +Will show the next unallocated virtual terminal. Normally 6 virtual terminals are allocated, with +% +whoami - print effective userid +whoami [OPTION]... +Print the user name associated with the current effective user ID. Same as id -un. +--help display this help and exit +--version +output version information and exit +Written by Richard Mlynarik. +REPORTING BUGS +% +firewall-offline-cmd - firewalld offline command line client +firewall-offline-cmd is an offline command line client of the firewalld daemon. It should be used only if +the firewalld service is not running. For example to migrate from system-config-firewall/lokkit or in the +install environment to configure firewall settings with kickstart. +Some lokkit options can not be automatically converted for firewalld, they will result in an error or +with custom rules, modules and masquerading. +Check the firewall configuration after using this tool. +% +pcretest - a program for testing Perl-compatible regular expressions. +pcretest [options] [input file [output file]] +pcretest was written as a test program for the PCRE regular expression library itself, but it can also be +gram; for details of the regular expressions themselves, see the pcrepattern documentation. For details +The input for pcretest is a sequence of regular expression patterns and strings to be matched, as +described below. The output shows the result of each match. Options on the command line and the patterns +control PCRE options and exactly what is output. +As PCRE has evolved, it has acquired many different features, and as a result, pcretest now has rather a +lot of obscure options for testing every possible feature. Some of these options are specifically +% +btrfs-select-super - overwrite primary superblock with a backup copy +btrfs-select-super -s number <device> +for example when write barriers were disabled during a power failure and not all superblocks were +written, or if the primary superblock is damaged, eg. accidentally overwritten. +The filesystem specified by device must not be mounted. +Prior to overwriting the primary superblock, please make sure that the backup copies are valid! +To dump a superblock use the btrfs inspect-internal dump-super command, or the obsolete command +btrfs-show-super. +% +localedef - compile locale definition files +localedef [options] outputpath +localedef --list-archive [options] +localedef --delete-from-archive [options] localename ... +localedef --add-to-archive [options] compiledpath +localedef --version +localedef --help +localedef --usage +The localedef program reads the indicated charmap and input files, compiles them to a binary form quickly +put in outputpath. +The outputpath argument is interpreted as follows: +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +raw - bind a Linux raw character device +raw /dev/raw/raw<N> <major> <minor> +raw /dev/raw/raw<N> /dev/<blockdev> +raw -q /dev/raw/raw<N> +raw -qa +kernel module later). +raw is used in two modes: it either sets raw device bindings, or it queries existing bindings. When set‐ +% +grolbp [ -l ] [ --landscape ] [ -v ] [ --version ] [ -cn ] [ --copies=numcopies ] [ -ppaper_size ] +[ --papersize=paper_size ] [ -oorientation ] [ --orientation=orientation ] [ -wwidth ] +[ --linewidth=width ] [ -Fdir ] [ --fontdir=dir ] [ -h ] [ --help ] [ files... ] +\D'R dh dv' +Draw a rule (i.e. a solid black rectangle), with one corner at the current position, and the diag‐ +onally opposite corner at the current position +(dh,dv). +% +vipw, vigr - edit the password or group file +vipw [options] +vigr [options] +vipw edits the password file after setting the appropriate locks, and does any necessary processing after +the password file is unlocked. If the password file is already locked for editing by another user, vipw +file in the same manner as vipw does the passwd file. +ENVIRONMENT +If the following environment variable exists, it will be utilized by vipw and vigr: +% +captest - a program to demonstrate capabilities +captest [ --drop-all | --drop-caps | --id ] [ --init-grp ] [ --lock ] [ --text ] +captest is a program that demonstrates and prints out the current process capabilities. Each option +prints the same report. It will output current capabilities. then it will try to access /etc/shadow +directly to show if that can be done. Then it creates a child process that attempts to read /etc/shadow +and outputs the results of that. Then it outputs the capabilities that a child process would have. +You can also apply file system capabilities to this program to study how they work. For example, filecap +/usr/bin/captest chown. Then run captest as a normal user. Another interesting test is to make captest +suid root so that you can see what the interaction is between root's credentials and capabilities. For +lation is possible. But do not leave this app setuid root after you are don testing so that an attacker +cannot take advantage of it. +% +rmmod - Simple program to remove a module from the Linux Kernel +rmmod [-f] [-s] [-v] [modulename] +rmmod is a trivial program to remove a module (when module unloading support is provided) from the +-v, --verbose +Print messages about what the program is doing. Usually rmmod prints messages only if something goes +wrong. +-f, --force +when the kernel was compiled. With this option, you can remove modules which are being used, or which +% +ipcs - show information on IPC facilities +ipcs [options] +ipcs shows information on the inter-process communication facilities for which the calling process has +read access. By default it shows information about all three resources: shared memory segments, message +queues, and semaphore arrays. +-i, --id id +bined with one of the three resource options: -m, -q or -s. +-h, --help +Display help text and exit. +% +routel - list routes with pretty output format +routef - flush routes +routel [tablenr [raw ip args...]] +routef +The routel script will list routes in a format that some might consider easier to interpret then the ip +route list equivalent. +The routef script does not take any arguments and will simply flush the routing table down the drain. +FILES +/usr/bin/routef +/usr/bin/routel +% +Mandatory arguments to long options are mandatory for short options too. +-c, --check +checks the syntax only +-o, --output=FILE +output file +-h, --help +% +uptime - Tell how long the system has been running. +uptime [options] +uptime gives a one line display of the following information. The current time, how long the system has +System load averages is the average number of processes that are either in a runnable or uninterruptable +state. A process in a runnable state is either using the CPU or waiting to use the CPU. A process in +uninterruptable state is waiting for some I/O access, eg waiting for disk. The averages are taken over +the three time intervals. Load averages are not normalized for the number of CPUs in a system, so a load +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +msguniq - unify duplicate translations in message catalog +msguniq [OPTION] [INPUTFILE] +Unifies duplicate translations in a translation catalog. Finds duplicate translations of the same mes‐ +sage ID. Such duplicates are invalid input for other programs like msgfmt, msgmerge or msgcat. By +default, duplicates are merged together. When using the --repeated option, only duplicates are output, +and all other messages are discarded. Comments and extracted comments will be cumulated, except that if +--use-first is specified, they will be taken from the first translation. File positions will be cumu‐ +lated. When using the --unique option, duplicates are discarded. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +% +newgrp - log in to a new group +newgrp [group] +logged in, and the current directory is unchanged, but calculations of access permissions to files are +performed with respect to the new group ID. +If no group is specified, the GID is changed to the login GID. +FILES +/etc/group +/etc/passwd +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +gnutls-cli - GnuTLS client +gnutls-cli [-flags] [-flag [value]] [--option-name[[=| ]value]] [hostname] +Simple client program to set up a TLS connection to some other computer. It sets up a TLS connection and +forwards data from the standard input to the secured socket and vice versa. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +xfs_repair - repair an XFS filesystem +xfs_repair [ -dfLnPv ] [ -m maxmem ] [ -c subopt=value ] [ -o subopt[=value] ] [ -t interval ] [ -l +logdev ] [ -r rtdev ] device +xfs_repair -V +the device argument which should be the device name of the disk partition or volume containing the +filesystem. If given the name of a block device, xfs_repair will attempt to find the raw device associ‐ +ated with the specified block device and will use the raw device instead. +inconsistent or corrupt. +% +addgnupghome - Create .gnupg home directories +If GnuPG is installed on a system with existing user accounts, it is sometimes required to populate the +GnuPG home directory with existing files. Especially a ‘trustlist.txt’ and a keybox with some initial +‘/etc/skel/.gnupg’ to the home directories of the accounts given on the command line. It takes care not +to overwrite existing GnuPG home directories. +addgnupghome is invoked by root as: +% +realpath - print the resolved path +realpath [OPTION]... FILE... +Print the resolved absolute file name; all but the last component must exist +-e, --canonicalize-existing +all components of the path must exist +-m, --canonicalize-missing +no path components need exist or be a directory +-L, --logical +resolve '..' components before symlinks +% +pvcreate — initialize a disk or partition for use by LVM +[-f[f]|--force [--force]] [-y|--yes] [--labelsector] [--bootloaderareasize size] [-M|--metadatatype type] +[--[pv]metadatacopies NumberOfCopies] [--metadatasize size] [--metadataignore {y|n}] [--dataalignment +alignment] [--dataalignmentoffset alignment_offset] [--restorefile file] [--norestorefile] [--reportfor‐ +mat {basic|json}] [--setphysicalvolumesize size] [-u|--uuid uuid] [-Z|--zero {y|n}] PhysicalVolume [Phys‐ +icalVolume...] +pvcreate initializes PhysicalVolume for later use by the Logical Volume Manager (LVM). Each PhysicalVol‐ +ume can be a disk partition, whole disk, meta device, or loopback file. For DOS disk partitions, the +first sector with: +% +stat - display file or file system status +stat [OPTION]... FILE... +Display file or file system status. +Mandatory arguments to long options are mandatory for short options too. +-L, --dereference +follow links +-f, --file-system +display file system status instead of file status +-c --format=FORMAT +% +lvmsar — LVM system activity reporter +lvmsar +% +nsupdate - Dynamic DNS update utility +nsupdate [-d] [-D] [-L level] [[-g] | [-o] | [-l] | [-y [hmac:]keyname:secret] | [-k keyfile]] +[-t timeout] [-u udptimeout] [-r udpretries] [-R randomdev] [-v] [-T] [-P] [-V] [filename] +allows resource records to be added or removed from a zone without manually editing the zone file. A +single update request can contain requests to add or remove more than one resource record. +Zones that are under dynamic control via nsupdate or a DHCP server should not be edited by hand. Manual +edits could conflict with dynamic updates and cause data to be lost. +The resource records that are dynamically added or removed with nsupdate have to be in the same zone. +record. +% +grub-mkimage - make a bootable image of GRUB +grub-mkimage [OPTION...] [OPTION]... [MODULES] +Make a bootable image of GRUB. +-c, --config=FILE +embed FILE as an early config +-C, --compression=(xz|none|auto) +choose the compression to use for core image +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +% +getcap - examine file capabilities +getcap [-v] [-r] [-h] filename [ ... ] +getcap displays the name and capabilities of each specified +-r enables recursive search. +-v enables to display all searched entries, even if it has no file-capabilities. +-h prints quick usage. +filename +One file per line. +% +firewall-config - firewalld GUI configuration tool +firewall-config is a GUI configuration tool for firewalld. +firewall-config does not support any special options. The only options that can be used are the general +options that Gtk uses for Gtk application initialization. For more information on these options, please +have a look at the runtime documentation for Gtk. +The following options are supported: +-h, --help +Prints a short help text and exists. +% +rtmon - listens to and monitors RTnetlink +rtmon [ options ] file FILE [ all | LISTofOBJECTS ] +rtmon listens on netlink socket and monitors routing table changes. +rtmon can be started before the first network configuration command is issued. For example if you +insert: +rtmon file /var/log/rtmon.log +in a startup script, you will be able to view the full history later. Certainly, it is possible to start +rtmon at any time. It prepends the history with the state snapshot dumped at the moment of starting. +% +mkfs.cramfs - make compressed ROM file system +mkfs.cramfs [options] directory file +Files on cramfs file systems are zlib-compressed one page at a time to allow random read access. The +metadata is not compressed, but is expressed in a terse representation that is more space-efficient than +conventional file systems. +The file system is intentionally read-only to simplify its design; random write access for compressed +files is difficult to implement. cramfs ships with a utility (mkcramfs) to pack files into new cramfs +images. +% +named-rrchecker - syntax checker for individual DNS resource records +named-rrchecker [-h] [-o origin] [-p] [-u] [-C] [-T] [-P] +named-rrchecker read a individual DNS resource record from standard input and checks if it is +syntactically correct. +The -h prints out the help menu. +The -o origin option specifies a origin to be used when interpreting the record. +The -p prints out the resulting record in canonical form. If there is no canonical form defined then the +record will be printed in unknown record format. +The -u prints out the resulting record in unknown record form. +% +ing, otherwise the expansion of the FILES. +together with all the previous files. +Operation modes: +% +pvchange — change attributes of a physical volume +[--deltag Tag] [--metadataignore {y|n}] [-h|-?|--help] [--reportformat {basic|json}] [-S|--select Selec‐ +tion] [-t|--test] [-v|--verbose] [-a|--all] [-x|--allocatable {y|n}] [-u|--uuid] [PhysicalVolumePath...] +pvchange allows you to change the allocation permissions of one or more physical volumes. +-a, --all +If PhysicalVolumePath is not specified on the command line all physical volumes are searched for +and used. +% +Generate Makefile.in for configure from Makefile.am. +Operation modes: +--help print this help, then exit +--version +print version number, then exit +-v, --verbose +verbosely list files processed +% +ctrlaltdel - set the function of the Ctrl-Alt-Del combination +ctrlaltdel hard|soft +Based on examination of the linux/kernel/reboot.c code, it is clear that there are two supported func‐ +tions that the Ctrl-Alt-Del sequence can perform. +is the default. +soft Make the kernel send the SIGINT (interrupt) signal to the init process (this is always the process +version that you are currently using. +% +file — determine file type +file [-bcdEhiklLNnprsvzZ0] [--apple] [--extension] [--mime-encoding] [--mime-type] [-e testname] +[-F separator] [-f namefile] [-m magicfiles] [-P name=value] file ... +file -C [-m magicfiles] +file [--help] +file tests each argument in an attempt to classify it. There are three sets of tests, performed in this +order: filesystem tests, magic tests, and language tests. The first test that succeeds causes the file +type to be printed. +The type printed will usually contain one of the words text (the file contains only printing characters and +a few common control characters and is probably safe to read on an ASCII terminal), executable (the file +% +firewall-cmd - firewalld command line client +firewall-cmd is the command line client of the firewalld daemon. It provides interface to manage runtime +and permanent configuration. +things can get changed in the runtime or permanent configuration. +The following options are supported: +General Options +-h, --help +% +Reads a PIC program as input; produces an image file (by default in Portable Network Graphics format) +images of mathematical formulae. +PIC is a rather expressive graphics minilanguage suitable for producing box-and-arrow diagrams of the +kind frequently used in technical papers and textbooks. The language is sufficiently flexible to be +quite useful for state charts, Petri-net diagrams, flow charts, simple circuit schematics, jumper lay‐ +outs, and other kinds of illustration involving repetitive uses of simple geometric forms and splines. +Because PIC descriptions are procedural and object-based, they are both compact and easy to modify. +The PIC language is fully documented in Making Pictures With GNU PIC, a document which is part of the +% +gpasswd - administer /etc/group and /etc/gshadow +gpasswd [option] group +The gpasswd command is used to administer /etc/group, and /etc/gshadow. Every group can have +administrators, members and a password. +System administrators can use the -A option to define group administrator(s) and the -M option to define +members. They have all rights of group administrators and members. +gpasswd called by a group administrator with a group name only prompts for the new password of the group. +the password. +% +fmt - simple optimal text formatter +fmt [-WIDTH] [OPTION]... [FILE]... +Reformat each paragraph in the FILE(s), writing to standard output. The option -WIDTH is an abbreviated +form of --width=DIGITS. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --crown-margin +preserve indentation of first two lines +-p, --prefix=STRING +% +lvmdump [-a] [-c] [-d directory] [-h] [-l] [-m] [-p] [-s] [-u] +for submission along with a problem report. +The content of the tarball is as follows: +- dmsetup info +- table of currently running processes +- recent entries from /var/log/messages (containing system messages) +- complete lvm configuration and cache (content of /etc/lvm) +- list of device nodes present under /dev +- list of files present /sys/block +- list of files present /sys/devices/virtual/block +% +ldns-notify - notify DNS servers that updates are available +ldns-notify [options] -z zone servers +the master servers. It can perform TSIG signatures and it can add a SOA serial number of the updated +zone. If a server already has that serial number it will disregard the message. +-z zone +The zone that is updated. +-h Show usage and exit +-v Show the version and exit +% +mmroff - cross reference preprocessor +mmroff [ -x ] groff_arguments +mmroff is a simple preprocessor for groff, it is used for expanding cross references in mm, see +to do the real processing when the cross reference file is up to date. +isn't always needed to have accurate cross references and by using this option groff will only be +run once. +FILES +% +readelf - Displays information about ELF files. +readelf [-a|--all] +[-h|--file-header] +[-l|--program-headers|--segments] +[-S|--section-headers|--sections] +[-g|--section-groups] +[-t|--section-details] +[-e|--headers] +[-s|--syms|--symbols] +[--dyn-syms] +[-n|--notes] +[-r|--relocs] +[-u|--unwind] +[-d|--dynamic] +[-V|--version-info] +% +dumpkeys - dump keyboard translation tables +dumpkeys [ -hilfn -ccharset --help --short-info --long-info --numeric --full-table --funcs-only +--keys-only --compose-only --charset=charset ] +dumpkeys writes, to the standard output, the current contents of the keyboard driver's translation +Using the various options, the format of the output can be controlled and also other information from the +-h --help +Prints the program's version number and a short usage message to the program's standard error out‐ +put and exits. +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +numastat +numastat - Show per-NUMA-node memory statistics for processes and the operating system +numastat +numastat [-V] +numastat [<PID>|<pattern>...] +numastat [-c] [-m] [-n] [-p <PID>|<pattern>] [-s[<node>]] [-v] [-z] [<PID>|<pattern>...] +numastat with no command options or arguments at all, displays per-node NUMA hit and miss system statis‐ +previous long-standing numastat perl script, written by Andi Kleen. The default numastat statistics +shows per-node numbers (in units of pages of memory) in these categories: +% +jfs_logdump - dump a JFS formatted device's journal log +jfs_logdump [ -a ] device +jfs_logdump dumps the contents of the journal log from the specified JFS formatted device into output +file ./jfslog.dmp. +device is the special file name corresponding to the actual device from which the journal log will be +jfs_logdump must be run as root. +-a Dump the entire contents of the journal log instead of just the committed transactions since the +last synch point. +% +man - an interface to the on-line reference manuals +man [-C file] [-d] [-D] [--warnings[=warnings]] [-R encoding] [-L locale] [-m system[,...]] [-M path] [-S +list] [-e extension] [-i|-I] [--regex|--wildcard] [--names-only] [-a] [-u] [--no-subpages] [-P pager] [-r +prompt] [-7] [-E encoding] [--no-hyphenation] [--no-justification] [-p string] [-t] [-T[device]] +[-H[browser]] [-X[dpi]] [-Z] [[section] page ...] ... +man -k [apropos options] regexp ... +man -K [-w|-W] [-S list] [-i|-I] [--regex] [section] term ... +man -f [whatis options] page ... +man -l [-C file] [-d] [-D] [--warnings[=warnings]] [-R encoding] [-L locale] [-P pager] [-r prompt] [-7] +[-E encoding] [-p string] [-t] [-T[device]] [-H[browser]] [-X[dpi]] [-Z] file ... +man -w|-W [-C file] [-d] [-D] page ... +man -c [-C file] [-d] [-D] page ... +man [-?V] +% +scp — secure copy (remote file copy program) +needed for authentication. +file names containing ‘:’ as host specifiers. Copies between two remote hosts are also permitted. +The options are as follows: +% +xfs_quota - manage use of quota on XFS filesystems +xfs_quota [ -x ] [ -p prog ] [ -c cmd ] ... [ -d project ] ... [ -D projects_file ] [ -P projid_file ] [ +path ... ] +xfs_quota -V +xfs_quota is a utility for reporting and editing various aspects of filesystem quota. +The options to xfs_quota are: +gram exits. +-p prog Set the program name for prompts and some error messages, the default value is xfs_quota. +% +talk - Talk client +talk [OPTION...] person [ttyname] +Talk to another user. +-?, --help +give this help list +--usage +give a short usage message +-V, --version +print program version +% +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --decode +decode data +-i, --ignore-garbage +when decoding, ignore non-alphabet characters +% +addpart - tell the kernel about the existence of a partition +addpart device partition start length +addpart tells the Linux kernel about the existence of the specified partition. The command is a simple +wrapper around the "add partition" ioctl. +PARAMETERS +device The disk device. +partition +The partition number. +% +pvremove — remove a physical volume +[-f[f]|--force [--force]] [--reportformat {basic|json}] [-y|--yes] PhysicalVolume [PhysicalVolume...] +pvremove wipes the label on a device so that LVM will no longer recognise it as a physical volume. +-ff, --force --force +Force the removal of a physical volume belonging to an existing volume group. Normally vgre‐ +by some active logical volume. +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +sleep - delay for a specified amount of time +sleep NUMBER[SUFFIX]... +sleep OPTION +trary floating point number. Given two or more arguments, pause for the amount of time specified by the +sum of their values. +--help display this help and exit +--version +output version information and exit +% +vgcfgrestore — restore volume group descriptor area +vgcfgbackup. You can specify a backup file with --file. If no backup file is specified, the most recent +-l, --list +% +rtpr - replace backslashes with newlines. +rtpr is a trivial bash script which converts backslashes in standard input to newlines. It's sole purpose +is to be fed with input from ip when executed with it's --oneline flag. +ip --oneline address show | rtpr +Undo oneline converted ip-address output. +Stephen Hemminger <shemming@brocade.com> +% +useradd - create a new user or update default new user information +useradd [options] LOGIN +useradd -D +useradd -D [options] +When invoked without the -D option, the useradd command creates a new user account using the values +specified on the command line plus the default values from the system. Depending on command line options, +initial files. +By default, a group will also be created for the new user (see -g, -N, -U, and USERGROUPS_ENAB). +% +dnssec-keyfromlabel - DNSSEC key generation tool +[-D sync date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-i interval] [-k] +[-K directory] [-L ttl] [-n nametype] [-P date/offset] [-P sync date/offset] +[-p protocol] [-R date/offset] [-S key] [-t type] [-v level] [-V] [-y] {name} +dnssec-keyfromlabel generates a key pair of files that referencing a key object stored in a cryptographic +hardware service module (HSM). The private key file can be used for DNSSEC signing of zone data as if it +were a conventional signing key created by dnssec-keygen, but the key material is stored within the HSM, +and the actual signing takes place there. +key is being generated. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +chcpu - configure CPUs +chcpu -c|-d|-e|-g cpu-list +chcpu -p mode +chcpu -r|-h|-V +chcpu can modify the state of CPUs. It can enable or disable CPUs, scan for new CPUs, change the CPU +dispatching mode of the underlying hypervisor, and request CPUs from the hypervisor (configure) or return +CPUs to the hypervisor (deconfigure). +Some options have a cpu-list argument. Use this argument to specify a comma-separated list of CPUs. The +% +nologin - politely refuse a login +nologin [-V] [-h] +nologin displays a message that an account is not available and exits non-zero. It is intended as a +replacement shell field to deny login access to an account. +If the file /etc/nologin.txt exists, nologin displays its contents to the user instead of the default +message. +-h, --help +Display help text and exit. +% +pvs — report information about physical volumes +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--namepre‐ +fixes] [--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--rows] [--segments] +[--separator Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] [--unquoted] [-v|--verbose] [--ver‐ +sion] [PhysicalVolume [PhysicalVolume...]] +pvs produces formatted output about physical volumes. +% +agetty - alternative Linux getty +agetty [options] port [baud_rate...] [term] +agetty opens a tty port, prompts for a login name and invokes the /bin/login command. It is normally +agetty has several non-standard features that are useful for hardwired and for dial-in lines: +when it reads a login name. The program can handle 7-bit characters with even, odd, none or space +Control-U (kill); DEL and backspace (erase); carriage return and line feed (end of line). See +also the --erase-chars and --kill-chars options. +% +ldns-revoke - sets the revoke bit of a DNSKEY +ldns-revoke file +ldns-revoke is used to revoke a public DNSKEY RR. When run it will read file with a DNSKEY RR in it, +sets the revoke bit and write back the output to file . +-n Write the result to stdout instead of a file +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +ebtables [-t table ] -[ACDI] chain rule specification [match extensions] [watcher extensions] target +ebtables [-t table ] -P chain ACCEPT | DROP | RETURN +ebtables [-t table ] -F [chain] +ebtables [-t table ] -Z [chain] +ebtables [-t table ] -N chain [-P ACCEPT | DROP | RETURN] +ebtables [-t table ] -X [chain] +ebtables [-t table ] -E old-chain-name new-chain-name +ebtables [-t table ] --init-table +ebtables [-t table ] [--atomic-file file] --atomic-commit +ebtables [-t table ] [--atomic-file file] --atomic-init +ebtables [-t table ] [--atomic-file file] --atomic-save +% +yacc - GNU Project parser generator +yacc [OPTION]... FILE +information. +Written by Paul Eggert. +REPORTING BUGS +Report bugs to <bug-bison@gnu.org>. +% +systemd-analyze - Analyze system boot-up performance +% +dnssec-revoke - set the REVOKED bit on a DNSSEC key +dnssec-revoke [-hr] [-v level] [-V] [-K directory] [-E engine] [-f] [-R] {keyfile} +creates a new pair of key files containing the now-revoked key. +-h +Emit usage message and exit. +-K directory +Sets the directory in which the key files are to reside. +-r +% +lspci - list all PCI devices +lspci [options] +lspci is a utility for displaying information about PCI buses in the system and devices connected to +them. +By default, it shows a brief list of devices. Use the options described below to request either a more +verbose output or output intended for parsing by other programs. +If you are going to report bugs in PCI device drivers or in lspci itself, please include output of "lspci +-vvx" or even better "lspci -vvxxx" (however, see below for possible caveats). +Some parts of the output, especially in the highly verbose modes, are probably intelligible only to expe‐ +rienced PCI hackers. For exact definitions of the fields, please consult either the PCI specifications or +% +screen [ -options ] [ cmd [ args ] ] +screen -r [[pid.]tty[.host]] +screen -r sessionowner/[[pid.]tty[.host]] +Screen is a full-screen window manager that multiplexes a physical terminal between several processes +dards (e.g. insert/delete line and support for multiple character sets). There is a scrollback history +buffer for each virtual terminal and a copy-and-paste mechanism that allows moving text regions between +windows. +When screen is called, it creates a single window with a shell in it (or the specified command) and then +gets out of your way so that you can use the program as you normally would. Then, at any time, you can +% +kernel-install - Add and remove kernel and initramfs images to and from /boot +kernel-install is used to install and remove kernel and initramfs images to and from /boot. +kernel-install will execute the files located in the directory /usr/lib/kernel/install.d/ and the local +administration directory /etc/kernel/install.d/. All files are collectively sorted and executed in +lexical order, regardless of the directory in which they live. However, files with identical filenames +replace each other. Files in /etc/kernel/install.d/ take precedence over files with the same name in +if needed; a symbolic link in /etc/kernel/install.d/ with the same name as an executable in +/usr/lib/kernel/install.d/, pointing to /dev/null, disables the executable entirely. Executables must +have the extension ".install"; other extensions are ignored. +% +setterm - set terminal attributes +setterm [options] +setterm writes to standard output a character string that will invoke the specified terminal capabili‐ +ties. Where possible terminfo is consulted to find the string to use. Some options however (marked +minal type is "con" or "linux" the string that invokes the specified capabilities on the PC Minix virtual +console driver is output. Options that are not implemented by the terminal are ignored. +For boolean options (on or off), the default is on. +% +mapscrn - load screen output mapping table +mapscrn [-v] [-o map.orig] mapfile +The mapscrn command is obsolete - its function is now built-in into setfont. However, for backwards com‐ +patibility it is still available as a separate command. +The mapscrn command loads a user defined output character mapping table into the console driver. The con‐ +character set. When the -o option is given, the old map is saved in map.orig. +USE +There are two kinds of mapping tables: direct-to-font tables, that give a font position for each user +byte value, and user-to-unicode tables that give a unicode value for each user byte. The corresponding +% +lvcreate - create a logical volume in an existing volume group +lvcreate [-a|--activate [a][e|l|s]{y|n}] [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup +{y|n}] [-H|--cache] [--cachemode {passthrough|writeback|writethrough}] [--cachepolicy Policy] +[--cachepool CachePoolLogicalVolume] [--cachesettings Key=Value] [-c|--chunksize ChunkSize] [--command‐ +[--errorwhenfull {y|n}] [{-l|--extents LogicalExtentsNumber[%{FREE|PVS|VG}] | -L|--size LogicalVolume‐ +Size} [-i|--stripes Stripes [-I|--stripesize StripeSize]]] [-h|-?|--help] [-K|--ignoreactivationskip] +Mirrors [--corelog|--mirrorlog {disk|core|mirrored}] [--nosync] [-R|--regionsize MirrorLogRegionSize]] +[--monitor {y|n}] [-n|--name LogicalVolume] [--noudevsync] [-p|--permission {r|rw}] [-M|--persistent +{y|n}] [--poolmetadatasize MetadataVolumeSize] [--poolmetadataspare {y|n}] [--[raid]maxrecoveryrate Rate] +[--[raid]minrecoveryrate Rate] [-r|--readahead {ReadAheadSectors|auto|none}] [--reportformat +{basic|json}] [-k|--setactivationskip {y|n}] [-s|--snapshot] [-V|--virtualsize VirtualSize] [-t|--test] +[-T|--thin] [--thinpool ThinPoolLogicalVolume] [--type SegmentType] [-v|--verbose] [-W|--wipesignatures +{y|n}] [-Z|--zero {y|n}] [VolumeGroup | {ExternalOrigin|Origin|Pool}LogicalVolume +% +renice - alter priority of running processes +renice [-n] priority [-g|-p|-u] identifier... +renice alters the scheduling priority of one or more running processes. The first argument is the prior‐ +ity value to be used. The other arguments are interpreted as process IDs (by default), process group +IDs, user IDs, or user names. renice'ing a process group causes all processes in the process group to +have their scheduling priority altered. renice'ing a user causes all processes owned by the user to have +their scheduling priority altered. +-n, --priority priority +Specify the scheduling priority to be used for the process, process group, or user. Use of the +option -n or --priority is optional, but when used it must be the first argument. +% +eqn - format equations for troff or MathML +eqn [-rvCNR] [-d xy] [-T name] [-M dir] [-f F] [-s n] [-p n] [-m n] [files...] +eqn compiles descriptions of equations embedded within troff input files into commands that are under‐ +stood by troff. Normally, it should be invoked using the -e option of groff. The syntax is quite com‐ +patible with Unix eqn. The output of GNU eqn cannot be processed with Unix troff; it must be processed +with GNU troff. If no files are given on the command line, the standard input is read. A filename of - +causes the standard input to be read. +eqn searches for the file eqnrc in the directories given with the -M option first, then in +/usr/lib/groff/site-tmac, /usr/share/groff/site-tmac, and finally in the standard macro directory +option prevents this. +% +who - show who is logged on +Print information about users who are currently logged in. +-a, --all +same as -b -d --login -p -r -t -T -u +-b, --boot +time of last system boot +-d, --dead +print dead processes +% +vgconvert - convert volume group metadata format +tor] [--bootloaderareasize size] [-M|--metadatatype type] [--pvmetadatacopies NumberOfCopies] [--meta‐ +into the same space. +Examples +% +zgrep - search possibly compressed files for a regular expression +zgrep [ grep_options ] [ -e ] pattern filename... +Zgrep invokes grep on compressed or gzipped files. All options specified are passed directly to grep. +If no file is specified, then the standard input is decompressed if necessary and fed to grep. Otherwise +the given files are uncompressed if necessary and fed to grep. +If the GREP environment variable is set, zgrep uses it as the grep program to be invoked. +BUGS +The following grep options are not supported: --dereference-recursive (-R), --directories (-d), +% +fdisk - manipulate disk partition table +fdisk [options] device +fdisk -l [device...] +fdisk is a dialog-driven program for creation and manipulation of partition tables. It understands GPT, +MBR, Sun, SGI and BSD partition tables. +in the partition table, usually found in sector 0 of the disk. (In the BSD world one talks about `disk +slices' and a `disklabel'.) +All partitioning is driven by device I/O limits (the topology) by default. fdisk is able to optimize the +% +truncate - shrink or extend the size of a file to the specified size +truncate OPTION... FILE... +Shrink or extend the size of each FILE to the specified size +A FILE argument that does not exist is created. +If a FILE is larger than the specified size, the extra data is lost. If a FILE is shorter, it is +extended and the extended part (hole) reads as zero bytes. +Mandatory arguments to long options are mandatory for short options too. +-c, --no-create +do not create any files +% +gpinyin - Chinese European-like writing within groff +gpinyin [-] [--] [ filespec ....] +gpinyin -h|--help +gpinyin -v|--version +groff(7) files. +Breaking Options +An option is breaking, when the program just writes the information that was asked for and then stops. +All other arguments will be ignored by that. The breaking options are here +-h | --help +% +neqn - format equations for ascii output +neqn [eqn options] +device. +for very simple input). +% +rndc-confgen - rndc key generation tool +rndc-confgen [-a] [-A algorithm] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port] [-r randomfile] +[-s address] [-t chrootdir] [-u user] +rndc-confgen generates configuration files for rndc. It can be used as a convenient alternative to +writing the rndc.conf file and the corresponding controls and key statements in named.conf by hand. +Alternatively, it can be run with the -a option to set up a rndc.key file and avoid the need for a +rndc.conf file and a controls statement altogether. +-a +specified as when BIND was built) that is read by both rndc and named on startup. The rndc.key file +defines a default command channel and authentication key allowing rndc to communicate with named on +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +pathchk - check whether file names are valid or portable +Diagnose invalid or unportable file names. +-p check for most POSIX systems +-P check for empty names and leading "-" +--portability +check for all POSIX systems (equivalent to -p -P) +--help display this help and exit +% +-b print the blocks which are reserved as bad in the filesystem. +-o superblock=superblock +by a filesystem wizard who is examining the remains of a very badly corrupted filesystem. +% +arp - manipulate the system ARP cache +arp [-vn] [-H type] [-i if] [-ae] [hostname] +arp [-v] [-i if] -d hostname [pub] +arp [-v] [-H type] [-i if] -s hostname hw_addr [temp] +arp [-v] [-H type] [-i if] -s hostname hw_addr [netmask nm] pub +arp [-v] [-H type] [-i if] -Ds hostname ifname [netmask nm] pub +arp [-vnD] [-H type] [-i if] -f [filename] +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +iptables [-t table] {-A|-C|-D} chain rule-specification +ip6tables [-t table] {-A|-C|-D} chain rule-specification +iptables [-t table] -I chain [rulenum] rule-specification +iptables [-t table] -R chain rulenum rule-specification +iptables [-t table] -D chain rulenum +iptables [-t table] -S [chain [rulenum]] +iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] +% +false - do nothing, unsuccessfully +false [ignored command line arguments] +false OPTION +Exit with a status code indicating failure. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +objcopy - copy and translate object files +objcopy [-F bfdname|--target=bfdname] +[-I bfdname|--input-target=bfdname] +[-O bfdname|--output-target=bfdname] +[-B bfdarch|--binary-architecture=bfdarch] +[-S|--strip-all] +[-g|--strip-debug] +[-K symbolname|--keep-symbol=symbolname] +[-N symbolname|--strip-symbol=symbolname] +[--strip-unneeded-symbol=symbolname] +[-G symbolname|--keep-global-symbol=symbolname] +[--localize-hidden] +[-L symbolname|--localize-symbol=symbolname] +[--globalize-symbol=symbolname] +[-W symbolname|--weaken-symbol=symbolname] +% +Set up images to boot from DEVICE. +You should not normally run this program directly. Use grub-install instead. +-a, --allow-floppy +make the drive also bootable as floppy (default for fdX devices). May break on some BIOSes. +-b, --boot-image=FILE +use FILE as the boot image [default=boot.img] +-c, --core-image=FILE +% +xtotroff - convert X font metrics into GNU troff font metrics +xtotroff [ -rresolution ] [ -spoint-size ] [ -v ] FontMap +fonts listed. Each line in FontMap consists of GNU troff font name and an X font name (XLFD) pattern, +separated by whitespace. Example: +The wildcards in the patterns are filled with the arguments to the -r and -s switches. If a font name is +still ambiguous, xtotroff aborts. +It is possible to have whitespace between a command line option and its parameter. +% +lvm [command|file] +If lvm is invoked with no arguments it presents a readline prompt (assuming it was compiled with readline +If lvm is invoked with argv[0] set to the name of a specific LVM command (for example by using a hard or +soft link) it acts as that command. +On invocation, lvm requires that only the standard file descriptors stdin, stdout and stderr are avail‐ +% +sulogin - single-user login +sulogin [options] [tty] +sulogin is invoked by init when the system goes into single-user mode. +The user is prompted: +Give root password for system maintenance +(or type Control-D for normal startup): +If the root account is locked and --force is specified, no password is required. +sulogin will be connected to the current terminal, or to the optional tty device that can be specified on +the command line (typically /dev/console). +% +mail -h | --help +mail [-BDdEFintv~] [-A account] [-a attachment] [-b bcc-addr] [-c cc-addr] [-q quote-file] [-r from-addr] +[-S variable[=value]] [-s subject] [-X cmd] [-.] to-addr ... [-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-X cmd] -f [file] +[-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-u user] [-X cmd] +[-- mta-option ...] +% +curl-config - Get information about a libcurl installation +curl-config [options] +curl-config displays information about the curl and libcurl installation. +--ca Displays the built-in path to the CA cert bundle this libcurl uses. +--cc Displays the compiler used to build libcurl. +--cflags +Set of compiler options (CFLAGS) to use when compiling files that use libcurl. Currently that is +only the include path to the curl include files. +% +grn - groff preprocessor for gremlin files +grn [ -Cv ] [ -Tdev ] [ -Mdir ] [ -Fdir ] [ file... ] +grn is a preprocessor for including gremlin pictures in groff input. grn writes to standard output, pro‐ +cessing only input lines between two that start with .GS and .GE. Those lines must contain grn commands +(see below). These commands request a gremlin file, and the picture in that file is converted and placed +justify the whole gremlin picture (default justification is center). If no file is mentioned, the stan‐ +dard input is read. At the end of the picture, the position on the page is the bottom of the gremlin +picture. If the grn entry is ended with .GF instead of .GE, the position is left at the top of the pic‐ +ture. +Please note that currently only the -me macro package has support for .GS, .GE, and .GF. +% +lvreduce — reduce the size of a logical volume +[-v|--verbose] [--version] [-f|--force] [--noudevsync] {-l|--extents [-]LogicalExtentsNum‐ +ber[%{VG|LV|FREE|ORIGIN}] | -L|--size [-]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [-n|--nofsck] [--reportfor‐ +lvreduce allows you to reduce the size of a logical volume. Be careful when reducing a logical volume's +size, because data in the reduced part is lost!!! +You should therefore ensure that any filesystem on the volume is resized before running lvreduce so that +the extents that are to be removed are not in use. +Sizes will be rounded if necessary - for example, the volume size must be an exact number of extents and +the size of a striped segment must be a multiple of the number of stripes. +% +grub-glue-efi - generate a fat binary for EFI +-o, --output=FILE +% +lkbib - search bibliographic databases +lkbib [ -v ] [ -ifields ] [ -pfilename ] [ -tn ] key... +lkbib searches bibliographic databases for references that contain the keys key... and prints any refer‐ +ences found on the standard output. lkbib will search any databases given by -p options, and then a +default database. The default database is taken from the REFER environment variable if it is set, other‐ +wise it is /usr/dict/papers/Ind. For each database filename to be searched, if an index filename.i cre‐ +It is possible to have whitespace between a command line option and its parameter. +-v Print the version number. +% +should give you access to the complete manual. +% +delpart - tell the kernel to forget about a partition +delpart device partition +delpart asks the Linux kernel to forget about the specified partition (a number) on the specified device. +The command is a simple wrapper around the "del partition" ioctl. +AVAILABILITY +The delpart command is part of the util-linux package and is available from ftp://ftp.ker‐ +nel.org/pub/linux/utils/util-linux/. +% +zramctl - set up and control zram devices +Get info: +zramctl [options] +Reset zram: +zramctl -r zramdev... +Print name of first unused zram device: +zramctl -f +Set up a zram device: +% +gpg-connect-agent - Communicate with a running agent +gpg-connect-agent [options][commands] +The gpg-connect-agent is a utility to communicate with a running gpg-agent. It is useful to check out +the commands gpg-agent provides using the Assuan interface. It might also be useful for scripting simple +applications. Input is expected at stdin and out put gets printed to stdout. +It is very similar to running gpg-agent in server mode; but here we connect to a running instance. +-v +--verbose +Output additional information while running. +% +gxditview - display groff intermediate output files +gxditview [-toolkitoption ...] [-option ...] [filename] +several ways to use gxditview. +gxditview filename. If filename is -, gxditview will read the standard input; filename cannot be omit‐ +ted. The groff intermediate output is different for all devices. gxditview can view it for all devices, +but the quality is device dependent. +The best results are achieved with the X* devices for groff's option -T. There are four X* devices: +% +wdctl - show hardware watchdog status +wdctl [options] [device...] +Show hardware watchdog status. The default device is /dev/watchdog. If more than one device is speci‐ +fied then the output is separated by one blank line. +-f, --flags list +Print only the specified flags. +-F, --noflags +Do not print information about flags. +% +grub-mkstandalone - make a memdisk-based GRUB image +grub-mkstandalone [OPTION...] [OPTION] SOURCE... +Generate a standalone image (containing all modules) in the selected format +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +nslookup - query Internet name servers interactively +nslookup [-option] [name | -] [server] +Nslookup is a program to query Internet domain name servers. Nslookup has two modes: interactive and +non-interactive. Interactive mode allows the user to query name servers for information about various +hosts and domains or to print a list of hosts in a domain. Non-interactive mode is used to print just the +name and requested information for a host or domain. +% +grub-render-label - generate a .disk_label for Apple Macs. +Render Apple .disk_label. +-b, --bgcolor=COLOR +use COLOR for background +-c, --color=COLOR +use COLOR for text +-f, --font=FILE +% +ar - create, modify, and extract from archives +The GNU ar program creates, modifies, and extracts from archives. An archive is a single file holding a +collection of other files in a structure that makes it possible to retrieve the original individual files +(called members of the archive). +The original files' contents, mode (permissions), timestamp, owner, and group are preserved in the +archive, and can be restored on extraction. +GNU ar can maintain archives whose members have names of any length; however, depending on how ar is +% +btrfs-image - create/restore an image of the filesystem +btrfs-image [options] <source> <target> +btrfs-image is used to create an image of a btrfs filesystem. All data will be zeroed, but metadata and +the like is preserved. Mainly used for debugging purposes. +In the dump mode, source is the btrfs device/file and target is the output file (use - for stdout). +In the restore mode (option -r), source is the dumped image and target is the btrfs device/file. +-r +primary device, so that file system can be restored by running tree log reply if possible. To restore +% +jfs_mkfs - create a JFS formatted partition +jfs_mkfs [options] device [ blocks ] +jfs_mkfs is used to create (format) a JFS partition. jfs_mkfs must be run as root. +system and/or JFS journal will be created. blocks is the number of blocks to be used for the file sys‐ +tem. If omitted, jfs_mkfs automatically figures the file system size. +WARNING +jfs_mkfs will destroy all data on the specified device! +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +btrfs-inspect-internal - query various internal information +btrfs inspect-internal <subcommand> <args> +simple UI to an ioctl or a more complex query that assembles the result from several internal structures. +The latter usually requires calls to privileged ioctls. +dump-super [options] <device> [device...] +(replaces the standalone tool btrfs-show-super) +Show btrfs superblock information stored on given devices in textual form. By default the first +superblock is printed, more details about all copies or additional backup data can be printed. +% +vdir - list directory contents +vdir [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +ul - do underlining +ul [options] [file...] +ul reads the named files (or standard input if none are given) and translates occurrences of underscores +to the sequence which indicates underlining for the terminal in use, as specified by the environment +variable TERM. The terminfo database is read to determine the appropriate sequences for underlining. If +the terminal is incapable of underlining but is capable of a standout mode, then that is used instead. +terminal cannot underline, underlining is ignored. +-i, --indicated +Underlining is indicated by a separate line containing appropriate dashes `-'; this is useful when +you want to look at the underlining which is present in an nroff output stream on a crt-terminal. +% +systool - view system device information by bus, class, and topology +systool [options [device]] +Calling systool without parameters will present all available bus types, device classes, and root +devices. +When device is supplied, the information reqested by options is shown only for the specified device, oth‐ +erwise all present devices are displayed. +systool uses APIs provided by libsysfs to gather information. systool runs only on Linux systems running +-a Show attributes of the requested resource +% +udevadm - udev management tool +udevadm [--debug] [--version] [--help] +udevadm info options +udevadm trigger [options] +udevadm settle [options] +udevadm control command +udevadm monitor [options] +udevadm test [options] devpath +% +true - do nothing, successfully +true [ignored command line arguments] +true OPTION +Exit with a status code indicating success. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +loadunimap - load the kernel unicode-to-font mapping table +loadunimap [ -C console ] [ -o oldmap ] [ map ] +The loadunimap command is obsolete - its function is now built-in into setfont. However, for backwards +compatibility it is still available as a separate command. +The program loadunimap loads the specified map in the kernel unicode-to-font mapping table. If no map is +given def is assumed. The default extension (that can be omitted) is .uni. +If the -o oldmap option is given, the old map is saved in the file specified. +Usually one does not call loadunimap directly - its function is also built into setfont. +% +keytab. +operation must be one of the following: +list Lists the keys in a keytab showing version number and principal name. +change Uses the kadmin protocol to update the keys in the Kerberos database to new randomly-generated +keys, and updates the keys in the keytab to match. If a key's version number doesn't match the +version number stored in the Kerberos server's database, then the operation will fail. Old keys +are retained in the keytab so that existing tickets continue to work. If the -i flag is given, +% +hostid - print the numeric identifier for the current host +hostid [OPTION] +Print the numeric identifier (in hexadecimal) for the current host. +--help display this help and exit +--version +output version information and exit +Written by Jim Meyering. +REPORTING BUGS +% +kdestroy - destroy Kerberos tickets +kdestroy [-A] [-q] [-c cache_name] +The kdestroy utility destroys the user's active Kerberos authorization tickets by overwriting and delet‐ +ing the credentials cache that contains them. If the credentials cache is not specified, the default +credentials cache is destroyed. +-A Destroys all caches in the collection, if a cache collection is available. +-q Run quietly. Normally kdestroy beeps if it fails to destroy the user's tickets. The -q flag sup‐ +presses this behavior. +-c cache_name +% +sysctl - configure kernel parameters at runtime +sysctl [options] [variable[=value]] [...] +sysctl -p [file or regexp] [...] +sysctl is used to modify kernel parameters at runtime. The parameters available are those listed under +/proc/sys/. Procfs is required for sysctl support in Linux. You can use sysctl to both read and write +sysctl data. +PARAMETERS +variable +The name of a key to read from. An example is kernel.ostype. The '/' separator is also accepted +in place of a '.'. +variable=value +% +ldns-testns - simple fake nameserver tool +ldns-testns [ OPTION ] datafile +ldns-testns can be used to provide answers to DNS queries for testing. The answers are premade, and can +be tailored to testing needs. The answers can be wildly invalid or unparseable. +ldns-testns is not meant for production use. +% +ipcrm - remove certain IPC resources +ipcrm [options] +ipcrm {shm|msg|sem} id... +ipcrm removes System V interprocess communication (IPC) objects and associated data structures from the +system. In order to delete such objects, you must be superuser, or the creator or owner of the object. +System V IPC objects are of three types: shared memory, message queues, and semaphores. Deletion of a +message queue or semaphore object is immediate (regardless of whether any process still holds an IPC +identifier for the object). A shared memory object is only removed after all currently attached pro‐ +Two syntax styles are supported. The old Linux historical syntax specifies a three-letter keyword indi‐ +% +ptx - produce a permuted index of file contents +ptx [OPTION]... [INPUT]... (without -G) +ptx -G [OPTION]... [INPUT [OUTPUT]] +Output a permuted index, including context, of the words in the input files. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-A, --auto-reference +output automatically generated references +-G, --traditional +% +awk — pattern scanning and processing language +awk [−F sepstring] [−v assignment]... program [argument...] +awk [−F sepstring] −f progfile [−f progfile]... [−v assignment]... +[argument...] +The awk utility shall execute programs written in the awk programming language, which is specialized for +textual data manipulation. An awk program is a sequence of patterns and corresponding actions. When input +is read that matches a pattern, the action associated with that pattern is carried out. +% +ln - make links between files +ate hard links by default, symbolic links with --symbolic. By default, each destination (name of new +link) should not already exist. When creating hard links, each TARGET must exist. Symbolic links can +hold arbitrary text; if later resolved, a relative link is interpreted in relation to its parent direc‐ +tory. +Mandatory arguments to long options are mandatory for short options too. +% +dbus-test-tool - D-Bus traffic generator and test tool +--empty] [--payload=S | --stdin | --message-stdin | --random-size] +dbus-test-tool is a multi-purpose tool for debugging and profiling D-Bus. +dbus-test-tool black-hole connects to D-Bus, optionally requests a name, then does not reply to messages. +It normally reads and discards messages from its D-Bus socket, but can be configured to sleep forever +without reading. +% +switch_root - switch to another filesystem as the root of the mount tree +switch_root [-hV] +switch_root newroot init [arg...] +switch_root moves already mounted /proc, /dev, /sys and /run to newroot and makes newroot the new root +filesystem and starts init process. +WARNING: switch_root removes recursively all files and directories on the current root filesystem. +-h, --help +Display help text and exit. +% +isc-config.sh - Get information about the installed version of ISC BIND +isc-config.sh [--cflags] [--exec-prefix] [--libs] [--prefix] [--version] [libraries...] +isc-config.sh prints information related to the installed version of ISC BIND, such as the compiler and +linker flags required to compile and link programs that use ISC BIND libraries. +The optional libraries are used to report specific details for compiling and linking for the listed +listed on the command line. (Some libraries require other libraries, so are implied.) +--cflags +Prints the compiler command line options required to compile files that use ISC BIND. Use the +libraries command line argument(s) to print additional specific flags to pass to the C compiler. +% +xfs_bmap - print block mapping for an XFS file +xfs_bmap [ -adlpv ] [ -n num_extents ] file +xfs_bmap -V +xfs_bmap prints the map of disk blocks used by files in an XFS filesystem. The map lists each extent +used by the file, as well as regions in the file that do not have any corresponding blocks (holes). Each +line of the listings takes the following form: +extent: [startoffset..endoffset]: startblock..endblock +Holes are marked by replacing the startblock..endblock with hole. All the file offsets and disk blocks +% +c99 — compile standard C programs +c99 [options...] pathname [[pathname] [−I directory] +[−L directory] [−l library]]... +The c99 utility is an interface to the standard C compilation system; it shall accept source code con‐ +forming to the ISO C standard. The system conceptually consists of a compiler and link editor. The input +files referenced by pathname operands and −l option-arguments shall be compiled and linked to produce an +executable file. (It is unspecified whether the linking occurs entirely within the operation of c99; some +% +lvmconfig, lvm dumpconfig, lvm config — Display LVM configuration +lvmconfig [-f|--file Filename] [--type {current|default|diff|full|list|missing|new|profilable|profilable- +command|profilable-metadata}] [--atversion Version] [--sinceversion Version] [--ignoreadvanced] +[--ignoreunsupported] [--ignorelocal] [-l|--list] [--config ConfigurationString] [--commandprofile Pro‐ +[--showunsupported] [--validate] [--withsummary] [--withcomments] [--withspaces] [--withversions] [Con‐ +figurationNode...] +lvmconfig produces formatted output from the LVM configuration tree. The command was added in release +-f, --file Filename +Send output to a file named 'filename'. +% +ntp-wait - Wait for ntpd to stabilize the system clock +ntp-wait [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +the boot sequence until after ntpd -g has set the time. +-n number, --tries=number +% +mtr - a network diagnostic tool +[--raw] [--csv] [--json] [--split] [--no-dns] [--show-ips] [-o FIELDS] [-y IPINFO] [--aslookup] +[-i INTERVAL] [-c COUNT] [-s PACKETSIZE] [-B BITPATTERN] [-G GRACEPERIOD] [-Q TOS] [--mpls] [-a ADDRESS] +[-f FIRST-TTL] [-m MAX-TTL] [-U MAX-UNKNOWN] [--udp] [--tcp] [-P PORT] [-L LOCALPORT] [-Z TIMEOUT] +mtr combines the functionality of the traceroute and ping programs in a single network diagnostic tool. +ing packets with purposely low TTLs. It continues to send packets with low TTL, noting the response time +a bad (or simply overloaded) link. +% +runcon - run command with specified security context +by one or more of LEVEL, ROLE, TYPE, and USER. +If none of -c, -t, -u, -r, or -l, is specified, the first argument is used as the complete context. Any +rent security context. +% +reiserfstune - The tunning tool for the ReiserFS filesystem. +reiserfstune [ -f ] [ -h | --help ] [ -j | --journal-device FILE ] [ --no-journal-available ] [ --jour‐ +nal-new-device FILE ] [ --make-journal-standard ] [ -s | --journal-new-size N ] [ -o | --journal-new-off‐ +set N ] [ -t | --max-transaction-size N ] [ -b | --add-badblocks file ] [ -B | --badblocks file ] [ -u | +--uuid UUID ] [ -l | --label LABEL ] [ -c | --check-interval interval-in-days ] [ -C | --time-last- +checked timestamp ] [ -m | --max-mnt-count count ] [ -M | --mnt-count count ] device +reiserfstune is used for tuning the ReiserFS. It can change two journal parameters (the journal size and +the maximum transaction size), and it can move the journal's location to a new specified block device. +the relocated journal was implemented for a special release of ReiserFS, and was not expected to be put +you must apply a special patch. Without this patch the kernel will refuse to mount the newly modified +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +psfstriptable - remove the embedded Unicode character table from a console font +psfstriptable fontfile outfile +psfstriptable reads a .psf format console font from fontfile, removes the embedded Unicode font table if +there is one, and writes the result to outfile. An input file name of "-" denotes standard input, and an +output file name of "-" denotes standard output. +% +btrfs-convert [options] <device> +Warning +The conversion utilizes free space of the original filesystem. The exact estimate of the required space +cannot be foretold. The final btrfs metadata might occupy several gigabytes on a hundreds-gigabyte +filesystem. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +kvno - print key version numbers of Kerberos principals +kvno acquires a service ticket for the specified Kerberos principals and prints out the key version num‐ +bers of each. +-c ccache +Specifies the name of a credentials cache to use (if not the default) +-e etype +Specifies the enctype which will be requested for the session key of all the services named on the +% +strfile - create a random access file for storing strings +unstr - dump strings in pointer order +strfile [-iorsx] [-c char] sourcefile [outputfile] +unstr [-c char] datafile[.ext] [outputfile] +strfile reads a file containing groups of lines separated by a line containing a single percent `%' sign +(or other specified delimiter character) and creates a data file which contains a header structure and a +The output file, if not specified on the command line, is named sourcefile.dat. +The purpose of unstr is to undo the work of strfile. It prints out the strings contained in the source‐ +file, which is datafile.ext without its extension, or datafile if no extension is specified (in this +% +msgcmp - compare message catalog and template +msgcmp [OPTION] def.po ref.pot +Compare two Uniforum style .po files to check that both contain the same set of msgid strings. The +def.po file is an existing PO file with the translations. The ref.pot file is the last created PO file, +lated each and every message in your program. Where an exact match cannot be found, fuzzy matching is +used to produce better diagnostics. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +def.po translations +% +anacron - runs commands periodically +anacron [-s] [-f] [-n] [-d] [-q] [-t anacrontab] [-S spooldir] [job] +anacron [-S spooldir] -u [-t anacrontab] [job] +anacron [-V|-h] +anacron -T [-t anacrontab] +does not assume that the machine is running continuously. Hence, it can be used on machines that are not +contains the list of jobs that Anacron controls. Each job entry specifies a period in days, a delay in +minutes, a unique job identifier, and a shell command. +% +cut - remove sections from each line of files +cut OPTION... [FILE]... +Print selected parts of lines from each FILE to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --bytes=LIST +select only these bytes +-c, --characters=LIST +select only these characters +% +pactree - package dependency tree viewer +pactree [options] package +Pactree produces a dependency tree for a package. +By default, a tree-like output is generated, but with the --graph option, a Graphviz description is +generated. +-a, --ascii +Use ASCII characters for tree formatting. By default, pactree will use Unicode line drawing +characters if it is able to detect that the locale supports them. +-b, --dbpath +% +zic - timezone compiler +zic [ -v ] [ -d directory ] [ -l localtime ] [ -p posixrules ] [ -L leapsecondfilename ] [ -s ] [ -y com‐ +mand ] [ filename ... ] +Zic reads text from the file(s) named on the command line and creates the time conversion information +files specified in this input. If a filename is -, the standard input is read. +These options are available: +-d directory +Create time conversion information files in the named directory rather than in the standard direc‐ +tory named below. +-l timezone +% +sfdisk - display or manipulate a disk partition table +sfdisk [options] device [-N partition-number] +sfdisk [options] command +sfdisk is a script-oriented tool for partitioning any block device. +functionality for CHS (Cylinder-Head-Sector) addressing. CHS has never been important for Linux, and +this addressing concept does not make any sense for new devices. +tive sizes are specified, or when the default values are used. +% +groupmod - modify a group definition on the system +groupmod [options] GROUP +The groupmod command modifies the definition of the specified GROUP by modifying the appropriate entry in +the group database. +The options which apply to the groupmod command are: +-g, --gid GID +The group ID of the given GROUP will be changed to GID. +option is used. +% +lessecho - expand metacharacters +lessecho [-ox] [-cx] [-pn] [-dn] [-mx] [-nn] [-ex] [-a] file ... +lessecho is a program that simply echos its arguments on standard output. But any metacharacter in the +output is preceded by an "escape" character, which by default is a backslash. +A summary of options is included below. +-ex Specifies "x", rather than backslash, to be the escape char for metachars. If x is "-", no escape +char is used and arguments containing metachars are surrounded by quotes instead. +-ox Specifies "x", rather than double-quote, to be the open quote character, which is used if the -e- +option is specified. +% +mcookie - generate magic cookies for xauth +mcookie [options] +usage: +xauth add :0 . `mcookie` +the sources /dev/urandom, /dev/random, or the libc pseudo-random functions, in this preference order. +-f, --file file +Use this file as an additional source of randomness. When file is '-', characters are read from +% +haveged - Generate random numbers and feed linux random device. +haveged [options] +haveged generates an unpredictable stream of random numbers harvested from the indirect effects of hard‐ +ware events on hidden processor state (caches, branch predictors, memory translation tables, etc) using +the HAVEGE (HArdware Volatile Entropy Gathering and Expansion) algorithm. The algorithm operates in user +space, no special privilege is required for file system access to the output stream. +Linux pools randomness for distribution by the /dev/random and /dev/urandom device interfaces. The stan‐ +fill the /dev/random pool whenever the supply of random bits in /dev/random falls below the low water +mark of the device. +% +pluginviewer - list loadable SASL plugins and their properties +pluginviewer [-a] [-s] [-c] [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECHS] [-x AUXPROP_MECH] [-f FLAGS] +[-p PATH] +pluginviewer can be used by a server administrator to troubleshoot SASL installations. The utility can +list loadable (properly configured) client and server side plugins, as well as auxprop plugins. +-a List auxprop plugins. +-s List server authentication (SASL) plugins. +-c List client authentication (SASL) plugins. +% +date - print or set the system date and time +date [OPTION]... [+FORMAT] +date [-u|--utc|--universal] [MMDDhhmm[[CC]YY][.ss]] +Display the current time in the given FORMAT, or set the system date. +Mandatory arguments to long options are mandatory for short options too. +-d, --date=STRING +display time described by STRING, not 'now' +-f, --file=DATEFILE +like --date; once for each line of DATEFILE +% +uuidgen - create a new UUID value +uuidgen [options] +library. The new UUID can reasonably be considered unique among all UUIDs created on the local system, +and among UUIDs created on other systems in the past and in the future. +There are two types of UUIDs which uuidgen can generate: time-based UUIDs and random-based UUIDs. By +default uuidgen will generate a random-based UUID if a high-quality random number generator is present. +Otherwise, it will choose a time-based UUID. It is possible to force the generation of one of these two +UUID types by using the -r or -t options. +-r, --random +% +glib-mkenums - C language enum description generation utility +glib-mkenums [OPTION...] [FILE...] +glib-mkenums is a small perl-script utility that parses C code to extract enum definitions and produces +enum descriptions based on text templates specified by the user. Most frequently this script is used to +produce C code that contains enum values as strings so programs can provide value name strings for +introspection. +glib-mkenums takes a list of valid C code files as input. The options specified control the text that is +output, certain substitutions are performed on the text templates for keywords enclosed in @ characters. +Production text substitutions +Certain keywords enclosed in @ characters will be substituted in the emitted text. For the substitution +examples of the keywords below, the following example enum definition is assumed: +% +deallocvt - deallocate unused virtual consoles +deallocvt [N ...] +The command deallocvt deallocates kernel memory and data structures for all unused virtual consoles. If +one or more arguments N ... are given, only the corresponding consoles /dev/ttyN are deallocated. +A virtual console is unused if it is not the foreground console, and no process has it open for reading +or writing, and no text has been selected on its screen. +% +ssh-agent — authentication agent +ssh-agent [-c | -s] [-Dd] [-a bind_address] [-E fingerprint_hash] [-t life] [command [arg ...]] +ssh-agent [-c | -s] -k +ssh-agent is usually started in the beginning of an X-session or a login session, and all other windows or +programs are started as clients to the ssh-agent program. Through use of environment variables the agent +to query the keys that are held in one. +% +sum - checksum and count the blocks in a file +sum [OPTION]... [FILE]... +Print checksum and block counts for each FILE. +With no FILE, or when FILE is -, read standard input. +-s, --sysv +--help display this help and exit +% +cryptsetup-reencrypt - tool for offline LUKS device re-encryption +cryptsetup-reencrypt <options> <device> +Cryptsetup-reencrypt can be used to change reencryption parameters which otherwise require full on-disk +data change (re-encryption). +You can regenerate volume key (the real key used in on-disk encryption unclocked by passphrase), cipher, +cipher mode. +Cryptsetup-reencrypt reencrypts data on LUKS device in-place. During reencryption process the LUKS device +is marked unavailable. +WARNING: The cryptsetup-reencrypt program is not resistant to hardware or kernel failures during reen‐ +% +msgconv - character set conversion for message catalog +msgconv [OPTION] [INPUTFILE] +Converts a translation catalog to a different character encoding. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +partprobe - inform the OS of partition table changes +partprobe [-d] [-s] [devices...] +partprobe is a program that informs the operating system kernel of partition table changes. +-d, --dry-run +Don't update the kernel. +-s, --summary +% +loginctl - Control the systemd login manager +The following options are understood: +--no-ask-password +Do not query the user for authentication for privileged operations. +-p, --property= +When showing session/user/seat properties, limit display to certain properties as specified as +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +sntp - standard Simple Network Time Protocol client program +sntp [-flags] [-flag [value]] [--option-name[[=| ]value]] [ hostname-or-IP ...] +sntp can be used as an SNTP client to query a NTP or SNTP server and either display the time or set the +local system's time (given suitable privilege). It can be run as an interactive command or from a cron +job. NTP (the Network Time Protocol) and SNTP (the Simple Network Time Protocol) are defined and +The default is to write the estimated correct local date and time (i.e. not UTC) to the standard output +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +ngettext - translate message and choose plural form +ngettext [OPTION] [TEXTDOMAIN] MSGID MSGID-PLURAL COUNT +The ngettext program translates a natural language message into the user's language, by looking up the +translation in a message catalog, and chooses the appropriate plural form, which depends on the number +COUNT and the language of the message catalog where the translation was found. +Display native language translation of a textual message whose grammatical form depends on a number. +-d, --domain=TEXTDOMAIN +retrieve translated message from TEXTDOMAIN +-e enable expansion of some escape sequences +% +lastlog - reports the most recent login of all users or of a given user +lastlog [options] +lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, +port, and last login time will be printed. The default (no flags) causes lastlog entries to be printed, +sorted by their order in /etc/passwd. +The options which apply to the lastlog command are: +-b, --before DAYS +Print only lastlog records older than DAYS. +-C, --clear +% +lvresize — resize a logical volume +[-I|--stripesize StripeSize]] {-l|--extents [+|-]LogicalExtentsNumber[%{VG|LV|PVS|FREE|ORIGIN}] | +-L|--size [+|-]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [--poolmetadatasize [+]MetadataVolumeSize[bBsSkKm‐ +[PhysicalVolumePath[:PE[-PE]]...] +lvresize allows you to resize a logical volume. Be careful when reducing a logical volume's size, +because data in the reduced part is lost!!! You should therefore ensure that any filesystem on the vol‐ +ume is shrunk first so that the extents that are to be removed are not in use. Resizing snapshot logical +% +keyctl - Key management facility control +keyctl --version +keyctl show [-x] [<keyring>] +keyctl add <type> <desc> <data> <keyring> +keyctl padd <type> <desc> <keyring> +keyctl request <type> <desc> [<dest_keyring>] +keyctl update <key> <data> +keyctl pupdate <key> +keyctl newring <name> <keyring> +keyctl revoke <key> +keyctl clear <keyring> +keyctl link <key> <keyring> +keyctl unlink <key> [<keyring>] +% +capsh - capability shell wrapper +capsh [OPTION]... +handy wrapper for certain types of capability testing and environment creation. It also provides some +debugging features useful for summarizing capability state. +The tool takes a number of optional arguments, acting on them in the order they are provided. They are as +follows: +--print Display prevailing capability and related state. +% +systemd-firstboot, systemd-firstboot.service - Initialize basic system settings on or before the first +boot-up of a system +systemd-firstboot.service +systemd-firstboot initializes the most basic system settings interactively on the first boot, or +· The system locale, more specifically the two locale variables LANG= and LC_MESSAGES +· The system time zone +· The system host name +% +gettextize - install or upgrade gettext infrastructure +gettextize [OPTION]... [package-dir] +Prepares a source package to use gettext. +--help print this help and exit +--version +print version information and exit +-f, --force +force writing of new files even if old exist +% +lt-recode [OPTION]... [ [CHARSET] | REQUEST [FILE]... ] +Free `recode' converts files between various character sets and surfaces. +If a long option shows an argument as mandatory, then it is mandatory for the equivalent short option +also. Similarly for optional arguments. +Listings: +-l, --list[=FORMAT] +list one or all known charsets and aliases +-k, --known=PAIRS +restrict charsets according to known PAIRS list +% +elfedit - Update the ELF header of ELF files. +elfedit [--input-mach=machine] +[--input-type=type] +[--input-osabi=osabi] +--output-mach=machine +--output-type=type +--output-osabi=osabi +[-v|--version] +[-h|--help] +elffile... +elfedit updates the ELF header of ELF files which have the matching ELF machine and file types. The +options control how and which fields in the ELF header should be updated. +% +grub-fstest - debug tool for GRUB filesystem drivers +Debug tool for filesystem driver. +Commands: +blocklist FILE +Display blocklist of FILE. +cat FILE +Copy FILE to standard output. +cmp FILE LOCAL +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +ldns-config - show compiler and linker flags for ldns usage. +When writing programs using ldns, you have to tell the compiler where to look for include files and what +libraries from which location to link to. ldns-config can be used to find out what flags to use with the +C compiler and the linker. +--cflags +Show the C compiler flags needed to compile with ldns +--libs Show the flags to be used to link with ldns +--version +% +pmap - report memory map of a process +pmap [options] pid [...] +The pmap command reports the memory map of a process or processes. +-x, --extended +Show the extended format. +-d, --device +Show the device format. +-q, --quiet +Do not display some header or footer lines. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +dnssec-keymgr - Ensures correct DNSKEY coverage for a zone based on a defined policy +dnssec-keymgr [-K directory] [-c file] [-f] [-k] [-q] [-v] [-z] [-g path] [-r path] [-s path] [zone...] +dnssec-keymgr is a high level Python wrapper to facilitate the key rollover process for zones handled by +BIND. It uses the BIND commands for manipulating DNSSEC key metadata: dnssec-keygen and dnssec-settime. +DNSSEC policy can be read from a configuration file (default /etc/dnssec-policy.conf), from which the key +parameters, publication and rollover schedule, and desired coverage duration for any given zone can be +default policy used for all zones. +When dnssec-keymgr runs, it examines the DNSSEC keys for one or more zones, comparing their timing +metadata against the policies for those zones. If key settings do not conform to the DNSSEC policy (for +example, because the policy has been changed), they are automatically corrected. +% +apropos - search the manual page names and descriptions +apropos [-dalv?V] [-e|-w|-r] [-s list] [-m system[,...]] [-M path] [-L locale] [-C file] keyword ... +Each manual page has a short description available within it. apropos searches the descriptions for +instances of keyword. +cial characters to stop the shell from interpreting them. +The standard matching rules allow matches to be made against the page name and word boundaries in the +description. +The database searched by apropos is updated by the mandb program. Depending on your installation, this +% +dbus-binding-tool - C language GLib bindings generation utility. +dbus-binding-tool [--force] [--help] [--ignore-unsupported] [--mode=pretty|glib-client|glib-server] +[--output=file] [--prefix=symbol-prefix] [--version] [file...] +dbus-binding-tool is used to expose a GObject via D-Bus. As input, dbus-binding-tool uses a D-Bus Intro‐ +header file which eases the use of a remote D-Bus object. Output is sent to standard out or to the file‐ +name specified with the --output argument. +The following is a sample D-Bus Introspection XML file which describes an object that exposes one method, +named ManyArgs: +% +readprofile - read kernel profiling information +readprofile [options] +The readprofile command uses the /proc/profile information to print ascii data on standard output. The +output is organized in three columns: the first is the number of clock ticks, the second is the name of +the C function in the kernel where those many ticks occurred, and the third is the normalized `load' of +the procedure, calculated as a ratio between the number of ticks and the length of the procedure. The +output is filled with blanks to ease readability. +-a, --all +% +rsync - a fast, versatile, remote (and local) file-copying tool +Access via remote shell: +Pull: rsync [OPTION...] [USER@]HOST:SRC... [DEST] +Push: rsync [OPTION...] SRC... [USER@]HOST:DEST +Access via rsync daemon: +Pull: rsync [OPTION...] [USER@]HOST::SRC... [DEST] +rsync [OPTION...] rsync://[USER@]HOST[:PORT]/SRC... [DEST] +Push: rsync [OPTION...] SRC... [USER@]HOST::DEST +rsync [OPTION...] SRC... rsync://[USER@]HOST[:PORT]/DEST +% +clockdiff - measure clock difference between hosts +-o Use IP TIMESTAMP with ICMP ECHO instead of ICMP TIMESTAMP messages. It is useful with some desti‐ +dresses instead of four term one. What flavor works better depends on target host. Particularly, +-o is better for Linux. +% +vgscan — scan all disks for volume groups and rebuild caches +[--notifydbus] [-P|--partial] [--reportformat {basic|json}] [-v|--verbose] +vgscan scans all SCSI, (E)IDE disks, multiple devices and a bunch of other disk devices in the system +to avoid a CD ROM, for example. +hardware. +% +delv - DNS lookup and validation utility +[-q name] [-t type] [-x addr] [name] [type] [class] [queryopt...] +delv [-h] +delv [-v] +delv [queryopt...] [query...] +delv (Domain Entity Lookup & Validation) is a tool for sending DNS queries and validating the results, +using the same internal resolver and validator logic as named. +delv will send to a specified name server all queries needed to fetch and validate the requested data; +% +pscap - a program to see capabilities +pscap [ -a ] +pscap is a program that prints out a report of process capabilities. If the application has any capabili‐ +ties, it will be in the report with the exception of init. By giving the -a command line option, init +will be included, too. If a process is not in the report, it has dropped all capabilities. If the process +has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is +found to be true, a '+' symbol is added. +Steve Grubb +% +dirname - strip last component from file name +output '.' (meaning the current directory). +-z, --zero +end each output line with NUL, not newline +--help display this help and exit +--version +output version information and exit +% +zcmp, zdiff - compare compressed files +Zcmp and zdiff are used to invoke the cmp or the diff program on files compressed via gzip. All options +fed to cmp or diff. The input files are not modified. The exit status from cmp or diff is preserved. +BUGS +% +named-journalprint - print zone journal in human-readable form +named-journalprint {journal} +named-journalprint prints the contents of a zone journal file in a human-readable form. +Journal files are automatically created by named when changes are made to dynamic zones (e.g., by +nsupdate). They record each addition or deletion of a resource record, in binary format, allowing the +changes to be re-applied to the zone when the server is restarted after a shutdown or crash. By default, +the name of the journal file is formed by appending the extension .jnl to the name of the corresponding +zone file. +named-journalprint converts the contents of a given journal file into a human-readable text format. Each +line begins with "add" or "del", to indicate whether the record was added or deleted, and continues with +the resource record in master-file format. +% +debugreiserfs - The debugging tool for the ReiserFS filesystem. +device +debugreiserfs sometimes helps to solve problems with reiserfs filesystems. When run without options it +prints the super block of the ReiserFS filesystem found on the device. +device is the special file corresponding to the device (e.g /dev/hdXX for an IDE disk partition or +/dev/sdXX for a SCSI disk partition). +-j device +prints the contents of the journal. The option -p allows it to pack the journal with other meta‐ +% +thin_metadata_size - thin provisioning metadata device/file size calculator. +thin_metadata_size [options] +thin_metadata_size calculates the size of the thin provisioning metadata based on the block size of the +thin provisioned devices, the size of the thin provisioning pool and the maximum number of all thin pri‐ +sioned devices and snapshots. Because thin provisioning pools are holding widely variable contents, this +tool is needed to provide sensible initial default size. +-b, --block-size BLOCKSIZE[bskKmMgGtTpPeEzZyY] +Block size of thin provisioned devices in units of bytes, sectors, kibibytes, kilobytes, ... +respectively. Default is in sectors without a block size unit specifier. Size/number option +% +findmnt - find a filesystem +findmnt [options] +findmnt [options] device|mountpoint +findmnt [options] [--source] device [--target|--mountpoint] mountpoint +findmnt will list all mounted filesytems or search for a filesystem. The findmnt command is able to +search in /etc/fstab, /etc/mtab or /proc/self/mountinfo. If device or mountpoint is not given, all +filesystems are shown. +mountpoint (and vice versa) if the --target, --mountpoint or --source options are not specified. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +last, lastb - show a listing of last logged in users +last [options] [username...] [tty...] +lastb [options] [username...] [tty...] +last searches back through the /var/log/wtmp file (or the file designated by the -f option) and displays +a list of all users logged in (and out) since that file was created. One or more usernames and/or ttys +be abbreviated, thus last 0 is the same as last tty0. +When catching a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal, +terminate. +The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all +% +ethtool - query or control network driver and hardware settings +ethtool devname +ethtool -h|--help +ethtool --version +ethtool -a|--show-pause devname +ethtool -A|--pause devname [autoneg on|off] [rx on|off] [tx on|off] +ethtool -c|--show-coalesce devname +ethtool -C|--coalesce devname [adaptive-rx on|off] [adaptive-tx on|off] [rx-usecs N] [rx-frames N] +[rx-usecs-irq N] [rx-frames-irq N] [tx-usecs N] [tx-frames N] [tx-usecs-irq N] [tx-frames-irq N] +% +groupmems - administer members of a user's primary group +groupmems -a user_name | -d user_name | [-g group_name] | -l | -p +The groupmems command allows a user to administer his/her own group membership list without the +requirement of superuser privileges. The groupmems utility is for systems that configure its users to be +in their own name sake primary group (i.e., guest / guest). +Only the superuser, as administrator, can use groupmems to alter the memberships of other groups. +The options which apply to the groupmems command are: +-a, --add user_name +Add a user to the group membership list. +% +decoded structures. +-b, --benchmark +perform a benchmark on decoding +-s, --strict +use strict DER decoding +-h, --help +display this help and exit +% +mkfs.xfs - construct an XFS filesystem +mkfs.xfs [ -b block_size ] [ -m global_metadata_options ] [ -d data_section_options ] [ -f ] [ -i +inode_options ] [ -l log_section_options ] [ -n naming_options ] [ -p protofile ] [ -q ] [ -r real‐ +time_section_options ] [ -s sector_size ] [ -L label ] [ -N ] [ -K ] device +mkfs.xfs -V +mkfs.xfs constructs an XFS filesystem by writing on a special file using the values found in the argu‐ +In its simplest (and most commonly used form), the size of the filesystem is determined from the disk +driver. As an example, to make a filesystem with an internal log on the first partition on the first +SCSI disk, use: +% +new_inode_size ] [ -j ] [ -J journal-options ] [ -m reserved-blocks-percentage ] [ -o [^]mount- +options[,...] ] [ -p mmp_update_interval ] [ -r reserved-blocks-count ] [ -s sparse-super-flag ] [ -u +user ] [ -g group ] [ -C mount-count ] [ -E extended-options ] [ -L volume-name ] [ -M last-mounted- +directory ] [ -O [^]feature[,...] ] [ -Q quota-options ] [ -T time-last-checked ] [ -U UUID ] [ -z +undo_file ] device +% +lsusb - list USB devices +lsusb [ options ] +lsusb is a utility for displaying information about USB buses in the system and the devices connected to +them. +-v, --verbose +configuration descriptors for the device's current speed. Class descriptors will be shown, when +available, for USB device classes including hub, audio, HID, communications, and chipcard. +-s [[bus]:][devnum] +% +cpio — copy files to and from archives +cpio -i [options] [pattern ...] [< archive] +cpio -o [options] < name-list [> archive] +cpio -p [options] dest-dir < name-list +zip, jar, ar, and ISO 9660 cdrom images and can create tar, pax, cpio, ar, and shar archives. +The first option to cpio is a mode indicator from the following list: +-i Input. Read an archive from standard input (unless overridden) and extract the contents to disk or +(if the -t option is specified) list the contents to standard output. If one or more file patterns +are specified, only files matching one of the patterns will be extracted. +-o Output. Read a list of filenames from standard input and produce a new archive on standard output +(unless overridden) containing the specified items. +% +systemd, init - systemd system and service manager +systemd is a system and service manager for Linux operating systems. When run as first process on boot +telinit and pass all command line arguments unmodified. That means init and telinit are mostly equivalent +When run as a system instance, systemd interprets the configuration file system.conf and the files in +system.conf.d directories; when run as a user instance, systemd interprets the configuration file +% +nstat, rtacct - network statistics tools. +nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics. +-h, --help Print help +-V, --version +Print version +-z, --zero +Dump zero counters too. By default they are not shown. +% +autoscan - Generate a preliminary configure.in +autoscan [OPTION]... [SRCDIR] +Examine source files in the directory tree rooted at SRCDIR, or the current directory if none is given. +Search the source files for common portability problems, check for incompleteness of `configure.ac', and +create a file `configure.scan' which is a preliminary `configure.ac' for that package. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +vgchange — change attributes of a volume group +vgchange [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-a|--activate [a|e|s|l] +{y|n}] [--activationmode {complete|degraded|partial}] [-K|--ignoreactivationskip] [--monitor {y|n}] +Tag] [--detachprofile] [-h|--help] [--ignorelockingfailure] [--ignoremonitoring] [--ignoreskippedcluster] +[--sysinit] [--noudevsync] [--lock-start] [--lock-stop] [--lock-type LockType] [-l|--logicalvolume Max‐ +datacopies NumberOfCopies|unmanaged|all] [-P|--partial] [-s|--physicalextentsize PhysicalExtent‐ +Size[bBsSkKmMgGtTpPeE]] [--reportformat {basic|json}] [-S|--select Selection] [--systemid SystemID] +vgchange allows you to change the attributes of one or more volume groups. Its main purpose is to acti‐ +groups are subject to changes and allow access to their logical volumes. [Not yet implemented: During +% +systemd-run - Run programs in transient scope or service or timer units +If a command is run as transient service unit, it will be started and managed by the service manager like +any other service, and thus shows up in the output of systemctl list-units like any other unit. It will +run in a clean and detached execution environment, with the service manager as its parent process. In +this mode, systemd-run will start the service asynchronously in the background and return after the +command has begun execution. +% +netcat - GNU Netcat Manual +netcat [options] hostname port [port] ... +netcat -l -p port [options] [hostname] [port] ... +netcat -L hostname:port -p port [options] ... +Netcat is a simple Unix utility which reads and writes data across network connections, using TCP or UDP +protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by +other programs and scripts. At the same time, it is a feature-rich network debugging and exploration +tool, since it can create almost any kind of connection you would need and has several interesting built- +in capabilities. Netcat, or "nc" as the original program was named, should have been supplied long ago +as another one of those cryptic but standard Unix tools. +% +telnet - User interface to TELNET +telnet [OPTION...] [HOST [PORT]] +Login to remote system HOST (optionally, on service port PORT) +General options: +-6, --ipv6 +use only IPv6 +% +If the output filename is present, the output is written there. If it is - or absent the output is writ‐ +ten to the standard output. +the BUGS section below. +% +grub-mkconfig - generate a GRUB configuration file +grub-mkconfig [OPTION] +Generate a grub config file +-o, --output=FILE +output generated config to FILE [default=stdout] +-h, --help +print this message and exit +-v, --version +print the version information and exit +% +arpd - userspace arp daemon. +rate ] [ <INTERFACES> ] +The arpd daemon collects gratuitous ARP information, saving it on local disk and feeding it to the kernel +on demand to avoid redundant broadcasting due to limited size of the kernel ARP cache. +-h -? Print help +-l Dump the arpd database to stdout and exit. The output consists of three columns: the interface +index, the IP address of the interface, and the MAC address of the interface. Negative entries for +a colon and the most recent time when the fact that the host is dead was proven. +% +soelim - interpret .so requests in groff input +soelim [-Crtv] [-I dir] [files ...] +It is possible to have whitespace between the -I command line option and its parameter. +soelim reads files and replaces lines of the form +.so file +by the contents of file. It is useful if files included with .so need to be preprocessed. Normally, +soelim should be invoked with the -s option of groff. +To embed ‘\’ in the file name, write ‘\\’ or ‘\e’. To embed a space, write ‘\ ’. Any other escape +sequence in file makes soelim ignore the whole line. +% +gpg-error-config - Script to get information about the installed version of libgpg-error +gpg-error-config [options] +gpg-error-config is a tool that is used to configure to determine the compiler and linker flags that +macros for GNU autoconf that are included with Libgpg-error. +gpg-error-config accepts the following options: +--mt Provide output appropriate for multithreaded programs. --mt is only useful when combined with +other options, and must be the first option if present. +--version +% +autoupdate - Update a configure.in to a newer Autoconf +autoupdate [OPTION]... [TEMPLATE-FILE]... +Update each TEMPLATE-FILE if given, or `configure.ac' if present, or else `configure.in', to the syntax +of the current version of Autoconf. The original files are backed up. +Operation modes: +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +ldns-verify-zone - read a DNSSEC signed zone and verify it. +ldns-verify-zone ZONEFILE +ldns-verify-zone reads a DNS zone file and verifies it. +RRSIG resource records are checked against the DNSKEY set at the zone apex. +-h Show usage and exit +-a Apex only, check only the zone apex +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +info - read Info documents +info [OPTION]... [MENU-ITEM...] +Read documentation in Info format. +-a, --all +use all matching manuals. +-k, --apropos=STRING +look up STRING in all indices of all manuals. +-d, --directory=DIR +add DIR to INFOPATH. +% +netstat - Print network connections, routing tables, interface statistics, masquerade connections, and +multicast memberships +[--rfcomm|-f] [--listening|-l] [--all|-a] [--numeric|-n] [--numeric-hosts] [--numeric-ports] +[--numeric-users] [--symbolic|-N] [--extend|-e[--extend|-e]] [--timers|-o] [--program|-p] [--verbose|-v] +[--continuous|-c] [--wide|-W] +netstat {--route|-r} [address_family_options] [--extend|-e[--extend|-e]] [--verbose|-v] [--numeric|-n] +[--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] +netstat {--interfaces|-i} [--all|-a] [--extend|-e[--extend|-e]] [--verbose|-v] [--program|-p] +[--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] +netstat {--groups|-g} [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continu‐ +ous|-c] +% +ldns-zcat - reunite (z)split up a zone files +ldns-zcat zonefiles +ldns-zcat will read in a bunch of (z)split up zonefiles and creates a new larger zone file. The SOA +record in the first part is used as the SOA record in the generated zone. +The resulted zone file is printed to standard output. +-o ORIGIN +use ORIGIN when reading in the zone +-v show the version number and exit +% +chem - groff preprocessor for producing chemical structure diagrams +chem [option ....] [--] [filespec ....] +chem -h | --help +chem -v | --version +There are no other options than -h, --help, -v, and --version; these options provoke the printing of a +version or usage information, respectively, and all filespec arguments are ignored. A filespec argument +is either a file name of an existing file or a minus character -, meaning standard input. If no argument +is specified then standard input is taken automatically. +chem produces chemical structure diagrams. Today's version is best suited for organic chemistry (bonds, +% +seq - print a sequence of numbers +seq [OPTION]... LAST +seq [OPTION]... FIRST LAST +seq [OPTION]... FIRST INCREMENT LAST +Print numbers from FIRST to LAST, in steps of INCREMENT. +Mandatory arguments to long options are mandatory for short options too. +-f, --format=FORMAT +use printf style floating-point FORMAT +-s, --separator=STRING +use STRING to separate numbers (default: \n) +% +groups - display current group names +groups [user] +The groups command displays the current group names or ID values. If the value does not have a +corresponding entry in /etc/group, the value will be displayed as the numerical group value. The optional +user parameter will display the groups for the named user. +Systems which do not support concurrent group sets will have the information from /etc/group reported. +The user must use newgrp or sg to change his current real and effective group ID. +FILES +/etc/group +Group account information. +% +ifconfig - configure a network interface +ifconfig [-v] [-a] [-s] [interface] +ifconfig [-v] interface [aftype] options | address ... +Ifconfig is used to configure the kernel-resident network interfaces. It is used at boot time to set up +interfaces as necessary. After that, it is usually only needed when debugging or when system tuning is +needed. +If no arguments are given, ifconfig displays the status of the currently active interfaces. If a single +interface argument is given, it displays the status of the given interface only; if a single -a argument +is given, it displays the status of all interfaces, even those that are down. Otherwise, it configures +an interface. +Address Families +% +vgdisplay — display attributes of volume groups +{basic|json}] [-s|--short] [-S|--select Selection] [-v|--verbose] [-d|--debug] [-h|--help] [--ignorelock‐ +ingfailure] [--ignoreskippedcluster] [--nosuffix] [-P|--partial] [--units hHbBsSkKmMgGtTpPeE] [--version] +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--noheadings] +[--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--separator Separator] [--unbuffered] [--units +with it's physical and logical volumes and their sizes etc. +% +dnssec-dsfromkey - DNSSEC DS RR generation tool +[-A] [-v level] {dnsname} +dnssec-dsfromkey [-h] [-V] +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +ftpd - File Transfer Protocol server. +ftpd [OPTION...] +File Transfer Protocol daemon. +-6, --ipv6 +restrict daemon to IPv6 +-a, --auth=AUTH +use AUTH for authentication +% +col - filter reverse line feeds from input +col [options] +col filters out reverse (and half-reverse) line feeds so the output is in the correct order, with only +forward and half-forward line feeds. It also replaces any whitespace characters with tabs where possi‐ +col reads from standard input and writes to standard output. +-b, --no-backspaces +Do not output any backspaces, printing only the last character written to each column position. +-f, --fine +% +unhide — forensic tool to find hidden processes +unhide-posix proc | sys +unhide is a forensic tool to find processes hidden by rootkits, Linux kernel modules or by other tech‐ +niques. It detects hidden processes using six techniques. +Options are only available for unhide-linux not for unhide-posix. +-d Do a double check in brute test to avoid false positive. +-f Write a log file (unhide-linux.log) in the current directory. +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +route - show / manipulate the IP routing table +[irtt I] [reject] [mod] [dyn] [reinstate] [[dev] If] +route [-V] [--version] [-h] [--help] +Route manipulates the kernel's IP routing tables. Its primary use is to set up static routes to specific +When the add or del options are used, route modifies the routing tables. Without these options, route +% +setfont - load EGA/VGA console screen font +setfont [-O font+umap.orig] [-o font.orig] [-om cmap.orig] [-ou umap.orig] [-N] [font.new ...] [-m cmap] +[-u umap] [-C console] [-hH] [-v] [-V] +The setfont command reads a font from the file font.new and loads it into the EGA/VGA character genera‐ +tor, and optionally outputs the previous font. It can also load various mapping tables and output the +previous versions. +and load the union. Typical use: +setfont +Load a default font. +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +flock - manage locks from shell scripts +flock [options] file|directory command [arguments] +flock [options] file|directory -c command +flock [options] number +The first and second of the above forms wrap the lock around the execution of a command, in a manner sim‐ +priate permissions) if it does not already exist. By default, if the lock cannot be immediately +acquired, flock waits until the lock is available. +The third form uses an open file by its file descriptor number. See the examples below for how that can +be used. +% +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --decode +decode data +-i, --ignore-garbage +when decoding, ignore non-alphabet characters +% +Mandatory arguments to long options are mandatory for short options too. +-c, --check +checks the syntax only +-o, --output=FILE +output file +% +infotocap - convert a terminfo description into a termcap description +infotocap looks in each given text file for terminfo descriptions. For each terminfo description found, +an equivalent termcap description is written to standard output. Terminfo use capabilities are trans‐ +lated directly to termcap tc capabilities. +-v print out tracing information on standard error as the program runs. +-V print out the version of the program in use on standard error and exit. +line to a maximum width of 60 characters. +% +setfattr - set extended attributes of filesystem objects +setfattr [-h] -n name [-v value] pathname... +setfattr [-h] -x name pathname... +setfattr [-h] --restore=file +The setfattr command associates a new value with an extended attribute name for each specified file. +-n name, --name=name +Specifies the name of the extended attribute to set. +-v value, --value=value +Specifies the new value of the extended attribute. There are three methods available for encoding the +value. If the given string is enclosed in double quotes, the inner string is treated as text. In +% +kadmind [-x db_args] [-r realm] [-m] [-nofork] [-proponly] [-port port-number] [-P pid_file] [-p +kadmind starts the Kerberos administration server. kadmind typically runs on the master Kerberos server, +which stores the KDC database. If the KDC database uses the LDAP module, the administration server and +the KDC server need not run on the same machine. kadmind accepts remote requests from programs such as +kadmind requires a number of configuration files to be set up in order for it to work: +The KDC configuration file contains configuration information for the KDC and admin servers. kad‐ +mind uses settings in this file to locate the Kerberos database, and is also affected by the +% +btrfs-check - check or repair an unmounted btrfs filesystem +btrfs check [options] <device> +The filesystem checker is used to verify structural integrity of a filesystem and attempt to repair it if +requested. The filesystem must be unmounted. +By default, btrfs check will not modify the device but you can reaffirm that by the option --readonly. +btrfsck is an alias of btrfs check command and is now deprecated. +Warning +Do not use --repair unless you are advised to by a developer, an experienced user or accept the fact +that fsck cannot possibly fix all sorts of damage that could happen to a filesystem because of +software and hardware bugs. +% +lsinitcpio - Examine an initramfs +lsinitcpio [action] [options] image +Examines the contents of an initcpio image. Without any options, lsinitcpio simply lists the contents of +an image. +ACTIONS +-a, --analyze +Analyze the contents of the specified image and print output in human readable form. +-c, --config +Show the configuration file the given image was built with. +-l, --list +% +eject - eject removable media +eject [options] device|mountpoint +eject allows removable media (typically a CD-ROM, floppy disk, tape, JAZ, ZIP or USB disk) to be ejected +under software control. The command can also control some multi-disc CD-ROM changers, the auto-eject +feature supported by some devices, and close the disc tray of some CD-ROM drives. +The device corresponding to device or mountpoint is ejected. If no name is specified, the default name +'/dev/sda'), UUID=uuid or LABEL=label tags. +There are four different methods of ejecting, depending on whether the device is a CD-ROM, SCSI device, +removable floppy, or tape. By default eject tries all four methods in order until it succeeds. +% +clear - clear the terminal screen +clear +bility is defined). clear looks in the environment for the terminal type and then in the terminfo data‐ +base to determine how to clear the screen. +% +rsh - Remote shell client +remote shell +-6, --ipv6 +use only IPv6 +allows an eight-bit input data path at all times +% +crontab - maintains crontab files for individual users +crontab [-u user] file +crontab [-u user] [-l | -r | -e] [-i] [-s] +crontab -n [ hostname ] +crontab -c +Crontab is the program used to install a crontab table file, remove or list the existing tables used to +/var/spool/, they are not intended to be edited directly. For SELinux in MLS mode, you can define more +In this version of Cron it is possible to use a network-mounted shared /var/spool/cron across a cluster +of hosts and specify that only one of the hosts should run the crontab jobs in the particular directory +% +netctl-auto - Control automatic selection of wireless netctl profiles +netctl-auto [--help | --version] +netctl-auto@.service file. See netctl.special(7) for details about the service file. +The following commands are understood: +list +List all profiles which are currently available for automatic selection. Active profiles will be +marked with a ‘*’, disabled profiles will be marked with a ‘!’. +% +setfacl - set file access control lists +setfacl [-bkndRLPvh] [{-m|-x} acl_spec] [{-M|-X} acl_file] file ... +setfacl --restore=file +of commands is followed by a sequence of files (which in turn can be followed by another sequence of com‐ +mands, ...). +The options -m, and -x expect an ACL on the command line. Multiple ACL entries are separated by comma +characters (`,'). The options -M, and -X read an ACL from a file or from standard input. The ACL entry +format is described in Section ACL ENTRIES. +The --set and --set-file options set the ACL of a file or a directory. The previous ACL is replaced. ACL +% +mkreiserfs - The create tool for the Linux ReiserFS filesystem. +mkreiserfs [ -dfV ] [ -b | --block-size N ] [ -h | --hash HASH ] [ -u | --uuid UUID ] [ -l | --label +LABEL ] [ --format FORMAT ] [ -q | --quiet ] [ -j | --journal-device FILE ] [ -s | --journal-size N ] [ +-o | --journal-offset N ] [ -t | --transaction-max-size N ] [ -B | --badblocks file ] device [ filesys‐ +tem-size ] +mkreiserfs creates a Linux ReiserFS filesystem on a device (usually a disk partition). +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +filesystem-size +is the size in blocks of the filesystem. If omitted, mkreiserfs will automatically set it. +% +jfs_debugfs - shell-type JFS file system editor +jfs_debugfs device +jfs_debugfs is a program which can be used to perform various low-level actions on a JFS formatted +device. +jfs_debugfs must be run as root. +a[lter] <block> <offset> <hex_string> +replaces the data located at the <offset> of <block> with <hex_string> +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +gnutls-cli-debug - GnuTLS debug client +gnutls-cli-debug [-flags] [-flag [value]] [--option-name[[=| ]value]] +TLS debug client. It sets up multiple TLS connections to a server and queries its capabilities. It was +created to assist in debugging GnuTLS, but it might be useful to extract a TLS server's capabilities. It +connects to a TLS server, performs tests and print the server's capabilities. If called with the `-v' +parameter more checks will be performed. Can be used to check for servers with special needs or bugs. +-d number, --debug=number +constrained to being: +% +tty - print the file name of the terminal connected to standard input +tty [OPTION]... +Print the file name of the terminal connected to standard input. +-s, --silent, --quiet +print nothing, only return an exit status +--help display this help and exit +--version +output version information and exit +% +csplit - split a file into sections determined by context lines +csplit [OPTION]... FILE PATTERN... +each piece to standard output. +Read standard input if FILE is - +Mandatory arguments to long options are mandatory for short options too. +-b, --suffix-format=FORMAT +-f, --prefix=PREFIX +% +systemd-cgtop - Show top control groups by their resource usage +systemd-cgtop shows the top control groups of the local Linux control group hierarchy, ordered by their +specified control group. +If systemd-cgtop is not connected to a tty, no column headers are printed and the default is to only run +Resource usage is only accounted for control groups in the relevant hierarchy, i.e. CPU usage is only +accounted for control groups in the "cpuacct" hierarchy, memory usage only for those in "memory" and disk +I/O usage for those in "blkio". If resource monitoring for these resources is required, it is recommended +% +tload - graphic representation of system load average +tload [options] [tty] +tload prints a graph of the current system load average to the specified tty (or the tty of the tload +process if none is specified). +-s, --scale number +The scale option allows a vertical scale to be specified for the display (in characters between +graph ticks); thus, a smaller value represents a larger scale, and vice versa. +-d, --delay seconds +The delay sets the delay between graph updates in seconds. +% +firewallctl - firewalld command line client +firewallctl is an alternate command line client of the firewalld daemon. It provides interface to manage +runtime and permanent configuration. +things can get changed in the runtime or permanent configuration. +The following options are supported: +General Options +-h, --help +% +jfs_fsck - initiate replay of the JFS transaction log, and check and repair a JFS formatted device +jfs_fsck [ -afnpvV ] [ -j journal_device ] [ --omit_journal_replay ] [ --replay_journal_only ] device +jfs_fsck is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any +errors found. +jfs_fsck must be run as root. +WARNING +jfs_fsck should only be used to check an unmounted file system or a file system that is mounted READ +ONLY. Using jfs_fsck to check a file system mounted other than READ ONLY could seriously damage the file +system! +% +pidof -- find the process ID of a running program. +pidof [-s] [-c] [-x] [-o omitpid[,omitpid..]] [-o omitpid[,omitpid..]..] program [program..] +Pidof finds the process id's (pids) of the named programs. It prints those id's on the standard output. +-s Single shot - this instructs the program to only return one pid. +non-root users, as they will be unable to check the current root directory of processes they do +not own. +-x Scripts too - this causes the program to also return process id's of shells running the named +scripts. +% +fdformat - low-level format a floppy disk +fdformat [options] device +fdformat does a low-level format on a floppy disk. device is usually one of the following (for floppy +% +tipc - a TIPC configuration and management tool +The Transparent Inter-Process Communication (TIPC) protocol offers total address transparency between +processes which allows applications in a clustered computer environment to communicate quickly and reli‐ +ably with each other, regardless of their location within the cluster. +TIPC originated at the telecommunications manufacturer Ericsson. The first open source version of TIPC +% +install-info - update info/dir entries +install-info [OPTION]... [INFO-FILE [DIR-FILE]] +Add or remove entries in INFO-FILE from the Info directory DIR-FILE. INFO-FILE and DIR-FILE are required +unless the --info-file or --dir-file (or --info-dir) options are given, respectively. +--add-once +add only to first matching section, not all. +--align=COL +start description of new entries at column COL. +--calign=COL +% +busctl - Introspect the bus +The following options are understood: +--address=ADDRESS +Connect to the bus specified by ADDRESS instead of using suitable defaults for either the system or +user bus (see --system and --user options). +--show-machine +When showing the list of peers, show a column containing the names of containers they belong to. See +% +make - GNU make utility to maintain groups of programs +make [OPTION]... [TARGET]... +The make utility will determine automatically which pieces of a large program need to be recompiled, and +issue the commands to recompile them. The manual describes the GNU implementation of make, which was +written by Richard Stallman and Roland McGrath, and is currently maintained by Paul Smith. Our examples +show C programs, since they are very common, but you can use make with any programming language whose +compiler can be run with a shell command. In fact, make is not limited to programs. You can use it to +describe any task where some files must be updated automatically from others whenever the others change. +To prepare to use make, you must write a file called the makefile that describes the relationships among +files in your program, and the states the commands for updating each file. In a program, typically the +executable file is updated from object files, which are in turn made by compiling source files. +% +mknod - make block or character special files +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file permission bits to MODE, not a=rw - umask +-Z set the SELinux security context to default type +--context[=CTX] +like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX +% +lsmod - Show the status of modules in the Linux Kernel +lsmod +lsmod is a trivial program which nicely formats the contents of the /proc/modules, showing what kernel +modules are currently loaded. +others. +% +fsfreeze --freeze|--unfreeze mountpoint +fsfreeze suspends or resumes access to a filesystem. +fsfreeze halts any new access to the filesystem and creates a stable image on disk. fsfreeze is intended +to be used with hardware RAID devices that support the creation of snapshots. +fsfreeze is unnecessary for device-mapper devices. The device-mapper (and LVM) automatically freezes a +page. +The mountpoint argument is the pathname of the directory where the filesystem is mounted. The filesystem +% +klist - list cached Kerberos tickets +klist [-e] [[-c] [-l] [-A] [-f] [-s] [-a [-n]]] [-C] [-k [-t] [-K]] [-V] [cache_name|keytab_name] +klist lists the Kerberos principal and Kerberos tickets held in a credentials cache, or the keys held in +a keytab file. +-e Displays the encryption types of the session key and the ticket for each credential in the creden‐ +tial cache, or each key in the keytab file. +-l If a cache collection is available, displays a table summarizing the caches present in the collec‐ +tion. +-A If a cache collection is available, displays the contents of all of the caches in the collection. +% +pdfmom - Produce PDF documents using the mom macro set +pdfmom [-Tps [pdfroff options]] [groff options] files ... +pdfmom [-Tpdf] [groff options] files ... +pdfmom is a wrapper around groff that facilitates the production of PDF documents from files formatted +with the mom macros. +pdfmom prints to stdout, so output must be redirected to a destination file. The size of the final PDF +If called with the -Tpdf option (which is the default), pdfmom processes files using groff's native PDF +driver, gropdf. If -Tps is given, processing is passed over to pdfroff, which uses groff's PostScript +% +uname - print system information +uname [OPTION]... +Print certain system information. With no OPTION, same as -s. +-a, --all +print all information, in the following order, except omit -p and -i if unknown: +-s, --kernel-name +print the kernel name +-n, --nodename +print the network node hostname +% +printenv - print all or part of environment +printenv [OPTION]... [VARIABLE]... +Print the values of the specified environment VARIABLE(s). If no VARIABLE is specified, print name and +value pairs for them all. +-0, --null +end each output line with NUL, not newline +--help display this help and exit +--version +output version information and exit +% +ipcmk - make various IPC resources +ipcmk [options] +ipcmk allows you to create shared memory segments, message queues, and semaphore arrays. +Resources can be specified with these options: +-M, --shmem size +for GB, etc. +% +mkdir - make directories +mkdir [OPTION]... DIRECTORY... +Create the DIRECTORY(ies), if they do not already exist. +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file mode (as in chmod), not a=rwx - umask +-p, --parents +no error if existing, make parent directories as needed +-v, --verbose +% +mkfifo - make FIFOs (named pipes) +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file permission bits to MODE, not a=rw - umask +-Z set the SELinux security context to default type +--context[=CTX] +like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX +% +genrandom - generate a file containing random data +genrandom [-n number] {size} {filename} +genrandom generates a file or a set of files containing a specified quantity of pseudo-random data, which +can be used as a source of entropy for other commands on systems with no random device. +-n number +size +The size of the file, in kilobytes, to generate. +filename +% +mount - mount a filesystem +mount [-l|-h|-V] +mount -a [-fFnrsvw] [-t fstype] [-O optlist] +mount [-fnrsvw] [-o options] device|dir +mount [-fnrsvw] [-t fstype] [-o options] device dir +All files accessible in a Unix system are arranged in one big tree, the file hierarchy, rooted at /. +These files can be spread out over several devices. The mount command serves to attach the filesystem +The standard form of the mount command is: +% +gpg-agent - Secret key management for GnuPG +gpg-agent [--homedir dir] [--options file] [options] +gpg-agent [--homedir dir] [--options file] [options] --server +gpg-agent [--homedir dir] [--options file] [options] --daemon [command_line] +gpg-agent is a daemon to manage secret (private) keys independently from any protocol. It is used as a +backend for gpg and gpgsm as well as for a couple of other utilities. +The agent is automatically started on demand by gpg, gpgsm, gpgconf, or gpg-connect-agent. Thus there is +the agent using: +gpg-connect-agent /bye +% +xfs_admin - change parameters of an XFS filesystem +xfs_admin -V +Devices that are mounted cannot be modified. Administrators must unmount filesystems before xfs_admin or +-e Enables unwritten extent support on a filesystem that does not already have this enabled (for +legacy filesystems, it can't be disabled anymore at mkfs time). +% +uncompress — expand compressed data +uncompress [−cfv] [file...] +The uncompress utility shall restore files to their original state after they have been compressed using +the compress utility. If no files are specified, the standard input shall be uncompressed to the standard +output. If the invoking process has appropriate privileges, the ownership, modes, access time, and modi‐ +fication time of the original file shall be preserved. +% +gdbus - Tool for working with D-Bus objects +gdbus introspect [--system | --session | --address address] --dest bus_name --object-path /path/to/object +[--xml] [--recurse] [--only-properties] +gdbus monitor [--system | --session | --address address] --dest bus_name [--object-path /path/to/object] +gdbus call [--system | --session | --address address] --dest bus_name --object-path /path/to/object +gdbus emit [--system | --session | --address address] --object-path /path/to/object +gdbus help +% +systemd-tmpfiles, systemd-tmpfiles-setup.service, systemd-tmpfiles-setup-dev.service, systemd-tmpfiles- +clean.service, systemd-tmpfiles-clean.timer - Creates, deletes and cleans up volatile and temporary files +and directories +systemd-tmpfiles-setup.service +systemd-tmpfiles-setup-dev.service +systemd-tmpfiles-clean.service +systemd-tmpfiles-clean.timer +systemd-tmpfiles creates, deletes, and cleans up volatile and temporary files and directories, based on +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +telinit - Change SysV runlevel +the runlevel requests will be transparently translated into systemd unit activation requests. +The following options are understood: +--help +Print a short help text and exit. +--no-wall +Do not send wall message before reboot/halt/power-off. +% +bootctl - Control the firmware and boot manager settings +bootctl checks, updates, installs or removes the boot loader from the current system. +bootctl status checks and prints the currently installed versions of the boot loader binaries and all +current EFI boot variables. +% +devlink - Devlink tool +OBJECT := { dev | port | monitor } +-V, -Version +Print the version of the devlink utility and exit. +-n, -no-nice-names +Turn off printing out nice names, for example netdevice ifnames instead of devlink port identifi‐ +cation. +% +mountpoint - see if a directory or file is a mountpoint +mountpoint [-d|-q] directory | file +mountpoint -x device +mountpoint checks whether the given directory or file is mentioned in the /proc/self/mountinfo file. +-d, --fs-devno +Show the major/minor numbers of the device that is mounted on the given directory. +-q, --quiet +Be quiet - don't print anything. +% +migratepages - Migrate the physical location a processes pages +migratepages pid from-nodes to-nodes +migratepages moves the physical location of a processes pages without any changes of the virtual address +space of the process. Moving the pages allows one to change the distances of a process to its memory. +If multiple nodes are specified for from-nodes or to-nodes then an attempt is made to preserve the rela‐ +tive location of each page in each nodeset. +Valid node specifiers +% +ssh-keygen — authentication key generation, management and conversion +[-f output_keyfile] +ssh-keygen -p [-P old_passphrase] [-N new_passphrase] [-f keyfile] +ssh-keygen -i [-m key_format] [-f input_keyfile] +ssh-keygen -e [-m key_format] [-f input_keyfile] +ssh-keygen -y [-f input_keyfile] +ssh-keygen -c [-P passphrase] [-C comment] [-f keyfile] +ssh-keygen -l [-v] [-E fingerprint_hash] [-f input_keyfile] +ssh-keygen -B [-f input_keyfile] +ssh-keygen -F hostname [-f known_hosts_file] [-l] +ssh-keygen -H [-f known_hosts_file] +ssh-keygen -R hostname [-f known_hosts_file] +ssh-keygen -r hostname [-f input_keyfile] [-g] +% +accessdb - dumps the content of a man-db database in a human readable format +/usr/sbin/accessdb [-d?V] [<index-file>] +accessdb will output the data contained within a man-db database in a human readable form. By default, +it will dump the data from /var/cache/man/index.<db-type>, where <db-type> is dependent on the database +library in use. +Supplying an argument to accessdb will override this default. +-d, --debug +Print debugging information. +-?, --help +% +sdiff - side-by-side merge of file differences +Mandatory arguments to long options are mandatory for short options too. +-o, --output=FILE +operate interactively, sending output to FILE +-E, --ignore-tab-expansion +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +dirmngr-client - Tool to access the Dirmngr services +dirmngr-client [options] [certfile|pattern] +The dirmngr-client is a simple tool to contact a running dirmngr and test whether a certificate has been +revoked --- either by being listed in the corresponding CRL or by running the OCSP protocol. If no dirm‐ +ngr is running, a new instances will be started but this is in general not a good idea due to the huge +performance overhead. +The usual way to run this tool is either: +dirmngr-client acert +or +% +whereis - locate the binary, source, and manual page files for a command +whereis [options] [-BMS directory... -f] name... +whereis locates the binary, source and manual files for the specified command names. The supplied names +are first stripped of leading pathname components and any (single) trailing extension of the form .ext +(for example: .c) Prefixes of s. resulting from use of source code control are also dealt with. whereis +then attempts to locate the desired program in the standard Linux places, and in the places specified by +$PATH and $MANPATH. +The search restrictions (options -b, -m and -s) are cumulative and apply to the subsequent name patterns +on the command line. Any new search restriction resets the search mask. For example, +whereis -bm ls tr -m gcc +% +geoiplookup - look up country using IP Address or hostname +geoiplookup [-d directory] [-f filename] [-v] <ipaddress|hostname> +geoiplookup uses the GeoIP library and database to find the Country that an IP address or hostname origi‐ +nates from. +For example +NL, Netherlands +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +ldns-version - print out the version of the ldns-library and tools on this system +ldns-version +ldns-version is used to print out version information of the ldns library and tools +ldns-version has no options. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +Transform syslinux config into GRUB one. +-c, --cwd=DIR +current directory of syslinux [default is parent directory of input file]. +-i, --isolinux +assume input is an isolinux configuration file. +-o, --output=FILE +write output to FILE [default=stdout]. +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +isosize - output the length of an iso9660 filesystem +isosize [options] iso9660_image_file +-x, --sectors +Show the block count and block size in human-readable form. The output uses the term "sectors" +for "blocks". +-d, --divisor number +% +toe - table of (terminfo) entries +toe [-v[n]] [-ahsuUV] file... +With no options, toe lists all available terminal types by primary name with descriptions. File argu‐ +ments specify the directories to be scanned; if no such arguments are given, your default terminfo direc‐ +tory is scanned. If you also specify the -h option, a directory header will be issued as each directory +is entered. +There are other options intended for use by terminfo file maintainers: +-a report on all of the terminal databases which ncurses would search, rather than only the first one +that it finds. +% +gcc - GNU project C and C++ compiler +gcc [-c|-S|-E] [-std=standard] +[-g] [-pg] [-Olevel] +[-Wwarn...] [-Wpedantic] +[-Idir...] [-Ldir...] +[-Dmacro[=defn]...] [-Umacro] +[-foption...] [-mmachine-option...] +[-o outfile] [@file] infile... +Only the most useful options are listed here; see below for the remainder. g++ accepts mostly the same +options as gcc. +When you invoke GCC, it normally does preprocessing, compilation, assembly and linking. The "overall +options" allow you to stop this process at an intermediate stage. For example, the -c option says not to +% +debugfs [ -DVwcin ] [ -b blocksize ] [ -s superblock ] [ -f cmd_file ] [ -R request ] [ -d +data_source_device ] [ -z undo_file ] [ device ] +The debugfs program is an interactive file system debugger. It can be used to examine and change the +device is a block device (e.g., /dev/sdXX) or a file containing the file system. +-w Specifies that the file system should be opened in read-write mode. Without this option, the file +system is opened in read-only mode. +% +badblocks - search a device for bad blocks +badblocks [ -svwnfBX ] [ -b block_size ] [ -c blocks_at_once ] [ -d read_delay_factor ] [ -e +max_bad_blocks ] [ -i input_file ] [ -o output_file ] [ -p num_passes ] [ -t test_pattern ] device [ +last_block ] [ first_block ] +badblocks is used to search for bad blocks on a device (usually a disk partition). device is the special +not specified, the last block on the device is used as a default. first_block is an optional parameter +specifying the starting block number for the test, which allows the testing to start in the middle of the +disk. If it is not specified the first block on the disk is used as a default. +important that the block size is properly specified, since the block numbers which are generated are very +dependent on the block size in use by the filesystem. For this reason, it is strongly recommended that +% +userdel - delete a user account and related files +userdel [options] LOGIN +The userdel command modifies the system account files, deleting all entries that refer to the user name +LOGIN. The named user must exist. +The options which apply to the userdel command are: +-f, --force +forces userdel to remove the user's home directory and mail spool, even if another user uses the same +home directory or if the mail spool is not owned by the specified user. If USERGROUPS_ENAB is defined +to yes in /etc/login.defs and if a group exists with the same name as the deleted user, then this +% +symcryptrun - Call a simple symmetric encryption tool +symcryptrun --class class --program program --keyfile keyfile [--decrypt|--encrypt] [inputfile] +Sometimes simple encryption tools are already in use for a long time and there might be a desire to inte‐ +grate them into the GnuPG framework. The protocols and encryption methods might be non-standard or not +even properly documented, so that a full-fledged encryption tool with an interface like gpg is not +doable. symcryptrun provides a solution: It operates by calling the external encryption/decryption mod‐ +ule and provides a passphrase for a key using the standard pinentry based mechanism through gpg-agent. +build time. +For encryption, the plain text must be provided on STDIN or as the argument inputfile, and the ciphertext +will be output to STDOUT. For decryption vice versa. +% +ownership - Compaq ownership tag retriever +ownership retrieves and prints the "ownership tag" that can be set on Compaq computers. Contrary to all +other programs of the dmidecode package, ownership doesn't print any version information, nor labels, but +-d, --dev-mem FILE +Read memory from device FILE (default: /dev/mem) +-h, --help +Display usage information and exit +% +sln - create symbolic links +sln source dest +sln filelist +that if for some reason the dynamic linker is not working, sln can be used to make symbolic links to +dynamic libraries. +The command line has two forms. In the first form, it creates dest as a new symbolic link to source. +In the second form, filelist is a list of space-separated pathname pairs, and the effect is as if sln was +executed once for each line of the file, with the two pathnames as the arguments. +The sln program supports no command-line options. +% +gdbus-codegen - D-Bus code and documentation generator +gdbus-codegen [-h, --help] [--interface-prefix org.project.Prefix] [--generate-c-code OUTFILES] +[--c-namespace YourProject] [--c-generate-object-manager] +[--c-generate-autocleanup none|objects|all] [--generate-docbook OUTFILES] +[--xml-files FILE] [--annotate ELEMENT KEY VALUE]... FILE [FILE...] +gdbus-codegen is used to generate code and/or documentation for one or more D-Bus interfaces. The tool +C code (via --generate-c-code) and Docbook XML (via --generate-docbook). +GENERATING C CODE +When generating C code, a #GInterface -derived type is generated for each D-Bus interface. Additionally, +for every generated type, FooBar, two concrete instantiable types, FooBarProxy and FooBarSkeleton, +implementing said interface are also generated. The former is derived from #GDBusProxy and intended for +% +talkd - Talk server +talkd [OPTION...] +Talk daemon, using service `ntalk'. +-a, --acl=FILE +read site-wide ACLs from FILE +-d, --debug +enable debugging +-i, --idle-timeout=SECONDS set idle timeout value to SECONDS +-l, --logging +% +dbus-run-session - start a process as a new D-Bus session +dbus-run-session --help +dbus-run-session --version +dbus-run-session is used to start a session bus instance of dbus-daemon from a shell script, and start a +specified program in that session. The dbus-daemon will run for as long as the program does, after which +it will terminate. +One use is to run a shell with its own dbus-daemon in a text‐mode or SSH session, and have the +dbus-daemon terminate automatically on leaving the sub‐shell, like this: +% +ldns-read-zone - read a zonefile and print it +ldns-read-zone ZONEFILE +pretty-printing makeup. +-c Canonicalize all resource records in the zone before printing +-b Include Bubble Babble encoding of DS's. +% +tracepath, tracepath6 - traces path to a network host discovering MTU along this path +tracepath [-n] [-b] [-l pktlen] [-m max_hops] [-p port] {destination} +It traces path to destination discovering MTU along this path. It uses UDP port port or some random +port. It is similar to traceroute, only does not require superuser privileges and has no fancy options. +tracepath6 is good replacement for traceroute6 and classic example of application of Linux error queues. +error messages. Probably, it will change, when they will be updated. For now it uses Van Jacobson's +trick, sweeping a range of UDP ports to maintain trace history. +-n Print primarily IP addresses numerically. +% +msgfilter - edit translations of message catalog +msgfilter [OPTION] FILTER [FILTER-OPTION] +Applies a filter to all translations of a translation catalog. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +-i, --input=INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +arpaname - translate IP addresses to the corresponding ARPA names +arpaname {ipaddress ...} +BIND 9 Administrator Reference Manual. +Internet Systems Consortium, Inc. +% +ntp-keygen - Create a NTP host key +ntp-keygen [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +software library has been installed, it generates keys, certificate and identity files used in public key +cryptography. These files are used for cookie encryption, digital signature and challenge/response iden‐ +tification algorithms compatible with the Internet standard security infrastructure. +All files are in PEM-encoded printable ASCII format, so they can be embedded as MIME attachments in mail +to other sites and certificate authorities. By default, files are not encrypted. +% +dnsdomainname - show DNS domain name +dnsdomainname [OPTION...] +Show domain part of the system's fully qualified host name. +The tool uses gethostname to get the host name of the system and getaddrinfo to resolve it into a canoni‐ +cal name. The part after the first period ('.') of the canonical name is shown. +-?, --help +give this help list +--usage +give a short usage message +% +ntpd - NTP daemon program +The ntpd utility is an operating system daemon which sets and maintains the system time of day in syn‐ +chronism with Internet standard time servers. It is a complete implementation of the Network Time Proto‐ +onds. While the ultimate precision is not achievable with ordinary workstations and networks of today, +% +indxbib - make inverted index for bibliographic databases +indxbib [ -vw ] [ -cfile ] [ -ddir ] [ -ffile ] [ -hn ] [ -istring ] [ -kn ] [ -ln ] [ -nn ] [ -ofile ] +[ -tn ] [ filename... ] +which is then renamed to this. If no filenames are given on the command line because the -f option has +been used, and no -o option is given, the index will be named Ind.i. +Bibliographic databases are divided into records by blank lines. Within a record, each fields starts +with a % character at the beginning of a line. Fields have a one letter name which follows the % charac‐ +ter. +The values set by the -c, -n, -l and -t options are stored in the index; when the index is searched, keys +% +gencat — generate a formatted message catalog +gencat catfile msgfile... +The gencat utility shall merge the message text source file msgfile into a formatted message catalog cat‐ +file. The file catfile shall be created if it does not already exist. If catfile does exist, its mes‐ +sages shall be included in the new catfile. If set and message numbers collide, the new message text +defined in msgfile shall replace the old message text currently contained in catfile. +% +grub-mkrescue - make a GRUB rescue image +grub-mkrescue [OPTION...] [OPTION] SOURCE... +Make GRUB CD-ROM, disk, pendrive and floppy bootable image. +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +xfs_fsr - filesystem reorganizer for XFS +xfs_fsr [-vdg] [-t seconds] [-p passes] [-f leftoff] [-m mtab] +xfs_fsr [-vdg] [xfsdev | file] ... +xfs_fsr -V +xfs_fsr is applicable only to XFS filesystems. +xfs_fsr improves the organization of mounted filesystems. The reorganization algorithm operates on one +file at a time, compacting or otherwise improving the layout of the file extents (contiguous blocks of +file data). +The following options are accepted by xfs_fsr. The -m, -t, and -f options have no meaning if any +filesystems or files are specified on the command line. +% +touch - change file timestamps +touch [OPTION]... FILE... +Update the access and modification times of each FILE to the current time. +A FILE argument that does not exist is created empty, unless -c or -h is supplied. +A FILE argument string of - is handled specially and causes touch to change the times of the file associ‐ +ated with standard output. +Mandatory arguments to long options are mandatory for short options too. +-a change only the access time +% +chacl - change the access control list of a file or directory +chacl acl pathname... +chacl -b acl dacl pathname... +chacl -d dacl pathname... +chacl -R pathname... +chacl -D pathname... +chacl -B pathname... +chacl -l pathname... +chacl -r pathname... +chacl is an IRIX-compatibility command, and is maintained for those users who are familiar with its use +% +secret-tool - Store and retrieve passwords +secret-tool store --label='Label' {attribute} {value} ... +secret-tool lookup {attribute} {value} ... +secret-tool clear {attribute} {value} ... +secret-tool search [--all]{attribute} {value} ... +secret-tool is a command line tool that can be used to store and retrieve passwords. +Each password is stored in an item. Items are uniquely identified by a set of attribute keys and values. +When storing a password you must specify unique pairs of attributes names and values, and when looking up +a password you provide the same attribute name and value pairs. +% +cations to provide batch processing features. +database file. If the database file does not exist, it will be created. If the database file does +exist, it will be opened. +For example, to create a new database file named "mydata.db", create a table named "memos" and insert a +couple of records into that table: +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +glib-gettextize - gettext internationalization utility +glib-gettextize [OPTION...] [DIRECTORY] +glib-gettextize helps to prepare a source package for being internationalized through gettext. It is a +variant of the gettextize that ships with gettext. +glib-gettextize differs from gettextize in that it doesn't create an intl/ subdirectory and doesn't +modify po/ChangeLog (note that newer versions of gettextize behave like this when called with the +--no-changelog option). +--help +print help and exit +% +ldns-compare-zones - read and compare two zonefiles and print differences +ldns-compare-zones reads two DNS zone files and prints number of differences. +Output is formated to: ++NUM_INS -NUM_DEL ~NUM_CHG +are considered inserted, and counted as NUM_INS. If an owner name is present in both, but there is a dif‐ +ference in the amount or content of the records, these are considered changed, and counted as NUM_CHG. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +fsck.cramfs - fsck compressed ROM file system +fsck.cramfs [options] file +fsck.cramfs is used to check the cramfs file system. +-v, --verbose +Enable verbose messaging. +-b, --blocksize blocksize +Use this blocksize, defaults to page size. Must be equal to what was set at creation time. Only +used for --extract. +--extract[=directory] +% +xmlcatalog - Command line tool to parse and manipulate XML or SGML catalog files. +--noout | --no-super-update | [-v | --verbose]] {CATALOGFILE} {ENTITIES...} +xmlcatalog is a command line application allowing users to monitor and manipulate XML and SGML catalogs. +Its functions can be invoked from a single command from the command line, or it can perform multiple +functions in interactive mode. It can operate on both XML and SGML files. +xmlcatalog accepts the following options (in alphabetical order): +--add TYPE ORIG REPLACE +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +irqbalance - distribute hardware interrupts across processors on a multiprocessor system +irqbalance +The purpose of irqbalance is to distribute hardware interrupts across processors on a multiprocessor sys‐ +tem in order to increase performance. +-o, --oneshot +Causes irqbalance to be run once, after which the daemon exits. +-d, --debug +Causes irqbalance to print extra debug information. Implies --foreground. +-f, --foreground +% +xfs_ncheck - generate pathnames from i-numbers for XFS +xfs_ncheck [ -i ino ] ... [ -f ] [ -s ] [ -l logdev ] device +xfs_ncheck -V +xfs_ncheck with no -i arguments generates an inode number and pathname list of all files on the given +order. The filesystem to be examined is specified by the device argument, which should be the disk or +volume device for the filesystem. Filesystems stored in files can also be checked, using the -f flag. +-f Specifies that the filesystem image to be processed is stored in a regular file at device (see +into an ordinary file. +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +btrfs-rescue - Recover a damaged btrfs filesystem +btrfs rescue <subcommand> <args> +btrfs rescue is used to try to recover a damaged btrfs filesystem. +chunk-recover [options] <device> +Recover the chunk tree by scanning the devices +Options +-y +assume an answer of yes to all questions. +% +tracepath, tracepath6 - traces path to a network host discovering MTU along this path +tracepath [-n] [-b] [-l pktlen] [-m max_hops] [-p port] {destination} +It traces path to destination discovering MTU along this path. It uses UDP port port or some random +port. It is similar to traceroute, only does not require superuser privileges and has no fancy options. +tracepath6 is good replacement for traceroute6 and classic example of application of Linux error queues. +error messages. Probably, it will change, when they will be updated. For now it uses Van Jacobson's +trick, sweeping a range of UDP ports to maintain trace history. +-n Print primarily IP addresses numerically. +% +coredumpctl - Retrieve and process saved core dumps and metadata +coredumpctl is a tool that can be used to retrieve and process core dumps and metadata which were saved +The following options are understood: +-h, --help +Print a short help text and exit. +--version +Print a short version string and exit. +% +-D user_dn +tion on the LDAP server. +-w passwd +-H ldapuri +% +xfs_growfs, xfs_info - expand an XFS filesystem +xfs_growfs [ -dilnrx ] [ -D size ] [ -e rtextsize ] [ -L size ] [ -m maxpct ] [ -t mtab ] [ -R size ] +mount-point +xfs_growfs -V +xfs_info [ -t mtab ] mount-point +xfs_info -V +The existing contents of the filesystem are undisturbed, and the added space becomes available for addi‐ +tional file storage. +% +tr - translate or delete characters +Translate, squeeze, and/or delete characters from standard input, writing to standard output. +-c, -C, --complement +-d, --delete +-s, --squeeze-repeats +replace each sequence of a repeated character that is listed in the last specified SET, with a +single occurrence of that character +% +rarp - manipulate the system RARP table +rarp [-V] [--version] [-h] [--help] +rarp -a +rarp [-v] -d hostname ... +rarp [-v] [-t type] -s hostname hw_addr +replacement RARP daemon, see ftp://ftp.dementia.org/pub/net-tools +Rarp manipulates the kernel's RARP table in various ways. The primary options are clearing an address +mapping entry and manually setting up one. For debugging purposes, the rarp program also allows a com‐ +plete dump of the RARP table. +% +kadmin [-O|-N] [-r realm] [-p principal] [-q query] [[-c cache_name]|[-k [-t keytab]]|-n] [-w password] +[-s admin_server[:port]] +kadmin.local [-r realm] [-p principal] [-q query] [-d dbname] [-e enc:salt ...] [-m] [-x db_args] +vide nearly identical functionalities; the difference is that kadmin.local directly accesses the KDC +man page will use "kadmin" to refer to both versions. kadmin provides for the maintenance of Kerberos +principals, password policies, and service key tables (keytabs). +The remote kadmin client uses Kerberos to authenticate to kadmind using the service principal kad‐ +min/ADMINHOST (where ADMINHOST is the fully-qualified hostname of the admin server) or kadmin/admin. If +% +machinectl - Control the systemd machine manager +considered running instances of: +· Virtual Machines (VMs) that virtualize hardware to run full operating system (OS) instances +(including their kernels) in a virtualized environment on top of the host OS. +· Containers that share the hardware and OS kernel with the host OS, in order to run OS userspace +instances on top the host OS. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +less - opposite of more +less -? +less --help +less -V +less --version +less [-[+]aABcCdeEfFgGiIJKLmMnNqQrRsSuUVwWX~] +[-b space] [-h lines] [-j line] [-k keyfile] +[-{oO} logfile] [-p pattern] [-P prompt] [-t tag] +[-T tagsfile] [-x tab,...] [-y lines] [-[z] lines] +[-# shift] [+[+]cmd] [--] [filename]... +movement. Also, less does not have to read the entire input file before starting, so with large input +% +nproc - print the number of processing units available +nproc [OPTION]... +of online processors +--all print the number of installed processors +--ignore=N +if possible, exclude N processing units +--help display this help and exit +--version +% +unicode_start - put keyboard and console in unicode mode +unicode_start [font [umap]] +put accordingly. +The parameter font is a font that is loaded. It should have a built-in Unicode map, or, if it hasn't, +such a map can be given explicitly as second parameter. When no font was specified, the current font is +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +ldns-rrsig - print out the inception and expiration dates in human readable form +ldns-rrsig domain [ type ] +ldns-rrsig is used to print the expiration and inception date of a RRSIG. The first argument is a domain +name. ldns-rrsig will query the authoritative servers for that domain to get a list of RRSIGs. It will +then print out the inception and experiration dates for the RRSIG covering the SOA record. +If the second argument type is given the RRSIG covering that type will be shown. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +blkdiscard - discard sectors on a device +blkdiscard [options] [-o offset] [-l length] device +ior based on range or size, as explained below. +The device argument is the pathname of the block device. +WARNING: All data in the discarded region on the device will be lost! +% +lvdisplay — display attributes of a logical volume +lockingfailure] [--ignoreskippedcluster] [--maps] [--nosuffix] [-P|--partial] [--reportformat +{basic|json}] [-S|--select Selection] [--units hHbBsSkKmMgGtTpPeE] [-v|--verbose] [--version] [Vol‐ +tion] ...] [-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] +[--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--segments] [--separator Sepa‐ +lvdisplay allows you to see the attributes of a logical volume like size, read/write status, snapshot +% +xmllint - command line XML tool +xmllint [--version | --debug | --shell | --xpath "XPath_expression" | --debugent | --copy | --recover | +--noent | --noout | --nonet | --path "PATH(S)" | --load-trace | --htmlout | --nowrap | --valid | +--postvalid | --dtdvalid URL | --dtdvalidfpi FPI | --timing | --output FILE | --repeat | --insert +| --compress | --html | --xmlout | --push | --memory | --maxmem NBBYTES | --nowarning | +--noblanks | --nocdata | --format | --encode ENCODING | --dropdtd | --nsclean | --testIO | +--catalogs | --nocatalogs | --auto | --xinclude | --noxincludenode | --loaddtd | --dtdattr | +--stream | --walker | --pattern PATTERNVALUE | --chkregister | --relaxng SCHEMA | --schema SCHEMA +xmllint --help +The xmllint program parses one or more XML files, specified on the command line as XML-FILE (or the +standard input if the filename provided is - ). It prints various types of output, depending upon the +% +gcc - GNU project C and C++ compiler +gcc [-c|-S|-E] [-std=standard] +[-g] [-pg] [-Olevel] +[-Wwarn...] [-Wpedantic] +[-Idir...] [-Ldir...] +[-Dmacro[=defn]...] [-Umacro] +[-foption...] [-mmachine-option...] +[-o outfile] [@file] infile... +Only the most useful options are listed here; see below for the remainder. g++ accepts mostly the same +options as gcc. +When you invoke GCC, it normally does preprocessing, compilation, assembly and linking. The "overall +options" allow you to stop this process at an intermediate stage. For example, the -c option says not to +% +gcov - coverage testing tool +gcov [-v|--version] [-h|--help] +[-a|--all-blocks] +[-b|--branch-probabilities] +[-c|--branch-counts] +[-d|--display-progress] +[-f|--function-summaries] +[-i|--intermediate-format] +[-l|--long-file-names] +[-m|--demangled-names] +[-n|--no-output] +[-o|--object-directory directory|file] +[-p|--preserve-paths] +[-r|--relative-only] +[-s|--source-prefix directory] +% +libtoolize [OPTION]... +Prepare a package to use libtool. +-c, --copy +copy files rather than symlinking them +--debug +enable verbose shell tracing +-n, --dry-run +print commands rather than running them +% +cpp - The C Preprocessor +cpp [-Dmacro[=defn]...] [-Umacro] +[-Idir...] [-iquotedir...] +[-Wwarn...] +[-M|-MM] [-MG] [-MF filename] +[-MP] [-MQ target...] +[-MT target...] +[-P] [-fno-working-directory] +[-x language] [-std=standard] +infile outfile +Only the most useful options are listed here; see below for the remainder. +The C preprocessor, often known as cpp, is a macro processor that is used automatically by the C compiler +% +wall - write a message to all users +wall [-n] [-t timeout] [message | file] +wall displays a message, or the contents of a file, or otherwise its standard input, on the terminals of +all currently logged in users. The command will wrap lines that are longer than 79 characters. Short +lines are whitespace padded to have 79 characters. The command will always put a carriage return and new +line at the end of each line. +Only the superuser can write on the terminals of users who have chosen to deny messages or are using a +program which automatically denies messages. +Reading from a file is refused when the invoker is not superuser and the program is suid or sgid. +% +sftp — secure file transfer program +[-i identity_file] [-l limit] [-o ssh_option] [-P port] [-R num_requests] [-S program] +[-s subsystem | sftp_server] host +sftp [user@]host[:file ...] +sftp [user@]host[:dir[/]] +sftp -b batchfile [user@]host +compression. sftp connects and logs into the specified host, then enters an interactive command mode. +The second usage format will retrieve files automatically if a non-interactive authentication method is +used; otherwise it will do so after successful interactive authentication. +% +systemd-cat - Connect a pipeline or program's output with the journal +filter tool in a shell pipeline to pass the output the previous pipeline element generates to the +journal. +If no parameter is passed, systemd-cat will write everything it reads from standard input (stdin) to the +journal. +If parameters are passed, they are executed as command line with standard output (stdout) and standard +error output (stderr) connected to the journal, so that all it writes is stored in the journal. +% +glilypond — integrate lilypond parts into groff +glilypond [ options] [-] [--] [ filespec ....] +glilypond transforms sheet music written in the lilypond language into the groff(7) language using the +Files in groff language and standard input can be provided as arguments. +Breaking Options +-?|-h|--help|--usage +Print help or usage information, then leave the program. +--version +% +hostname - show or set system host name +Show or set the system's host name. +-a, --aliases +alias names +-d, --domain +DNS domain name +-f, --fqdn, --long +DNS host name or FQDN +% +systemd-sysusers, systemd-sysusers.service - Allocate system users and groups +systemd-sysusers.service +systemd-sysusers creates system users and groups, based on the file format and location specified in +If invoked with no arguments, it applies all directives from all files found. If one or more filenames +are passed on the command line, only the directives in these files are applied. If only the basename of a +string - is specified as filename, entries from the standard input of the process are read. +% +dnssec-keygen - DNSSEC key generation tool +[-D date/offset] [-D sync date/offset] [-E engine] [-f flag] [-G] [-g generator] [-h] +[-I date/offset] [-i interval] [-K directory] [-k] [-L ttl] [-P date/offset] +[-P sync date/offset] [-p protocol] [-q] [-R date/offset] [-r randomdev] [-S key] +[-s strength] [-t type] [-V] [-v level] [-z] {name} +The name of the key is specified on the command line. For DNSSEC keys, this must match the name of the +zone for which the key is being generated. +% +msgen - create English message catalog +msgen [OPTION] INPUTFILE +Creates an English translation catalog. The input file is the last created English PO file, or a PO Tem‐ +plate file (generally created by xgettext). Untranslated entries are assigned a translation that is +identical to the msgid. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO or POT file +-D, --directory=DIRECTORY +% +srptool - GnuTLS SRP tool +srptool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Simple program that emulates the programs in the Stanford SRP (Secure Remote Password) libraries using +GnuTLS. It is intended for use in places where you don't expect SRP authentication to be the used for +system users. +In brief, to use SRP you need to create two files. These are the password file that holds the users and +the verifiers associated with them and the configuration file to hold the group parameters (called +tpasswd.conf). +% +install - copy files and set attributes +install [OPTION]... [-T] SOURCE DEST +install [OPTION]... SOURCE... DIRECTORY +install [OPTION]... -t DIRECTORY SOURCE... +install [OPTION]... -d DIRECTORY... +want to download and install a ready-to-use package on a GNU/Linux system, you should instead be using a +In the first three forms, copy SOURCE to DEST or multiple SOURCE(s) to the existing DIRECTORY, while set‐ +TORY(ies). +% +modinfo - Show information about a Linux Kernel module +modinfo [-0] [-F field] [-k kernel] [modulename|filename...] +modinfo -V +modinfo -h +modinfo extracts information from the Linux Kernel modules given on the command line. If the module name +when loading kernel modules. +modinfo by default lists each attribute of the module in form fieldname : value, for easy reading. The +filename is listed the same way (although it's not really an attribute). +% +scriptreplay - play back typescripts, using timing information +scriptreplay [options] [-t] timingfile [typescript [divisor]] +rhythm as it originally appeared when the script was recorded. +The replay simply displays the information again; the programs that were run when the typescript was +being recorded are not run again. Since the same information is simply being displayed, scriptreplay is +only guaranteed to work properly if run on the same type of terminal the typescript was recorded on. +which scriptreplay is sending its output. +% +routel - list routes with pretty output format +routef - flush routes +routel [tablenr [raw ip args...]] +routef +The routel script will list routes in a format that some might consider easier to interpret then the ip +route list equivalent. +The routef script does not take any arguments and will simply flush the routing table down the drain. +FILES +/usr/bin/routef +/usr/bin/routel +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +ldnsd - simple daemon example code +ldnsd port zone zonefile +server! +ldnsd takes a port, zone and zonefile as arguments. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +ncursesw6-config - helper script for ncurses libraries +ncursesw6-config [options] +libraries. +--prefix +echos the package-prefix of ncurses +--exec-prefix +echos the executable-prefix of ncurses +--cflags +% +bsdcat — expand files to standard output +bsdcat [options] [files] +bsdcat expands files to standard output. +decompressed data it written to standard output. +To decompress a file: +bsdcat example.txt.gz > example.txt +% +mesg - display (or do not display) messages from other users +mesg [option] [n|y] +The mesg utility is invoked by a user to control write access others have to the terminal device associ‐ +Traditionally, write access is allowed by default. However, as users become more conscious of various +security risks, there is a trend to remove write access by default, at least for the primary login shell. +To make sure your ttys are set the way you want them to be set, mesg should be executed in your login +scripts. +n Disallow messages. +% +pvmove — move physical extents +[-d|--debug] [-h|--help] [-i|--interval Seconds] [--noudevsync] [--reportformat {basic|json}] [-v|--ver‐ +bose] [-n|--name LogicalVolume] [SourcePhysicalVolume[:PE[-PE]...] [DestinationPhysicalVol‐ +ume[:PE[-PE]...]...]] +pvmove allows you to move the allocated physical extents (PEs) on SourcePhysicalVolume to one or more +extents used by that LV will be moved to free (or specified) extents on DestinationPhysicalVolume(s). If +no DestinationPhysicalVolume is specified, the normal allocation rules for the Volume Group are used. +If pvmove gets interrupted for any reason (e.g. the machine crashes) then run pvmove again without any +PhysicalVolume arguments to restart any moves that were in progress from the last checkpoint. Alterna‐ +tively use pvmove --abort at any time to abort. The resulting location of logical volumes after an abort +% +makeinfo [OPTION]... TEXINFO-FILE... +Translate Texinfo source documentation to various other formats, by default Info files suitable for read‐ +ing online with Emacs or standalone GNU Info. +not depend on the installed name. +General options: +--document-language=STR locale to use in translating Texinfo keywords +for the output document (default C). +--error-limit=NUM +% +lsof - list open files +lsof [ -?abChKlnNOPRtUvVX ] [ -A A ] [ -c c ] [ +c c ] [ +|-d d ] [ +|-D D ] [ +|-e s ] [ +|-E ] [ +|-f +[cfgGn] ] [ -F [f] ] [ -g [s] ] [ -i [i] ] [ -k k ] [ +|-L [l] ] [ +|-m m ] [ +|-M ] [ -o [o] ] [ -p s ] +[ +|-r [t[m<fmt>]] ] [ -s [p:s] ] [ -S [t] ] [ -T [t] ] [ -u s ] [ +|-w ] [ -x [fl] ] [ -z [z] ] [ -Z [Z] +] [ -- ] [names] +% +setcap - set file capabilities +setcap [-q] [-v] (capabilities|-|-r) filename [ ... capabilitiesN fileN ] +In the absence of the -v (verify) option setcap sets the capabilities of each specified filename to the +capabilities specified. The -v option is used to verify that the specified capabilities are currently +associated with the file. +The special capability string, '-', can be used to indicate that capabilities are read from the standard +The special capability string, '-r', is used to remove a capability set from a file. +% +jfs_tune - adjust tunable file system parameters on JFS +jfs_tune [options] device +jfs_tune adjusts tunable parameters on a Linux JFS file system or external journal. jfs_tune must be run +as root. +system or JFS external journal has been created. +-J device=external-journal +Attach the JFS external journal located on external-journal to the JFS file system on device. +The external journal must already have been created using the command. More than one file system +% +resizecons - change kernel idea of the console size +resizecons COLSxROWS +resizecons -lines ROWS +The resizecons command tries to change the videomode of the console. There are several aspects to this: +(a) the kernel must know about it, (b) the hardware must know about it, (c) user programs must know about +console screen memory for all virtual consoles, and might fail if there is not enough memory. (In that +The most difficult part of this is (b), since it requires detailed knowledge of the video card hardware, +% +firewalld - Dynamic Firewall Manager +firewalld provides a dynamically managed firewall with support for network/firewall zones to define the +ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an +interface for services or applications to add firewall rules directly. +These are the command line options of firewalld: +-h, --help +Prints a short help text and exists. +% +mkinitcpio - Create an initial ramdisk environment +mkinitcpio [options] +Creates an initial ramdisk environment for booting the linux kernel. The initial ramdisk is in essence a +very small environment (early userspace) which loads various kernel modules and sets up necessary things +filesystems and root filesystems on a software RAID array. mkinitcpio allows for easy extension with +custom hooks, has autodetection at runtime, and many other features. +-A, --addhooks hooks +Add the additional hooks to the image. These will be processed in order after all other hooks from +times. +% +chage - change user password expiry information +chage [options] LOGIN +The chage command changes the number of days between password changes and the date of the last password +The options which apply to the chage command are: +-d, --lastday LAST_DAY +be expressed in the format YYYY-MM-DD (or the format more commonly used in your area). +-E, --expiredate EXPIRE_DATE +% +groupadd - create a new group +groupadd [options] group +The groupadd command creates a new group account using the values specified on the command line plus the +default values from the system. The new group will be entered into the system files as needed. +The options which apply to the groupadd command are: +-f, --force +exists. When used with -g, and the specified GID already exists, another (unique) GID is chosen (i.e. +-g is turned off). +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +workers] [-P pid_file] [-T time_offset] +The -r realm option specifies the realm for which the server should provide service. +does not apply to the LDAP database. +The -k keytype option specifies the key type of the master key to be entered manually as a password when +-m is given; the default is des-cbc-crc. +% +env - run a program in a modified environment +Mandatory arguments to long options are mandatory for short options too. +-i, --ignore-environment +start with an empty environment +-0, --null +end each output line with NUL, not newline +% +mdadm - manage MD devices aka Linux Software RAID +mdadm [mode] <raiddevice> [options] <component-devices> +devices (typically disk drives or partitions thereof) to be combined into a single device to hold (for +example) a single filesystem. Some RAID levels include redundancy and so can survive some degree of +device failure. +Linux Software RAID devices are implemented through the md (Multiple Devices) device driver. +MULTIPATH is not a Software RAID mechanism, but does involve multiple devices: each device is a path to +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +bc - An arbitrary precision calculator language +bc [ -hlwsqv ] [long-options] [ file ... ] +bc is a language that supports arbitrary precision numbers with interactive execution of statements. +There are some similarities in the syntax to the C programming language. A standard math library is +available by command line option. If requested, the math library is defined before processing any files. +bc starts by processing code from all the files listed on the command line in the order listed. After +all files have been processed, bc reads from the standard input. All code is executed as it is read. +(If a file contains a command to halt the processor, bc will never read from the standard input.) +document describes the language accepted by this processor. Extensions will be identified as such. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +taskset - set or retrieve a process's CPU affinity +taskset [options] mask command [argument...] +taskset [options] -p [mask] pid +taskset is used to set or retrieve the CPU affinity of a running process given its pid, or to launch a +new command with a given CPU affinity. CPU affinity is a scheduler property that "bonds" a process to a +given set of CPUs on the system. The Linux scheduler will honor the given CPU affinity and the process +scheduler attempts to keep processes on the same CPU as long as practical for performance reasons. +Therefore, forcing a specific CPU affinity is useful only in certain applications. +The CPU affinity is represented as a bitmask, with the lowest order bit corresponding to the first logi‐ +% +nm - list symbols from object files +nm [-A|-o|--print-file-name] [-a|--debug-syms] +[-B|--format=bsd] [-C|--demangle[=style]] +[-D|--dynamic] [-fformat|--format=format] +[-g|--extern-only] [-h|--help] +[-l|--line-numbers] [-n|-v|--numeric-sort] +[-P|--portability] [-p|--no-sort] +[-r|--reverse-sort] [-S|--print-size] +[-s|--print-armap] [-t radix|--radix=radix] +[-u|--undefined-only] [-V|--version] +[--plugin name] [--size-sort] [--special-syms] +[--synthetic] [--target=bfdname] +[objfile...] +% +gropdf - PDF driver for groff +gropdf [-delvs] [-F dir] [-p papersize] [-y foundry] [-u [cmapfile]] [files ...] +It is possible to have whitespace between a command line option and its parameter. +gropdf translates the output of GNU troff to PDF. Normally gropdf should be invoked by using the groff +command with a -Tpdf option. If no files are given, gropdf reads the standard input. A filename of - +also causes gropdf to read the standard input. PDF output is written to the standard output. When +gropdf is run by groff options can be passed to gropdf using groff's -P option. +See section FONT INSTALLATION below for a guide how to install fonts for gropdf. +-d Include debug information as comments within the PDF. Also produces an uncompressed PDF. +% +ksu - Kerberized super-user +ksu [ target_user ] [ -n target_principal_name ] [ -c source_cache_name ] [ -k ] [ -r time ] [ -pf ] [ -l +lifetime ] [ -z | Z ] [ -q ] [ -e command [ args ... ] ] [ -a [ args ... ] ] +REQUIREMENTS +use ksu. +ksu is a Kerberized version of the su program that has two missions: one is to securely change the real +and effective user ID to that of the target user, and the other is to create a new security context. +For the sake of clarity, all references to and attributes of the user invoking the program will start +with "source" (e.g., "source user", "source cache", etc.). +% +msgcomm - match two message catalogs +msgcomm [OPTION] [INPUTFILE]... +Find messages which are common to two or more of the specified PO files. By using the --more-than +print the unique messages). Translations, comments and extracted comments will be preserved, but only +from the first PO file to define them. File positions from all PO files will be cumulated. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE ... +input files +% +reiserfsck - The checking tool for the ReiserFS filesystem. +reiserfsck [ -aprVy ] [ --rebuild-sb | --check | --fix-fixable | --rebuild-tree | --clean-attributes ] [ +-j | --journal device ] [ -z | --adjust-size ] [ -n | --nolog ] [ -B | --badblocks file ] [ -l | --log‐ +file file ] [ -q | --quiet ] [ -y | --yes ] [ -f | --force ] [ -S | --scan-whole-partition ] [ --no-jour‐ +nal-available ] device +Reiserfsck searches for a Reiserfs filesystem on a device, replays any necessary transactions, and either +checks or repairs the file system. +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +--rebuild-sb +% +xfs_metadump - copy XFS filesystem metadata to a file +xfs_metadump [ -aefFgow ] [ -m max_extents ] ] [ -l logdev ] source target +xfs_metadump -V +xfs_metadump is a debugging tool that copies the metadata from an XFS filesystem to a file. The source +argument must be the pathname of the device or file containing the XFS filesystem and the target argument +output to be redirected to another program such as a compression application. +xfs_metadump does not alter the source filesystem in any way. The target image is a contiguous (non- +sparse) file containing all the filesystem's metadata and indexes to where the blocks were copied from. +% +ldd - print shared object dependencies +ldd [option]... file... +ldd prints the shared objects (shared libraries) required by each program or shared object specified on +the command line. An example of its use and output is the following: +$ ldd /bin/ls +% +expand - convert tabs to spaces +expand [OPTION]... [FILE]... +Convert tabs in each FILE to spaces, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-i, --initial +do not convert tabs after non blanks +-t, --tabs=NUMBER +% +basename - strip directory and suffix from filenames +Mandatory arguments to long options are mandatory for short options too. +-a, --multiple +-s, --suffix=SUFFIX +remove a trailing SUFFIX; implies -a +% +safety mechanism. The -f option disables this safety mechanism. +-h Display a usage message. +-n Dry-run; do not actually write blocks back to the filesystem. +% +mkfs.btrfs - create a btrfs filesystem +mkfs.btrfs [-A|--alloc-start <alloc-start>] [-b|--byte-count <byte-count>] [-d|--data <data-profile>] +[-m|--metadata <metadata profile>] [-M|--mixed] [-l|--leafsize <leafsize>] [-n|--nodesize <nodesize>] +[-s|--sectorsize <sectorsize>] [-L|--label <label>] [-K|--nodiscard] [-r|--rootdir <rootdir>] +[-V|--version] <device> [<device>...] +mkfs.btrfs is used to create the btrfs filesystem on a single or multiple devices. <device> is typically +a block device but can be a file-backed image as well. Multiple devices are grouped by UUID of the +filesystem. +Before mounting such filesystem, the kernel module must know all the devices either via preceding +execution of btrfs device scan or using the device mount option. See section MULTIPLE DEVICES for more +details. +% +runlevel - Print previous and current SysV runlevel +runlevel [options...] +"Runlevels" are an obsolete way to start and stop groups of services used in SysV init. systemd provides +a compatibility layer that maps runlevels to targets, and associated binaries like runlevel. +Nevertheless, only one runlevel can be "active" at a given time, while systemd can activate multiple +targets concurrently, so the mapping to runlevels is confusing and only approximate. Runlevels should not +be used in new code, and are mostly useful as a shorthand way to refer the matching systemd targets in +kernel boot parameters. +┌─────────┬───────────────────┐ +│Runlevel │ Target │ +├─────────┼───────────────────┤ +% +pdfroff - create PDF documents using groff +pdfroff [-abcegilpstzCEGNRSUVXZ] [-d cs] [-f fam] [-F dir] [-I dir] [-L arg] [-m name] [-M dir] [-n num] +[-o list] [-P arg] [-r cn] [-T dev] [-w name] [-W name] [--emit-ps] [--no-toc-relocation] [--no- +kill-null-pages] [--stylesheet=name] [--no-pdf-output] [--pdf-output=name] +[--no-reference-dictionary] [--reference-dictionary=name] [--report-progress] +[--keep-temporary-files] file ... +pdfroff -h | --help +pdfroff -v | --version [option ...] +pdfroff is a wrapper program for the GNU text processing system, groff. It transparently handles the +mechanics of multiple pass groff processing, when applied to suitably marked up groff source files, such +that tables of contents and body text are formatted separately, and are subsequently combined in the cor‐ +rect order, for final publication as a single PDF document. A further optional “style sheet” capability +is provided; this allows for the definition of content which is required to precede the table of con‐ +% +update-smart-drivedb - update smartmontools drive database +other platforms.] +update-smart-drivedb updates /usr/share/smartmontools/drivedb.h or DESTFILE from smartmontools SVN repos‐ +itory. +It tries to download first from the current branch and then from trunk. The tools used for downloading +The old file is kept if the downloaded file is identical (ignoring the differences in Id string) other‐ +wise it is moved to drivedb.h.old. +% +sg - execute command as different group ID +sg [-] [group [-c ] command] +The sg command works similar to newgrp but accepts a command. The command will be executed with the +Another difference between newgrp and sg is that some shells treat newgrp specially, replacing themselves +command you are returned to your previous group ID. +CONFIGURATION +The following configuration variables in /etc/login.defs change the behavior of this tool: +SYSLOG_SG_ENAB (boolean) +Enable "syslog" logging of sg activity. +% +slabtop - display kernel slab cache information in real time +slabtop [options] +slabtop displays detailed kernel slab cache information in real time. It displays a listing of the top +caches sorted by one of the listed sort criteria. It also displays a statistics header filled with slab +layer information. +Normal invocation of slabtop does not require any options. The behavior, however, can be fine-tuned by +specifying one or more of the following flags: +-d, --delay=N +Refresh the display every n in seconds. By default, slabtop refreshes the display every three +seconds. To exit the program, hit q. +% +journalctl - Query the systemd journal +If called without parameters, it will show the full contents of the journal, starting with the oldest +entry collected. +If one or more match arguments are passed, the output is filtered accordingly. A match is in the format +"FIELD=VALUE", e.g. "_SYSTEMD_UNIT=httpd.service", referring to the components of a structured journal +entry. See systemd.journal-fields(7) for a list of well-known fields. If multiple matches are specified +matching different fields, the log entries are filtered by both, i.e. the resulting output will show only +entries matching all the specified matches of this kind. If two matches apply to the same field, then +% +setmetamode - define the keyboard meta key handling +setmetamode [ {meta|bit|metabit | esc|prefix|escprefix} ] +Without argument, setmetamode prints the current Meta key mode. With argument, it sets the Meta key mode +as indicated. The setting before and after the change are reported. +The Meta key mode is specific for each VT (and the VT corresponding to stdin is used). One might use +setmetamode in /etc/rc to define the initial state of the Meta key mode, e.g. by +for tty in $INITTY; do +setmetamode escprefix < $tty +done +% +gpgconf - Modify .gnupg home directories +gpgconf [options] --list-components +gpgconf [options] --list-options component +gpgconf [options] --change-options component +The gpgconf is a utility to automatically and reasonable safely query and modify configuration files in +the ‘.gnupg’ home directory. It is designed not to be invoked manually by the user, but automatically by +graphical user interfaces (GUI). ([Please note that currently no locking is done, so concurrent access +guarantees.]) +gpgconf provides access to the configuration of one or more components of the GnuPG system. These compo‐ +nents correspond more or less to the programs that exist in the GnuPG framework, like GnuPG, GPGSM, DirM‐ +% +grub-set-default - set the saved default boot entry for GRUB +grub-set-default [OPTION] MENU_ENTRY +-h, --help +print this message and exit +-V, --version +print the version information and exit +--boot-directory=DIR +expect GRUB images under the directory DIR/grub instead of the /boot/grub directory +% +vgimport — make exported volume groups known to the system +vgimport [-a|--all] [-d|--debug] [-h|-?|--help] [--reportformat {basic|json}] [-S|--select Selection] +system again, perhaps after moving its Physical Volumes from a different machine. vgexport clears the VG +system ID, and vgimport sets the VG system ID to match the host running vgimport (if the host has a sys‐ +tem ID). +-a, --all +Import all exported Volume Groups. +% +chsh - change your login shell +chsh [-s shell] [-l] [-u] [-v] [username] +chsh is used to change your login shell. If a shell is not given on the command line, chsh prompts for +one. +chsh supports non-local entries (kerberos, LDAP, etc.) if linked with libuser, otherwise use ypchsh, +lchsh or any other implementation for non-local entries. +-s, --shell shell +Specify your login shell. +-l, --list-shells +% +localectl - Control the system locale and keyboard layout settings +The system locale controls the language settings of system services and of the UI before the user logs +in, such as the display manager, as well as the default for users after login. +The keyboard settings control the keyboard layout used on the text console and of the graphical UI before +the user logs in, such as the display manager, as well as the default for users after login. +during early system boot. The initramfs is not rebuilt automatically by localectl. +% +whistles you can expect from a decent OpenPGP implementation. +as it requires several other modules to be installed. +RETURN VALUE +for fatal errors. +% +biosdecode - BIOS information decoder +biosdecode parses the BIOS memory and prints information about all structures (or entry points) it knows +of. Currently known entry point types are: +· SMBIOS (System Management BIOS) +Use dmidecode for a more detailed output. +· DMI (Desktop Management Interface, a legacy version of SMBIOS) +Use dmidecode for a more detailed output. +· SYSID +% +whistles you can expect from a decent OpenPGP implementation. +as it requires several other modules to be installed. +RETURN VALUE +for fatal errors. +% +manpath - determine search path for manual pages +manpath [-qgdc?V] [-m system[,...]] [-C file] +If $MANPATH is set, manpath will simply display its contents and issue a warning. If not, manpath will +determine a suitable manual page hierarchy search path and display the results. +The colon-delimited path is determined using information gained from the man-db configuration file - +(/etc/man_db.conf) and the user's environment. +-q, --quiet +Do not issue warnings. +-d, --debug +% +guile - The GNU Project Extension Language +guile [-L DIRECTORY] [-l FILE] [-e FUNCTION] [\] [-c EXPR] [-s SCRIPT] [--] [SCRIPT [ARGs for SCRIPT]] +Only the most useful options are listed here; see below for the remainder. +standards, providing additional features necessary for real-world use. +Guile works well for interactive use, basic scripting, and extension of larger applications, as well as +for stand-alone Scheme application development. +The guile executable itself provides a stand-alone interactive compiler and run-time for Scheme programs, +both for interactive use and for executing Scheme scripts or programs. +% +namei - follow a pathname until a terminal point is found +namei [options] pathname... +namei interprets its arguments as pathnames to any type of Unix file (symlinks, files, directories, and +so forth). namei then follows each pathname until an endpoint is found (a file, a directory, a device +node, etc). If it finds a symbolic link, it shows the link, and starts following it, indenting the out‐ +put to show the context. +For each line of output, namei uses the following characters to identify the file type found: +f: = the pathname currently being resolved +d = directory +% +emacs - GNU project Emacs +emacs [ command-line switches ] [ files ... ] +The user functionality of GNU Emacs encompasses everything other editors do, and it is easily extensible +since its editing commands are written in Lisp. +The primary documentation of GNU Emacs is in the GNU Emacs Manual, which you can read using Info, either +from Emacs or as a standalone program. Please look there for complete and up-to-date documentation. +Emacs has an extensive interactive help facility, but the facility assumes that you know how to manipu‐ +% +swapon, swapoff - enable/disable devices and files for paging and swapping +swapon [options] [specialfile...] +swapoff [-va] [specialfile...] +swapon is used to specify devices on which paging and swapping are to take place. +to indicate a device by label or uuid. +Calls to swapon normally occur in the system boot scripts making all swap devices available, so that the +paging and swapping activity is interleaved across several devices and files. +swapoff disables swapping on the specified devices and files. When the -a flag is given, swapping is +disabled on all known swap devices and files (as found in /proc/swaps or /etc/fstab). +% +perl [ -sTtuUWX ] [ -hv ] [ -V[:configvar] ] [ -cw ] [ -d[t][:debugger] ] [ -D[number/list] ] +[ -pna ] [ -Fpattern ] [ -l[octal] ] [ -0[octal/hexadecimal] ] +[ -Idir ] [ -m[-]module ] [ -M[-]'module...' ] [ -f ] [ -C [number/list] ] [ -S ] +[ -x[dir] ] [ -i[extension] ] [ [-e|-E] 'command' ] [ -- ] [ programfile ] [ argument ]... +For more information on these options, you can run "perldoc perlrun". +GETTING HELP +The perldoc program gives you access to all the documentation that comes with Perl. You can get more +documentation, tutorials and community support online at <http://www.perl.org/>. +If you're new to Perl, you should start by running "perldoc perlintro", which is a general intro for +beginners and provides some background to help you navigate the rest of Perl's extensive documentation. +Run "perldoc perldoc" to learn more things you can do with perldoc. +% +usbhid-dump - dump USB HID device report descriptors and streams +usbhid-dump [OPTION]... +usbhid-dump uses libusb to dump report descriptors and streams from HID (human interface device) inter‐ +faces of USB devices. By default, it dumps HID interfaces of all connected USB devices, but could be +limited to a subset of them, or to a single interface, using options. +other program receives the input in the meantime. The report descriptor dumping is instantaneous, but +the stream dumping continues until terminated with SIGINT (^C from the terminal) or a timeout expires. +If you accidentally start dumping a stream from the USB keyboard you use to control the terminal, the +system will stop receiving the input and you won't be able to terminate usbhid-dump. Just stop your input +and wait until the timeout expires. The stream dumping will stop, the keyboard will be reattached to the +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +chvt - change foreground virtual terminal +chvt N +The command chvt N makes /dev/ttyN the foreground terminal. (The corresponding screen is created if it +% +dmidecode - DMI table decoder +dmidecode is a tool for dumping a computer's DMI (some say SMBIOS) table contents in a human-readable +pieces of information such as serial numbers and BIOS revision. Thanks to this table, you can retrieve +this information without having to probe for the actual hardware. While this is a good point in terms of +report speed and safeness, this also makes the presented information possibly unreliable. +The DMI table doesn't only describe what the system is currently made of, it also can report the possible +evolutions (such as the fastest supported CPU or the maximal amount of memory supported). +SMBIOS stands for System Management BIOS, while DMI stands for Desktop Management Interface. Both stan‐ +dards are tightly related and developed by the DMTF (Desktop Management Task Force). +% +ld - The GNU linker +ld [options] objfile ... +ld combines a number of object and archive files, relocates their data and ties up symbol references. +Usually the last step in compiling a program is to run ld. +ld accepts Linker Command Language files written in a superset of AT&T's Link Editor Command Language +syntax, to provide explicit and total control over the linking process. +command language and on other aspects of the GNU linker. +read, combine, and write object files in many different formats---for example, COFF or "a.out". +% +vgmerge — merge two volume groups +-l, --list +% +reiserfstune - The tunning tool for the ReiserFS filesystem. +reiserfstune [ -f ] [ -h | --help ] [ -j | --journal-device FILE ] [ --no-journal-available ] [ --jour‐ +nal-new-device FILE ] [ --make-journal-standard ] [ -s | --journal-new-size N ] [ -o | --journal-new-off‐ +set N ] [ -t | --max-transaction-size N ] [ -b | --add-badblocks file ] [ -B | --badblocks file ] [ -u | +--uuid UUID ] [ -l | --label LABEL ] [ -c | --check-interval interval-in-days ] [ -C | --time-last- +checked timestamp ] [ -m | --max-mnt-count count ] [ -M | --mnt-count count ] device +reiserfstune is used for tuning the ReiserFS. It can change two journal parameters (the journal size and +the maximum transaction size), and it can move the journal's location to a new specified block device. +the relocated journal was implemented for a special release of ReiserFS, and was not expected to be put +you must apply a special patch. Without this patch the kernel will refuse to mount the newly modified +% +fuser - identify processes using files or sockets +fuser -l +fuser -V +fuser displays the PIDs of processes using the specified files or file systems. In the default display +mode, each file name is followed by a letter denoting the type of access: +c current directory. +e executable being run. +f open file. f is omitted in default display mode. +F open file for writing. F is omitted in default display mode. +r root directory. +m mmap'ed file or shared library. +% +pstree - display a tree of processes +pstree [-a, --arguments] [-c, --compact] [-h, --highlight-all, -Hpid, --highlight-pid pid] +[-g] --show-pgids] [-l, --long] [-n, --numeric-sort] [-N, --ns-sortns [-p, --show-pids] [-s, --show-par‐ +ents] [-S, --ns-changes] [-u, --uid-changes] [-Z, --security-context] +pstree -V, --version +pstree shows running processes as a tree. The tree is rooted at either pid or init if pid is omitted. +If a user name is specified, all process trees rooted at processes owned by that user are shown. +pstree visually merges identical branches by putting them in square brackets and prefixing them with the +repetition count, e.g. +init-+-getty +% +emacsclient - tells a running Emacs to visit a file +emacsclient [options] files ... +but is not specific to that system. +emacsclient works in conjunction with the built-in Emacs server. +You can either call emacsclient directly or let other programs run it for you when necessary. On GNU and +Unix systems many programs consult the environment variable EDITOR (sometimes also VISUAL) to obtain the +command used for editing. Thus, setting this environment variable to 'emacsclient' will allow these pro‐ +grams to use an already running Emacs for editing. Other operating systems might have their own methods +for defining the default editor. +% +vgcfgbackup — backup volume group descriptor area +vgcfgbackup allows you to backup the metadata of your volume groups. If you don't name any volume groups +on the command line, all of them will be backed up. +In a default installation, each volume group gets backed up into a separate file bearing the name of the +volume group in the directory /etc/lvm/backup. You can write the backup to an alternative file using -f. +%s gets replaced by the volume group name. +% +mouse-test - a tool for determining mouse type and device it's attached to. +mouse-test [ device ... ] +speak. It is able to detect MouseMan devices, and to choose between -t ms (three-buttons aware) and -t +bare old two-buttons-only serial mice. +BUGS +I know the application is buggy, but I only own one mouse device. If you are interested in this applica‐ +tion, just call me and awake me from my laziness. +device [ device ... ] +% +grub-mount - export GRUB filesystem with FUSE +Debug tool for filesystem driver. +-C, --crypto +Mount crypto devices. +-d, --debug=STRING +Set debug environment variable. +-K, --zfs-key=FILE|prompt +Load zfs crypto key. +% +gnutls-serv - GnuTLS server +gnutls-serv [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Server program that listens to incoming TLS connections. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +Specifies the debug level. +% +faked - daemon that remembers fake ownership/permissions of files manipulated by fakeroot processes. +faked [--debug] [--foreground] [--cleanup] [--key msg-key] [--load] [--save-file save-file] [--port TCP- +port] +If a fakeroot process wants to change the ownership of a file, then faked is the process that remembers +that new owner. If later the same fakeroot process does a stat() for that filename, then the libfakeroot +wrapped stat() call will first ask faked for the fake ownership etc of that file, and then report it. +--debug +Print debugging information on stderr. +--foreground +Don't fork into the background. +% +era_invalidate - Provide a list of blocks that have changed since a particular era. +era_invalidate [options] {device|file} +-h, --help +Print help and exit. +-V, --version +Output version information and exit. +% +vmstat - Report virtual memory statistics +vmstat [options] [delay [count]] +vmstat reports information about processes, memory, paging, block IO, traps, disks and cpu activity. +The first report produced gives averages since the last reboot. Additional reports give information on a +delay The delay between updates in seconds. If no delay is specified, only one report is printed with +the average values since boot. +count Number of updates. In absence of count, when delay is defined, default is infinite. +% +vgreduce — reduce a volume group +umePath...] +vgreduce allows you to remove one or more unused physical volumes from a volume group. +-a, --all +Removes all empty physical volumes if none are given on command line. +--removemissing +% +serve as a pager for text files named as arguments or passed on standard input, and as a general purpose +directory browser. +capabilities do not meet your needs, the target URL can be handed over to a graphical browser with a sin‐ +gle command. +% +Mandatory arguments to long options are mandatory for short options too. +-i, --input=MODE +adjust standard input stream buffering +-o, --output=MODE +adjust standard output stream buffering +-e, --error=MODE +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +usermod - modify a user account +usermod [options] LOGIN +The usermod command modifies the system account files to reflect the changes that are specified on the +command line. +The options which apply to the usermod command are: +-a, --append +Add the user to the supplementary group(s). Use only with the -G option. +-c, --comment COMMENT +% +zless - file perusal filter for crt viewing of compressed text +zless [ name ... ] +Zless is a filter which allows examination of compressed or plain text files one screenful at a time on a +soft-copy terminal. It is the equivalent of setting the environment variable LESSOPEN to '|gzip -cdfq -- +%s', and the environment variable LESSMETACHARS to '<space><tab><newline>;*?"()<>[|&^`#\$%=~', and then +running less. However, enough people seem to think that having the command zless available is important +to be worth providing it. +BUGS +Zless does not work with compressed data that is piped to it via standard input; it requires that input +% +timeout - run a command with a time limit +timeout [OPTION] +Mandatory arguments to long options are mandatory for short options too. +--preserve-status +command times out +% +openssl - OpenSSL command line tool +openssl command [ command_opts ] [ command_args ] +openssl [ list-standard-commands | list-message-digest-commands | list-cipher-commands | list-cipher- +algorithms | list-message-digest-algorithms | list-public-key-algorithms] +openssl no-XXX [ arbitrary options ] +The openssl program is a command line tool for using the various cryptography functions of OpenSSL's +crypto library from the shell. It can be used for +% +dnssec-checkds - DNSSEC delegation consistency checking tool +dnssec-checkds [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} +dnssec-dsfromkey [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} +dnssec-checkds verifies the correctness of Delegation Signer (DS) or DNSSEC Lookaside Validation (DLV) +resource records for keys in a specified zone. +-f file +If a file is specified, then the zone is read from that file to find the DNSKEY records. If not, then +the DNSKEY records for the zone are looked up in the DNS. +-l domain +% +column - columnate lists +column [options] [file...] +The column utility formats its input into multiple columns. By default, rows are filled before columns. +Input is taken from file, or otherwise from standard input. Empty lines are ignored. +-c, --columns width +Output is formatted to a width specified as number of characters. +-o, --output-separator string +Specify the columns delimiter for table output (default is two spaces). +-s, --separator separators +% +cal - display a calendar +cal [options] [[[day] month] year] +cal displays a simple calendar. If no arguments are specified, the current month is displayed. +Display three months spanning the date. +-n , --months number +Display number of months, starting from the month containing the date. +% +echo - display a line of text +echo [SHORT-OPTION]... [STRING]... +echo LONG-OPTION +Echo the STRING(s) to standard output. +-n do not output the trailing newline +-e enable interpretation of backslash escapes +-E disable interpretation of backslash escapes (default) +--help display this help and exit +% +chmod - change file mode bits +chmod [OPTION]... MODE[,MODE]... FILE... +chmod [OPTION]... OCTAL-MODE FILE... +chmod [OPTION]... --reference=RFILE FILE... +according to mode, which can be either a symbolic representation of changes to make, or an octal number +representing the bit pattern for the new mode bits. +The format of a symbolic mode is [ugoa...][[-+=][perms...]...], where perms is either zero or more let‐ +ters from the set rwxXst, or a single letter from the set ugo. Multiple symbolic modes can be given, +separated by commas. +A combination of the letters ugoa controls which users' access to the file will be changed: the user who +% +sshd — OpenSSH SSH daemon +[-g login_grace_time] [-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len] +and provide secure encrypted communications between two untrusted hosts over an insecure network. +sshd listens for connections from clients. It is normally started at boot from /etc/rc. It forks a new +daemon for each incoming connection. The forked daemons handle key exchange, encryption, authentication, +command execution, and data exchange. +mand-line options override values specified in the configuration file. sshd rereads its configuration file +when it receives a hangup signal, SIGHUP, by executing itself with the name and options it was started +% +sort - sort lines of text files +sort [OPTION]... [FILE]... +sort [OPTION]... --files0-from=F +Write sorted concatenation of all FILE(s) to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. Ordering options: +-b, --ignore-leading-blanks +ignore leading blanks +-d, --dictionary-order +% +mdmon - monitor MD external metadata arrays +mdmon [--all] [--takeover] [--foreground] CONTAINER +user space handles all updates to the metadata. The kernel's responsibility is to notify user space when +a "metadata event" occurs, like disk failures and clean-to-dirty transitions. The kernel, in important +Metadata updates: +To service metadata update requests a daemon, mdmon, is introduced. Mdmon is tasked with polling the +sysfs namespace looking for changes in array_state, sync_action, and per disk state attributes. When a +change is detected it calls a per metadata type handler to make modifications to the metadata. The fol‐ +lowing actions are taken: +% +somewhat smaller than the fully-blown gpg and uses a different (and simpler) way to check that the public +keys used to make the signature are valid. There are no configuration files and only a few options are +implemented. +for expired or revoked keys. +By default a keyring named ‘trustedkeys.kbx’ is used; if that does not exist a keyring named ‘trusted‐ +% +grub-ofpathname - find OpenBOOT path for a device +grub-ofpathname DEVICE +The full documentation for grub-ofpathname is maintained as a Texinfo manual. If the info and grub- +ofpathname programs are properly installed at your site, the command +info grub-ofpathname +should give you access to the complete manual. +% +firewall-applet - firewalld applet +firewall-applet is a tray applet for firewalld. +firewall-applet does not support any special options. +The following options are supported: +-h, --help +Prints a short help text and exists. +QSETTINGS +% +mail -h | --help +mail [-BDdEFintv~] [-A account] [-a attachment] [-b bcc-addr] [-c cc-addr] [-q quote-file] [-r from-addr] +[-S variable[=value]] [-s subject] [-X cmd] [-.] to-addr ... [-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-X cmd] -f [file] +[-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-u user] [-X cmd] +[-- mta-option ...] +% +nohup - run a command immune to hangups, with output to a non-tty +nohup OPTION +--help display this help and exit +--version +output version information and exit +If standard input is a terminal, redirect it from an unreadable file. If standard output is a terminal, +append output to 'nohup.out' if possible, '$HOME/nohup.out' otherwise. If standard error is a terminal, +% +mkswap - set up a Linux swap area +mkswap [options] device [size] +mkswap sets up a Linux swap area on a device or in a file. +The device argument will usually be a disk partition (something like /dev/sdb7) but can also be a file. +The Linux kernel does not look at partition IDs, but many installation scripts will assume that parti‐ +type. Be careful not to kill your Solaris partitions.) +The size parameter is superfluous but retained for backwards compatibility. (It specifies the desired +% +systemd-delta - Find overridden configuration files +files. Files in /etc have highest priority, files in /run have the second highest priority, ..., files in +/lib have lowest priority. Files in a directory with higher priority override files with the same name in +directories of lower priority. In addition, certain configuration files can have ".d" directories which +contain "drop-in" files with configuration snippets which augment the main configuration file. "Drop-in" +files can be overridden in the same way by placing files with the same name in a directory of higher +containing directory, which corresponds to the name of the main configuration file, must match). For a +The command line argument will be split into a prefix and a suffix. Either is optional. The prefix must +% +xgettext - extract gettext strings from source +xgettext [OPTION] [INPUTFILE]... +Extract translatable strings from given input files. +Mandatory arguments to long options are mandatory for short options too. Similarly for optional argu‐ +ments. +Input file location: +INPUTFILE ... +input files +-f, --files-from=FILE +get list of input files from FILE +% +era_check - validate era metadata on device or file +era_check [options] {device|file} +era_check checks era metadata created by the device-mapper era target on a device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +xfs_db - debug an XFS filesystem +xfs_db [ -c cmd ] ... [ -i|r|x|F ] [ -f ] [ -l logdev ] [ -p progname ] device +xfs_db -V +xfs_db is used to examine an XFS filesystem. Under rare circumstances it can also be used to modify an +run xfs_db. +-f Specifies that the filesystem image to be processed is stored in a regular file at device (see the +% +chown - change file owner and group +chown [OPTION]... [OWNER][:[GROUP]] FILE... +chown [OPTION]... --reference=RFILE FILE... +each given file. If only an owner (a user name or numeric user ID) is given, that user is made the owner +of each given file, and the files' group is not changed. If the owner is followed by a colon and a group +name (or numeric group ID), with no spaces between them, the group ownership of the files is changed as +well. If a colon but no group name follows the user name, that user is made the owner of the files and +the group of the files is changed to that user's login group. If the colon and group are given, but the +as chgrp. If only a colon is given, or if the entire operand is empty, neither the owner nor the group +is changed. +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +kinit - obtain and cache Kerberos ticket-granting ticket +kinit [-V] [-l lifetime] [-s start_time] [-r renewable_life] [-p | -P] [-f | -F] [-a] [-A] [-C] [-E] [-v] +[-R] [-k [-t keytab_file]] [-c cache_name] [-n] [-S service_name] [-I input_ccache] [-T armor_ccache] [-X +attribute[=value]] [principal] +kinit obtains and caches an initial ticket-granting ticket for principal. +-V display verbose output. +-l lifetime +(duration string.) Requests a ticket with the lifetime lifetime. +% +tset, reset - terminal initialization +tset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +reset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +mination is done as follows, using the first terminal type found. +ting TERM according to the type passed to it by /etc/inittab.) +% +vgimportclone — import and rename duplicated volume group (e.g. a hardware snapshot) +vgimportclone is used to import a duplicated VG (e.g. hardware snapshot). Duplicate VG(s) and PV(s) are +not able to be used until they are made to coexist with the origin VG(s) and PV(s). vgimportclone +renames the VG associated with the specified PV(s) and changes the associated VG and PV UUIDs. +By default the snapshot VG will be renamed to the original name plus a numeric suffix to avoid +base VG name that is used for all VG renames. If a VG already exists with the specified name a +% +newuidmap - set the uid mapping of a user namespace +newuidmap pid uid loweruid count [uid loweruid count [ ... ]] +The newuidmap sets /proc/[pid]/uid_map based on its command line arguments and the uids allowed in +uid +Beginning of the range of UIDs inside the user namespace. +loweruid +Beginning of the range of UIDs outside the user namespace. +% +getconf — get configuration values +getconf [−v specification] system_var +getconf [−v specification] path_var pathname +In the first synopsis form, the getconf utility shall write to the standard output the value of the vari‐ +able specified by the system_var operand. +In the second synopsis form, the getconf utility shall write to the standard output the value of the +% +setvtrgb - set the virtual terminal RGB colors +setvtrgb vga|FILE|- +The setvtrgb command takes a single argument, either the string vga , or a path to a file containing the +red, green, and blue colors to be used by the Linux virtual terminals. +RED, GREEN, and BLUE. +To seed a valid FILE : +cat /sys/module/vt/parameters/default_{red,grn,blu} > FILE +And then edit the values in FILE +% +nstat, rtacct - network statistics tools. +nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics. +-h, --help Print help +-V, --version +Print version +-z, --zero +Dump zero counters too. By default they are not shown. +% +pwck - verify integrity of password files +pwck [options] [passwd [ shadow ]] +The pwck command verifies the integrity of the users and authentication information. It checks that all +entries in /etc/passwd and /etc/shadow have the proper format and contain valid data. The user is +prompted to delete entries that are improperly formatted or which have other uncorrectable errors. +Checks are made to verify that each entry has: +· the correct number of fields +· a unique and valid user name +· a valid user and group identifier +% +pic - compile pictures for troff or TeX +pic [ -nvCSU ] [ filename ... ] +pic -t [ -cvzCSU ] [ filename ... ] +pic compiles descriptions of pictures embedded within troff or TeX input files into commands that are +understood by TeX or troff. Each picture starts with a line beginning with .PS and ends with a line +beginning with .PE. Anything outside of .PS and .PE is passed through without change. +It is the user's responsibility to provide appropriate definitions of the PS and PE macros. When the +macro package being used does not supply such definitions (for example, old versions of -ms), appropriate +definitions can be obtained with -mpic: These will center each picture. +% +salt +The salt provided to the hash algorithm. +algorithm +argument. +% +rlogin - Remote login +rlogin [OPTION...] HOST +Starts a terminal session on a remote host. +-6, --ipv6 +use only IPv6 +allows an eight-bit input data path at all times +% +ssh-copy-id — use locally available keys to authorise logins on a remote machine +ssh-copy-id [-f] [-n] [-i [identity_file]] [-p port] [-o ssh_option] [user@]hostname +ssh-copy-id -h | -? +so password authentication should be enabled, unless you've done some clever use of multiple identities). +It assembles a list of one or more fingerprints (as described below) and tries to log in with each key, to +you being repeatedly prompted for pass-phrases). It then assembles a list of those that failed to log in, +and using ssh, enables logins with those keys on the remote server. By default it adds the keys by append‐ +ing them to the remote user's ~/.ssh/authorized_keys (creating the file, and directory, if necessary). It +is also capable of detecting if the remote system is a NetScreen, and using its ‘set ssh pka-dsa key ...’ +command instead. +% +mktemp - create a temporary file or directory +mktemp [OPTION]... [TEMPLATE] +secutive 'X's in last component. If TEMPLATE is not specified, use tmp.XXXXXXXXXX, and --tmpdir is +implied. Files are created u+rw, and directories u+rwx, minus umask restrictions. +-d, --directory +create a directory, not a file +-u, --dry-run +do not create anything; merely print a name (unsafe) +-q, --quiet +% +tabs - set tabs on a terminal +tabs [options]] [tabstop-list] +set_tab capabilities. If either is absent, tabs is unable to clear/set tab-stops. The terminal should +be configured to use hard tabs, e.g., +stty tab0 +General Options +-Tname +Tell tabs which terminal type to use. If this option is not given, tabs will use the $TERM environ‐ +ment variable. If that is not set, it will use the ansi+tabs entry. +% +libtool [OPTION]... [MODE-ARG]... +Provide generalized library-building support services. +--config +show all configuration variables +--debug +enable verbose shell tracing +-n, --dry-run +display commands without modifying any files +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +cache_check - repair cache metadata on device or file +cache_check [options] {device|file} +cache_check checks cache metadata created by the device-mapper cache target on a device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +ssh-add — adds private key identities to the authentication agent +ssh-add [-cDdkLlXx] [-E fingerprint_hash] [-t life] [file ...] +After loading a private key, ssh-add will try to load corresponding certificate information from the file‐ +name obtained by appending -cert.pub to the name of the private key file. Alternative file names can be +given on the command line. +If any file requires a passphrase, ssh-add asks for the passphrase from the user. The passphrase is read +from the user's tty. ssh-add retries the last passphrase if multiple identity files are given. +% +ktutil - Kerberos keytab file maintenance utility +ktutil +The ktutil command invokes a command interface from which an administrator can read, write, or edit +list +list +Displays the current keylist. +Alias: l +% +filefrag - report on file fragmentation +filefrag [ -bblocksize ] [ -BeksvxX ] [ files... ] +filefrag reports on how badly fragmented a particular file might be. It makes allowances for indirect +The filefrag program initially attempts to get the extent information using FIEMAP ioctl which is more +efficient and faster. If FIEMAP is not supported then filefrag will fall back to using FIBMAP. +-B Force the use of the older FIBMAP ioctl instead of the FIEMAP ioctl for testing purposes. +-bblocksize +Use blocksize in bytes for output instead of the filesystem blocksize. For compatibility with +% +prtstat - print statistics of a process +prtstat [-r|--raw] pid +prtstat -V|--version +file. +-r, --raw +Print the information in raw format. +-V, --version +Show the version information for prtstat. +% +kill - terminate a process +kill [-signal|-s signal|-p] [-q value] [-a] [--] pid|name... +kill -l [number] | -L +The command kill sends the specified signal to the specified processes or process groups. If no signal +caught. +Most modern shells have a builtin kill function, with a usage rather similar to that of the command +described here. The --all, --pid, and --queue options, and the possibility to specify processes by com‐ +mand name, are local extensions. +If signal is 0, then no actual signal is sent, but error checking is still performed. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +lvs — report information about logical volumes +[-d|--debug] [-h|-?|--help] [-H|--history] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] +{basic|json}] [--rows] [--separator Separator] [--segments] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] +lvs produces formatted output about logical volumes. +% +pkaction - Get details about a registered action +pkaction [--version] [--help] +pkaction [--verbose] +pkaction --action-id action [--verbose] +pkaction is used to obtain information about registered polkit actions. If called without --action-id +then all actions are displayed. Otherwise the action action. If called without the --verbose option only +the name of the action is shown. Otherwise details about the actions are shown. +RETURN VALUE +On success pkaction returns 0. Otherwise a non-zero value is returned and a diagnostic message is printed +on standard error. +% +printf - format and print data +printf FORMAT [ARGUMENT]... +printf OPTION +Print ARGUMENT(s) according to FORMAT, or execute according to OPTION: +--help display this help and exit +--version +output version information and exit +FORMAT controls the output as in C printf. Interpreted sequences are: +\" double quote +% +gpm - a cut and paste utility and mouse server for virtual consoles +gpm [ options ] +intended as a replacement for "selection" as a cut-and-paste mechanism; it also provides additional +facilities. The "selection" package offered the first cut-and-paste implementation for Linux using two +mouse buttons, and the cut buffer is still called "selection buffer" or just "selection" throughout this +document. The information below is extracted from the texinfo file, which is the preferred source of +information. +is meant to describe the command-line options for gpm, while its internals are outlined in the next sec‐ +tion. +% +ldconfig - configure dynamic linker run-time bindings +/sbin/ldconfig [ -nNvXV ] [ -f conf ] [ -C cache ] [ -r root ] directory ... +/sbin/ldconfig -l [ -v ] library ... +/sbin/ldconfig -p +ldconfig creates the necessary links and cache to the most recent shared libraries found in the directo‐ +ries specified on the command line, in the file /etc/ld.so.conf, and in the trusted directories, /lib and +The cache is used by the run-time linker, ld.so or ld-linux.so. ldconfig checks the header and filenames +of the libraries it encounters when determining which versions should have their links updated. +% +gdbm_dump - dump a GDBM database to a file +gdbm_dump [-H FMT] [--format=FMT] DB_FILE [FILE] +gdbm_dump [-Vh] [--help] [--usage] [--version] +dump file is supplied by the second argument (FILE). If not specified, the output goes to the standard +error. +of the DB_FILE. +-H, --format=FMT +% +chgpasswd - update group passwords in batch mode +chgpasswd [options] +The chgpasswd command reads a list of group name and password pairs from standard input and uses this +information to update a set of existing groups. Each line is of the format: +group_name:password +By default the supplied password must be in clear-text, and is encrypted by chgpasswd. +The default encryption algorithm can be defined for the system with the ENCRYPT_METHOD variable of +/etc/login.defs, and can be overwritten with the -e, -m, or -c options. +% +dbus-send - Send a message to a message bus +[--reply-timeout=MSEC] [--type=TYPE] OBJECT_PATH INTERFACE.MEMBER [CONTENTS...] +The dbus-send command is used to send a message to a D-Bus message bus. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +There are two well-known message buses: the systemwide message bus (installed on many systems as the +"messagebus" service) and the per-user-login-session message bus (started each time a user logs in). The +--system and --session options direct dbus-send to send messages to the system or session buses +respectively. If neither is specified, dbus-send sends to the session bus. +Nearly all uses of dbus-send must provide the --dest argument which is the name of a connection on the +bus to send the message to. If --dest is omitted, no destination is set. +% +named-checkzone, named-compilezone - zone file validity checking or converting tool +named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] +[-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] +[-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} +{filename} +named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] +[-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] +[-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} +{filename} +named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does +into a name server. +% +dbus-monitor - debug probe to print message bus messages +dbus-monitor [--system | --session | --address ADDRESS] [--profile | --monitor | --pcap | --binary] +[watch expressions] +The dbus-monitor command is used to monitor messages going through a D-Bus message bus. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +There are two well-known message buses: the systemwide message bus (installed on many systems as the +"messagebus" service) and the per-user-login-session message bus (started each time a user logs in). The +--system and --session options direct dbus-monitor to monitor the system or session buses respectively. +If neither is specified, dbus-monitor monitors the session bus. +dbus-monitor has two different text output modes: the 'classic'-style monitoring mode, and profiling +mode. The profiling format is a compact format with a single line per message and microsecond-resolution +% +rlogind - Remote login server +rlogind [OPTION...] +Remote login server +-6, --ipv6 +only IPv6 in daemon mode +-a, --verify-hostname +ask hostname for verification +% +ldns-signzone - sign a zonefile with DNSSEC data +ldns-signzone is used to generate a DNSSEC signed zone. When run it will create a new zonefile that con‐ +Keys must be specified by their base name (i.e. without .private). If the DNSKEY that belongs to the key +in the .private file is not present in the zone, it will be read from the file <base name>.key. If that +file does not exist, the DNSKEY value will be generated from the private key. +Multiple keys can be specified, Key Signing Keys are used as such when they are either already present in +the zone, or specified in a .key file, and have the KSK bit set. +% +grub-file - check file type +Check if FILE is of specified type. +% +lesskey - specify key bindings for less +lesskey [-o output] [--] [input] +lesskey [--output=output] [--] [input] +lesskey -V +lesskey --version +Lesskey is used to specify a set of key bindings to be used by less. The input file is a text file which +describes the key bindings. If the input file is "-", standard input is read. If no input file is spec‐ +ified, a standard filename is used as the name of the input file, which depends on the system being used: +$HOME/lesskey.ini is used, or $INIT/lesskey.ini if $HOME is undefined. The output file is a binary file +which is used by less. If no output file is specified, and the environment variable LESSKEY is set, the +value of LESSKEY is used as the name of the output file. Otherwise, a standard filename is used as the +name of the output file, which depends on the system being used: On Unix and OS-9 systems, $HOME/.less is +% +pg - browse pagewise through text files +pg [-amount] [-p prompt] [-cefnrs] [+line] [+/pattern/] [file...] +pg displays a text file on a CRT one screenful at once. After each page, a prompt is displayed. The +If no filename is given on the command line, pg reads from standard input. If standard output is not a +If input comes from a pipe, pg stores the data in a buffer file while reading, to make navigation possi‐ +ble. +pg accepts the following options: +% +debugreiserfs - The debugging tool for the ReiserFS filesystem. +device +debugreiserfs sometimes helps to solve problems with reiserfs filesystems. When run without options it +prints the super block of the ReiserFS filesystem found on the device. +device is the special file corresponding to the device (e.g /dev/hdXX for an IDE disk partition or +/dev/sdXX for a SCSI disk partition). +-j device +prints the contents of the journal. The option -p allows it to pack the journal with other meta‐ +% +unexpand - convert spaces to tabs +unexpand [OPTION]... [FILE]... +Convert blanks in each FILE to tabs, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +convert all blanks, instead of just initial blanks +--first-only +convert only leading sequences of blanks (overrides -a) +% +loadkeys - load keyboard translation tables +loadkeys [ -b --bkeymap ] [ -c --clearcompose ] [ -C '<FILE>' | --console=<FILE> ] [ -d --default ] [ -h +--help ] [ -m --mktable ] [ -q --quiet ] [ -s --clearstrings ] [ -u --unicode ] [ -v --verbose ] [ file‐ +name... ] +The program loadkeys reads the file or files specified by filename.... Its main purpose is to load the +kernel keymap for the console. You can specify console device by the -C (or --console ) option. +RESET TO DEFAULT +If the -d (or --default ) option is given, loadkeys loads a default keymap, probably the file +defkeymap.map either in /usr/share/kbd/keymaps or in /usr/src/linux/drivers/char. (Probably the former +times, with a strange keymap loaded (with the minus on some obscure unknown modifier combination) it is +easier to type `loadkeys defkeymap'. +% +dbus-uuidgen - Utility to generate UUIDs +The dbus-uuidgen command generates or reads a universally unique ID. +spec. Many systems have a separate command for that (often called "uuidgen"). +See http://www.freedesktop.org/software/dbus/ for more information about D-Bus. +The primary usage of dbus-uuidgen is to run in the post-install script of a D-Bus package like this: +dbus-uuidgen --ensure +% +ldns-resolver - tries to create a resolver from a resolv.conf file. +ldns-resolver file +library for robusteness with input data. +ldns-resolver takes a filename of the resolv.conf file as input. For example ldns-resolver +/etc/resolv.conf will show if the file can be parsed successfully. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +% +vpddecode - VPD structure decoder +vpddecode prints the "vital product data" information that can be found in almost all IBM and Lenovo com‐ +puters. Available items are: +· BIOS Build ID +· Box Serial Number +· Motherboard Serial Number +· Machine Type/Model +% +git-upload-archive - Send archive back to git-archive +git upload-archive <directory> +Invoked by git archive --remote and sends a generated archive to the other end over the Git protocol. +archive side, and the program pair is meant to be used to get an archive from a remote repository. +SECURITY +pruned, git-upload-archive avoids serving archives for commits and trees that are not reachable from the +repository’s refs. However, because calculating object reachability is computationally expensive, +git-upload-archive implements a stricter but easier-to-check set of rules: +% +cmp - compare two files byte by byte +Compare two files byte by byte. +default). +Mandatory arguments to long options are mandatory for short options too. +-b, --print-bytes +print differing bytes +-i, --ignore-initial=SKIP +% +plipconfig - fine tune PLIP device parameters +plipconfig interface [nibble NN] [trigger NN] +plipconfig [-V] [--version] [-h] [--help] +Plipconfig is used to (hopefully) improve PLIP performance by changing the default timing parameters used +by the PLIP protocol. Results are dependent on the parallel port hardware, cable, and the CPU speed of +each machine on each end of the PLIP link. +If the single interface argument is given, plipconfig displays the status of the given interface only. +Otherwise, it will try to set the options. +nibble NN +% +uuidd - UUID generation daemon +uuidd [options] +The uuidd daemon is used by the UUID library to generate universally unique identifiers (UUIDs), espe‐ +cially time-based UUIDs, in a secure and guaranteed-unique fashion, even in the face of large numbers of +threads running on different CPUs trying to grab UUIDs. +-d, --debug +-F, --no-fork +Do not daemonize using a double-fork. +% +dbus-update-activation-environment - update environment used for D-Bus session services +dbus-update-activation-environment [--systemd] [--verbose] --all | VAR... | VAR=VAL... +dbus-update-activation-environment updates the list of environment variables used by dbus-daemon +--session when it activates session services without using systemd. +With the --systemd option, if an instance of systemd --user is available on D-Bus, it also updates the +list of environment variables used by systemd --user when it activates user services, including D-Bus +a service is started. For instance, it is not useful to add DBUS_SESSION_BUS_ADDRESS to dbus-daemon's +activation environment, although it might still be useful to add it to systemd's activation environment. +% +shred - overwrite a file to hide its contents, and optionally delete it +shred [OPTION]... FILE... +Overwrite the specified FILE(s) repeatedly, in order to make it harder for even very expensive hardware +probing to recover the data. +If FILE is -, shred standard output. +Mandatory arguments to long options are mandatory for short options too. +-f, --force +change permissions to allow writing if necessary +-n, --iterations=N +% +cryptsetup - manage plain dm-crypt and LUKS encrypted volumes +cryptsetup <options> <action> <action args> +cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings. These include plain dm- +crypt volumes and LUKS volumes. The difference is that LUKS uses a metadata header and can hence offer +more features than plain dm-crypt. On the other hand, the header is visible and vulnerable to damage. +In addition, cryptsetup provides limited support for the use of historic loopaes volumes and for True‐ +Crypt compatible volumes. +PLAIN DM-CRYPT OR LUKS? +Unless you understand the cryptographic background well, use LUKS. With plain dm-crypt there are a num‐ +ber of possible user errors that massively decrease security. While LUKS cannot fix them all, it can +lessen the impact for many of them. +% +getkeycodes - print kernel scancode-to-keycode mapping table +getkeycodes +The getkeycodes command prints the kernel scancode-to-keycode mapping table. +None. +% +locale - get locale-specific information +locale [option] +locale [option] -a +locale [option] -m +locale [option] name... +The locale command displays information about the current locale, or all locales, on standard output. +When invoked without arguments, locale displays the current locale settings for each locale category (see +Values for variables set in the environment are printed without double quotes, implied values are printed +with double quotes. +If either the -a or the -m option (or one of their long-format equivalents) is specified, the behavior is +% +runuser - run a command with substitute user and group ID +runuser [options] -u user command [argument...] +runuser [options] [-] [user [argument...]] +runuser allows to run commands with a substitute user and group ID. If the option -u is not given, it +falls back to su-compatible semantics and a shell is executed. The difference between the commands +only) and it uses a different PAM configuration. The command runuser does not have to be installed with +suid permissions. +When called without arguments, runuser defaults to running an interactive shell as root. +For backward compatibility, runuser defaults to not change the current directory and to only set the +% +groffer - display groff files and man pages on X and tty +groffer [--] [filespec ....] +groffer [mode-option ....] [groff-options ....] [man-options ....] [X-options ....] [--] [‐ +filespec ....] +groffer -h | --help +groffer -v | --version +the groff language, see groff(7), or other roff languages, see roff(7), that are compatible to the origi‐ +nal troff language. It finds and runs all necessary groff preprocessors, such as chem. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +pwdx - report current working directory of a process +pwdx [options] pid [...] +-V, --version +Output version information and exit. +-h, --help +Output help screen and exit. +STANDARDS +No standards apply, but pwdx looks an awful lot like a SunOS command. +% +newgidmap - set the gid mapping of a user namespace +newgidmap pid gid lowergid count [gid lowergid count [ ... ]] +The newgidmap sets /proc/[pid]/gid_map based on its command line arguments and the gids allowed in +gid +Beginning of the range of GIDs inside the user namespace. +lowergid +Beginning of the range of GIDs outside the user namespace. +% +ntpq - standard NTP query program +ntpq [-flags] [-flag [value]] [--option-name[[=| ]value]] [ host ...] +The ntpq utility program is used to query NTP servers which implement the standard NTP mode 6 control +read and write arbitrary variables can be assembled, with raw and pretty-printed output options being +available. The ntpq utility can also obtain and print a list of peers in a common format by sending mul‐ +tiple queries to the server. If one or more request options is included on the command line when ntpq is +executed, each of the requests will be sent to the NTP servers running on each of the hosts given as com‐ +mand line arguments, or on localhost by default. If no request options are given, ntpq will attempt to +read commands from the standard input and execute these on the NTP server running on the first host given +% +ps - report a snapshot of the current processes. +ps [options] +ps displays information about a selection of the active processes. If you want a repetitive update of +options, which are functionally identical, due to the many standards and ps implementations that this ps +% +drill - get (debug) information out of DNS(SEC) +drill is a tool to designed to get all sorts of information out of the DNS. It is specificly designed to +be used with DNSSEC. +The name drill is a pun on dig. With drill you should be able get even more information than with dig. +If no arguments are given class defaults to 'IN' and type to 'A'. The server(s) specified in +/etc/resolv.conf are used to query against. +name Ask for this name. +@server Send to query to this server. If not specified use the nameservers from /etc/resolv.conf. +% +kbdrate - reset the keyboard repeat rate and delay time +kbdrate [ -s ] [ -r rate ] [ -d delay ] +kbdrate is used to change the keyboard repeat rate and delay time. The delay is the amount of time that +a key must be depressed before it will start to repeat. +-s Silent. No messages are printed. +-r rate +% +grpck - verify integrity of group files +grpck [options] [group [ shadow ]] +The grpck command verifies the integrity of the groups information. It checks that all entries in +/etc/group and /etc/gshadow have the proper format and contain valid data. The user is prompted to delete +entries that are improperly formatted or which have other uncorrectable errors. +Checks are made to verify that each entry has: +· the correct number of fields +· a unique and valid group name +· a valid group identifier (/etc/group only) +% +tac - concatenate and print files in reverse +tac [OPTION]... [FILE]... +Write each FILE to standard output, last line first. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --before +attach the separator before instead of after +-r, --regex +interpret the separator as a regular expression +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +vgck — check volume group metadata +vgck checks LVM metadata for each named volume group for consistency. +% +lvextend — extend the size of a logical volume +[-h|-?|--help] [-f|--force] [-i|--stripes Stripes [-I|--stripesize StripeSize]] {-l|--extents [+]Logi‐ +calExtentsNumber[%{VG|LV|PVS|FREE|ORIGIN}] | -L|--size [+]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [-n|--nof‐ +sck] [--noudevsync] [-r|--resizefs] [--reportformat {basic|json}] [--use-policies] [-t|--test] [-v|--ver‐ +bose] LogicalVolumePath [PhysicalVolumePath[:PE[-PE]]...] +lvextend allows you to extend the size of a logical volume. Extension of snapshot logical volumes (see +% +grub-bios-setup - set up a device to boot using GRUB +grub-bios-setup [OPTION...] DEVICE +Set up images to boot from DEVICE. +You should not normally run this program directly. Use grub-install instead. +-a, --allow-floppy +make the drive also bootable as floppy (default for fdX devices). May break on some BIOSes. +-b, --boot-image=FILE +use FILE as the boot image [default=boot.img] +-c, --core-image=FILE +% +catman - create or update the pre-formatted manual pages +catman [-d?V] [-M path] [-C file] [section] ... +catman is used to create an up to date set of pre-formatted manual pages known as cat pages. Cat pages +are generally much faster to display than the original manual pages, but require extra storage space. +The decision to support cat pages is that of the local administrator, who must provide suitable directo‐ +ries to contain them. +The options available to catman are the manual page hierarchies and sections to pre-format. The default +hierarchies are those specified as system hierarchies in the man-db configuration file, and the default +sections are either the colon-delimited contents of the environment variable $MANSECT or the standard set +compiled into man if $MANSECT is undefined. Supplying catman with a set of whitespace-delimited section +names will override both of the above. +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +sprof - read and display shared object profiling data +sprof [option]... shared-object-path [profile-data-path] +The sprof command displays a profiling summary for the shared object (shared library) specified as its +first command-line argument. The profiling summary is created using previously generated profiling data +in the (optional) second command-line argument. If the profiling data pathname is omitted, then sprof +will attempt to deduce it using the soname of the shared object, looking for a file with the name <son‐ +ame>.profile in the current directory. +The following command-line options specify the profile output to be produced: +-c, --call-pairs +Print a list of pairs of call paths for the interfaces exported by the shared object, along with +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +dnssec-coverage - checks future DNSKEY coverage for a zone +dnssec-coverage [-K directory] [-l length] [-f file] [-d DNSKEY TTL] [-m max TTL] [-r interval] +[-c compilezone path] [-k] [-z] [zone...] +dnssec-coverage verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set +properly to ensure no future lapses in DNSSEC coverage. +If zone is specified, then keys found in the key repository matching that zone are scanned, and an +ordered list is generated of the events scheduled for that key (i.e., publication, activation, +inactivation, deletion). The list of events is walked in order of occurrence. Warnings are generated if +any event is scheduled which could cause the zone to enter a state in which validation failures might +occur: for example, if the number of published or active keys for a given algorithm drops to zero, or if +a key is deleted from the zone too soon after a new key is rolled, and cached data signed by the prior +key has not had time to expire from resolver caches. +% +mkhomedir_helper {user} [umask [ path-to-skel ]] +mkhomedir_helper is a helper program for the pam_mkhomedir module that creates home directories and +populates them with contents of the specified skel directory. +The helper is separated from the module to not require direct access from login SELinux domains to the +contents of user home directories. The SELinux domain transition happens when the module is executing the +mkhomedir_helper. +The helper never touches home directories if they already exist. +% +patch - apply a diff file to an original +patch [options] [originalfile [patchfile]] +but usually just +patch -pnum <patchfile +patch takes a patch file patchfile containing a difference listing produced by the diff program and +applies those differences to one or more original files, producing patched versions. Normally the +patched versions are put in place of the originals. Backups can be made; see the -b or --backup option. +The names of the files to be patched are usually taken from the patch file, but if there's just one file +to be patched it can be specified on the command line as originalfile. +Upon startup, patch attempts to determine the type of the diff listing, unless overruled by a -c (--con‐ +% +vgremove — remove a volume group +vgremove allows you to remove one or more volume groups. If one or more physical volumes in the volume +group are lost, consider vgreduce --removemissing to make the volume group metadata consistent again. +If there are logical volumes that exist in the volume group, a prompt will be given to confirm removal. +You can override the prompt with -f. +-f, --force +% +afmtodit - create font files for use with groff -Tps and -Tpdf +afmtodit [ -ckmnsvx ] [ -a n ] [ -d desc_file ] [ -e enc_file ] [ -f internal_name ] [ -i n ] +[ -o out_file ] afm_file map_file font +The whitespace between a command line option and its argument is optional. +afmtodit creates a font file for use with groff, grops, and gropdf. afmtodit is written in perl; you +afm_file is the AFM (Adobe Font Metric) file for the font. +map_file is a file that says which groff character names map onto each PostScript character name; this +file should contain a sequence of lines of the form +% +an unmounted file system located on device. If the filesystem is mounted, it can be used to expand the +size of the mounted filesystem, assuming the kernel and the file system supports on-line resizing. (Mod‐ +systems will require the use of file systems with the resize_inode feature enabled.) +The size parameter specifies the requested new size of the filesystem. If no units are specified, the +units of the size parameter shall be the filesystem blocksize of the filesystem. Optionally, the size +larger than the size of the partition. If size parameter is not specified, it will default to the size +% +systemd-escape - Escape strings for usage in system unit names +to escape and to undo escaping of strings. +The command takes any number of strings on the command line, and will process them individually, one +after another. It will output them separated by spaces to stdout. +By default, this command will escape the strings passed, unless --unescape is passed which results in the +inverse operation being applied. If --mangle is given, a special mode of escaping is applied instead, +which assumes the string is already escaped but will escape everything that appears obviously +non-escaped. +% +gprof - display call graph profile data +gprof [ -[abcDhilLrsTvwxyz] ] [ -[ACeEfFJnNOpPqQZ][name] ] +[ -I dirs ] [ -d[num] ] [ -k from/to ] +[ -m min-count ] [ -R map_file ] [ -t table-length ] +[ --[no-]annotated-source[=name] ] +[ --[no-]exec-counts[=name] ] +[ --[no-]flat-profile[=name] ] [ --[no-]graph[=name] ] +[ --[no-]time=name] [ --all-lines ] [ --brief ] +[ --debug[=level] ] [ --function-ordering ] +[ --file-ordering map_file ] [ --directory-path=dirs ] +[ --display-unused-functions ] [ --file-format=name ] +[ --file-info ] [ --help ] [ --line ] [ --inline-file-names ] +[ --min-count=n ] [ --no-static ] [ --print-path ] +[ --separate-files ] [ --static-call-graph ] [ --sum ] +[ --table-length=len ] [ --traditional ] [ --version ] +% +lvremove — remove a logical volume +[--reportformat {basic|json}] [-S|--select Selection] [-t|--test] [-v|--verbose] [--version] [-f|--force] +lvremove removes one or more logical volumes. Confirmation will be requested before deactivating any +active logical volume prior to removal. Logical volumes cannot be deactivated or removed while they are +open (e.g. if they contain a mounted filesystem). Removing an origin logical volume will also remove all +dependent snapshots. +If the logical volume is clustered then it must be deactivated on all nodes in the cluster before it can +be removed. A single lvchange command issued from one node can do this. +If the configuration setting metadata/record_lvs_history is enabled and the logical volume being removed +% +blkid - locate/print block device attributes +blkid -L label | -U uuid +blkid [-dghlv] [-c file] [-o format] [-s tag] +blkid -p [-O offset] [-o format] [-S size] [-s tag] +[-n list] [-u list] device ... +blkid -i [-o format] [-s tag] device ... +mine the type of content (e.g. filesystem or swap) that a block device holds, and also the attributes +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +Generate Makefile.in for configure from Makefile.am. +Operation modes: +--help print this help, then exit +--version +print version number, then exit +-v, --verbose +verbosely list files processed +% +sh — shell, the standard command language interpreter +sh [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +[command_file [argument...]] +sh −c [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +command_string [command_name [argument...]] +sh −s [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +[argument...] +% +dd - convert and copy a file +dd [OPERAND]... +dd OPTION +Copy a file, converting and formatting according to the operands. +bs=BYTES +read and write up to BYTES bytes at a time +cbs=BYTES +convert BYTES bytes at a time +conv=CONVS +convert the file as per the comma separated symbol list +% +gio-querymodules - GIO module cache creation +gio-querymodules {DIRECTORY...} +implemented extension points for each module that has been found. It is used by GIO at runtime to avoid +opening all modules just to find out which extension points they are implementing. +GIO modules are usually installed in the gio/modules subdirectory of libdir. +% +mkfs - build a Linux filesystem +mkfs [options] [-t type] [fs-options] device [size] +mkfs is used to build a Linux filesystem on a device, usually a hard disk partition. The device argument +tem. The size argument is the number of blocks to be used for the filesystem. +In actuality, mkfs is simply a front-end for the various filesystem builders (mkfs.fstype) available +under Linux. The filesystem-specific builder is searched for via your PATH environment setting only. +Please see the filesystem-specific builder manual pages for further details. +% +[ Certificate-usage [ Selector [ Matching-type ] ] ] +ldns-dane -h +ldns-dane -v +In the first form: A TLS connection to name:port is established. The TLSA resource record(s) for name +are used to authenticate the connection. +In the second form: The TLSA record(s) are read from tlsafile and used to authenticate the TLS service +% +gpm-root - a default handler for gpm, used to draw menus on the root window +gpm-root [ options ] +The program gpm-root is designed to handle Control-Mouse events to draw menus on the background of the +current tty. The actual menus are described by a configuration file in the user's home directory. +screen handling capabilities required by the program. +The program uses the files /dev/vcs* to draw to the console screen. These are available only from kernel +dump/restore capability. +% +mtrace - interpret the malloc trace log +mtrace [option]... [binary] mtracedata +mtrace is a Perl script used to interpret and provide human readable output of the trace log contained in +mtrace also contains the source file name with line number information for problem locations (assuming +that binary was compiled with debugging information). +--help Print help and exit. +--version +% +lslocks - list local system locks +lslocks [options] +lslocks lists information about all the currently held file locks in a Linux system. +-J, --json +Use JSON output format. +-n, --noheadings +Do not print a header line. +-o, --output list +% +xzmore, lzmore - view xz or lzma compressed (text) files +xzmore [file...] +lzmore [file...] +time on a soft-copy terminal. +To use a pager other than the default more, set environment variable PAGER to the name of the desired +program. The name lzmore is provided for backward compatibility with LZMA Utils. +e or q When the prompt --More--(Next file: file) is printed, this command causes xzmore to exit. +s When the prompt --More--(Next file: file) is printed, this command causes xzmore to skip the next +file and continue. +% +Prompts the user for a passphrase and inserts it into the specified keyring. If no keyring is +does not. +% +hpftodit [ -adqsv ] [ -in ] tfm_file map_file font +It is possible to have whitespace between the -i option and its parameter. +for the font; Intellifont and TrueType TFM files are supported, but symbol set TFM files are not. +map_file is a file giving the groff names for characters in the font; this file should consist of a +sequence of lines of the form: +where m is a decimal integer giving the MSL number of the character, u is a hexadecimal integer giving +% +dirmngr - CRL and OCSP daemon +dirmngr [options] command [args] +versions it is also used as a server for managing and downloading certificate revocation lists (CRLs) for +invoked internally by gpg, gpgsm, or via the gpg-connect-agent tool. +Commands are not distinguished from options except for the fact that only one command is allowed. +--version +mand. +% +grub-mklayout - generate a GRUB keyboard layout file +by GRUB's keymap command. +Generate GRUB keyboard layout from Linux console one. +-i, --input=FILE +set input filename. Default is STDIN +-o, --output=FILE +set output filename. Default is STDOUT +% +mdig - DNS pipelined lookup utility +[-x addr] [plusopt...] +mdig {-h} +mdig [@server] {global-opt...} {{local-opt...} {query}...} +mdig is a multiple/pipelined query version of dig: instead of waiting for a response after sending each +query, it begins by sending all queries. Responses are displayed in the order in which they are received, +not in the order the corresponding queries were sent. +mdig options are a subset of the dig options, and are divided into "anywhere options" which can occur +anywhere, "global options" which must occur before the query name (or they are ignored with a warning), +% +grub-script-check - check grub.cfg for syntax errors +grub-script-check [OPTION...] [PATH] +Checks GRUB script configuration file for syntax errors. +-v, --verbose +print verbose messages. +-?, --help +give this help list +--usage +give a short usage message +% +captoinfo - convert a termcap description into a terminfo description +captoinfo looks in each given text file for termcap descriptions. For each one found, an equivalent ter‐ +minfo description is written to standard output. Termcap tc capabilities are translated directly to ter‐ +minfo use capabilities. +If no file is given, then the environment variable TERMCAP is used for the filename or entry. If TERMCAP +is a full pathname to a file, only the terminal whose name is specified in the environment variable TERM +is extracted from that file. If the environment variable TERMCAP is not set, then the file +/usr/share/terminfo is read. +-v print out tracing information on standard error as the program runs. +% +tee - read from standard input and write to standard output and files +tee [OPTION]... [FILE]... +Copy standard input to each FILE, and also to standard output. +-a, --append +append to the given FILEs, do not overwrite +-i, --ignore-interrupts +ignore interrupt signals +-p diagnose errors writing to non pipes +--output-error[=MODE] +% +netcap - a program to see capabilities +netcap +netcap is a program that prints out a report of process capabilities. If the application is using tcp, +udp, raw, or packet family of sockets AND has any capabilities, it will be in the report. If the process +has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is +found to be true, a '+' symbol is added. +Some directories in the /proc file system are readonly by root. The program will try to access and report +what it can. But if nothing comes out, try changing to the root user and re-run this program. +% +thin_restore - restore thin provisioning metadata file to device or file +thin_restore [options] -i {device|file} -o {device|file} +thin_restore restores thin provisioning metadata created by the respective device-mapper target dumped +to another device or file. If restored to a metadata device , the metadata can be processed by the +device-mapper target. +-q, --quiet +Suppress output messages, return only exit code. +-i, --input {device|file} +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +dbus-launch - Utility to start a message bus from a shell script +dbus-launch [--version] [--help] [--sh-syntax] [--csh-syntax] [--auto-syntax] [--binary-syntax] +[PROGRAM] [ARGS...] +The dbus-launch command is used to start a session bus instance of dbus-daemon from a shell script. It +would normally be called from a user's login scripts. Unlike the daemon itself, dbus-launch exits, so +backticks or the $() construct can be used to read information from dbus-launch. +With no arguments, dbus-launch will launch a session bus instance and print the address and PID of that +instance to standard output. +the appropriate environment variables so the specified program can find the bus, and then execute the +% +telnetd - Telnet server +telnetd [OPTION...] +DARPA telnet protocol server +-D, --debug[=LEVEL] +set debugging level +-E, --exec-login=STRING +set program to be executed instead of /usr/bin/login +-h, --no-hostinfo +do not print host information before login has been completed +% +ionice - set or get process I/O scheduling class and priority +ionice [-c class] [-n level] [-t] -p PID... +ionice [-c class] [-n level] [-t] -P PGID... +ionice [-c class] [-n level] [-t] -u UID... +ionice [-c class] [-n level] [-t] command [argument...] +-p is given, ionice will query the current I/O scheduling class and priority for that process. +When command is given, ionice will run this command with the given arguments. If no class is specified, +As of this writing, a process can be in one of three scheduling classes: +% +tcpdump - dump traffic on a network +tcpdump [ -AbdDefhHIJKlLnNOpqRStuUvxX# ] [ -B buffer_size ] +[ -c count ] +[ -C file_size ] [ -G rotate_seconds ] [ -F file ] +[ -i interface ] [ -j tstamp_type ] [ -m module ] [ -M secret ] +[ --number ] [ -Q in|out|inout ] +[ -r file ] [ -V file ] [ -s snaplen ] [ -T type ] [ -w file ] +[ -W filecount ] +[ -E spi@ipaddr algo:secret,... ] +[ -y datalinktype ] [ -z postrotate-command ] [ -Z user ] +[ --time-stamp-precision=tstamp_precision ] +[ --immediate-mode ] [ --version ] +[ expression ] +% +lex — generate programs for lexical tasks (DEVELOPMENT) +lex [−t] [−n|−v] [file...] +The lex utility shall generate C programs to be used in lexical processing of character input, and that +can be used as an interface to yacc. The C programs shall be generated from lex source code and conform +to the ISO C standard, without depending on any undefined, unspecified, or implementation-defined behav‐ +documented by the implementation. Usually, the lex utility shall write the program it generates to the +file lex.yy.c; the state of this file is unspecified if lex exits with a non-zero exit status. See the +% +chgrp - change group ownership +chgrp [OPTION]... GROUP FILE... +chgrp [OPTION]... --reference=RFILE FILE... +Change the group of each FILE to GROUP. With --reference, change the group of each FILE to that of +RFILE. +-c, --changes +like verbose but report only when a change is made +-f, --silent, --quiet +suppress most error messages +-v, --verbose +% +named-checkzone, named-compilezone - zone file validity checking or converting tool +named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] +[-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] +[-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} +{filename} +named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] +[-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] +[-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} +{filename} +named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does +into a name server. +% +grub-mkfont - make GRUB font files +-a, --force-autohint +force autohint +-b, --bold +convert to bold font +-c, --asce=NUM +set font ascent +% +key.dns_resolver - Upcall for request-key to handle dns_resolver keys +/sbin/key.dns_resolver <key> +/sbin/key.dns_resolver -D [-v] [-v] <keydesc> <calloutinfo> +and AFS) want to perform a hostname lookup and the kernel does not have the key cached. It is not ordi‐ +narily intended to be called directly. +It can be called in debugging mode to test its functionality by passing a -D flag on the command line. +For this to work, the key description and the callout information must be supplied. Verbosity can be +increased by supplying one or more -v flags. +ERRORS +All errors will be logged to the syslog. +% +newusers - update and create new users in batch +newusers [options] [file] +The newusers command reads a file (or the standard input by default) and uses this information to update +a set of existing users or to create new users. Each line is in the same format as the standard password +pw_name:pw_passwd:pw_uid:pw_gid:pw_gecos:pw_dir:pw_shell +pw_name +It can be the name of a new user or the name of an existing user (or a user created before by +% +swaplabel - print or change the label or UUID of a swap area +swaplabel [-L label] [-U UUID] device +swaplabel will display or change the label or UUID of a swap partition located on device (or regular +file). +If the optional arguments -L and -U are not given, swaplabel will simply display the current swap-area +label and UUID of device. +If an optional argument is present, then swaplabel will change the appropriate value on device. These +label or UUID on an actively used swap device. +% +find - search for files in a directory hierarchy +find [-H] [-L] [-P] [-D debugopts] [-Olevel] [starting-point...] [expression] +given starting-point by evaluating the given expression from left to right, according to the rules of +precedence (see section OPERATORS), until the outcome is known (the left hand side is false for and oper‐ +ations, true for or), at which point find moves on to the next file name. If no starting-point is speci‐ +fied, `.' is assumed. +If you are using find in an environment where security is important (for example if you are using it to +search directories that are writable by other users), you should read the "Security Considerations" chap‐ +ter of the findutils documentation, which is called Finding Files and comes with findutils. That docu‐ +ful source of information. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +etags, ctags - generate tag file for Emacs, vi +etags [-aCDGIQRVh] [-i file] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--no-defines] [--globals] [--no-globals] [--no-line-directive] [--include=file] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--output=tagfile] +[--class-qualify] [--regex=regexp] [--no-regex] [--help] [--version] file ... +ctags [-aCdgIQRVh] [-BtTuvwx] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--backward-search] [--cxref] [--no-defines] [--globals] [--no-globals] [--no-line-directive] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--class-qualify] +[--output=tagfile] [--regex=regexp] [--update] [--help] [--version] file ... +% +pcregrep - a grep with Perl-compatible regular expressions. +pcregrep searches files for character patterns, in the same way as other grep commands do, but it uses +the PCRE regular expression library to support patterns that are compatible with the regular expressions +full description of the syntax and semantics of the regular expressions that PCRE supports. +Patterns, whether supplied on the command line or in a separate file, are given without delimiters. For +example: +pcregrep Thursday /etc/motd +% +xzless, lzless - view xz or lzma compressed (text) files +xzless [file...] +lzless [file...] +xzless is a filter that displays text from compressed files to a terminal. It works on files compressed +The command named lzless is provided for backward compatibility with LZMA Utils. +ENVIRONMENT +% +pvscan — scan all disks for physical volumes +ingfailure] [-e|--exported] [-n|--novolumegroup] [--reportformat {basic|json}] [-s|--short] [-u|--uuid] +pvscan [-d|--debug] [-h|--help] --cache [-a|--activate ay] [-b|--background] [--reportformat +{basic|json}] [--major major --minor minor | DevicePath | major:minor]... +pvscan scans all supported LVM block devices in the system for physical volumes. +Scanning with lvmetad +Scanning disks is required to read LVM metadata and identify LVM PVs. Once read, lvmetad caches the +% +[--reportformat {basic|json}] [--setphysicalvolumesize size] PhysicalVolume [PhysicalVolume...] +allocated on it. +--setphysicalvolumesize size +Overrides the automatically-detected size of the PV. Use with care, or prior to reducing the +physical size of the device. +% +ntptrace - Trace peers of an NTP server +ntptrace [-flags] [-flag [value]] [--option-name[[=| ]value]] [host] +ntptrace is a perl script that uses the ntpq utility program to follow the chain of NTP servers from a +given host back to the primary time source. For ntptrace to work properly, each of these servers must +If given no arguments, ntptrace starts with localhost. Here is an example of the output from ntptrace: +On each line, the fields are (left to right): the host name, the host stratum, the time offset between +% +findfs - find a filesystem by label or UUID +findfs will search the block devices in the system looking for a filesystem or partition with specified +tag. The currently supported tags are: +LABEL=<label> +Specifies filesystem label. +UUID=<uuid> +Specifies filesystem UUID. +PARTUUID=<uuid> +% +kpasswd - change a user's Kerberos password +kpasswd [principal] +The kpasswd command is used to change a Kerberos principal's password. kpasswd first prompts for the +current Kerberos password, then prompts the user twice for the new password, and the password is changed. +If the principal is governed by a policy that specifies the length and/or number of character classes +required in the new password, the new password must conform to the policy. (The five character classes +principal +Change the password for the Kerberos principal principal. Otherwise, kpasswd uses the principal +name from an existing ccache if there is one; if not, the principal is derived from the identity +% +pvdisplay - display attributes of a physical volume +ure] [--ignoreskippedcluster] [--maps] [--nosuffix] [--reportformat {basic|json}] [-s|--short] +[-S|--select Selection] [--units hsbkmgtHKMGT] [-v[v]|--verbose [--verbose]] [--version] [PhysicalVol‐ +umePath...] +[--reportformat {basic|json}] [--separator Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] +[-v[v]|--verbose [--verbose]] [--version] [PhysicalVolumePath...] +pvdisplay allows you to see the attributes of one or more physical volumes like size, physical extent +size, space used for the volume group descriptor area and so on. +% +nroff - emulate nroff command with groff +nroff [-CchipStUvwW] [-dcs] [-Mdir] [-mname] [-nnum] [-olist] [-rcn] [-Tname] [file ...] +nroff --help +nroff -v | --version +devices accepted by nroff to select the output encoding emitted by grotty, groff's TTY output device. If +neither the GROFF_TYPESETTER environment variable nor the -T command line option (which overrides the +environment variable) specifies a (valid) device, nroff checks the current locale to select a default +output device. It first tries the locale program, then the environment variables LC_ALL, LC_CTYPE, and +LANG, and finally the LESSCHARSET environment variable. +The -h and -c options are equivalent to grotty's options -h (using tabs in the output) and -c (using the +old output scheme instead of SGR escape sequences). The -d, -C, -i, -M, -m, -n, -o, -r, -w, and -W +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +sudoreplay — replay sudo session logs +sudoreplay [-h] [-d dir] [-f filter] [-m num] [-s num] ID +sudoreplay [-h] [-d dir] -l [search expression] +sudoreplay plays back or lists the output logs created by sudo. When replaying, sudoreplay can play the +line options. +tern matching the iolog_file option in the sudoers file. When a command is run via sudo with log_output +also be determined using sudoreplay's list mode. +% +grub-probe - probe device information for GRUB +grub-probe [OPTION...] [OPTION]... [PATH|DEVICE] +Probe device information for a given path (or device, if the -d option is given). +-0 separate items in output using ASCII NUL characters +-d, --device +given argument is a system device, not a path +-m, --device-map=FILE +use FILE as the device map [default=//boot/grub/device.map] +-t, --target=TARGET +% +numactl - Control NUMA policy for processes or shared memory +numactl [ --all ] [ --interleave nodes ] [ --preferred node ] [ --membind nodes ] [ --cpunodebind nodes ] +[ --physcpubind cpus ] [ --localalloc ] [--] command {arguments ...} +numactl --show +numactl --hardware +numactl [ --huge ] [ --offset offset ] [ --shmmode shmmode ] [ --length length ] [ --strict ] +[ --shmid id ] --shm shmkeyfile | --file tmpfsfile +[ --touch ] [ --dump ] [ --dump-nodes ] memory policy +numactl runs processes with a specific NUMA scheduling or memory placement policy. The policy is set for +command and inherited by all of its children. In addition it can set persistent policy for shared memory +segments or files. +Use -- before command if using command options that could be confused with numactl options. +% +logger - enter messages into the system log +logger [options] [message] +logger makes entries in the system log. +When the optional message argument is present, it is written to the log. If it is not present, and the +-f option is not given either, then standard input is logged. +-d, --udp +Use datagrams (UDP) only. By default the connection is tried to the syslog port defined in +-e, --skip-empty +% +sclient remotehost +sclient is a sample application, primarily useful for testing purposes. It contacts a sample server +MIT +% +cache_dump - dump cache metadata from device or file to standard output +cache_dump [options] {device|file} +cache_dump dumps binary cache metadata created by the device-mapper cache target on a device or file to +standard output for analysis or postprocessing in XML format. XML formated metadata can be fed into +device-mapper target) or file. +-r, --repair +Repair the metadata whilst dumping it. +-h, --help +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +glib-compile-resources - GLib resource compiler +glib-compile-resources [OPTION...] {FILE} +glib-compile-resources reads the resource description from FILE and the files that it references and +creates a binary resource bundle that is suitable for use with the GResource API. The resulting bundle is +then written out as-is, or as C source for linking into an application. +The XML resource files normally have the filename extension .gresource.xml. For a detailed description of +the XML file format, see the GResource documentation. +-h, --help +Print help and exit +% +tar - an archiving utility +Traditional usage +tar {A|c|d|r|t|u|x}[GnSkUWOmpsMBiajJzZhPlRvwo] [ARG...] +% +grub-kbdcomp - generate a GRUB keyboard layout file +used by GRUB's keymap command. +Make GRUB keyboard layout file. +-h, --help +print this message and exit +-V, --version +print the version information and exit +% +vgextend — add physical volumes to a volume group +ume group to extend it in size. Moreover, it allows you to re-add a physical volume that has gone missing +previously, due to a transient device failure, without re-initialising it. Use vgextend --restoremissing +to that effect. +% +look - display lines beginning with a given string +look [options] string [file] +The look utility displays any lines in file which contain string. As look performs a binary search, the +with). +If file is not specified, the file /usr/share/dict/words is used, only alphanumeric characters are com‐ +-a, --alternative +Use the alternative dictionary file. +% +repo-add - package database maintenance utility +repo-add [options] <path-to-db> <package|delta> [<package|delta> ...] +repo-remove [options] <path-to-db> <packagename|delta> [<packagename|delta> ...] +repo-add and repo-remove are two scripts to help build a package database for packages built with +repo-add will update a package database by reading a built package or package delta file. Multiple +packages and/or deltas to add can be specified on the command line. +If a matching “.sig” file is found alongside a package file, the signature will automatically be embedded +into the database. +% +Translate Pod file(s) to Texinfo. There are two basic modes of operation. First, by default, each pod +is translated to a standalone Texinfo manual. +Second, if "--base-level" is set higher than 0, each pod is translated to a file suitable for @include, +and one more file with all the @includes is generated, intended to be @included in turn within a hand- +written top-level file. +--appendix-sections +Use appendix sectioning commands (@appendix, ...) instead of the default numbered sectioning Texinfo +@-commands (@chapter, @section, ...). +% +bison - GNU Project parser generator (yacc replacement) +bison [OPTION]... FILE +designed for yacc. +Input files should follow the yacc convention of ending in .y. Unlike yacc, the generated files do not +have fixed names, but instead use the prefix of the input file. Moreover, if you need to put C++ code in +the input file, you can end his name by a C++-like extension (.ypp or .y++), then bison will follow your +extension to name the output file (.cpp or .c++). For instance, a grammar description file named +parse.yxx would produce the generated parser in a file named parse.tab.cxx, instead of yacc's y.tab.c or +old Bison version's parse.tab.c. +% +aclocal [OPTION]... +--automake-acdir=DIR +--system-acdir=DIR +directory holding third-party system-wide files +% +dir - list directory contents +dir [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +xfs_growfs, xfs_info - expand an XFS filesystem +xfs_growfs [ -dilnrx ] [ -D size ] [ -e rtextsize ] [ -L size ] [ -m maxpct ] [ -t mtab ] [ -R size ] +mount-point +xfs_growfs -V +xfs_info [ -t mtab ] mount-point +xfs_info -V +The existing contents of the filesystem are undisturbed, and the added space becomes available for addi‐ +tional file storage. +% +Reads a grap program as input; produces an image file (by default in Portable Network Graphics format) +The output image will be a black-on-white graphic clipped to the smallest possible bounding box that con‐ +it a border, set the background transparent, set the image's pixel density, or perform other useful +transformations. +% +blockdev - call block device ioctls from the command line +blockdev [-q] [-v] command [command...] device [device...] +blockdev --report [device...] +The utility blockdev allows one to call block device ioctls from the command line. +-V Print version and exit. +-q Be quiet. +-v Be verbose. +--report +% +dmeventd — Device-mapper event daemon +dmeventd [-d [-d [-d]]] [-f] [-h] [-l] [-R] [-V] [-?] +dmeventd is the event monitoring daemon for device-mapper devices. Library plugins can register and +carry out actions triggered when particular events occur. +LVM PLUGINS +Mirror +Raid +Snapshot +% +zdump - timezone dumper +zdump [ --version ] [ --help ] [ -v ] [ -c [loyear,]hiyear ] [ zonename ... ] +Zdump prints the current time in each zonename named on the command line. +These options are available: +--version +Output version information and exit. +--help Output short usage and exit. +-v For each zonename on the command line, print the time at the lowest possible time value, the time +one day after the lowest possible time value, the times both one second before and exactly at each +% +mand [command_options] +key stash file or perform live rollover of the master key. +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +filecap - a program to see capabilities +filecap is a program that prints out a report of programs with file based capabilities. If a file is not +in the report or there is no report at all, no capabilities were found. For expedience, the default is to +check only the directories in the PATH environmental variable. If the -a command line option is given, +then all directories will be checked. If a directory is passed, it will recursively check that directory. +If a path to a file is given, it will only check that file. If the path to the file includes capabili‐ +ties, then they are written to the file. +environmental variable is used to show you capabilities on files you are likely to execute. +% +su - run a command with substitute user and group ID +su [options] [-] [user [argument...]] +su allows to run commands with a substitute user and group ID. +When called without arguments, su defaults to running an interactive shell as root. +For backward compatibility, su defaults to not change the current directory and to only set the environ‐ +to always use the --login option (instead of its shortcut -) to avoid side effects caused by mixing envi‐ +ronments. +options found in other su implementations, such as support for a wheel group, have to be configured via +% +fakeroot - run a command in an environment faking root privileges for file manipulation +fakeroot [-l|--lib library] [--faked faked-binary] [-i load-file] [-s save-file] [-u|--unknown-is-real ] +[-b|--fd-base ] [-h|--help ] [-v|--version ] [--] [command] +fakeroot runs a command in an environment wherein it appears to have root privileges for file manipula‐ +root permissions/ownership. Without fakeroot one would need to have root privileges to create the con‐ +stituent files of the archives with the correct permissions and ownership, and then pack them up, or one +would have to construct the archives directly, without using the archiver. +simulate the effect the real library functions would have had, had the user really been root. These wrap‐ +per functions are in a shared library /usr/lib/*/libfakeroot-*.so or similar location on your platform. +% +lvmchange — change attributes of the logical volume manager +lvmchange +% +cp - copy files and directories +cp [OPTION]... [-T] SOURCE DEST +cp [OPTION]... SOURCE... DIRECTORY +cp [OPTION]... -t DIRECTORY SOURCE... +Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY. +Mandatory arguments to long options are mandatory for short options too. +-a, --archive +same as -dR --preserve=all +--attributes-only +don't copy the file data, just the attributes +% +setpci - configure PCI devices +setpci [options] devices operations... +setpci is a utility for querying and configuring PCI devices. +All numbers are entered in hexadecimal notation. +Root privileges are necessary for almost all operations, excluding reads of the standard header of the +General options +-v Tells setpci to be verbose and display detailed information about configuration space accesses. +% +A summary of options is included below. +-M path +Specify path as MANPATH. +-k keyword +% +fsck.btrfs - do nothing, successfully +fsck.btrfs [-aApy] [<device>...] +fsck.btrfs is a type of utility that should exist for any filesystem and is called during system setup +set fs_passno to 0. +If you wish to check the consistency of a BTRFS filesystem or repair a damaged filesystem, see +option (use with care!). +% +migspeed - Test the speed of page migration +migspeed -p pages from-nodes to-nodes +migspeed attempts to move a sample of pages from the indicated node to the target node and measures the +time it takes to perform the move. +-p pages +% +era_dump - dump era metadata from device or file to standard output +era_dump [options] {device|file} +era_dump dumps binary era metadata created by the device-mapper era target on a device or file to stan‐ +dard output for analysis or postprocessing in XML format. XML formated metadata can be fed into +device-mapper target) or file. +-r, --repair +Repair the metadata whilst dumping it. +-h, --help +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +ftp - File Transfer Protocol client. +ftp [OPTION...] [HOST [PORT]] +Remote file transfer. +-6, --ipv6 +contact IPv6 hosts +-A, --active +enable active mode transfer +% +strings - print the strings of printable characters in files. +strings [-afovV] [-min-len] +[-n min-len] [--bytes=min-len] +[-t radix] [--radix=radix] +[-e encoding] [--encoding=encoding] +[-] [--all] [--print-file-name] +[-T bfdname] [--target=bfdname] +[-w] [--include-all-whitespace] +[-s] [--output-separatorsep_string] +[--help] [--version] file... +long (or the number given with the options below) and are followed by an unprintable character. +% +pcre-config - program to return PCRE configuration +pcre-config [--prefix] [--exec-prefix] [--version] [--libs] +[--cflags] [--cflags-posix] +pcre-config returns the configuration of the installed PCRE libraries and the options required to compile +respectively, and are not available if only one of those libraries has been built. If an unavailable +option is encountered, the "usage" information is output. +% +glib-genmarshal - C code marshaller generation utility for GLib closures +glib-genmarshal [OPTION...] [FILE...] +glib-genmarshal is a small utility that generates C code marshallers for callback functions of the +GClosure mechanism in the GObject sublibrary of GLib. The marshaller functions have a standard signature, +they get passed in the invoking closure, an array of value structures holding the callback function +parameters and a value structure for the return value of the callback. The marshaller is then responsible +to call the respective C code function of the closure with all the parameters on the stack and to collect +its return value. +glib-genmarshal takes a list of marshallers to generate as input. The marshaller list is either read from +standard input or from files passed as additional arguments on the command line. +Marshaller list format +% +smartctl - Control and Monitor Utility for SMART Disks +smartctl [options] device +other platforms.] +smartctl controls the Self-Monitoring, Analysis and Reporting Technology (SMART) system built into most +ATA/SATA and SCSI/SAS hard drives and solid-state drives. The purpose of SMART is to monitor the relia‐ +bility of the hard drive and predict drive failures, and to carry out different types of drive self- +smartctl also provides support for polling TapeAlert messages from SCSI tape drives and changers. +% +kproplog - display the contents of the Kerberos principal update log +kproplog [-h] [-e num] [-v] kproplog [-R] +The kproplog command displays the contents of the KDC database update log to standard output. It can be +used to keep track of incremental updates to the principal database. The update log file contains the +slave KDC servers. When updates occur, they are logged to this file. Subsequently any KDC slave config‐ +ured for incremental updates will request the current data from the master KDC and update their log file +with any updates returned. +The kproplog command requires read access to the update log file. It will display update entries only +for the KDC it runs on. +If no options are specified, kproplog displays a summary of the update log. If invoked on the master, +% +xml-config - script to get information about the installed version of GNOME-XML +xml-config [--prefix[=DIR]] [--libs] [--cflags] [--version] [--help] +xml-config is a tool that is used to determine the compile and linker flags that should be used to com‐ +pile and link programs that use GNOME-XML. +xml-config accepts the following options: +--version +Print the currently installed version of GNOME-XML on the standard output. +--libs Print the linker flags that are necessary to link a GNOME-XML program. +% +rdisc - network router discovery daemon +rdisc [-abdfrstvV] [-p preference] [-T max_interval] [send_address] [receive_address] +rdisc implements client side of the ICMP router discover protocol. rdisc is invoked at boot time to pop‐ +ulate the network routing tables with default routes. +for ROUTER_ADVERTISE messages from routers. The received messages are handled by first ignoring those +listed router addresses with which the host does not share a network. Among the remaining addresses the +ones with the highest preference are selected as default routers and a default route is entered in the +kernel routing table for each one of them. +Optionally, rdisc can avoid waiting for routers to announce themselves by sending out a few ROUTER_SOLIC‐ +% +ifnames - Extract CPP conditionals from a set of files +ifnames [OPTION]... [FILE]... +Scan all of the C source FILES (or the standard input, if none are given) and write to the standard out‐ +put a sorted list of all the identifiers that appear in those files in `#if', `#elif', `#ifdef', or +`#ifndef' directives. Print each identifier on a line, followed by a space-separated list of the files +in which that identifier occurs. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +% +showkey - examine the codes sent by the keyboard +showkey [-h|--help] [-a|--ascii] [-s|--scancodes] [-k|--keycodes] +showkey prints to standard output either the scan codes or the keycode or the `ascii' code of each key +or release event, or until it receives a suitable signal, like SIGTERM, from another process. In `ascii' +mode the program terminates when the user types ^D. +When in scancode dump mode, showkey prints in hexadecimal format each byte received from the keyboard to +sequences the keyboard sends at once on a given key press. The scan code dumping mode is primarily +intended for debugging the keyboard driver or other low level interfaces. As such it shouldn't be of much +interest to the regular end-user. However, some modern keyboards have keys or buttons that produce scan‐ +% +systemd-detect-virt - Detect execution in a virtualized environment +systemd-detect-virt detects execution in a virtualized environment. It identifies the virtualization +technology and can distinguish full machine virtualization from container virtualization. +systemd-detect-virt exits with a return value of 0 (success) if a virtualization technology is detected, +and non-zero (error) otherwise. By default, any type of virtualization is detected, and the options +--container and --vm can be used to limit what types of virtualization are detected. +When executed without --quiet will print a short identifier for the detected virtualization technology. +The following technologies are currently identified: +i.e. shared kernel virtualization) +% +ls - list directory contents +ls [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +gpgparsemail - Parse a mail message into an annotated format +gpgparsemail [options] [file] +The gpgparsemail is a utility currently only useful for debugging. Run it with --help for usage informa‐ +tion. +% +unix_update [...] +unix_update is a helper program for the pam_unix module that updates the password of a given user. It is +not intended to be run directly from the command line and logs a security violation if done so. +The purpose of the helper is to enable tighter confinement of login and password changing services. The +helper is thus called only when SELinux is enabled on the system. +The interface of the helper - command line options, and input/output data format are internal to the +pam_unix module and it should not be called directly from applications. +% +applygnupgdefaults - Run gpgconf --apply-defaults for all users. +applygnupgdefaults +with an existing GnuPG home directory. Admins might want to use this script to update he GnuPG configu‐ +applygnupgdefaults is invoked by root as: +applygnupgdefaults +% +libnetcfg - configure libnet +standard Perl distribution, but the libnetcfg can be used for any libnet installation. +Without arguments libnetcfg displays the current configuration. +$ libnetcfg +# old config ./libnet.cfg +ftp_int_passive 0 +ftp_testhost ftp.funet.fi +inet_domain none.such +nntp_hosts nntp.none.such +ph_hosts +% +--infile=<name> --outfile=<name> +--podpath=<name>:...:<name> --podroot=<name> +--cachedir=<name> --flush --recurse --norecurse +--quiet --noquiet --verbose --noverbose +--index --noindex --backlink --nobacklink +--header --noheader --poderrors --nopoderrors +--css=<URL> --title=<name> +Converts files from pod format (see perlpod) to HTML format. +% +podchecker - check the syntax of POD format documentation files +podchecker [-help] [-man] [-(no)warnings] [file ...] +-help Print a brief help message and exit. +-man Print the manual page and exit. +-warnings -nowarnings +Turn on/off printing of warnings. Repeating -warnings increases the warning level, i.e. more +warnings are printed. Currently increasing to level two causes flagging of unescaped "<,>" +characters. +file The pathname of a POD file to syntax-check (defaults to standard input). +% +piconv [-f from_encoding] [-t to_encoding] +[-p|--perlqq|--htmlcref|--xmlcref] [-C N|-c] [-D] [-S scheme] +[-s string|file...] +piconv -l +piconv -r encoding_alias +piconv -h +piconv is perl version of iconv, a character encoding converter widely available for various Unixen +piconv converts the character encoding of either STDIN or files specified in the argument and prints out +to STDOUT. +% +encguess - guess character encodings of files +encguess [switches] filename... +SWITCHES +-h +show this message and exit. +-s +specify a list of "suspect encoding types" to test, seperated by either ":" or "," +-S +output a list of all acceptable encoding types that can be used with the -s param +% +[--fixed=font] [--fixedbold=font] [--fixeditalic=font] +[--fixedbolditalic=font] [--name=name] [--nourls] +[--official] [--quotes=quotes] [--release=version] +[input [output] ...] +% +ptardiff - program that diffs an extracted archive against an unextracted one +ptardiff is a small program that diffs an extracted archive +against an unextracted one, using the perl module Archive::Tar. +Provide the progam with an ARCHIVE_FILE and it will look up all +the files with in the archive, scan the current working directory +for a file with the name and diff it against the contents of the +archive. +ptardiff ARCHIVE_FILE +ptardiff -h +% +perlbug - how to submit bug reports on Perl +perlbug +perlbug [ -v ] [ -a address ] [ -s subject ] [ -b body | -f inputfile ] [ -F outputfile ] +[ -r returnaddress ] [ -e editor ] [ -c adminaddress | -C ] [ -S ] [ -t ] [ -d ] [ -A ] [ -h ] [ -T ] +perlbug [ -v ] [ -r returnaddress ] +[ -A ] [ -ok | -okay | -nok | -nokay ] +perlthanks +the modules which ship with it. +% +Tcl Encoding Files (.enc). Besides being used internally during the build process of the Encode module, +Quick Guide +If you want to know as little about Perl as possible but need to add a new encoding, just read this +chapter and forget the rest. +0. Have a .ucm file ready. You can get it from somewhere or you can write your own from scratch or you +% +cpan - easily interact with CPAN from the command line +# with arguments and no switches, installs specified modules +cpan module_name [ module_name ... ] +# with switches, installs modules with extra behavior +cpan [-cfgimtTw] module_name [ module_name ... ] +# with just the dot, install from the distribution in the +# current directory +cpan . +# without arguments, starts CPAN.pm shell +cpan +# force install modules (usually those that fail tests) +% +[-q quotes] [--nourls] [--stderr] [-w width] +[input [output ...]] +from POD source. It can optionally use either termcap sequences or ANSI color escape sequences to format +the text. +input is the file to read for POD source (the POD can be embedded in code). If input isn't given, it +defaults to "STDIN". output, if given, is the file to which to write the formatted output. If output +isn't given, the formatted output is written to "STDOUT". Several POD files can be processed in the same +% +-help Print a brief help message and exit. +-man Print this command's manual page and exit. +-exit exitval +The exit status value to return. +-output outfile +% +prove - Run tests through a TAP harness. +prove [options] [files or directories] +Boolean options: +-v, --verbose Print all test lines. +-l, --lib Add 'lib' to the path for your tests (-Ilib). +-b, --blib Add 'blib/lib' and 'blib/arch' to the path for +your tests +-s, --shuffle Run the tests in random order. +-c, --color Colored test output (default). +--nocolor Do not color test output. +--count Show the X/Y test count when not verbose +(default) +% +easily run while in /usr/include: +or +or +% +diagnostics, splain - produce verbose warning diagnostics +Using the "diagnostics" pragma: +use diagnostics; +use diagnostics -verbose; +enable diagnostics; +disable diagnostics; +Using the "splain" standalone filter program: +splain [-v] [-p] diag.out +Using diagnostics to get stack traces from a misbehaving script: +% +ptar - a tar-like program written in perl +ptar is a small, tar look-alike program that uses the perl module +Archive::Tar to extract, create and list tar archives. +ptar -c [-v] [-z] [-C] [-f ARCHIVE_FILE | -] FILE FILE ... +ptar -c [-v] [-z] [-C] [-T index | -] [-f ARCHIVE_FILE | -] +ptar -x [-v] [-z] [-f ARCHIVE_FILE | -] +ptar -t [-z] [-f ARCHIVE_FILE | -] +ptar -h +c Create ARCHIVE_FILE or STDOUT (-) from FILE +x Extract from ARCHIVE_FILE or STDIN (-) +t List the contents of ARCHIVE_FILE or STDIN (-) +% +podselect - print selected sections of pod documentation on standard output +podselect [-help] [-man] [-section section-spec] [file ...] +-help Print a brief help message and exit. +-man Print the manual page and exit. +-section section-spec +Specify a section to include in the output. See "SECTION SPECIFICATIONS" in Pod::Parser for the +file The pathname of a file from which to select sections of pod documentation (defaults to standard +input). +% +shasum - Print or Check SHA Checksums +Print or check SHA checksums. +With no FILE, or when FILE is -, read standard input. +-b, --binary read in binary mode +-c, --check read SHA sums from the FILEs and check them +-t, --text read in text mode (default) +-U, --UNIVERSAL read in Universal Newlines mode +produces same digest on Windows/Unix/Mac +ASCII '0' interpreted as 0-bit, +all other characters ignored +% +json_pp - JSON::PP command utility +json_pp [-v] [-f from_format] [-t to_format] [-json_opt options_to_json] +from json_xs and modified. +The default input format is json and the default output format is json with pretty option. +-f +-f from_format +Reads a data in the given format from STDIN. +% +perlbug - how to submit bug reports on Perl +perlbug +perlbug [ -v ] [ -a address ] [ -s subject ] [ -b body | -f inputfile ] [ -F outputfile ] +[ -r returnaddress ] [ -e editor ] [ -c adminaddress | -C ] [ -S ] [ -t ] [ -d ] [ -A ] [ -h ] [ -T ] +perlbug [ -v ] [ -r returnaddress ] +[ -A ] [ -ok | -okay | -nok | -nokay ] +perlthanks +the modules which ship with it. +% +Usually, your old .pl file will still work fine and you should only use this tool if you plan to update +LIMITATIONS +It's just a first step, but it's usually a good first step. +Larry Wall <larry@wall.org> +% +perldoc - Look up Perl documentation in Pod format. +perldoc [-h] [-D] [-t] [-u] [-m] [-l] [-F] +[-i] [-V] [-T] [-r] +[-d destination_file] +[-o formatname] +[-w formatteroption:value] +[-n nroff-replacement] +[-X] +[-L language_code] +Examples: +perldoc -f BuiltinFunction +% +corelist - a commandline frontend to Module::CoreList +See Module::CoreList for one. +corelist -v +corelist [-r <PerlVersion>] ... +corelist --diff PerlVersion PerlVersion +the perls Module::CoreList knows about. +% +ptargrep - Apply pattern matching to the contents of files in a tar archive +ptargrep [options] <pattern> <tar file> ... +Options: +--basename|-b ignore directory paths from archive +--list-only|-l list matching filenames rather than extracting matches +--verbose|-v write debugging message to STDERR +--help|-? detailed help message +You might use this to identify all files in an archive which contain lines matching the specified pattern +and either print out the pathnames or extract the files. +% +xsubpp - compiler to convert Perl XS code into C code +xsubpp [-v] [-except] [-s pattern] [-prototypes] [-noversioncheck] [-nolinenumbers] [-nooptimize] +[-typemap typemap] [-output filename]... file.xs +other Perl module build tools. +xsubpp will compile XS code into C code by embedding the constructs necessary to let C functions +manipulate Perl values and creates the glue necessary to let Perl access those functions. The compiler +uses typemaps to determine how to map C function parameters and variables to Perl values. +The compiler will search for typemap files called typemap. It will use the following search path to find +default typemaps, with the rightmost typemap taking precedence. +% +Options: +-n do not generate perl code (default when invoked as pstruct) +-v generate perl code, with C decls as comments +-i do NOT recompute sizes for intrinsic datatypes +% +to retrieve the value of any #define statement which was in the C header files. +The module_name will be used for the name of the extension. If module_name is not supplied then the name +of the first header file will be used, with the first character capitalized. +If the extension might need extra libraries, they should be included here. The extension Makefile.PL +will take care of checking whether the libraries actually exist and how they should be loaded. The extra +libraries should be specified in the form -lm -lposix, etc, just as on the cc command line. By default, +% +perlivp - Perl Installation Verification Procedure +perlivp [-p] [-v] [-h] +The perlivp program is set up at Perl source code build time to test the Perl version it was built under. +It can be used after running: +make install +(or your platform's equivalent procedure) to verify that perl and its libraries have been installed +correctly. A correct installation is verified by output that looks like: +% +Options: +-n do not generate perl code (default when invoked as pstruct) +-v generate perl code, with C decls as comments +-i do NOT recompute sizes for intrinsic datatypes +% +instmodsh - A shell to examine installed modules +instmodsh +A little interface to ExtUtils::Installed to examine installed modules, validate your packlists and even +create a tarball from an installed module. +ExtUtils::Installed +% +zipdetails - display the internal structure of zip files +zipdetaile [-v] zipfile.zip +zipdetails -h +Zipdetails displays information about the internal record structure of the zip file. It is not concerned +with displaying any details of the compressed data stored in the zip file. +The program assumes prior understanding of the internal structure of a Zip file. You should have a copy +-v Enable Verbose mode +-h Display help +% diff --git a/generate.sh b/generate.sh new file mode 100644 index 0000000..37e39e0 --- /dev/null +++ b/generate.sh @@ -0,0 +1,23 @@ +#!/usr/bin/bash +# Read and extract the 20 first lines of each manual listed in a file +# Clean them from empty and non interesting information +# This stuff is made to be use as fortune-mod + +# This software is GPLv2 more information at gnu.org + +# Author: Aurélien DESBRIÈRES +# aurelien@hackers.camp + +#!/bin/bash + +#compgen -c > LIST + +#while read -r LINE; do +# MANWIDHT=80 man "$LINE" | head -20 | grep -v -e -f LIST | grep -v '^$' && echo +#done < LIST > list | sed -i -e 's/^$/%/' list +#cat list > fortune-rtfm + +compgen -c | while read -r LINE; do + MANWIDHT=80 man "$LINE" | head -20 | grep -v -f words | grep -v '^$' && echo +done | sed -e 's/^$/%/' > fortune-rtfm +sed -i 's/^ *//' fortune-rtfm diff --git a/pkg/fortune-mod-rtfm/.BUILDINFO b/pkg/fortune-mod-rtfm/.BUILDINFO new file mode 100644 index 0000000..f26ec26 --- /dev/null +++ b/pkg/fortune-mod-rtfm/.BUILDINFO @@ -0,0 +1,232 @@ +builddir = /home/aurelien/git/fortune-mod-rtfm +pkgbuild_sha256sum = a2e44800315f4c2a250ed6cfac180688883bd0a0205f4976b387b437803baa68 +buildenv = !distcc +buildenv = color +buildenv = !ccache +buildenv = check +buildenv = !sign +options = strip +options = docs +options = !libtool +options = !staticlibs +options = emptydirs +options = zipman +options = purge +options = !optipng +options = !upx +options = !debug +installed = acl-2.2.52-2 +installed = archey3-0.5-4 +installed = archlinux-keyring-20161101-1 +installed = attr-2.4.47-1 +installed = autoconf-2.69-4 +installed = automake-1.15-2 +installed = bash-4.3.046-1 +installed = bc-1.06.95-2 +installed = bind-9.11.0.P1-1 +installed = bind-tools-9.11.0.P1-1 +installed = binutils-2.27-1 +installed = bison-3.0.4-2 +installed = btrfs-progs-4.8.2-1 +installed = bzip2-1.0.6-5 +installed = ca-certificates-20160507-1 +installed = ca-certificates-cacert-20140824-3 +installed = ca-certificates-mozilla-3.27.1-1 +installed = ca-certificates-utils-20160507-1 +installed = coreutils-8.25-2 +installed = cracklib-2.9.6-1 +installed = cronie-1.5.1-1 +installed = cryptsetup-1.7.2-1 +installed = curl-7.51.0-1 +installed = db-5.3.28-3 +installed = dbus-1.10.12-1 +installed = dbus-glib-0.108-1 +installed = dconf-0.26.0-2 +installed = device-mapper-2.02.166-1 +installed = dhcpcd-6.11.3-1 +installed = diffutils-3.5-1 +installed = dmidecode-3.0-1 +installed = dnssec-anchors-20150403-1 +installed = e2fsprogs-1.43.3-1 +installed = ebtables-2.0.10_4-6 +installed = efibootmgr-14-1 +installed = efivar-28-1 +installed = emacs-nox-25.1-1 +installed = ethtool-1:4.8-1 +installed = expat-2.2.0-2 +installed = fakeroot-1.21-2 +installed = file-5.29-1 +installed = filesystem-2015.09-1 +installed = findutils-4.6.0-2 +installed = firewalld-0.4.3.3-1 +installed = flex-2.6.1-1 +installed = fortune-mod-1.99.1-6 +installed = fortune-mod-matrix-20160822-2 +installed = fortune-mod-rtfm-20161104-4 +installed = gawk-4.1.4-1 +installed = gc-7.6.0-1 +installed = gcc-6.2.1-1 +installed = gcc-libs-6.2.1-1 +installed = gdbm-1.12-2 +installed = geoip-1.6.6-2 +installed = geoip-database-20161004-1 +installed = gettext-0.19.8.1-2 +installed = git-2.10.2-1 +installed = glib2-2.50.1-1 +installed = glibc-2.24-2 +installed = gmp-6.1.1-1 +installed = gnu-efi-libs-3.0.3-1 +installed = gnu-netcat-0.7.1-6 +installed = gnupg-2.1.15-1 +installed = gnutls-3.4.16-1 +installed = gobject-introspection-runtime-1.50.0+1+gb8d92b0-2 +installed = gpgme-1.6.0-3 +installed = gpm-1.20.7-7 +installed = grep-2.26-1 +installed = groff-1.22.3-7 +installed = grub-1:2.02.beta3-4 +installed = guile-2.0.13-1 +installed = gzip-1.8-2 +installed = haveged-1.9.1-2 +installed = hddtemp-0.3.beta15.52-2 +installed = hdparm-9.50-1 +installed = hicolor-icon-theme-0.15-1 +installed = hwids-20160801-1 +installed = iana-etc-20160927-1 +installed = idnkit-1.0-3 +installed = inetutils-1.9.4-4 +installed = intel-ucode-20160714-1 +installed = iproute2-4.8.0-1 +installed = ipset-6.30-1 +installed = iptables-1.6.0-1 +installed = iputils-20160308.0db72a4-1 +installed = irqbalance-1.1.0-1 +installed = jfsutils-1.1.15-4 +installed = js17-17.0.0-3 +installed = json-c-0.12.1-1 +installed = kbd-2.0.3-1 +installed = keyutils-1.5.9-1 +installed = kmod-23-1 +installed = krb5-1.13.4-1 +installed = ldns-1.6.17-4 +installed = less-487-1 +installed = libaio-0.3.110-1 +installed = libarchive-3.2.1-2 +installed = libassuan-2.4.3-1 +installed = libatomic_ops-7.4.4-1 +installed = libcap-2.25-1 +installed = libcap-ng-0.7.8-1 +installed = libedit-20160903_3.1-1 +installed = libelf-0.167-1 +installed = libffi-3.2.1-2 +installed = libgcrypt-1.7.3-1 +installed = libgpg-error-1.24-1 +installed = libidn-1.33-1 +installed = libksba-1.3.4-2 +installed = libldap-2.4.44-2 +installed = libmnl-1.0.4-1 +installed = libmpc-1.0.3-2 +installed = libnftnl-1.0.6-1 +installed = libnl-3.2.28-1 +installed = libpcap-1.7.4-1 +installed = libpipeline-1.4.1-1 +installed = libsasl-2.1.26-8 +installed = libseccomp-2.3.1-1 +installed = libsecret-0.18.5-1 +installed = libssh2-1.8.0-1 +installed = libsystemd-231-4 +installed = libtasn1-4.9-2 +installed = libtirpc-1.0.1-2 +installed = libtool-2.4.6-6 +installed = libunistring-0.9.6-2 +installed = libusb-1.0.20-1 +installed = libutil-linux-2.28.2-1 +installed = libxml2-2.9.4+12+ge905f08-1 +installed = licenses-20140629-1 +installed = linux-api-headers-4.7-1 +installed = linux-docs-4.8.6-1 +installed = logrotate-3.10.0-1 +installed = lsof-4.89-1 +installed = lvm2-2.02.166-1 +installed = lz4-131-2 +installed = lzo-2.09-1 +installed = m4-1.4.17-2 +installed = make-4.2.1-1 +installed = man-db-2.7.5-4 +installed = man-pages-4.08-1 +installed = man-pages-de-1.16-1 +installed = man-pages-it-4.07-1 +installed = mdadm-3.4-1 +installed = mkinitcpio-21-1 +installed = mkinitcpio-busybox-1.24.2-1 +installed = mpfr-3.1.5-1 +installed = mtr-0.87-1 +installed = ncurses-6.0-4 +installed = net-tools-1.60.20160710git-1 +installed = netctl-1.12-2 +installed = nettle-3.3-1 +installed = npth-1.2-1 +installed = nspr-4.13.1-1 +installed = ntp-4.2.8.p8-1 +installed = numactl-2.0.11-1 +installed = openresolv-3.8.1-1 +installed = openssh-7.3p1-2 +installed = openssl-1.0.2.j-1 +installed = p11-kit-0.23.2-1 +installed = pacman-5.0.1-4 +installed = pacman-mirrorlist-20161101-1 +installed = pam-1.3.0-1 +installed = pambase-20130928-1 +installed = parted-3.2-4 +installed = patch-2.7.5-1 +installed = pciutils-3.5.2-1 +installed = pcre-8.39-1 +installed = perl-5.24.0-2 +installed = perl-error-0.17024-1 +installed = pinentry-0.9.7-3 +installed = pkg-config-0.29.1-2 +installed = polkit-0.113-4 +installed = popt-1.16-8 +installed = procps-ng-3.3.12-1 +installed = psmisc-22.21-3 +installed = pygobject-devel-3.22.0-1 +installed = python-3.5.2-1 +installed = python-dbus-1.2.4-1 +installed = python-dbus-common-1.2.4-1 +installed = python-decorator-4.0.10-1 +installed = python-gobject-3.22.0-1 +installed = python-six-1.10.0-2 +installed = python-slip-0.6.4-2 +installed = readline-6.3.008-4 +installed = recode-3.6-9 +installed = reiserfsprogs-3.6.25-1 +installed = rkhunter-1.4.2-2 +installed = rsync-3.1.2-1 +installed = run-parts-4.7-1 +installed = s-nail-14.8.14-1 +installed = screen-4.4.0-1 +installed = sed-4.2.2-4 +installed = shadow-4.4-3 +installed = smartmontools-6.5-1 +installed = sqlite-3.15.0-1 +installed = sudo-1.8.18.p1-1 +installed = sysfsutils-2.1.0-9 +installed = systemd-231-4 +installed = systemd-sysvcompat-231-4 +installed = tar-1.29-2 +installed = tcpdump-4.7.4-1 +installed = texinfo-6.3-1 +installed = thin-provisioning-tools-0.6.3-1 +installed = tzdata-2016h-1 +installed = unhide-20130526-1 +installed = usbutils-008-1 +installed = util-linux-2.28.2-1 +installed = vim-8.0.0055-1 +installed = vim-runtime-8.0.0055-1 +installed = vlan-1.9-3 +installed = w3m-0.5.3.git20160413-1 +installed = wget-1.18-1 +installed = which-2.21-2 +installed = xfsprogs-4.7.0-1 +installed = xz-5.2.2-1 +installed = zlib-1.2.8-4 diff --git a/pkg/fortune-mod-rtfm/.MTREE b/pkg/fortune-mod-rtfm/.MTREE Binary files differnew file mode 100644 index 0000000..617099e --- /dev/null +++ b/pkg/fortune-mod-rtfm/.MTREE diff --git a/pkg/fortune-mod-rtfm/.PKGINFO b/pkg/fortune-mod-rtfm/.PKGINFO new file mode 100644 index 0000000..4fd0fa0 --- /dev/null +++ b/pkg/fortune-mod-rtfm/.PKGINFO @@ -0,0 +1,14 @@ +# Generated by makepkg 5.0.1 +# using fakeroot version 1.21 +# Fri Nov 4 21:45:53 UTC 2016 +pkgname = fortune-mod-rtfm +pkgver = 20161104-4 +pkgdesc = Fortune cookies: Read The Fucking Manual! Because most of people read them to late. +url = ftp://ftp.hackers.camp/fortune-rtfm +builddate = 1478295953 +packager = Unknown Packager +size = 556032 +arch = any +license = custom +group = fortune-mods +depend = fortune-mod diff --git a/pkg/fortune-mod-rtfm/usr/share/fortune/rtfm b/pkg/fortune-mod-rtfm/usr/share/fortune/rtfm new file mode 100644 index 0000000..a218f0a --- /dev/null +++ b/pkg/fortune-mod-rtfm/usr/share/fortune/rtfm @@ -0,0 +1,10246 @@ +if - "use" a Perl module if a condition holds (also can "no" a module) +The "if" module is used to conditionally load or unload another module. The construct +will load MODULE only if CONDITION evaluates to true. The above statement has no effect unless +"CONDITION" is true. If the CONDITION does evaluate to true, then the above line has the same effect as: +The use of "=>" above provides necessary quoting of "MODULE". If you don't use the fat comma (eg you +% +select — synchronous I/O multiplexing +#include <sys/select.h> +int select(int nfds, fd_set *restrict readfds, +fd_set *restrict writefds, fd_set *restrict errorfds, +struct timeval *restrict timeout); +Refer to pselect(). +% +time - time a simple command or give resource usage +time [options] command [arguments...] +The time command runs the specified program command with the given arguments. When command finishes, +time writes a message to standard error giving timing statistics about this program run. These statis‐ +tics consist of (i) the elapsed real time between invocation and termination, (ii) the user CPU time (the +pathname (something like /usr/bin/time). +% +alias — define or display aliases +alias [alias-name[=string]...] +The alias utility shall create or redefine alias definitions or write the values of existing alias defi‐ +nitions to standard output. An alias definition provides a string value that shall replace a command name +An alias definition shall affect the current shell execution environment and the execution environments +% +bg — run jobs in the background +bg [job_id...] +If job control is enabled (see the description of set −m), the bg utility shall resume suspended jobs +ground jobs. If the job specified by job_id is already a running background job, the bg utility shall +have no effect and shall exit successfully. +Using bg to place a job into the background shall cause its process ID to become ``known in the current +% +bind — bind a name to a socket +#include <sys/socket.h> +int bind(int socket, const struct sockaddr *address, +socklen_t address_len); +The bind() function shall assign a local socket address address to a socket identified by descriptor +socket that has no local socket address assigned. Sockets created with the socket() function are ini‐ +tially unnamed; they are identified only by their address family. +% +break — exit from for, while, or until loop +break [n] +The break utility shall exit from the smallest enclosing for, while, or until loop, if any; or from the +nth enclosing loop if n is specified. The value of n is an unsigned decimal integer greater than or equal +outermost enclosing loop shall be exited. Execution shall continue with the command immediately following +the loop. +% +cd — change the working directory +cd [−L|−P] [directory] +cd − +The cd utility shall change the working directory of the current shell execution environment (see Section +the symbol curpath represents an intermediate value used to simplify the description of the algorithm +used by cd. There is no requirement that curpath be made visible to the application.) +% +command — execute a simple command +command [−p] command_name [argument...] +command [−p][−v|−V] command_name +The command utility shall cause the shell to treat the arguments as a simple command, suppressing the +If the command_name is the same as the name of one of the special built-in utilities, the special proper‐ +% +continue — continue for, while, or until loop +continue [n] +The continue utility shall return to the top of the smallest enclosing for, while, or until loop, or to +while or until loop or performing the next assignment of a for loop, and re-executing the loop if appro‐ +priate. +% +echo - display a line of text +echo [SHORT-OPTION]... [STRING]... +echo LONG-OPTION +Echo the STRING(s) to standard output. +-n do not output the trailing newline +-e enable interpretation of backslash escapes +-E disable interpretation of backslash escapes (default) +--help display this help and exit +% +eval — construct command by concatenating arguments +eval [argument...] +The eval utility shall construct a command by concatenating arguments together, separating each with a +<space> character. The constructed command shall be read and executed by the shell. +None. +% +exec — execute commands and open, close, or copy file descriptors +exec [command [argument...]] +The exec utility shall open, close, and/or copy file descriptors as specified by any redirections as part +of the command. +are opened with associated redirection statements, it is unspecified whether those file descriptors +remain open when the shell invokes another utility. Scripts concerned that child shells could misuse +% +exit — cause the shell to exit +exit [n] +The exit utility shall cause the shell to exit with the exit status specified by the unsigned decimal +undefined. +A trap on EXIT shall be executed before the shell terminates, except when the exit utility is invoked in +% +export — set the export attribute for variables +export name[=word]... +export −p +The shell shall give the export attribute to the variables corresponding to the specified names, which +shall cause them to be in the environment of subsequently executed commands. If the name of a variable is +followed by =word, then the value of that variable shall be set to word. +% +false - do nothing, unsuccessfully +false [ignored command line arguments] +false OPTION +Exit with a status code indicating failure. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +fc — process the command history list +fc [−r] [−e editor] [first [last]] +fc −l [−nr] [first [last]] +fc −s [old=new] [first] +The fc utility shall list, or shall edit and re-execute, commands previously entered to an interactive +sh. +% +fg — run jobs in the foreground +fg [job_id] +If job control is enabled (see the description of set −m), the fg utility shall move a background job +Using fg to place a job into the foreground shall remove its process ID from the list of those ``known in +% +getopts — parse utility options +getopts optstring name [arg...] +The getopts utility shall retrieve options and option-arguments from a list of parameters. It shall sup‐ +Each time it is invoked, the getopts utility shall place the value of the next option in the shell vari‐ +able specified by the name operand and the index of the next argument to be processed in the shell vari‐ +% +hash — remember or report utility locations +hash [utility...] +hash −r +The hash utility shall affect the way the current shell environment remembers the locations of utilities +fied, it shall add utility locations to its list of remembered locations or it shall purge the contents +of the list. When no arguments are specified, it shall report on the contents of the list. +% +history - GNU History Library +Many programs read input from the user a line at a time. The GNU History library is able to keep track +of those lines, associate arbitrary data with each line, and utilize information from previous lines in +composing new ones. +HISTORY EXPANSION +The history library supports a history expansion feature that is identical to the history expansion in +History expansions introduce words from the history list into the input stream, making it easy to repeat +commands, insert the arguments to a previous command into the current input line, or fix errors in previ‐ +ous commands quickly. +% +jobs — display status of jobs in the current session +jobs [−l|−p] [job_id...] +The jobs utility shall display the status of jobs that were started in the current shell environment; see +When jobs reports the termination status of a job, the shell shall remove its process ID from the list of +% +kill - terminate a process +kill [-signal|-s signal|-p] [-q value] [-a] [--] pid|name... +kill -l [number] | -L +The command kill sends the specified signal to the specified processes or process groups. If no signal +caught. +Most modern shells have a builtin kill function, with a usage rather similar to that of the command +described here. The --all, --pid, and --queue options, and the possibility to specify processes by com‐ +mand name, are local extensions. +If signal is 0, then no actual signal is sent, but error checking is still performed. +% +login, logout - write utmp and wtmp entries +#include <utmp.h> +void login(const struct utmp *ut); +int logout(const char *ut_line); +Link with -lutil. +The utmp file records who is currently using the system. The wtmp file records all logins and logouts. +The function login() takes the supplied struct utmp, ut, and writes it to both the utmp and the wtmp +file. +% +printf - format and print data +printf FORMAT [ARGUMENT]... +printf OPTION +Print ARGUMENT(s) according to FORMAT, or execute according to OPTION: +--help display this help and exit +--version +output version information and exit +FORMAT controls the output as in C printf. Interpreted sequences are: +\" double quote +% +pwd - print name of current/working directory +pwd [OPTION]... +Print the full filename of the current working directory. +-L, --logical +use PWD from environment, even if it contains symlinks +-P, --physical +avoid all symlinks +--help display this help and exit +--version +% +read — read a line from standard input +read [−r] var... +The read utility shall read a single line from standard input. +By default, unless the −r option is specified, <backslash> shall act as an escape character. An unescaped +<backslash> shall preserve the literal value of the following character, with the exception of a <new‐ +line>. If a <newline> follows the <backslash>, the read utility shall interpret this as line continua‐ +tion. The <backslash> and <newline> shall be removed before splitting the input into fields. All other +% +readonly — set the readonly attribute for variables +readonly name[=word]... +readonly −p +The variables whose names are specified shall be given the readonly attribute. The values of variables +with the readonly attribute cannot be changed by subsequent assignment, nor can those variables be unset +by the unset utility. If the name of a variable is followed by =word, then the value of that variable +shall be set to word. +% +return — return from a function or dot script +return [n] +The return utility shall cause the shell to stop executing the current function or dot script. If the +shell is not currently executing a function or dot script, the results are unspecified. +None. +% +set — set or unset options and positional parameters +set [−abCefhmnuvx] [−o option] [argument...] +set [+abCefhmnuvx] [+o option] [argument...] +set −− [argument...] +set −o +set +o +% +shift — shift positional parameters +shift [n] +the new number of positional parameters. +The value n shall be an unsigned decimal integer less than or equal to the value of the special parameter +% +test - check file types and compare values +test EXPRESSION +test +[ EXPRESSION ] +[ ] +[ OPTION +Exit with the status determined by EXPRESSION. +--help display this help and exit +--version +output version information and exit +% +times — write process times +times +The times utility shall write the accumulated user and system times for the shell and for all of its +child processes, in the following POSIX locale format: +"%dm%fs %dm%fs\n%dm%fs %dm%fs\n", <shell user minutes>, +<shell user seconds>, <shell system minutes>, +<shell system seconds>, <children user minutes>, +% +trap — trap signals +trap n [condition...] +trap [action condition...] +If the first operand is an unsigned decimal integer, the shell shall treat all operands as conditions, +and shall reset each condition to the default value. Otherwise, if there are operands, the first is +treated as an action and the remaining as conditions. +If action is '−', the shell shall reset each condition to the default value. If action is null (""), the +% +true - do nothing, successfully +true [ignored command line arguments] +true OPTION +Exit with a status code indicating success. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +type — write a description of command type +type name... +The type utility shall indicate how each argument would be interpreted if used as a command name. +None. +OPERANDS +% +ulimit — set or report file size limit +ulimit [−f] [blocks] +The ulimit utility shall set or report the file-size writing limit imposed on files written by the shell +increase the limit. +% +umask — get or set the file mode creation mask +umask [−S] [mask] +The umask utility shall set the file mode creation mask of the current shell execution environment (see +affect the initial value of the file permission bits of subsequently created files. If umask is called in +a subshell or separate utility execution environment, such as one of the following: +% +unalias — remove alias definitions +unalias alias-name... +unalias −a +Substitution. The aliases shall be removed from the current shell execution environment; see Section +% +unset — unset values and attributes of variables and functions +unset [−fv] name... +Each variable or function specified by name shall be unset. +If −v is specified, name refers to a variable name and the shell shall unset it and remove it from the +environment. Read-only variables cannot be unset. +If −f is specified, name refers to a function and the shell shall unset the function definition. +% +wait — await process completion +wait [pid...] +last command in each element of the asynchronous list shall become known in the current shell execution +If the wait utility is invoked with no operands, it shall wait until all process IDs known to the invok‐ +ing shell have terminated and exit with a zero exit status. +% +timedatectl - Control the system time and date +The following options are understood: +--no-ask-password +Do not query the user for authentication for privileged operations. +--adjust-system-clock +% +iptables-save — dump iptables rules to stdout +ip6tables-save — dump iptables rules to stdout +iptables-save [-M modprobe] [-c] [-t table] +ip6tables-save [-M modprobe] [-c] [-t table] +iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable +format to STDOUT. Use I/O-redirection provided by your shell to write to a file. +-M, --modprobe modprobe_program +Specify the path to the modprobe program. By default, iptables-save will inspect /proc/sys/ker‐ +nel/modprobe to determine the executable's path. +% +c_rehash - Create symbolic links to files named by the hash values +c_rehash [-old] [-h] [-n] [-v] [ directory...] +c_rehash scans directories and calculates a hash value of each ".pem", ".crt", ".cer", or ".crl" file in +the specified directory list and creates symbolic links for each file, where the name of the link is the +as many programs that use OpenSSL require directories to be set up like this in order to find +certificates. +If any directories are named on the command line, then those are processed in turn. If not, then the +SSL_CERT_DIR environment variable is consulted; this shold be a colon-separated list of directories, like +the Unix PATH variable. If that is not set then the default directory (installation-specific but often +/usr/local/ssl/certs) is processed. +% +gdbm_load - re-create a GDBM database from a dump file. +[--block-size=NUM] [--cache-size=NUM] [--mmap=NUM] +[--mode=MODE] [--no-meta] [--replace] +gdbm_load [-Vh] [--help] [--usage] [--version] +Create a gdbm database file DB_FILE from the dump file FILE. If the FILE argument is not supplied, out‐ +put the created database to the standard error. +If the input file is in ASCII dump format, the mode and ownership of the created database are restored +% +yes - output a string repeatedly until killed +yes [STRING]... +yes OPTION +Repeatedly output a line with all specified STRING(s), or 'y'. +--help display this help and exit +--version +output version information and exit +Written by David MacKenzie. +% +named-checkconf - named configuration file syntax checking tool +named-checkconf [-h] [-v] [-j] [-t directory] {filename} [-p] [-x] [-z] +named-checkconf checks the syntax, but not the semantics, of a named configuration file. The file is +parsed and checked for syntax errors, along with all files included by it. If no file is specified, +/etc/named.conf is read by default. +run, even if named-checkconf was successful. named-checkconf can be run on these files explicitly, +however. +-h +% +grotty - groff driver for typewriter-like devices +grotty [ -bBcdfhioruUv ] [ -Fdir ] [ files... ] +It is possible to have whitespace between the -F option and its parameter. +grotty translates the output of GNU troff into a form suitable for typewriter-like devices. Normally +the standard input. A filename of - also causes grotty to read the standard input. Output is written to +the standard output. +foreground colors; additionally, bold and italic attributes can be used at the same time (by using the BI +% +systemd-machine-id-setup - Initialize the machine ID in /etc/machine-id +systemd-machine-id-setup +information about this file. +If the tool is invoked without the --commit switch, /etc/machine-id is initialized with a valid, new +machined ID if it is missing or empty. The new machine ID will be acquired in the following fashion: +used to initialize the machine ID in /etc/machine-id. +% +bridge - show / manipulate bridge addresses and devices +OBJECT := { link | fdb | mdb | vlan | monitor } +bridge link set dev DEV [ cost COST ] [ priority PRIO ] [ state STATE] [ guard { on | off } ] [ hairpin +{ on | off } ] [ fastleave { on | off } ] [ root_block { on | off } ] [ learning { on | off } ] [ +learning_sync { on | off } ] [ flood { on | off } ] [ hwmode { vepa | veb } ] [ self ] [ master ] +bridge link [ show ] [ dev DEV ] +bridge fdb { add | append | del | replace } LLADDR dev DEV { local | static | dynamic } [ self ] [ master +] [ router ] [ use ] [ dst IPADDR ] [ vni VNI ] [ port PORT ] [ via DEVICE ] +% +grub-mkrelpath - make a system path relative to its root +grub-mkrelpath [OPTION...] PATH +Transform a system filename into GRUB one. +-?, --help +give this help list +--usage +give a short usage message +-V, --version +print program version +% +vgrename — rename a volume group +will refuse to run or give warning messages. +a Volume Group with the same name as the Volume Group containing your root filesystem the machine might +not even boot correctly. However, the two Volume Groups should have different UUIDs (unless the disk was +cloned) so you can rename one of the conflicting Volume Groups with vgrename. +% +rename - rename files +rename [options] expression replacement file... +rename will rename the specified files by replacing the first occurrence of expression in their name by +replacement. +-s, --symlink +Do not rename a symlink but its target. +-v, --verbose +Show which files where renamed, if any. +-V, --version +% +grub-install - install GRUB to a device +grub-install [OPTION...] [OPTION] [INSTALL_DEVICE] +Install GRUB on your drive. +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +pvck — check physical volume metadata +calVolume [PhysicalVolume...] +pvck checks physical volume LVM metadata for consistency. +--labelsector sector +parameter allows you to specify a different starting sector for the scan and is useful for recov‐ +ery situations. For example, suppose the partition table is corrupted or lost on /dev/sda, but +% +xfs_copy - copy the contents of an XFS filesystem +xfs_copy -V +argument must be the pathname of the device or file containing the XFS filesystem. The remaining argu‐ +ments specify one or more target devices or file names. If the pathnames specify devices, a copy of the +source XFS filesystem is created on each device. The target can also be the name of a regular file, in +xfs_copy creates the file. The length of the resulting file is equal to the size of the source filesys‐ +tem. However, if the file is created on an XFS filesystem, the file consumes roughly the amount of space +actually used in the source filesystem by the filesystem and the XFS log. The space saving is because +xfs_copy seeks over free blocks instead of copying them and the XFS filesystem supports sparse files +efficiently. +% +pacman - package manager utility +pacman <operation> [options] [targets] +Pacman is a package management utility that tracks installed packages on a Linux system. It features +dependency support, package groups, install and uninstall scripts, and the ability to sync your local +machine with a remote repository to automatically upgrade packages. Pacman packages are a zipped tar +format. +Invoking pacman involves specifying an operation with any potential options and targets to operate on. A +target is usually a package name, file name, URL, or a search string. Targets can be provided as command +line arguments. Additionally, if stdin is not from a terminal and a single hyphen (-) is passed as an +% +ip - show / manipulate routing, devices, policy routing and tunnels +ip [ -force ] -batch filename +OBJECT := { link | address | addrlabel | route | rule | neigh | ntable | tunnel | tuntap | maddress | +flush-attempts } | -o[neline] | -rc[vbuf] [size] | -t[imestamp] | -ts[hort] | -n[etns] name | +-a[ll] | -c[olor] } +-V, -Version +% +mk_cmds - error table compiler +mk_cmds file +Mk_cmds converts a table listing command names and associated help messages into a C source file suitable +The source file name must end with a suffix of ``.ct''; the file consists of a declaration supplying the +name of the command table: +command_table name +followed by entries of the form: +[ request | unimplemented ] name, " string "[, abbrev]...; +% +uniq - report or omit repeated lines +uniq [OPTION]... [INPUT [OUTPUT]] +Filter adjacent matching lines from INPUT (or standard input), writing to OUTPUT (or standard output). +With no options, matching lines are merged to the first occurrence. +Mandatory arguments to long options are mandatory for short options too. +-c, --count +prefix lines by the number of occurrences +-d, --repeated +only print duplicate lines, one for each group +% +ldattach - attach a line discipline to a serial line +The ldattach daemon opens the specified device file (which should refer to a serial device) and attaches +the line discipline ldisc to it for processing of the sent and/or received data. It then goes into the +background keeping the device open so that the line discipline stays loaded. +With no arguments, ldattach prints usage information. +LINE DISCIPLINES +% +gawk - pattern scanning and processing language +gawk [ POSIX or GNU style options ] -f program-file [ -- ] file ... +gawk [ POSIX or GNU style options ] [ -- ] program-text file ... +Gawk is the GNU Project's implementation of the AWK programming language. It conforms to the definition +AWK Programming Language, by Aho, Kernighan, and Weinberger. Gawk provides the additional features found +in the current version of Brian Kernighan's awk and a number of GNU-specific extensions. +The command line consists of options to gawk itself, the AWK program text (if not supplied via the -f or +--file options), and values to be made available in the ARGC and ARGV pre-defined AWK variables. +When gawk is invoked with the --profile option, it starts gathering profiling statistics from the execu‐ +tion of the program. Gawk runs more slowly in this mode, and automatically produces an execution profile +% +lookbib - search bibliographic databases +lookbib [ -v ] [ -istring ] [ -tn ] filename... +lookbib prints a prompt on the standard error (unless the standard input is not a terminal), reads from +the standard input a line containing a set of keywords, searches the bibliographic databases filename... +for references containing those keywords, prints any references found on the standard output, and repeats +this process until the end of input. For each database filename to be searched, if an index filename.i +It is possible to have whitespace between a command line option and its parameter. +-v Print the version number. +% +size - list section sizes and total size. +size [-A|-B|--format=compatibility] +[--help] +[-d|-o|-x|--radix=number] +[--common] +[-t|--totals] +[--target=bfdname] [-V|--version] +[objfile...] +The GNU size utility lists the section sizes---and the total size---for each of the object or archive +files objfile in its argument list. By default, one line of output is generated for each object file or +each module in an archive. +objfile... are the object files to be examined. If none are specified, the file "a.out" will be used. +% +join - join lines of two files on a common field +For each pair of input lines with identical join fields, write a line to standard output. The default +join field is the first, delimited by blanks. +-a FILENUM +-e EMPTY +replace missing input fields with EMPTY +% +idle - make process 0 idle +#include <unistd.h> +int idle(void); +idle() is an internal system call used during bootstrap. It marks the process's pages as swappable, low‐ +ers its priority, and enters the main scheduling loop. idle() never returns. +EPERM. +RETURN VALUE +% +refer - preprocess bibliographic references for groff +refer [ -benvCPRS ] [ -an ] [ -cfields ] [ -fn ] [ -ifields ] [ -kfield ] [ -lm,n ] [ -pfilename ] +[ -sfields ] [ -tn ] [ -Bfield.macro ] [ filename... ] +refer copies the contents of filename... to the standard output, except that lines between .[ and .] are +are to be processed. +Each citation specifies a reference. The citation can specify a reference that is contained in a biblio‐ +graphic database by giving a set of keywords that only that reference contains. Alternatively it can +specify a reference by supplying a database record in the citation. A combination of these alternatives +is also possible. +% +xzmore, lzmore - view xz or lzma compressed (text) files +xzmore [file...] +lzmore [file...] +time on a soft-copy terminal. +To use a pager other than the default more, set environment variable PAGER to the name of the desired +program. The name lzmore is provided for backward compatibility with LZMA Utils. +e or q When the prompt --More--(Next file: file) is printed, this command causes xzmore to exit. +s When the prompt --More--(Next file: file) is printed, this command causes xzmore to skip the next +file and continue. +% +sserver [ -p port ] [ -S keytab ] [ server_port ] +sserver, it performs a Kerberos authentication, and then sserver returns to sclient the Kerberos princi‐ +pal which was used for the Kerberos authentication. It makes a good test that Kerberos has been success‐ +fully installed on a machine. +The service name used by sserver and sclient is sample. Hence, sserver will require that there be a +The -S option allows for a different keytab than the default. +% +wc - print newline, word, and byte counts for each file +wc [OPTION]... [FILE]... +wc [OPTION]... --files0-from=F +Print newline, word, and byte counts for each FILE, and a total line if more than one FILE is specified. +A word is a non-zero-length sequence of characters delimited by white space. +With no FILE, or when FILE is -, read standard input. +word, character, byte, maximum line length. +-c, --bytes +print the byte counts +% +calc_tickadj - Calculates optimal value for tick given ntp drift file. +calc_tickadj [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +The calc_tickadj script uses provided ntp drift file to generate optimal tick value. Generally, ntpd can +do better job if the drift value is the smallest possible number. +The example output of +$ ./calc_tickadj +9999 usec; 9999779 nsec +$ cat /etc/ntp/drift +% +pcap-config - write libpcap compiler and linker flags to standard output +pcap-config [ --static ] [ --cflags | --libs | --additional-libs ] +When run with the --cflags option, pcap-config writes to the standard output the -I compiler flags +required to include libpcap's header files. When run with the --libs option, pcap-config writes to the +standard output the -L and -l linker flags required to link with libpcap, including -l flags for +libraries required by libpcap. When run with the --additional-libs option, pcap-config writes to the +standard output the -L and -l flags for libraries required by libpcap, but not the -lpcap flag to link +with libpcap itself. +By default, it writes flags appropriate for compiling with a dynamically-linked version of libpcap; the +--static flag causes it to write flags appropriate for compiling with a statically-linked version of +libpcap. +% +xfs_logprint - print the log of an XFS filesystem +xfs_logprint [ options ] device +the partition or logical volume containing the filesystem. The device can be a regular file if the -f +option is used. The contents of the filesystem remain undisturbed. There are two major modes of opera‐ +tion in xfs_logprint. +One mode is better for filesystem operation debugging. It is called the transactional view and is +enabled through the -t option. The transactional view prints only the portion of the log that pertains to +tries to display each transaction without regard to how they are split across log records. +The second mode starts printing out information from the beginning of the log. Some error blocks might +% +kswitch - switch primary ticket cache +kswitch {-c cachename|-p principal} +kswitch makes the specified credential cache the primary cache for the collection, if a cache collection +is available. +-c cachename +Directly specifies the credential cache to be made primary. +-p principal +Causes the cache collection to be searched for a cache containing credentials for principal. If +one is found, that collection is made primary. +% +hexdump - display file contents in hexadecimal, decimal, octal, or ascii +hexdump [options] file... +The hexdump utility is a filter which displays the specified files, or standard input if no files are +specified, in a user-specified format. +-b, --one-byte-octal +One-byte octal display. Display the input offset in hexadecimal, followed by sixteen space-sepa‐ +rated, three-column, zero-filled bytes of input data, in octal, per line. +% +btrfs - a toolbox to manage btrfs filesystems +btrfs <command> [<args>] +The btrfs utility is a toolbox for managing btrfs filesystems. There are command groups to work with +There are also standalone tools for some tasks like btrfs-convert or btrfstune that were separate +historically and/or haven’t been merged to the main utility. See section STANDALONE TOOLS for more +details. +Any command name can be shortened as far as it stays unambiguous, however it is recommended to use full +% +xzdec, lzmadec - Small .xz and .lzma decompressors +xzdec [option...] [file...] +lzmadec [option...] [file...] +xzdec is a liblzma-based decompression-only tool for .xz (and only .xz) files. xzdec is intended to work +xz --decompress --stdout (and possibly a few other commonly used options) to decompress .xz files. +lzmadec is identical to xzdec except that lzmadec supports .lzma files instead of .xz files. +To reduce the size of the executable, xzdec doesn't support multithreading or localization, and doesn't +read options from XZ_DEFAULTS and XZ_OPT environment variables. xzdec doesn't support displaying inter‐ +process instead of displaying progress information. +% +mii-tool - view, manipulate media-independent interface status +mii-tool [-v, --verbose] [-V, --version] [-R, --reset] [-r, --restart] [-w, --watch] [-l, --log] [-A, +--advertise=media,...] [-F, --force=media] [-p, --phy=addr] interface ... +Most fast ethernet adapters use an MII to autonegotiate link speed and duplex setting. +Most intelligent network devices use an autonegotiation protocol to communicate what media technologies +they support, and then select the fastest mutually supported media technology. The -A or --advertise +options can be used to tell the MII to only advertise a subset of its capabilities. Some passive +devices, such as single-speed hubs, are unable to autonegotiate. To handle such devices, the MII proto‐ +-F or --force options can be used to force the MII to operate in one mode, instead of autonegotiating. +The -A and -F options are mutually exclusive. +% +lsblk - list block devices +lsblk [options] [device...] +lsblk lists information about all available or the specified block devices. The lsblk command reads the +sysfs filesystem and udev db to gather information. +The command prints all block devices (except RAM disks) in a tree-like format by default. Use lsblk +--help to get a list of all available columns. +The default output, as well as the default output from options like --fs and --topology, is subject to +change. So whenever possible, you should avoid using default outputs in your scripts. Always explicitly +define expected columns by using --output columns-list in environments where a stable output is required. +% +watch - execute a program periodically, showing output fullscreen +watch [options] command +run until interrupted. +-d, --differences [permanent] +Highlight the differences between successive updates. Option will read optional argument that +changes highlight to be permanent, allowing to see what has changed at least once since first +iteration. +-n, --interval seconds +% +slattach - attach a network interface to a serial line +slattach [-dehlLmnqv] [-c command] [-p proto] [-s speed] [tty] +Slattach is a tiny little program that can be used to put a normal terminal ("serial") line into one of +several "network" modes, thus allowing you to use it for point-to-point links to other computers. +tty Path to a serial device like /dev/ttyS*, /dev/cua* or /dev/ptmx to spawn a new pseudo tty. +[-c command] +tions when a link goes down. +[-d] Enable debugging output. Useful when determining why a given setup doesn't work. +% +systemd-notify - Notify service manager about start-up completion and other daemon status changes +used to send arbitrary information, encoded in an environment-block-like list of strings. Most +importantly, it can be used for start-up completion notification. +set for the service unit this command is called from. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +xfs_io - debug the I/O path of an XFS filesystem +xfs_io [ -adfmrRstxT ] [ -c cmd ] ... [ -p prog ] file +xfs_io -V +than the raw XFS volume itself. These code paths include not only the obvious read/write/mmap interfaces +for manipulating files, but also cover all of the XFS extensions (such as space preallocation, additional +inode flags, etc). +gram exits. +% +pkttyagent - Textual authentication helper +pkttyagent [--version] [--help] +pkttyagent [--process { pid | pid,pid-start-time } | --system-bus-name busname] [--notify-fd fd] +[--fallback] +pkttyagent is used to start a textual authentication agent for the subject specified by either --process +or --system-bus-name. If neither of these options are given, the parent process is used. +To get notified when the authentication agent has been registered either listen to the Changed D-Bus +signal or use --notify-fd to pass the number of a file descriptor that has been passed to the program. +If --fallback is used, the textual authentication agent will not replace an existing authentication +% +more - file perusal filter for crt viewing +more [options] file... +Options are also taken from the environment variable MORE (make sure to precede them with a dash (-)) but +command-line options will override those. +-d Prompt with "[Press space to continue, 'q' to quit.]", and display "[Press 'h' for instructions.]" +instead of ringing the bell when an illegal key is pressed. +-l Do not pause after any line containing a ^L (form feed). +% +head - output the first part of files +head [OPTION]... [FILE]... +header giving the file name. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --bytes=[-]NUM +print the first NUM bytes of each file; with the leading '-', print all but the last NUM bytes of +each file +% +expr - evaluate expressions +expr EXPRESSION +expr OPTION +--help display this help and exit +--version +output version information and exit +Print the value of EXPRESSION to standard output. A blank line below separates increasing precedence +% +ipset — administration tool for IP sets +| version | - } +-file filename } +% +objdump - display information from object files. +objdump [-a|--archive-headers] +[-b bfdname|--target=bfdname] +[-C|--demangle[=style] ] +[-d|--disassemble] +[-D|--disassemble-all] +[-z|--disassemble-zeroes] +[-EB|-EL|--endian={big | little }] +[-f|--file-headers] +[-F|--file-offsets] +[--file-start-context] +[-g|--debugging] +[-e|--debugging-tags] +[-h|--section-headers|--headers] +[-i|--info] +% +gresource - GResource tool +gresource [--section SECTION] list FILE [PATH] +gresource [--section SECTION] details FILE [PATH] +gresource [--section SECTION] extract FILE PATH +gresource sections FILE +gresource offers a simple commandline interface to GResource. It lets you list and extract resources that +have been compiled into a resource file or included in an elf file (a binary or a shared library). +% +lvmdiskscan scans all SCSI, (E)IDE disks, multiple devices and a bunch of other block devices in the sys‐ +tem looking for LVM physical volumes. The size reported is the real device size. Define a filter in +-l, --lvmpartition +Only reports Physical Volumes. +% +numfmt - Convert numbers from/to human-readable strings +numfmt [OPTION]... [NUMBER]... +Reformat NUMBER(s), or the numbers from standard input if none are specified. +Mandatory arguments to long options are mandatory for short options too. +--debug +print warnings about invalid input +-d, --delimiter=X +use X instead of whitespace for field delimiter +--field=FIELDS +% +logsave - save the output of a command in a logfile +logsave [ -asv ] logfile cmd_prog [ ... ] +The logsave program will execute cmd_prog with the specified argument(s), and save a copy of its output +to logfile. If the containing directory for logfile does not exist, logsave will accumulate the output +in memory until it can be written out. A copy of the output will also be written to standard output. +If cmd_prog is a single hyphen ('-'), then instead of executing a program, logsave will take its input +from standard input and save it in logfile +logsave is useful for saving the output of initial boot scripts until the /var partition is mounted, so +the output can be written to /var/log. +% +certtool - GnuTLS certificate tool +certtool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +or non interactively by specifying the template command line option. +provide it using the environment variables GNUTLS_PIN and GNUTLS_SO_PIN. +-d number, --debug=number +% +systemd-socket-activate - Test socket activation of daemons +connection. +The daemon to launch and its options should be specified after options intended for +systemd-socket-activate. +If the --inetd option is given, the socket file descriptor will be used as the standard input and output +of the launched process. Otherwise, standard input and output will be inherited, and sockets will be +systemd-socket-activate will be passed through to the daemon, in the original positions. Other sockets +% +losetup - set up and control loop devices +Get info: +losetup loopdev +losetup -l [-a] +losetup -j file [-o offset] +Detach a loop device: +losetup -d loopdev... +Detach all associated loop devices: +% +passwd - change user password +passwd [options] [LOGIN] +the account or associated password validity period. +Password Changes +and compared against the stored password. The user has only one chance to enter the correct password. The +After the password has been entered, password aging information is checked to see if the user is +permitted to change the password at this time. If not, passwd refuses to change the password and exits. +% +unicode_stop - revert keyboard and console from unicode mode +unicode_stop +The unicode_stop command will more-or-less undo the effect of unicode_start. It puts the keyboard in +% +sudo, sudoedit — execute a command as another user +sudo -h | -K | -k | -V +sudo -v [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-u user] +sudo -l [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command] +sudo [-AbEHnPS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-r role] [-t type] +[-u user] [VAR=value] [-i | -s] [command] +sudoedit [-AknS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-u user] file ... +sudo allows a permitted user to execute a command as the superuser or another user, as specified by the +security policy. The invoking user's real (not effective) user ID is used to determine the user name with +which to query the security policy. +sudo supports a plugin architecture for security policies and input/output logging. Third parties can +develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. +% +groff - front-end for the groff document formatting system +groff [-abcegijklpstzCEGNRSUVXZ] [-d cs] [-D arg] [-f fam] [-F dir] [-I dir] [-K arg] [-L arg] [-m name] +[-M dir] [-n num] [-o list] [-P arg] [-r cn] [-T dev] [-w name] [-W name] [file ...] +groff -h | --help +groff -v | --version [option ...] +The groff program and macro suite is the implementation of a roff(7) system within the free software col‐ +lection GNU ⟨http://www.gnu.org⟩. The groff system has all features of the classical roff, but adds many +extensions. +% +tzselect - select a timezone +tzselect +The tzselect program asks the user for information about the current location, and outputs the resulting +timezone description to standard output. The output is suitable as a value for the TZ environment vari‐ +able. +All interaction with the user is done via standard input and standard error. +The exit status is zero if a timezone was successfully obtained from the user, nonzero otherwise. +ENVIRONMENT +% +modprobe - Add and remove modules from the Linux Kernel +modprobe [-v] [-V] [-C config-file] [-n] [-i] [-q] [-b] [modulename] [module parameters...] +modprobe [-r] [-v] [-n] [-i] [modulename...] +modprobe [-c] +modprobe [--dump-modversions] [filename] +modprobe intelligently adds or removes a module from the Linux kernel: note that for convenience, there +is no difference between _ and - in module names (automatic underscore conversion is performed). +modprobe looks in the module directory /lib/modules/`uname -r` for all the modules and other files, +modprobe will also use module options specified on the kernel command line in the form of +% +systemd-hwdb - hardware database management tool +systemd-hwdb [options] update +systemd-hwdb [options] query modalias +systemd-hwdb expects a command and command specific arguments. It manages the binary hardware database. +-h, --help +Print help text. +--usr +Generate in /usr/lib/udev instead of /etc/udev. +% +named - Internet domain name server +[-M option] [-m flag] [-n #cpus] [-p port] [-s] [-S #max-socks] [-t directory] [-U #listeners] +[-u user] [-v] [-V] [-X lock-file] [-x cache-file] +When invoked without arguments, named will read the default configuration file /etc/named.conf, read any +initial data, and listen for queries. +% +systemctl - Control the systemd system and service manager +manages. +The following options are understood: +-t, --type= +The argument should be a comma-separated list of unit types such as service and socket. +If one of the arguments is a unit type, when listing units, limit display to certain unit types. +% +geouplookup6 - look up country using IP Address or hostname +geouplookup6 [-d directory] [-f filename] [-v] <ipaddress|hostname> +geouplookup6 uses the GeoIP library and database to find the Country that an IP address or hostname orig‐ +inates from. You must install a database suitable for geoiplookup6. IE: GeoIPv6.dat +For example: +geoiplookup6 ipv6.google.com +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +unshare - run program with some namespaces unshared from parent +unshare [options] program [arguments] +Unshares the indicated namespaces from the parent process and then executes the specified program. +The namespaces can optionally be made persistent by bind mounting /proc/pid/ns/type files to a filesystem +The namespaces to be unshared are indicated via options. Unshareable namespaces are: +mount namespace +Mounting and unmounting filesystems will not affect the rest of the system (CLONE_NEWNS flag), +except for filesystems which are explicitly marked as shared (with mount --make-shared; see +% +mechanisms which use the standard libsasl database of user secrets. +the -d (delete user) flag. +% +pinky - lightweight finger +pinky [OPTION]... [USER]... +-l produce long format output for the specified USERs +-b omit the user's home directory and shell in long format +-h omit the user's project file in long format +-p omit the user's plan file in long format +-s do short format output, this is the default +-f omit the line of column headings in short format +% +tic - the terminfo entry-description compiler +The tic command translates a terminfo file from source format into compiled format. The compiled format +hashed database (one record per entry). The tic command writes only one type of entry, depending on how +it was built: +· For directory trees, the top-level directory, e.g., /usr/share/terminfo, specifies the location of +the database. +· For hashed databases, a filename is needed. If the given file is not found by that name, but can be +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +troff - the troff processor of the groff text formatting system +troff [-abcivzCERU] [-d cs] [-f fam] [-F dir] [-I dir] [-m name] [-M dir] [-n num] [-o list] [-r cn] +[-T name] [-w name] [-W name] [file ...] +appropriate order and with the appropriate options. +It is possible to have whitespace between a command line option and its parameter. +-a Generate an ASCII approximation of the typeset output. +% +gtester - test running utility +gtester [OPTION...] [testprogram] +gtester is a utility to run unit tests that have been written using the GLib test framework. +When called with the -o option, gtester writes an XML report of the test results, which can be converted +into HTML using the gtester-report utility. +-h, --help +print help and exit +-v, --version +print version information and exit +% +lexgrog - parse header information in man pages +lexgrog [-m|-c] [-dfw?V] [-E encoding] file ... +lexgrog is an implementation of the traditional “groff guess” utility in lex. It reads the list of files +on its command line as either man page source files or preformatted “cat” pages, and displays their name +and description as used by apropos and whatis, the list of preprocessing filters required by the man page +before it is passed to nroff or troff, or both. +grams that need to check man pages for correctness. If one of lexgrog's input files is “-”, it will read +from standard input; if any input file is compressed, a decompressed version will be read automatically. +-d, --debug +% +lvscan — scan (all disks) for Logical Volumes +lockingfailure] [-P|--partial] [--reportformat {basic|json}] [-v|--verbose] +lvscan scans all known volume groups or all supported LVM block devices in the system for defined Logical +Volumes. The output consists of one line for each Logical Volume indicating whether or not it is active, +obtain more-comprehensive information about the Logical Volumes. +--all Include information in the output about internal Logical Volumes that are components of normally- +accessible Logical Volumes, such as mirrors, but which are not independently accessible (e.g. not +% +msggrep - pattern matching on message catalog +msggrep [OPTION] [INPUTFILE] +Extracts all messages of a translation catalog that match a given pattern or belong to some given source +files. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +lvmconf — LVM configuration modifier +lvmconf [--disable-cluster] [--enable-cluster] [--enable-halvm] [--disable-halvm] [--file <configfile>] +[--lockinglib <lib>] [--lockinglibdir <dir>] [--services] [--mirrorservice] [--startstopservices] +lvmconf is a script that modifies the locking configuration in an lvm configuration file. See +lvm configuration if needed. +--disable-cluster +Set locking_type to the default non-clustered type. Also reset lvmetad use to its default. +--enable-cluster +Set locking_type to the default clustered type on this system. Also disable lvmetad use as it is +% +colrm - remove columns from a file +colrm [first [last]] +colrm removes selected columns from a file. Input is taken from standard input. Output is sent to stan‐ +dard output. +If called with one parameter the columns of each line will be removed starting with the specified first +column. If called with two parameters the columns from the first column to the last column will be +removed. +-V, --version +% +ntpdc - vendor-specific NTPD control program +ntpdc [-flags] [-flag [value]] [--option-name[[=| ]value]] [ host ...] +using a much more sane interface. +either in interactive mode or controlled using command line arguments. Extensive state and statistics +information is available through the ntpdc interface. In addition, nearly all the configuration options +ntpdc. +% +paste - merge lines of files +paste [OPTION]... [FILE]... +Write lines consisting of the sequentially corresponding lines from each FILE, separated by TABs, to +standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --delimiters=LIST +reuse characters from LIST instead of TABs +-s, --serial +% +vgsplit — split a volume group into two +vgsplit [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-c|--clustered {y|n}] [--commandprofile Pro‐ +[-p|--maxphysicalvolumes MaxPhysicalVolumes] [--[vg]metadatacopies NumberOfCopies|unmanaged|all] +[PhysicalVolumePath...] +The physical volumes moved can be specified either explicitly via PhysicalVolumePath, or implicitly by -n +moved. +for the new volume group can be specified with --alloc, --clustered, --maxlogicalvolumes, --metadatatype, +% +makepkg - package build utility +makepkg [options] [ENVVAR=value] [ENVVAR+=value] ... +makepkg is a script to automate the building of packages. The requirements for using the script are a +build-capable *nix platform and a custom build script for each package you wish to build (known as a +The advantage to a script-based build is that the work is only done once. Once you have the build script +for a package, makepkg will do the rest: download and validate source files, check dependencies, +configure the build-time settings, build the package, install the package into a temporary root, make +customizations, generate meta-info, and package the whole thing up for pacman to use. +makepkg uses your current locale by default and does not unset it when building packages. If you wish +% +mev - a program to report mouse events +mev [ options ] +The `mev' program is part of the gpm package. The information below is extracted from the texinfo file, +which is the preferred source of information. +The mev program is modeled after xev. It prints to stdout the mouse console events it gets. +mev's default behaviour is to get anything, but command line switches can be used to set the various +fields in the Gpm_Connect structure, in order to customize the program's behaviour. I'm using mev to han‐ +dle mouse events to Emacs. +Command line switches for mev are the following: +% +last, lastb - show a listing of last logged in users +last [options] [username...] [tty...] +lastb [options] [username...] [tty...] +last searches back through the /var/log/wtmp file (or the file designated by the -f option) and displays +a list of all users logged in (and out) since that file was created. One or more usernames and/or ttys +be abbreviated, thus last 0 is the same as last tty0. +When catching a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal, +terminate. +The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all +% +mandb - create or update the manual page index caches +mandb [-dqsucpt?V] [-C file] [manpath] +mandb [-dqsut] [-C file] -f filename ... +mandb is used to initialise or manually update index database caches that are usually maintained by man. +The caches contain information relevant to the current state of the manual page system and the informa‐ +tion stored within them is used by the man-db utilities to enhance their speed and functionality. +When creating or updating an index, mandb will warn of bad ROFF .so requests, bogus manual page filenames +and manual pages from which the whatis cannot be parsed. +Supplying mandb with an optional colon-delimited path will override the internal system manual page hier‐ +archy search path, determined from information found within the man-db configuration file. +% +showconsolefont - Show the current EGA/VGA console screen font +showconsolefont [ -V ] [ -v ] [ -C console ] +The showconsolefont command outputs the current console font to stdout. The option -v prints additional +-C allows one to indicate the console involved. Its argument is a pathname. +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +gzexe - compress executable files in place +gzexe name ... +The gzexe utility allows you to compress executables in place and have them automatically uncompress and +execute when you run them (at a penalty in performance). For example if you execute ``gzexe +/usr/bin/gdb'' it will create the following two files: +/usr/bin/gdb~ is the original file and /usr/bin/gdb is the self-uncompressing executable file. You can +remove /usr/bin/gdb~ once you are sure that /usr/bin/gdb works properly. +% +recode-sr-latin - convert Serbian text from Cyrillic to Latin script +recode-sr-latin [OPTION] +Recode Serbian text from Cyrillic to Latin script. The input text is read from standard input. The con‐ +verted text is output to standard output. +Informative output: +-h, --help +display this help and exit +-V, --version +output version information and exit +% +nice - run a program with modified scheduling priority +the process). +Mandatory arguments to long options are mandatory for short options too. +-n, --adjustment=N +--help display this help and exit +% +zforce - force a '.gz' extension on all gzip files +zforce [ name ... ] +% +lwresd - lightweight resolver daemon +lwresd [-c config-file] [-C config-file] [-d debug-level] [-f] [-g] [-i pid-file] [-m flag] [-n #cpus] +lwresd is the daemon providing name lookup services to clients that use the BIND 9 lightweight resolver +library. It is essentially a stripped-down, caching-only name server that answers queries using the BIND +9 lightweight resolver protocol rather than the DNS protocol. +is used for lightweight resolver requests and responses. +Incoming lightweight resolver requests are decoded by the server which then resolves them using the DNS +protocol. When the DNS lookup completes, lwresd encodes the answers in the lightweight resolver format +% +tput, reset - initialize a terminal or query terminfo database +tput [-Ttype] capname [parms ... ] +tput [-Ttype] init +tput [-Ttype] reset +tput [-Ttype] longname +tput -S << +tput -V +The tput utility uses the terminfo database to make the values of terminal-dependent capabilities and +name of the requested terminal type. The result depends upon the capability's type: +string +tput writes the string to the standard output. No trailing newline is supplied. +% +xfs_estimate - estimate the space that an XFS filesystem will take +xfs_estimate [ -h ] [ -b blocksize ] [ -i logsize ] +[ -e logsize ] [ -v ] directory ... +xfs_estimate -V +For each directory argument, xfs_estimate estimates the space that directory would take if it were copied +to an XFS filesystem. xfs_estimate does not cross mount points. The following definitions are used: +The xfs_estimate options are: +-b blocksize +% +request-key - Handle key instantiation callback requests from the kernel +/sbin/request-key <op> <key> <uid> <gid> <threadring> <processring> <sessionring> [<info>] +available. The kernel creates a partially set up key and then calls out to this program to instantiate +it. It is not intended to be called directly. +ERRORS +All errors will be logged to the syslog. +FILES +/etc/request-key.conf Instantiation handler configuration file. +/etc/request-key.d/<keytype>.conf Keytype specific configuration file. +% +vlock - Virtual Console lock program +vlock +vlock [ -a,--all ] [ -c,--current ] [ -h,--help ] [ -v,--version ] +sion(s) while still allowing other users to use the system on other virtual consoles. If desired, the +By default, only the current VC (virtual console) is locked. With the -a,-all option all VCs are locked. +The locked VCs cannot be unlocked without the invoker's password. And, for the paranoid, vlock makes it +a trying experience for those attempting to guess the password, so unauthorized access to session(s) is +highly unlikely. +% +psfxtable - handle Unicode character tables for console fonts +psfxtable [-i infont] [-o outfont] [-it intable] [-ot outtable] [-nt] +psfxtable handles the embedded Unicode character table for .psf format console fonts. It reads a font and +are links to it. +standard input. If no -it or -o or -ot option is given, no input table is read or no output font or out‐ +put table is written. +By default the output font (if any) will have a Unicode table when either the input font has one, or an +explicit table (which overrides an input font table) has been provided. The option -nt causes output of +% +kmod - Program to manage Linux Kernel modules +kmod is a multi-call binary which implements the programs used to control Linux Kernel modules. Most +users will only run it using its other names. +-V --version +Show the program version and exit. +-h --help +Show the help message. +% +vimdiff - edit two, three or four versions of a file with Vim and show differences +gvimdiff +Vimdiff starts Vim on two (or three or four) files. Each file gets its own window. The differences +version to another version of the same file. +When started as gvimdiff the GUI will be started, if available. +In each window the 'diff' option will be set, which causes the differences to be highlighted. +% +dnssec-verify - DNSSEC zone verification tool +dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-V] [-x] [-z] {zonefile} +dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the +-c class +Specifies the DNS class of the zone. +-E engine +Specifies the cryptographic hardware to use, when applicable. +% +vgcreate — create a volume group +vgcreate [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-c|--clustered {y|n}] [--com‐ +datacopies NumberOfCopies|unmanaged|all] [-s|--physicalextentsize PhysicalExtentSize[bBsSkKmMgGtTpPeE]] +[--reportformat {basic|json}] [--shared] [--systemid SystemID] [-t|--test] [-v|--verbose] [--version] +cePath. +% +expiry - check and enforce password expiration policy +expiry option +The expiry command checks (-c) the current password expiration and forces (-f) changes when required. It +is callable as a normal user command. +The options which apply to the expiry command are: +-c, --check +Check the password expiration of the current user. +-f, --force +Force a password change if the current user has an expired password. +% +vconfig [lots of long options] +The vconfig program allows you to create and remove vlan-devices on a vlan enabled kernel. Vlan-devices +are virtual ethernet devices which represents the virtual lans on the physical lan. +add [interface-name] [vlan-id] +Creates a vlan-device on [interface-name]. The resulting vlan-device will be called according to +the nameing convention set. +rem [vlan-device] +Removes the named vlan-device. +% +lvmetad — LVM metadata cache daemon +lvmetad [-l level[,level...]] [-p pidfile_path] [-s socket_path] [-t timeout_value] [-f] [-h] [-V] [-?] +The lvmetad daemon caches LVM metadata so that LVM commands can read metadata from the cache rather than +the normal work of the system. lvmetad can be a disadvantage when disk event notifications from the sys‐ +tem are unreliable. +lvmetad does not read metadata from disks itself. Instead, it relies on an LVM command, like pvscan +--cache, to read metadata from disks and send it to lvmetad to be cached. +New LVM disks that appear on the system must be scanned before lvmetad knows about them. If lvmetad does +not know about a disk, then LVM commands using lvmetad will also not know about it. When disks are added +or removed from the system, lvmetad must be updated. +% +repo-add - package database maintenance utility +repo-add [options] <path-to-db> <package|delta> [<package|delta> ...] +repo-remove [options] <path-to-db> <packagename|delta> [<packagename|delta> ...] +repo-add and repo-remove are two scripts to help build a package database for packages built with +repo-add will update a package database by reading a built package or package delta file. Multiple +packages and/or deltas to add can be specified on the command line. +If a matching “.sig” file is found alongside a package file, the signature will automatically be embedded +into the database. +% +c++filt - Demangle C++ and Java symbols. +c++filt [-_|--strip-underscore] +[-n|--no-strip-underscore] +[-p|--no-params] +[-t|--types] +[-i|--no-verbose] +[-s format|--format=format] +[--help] [--version] [symbol...] +The C++ and Java languages provide function overloading, which means that you can write many functions +with the same name, providing that each function takes parameters of different types. In order to be +able to distinguish these similarly named functions C++ and Java encode them into a low-level assembler +% +pkexec - Execute a command as another user +pkexec [--version] [--disable-internal-agent] [--help] +pkexec allows an authorized user to execute PROGRAM as another user. If PROGRAM is not specified, the +default shell will be run. If username is not specified, then the program will be executed as the +administrative super user, root. +RETURN VALUE +Upon successful completion, the return value is the return value of PROGRAM. If the calling process is +not authorized or an authorization could not be obtained through authentication or an error occured, +% +du - estimate file space usage +du [OPTION]... [FILE]... +du [OPTION]... --files0-from=F +Summarize disk usage of the set of FILEs, recursively for directories. +Mandatory arguments to long options are mandatory for short options too. +-0, --null +end each output line with NUL, not newline +-a, --all +write counts for all files, not just directories +% +There is an additional drawing command available: +\D'R dh dv' +Draw a rule (solid black rectangle), with one corner at the current position, and the diagonally +opposite corner at the current position +(dh,dv). Afterwards the current position will be at the +% +gperl - groff preprocessor for Perl parts in roff files +gperl [-] [--] [ filespec ....] +gperl -h|--help +gperl -v|--version +Perl part can be stored in groff strings or numerical registers based on the arguments at a final line of +a Perl part. +So far, there are only filespec or breaking options. +filespec are file names or the minus character - character for standard input. As usual, the argument -- +can be used in order to let all fowllowing arguments mean file names, even if the names begin with a +% +git - the stupid content tracker +git [--version] [--help] [-C <path>] [-c <name>=<value>] +[--exec-path[=<path>]] [--html-path] [--man-path] [--info-path] +[-p|--paginate|--no-pager] [--no-replace-objects] [--bare] +[--git-dir=<path>] [--work-tree=<path>] [--namespace=<name>] +<command> [<args>] +Git is a fast, scalable, distributed revision control system with an unusually rich command set that +provides both high-level operations and full access to internals. +See gittutorial(7) to get started, then see giteveryday(7) for a useful minimum set of commands. The Git +After you mastered the basic concepts, you can come back to this page to learn what commands Git offers. +% +igawk - gawk with include files +igawk [ all gawk options ] -f program-file [ -- ] file ... +igawk [ all gawk options ] [ -- ] program-text file ... +@include getopt.awk +in your program to include the file getopt.awk from either the current directory or one of the other +directories in the search path. +% +nl-classid-lookup - Lookup classid definitions +nl-classid-lookup [-hv] [-r] [--raw] name +nl-classid-lookup searches the classid database for a matching entry. It is used to resolve qdisc/class +names to classid values and vice versa. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +-r or --reverse +% +host - DNS lookup utility +{name} [server] +host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses +and vice versa. When no arguments or options are given, host prints a short summary of its command line +arguments and options. +address. server is an optional argument which is either the name or IP address of the name server that +host should query instead of the server or servers listed in /etc/resolv.conf. +% +stty - change and print terminal line settings +stty [-F DEVICE | --file=DEVICE] [SETTING]... +stty [-F DEVICE | --file=DEVICE] [-a|--all] +stty [-F DEVICE | --file=DEVICE] [-g|--save] +Print or change terminal characteristics. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +print all current settings in human-readable form +-g, --save +print all current settings in a stty-readable form +% +rarpd - answer RARP REQUESTs +arping [-aAvde] [-b bootdir] [interface] +is found in /etc/ethers database and obtained host name is resolvable to an IP address appropriate for +attached network, rarpd answers to client with RARPD reply carrying an IP address. +To allow multiple boot servers on the network rarpd optionally checks for presence Sun-like bootable im‐ +WARNING +% +swapon, swapoff - enable/disable devices and files for paging and swapping +swapon [options] [specialfile...] +swapoff [-va] [specialfile...] +swapon is used to specify devices on which paging and swapping are to take place. +to indicate a device by label or uuid. +Calls to swapon normally occur in the system boot scripts making all swap devices available, so that the +paging and swapping activity is interleaved across several devices and files. +swapoff disables swapping on the specified devices and files. When the -a flag is given, swapping is +disabled on all known swap devices and files (as found in /proc/swaps or /etc/fstab). +% +dnssec-settime - set the key timing metadata for a DNSSEC key +dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-A date/offset] +[-R date/offset] [-I date/offset] [-D date/offset] [-D sync date/offset] [-h] [-V] +[-v level] [-E engine] {keyfile} +dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, +-A, -R, -I, and -D options. The metadata can then be used by dnssec-signzone or other signing software to +determine when a key is to be published, whether it should be used for signing a zone, etc. +If none of these options is set on the command line, then dnssec-settime simply prints the key timing +metadata already stored in the key. +When key metadata fields are changed, both files of a key pair (Knnnn.+aaa+iiiii.key and +Knnnn.+aaa+iiiii.private) are regenerated. Metadata fields are stored in the private file. A +% +systemd-path - List and query system and user paths +file-hierarchy(7) available for querying. +When invoked without arguments, a list of known paths and their current values is shown. When at least +one argument is passed, the path with this name is queried and its value shown. The variables whose name +begins with "search-" do not refer to individual paths, but instead to a list of colon-separated search +paths, in their order of precedence. +The following options are understood: +% +cfdisk - display or manipulate a disk partition table +cfdisk [options] [device] +cfdisk is a curses-based program for partitioning any block device. The default device is /dev/sda. +functionality for CHS (Cylinder-Head-Sector) addressing. CHS has never been important for Linux, and +this addressing concept does not make any sense for new devices. +% +setsid - run a program in a new session +setsid [options] program [arguments] +setsid runs a program in a new session. +-c, --ctty +Set the controlling terminal to the current one. +-w, --wait +Wait for the execution of the program to end, and return the exit value of this program as the +return value of setsid. +-V, --version +% +xfs_freeze - suspend access to an XFS filesystem +xfs_freeze [ -f | -u ] mount-point +xfs_freeze -V +xfs_freeze halts new access to the filesystem and creates a stable image on disk. xfs_freeze is intended +to be used with volume managers and hardware RAID devices that support the creation of snapshots. +The mount-point argument is the pathname of the directory where the filesystem is mounted. The filesys‐ +The -f flag requests the specified XFS filesystem to be frozen from new modifications. When this is +selected, all ongoing transactions in the filesystem are allowed to complete, new write system calls are +% +dc - an arbitrary precision calculator +dc [-V] [--version] [-h] [--help] +[-e scriptexpression] [--expression=scriptexpression] +[-f scriptfile] [--file=scriptfile] +[file ...] +dc is a reverse-polish desk calculator which supports unlimited precision arithmetic. It also allows you +to define and call macros. Normally dc reads from the standard input; if any command arguments are given +to it, they are filenames, and dc reads and executes the contents of the files before reading from stan‐ +dard input. All normal output is to standard output; all error output is to standard error. +A reverse-polish calculator stores numbers on a stack. Entering a number pushes it on the stack. Arith‐ +metic operations pop arguments off the stack and push the results. +% +xfs_mdrestore - restores an XFS metadump image to a filesystem image +xfs_mdrestore [ -g ] source target +xfs_mdrestore -V +filesystem. The source argument specifies the location of the metadump image and the target argument +specifies the destination for the filesystem image. If the source is -, then the metadata image is read +rected to xfs_mdrestore. The target can be either a file or a device. +xfs_mdrestore should not be used to restore metadata onto an existing filesystem unless you are com‐ +pletely certain the target can be destroyed. +% +ssh-keyscan — gather ssh public keys +ssh-keyscan is a utility for gathering the public ssh host keys of a number of hosts. It was designed to +aid in building and verifying ssh_known_hosts files. ssh-keyscan provides a minimal interface suitable for +use by shell and perl scripts. +ssh-keyscan uses non-blocking socket I/O to contact as many hosts as possible in parallel, so it is very +those hosts are down or do not run ssh. For scanning, one does not need login access to the machines that +are being scanned, nor does the scanning process involve any encryption. +The options are as follows: +% +RR in it and it will create a .ds file with the DS RR in it. +It prints out the basename for this file (K<name>+<alg>+<id>). +-f Ignore SEP flag (i.e. make DS records for any key) +-n Write the result DS Resource Record to stdout instead of a file +% +rev - reverse lines characterwise +rev [option] [file...] +The rev utility copies the specified files to standard output, reversing the order of characters in every +line. If no files are specified, standard input is read. +-V, --version +Display version information and exit. +-h, --help +Display help text and exit. +% +hostnamectl - Control the system hostname +all kinds of special characters (e.g. "Lennart's Laptop"), the static hostname which is used to +initialize the kernel hostname at boot (e.g. "lennarts-laptop"), and the transient hostname which is a +fallback value received from network configuration. If a static hostname is set, and is valid (something +other than localhost), then the transient hostname is not used. +transient hostnames are limited to the usually accepted characters of Internet domain names. +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +dnssec-signzone - DNSSEC zone signing tool +dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] +[-K directory] [-k key] [-L serial] [-l domain] [-M domain] [-i interval] +[-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] +[-p] [-Q] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-V] +dnssec-signzone signs a zone. It generates NSEC and RRSIG records and produces a signed version of the +zone. The security status of delegations from the signed zone (that is, whether the child zones are +secure or not) is determined by the presence or absence of a keyset file for each child zone. +-a +Verify all generated signatures. +% +nl-pktloc-lookup - Lookup packet location definitions +nl-pktloc-lookup name +nl-pktloc-lookup --list +nl-pktloc-lookup searches the packet location database for a matching entry. It is used to resolve packet +location aliases to their definition, i.e. alignment, layer, offset, and mask. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +% +strip - Discard symbols from object files. +strip [-F bfdname |--target=bfdname] +[-I bfdname |--input-target=bfdname] +[-O bfdname |--output-target=bfdname] +[-s|--strip-all] +[-S|-g|-d|--strip-debug] +[--strip-dwo] +[-K symbolname |--keep-symbol=symbolname] +[-N symbolname |--strip-symbol=symbolname] +[-w|--wildcard] +[-x|--discard-all] [-X |--discard-locals] +[-R sectionname |--remove-section=sectionname] +[-o file] [-p|--preserve-dates] +[-D|--enable-deterministic-archives] +[-U|--disable-deterministic-archives] +% +ldns-keyfetcher - retrieve the DNSSEC DNSKEYs for a zone +ldns-keyfetcher is used to retrieve the DNSKEYs of a zone. +First it finds all authoritative nameservers of the zone by tracing it from the root down. All authorita‐ +tive nameservers are then queried (using TCP) for the DNSKEY RRset of the zone apex. If the results are +all the same, the key resource record set is printed. +-6 Only use IPv6 +% +makepkg-template - package build templating utility +makepkg-template [options] +makepkg-template is a script to ease the work of maintaining multiple similar PKGBUILDs. It allows you to +move most of the code from the PKGBUILD into a template file and uses markers to allow in-place updating +of existing PKGBUILDs if the template has been changed. +Template files can contain any code allowed in a PKGBUILD. You can think of them like external files +included with "." or "source", but they will be inlined into the PKGBUILD by makepkg-template so you do +not depend on the template file when building the package. +Markers are bash comments in the form of: +% +chpasswd - update passwords in batch mode +chpasswd [options] +The chpasswd command reads a list of user name and password pairs from standard input and uses this +information to update a group of existing users. Each line is of the format: +user_name:password +By default the passwords must be supplied in clear-text, and are encrypted by chpasswd. Also the password +age will be updated, if present. +By default, passwords are encrypted by PAM, but (even if not recommended) you can select a different +encryption method with the -e, -m, or -c options. +% +autoheader - Create a template header for configure +autoheader [OPTION]... [TEMPLATE-FILE] +Create a template file of C `#define' statements for `configure' to use. To this end, scan TEM‐ +PLATE-FILE, or `configure.ac' if present, or else `configure.in'. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +verbosely report processing +% +ldns-gen-zone - read a zonefile and print it while adding DS records and extra RR's +ldns-gen-zone ZONEFILE +ldns-gen-zone reads a DNS zone file and prints it. +It is build for speed, not for a nice formatting. The output has one resource record per line and no +pretty-printing makeup. +Existing DS records are also not stripped. +The idea is to use this tool for quickly generating a representative artificial zonefile from a real +zonefile, to use it for testing purposes. +% +infocmp - compare or print out terminfo descriptions +[-v n] [-s d| i| l| c] [-R subset] +[-w width] [-A directory] [-B directory] +[termname...] +infocmp can be used to compare a binary terminfo entry with other terminfo entries, rewrite a terminfo +description to take advantage of the use= terminfo field, or print out a terminfo description from the +lowed by the numeric fields, followed by the string fields. +Default Options +If no options are specified and zero or one termnames are specified, the -I option will be assumed. If +more than one termname is specified, the -d option will be assumed. +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +damaged filesystem. +requirement can be overridden using the -f option, but the resulting image file is very likely not going +% +cksum - checksum and count the bytes in a file +cksum [FILE]... +cksum [OPTION] +Print CRC checksum and byte counts of each FILE. +--help display this help and exit +--version +output version information and exit +Written by Q. Frank Xia. +% +the system. +See the various sub commands below. The following global options can be used: +-v, --verbose +Run in verbose mode with debug output. +-q, --quiet +% +-a number +-s salt +Use the given salt for the hash calculation. Salt value should be in hexadecimal format. +-t count +Use count iterations for the hash calculation. +% +pkgdelta - package delta generation utility +pkgdelta is used to create package delta files between two versions of the same package. These files are +with the previous versions of packages (in the package cache) to synthesize the upgraded version of the +--max-delta-size <ratio> +Only create delta files if the delta is smaller than ratio * package_size. Possible values: 0.0 to +% +visudo — edit the sudoers file +visudo [-chqsV] [-f sudoers] [-x output_file] +against multiple simultaneous edits, provides basic sanity checks, and checks for parse errors. If the +sudoers file is currently being edited you will receive a message to try again later. +honor the VISUAL or EDITOR environment variables unless they contain an editor in the aforementioned edi‐ +tors list. However, if visudo is configured with the --with-env-editor option or the env_editor Default +be a security hole since it allows the user to execute any program they wish simply by setting VISUAL or +EDITOR. +% +fsck - check and repair a Linux filesystem +fsck [-lsAVRTMNP] [-r [fd]] [-C [fd]] [-t fstype] [filesystem...] [--] [fs-specific-options] +fsck is used to check and optionally repair one or more Linux filesystems. filesys can be a device name +handle filesystems on different physical disk drives in parallel to reduce the total amount of time +needed to check all of them. +If no filesystems are specified on the command line, and the -A option is not specified, fsck will +The exit code returned by fsck is the sum of the following conditions: +% +zcmp, zdiff - compare compressed files +Zcmp and zdiff are used to invoke the cmp or the diff program on files compressed via gzip. All options +fed to cmp or diff. The input files are not modified. The exit status from cmp or diff is preserved. +BUGS +% +chattr - change file attributes on a Linux file system +chattr [ -RVf ] [ -v version ] [ -p project ] [ mode ] files... +chattr changes the file attributes on a Linux file system. +The format of a symbolic mode is +-=[aAcCdDeijsStTu]. +The operator '+' causes the selected attributes to be added to the existing attributes of the files; '-' +causes them to be removed; and '=' causes them to be the only attributes that the files have. +The letters 'aAcCdDeijsStTu' select the new attributes for the files: append only (a), no atime updates +(A), compressed (c), no copy on write (C), no dump (d), synchronous directory updates (D), extent format +(e), immutable (i), data journalling (j), project hierarchy (P), secure deletion (s), synchronous updates +(S), no tail-merging (t), top of directory hierarchy (T), and undeletable (u). +% +scmp_sys_resolver - Resolve system calls +in the optional ARCH argument. If the architecture is not supplied on the command line then the native +architecture is used. If the "-t" argument is specified along with a system call name, then the system +call will be translated as necessary for the given architecture. The "-t" argument has no effect if a +system call number is specified. +In some combinations of architecture and system call, a negative system call number will be displayed. A +negative system call number indicates that the system call is not defined for the given architecture and +is treated in a special manner by libseccomp depending on the operation. +-a ARCH +% +pfbtops - translate a PostScript font in .pfb format to ASCII +pfbtops [ -v ] [ pfb_file ] +pfbtops translates a PostScript font in .pfb format to ASCII, splitting overlong lines in text packets +into smaller chunks. If pfb_file is omitted the pfb file will be read from the standard input. The +ASCII format PostScript font will be written on the standard output. PostScript fonts for MS-DOS are +normally supplied in .pfb format. +The resulting ASCII format PostScript font can be used with groff. It must first be listed in +-v Print the version number. +% +fsck.xfs - do nothing, successfully +fsck.xfs [ filesys ... ] +exits with a zero exit status. +If you wish to check the consistency of an XFS filesystem, or repair a damaged or corrupt XFS filesystem, +FILES +/etc/fstab. +% +getfattr - get extended attributes of filesystem objects +getfattr [-hRLP] -n name [-e en] pathname... +getfattr [-hRLP] -d [-e en] [-m pattern] pathname... +For each file, getfattr displays the file name, and the set of extended attribute names (and optionally +values) which are associated with that file. +The output format of getfattr -d is as follows: +% +gdbmtool - examine and modify a GDBM database +gdbmtool [-lmNnqrs] [-b SIZE] [-c SIZE] [-f FILE] [--block-size=SIZE] +[--cache-size=SIZE] [--file FILE] [--newdb] [--no-lock] +[--no-mmap] [--norc] +[--quiet] [--read-only] [--synchronize] [DBFILE] +gdbmtool [-Vh] ][--help] [--usage] [--version] +The gdbmtool utility allows you to view and modify an existing GDBM database or to create a new one. +The DBFILE argument supplies the name of the database to open. If not supplied, the default name +junk.gdbm is used instead. If the named database does not exist, it will be created. An existing data‐ +base can be cleared (i.e. all records removed from it) using the --newdb option (see below). +% +logrotate ‐ rotates, compresses, and mails system logs +logrotate [-dv] [-f|--force] [-s|--state file] config_file .. +logrotate is designed to ease administration of systems that generate large numbers of log files. It +daily, weekly, monthly, or when it grows too large. +Normally, logrotate is run as a daily cron job. It will not modify a log more than once in one day +unless the criterion for that log is based on the log's size and logrotate is being run more than once +each day, or unless the -f or --force option is used. +given in earlier files, so the order in which the logrotate config files are listed is important. Nor‐ +mally, a single config file which includes any other config files which are needed should be used. See +% +kadmin [-O|-N] [-r realm] [-p principal] [-q query] [[-c cache_name]|[-k [-t keytab]]|-n] [-w password] +[-s admin_server[:port]] +kadmin.local [-r realm] [-p principal] [-q query] [-d dbname] [-e enc:salt ...] [-m] [-x db_args] +vide nearly identical functionalities; the difference is that kadmin.local directly accesses the KDC +man page will use "kadmin" to refer to both versions. kadmin provides for the maintenance of Kerberos +principals, password policies, and service key tables (keytabs). +The remote kadmin client uses Kerberos to authenticate to kadmind using the service principal kad‐ +min/ADMINHOST (where ADMINHOST is the fully-qualified hostname of the admin server) or kadmin/admin. If +% +grub-editenv - edit GRUB environment block +Tool to edit environment block. +Commands: +create Create a blank environment block file. +list List the current variables. +Set variables. +% +pwd - print name of current/working directory +pwd [OPTION]... +Print the full filename of the current working directory. +-L, --logical +use PWD from environment, even if it contains symlinks +-P, --physical +avoid all symlinks +--help display this help and exit +--version +% +setleds - set the keyboard leds +setleds [-v] [-L] [-D] [-F] [{+|-}num] [{+|-}caps] [{+|-}scroll] +Setleds reports and changes the led flag settings of a VT (namely NumLock, CapsLock and ScrollLock). +Without arguments, setleds prints the current settings. With arguments, it sets or clears the indicated +flags (and leaves the others unchanged). The settings before and after the change are reported if the -v +flag is given. +The led flag settings are specific for each VT (and the VT corresponding to stdin is used). +by the keyboard leds). +With option -D, setleds will change both the VT flags and their default settings (so that a subsequent +% +jfs_mkfs - create a JFS formatted partition +jfs_mkfs [options] device [ blocks ] +jfs_mkfs is used to create (format) a JFS partition. jfs_mkfs must be run as root. +system and/or JFS journal will be created. blocks is the number of blocks to be used for the file sys‐ +tem. If omitted, jfs_mkfs automatically figures the file system size. +WARNING +jfs_mkfs will destroy all data on the specified device! +% +getopt - parse command options (enhanced) +getopt optstring parameters +getopt [options] [--] optstring parameters +getopt [options] -o|--options optstring [options] [--] parameters +getopt is used to break up (parse) options in command lines for easy parsing by shell procedures, and to +The parameters getopt is called with can be divided into two parts: options which modify the way getopt +is not an option argument, or after the first occurrence of '--'. If no '-o' or '--options' option is +found in the first part, the first parameter of the second part is used as the short options string. +% +lvchange — change attributes of a logical volume +lvchange [-a|--activate [a][e|s|l]{y|n}] [--activationmode {complete|degraded|partial}] [--addtag Tag] +[-K|--ignoreactivationskip] [-k|--setactivationskip {y|n}] [--alloc AllocationPolicy] [-A|--autobackup +{y|n}] [--rebuild PhysicalVolume] [--cachemode {passthrough|writeback|writethrough}] [--cachepolicy Pol‐ +[--deltag Tag] [--detachprofile] [--discards {ignore|nopassdown|passdown}] [--errorwhenfull {y|n}] +[-h|-?|--help] [--ignorelockingfailure] [--ignoremonitoring] [--ignoreskippedcluster] [--metadataprofile +{y|n} [--major Major] [--minor Minor]] [--poll {y|n}] [--[raid]maxrecoveryrate Rate] [--[raid]minrecov‐ +eryrate Rate] [--[raid]syncaction {check|repair}] [--[raid]writebehind IOCount] [--[raid]writemostly +PhysicalVolume[:{y|n|t}]] [-r|--readahead {ReadAheadSectors|auto|none}] [--refresh] [--reportformat +{basic|json}] [--resync] [-S|--select Selection] [--sysinit] [-t|--test] [-v|--verbose] [-Z|--zero {y|n}] +[LogicalVolumePath...] +% +df - report file system disk space usage +df [OPTION]... [FILE]... +file system containing each file name argument. If no file name is given, the space available on all +If an argument is the absolute file name of a disk device node containing a mounted file system, df shows +version of df cannot show the space available on unmounted file systems, because on most kinds of systems +doing so requires very nonportable intimate knowledge of file system structures. +% +depmod - Generate modules.dep and map files. +depmod [-b basedir] [-e] [-E Module.symvers] [-F System.map] [-n] [-v] [-A] [-P prefix] [-w] [version] +depmod [-e] [-E Module.symvers] [-F System.map] [-m] [-n] [-v] [-P prefix] [-w] [version] [filename...] +Linux kernel modules can provide services (called "symbols") for other modules to use (using one of the +EXPORT_SYMBOL variants in the code). If a second module uses this symbol, that second module clearly +depends on the first module. These dependencies can get quite complex. +depmod creates a list of module dependencies by reading each module under /lib/modules/version and +determining what symbols it exports and what symbols it needs. By default, this list is written to +modules.dep, and a binary hashed version named modules.dep.bin, in the same directory. If filenames are +given on the command line, only those modules are examined (which is rarely useful unless all modules are +listed). depmod also creates a list of symbols provided by modules in the file named modules.symbols and +% +peekfd - peek at file descriptors of running processes +[-h,--help] pid [fd] [fd] ... +peekfd attaches to a running process and intercepts all reads and writes to file descriptors. You can +specify the desired file descriptor numbers or dump all of them. +-n Do not display headers indicating the source of the bytes dumped. +-c Also dump the requested file descriptor activity in any new child processes that are created. +% +faillog - display faillog records or set login failure limits +faillog [options] +faillog displays the contents of the failure log database (/var/log/faillog). It can also set the failure +counters and limits. When faillog is run without arguments, it only displays the faillog records of the +users who had a login failure. +The options which apply to the faillog command are: +-a, --all +Display (or act on) faillog records for all users having an entry in the faillog database. +The range of users can be restricted with the -u option. +% +btrfs-inspect-internal - query various internal information +btrfs inspect-internal <subcommand> <args> +simple UI to an ioctl or a more complex query that assembles the result from several internal structures. +The latter usually requires calls to privileged ioctls. +dump-super [options] <device> [device...] +(replaces the standalone tool btrfs-show-super) +Show btrfs superblock information stored on given devices in textual form. By default the first +superblock is printed, more details about all copies or additional backup data can be printed. +% +login - begin session on the system +login [ -p ] [ -h host ] [ -H ] [ -f username | username ] +login is used when signing onto a system. If no argument is given, login prompts for the username. +The user is then prompted for a password, where approprate. Echoing is disabled to prevent revealing the +password. Only a small number of password failures are permitted before login exits and the communica‐ +tions link is severed. +proceeding. He will be forced to provide his old password and the new password before continuing. +The user and group ID will be set according to their values in the /etc/passwd file. There is one excep‐ +% +grub-mknetdir - prepare a GRUB netboot directory. +grub-mknetdir [OPTION...] +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +--install-modules=MODULES +install only MODULES and their dependencies [default=all] +% +Reads an EQN equation (one line) as input; produces an image file (by default in Portable Network Graph‐ +ics format) suitable for the Web as output. +macros; nor do you need to have dollar-sign or other delimiters around the equation. +The output image will be clipped to the smallest possible bounding box that contains all the black pix‐ +border, force the background transparent, set the image's pixel density, or perform other useful trans‐ +formations. +% +shutdown - Halt, power-off or reboot the machine +wall message to be sent to all logged-in users before going down. +specified number of minutes m from now. "now" is an alias for "+0", i.e. for triggering an immediate +% +hddtemp - Utility to monitor hard drive temperature +hddtemp [options] [type:]disk... +hddtemp will give you the temperature of your hard drive by reading Self-Monitoring Analysis and Report‐ +ing Technology (S.M.A.R.T.) information on drives that support this feature. Only modern hard drives +have a temperature sensor. hddtemp supports reading S.M.A.R.T. information from SCSI drives too. +hddtemp can work as simple command line tool or as a daemon. +You can specify one or more device drive path, where each path can be prefixed with a type like PATA, +SATA or SCSI to force hddtemp too use one of these type (because detection can fail). +The program follows the usual GNU command line syntax, with long options starting with two dashes (`-'). +A summary of options is included below. +% +dhcpcd — a DHCP client +[-F, --fqdn FQDN] [-f, --config file] [-h, --hostname hostname] [-I, --clientid clientid] +[-i, --vendorclassid vendorclassid] [-j, --logfile logfile] [-l, --leasetime seconds] +[-m, --metric metric] [-O, --nooption option] [-o, --option option] [-Q, --require option] +[-r, --request address] [-S, --static value] [-s, --inform address[/cidr]] [--inform6] +[-t, --timeout seconds] [-u, --userclass class] [-v, --vendor code, value] +[-X, --blacklist address[/cidr]] [-Z, --denyinterfaces pattern] [-z, --allowinterfaces pattern] +[--inactive] [interface] [...] +dhcpcd -n, --rebind [interface] +dhcpcd -k, --release [interface] +dhcpcd -U, --dumplease interface +dhcpcd --version +dhcpcd -x, --exit [interface] +% +grodvi - convert groff output to TeX dvi format +grodvi [ -dlv ] [ -Fdir ] [ -ppapersize ] [ -wn ] [ files... ] +It is possible to have whitespace between a command line option and its parameter. +grodvi is a driver for groff that produces TeX dvi format. Normally it should be run by groff -Tdvi. +The dvi file generated by grodvi can be printed by any correctly-written dvi driver. The troff drawing +\D commands will not produce any output. +There is an additional drawing command available: +% +znew - recompress .Z files to .gz files +znew [ -ftv9PK] [ name.Z ... ] +Znew recompresses files from .Z (compress) format to .gz (gzip) format. If you want to recompress a file +already in gzip format, rename the file to force a .Z extension then apply znew. +-f Force recompression from .Z to .gz format even if a .gz file already exists. +-t Tests the new files before deleting originals. +-v Verbose. Display the name and percentage reduction for each file compressed. +-9 Use the slowest compression method (optimal compression). +% +od - dump files in octal and other formats +od [OPTION]... [FILE]... +od [-abcdfilosx]... [FILE] [[+]OFFSET[.][b]] +od --traditional [OPTION]... [FILE] [[+]OFFSET[.][b] [+][LABEL][.][b]] +Write an unambiguous representation, octal bytes by default, of FILE to standard output. With more than +one FILE argument, concatenate them in the listed order to form the input. +With no FILE, or when FILE is -, read standard input. +If first and second call formats both apply, the second format is assumed if the last operand begins with +at first byte printed, incremented when dump is progressing. For OFFSET and LABEL, a 0x or 0X prefix +% +thin_ls - List thin volumes within a pool. +thin_ls [options] {metadata device} +thin_ls Displays infomation about thin volumes in a pool. Pass the metadata device on the command line, +not the pool device. +-o, --format +Give a comma separated list of the fields to be output. Valid fields are: DEV, MAPPED_BLOCKS, +EXCLUSIVE_BLOCKS, SHARED_BLOCKS, MAPPED_SECTORS, EXCLUSIVE_SECTORS, SHARED_SECTORS, MAPPED_BYTES, +EXCLUSIVE_BYTES, SHARED_BYTES, MAPPED, EXCLUSIVE, SHARED, TRANSACTION CREATE_TIME, SNAP_TIME +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +pivot_root - change the root filesystem +pivot_root new_root put_old +pivot_root moves the root file system of the current process to the directory put_old and makes new_root +the latter for further details. +pivot_root and chroot are in the current PATH: +cd new_root +pivot_root . put_old +exec chroot . command +% +| --defcktname | --cflags | --libs [libraries]] +installed Kerberos libraries. +--all prints the version, vendor, prefix, and exec-prefix. +--version +prints the version number of the Kerberos installation. +% +chcon - change file security context +chcon [OPTION]... CONTEXT FILE... +chcon [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE... +chcon [OPTION]... --reference=RFILE FILE... +Change the SELinux security context of each FILE to CONTEXT. With --reference, change the security con‐ +text of each FILE to that of RFILE. +Mandatory arguments to long options are mandatory for short options too. +--dereference +affect the referent of each symbolic link (this is the default), rather than the symbolic link +itself +% +curl - transfer a URL +curl [options] [URL...] +curl is a tool to transfer data from or to a server, using one of the supported protocols (DICT, FILE, +SMTP, SMTPS, TELNET and TFTP). The command is designed to work without user interaction. +curl offers a busload of useful tricks like proxy support, user authentication, FTP upload, HTTP post, +SSL connections, cookies, file transfer resume, Metalink, and more. As you will see below, the number of +features will make your head spin! +URL +% +setkeycodes - load kernel scancode-to-keycode mapping table entries +setkeycodes scancode keycode ... +The setkeycodes command reads its arguments two at a time, each pair of arguments consisting of a scan‐ +code (given in hexadecimal) and a keycode (given in decimal). For each such pair, it tells the kernel +keyboard driver to map the specified scancode to the specified keycode. +duce scancodes that the kernel does not recognize. +THEORY +The usual PC keyboard produces a series of scancodes for each key press and key release. (Scancodes are +stream of keycodes (key press/release events). (Keycodes are shown by showkey.) Apart from a few scan‐ +% +tar — manipulate tape archives +tar [bundled-flags ⟨args⟩] [⟨file⟩ | ⟨pattern⟩ ...] +tar {-c} [options] [files | directories] +tar {-r | -u} -f archive-file [options] [files | directories] +tar {-t | -x} [options] [patterns] +zip, jar, ar, xar, rpm, 7-zip, and ISO 9660 cdrom images and can create tar, pax, cpio, ar, zip, 7-zip, and +shar archives. +torical implementations. See COMPATIBILITY below for details. +The other synopsis forms show the preferred usage. The first option to tar is a mode indicator from the +% +idnconv - codeset converter for named.conf and zone master files +idnconv [options..] [file...] +idnconv is a codeset converter for named configuration files and zone master files. idnconv performs +codeset conversion specified either by the command-line arguments or by the configuration file, and +writes the converted text to stdout. +If file name is specified, idnconv converts the contents of the file. Otherwise, idnconv converts stdin. +able as a general codeset converter. +OPERATION MODES +idnconv has two operation modes. +% +pkcheck - Check whether a process is authorized +pkcheck [--version] [--help] +pkcheck [--list-temp] +pkcheck [--revoke-temp] +pkcheck --action-id action {--process { pid | pid,pid-start-time | pid,pid-start-time,uid } | +--system-bus-name busname} [--allow-user-interaction] [--enable-internal-agent] +[--detail key value...] +pkcheck is used to check whether a process, specified by either --process (see below) or +--system-bus-name, is authorized for action. The --detail option can be used zero or more times to pass +details about action. If --allow-user-interaction is passed, pkcheck blocks while waiting for +% +ldns-walk - Retrieve the contents of a DNSSEC signed zone +ldns-walk [ OPTION ] ZONE +ldns-walk is used to retrieve the contents of a DNSSEC signed zone. It does this through NSEC-walking +(following the chain of NSEC records) and 'guessing' the next non-existent owner name for each NSEC. +can be circumvented by querying the authoritative nameserver directly (with the @ argument). +Of course the nameserver that is used must be DNSSEC-aware. +% +ddns-confgen - ddns key generation tool +tsig-keygen [-a algorithm] [-h] [-r randomfile] [name] +ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [-s name | -z zone] +tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG +signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the +rndc command channel. +When run as tsig-keygen, a domain name can be specified on the command line which will be used as the +name of the generated key. If no name is specified, the default is tsig-key. +When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that +can be used with nsupdate and named when setting up dynamic DNS, including an example update-policy +% +gio - GIO commandline tool +gio version +gio cat LOCATION... +gio copy [OPTION...] SOURCE... DESTINATION +gio info [OPTION...] LOCATION... +gio list [OPTION...] [LOCATION...] +gio mime MIMETYPE [HANDLER] +% +dbus-daemon - Message bus daemon +dbus-daemon +dbus-daemon [--version] [--session] [--system] [--config-file=FILE] [--print-address [=DESCRIPTOR]] +[--print-pid [=DESCRIPTOR]] [--fork] +dbus-daemon is the D-Bus message bus daemon. See http://www.freedesktop.org/software/dbus/ for more +information about the big picture. D-Bus is first a library that provides one-to-one communication +between any two applications; dbus-daemon is an application that uses this library to implement a message +bus daemon. Multiple programs connect to the message bus daemon and can exchange messages with one +another. +There are two standard message bus instances: the systemwide message bus (installed on many systems as +the "messagebus" init service) and the per-user-login-session message bus (started each time a user logs +% +thin_check - validate thin provisioning metadata on device or file +thin_check [options] {device|file} +thin_check checks thin provisioning metadata created by the device-mapper thin provisioning target on a +device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +jfs_fsck - initiate replay of the JFS transaction log, and check and repair a JFS formatted device +jfs_fsck [ -afnpvV ] [ -j journal_device ] [ --omit_journal_replay ] [ --replay_journal_only ] device +jfs_fsck is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any +errors found. +jfs_fsck must be run as root. +WARNING +jfs_fsck should only be used to check an unmounted file system or a file system that is mounted READ +ONLY. Using jfs_fsck to check a file system mounted other than READ ONLY could seriously damage the file +system! +% +cache_restore - restore cache metadata file to device or file +cache_restore [options] -i {device|file} -o {device|file} +cache_restore restores cache metadata created by the respective device-mapper target dumped into an XML +device or file. If restored to a metadata device , the metadata can be processed by the device-mapper +target. +-i, --input {device|file} +Input file or device with metadata. +-o, --output {device|file} +% +btrfstune - tune various filesystem parameters +btrfstune [options] <dev> [<dev>...] +btrfstune can be used to enable, disable or set various filesystem parameters. The filesystem must be +unmounted. +have kernel support for the features. You can find a complete list of features and kernel version of +their introduction at https://btrfs.wiki.kernel.org/index.php/Changelog#By_feature . Also, the manual +Some of the features could be enabled on a mounted filesystem. Please refer to the respective section in +% +script - make typescript of terminal session +script [options] [file] +script makes a typescript of everything displayed on your terminal. It is useful for students who need a +hardcopy record of an interactive session as proof of an assignment, as the typescript file can be +If the argument file is given, script saves the dialogue in this file. If no filename is given, the dia‐ +logue is saved in the file typescript. +-a, --append +Append the output to file or to typescript, retaining the prior contents. +% +btrfs-find-root - filter to find btrfs root +btrfs-find-root [options] <dev> +btrfs-find-root is used to find the satisfied root, you can filter by root tree’s objectid, generation, +level. +-a +Search through all the metadata extents, even the root is already found. +-g <generation> +Filter root tree by it’s original transaction id, tree root’s generation in default. +-o <objectid> +% +rshd - Remote shell server +rshd [OPTION...] +Remote shell server. +-a, --verify-hostname +ask hostname for verification +-l, --no-rhosts +ignore .rhosts file +-L, --log-sessions +log successful logins +% +free - Display amount of free and used memory in the system +free [options] +free displays the total amount of free and used physical and swap memory in the system, as well as the +buffers and caches used by the kernel. The information is gathered by parsing /proc/meminfo. The dis‐ +played columns are: +total Total installed memory (MemTotal and SwapTotal in /proc/meminfo) +used Used memory (calculated as total - free - buffers - cache) +free Unused memory (MemFree and SwapFree in /proc/meminfo) +shared Memory used (mostly) by tmpfs (Shmem in /proc/meminfo) +% +tfmtodit - create font files for use with groff -Tdvi +tfmtodit [ -sv ] [ -ggf_file ] [ -kskewchar ] tfm_file map_file font +tfmtodit creates a font file for use with groff -Tdvi. tfm_file is the name of the TeX font metric file +for the font. map_file is a file giving the groff names for characters in the font; this file should +consist of a sequence of lines of the form: +groff names of the character. If a character has no groff names but exists in the tfm file, then it will +be put in the groff font file as an unnamed character. font is the name of the groff font file. The +groff font file is written to font. +% +smartd - SMART Disk Monitoring Daemon +smartd [options] +other platforms.] +smartd is a daemon that monitors the Self-Monitoring, Analysis and Reporting Technology (SMART) system +built into most ATA/SATA and SCSI/SAS hard drives and solid-state drives. The purpose of SMART is to +monitor the reliability of the hard drive and predict drive failures, and to carry out different types of +lier standards (see REFERENCES below). +smartd will attempt to enable SMART monitoring on ATA devices (equivalent to smartctl -s on) and polls +% +lscpu - display information about the CPU architecture +lscpu [-a|-b|-c] [-x] [-s directory] [-e[=list]|-p[=list]] +lscpu -h|-V +lscpu gathers CPU architecture information from sysfs, /proc/cpuinfo and any applicable architecture-spe‐ +cific libraries (e.g. librtas on Powerpc). The command output can be optimized for parsing or for easy +readability by humans. The information includes, for example, the number of CPUs, threads, cores, sock‐ +ets, and Non-Uniform Memory Access (NUMA) nodes. There is also information about the CPU caches and +cache sharing, family, model, bogoMIPS, byte order, and stepping. +In virtualized environments, the CPU architecture information displayed reflects the configuration of the +guest operating system which is typically different from the physical (host) system. On architectures +that support retrieving physical topology information, lscpu also displays the number of physical sock‐ +ets, chips, cores in the host system. +% +ldns-mx - print out the mx record(s) for a domain +ldns-mx DOMAIN +ldns-mx is used to print out mx information of a domain. +ldns-mx has no options. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +bash - GNU Bourne-Again SHell +bash [options] [command_string | file] +Bash is an sh-compatible command language interpreter that executes commands read from the standard input +or from a file. Bash also incorporates useful features from the Korn and C shells (ksh and csh). +Bash is intended to be a conformant implementation of the Shell and Utilities portion of the IEEE POSIX +All of the single-character shell options documented in the description of the set builtin command can +% +fortune - print a random, hopefully interesting, adage +fortune [-acefilosw] [-n length] [ -m pattern] [[n%] file/dir/all] +When fortune is run with no arguments it prints out a random epigram. Epigrams are divided into several +categories, where each category is sub-divided into those which are potentially offensive and those which +are not. +Options +The options are as follows: +-a Choose from all lists of maxims, both offensive and not. (See the -o option for more information +on offensive fortunes.) +-c Show the cookie file from which the fortune came. +% +ldns-chaos - give some information about a nameserver +ldns-chaos retrieves all the addresses of the nameserver and then queries each address for its ver‐ +sion.bind and hostname.bind. +ldns-chaos is a bit more complex than ldns-mx. +ldns-chaos has no options. +Written by the ldns team as an example for ldns usage. +% +utmpdump - dump UTMP and WTMP files in raw format +utmpdump [options] [filename] +utmpdump is a simple program to dump UTMP and WTMP files in raw format, so they can be examined. utmp‐ +dump reads from stdin unless a filename is passed. +-f, --follow +Output appended data as the file grows. +-o, --output file +Write command output to file instead of standard output. +-r, --reverse +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +dmesg - print or control the kernel ring buffer +dmesg [options] +dmesg --clear +dmesg --read-clear [options] +dmesg --console-level level +dmesg --console-on +dmesg --console-off +dmesg is used to examine or control the kernel ring buffer. +The default action is to display all messages from the kernel ring buffer. +% +git-receive-pack - Receive what is pushed into the repository +git-receive-pack <directory> +Invoked by git send-pack and updates the repository with the information fed from the remote end. +send-pack side, and the program pair is meant to be used to push updates to remote repository. For pull +speaking, it is the local end git-receive-pack runs, but to the user who is sitting at the send-pack end, +it is updating the remote. Confused?) +There are other real-world examples of using update and post-update hooks found in the +% +efibootmgr - manipulate the EFI Boot Manager +... ] [ -O ] [ -p PART ] [ -q ] [ -t seconds ] [ -T ] [ -u ] [ -v ] [ -V ] [ -w ] [ -@ file ] +efibootmgr is a userspace application used to modify the Intel Extensible Firmware Interface (EFI) Boot +running boot option, and more. +<URL:http://developer.intel.com> +/sys/firmware/efi/vars or /sys/firmware/efi/efivars/. +% +link - call the link function to create a link to a file +link OPTION +--help display this help and exit +--version +output version information and exit +Written by Michael Stone. +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +which - shows the full path of (shell) commands. +which [options] [--] programname [...] +Which takes one or more arguments. For each of its arguments it prints to stdout the full path of the +executables that would have been executed when this argument had been entered at the shell prompt. It +does this by searching for an executable or script in the directories listed in the environment variable +--all, -a +Print all matching executables in PATH, not just the first. +% +git-shell - Restricted login shell for Git-only SSH access +chsh -s $(command -v git-shell) <user> +git clone <user>@localhost:/path/to/repo.git +ssh <user>@localhost +server-side Git commands implementing the pull/push functionality, plus custom commands present in a +subdirectory named git-shell-commands in the user’s home directory. +git shell accepts the following commands after the -c option: +git receive-pack <argument>, git upload-pack <argument>, git upload-archive <argument> +Call the corresponding server-side command to support the client’s git push, git fetch, or git +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +update-leap - leap-seconds file manager/updater +update-leap [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +update-leap will validate the file currently on the local system and if necessary, updates leap-second +definition file. +tion can be specified on the command line. +If the file does not exist, is not valid, has expired, or is expiring soon, a new copy will be down‐ +loaded. If the new copy validates, it is installed and NTP is (optionally) restarted. +% +idn [OPTION]... [STRINGS]... +Command line interface to the internationalized domain name library. +All strings are expected to be encoded in the preferred charset used by your locale. Use `--debug' to +find out what this charset is. You can override the charset used by setting environment variable +CHARSET. +To process a string that starts with `-', for example `-foo', use `--' to signal the end of parameters, +as in `idn --quiet -a -- -foo'. +% +will NOT list all the users in /etc/passwd, shadow, PAM, etc. only those created by SASL (via +-f file +use file for sasldb +% +xzdec, lzmadec - Small .xz and .lzma decompressors +xzdec [option...] [file...] +lzmadec [option...] [file...] +xzdec is a liblzma-based decompression-only tool for .xz (and only .xz) files. xzdec is intended to work +xz --decompress --stdout (and possibly a few other commonly used options) to decompress .xz files. +lzmadec is identical to xzdec except that lzmadec supports .lzma files instead of .xz files. +To reduce the size of the executable, xzdec doesn't support multithreading or localization, and doesn't +read options from XZ_DEFAULTS and XZ_OPT environment variables. xzdec doesn't support displaying inter‐ +process instead of displaying progress information. +% +hdparm - get/set SATA/IDE device parameters +hdparm [options] [device ...] +hdparm provides a command line interface to various kernel interfaces supported by the Linux +rectly only with the latest kernels. +When no options are given, -acdgkmur is assumed. For "Get/set" options, a query without the optional +parameter (e.g. -d) will query (get) the device state, and with a parameter (e.g., -d0) will set the +device state. +% +mkreiserfs - The create tool for the Linux ReiserFS filesystem. +mkreiserfs [ -dfV ] [ -b | --block-size N ] [ -h | --hash HASH ] [ -u | --uuid UUID ] [ -l | --label +LABEL ] [ --format FORMAT ] [ -q | --quiet ] [ -j | --journal-device FILE ] [ -s | --journal-size N ] [ +-o | --journal-offset N ] [ -t | --transaction-max-size N ] [ -B | --badblocks file ] device [ filesys‐ +tem-size ] +mkreiserfs creates a Linux ReiserFS filesystem on a device (usually a disk partition). +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +filesystem-size +is the size in blocks of the filesystem. If omitted, mkreiserfs will automatically set it. +% +isc-config.sh - Get information about the installed version of ISC BIND +isc-config.sh [--cflags] [--exec-prefix] [--libs] [--prefix] [--version] [libraries...] +isc-config.sh prints information related to the installed version of ISC BIND, such as the compiler and +linker flags required to compile and link programs that use ISC BIND libraries. +The optional libraries are used to report specific details for compiling and linking for the listed +listed on the command line. (Some libraries require other libraries, so are implied.) +--cflags +Prints the compiler command line options required to compile files that use ISC BIND. Use the +libraries command line argument(s) to print additional specific flags to pass to the C compiler. +% +ping - send ICMP ECHO_REQUEST to network hosts +[-M pmtudisc_option] [-N nodeinfo_option] [-w deadline] [-W timeout] [-p pattern] [-Q tos] [-s +packetsize] [-S sndbuf] [-t ttl] [-T timestamp option] [hop]... {destination} +ping uses the ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host +or gateway. ECHO_REQUEST datagrams (``pings'') have an IP and ICMP header, followed by a struct timeval +and then an arbitrary number of ``pad'' bytes used to fill out the packet. +-6. +% +and GNUTLS_SO_PIN. +% +grops - PostScript driver for groff +grops [-glmv] [-b n] [-c n] [-F dir] [-I dir] [-p papersize] [-P prologue] [-w n] [files ...] +grops translates the output of GNU troff to PostScript. Normally grops should be invoked by using the +groff command with a -Tps option. (Actually, this is the default for groff.) If no files are given, +grops reads the standard input. A filename of - also causes grops to read the standard input. Post‐ +Script output is written to the standard output. When grops is run by groff options can be passed to +grops using groff's -P option. +vention) if called with multiple file arguments. To print such concatenated output it is necessary to +deactivate DSC handling in the printing program or previewer. See section FONT INSTALLATION below for a +guide how to install fonts for grops. +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +reiserfsck - The checking tool for the ReiserFS filesystem. +reiserfsck [ -aprVy ] [ --rebuild-sb | --check | --fix-fixable | --rebuild-tree | --clean-attributes ] [ +-j | --journal device ] [ -z | --adjust-size ] [ -n | --nolog ] [ -B | --badblocks file ] [ -l | --log‐ +file file ] [ -q | --quiet ] [ -y | --yes ] [ -f | --force ] [ -S | --scan-whole-partition ] [ --no-jour‐ +nal-available ] device +Reiserfsck searches for a Reiserfs filesystem on a device, replays any necessary transactions, and either +checks or repairs the file system. +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +--rebuild-sb +% +autoreconf - Update generated configuration files +autoreconf [OPTION]... [DIRECTORY]... +Run `autoconf' (and `autoheader', `aclocal', `automake', `autopoint' (formerly `gettextize'), and +`libtoolize' where appropriate) repeatedly to remake the GNU Build System files in specified DIRECTORIES +and their subdirectories (defaulting to `.'). +By default, it only remakes those files that are older than their sources. If you install new versions +of the GNU Build System, you can make `autoreconf' remake all of the files by giving it the `--force' +option. +Operation modes: +-h, --help +print this help, then exit +% +crond - daemon to execute scheduled commands +crond [-c | -h | -i | -n | -p | -P | -s | -m<mailcommand>] +crond -x [ext,sch,proc,pars,load,misc,test,bit] +systemd is enabled, then unit file is installed into /lib/systemd/system/crond.service and daemon is +started by systemctl start crond.service command. It returns immediately, thus, there is no need to need +to start it with the '&' parameter. +Cron searches /var/spool/cron for crontab files which are named after accounts in /etc/passwd; The found +crontabs are loaded into the memory. Cron also searches for /etc/anacrontab and any files in the +and checks each job to see if it needs to be run in the current minute. When executing commands, any +output is mailed to the owner of the crontab (or to the user specified in the MAILTO environment variable +% +rmdir - remove empty directories +rmdir [OPTION]... DIRECTORY... +Remove the DIRECTORY(ies), if they are empty. +--ignore-fail-on-non-empty +ignore each failure that is solely because a directory +is non-empty +-p, --parents +remove DIRECTORY and its ancestors; e.g., 'rmdir -p a/b/c' is similar to 'rmdir a/b/c a/b a' +% +addftinfo - add information to troff font files for use with groff +addftinfo [ -v ] [ param-option value.... ] res unitwidth font +addftinfo reads a troff font file and adds some additional font-metric information that is used by the +groff system. The font file with the information added is written on the standard output. The informa‐ +tion added is guessed using some parametric information about the font and assumptions about the tradi‐ +tional troff names for characters. The main information added is the heights and depths of characters. +The res and unitwidth arguments should be the same as the corresponding parameters in the DESC file; font +is the name of the file describing the font; if font ends with I the font will be assumed to be italic. +–v prints the version number. +All other options change one of the parameters that are used to derive the heights and depths. Like the +% +write - send a message to another user +write user [ttyname] +write allows you to communicate with other users, by copying lines from your terminal to theirs. +When you run the write command, the user you are writing to gets a message of the form: +Message from yourname@yourhost on yourtty at hh:mm ... +Any further lines you enter will be copied to the specified user's terminal. If the other user wants to +reply, they must run write as well. +When you are done, type an end-of-file or interrupt character. The other user will see the message EOF +indicating that the conversation is over. +% +msgexec - process translations of message catalog +reads a translation from standard input. It is invoked once for each translation. Its output becomes +msgexec's output. msgexec's return code is the maximum return code across all invocations. +A special builtin command called '0' outputs the translation, followed by a null byte. The output of +"msgexec 0" is suitable as input for "xargs -0". +Command input: +--newline +add newline at the end of input +% +code. The tool has originally been developed as a second implementation for Libgcrypt to allow comparing +against the primary implementation and to be used for internal consistency checks. It should not be used +for sensitive data because no mechanisms to clear the stack etc are used. +The code has been written in a highly portable manner and requires only a few standard definitions to be +provided in a config.h file. +% +[-b bfdname|--target=bfdname] +[-C|--demangle[=style]] +[-e filename|--exe=filename] +[-f|--functions] [-s|--basename] +[-i|--inlines] +[-p|--pretty-print] +[-j|--section=name] +[-H|--help] [-V|--version] +[addr addr ...] +offset in a section of a relocatable object, it uses the debugging information to figure out which file +% +systemd-ask-password - Query the user for a system password +message specified on the command line. When run from a TTY it will query a password on the TTY and print +it to standard output. When run with no TTY or with --no-tty it will query the password system-wide and +allow active users to respond via several agents. The latter is only available to privileged processes. +The purpose of this tool is to query system-wide passwords — that is passwords not attached to a specific +user account. Examples include: unlocking encrypted hard disks when they are plugged in or at boot, +entering an SSL certificate passphrase for web and VPN servers. +Existing agents are: +% +pkg-config - Return metainformation about installed libraries +[--short-errors] [--silence-errors] [--errors-to-stdout] [--debug] [--cflags] [--libs] [--libs-only-L] +provides] [--print-requires] [--print-requires-private] [LIBRARIES...] +The pkg-config program is used to retrieve information about installed libraries in the system. It is +typically used to compile and link against one or more libraries. Here is a typical usage scenario in a +Makefile: +program: program.c +cc program.c $(pkg-config --cflags --libs gnomeui) +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +pacman-key - manage pacman's list of trusted keys +pacman-key [options] operation [targets] +pacman-key is a wrapper script for GnuPG used to manage pacman’s keyring, which is the collection of PGP +keys used to check signed packages and databases. It provides the ability to import and export keys, +fetch keys from keyservers and update the key trust database. +More complex keyring management can be achieved using GnuPG directly combined with the --homedir option +pointing at the pacman keyring (located in /etc/pacman.d/gnupg by default). +Invoking pacman-key consists of supplying an operation with any potential options and targets to operate +OPERATIONS +% +umount - unmount file systems +umount -a [-dflnrv] [-t fstype] [-O option...] +umount [-dflnrv] {directory|device}... +umount -h|-V +The umount command detaches the mentioned file system(s) from the file hierarchy. A file system is spec‐ +ified by giving the directory where it has been mounted. Giving the special device on which the file +on more than one directory. +it, or when some process has its working directory there, or when a swap file on it is in use. The +% +pam_tally - The login counter (tallying) module +pam_tally.so [file=/path/to/counter] [onerr=[fail|succeed]] [magic_root] [even_deny_root_account] +[deny=n] [lock_time=n] [unlock_time=n] [per_user] [no_lock_time] [no_reset] [audit] [silent] +[no_log_info] +pam_tally [--file /path/to/counter] [--user username] [--reset[=n]] [--quiet] +many attempts fail. +deprecated and will be removed in a future release. +pam_tally comes in two parts: pam_tally.so and pam_tally. The former is the PAM module and the latter, a +% +psfaddtable - add a Unicode character table to a console font +psfaddtable fontfile tablefile outfile +psfaddtable takes a console font in .psf format given by fontfile and merges it with the Unicode charac‐ +ter table given by tablefile to produce a font file with an embedded character table, which is written to +outfile. An input file name of "-" denotes standard input, and an output file name of "-" denotes stan‐ +dard output. If the fontfile already contains an embedded character table, it is ignored. +TABLE FILE FORMAT +Each line in the tablefile should be either blank, contain a comment (preceded by #), or contain a +sequence of numbers in either decimal (default), octal (preceded by 0), or hexadecimal (preceded by 0x) +format, separated by spaces or tabs. The first number on each line indicates the glyph slot in the font +% +fstrim - discard unused blocks on a mounted filesystem +fstrim [-a] [-o offset] [-l length] [-m minimum-size] [-v] mountpoint +fstrim is used on a mounted filesystem to discard (or "trim") blocks which are not in use by the filesys‐ +behavior based on range or size, as explained below. +The mountpoint argument is the pathname of the directory where the filesystem is mounted. +Running fstrim frequently, or even using mount -o discard, might negatively affect the lifetime of poor- +quality SSD devices. For most desktop and server systems a sufficient trimming frequency is once a week. +% +rm - remove files or directories +rm [OPTION]... [FILE]... +not remove directories. +If the -I or --interactive=once option is given, and there are more than three files or the -r, -R, or +--recursive are given, then rm prompts the user for whether to proceed with the entire operation. If the +response is not affirmative, the entire command is aborted. +Otherwise, if a file is unwritable, standard input is a terminal, and the -f or --force option is not +given, or the -i or --interactive=always option is given, rm prompts the user for whether to remove the +file. If the response is not affirmative, the file is skipped. +% +ddns-confgen - ddns key generation tool +tsig-keygen [-a algorithm] [-h] [-r randomfile] [name] +ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [-s name | -z zone] +tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG +signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the +rndc command channel. +When run as tsig-keygen, a domain name can be specified on the command line which will be used as the +name of the generated key. If no name is specified, the default is tsig-key. +When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that +can be used with nsupdate and named when setting up dynamic DNS, including an example update-policy +% +mklost+found - create a lost+found directory on a mounted Linux second extended file system +mklost+found +mklost+found is used to create a lost+found directory in the current working directory on a Linux second +extended file system. There is normally a lost+found directory in the root directory of each filesystem. +recover a filesystem, it does not need to allocate blocks in the filesystem to store a large number of +recovery. +There are none. +% +efivar - Tool to manipulate UEFI variables +efivar [OPTION...] +-L, --list-guids +list guids efivar knows about +-l, --list +list current variables +-p, --print +print variable specified by --name +-n, --name=<guid-name> +% +pr - convert text files for printing +pr [OPTION]... [FILE]... +Paginate or columnate FILE(s) for printing. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. ++FIRST_PAGE[:LAST_PAGE], --pages=FIRST_PAGE[:LAST_PAGE] +begin [stop] printing with page FIRST_[LAST_]PAGE +-COLUMN, --columns=COLUMN +output COLUMN columns and print columns down, unless -a is used. Balance number of lines in the +% +netctl - Control the netctl network profile manager +netctl [--help | --version] +manager. +The following commands are understood: +list +List all available profiles. Active profiles will be marked with a ‘*’. +% +vgmknodes — recreate volume group directory and logical volume special files +ones and removes unused ones. +--refresh +manually without a clustered lock manager. +% +killall - kill processes by name +killall [-Z, --context pattern] [-e, --exact] [-g, --process-group] [-i, --interactive] [-o, --older-than +TIME] [-q, --quiet] [-r, --regexp] [-s, --signal SIGNAL, -SIGNAL] [-u, --user user] [-v, --verbose] +killall -l +killall -V, --version +killall sends a signal to all processes running any of the specified commands. If no signal name is +specified, SIGTERM is sent. +If the command name is not regular expression (option -r) and contains a slash (/), processes executing +that particular file will be selected for killing, independent of their name. +% +ebrowse - create a class hierarchy database +ebrowse [options] [FILES...] +format. +ebrowse is used to create the database used by the class browser in Emacs. +The program follows the usual GNU command line syntax, with long options starting with two dashes ("-"). +-a, --append +append output to existing file +% +prlimit - get and set process resource limits +prlimit [options] [--resource[=limits] [--pid PID] +prlimit [options] [--resource[=limits] command [argument...] +Given a process id and one or more resources, prlimit tries to retrieve and/or modify the limits. +When command is given, prlimit will run this command with the given arguments. +The limits parameter is composed of a soft and a hard value, separated by a colon (:), in order to modify +the existing values. If no limits are given, prlimit will display the current values. If one of the +values is not given, then the existing one will be used. To specify the unlimited or infinity limit +% +zsoelim - satisfy .so requests in roff input +zsoelim [-CVh] [file ...] +zsoelim parses file arguments, or if none are specified, its standard input for lines of the form: +.so <filename> +These requests are replaced by the contents of the filename specified. If the request cannot be met, +ported depending upon compile time options. If the request can be met by a compressed file, this file is +decompressed using an appropriate decompressor and its output is used to satisfy the request. +Traditionally, soelim programs were used to allow roff preprocessors to be able to preprocess the files +% +[lock_time=n] [unlock_time=n] [root_unlock_time=n] [serialize] [audit] [silent] +[no_log_info] [debug] +many attempts fail. +manipulate the counter file. It can display user counts, set individual counts, or clear all counts. +% +etags, ctags - generate tag file for Emacs, vi +etags [-aCDGIQRVh] [-i file] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--no-defines] [--globals] [--no-globals] [--no-line-directive] [--include=file] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--output=tagfile] +[--class-qualify] [--regex=regexp] [--no-regex] [--help] [--version] file ... +ctags [-aCdgIQRVh] [-BtTuvwx] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--backward-search] [--cxref] [--no-defines] [--globals] [--no-globals] [--no-line-directive] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--class-qualify] +[--output=tagfile] [--regex=regexp] [--update] [--help] [--version] file ... +% +Compare three files line by line. +Mandatory arguments to long options are mandatory for short options too. +-A, --show-all +output all changes, bracketing conflicts +-e, --ed +output ed script incorporating changes from OLDFILE to YOURFILE into MYFILE +-E, --show-overlap +% +iconvconfig - create iconv module configuration cache +iconvconfig [options] [directory]... +tion file is used to determine the needed modules for a conversion. Loading and parsing such a configu‐ +The iconvconfig program reads iconv module configuration files and writes a fast-loading gconv module +configuration cache file. +In addition to the system provided gconv modules, the user can specify custom gconv module directories +with the environment variable GCONV_PATH. However, iconv module configuration caching is used only when +the environment variable GCONV_PATH is not set. +% +msginit - initialize a message catalog +msginit [OPTION] +Creates a new PO file, initializing the meta information with values from the user's environment. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +-i, --input=INPUTFILE +input POT file +If no input file is given, the current directory is searched for the POT file. If it is -, standard +input is read. +% +autoconf - Generate configuration scripts +autoconf [OPTION]... [TEMPLATE-FILE] +Generate a configuration script from a TEMPLATE-FILE if given, or `configure.ac' if present, or else +`configure.in'. Output is sent to the standard output if TEMPLATE-FILE is given, else into `configure'. +Operation modes: +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +update-ca-trust - manage consolidated and dynamic configuration of CA certificates and associated trust +Authority (CA) certificates and associated trust. +The feature is available for new applications that read the consolidated configuration files found in the +Parts of the new feature are also provided in a way to make it useful for legacy applications. +Many legacy applications expect CA certificates and trust configuration in a fixed location, contained in +% +resizepart - tell the kernel about the new size of a partition +resizepart device partition length +resizepart tells the Linux kernel about the new size of the specified partition. The command is a simple +wrapper around the "resize partition" ioctl. +PARAMETERS +device The disk device. +partition +The partition number. +% +unix_chkpwd [...] +unix_chkpwd is a helper program for the pam_unix module that verifies the password of the current user. +It also checks password and account expiration dates in shadow. It is not intended to be run directly +from the command line and logs a security violation if done so. +It is typically installed setuid root or setgid shadow. +The interface of the helper - command line options, and input/output data format are internal to the +pam_unix module and it should not be called directly from applications. +% +getfacl - get file access control lists +getfacl [-aceEsRLPtpndvh] file ... +getfacl [-aceEsRLPtpndvh] - +For each file, getfacl displays the file name, owner, the group, and the Access Control List (ACL). If a +directory has a default ACL, getfacl also displays the default ACL. Non-directories cannot have default +ACLs. +If getfacl is used on a file system that does not support ACLs, getfacl displays the access permissions +defined by the traditional file mode permission bits. +The output format of getfacl is as follows: +% +vimtutor - the Vim tutor +vimtutor [-g] [language] +Vimtutor starts the Vim tutor. It copies the tutor file first, so that it can be modified without chang‐ +ing the original file. +The Vimtutor is useful for people that want to learn their first Vim commands. +The optional argument -g starts vimtutor with gvim rather than vim, if the GUI version of vim is avail‐ +able, or falls back to Vim if gvim is not found. +The optional [language] argument is the two-letter name of a language, like "it" or "es". If the [lan‐ +guage] argument is missing, the language of the current locale will be used. If a tutor in this language +is available, it will be used. Otherwise the English version will be used. +% +partx - tell the kernel about the presence and numbering of on-disk partitions +partx [-a|-d|-P|-r|-s|-u] [-t type] [-n M:N] [-] disk +partx [-a|-d|-P|-r|-s|-u] [-t type] partition [disk] +Given a device or disk-image, partx tries to parse the partition table and list its contents. It can +also tell the kernel to add or remove partitions from its bookkeeping. +The disk argument is optional when a partition argument is provided. To force scanning a partition as if +it were a whole disk (for example to list nested subpartitions), use the argument "-" (hyphen-minus). +For example: +% +glib-compile-schemas - GSettings schema compiler +glib-compile-schemas [OPTION...] {DIRECTORY} +glib-compile-schemas compiles all the GSettings XML schema files in DIRECTORY into a binary file with the +name gschemas.compiled that can be used by GSettings. The XML schema files must have the filename +extension .gschema.xml. For a detailed description of the XML file format, see the GSettings +documentation. +specified in the XDG_DATA_DIRS environment variable. The usual location to install schema files is +In addition to schema files, glib-compile-schemas reads 'vendor override' files, which are key files that +can override default values for keys in the schemas. The group names in the key files are the schema id, +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +top - display Linux processes +top -hv|-bcHiOSs -d secs -n max -u|U user -p pid -o fld -w [cols] +The traditional switches `-' and whitespace are optional. +The top program provides a dynamic real-time view of a running system. It can display system summary +information as well as a list of processes or threads currently being managed by the Linux kernel. The +types of system summary information shown and the types, order and size of information displayed for pro‐ +cesses are all user configurable and that configuration can be made persistent across restarts. +The program provides a limited interactive interface for process manipulation as well as a much more +extensive interface for personal configuration -- encompassing every aspect of its operation. And +while top is referred to throughout this document, you are free to name the program anything you wish. +That new name, possibly an alias, will then be reflected on top's display and used when reading and writ‐ +% +systemd-nspawn - Spawn a namespace container for debugging, testing and building +as the process tree, the various IPC subsystems and the host and domain name. +--directory= command line option. By using the --machine= option an OS tree is automatically searched for +in a couple of locations, most importantly in /var/lib/machines, the suggested directory to place +container images installed on the system. +% +readlink - print resolved symbolic links or canonical file names +readlink [OPTION]... FILE... +Print value of a symbolic link or canonical file name +-f, --canonicalize +canonicalize by following every symlink in every component of the given name recursively; all but +the last component must exist +-e, --canonicalize-existing +canonicalize by following every symlink in every component of the given name recursively, all com‐ +ponents must exist +-m, --canonicalize-missing +% +insmod - Simple program to insert a module into the Linux Kernel +insmod [filename] [module options...] +instead, which is more clever and can handle module dependencies. +Only the most general of error messages are reported: as the work of trying to link the module is now +done inside the kernel, the dmesg usually gives more information about errors. +others. +% +bashbug - report a bug in bash +bashbug [--version] [--help] [email-address] +bashbug is a shell script to help the user compose and mail bug reports concerning bash in a standard +format. bashbug invokes the editor specified by the environment variable EDITOR on a temporary copy of +the bug report format outline. The user must fill in the appropriate fields and exit the editor. bashbug +then mails the completed report to bug-bash@gnu.org, or email-address. If the report cannot be mailed, +it is saved in the file dead.bashbug in the invoking user's home directory. +The bug report format outline consists of several sections. The first section provides information about +the machine, operating system, the bash version, and the compilation environment. The second section +should be filled in with a description of the bug. The third section should be a description of how to +reproduce the bug. The optional fourth section is for a proposed fix. Fixes are encouraged. +% +comm - compare two sorted files line by line +% +xargs - build and execute command lines from standard input +xargs [-0prtx] [-E eof-str] [-e[eof-str]] [--eof[=eof-str]] [--null] [-d delimiter] [--delimiter +delimiter] [-I replace-str] [-i[replace-str]] [--replace[=replace-str]] [-l[max-lines]] [-L max-lines] +[--max-lines[=max-lines]] [-n max-args] [--max-args=max-args] [-s max-chars] [--max-chars=max-chars] [-P +max-procs] [--max-procs=max-procs] [--process-slot-var=name] [--interactive] [--verbose] [--exit] +[--no-run-if-empty] [--arg-file=file] [--show-limits] [--version] [--help] [command [initial-arguments]] +ed by blanks (which can be protected with double or single quotes or a backslash) or newlines, and exe‐ +cutes the command (default is /bin/echo) one or more times with any initial-arguments followed by items +read from standard input. Blank lines on the standard input are ignored. +The command line for command is built up until it reaches a system-defined limit (unless the -n and -L +options are used). The specified command will be invoked as many times as necessary to use up the list +% +blkdeactivate — utility to deactivate block devices +blkdeactivate [-d dm_options] [-e] [-h] [-l lvm_options] [-m mpath_options] [-u] [-v] [device] +blkdeactivate utility deactivates block devices. If a device is mounted, the utility can unmount it auto‐ +matically before trying to deactivate. The utility currently supports device-mapper devices (DM), includ‐ +-d, --dmoption dm_options +% +usb-devices - print USB device details +usb-devices +usb-devices is a (bash) shell script that can be used to display details of USB buses in the system and +the devices connected to them. +The output of the script is similar to the usb/devices file available either under /proc/bus (if usbfs is +mounted), or under /sys/kernel/debug (if debugfs is mounted there). The script is primarily intended to +be used if the file is not available. +In contrast to the usb/devices file, this script only lists active interfaces (those marked with a "*" in +the usb/devices file) and their endpoints. +Be advised that there can be differences in the way information is sorted, as well as in the format of +% +systemd-tty-ask-password-agent - List or process pending systemd password requests +systemd-tty-ask-password-agent is a password agent that handles password requests of the system, for +example for hard disk encryption passwords or SSL certificate passwords that need to be queried at +boot-time or during runtime. +The following options are understood: +--list +Lists all currently pending system password requests. +% +tail - output the last part of files +tail [OPTION]... [FILE]... +header giving the file name. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --bytes=[+]NUM +output the last NUM bytes; or use -c +NUM to output starting with byte NUM of each file +-f, --follow[={name|descriptor}] +% +dmstats — device-mapper statistics management +dmsetup stats command [options] +dmstats command [device_name |--uuid uuid|--major major --minor minor] +dmstats clear device_name [--allprograms|--programid id] [--allregions|--regionid id] +dmstats create [device_name... |file_path...] [--alldevices] [--areas nr_areas|--areasize area_size] +[--bounds histogram_boundaries] [--filemap] [--nogroup] [--precise] [--start start_sector --length +length|--segments] [--userdata user_data] [--programid id] +dmstats delete [device_name] [--alldevices] [--allprograms|--programid id] [--allregions|--regionid id] +dmstats group [device_name] [--alias name] [--alldevices] [--regions regions] +dmstats help [-c|-C|--columns] +dmstats list [device_name] [--histogram] [--allprograms|--programid id] [--units units] [--area] +[--region] [--group] [--nosuffix] [--notimesuffix] [-v|--verbose[-v|--verbose]] +dmstats print [device_name] [--clear] [--allprograms|--programid id] [--allregions|--regionid id] +dmstats report [device_name] [--interval seconds] [--count count] [--units units] [--histogram] +% +systemd-cgls - Recursively show control group contents +systemd-cgls recursively shows the contents of the selected Linux control group hierarchy in a tree. If +arguments are specified, shows all member processes of the specified control groups plus all their +assumed in the systemd control group hierarchy. If no argument is specified and the current working +directory is beneath the control group mount point /sys/fs/cgroup, shows the contents of the control +group the working directory refers to. Otherwise, the full systemd control group hierarchy is shown. +By default, empty control groups are not shown. +The following options are understood: +% +groupdel - delete a group +groupdel [options] GROUP +The groupdel command modifies the system account files, deleting all entries that refer to GROUP. The +named group must exist. +The options which apply to the groupdel command are: +-h, --help +Display help message and exit. +-R, --root CHROOT_DIR +Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR +% +tftpd - Trivial File Transfer Protocol server +tftpd {directory} +requested via TFTP protocol, effectively chrooting tftpd to this directory. File names are validated not +It is in difference of variants of tftpd usually distributed with unix-like systems, which take a list of +directories and match file names to start from one of given prefixes or to some random default, when no +arguments were given. There are two reasons not to behave in this way: first, it is inconvenient, clients +are not expected to know something about layout of filesystem on server host. And second, TFTP protocol +% +git-upload-pack - Send objects packed back to git-fetch-pack +git-upload-pack [--[no-]strict] [--timeout=<n>] [--stateless-rpc] +[--advertise-refs] <directory> +Invoked by 'git fetch-pack', learns what +objects the other side is missing, and sends them after packing. +The UI for the protocol is on the 'git fetch-pack' side, and the +program pair is meant to be used to pull updates from a remote +repository. For push operations, see 'git send-pack'. +% +shuf - generate random permutations +shuf [OPTION]... [FILE] +shuf -e [OPTION]... [ARG]... +shuf -i LO-HI [OPTION]... +Write a random permutation of the input lines to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-e, --echo +treat each ARG as an input line +% +lsattr - list file attributes on a Linux second extended file system +lsattr [ -RVadlpv ] [ files... ] +the attributes and what they mean. +-R Recursively list attributes of directories and their contents. +-V Display the program version. +-a List all files in directories, including files that start with `.'. +-d List directories like other files, rather than listing their contents. +% +thin_delta - Print the differences in the mappings between two thin devices. +thin_delta [options] {device|file} +thin_delta allows you to compare the mappings in two thin volumes (snapshots allow common blocks between +thin volumes). +The numeric identifier for the first thin volume to diff. +The numeric identifier for the second thin volume to diff. +% +test - check file types and compare values +test EXPRESSION +test +[ EXPRESSION ] +[ ] +[ OPTION +Exit with the status determined by EXPRESSION. +--help display this help and exit +--version +output version information and exit +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +resolvconf — a framework for managing multiple DNS configurations +resolvconf -I +resolvconf [-m metric] [-p] [-x] -a interface[.protocol] <file +resolvconf [-f] -d interface[.protocol] +resolvconf [-x] -il pattern +resolvconf -u +ally, the host runs just one client and that updates /etc/resolv.conf. More modern systems frequently have +wired and wireless interfaces and there is no guarantee both are on the same network. With the advent of +VPN and other types of networking daemons, many things now contend for the contents of /etc/resolv.conf. +the argument -a interface[.protocol] instead of the filesystem. resolvconf then updates /etc/resolv.conf +% +chfn - change your finger information +chfn [-f full-name] [-o office] [-p office-phone] [-h home-phone] [-u] [-v] [username] +is displayed by the finger program. The Linux finger command will display four pieces of information +that can be changed by chfn: your real name, your work room and phone, and your home phone. +Any of the four pieces of information can be specified on the command line. If no information is given +on the command line, chfn enters interactive mode. +In interactive mode, chfn will prompt for each field. At a prompt, you can enter the new information, or +just press return to leave the field unchanged. Enter the keyword "none" to make the field blank. +chfn supports non-local entries (kerberos, LDAP, etc.) if linked with libuser, otherwise use ypchfn, +% +vgexport - make volume groups unknown to the system +ignore exported Volume Groups. vgexport clears the VG system ID, and vgimport sets the VG system ID to +match the host running vgimport (if the host has a system ID). +-a, --all +Export all inactive Volume Groups. +% +gitk - The Git repository browser +gitk [<options>] [<revision range>] [--] [<path>...] +graph, showing information related to each commit, and the files in the trees of each revision. +To control which revisions to show, gitk supports most options applicable to the git rev-list command. It +also supports a few options applicable to the git diff-* commands to control how the changes each commit +introduces are shown. Finally, it supports some gitk-specific options. +gitk generally only understands options with arguments in the sticked form (see gitcli(7)) due to +limitations in the command-line parser. +% +device. +label. +% +fsck.minix - check consistency of Minix filesystem +fsck.minix [options] device +fsck.minix performs a consistency check for the Linux MINIX filesystem. +The program assumes the filesystem is quiescent. fsck.minix should not be used on a mounted device +unless you can be sure nobody is writing to it. Remember that the kernel can write to device when it +searches for files. +The device name will usually have the following form: +% +lslogins - display information about known users in the system +lslogins [options] [-s|-u[=UID]] [-g groups] [-l logins] +Examine the wtmp and btmp logs, /etc/shadow (if necessary) and /etc/passwd and output the desired data. +The default action is to list info about all the users in the system. +Mandatory arguments to long options are mandatory for short options too. +-a, --acc-expiration +for more info). (Requires root privileges.) +% +w - Show who is logged on and what they are doing. +w [options] user [...] +w displays information about the users currently on the machine, and their processes. The header shows, +in this order, the current time, how long the system has been running, how many users are currently +The following entries are displayed for each user: login name, the tty name, the remote host, login time, +idle time, JCPU, PCPU, and the command line of their current process. +The JCPU time is the time used by all processes attached to the tty. It does not include past background +jobs, but does include currently running background jobs. +The PCPU time is the time used by the current process, named in the "what" field. +% +compile_et - error table compiler +compile_et file +Compile_et converts a table listing error-code names and associated messages into a C source file suit‐ +The source file name must end with a suffix of ``.et''; the file consists of a declaration supplying the +name (up to four characters long) of the error-code table: +error_table name +error_code name, " string " +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +attr - extended attributes on XFS filesystem objects +attr [ -LRSq ] -s attrname [ -V attrvalue ] pathname +attr [ -LRSq ] -g attrname pathname +attr [ -LRSq ] -r attrname pathname +attr [ -LRSq ] -l pathname +Extended attributes implement the ability for a user to attach name:value pairs to objects within the XFS +filesystem. +name. It is thus aimed specifically at users of the XFS filesystem - for filesystem independent extended +% +genl-ctrl-list - List available kernel-side Generic Netlink families +genl-ctrl-list [-d] +Queries the Generic Netlink controller in kernel and prints a list of all registered Generic Netlink fam‐ +ilies including the version of the interface that has been registered. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +-d or --details +% +ldns-test-edns - test if dns cache supports EDNS and DNSSEC. +ldns-test-edns [ -i ] { ip } +ldns-test-edns tests a DNS cache and checks if it supports EDNS0 and DNSSEC types so that it can be used +as a dnssec-enabled DNS cache. It sends two queries to the cache, one for the root key and one for a DS +record. These must succeed, the answer must have EDNS, that type and signatures. +If the IP address is good for DNSSEC, it is printed with 'OK'. Otherwise short description is given of +the failure. If OK is given, the cache should be good to use as a cache for a local configured DNSSEC +validator. +The tool assumes the root is signed and Sweden is signed. Also, the queries are sent with the CD flag, +the tool does not check that the results are validated, but that they can be validated. +% +ldns-update - send a dynamic update packet +ldns-update [ zone ] ip [ tsig_name tsig_als tsig_hmac ] +ldns-update is used to send a dynamic update packet. +zone Use this zone instead of trying to read it from the zonefile's SOA record. +ip Send the update to this IP address +tsig_name tsig_alg tsig_hmac +% +kprop [-r realm] [-f file] [-d] [-P port] [-s keytab] slave_host +-r realm +Specifies the realm of the master server. +-f file +Specifies the filename where the dumped principal database file is to be found; by default the +% +zmore - file perusal filter for crt viewing of compressed text +zmore [ name ... ] +Zmore is a filter which allows examination of compressed or plain text files one screenful at a time on a +soft-copy terminal. zmore works on files compressed with compress, pack or gzip, and also on uncom‐ +pressed files. If a file does not exist, zmore looks for a file of the same name with the addition of a +.gz, .z or .Z suffix. +Zmore normally pauses after each screenful, printing --More-- at the bottom of the screen. If the user +then types a carriage return, one more line is displayed. If the user hits a space, another screenful is +displayed. Other possibilities are enumerated later. +Zmore looks in the file /etc/termcap to determine terminal characteristics, and to determine the default +% +aclocal [OPTION]... +--automake-acdir=DIR +--system-acdir=DIR +directory holding third-party system-wide files +% +thin_rmap - output reverse map of a thin provisioned region of blocks from metadata device or file +thin_rmap [options] {device|file} +thin_rmap outputs the reverse mapping stored in the metadata on a device or file between a region of thin +provisioned pool blocks and the associated thin provisioned devices. +--region <block range> +output reverse map +-h, --help +Print help and exit. +% +msgunfmt - uncompile message catalog from binary format +msgunfmt [OPTION] [FILE]... +Convert binary message catalog to Uniforum style .po file. +Mandatory arguments to long options are mandatory for short options too. +Operation mode: +-j, --java +Java mode: input is a Java ResourceBundle class +--csharp +C# mode: input is a .NET .dll file +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +tsort - perform topological sort +tsort [OPTION] [FILE] +Write totally ordered list consistent with the partial ordering in FILE. +With no FILE, or when FILE is -, read standard input. +--help display this help and exit +--version +output version information and exit +Written by Mark Kettenis. +% +gpgsm - CMS encryption and signing tool +gpgsm [--homedir dir] [--options file] [options] command [args] +and the CMS protocol. It is mainly used as a backend for S/MIME mail processing. gpgsm includes a full +featured certificate management and complies with all rules defined for the German Sphinx project. +Commands are not distinguished from options except for the fact that only one command is allowed. +Commands not specific to the function +--version +% +fsadm — utility to resize or check filesystem on a device +fsadm [options] check device +fsadm [options] resize device [new_size] +-e|--ext-offline +-f|--force +Bypass some sanity checks. +% +pgrep, pkill - look up or signal processes based on name and other attributes +pgrep [options] pattern +pkill [options] pattern +pgrep looks through the currently running processes and lists the process IDs which match the selection +criteria to stdout. All the criteria have to match. For example, +$ pgrep -u root sshd +will only list the processes called sshd AND owned by root. On the other hand, +$ pgrep -u root,daemon +will list the processes owned by root OR daemon. +% +Process macros in FILEs. If no FILE or if FILE is `-', standard input is read. +Mandatory or optional arguments to long options are mandatory or optional for short options too. +Operation modes: +--help display this help and exit +--version +output version information and exit +-E, --fatal-warnings +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +msgfmt - compile message catalog to binary format +msgfmt [OPTION] filename.po ... +Generate binary message catalog from textual translation description. +Mandatory arguments to long options are mandatory for short options too. Similarly for optional argu‐ +ments. +Input file location: +filename.po ... +input files +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +nscd - name service cache daemon +Nscd is a daemon that provides a cache for the most common name service requests. The default configura‐ +There are two caches for each database: a positive one for items found, and a negative one for items not +--help will give you a list with all options and what they do. +% +xzless, lzless - view xz or lzma compressed (text) files +xzless [file...] +lzless [file...] +xzless is a filter that displays text from compressed files to a terminal. It works on files compressed +The command named lzless is provided for backward compatibility with LZMA Utils. +ENVIRONMENT +% +and improves the file access speed. +mount point of it and reduces fragmentation of all files in this mount point. +-c Get a current fragmentation count and an ideal fragmentation count, and calculate fragmentation +% +factor - factor numbers +factor [NUMBER]... +factor OPTION +Print the prime factors of each specified integer NUMBER. If none are specified on the command line, +read them from standard input. +--help display this help and exit +--version +output version information and exit +Written by Paul Rubin, Torbjorn Granlund, and Niels Moller. +% +strfile - create a random access file for storing strings +unstr - dump strings in pointer order +strfile [-iorsx] [-c char] sourcefile [outputfile] +unstr [-c char] datafile[.ext] [outputfile] +strfile reads a file containing groups of lines separated by a line containing a single percent `%' sign +(or other specified delimiter character) and creates a data file which contains a header structure and a +The output file, if not specified on the command line, is named sourcefile.dat. +The purpose of unstr is to undo the work of strfile. It prints out the strings contained in the source‐ +file, which is datafile.ext without its extension, or datafile if no extension is specified (in this +% +rtcwake - enter a system sleep state until specified wakeup time +rtcwake [options] [-d device] [-m standby_mode] {-s seconds|-t time_t} +specified time. It uses any RTC framework driver that supports standard driver model wakeup flags. +disk). Not all systems have persistent media that are appropriate for such suspend modes. +% +grog — guess options for a following groff command +grog [-C] [--run] [--warnings] [--ligatures] [ groff-option ....] [--] [ filespec ....] +grog -h | --help +grog -v | --version +to perform the input with the groff program. +The corresponding groff command is usually displayed in standard output. With the option --run, +the generated line is output into standard error and the generated groff command is run on the +standard output. +The option -v or --version prints information on the version number. Also -h or --help prints usage +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +nl - number lines of files +nl [OPTION]... [FILE]... +Write each FILE to standard output, with line numbers added. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --body-numbering=STYLE +use STYLE for numbering body lines +-d, --section-delimiter=CC +use CC for separating logical pages +% +git-cvsserver - A CVS server emulator for Git +SSH: +export CVS_SERVER="git cvsserver" +cvs -d :ext:user@server/path/repo.git co <HEAD_name> +pserver (/etc/inetd.conf): +cvspserver stream tcp nowait nobody /usr/bin/git-cvsserver git-cvsserver pserver +git-cvsserver [options] [pserver|server] [<directory> ...] +% +ocsptool - GnuTLS OCSP tool +ocsptool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Ocsptool is a program that can parse and print information about OCSP requests/responses, generate +requests and verify responses. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +grub-macbless - bless a mac file/directory +Mac-style bless on HFS or HFS+ +-p, --ppc +bless for ppc-based macs +-v, --verbose +print verbose messages. +% +iptables-restore — Restore IP Tables +ip6tables-restore — Restore IPv6 Tables +iptables-restore [-chntv] [-M modprobe] [-T name] [file] +ip6tables-restore [-chntv] [-M modprobe] [-T name] [file] +iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on +STDIN or in file. Use I/O redirection provided by your shell to read from a file or specify file as an +argument. +-c, --counters +restore the values of all packet and byte counters +% +tbl - format tables for troff +tbl [-Cv] [files ...] +tbl compiles descriptions of tables embedded within troff input files into commands that are understood +by troff. Normally, it should be invoked using the -t option of groff. It is highly compatible with +Unix tbl. The output generated by GNU tbl cannot be processed with Unix troff; it must be processed with +GNU troff. If no files are given on the command line or a filename of - is given, the standard input is +read. +-C Enable compatibility mode to recognize .TS and .TE even when followed by a character other than +space or newline. Leader characters (\a) are handled as interpreted. +% +networkctl - Query the status of network links +configuration syntax. +The following options are understood: +-a --all +Show all links with status. +-h, --help +% +gtester-report - test report formatting utility +gtester-report [option...] [gtester-log] +gtester-report is a script which converts the XML output generated by gtester into HTML. +-h, --help +print help and exit +-v, --version +print version information and exit +-s, --subunit +Output subunit. Needs python-subunit. +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +watchgnupg - Read and print logs from a socket +watchgnupg [--force] [--verbose] socketname +Most of the main utilities are able to write their log files to a Unix Domain socket if configured that +way. watchgnupg is a simple listener for such a socket. It ameliorates the output with a time stamp and +available for Windows. +watchgnupg is commonly invoked as +watchgnupg --force ~/.gnupg/S.log +watchgnupg understands these options: +% +sudo, sudoedit — execute a command as another user +sudo -h | -K | -k | -V +sudo -v [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-u user] +sudo -l [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command] +sudo [-AbEHnPS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-r role] [-t type] +[-u user] [VAR=value] [-i | -s] [command] +sudoedit [-AknS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-u user] file ... +sudo allows a permitted user to execute a command as the superuser or another user, as specified by the +security policy. The invoking user's real (not effective) user ID is used to determine the user name with +which to query the security policy. +sudo supports a plugin architecture for security policies and input/output logging. Third parties can +develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. +% +vercmp - version comparison utility +vercmp is used to determine the relationship between two given version numbers. It outputs values as +follows: +Version comparison operates as follows: +% +xxd - make a hexdump or do the reverse. +xxd -h[elp] +xxd [options] [infile [outfile]] +xxd -r[evert] [options] [infile [outfile]] +xxd creates a hex dump of a given file or standard input. It can also convert a hex dump back to its +`mail-safe' ASCII representation, but has the advantage of decoding to standard output. Moreover, it can +be used to perform binary file patching. +If no infile is given, standard input is read. If infile is specified as a `-' character, then input is +taken from standard input. If no outfile is given (or a `-' character is in its place), results are sent +to standard output. +% +tailf - follow the growth of a log file +tailf [option] file +days it's safe to use tail -f (from coreutils), in contrast to what the original documentation below +says. +updating the access time for the file, so a filesystem flush does not occur periodically when no log +activity is happening. +tailf is extremely useful for monitoring log files on a laptop when logging is infrequent and the user +wishes the hard disk to spin down to conserve battery life. +% +fallocate - preallocate or deallocate space to a file +fallocate [-c|-p|-z] [-o offset] -l length [-n] filename +fallocate -d [-o offset] [-l length] filename +fallocate is used to manipulate the allocated disk space for a file, either to deallocate or preallocate +it. For filesystems which support the fallocate system call, preallocation is done quickly by allocating +creating a file by filling it with zeroes. +% +colcrt - filter nroff output for CRT previewing +colcrt [options] [file...] +colcrt provides virtual half-line and reverse line feed sequences for terminals without such capability, +and on which overstriking is destructive. Half-line characters and underlining (changed to dashing `-') +are placed on new lines in between the normal output lines. +-, --no-underlining +Causes all half-lines to be printed, effectively double spacing the output. Normally, a minimal +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +mkfs.bfs - make an SCO bfs filesystem +mkfs.bfs [options] device [block-count] +mkfs.bfs creates an SCO bfs filesystem on a block device (usually a disk partition or a file accessed via +the loop device). +The block-count parameter is the desired size of the filesystem, in blocks. If nothing is specified, the +entire partition will be used. +-N, --inodes number +% +vipw, vigr - edit the password or group file +vipw [options] +vigr [options] +vipw edits the password file after setting the appropriate locks, and does any necessary processing after +the password file is unlocked. If the password file is already locked for editing by another user, vipw +file in the same manner as vipw does the passwd file. +ENVIRONMENT +If the following environment variable exists, it will be utilized by vipw and vigr: +% +gapplication - D-Bus application launcher +gapplication version +gapplication list-apps +gapplication launch APPID +gapplication launch APPID [FILE...] +gapplication list-actions APPID +gapplication action APPID ACTION [PARAMETER] +% +gettext - translate message +gettext [OPTION] [[TEXTDOMAIN] MSGID] +gettext [OPTION] -s [MSGID]... +The gettext program translates a natural language message into the user's language, by looking up the +translation in a message catalog. +Display native language translation of a textual message. +-d, --domain=TEXTDOMAIN +retrieve translated messages from TEXTDOMAIN +-e enable expansion of some escape sequences +% +veritysetup - manage dm-verity (block level verification) volumes +veritysetup <options> <action> <action args> +Veritysetup is used to configure dm-verity managed device-mapper mappings. +Device-mapper verity target provides read-only transparent integrity checking of block devices using ker‐ +nel crypto API. +The dm-verity devices are always read-only. +Veritysetup supports these operations: +format <data_device> <hash_device> +% +btrfs-map-logical - map btrfs logical extent to physical extent +btrfs-map-logical <options> <device> +btrfs-map-logical can be used to find out what the physical offsets are on the mirrors, the result is +dumped into stdout in default. +Mainly used for debug purpose. +-l|--logical <logical_num> +Logical extent to map. +-c|--copy <copy> +% +diff - compare files line by line +diff [OPTION]... FILES +Compare FILES line by line. +Mandatory arguments to long options are mandatory for short options too. +--normal +output a normal diff (the default) +-q, --brief +report only when files differ +-s, --report-identical-files +% +psktool - GnuTLS PSK tool +psktool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Program that generates random keys for use with TLS-PSK. The keys are stored in hexadecimal format in a +key file. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +AS - the portable GNU assembler. +as [-a[cdghlns][=file]] [--alternate] [-D] +[--compress-debug-sections] [--nocompress-debug-sections] +[--debug-prefix-map old=new] +[--defsym sym=val] [-f] [-g] [--gstabs] +[--help] [-I dir] [-J] +[-K] [-L] [--listing-lhs-width=NUM] +[--listing-cont-lines=NUM] [--keep-locals] +[--no-pad-sections] +[-o objfile] [-R] +[--hash-size=NUM] [--reduce-memory-overheads] +[--statistics] +[-v] [-version] [--version] +% +mkfs.minix - make a Minix filesystem +mkfs.minix [options] device [size-in-blocks] +mkfs.minix creates a Linux MINIX filesystem on a device (usually a disk partition). +The device is usually of the following form: +on a character device :-). +% +id - print real and effective user and group IDs +id [OPTION]... [USER] +Print user and group information for the specified USER, or (when USER omitted) for the current user. +-a ignore, for compatibility with other versions +-Z, --context +print only the security context of the process +-g, --group +print only the effective group ID +-G, --groups +% +xmlwf - Determines if an XML document is well-formed +xmlwf [-s] [-n] [-p] [-x] [-e encoding] [-w] [-d output-dir] [-c] [-m] [-r] [-t] [-v] [file ...] +xmlwf uses the Expat library to determine if an XML document is well-formed. It is non-validating. +If you do not specify any files on the command-line, and you have a recent version of xmlwf, the input +file will be read from standard input. +A well-formed document must adhere to the following rules: +xmlwf does not currently check for a valid XML declaration. +% +wipefs - wipe a signature from a device +wipefs [-ahnpqtV] [-o offset] device... +wipefs can erase filesystem, raid or partition-table signatures (magic strings) from the specified device +to make the signatures invisible for libblkid. +wipefs does not erase the filesystem itself nor any other data from the device. When used without any +options, wipefs lists all visible filesystems and the offsets of their basic signatures. +wipefs calls the BLKRRPART ioctl when it has erased a partition-table signature to inform the kernel +about the change. +command lists only the first offset where a magic string has been detected. The device is not scanned +% +Wget - The non-interactive network downloader. +wget [option]... [URL]... +GNU Wget is a free utility for non-interactive download of files from the Web. It supports HTTP, HTTPS, +and FTP protocols, as well as retrieval through HTTP proxies. +Wget is non-interactive, meaning that it can work in the background, while the user is not logged on. +contrast, most of the Web browsers require constant user's presence, which can be a great hindrance when +transferring a lot of data. +Wget can follow links in HTML, XHTML, and CSS pages, to create local versions of remote web sites, fully +downloading." While doing that, Wget respects the Robot Exclusion Standard (/robots.txt). Wget can be +% +vgs — report information about volume groups +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--namepre‐ +fixes] [--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--rows] [--separator +Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] [--unquoted] [-v|--verbose] [--version] [Vol‐ +vgs produces formatted output about volume groups. +--all List all volume groups. Equivalent to not specifying any volume groups. +% +hwclock - read or set the hardware clock (RTC) +hwclock [function] [option...] +hwclock is a tool for accessing the Hardware Clock. It can: display the Hardware Clock time; set the +Hardware Clock to a specified time; set the Hardware Clock from the System Clock; set the System Clock +from the Hardware Clock; compensate for Hardware Clock drift; correct the System Clock timescale; set the +kernel's timezone, NTP timescale, and epoch (Alpha only); compare the System and Hardware Clocks; and +predict future Hardware Clock values based on its drift rate. +option --update-drift was added. See their respective descriptions below. +FUNCTIONS +The following functions are mutually exclusive, only one can be given at a time. If none is given, the +% +xfs_rtcp - XFS realtime copy command +xfs_rtcp [ -e extsize ] [ -p ] source ... target +xfs_rtcp -V +xfs_rtcp copies a file to the realtime partition on an XFS filesystem. If there is more than one source +and target, the final argument (the target) must be a directory which already exists. +-e extsize +Sets the extent size of the destination realtime file. +-p Use if the size of the source file is not an even multiple of the block size of the destination +filesystem. When -p is specified xfs_rtcp will pad the destination file to a size which is an even +% +iptables [-t table] {-A|-C|-D} chain rule-specification +ip6tables [-t table] {-A|-C|-D} chain rule-specification +iptables [-t table] -I chain [rulenum] rule-specification +iptables [-t table] -R chain rulenum rule-specification +iptables [-t table] -D chain rulenum +iptables [-t table] -S [chain [rulenum]] +iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] +% +texindex - sort Texinfo index files +texindex [OPTION]... FILE... +Generate a sorted index for each TeX output FILE. Usually FILE... is specified as `foo.??' for a docu‐ +ment `foo.texi'. +-h, --help +display this help and exit +--version +display version information and exit +-- end option processing +% +xfs_mkfile - create an XFS file +xfs_mkfile [ -v ] [ -n ] [ -p ] size[k|b|m|g] filename ... +xfs_mkfile -V +xfs_mkfile creates one or more files. The file is padded with zeroes by default. The default size is in +bytes, but it can be flagged as kilobytes, blocks, megabytes, or gigabytes with the k, b, m, or g suf‐ +fixes, respectively. +-v Verbose. Report the names and sizes of created files. +-n No bytes. Create a holey file - that is, do not write out any data, just seek to end of file and +write a block. +% +autopoint - copies standard gettext infrastructure +autopoint [OPTION]... +Copies standard gettext infrastructure files into a source package. +--help print this help and exit +--version +print version information and exit +-f, --force +force overwriting of files that already exist +% +kbd_mode - report or set the keyboard mode +kbd_mode [ -a | -u | -k | -s ] [ -C CONSOLE ] +Without argument, kbd_mode prints the current keyboard mode (RAW, MEDIUMRAW or XLATE). With argument, it +sets the keyboard mode as indicated: +-s: scancode mode (RAW), +-k: keycode mode (MEDIUMRAW), +-a: ASCII mode (XLATE), +% +pam_timestamp_check - Check to see if the default timestamp is valid +pam_timestamp_check [-k] [-d] [target_user] +With no arguments pam_timestamp_check will check to see if the default timestamp is valid, or optionally +remove it. +-k +-d +Instead of returning validity using an exit status, loop indefinitely, polling regularly and printing +the status on standard output. +% +chroot - run command or interactive shell with special root directory +chroot OPTION +--groups=G_LIST +--userspec=USER:GROUP +specify user and group (ID or name) to use +--skip-chdir +do not change working directory to '/' +% +lsns - list namespaces +lsns [options] [namespace] +lsns lists information about all the currently accessible namespaces or about the given namespace. The +namespace identifier is an inode number. +The default output is subject to change. So whenever possible, you should avoid using default outputs in +your scripts. Always explicitly define expected columns by using the --output option together with a +columns list in environments where a stable output is required. +(see unshare --mount-proc for more details). lsns is not able to see persistent namespaces without pro‐ +% +lvmsadc — LVM system activity data collector +lvmsadc +% +lzmainfo - show information stored in the .lzma file header +lzmainfo [--help] [--version] [file...] +fied file, decodes the header, and prints it to standard output in human readable format. If no files +are given or file is -, standard input is read. +Usually the most interesting information is the uncompressed size and the dictionary size. Uncompressed +size can be shown only if the file is in the non-streamed .lzma format variant. The amount of memory +required to decompress the file is a few dozen kilobytes plus the dictionary size. +lzmainfo is included in XZ Utils primarily for backward compatibility with LZMA Utils. +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +envsubst - substitutes environment variables in shell format strings +envsubst [OPTION] [SHELL-FORMAT] +Substitutes the values of environment variables. +Operation mode: +-v, --variables +output the variables occurring in SHELL-FORMAT +Informative output: +-h, --help +display this help and exit +-V, --version +% +iconv - convert text from one character encoding to another +iconv [options] [-f from-encoding] [-t to-encoding] [inputfile]... +The iconv program reads in text in one encoding and outputs the text in another encoding. If no input +files are given, or if it is given as a dash (-), iconv reads from standard input. If no output file is +given, iconv writes to standard output. +If no from-encoding is given, the default is derived from the current locale's character encoding. If no +to-encoding is given, the default is derived from the current locale's character encoding. +-f from-encoding, --from-code=from-encoding +Use from-encoding for input characters. +% +kpropd [-r realm] [-A admin_server] [-a acl_file] [-f slave_dumpfile] [-F principal_database] [-p +program. If incremental propagation is enabled, it periodically requests incremental updates from the +master KDC. +When the slave receives a kprop request from the master, kpropd accepts the dumped KDC database and +database to the slave servers. Upon a successful download of the KDC database file, the slave Kerberos +server will have an up-to-date KDC database. +% +pgrep, pkill - look up or signal processes based on name and other attributes +pgrep [options] pattern +pkill [options] pattern +pgrep looks through the currently running processes and lists the process IDs which match the selection +criteria to stdout. All the criteria have to match. For example, +$ pgrep -u root sshd +will only list the processes called sshd AND owned by root. On the other hand, +$ pgrep -u root,daemon +will list the processes owned by root OR daemon. +% +fold - wrap each input line to fit in specified width +fold [OPTION]... [FILE]... +Wrap input lines in each FILE, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --bytes +count bytes rather than columns +-s, --spaces +break at spaces +% +chrt - manipulate the real-time attributes of a process +chrt [options] priority command [argument...] +chrt [options] -p [priority] pid +chrt sets or retrieves the real-time scheduling attributes of an existing pid, or runs command with the +given attributes. +POLICIES +-o, --other +-f, --fifo +Set scheduling policy to SCHED_FIFO. +% +sync - Synchronize cached writes to persistent storage +sync [OPTION] [FILE]... +Synchronize cached writes to persistent storage +If one or more files are specified, sync only them, or their containing file systems. +-d, --data +sync only file data, no unneeded metadata +-f, --file-system +sync the file systems that contain the files +--help display this help and exit +% +lvconvert — change LV type and other utilities +lvconvert [OPTION]... VolumeGroup/LogicalVolume +-b, --background +--cachepolicy Policy +--cachesettings Key=Value +-c, --chunksize ChunkSize[b|B|s|S|k|K|m|M|g|G] +--corelog +--discards {ignore|nopassdown|passdown} +-i, --interval Seconds +--merge +--mirrorlog {disk|core|mirrored} +-m, --mirrors Number +% +dpa - DNS Packet Analyzer. Analyze DNS packets in ip trace files +dpa [ OPTION ] TRACEFILE +uniques (i.e. count all different occurences). +-c expressionlist +Count occurrences of matching expressions +-f expression +Filter: only process packets that match the expression +-h Show usage +% +unlink - call the unlink function to remove the specified file +unlink FILE +unlink OPTION +Call the unlink function to remove the specified FILE. +--help display this help and exit +--version +output version information and exit +Written by Michael Stone. +% +ss - another utility to investigate sockets +ss [options] [ FILTER ] +ss is used to dump socket statistics. It allows showing information similar to netstat. It can display +more TCP and state informations than other tools. +established connection. +-h, --help +Show summary of options. +-V, --version +% +split - split a file into pieces +split [OPTION]... [FILE [PREFIX]] +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-a, --suffix-length=N +--additional-suffix=SUFFIX +append an additional SUFFIX to file names +% +dconf - Simple tool for manipulating a dconf database +dconf read KEY +dconf list DIR +dconf write KEY VALUE +dconf reset [-f] PATH +dconf compile OUTPUT KEYFILEDIR +dconf update +dconf watch PATH +% +iptables-restore — Restore IP Tables +ip6tables-restore — Restore IPv6 Tables +iptables-restore [-chntv] [-M modprobe] [-T name] [file] +ip6tables-restore [-chntv] [-M modprobe] [-T name] [file] +iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on +STDIN or in file. Use I/O redirection provided by your shell to read from a file or specify file as an +argument. +-c, --counters +restore the values of all packet and byte counters +% +tset, reset - terminal initialization +tset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +reset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +mination is done as follows, using the first terminal type found. +ting TERM according to the type passed to it by /etc/inittab.) +% +getent [option]... database key... +are configured in /etc/nsswitch.conf. If one or more key arguments are provided, then only the entries +that match the supplied keys will be displayed. Otherwise, if no key is provided, all entries will be +displayed (unless the database does not support enumeration). +enumerating each socket address structure returned. +% +rndc - name server control utility +rndc [-b source-address] [-c config-file] [-k key-file] [-s server] [-p port] [-q] [-r] [-V] [-y key_id] +{command} +rndc controls the operation of a name server. It supersedes the ndc utility that was provided in old BIND +releases. If rndc is invoked with no command line options or arguments, it prints a short summary of the +supported commands and the available options and their arguments. +rndc communicates with the name server over a TCP connection, sending commands authenticated with digital +signatures. In the current versions of rndc and named, the only supported authentication algorithms are +command request and the name server's response. All commands sent over the channel must be signed by a +key_id known to the server. +% +arping - send ARP REQUEST to a neighbour host +arping [-AbDfhqUV] [-c count] [-w deadline] [-s source] {-I interface} {destination} +Ping destination on device interface by ARP packets, using source address source. +-A The same as -U, but ARP REPLY packets used instead of ARP REQUEST. +-b Send only MAC level broadcasts. Normally arping starts from sending broadcast, and switch to uni‐ +cast after reply received. +Stop after sending count ARP REQUEST +timeout expires. +% +gobject-query - display a tree of types +gobject-query froots [OPTION...] +gobject-query tree [OPTION...] +gobject-query is a small utility that draws a tree of types. +gobject-query takes a mandatory argument that specifies whether it should iterate over the fundamental +types or print a type tree. +froots +iterate over fundamental roots +% +dbus-cleanup-sockets - clean up leftover sockets in a directory +dbus-cleanup-sockets [DIRECTORY] +The dbus-cleanup-sockets command cleans up unused D-Bus connection sockets. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +If given no arguments, dbus-cleanup-sockets cleans up sockets in the standard default socket directory +for the per-user-login-session message bus; this is usually /tmp. Optionally, you can pass a different +directory on the command line. +On Linux, this program is essentially useless, because D-Bus defaults to using "abstract sockets" that +exist only in memory and don't have a corresponding file in /tmp. +% +lvrename — rename a logical volume +[-v|--verbose] [--version] [-f|--force] [--noudevsync] [--reportformat {basic|json}] {OldLogicalVol‐ +lvrename renames an existing logical volume or an existing historical logical volume from OldLogicalVol‐ +--noudevsync +Disable udev synchronisation. The process will not wait for notification from udev. It will con‐ +tinue irrespective of any possible udev processing in the background. You should only use this if +% +msgattrib - attribute matching and manipulation on message catalog +msgattrib [OPTION] [INPUTFILE] +Filters the messages of a translation catalog according to their attributes, and manipulates the +attributes. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +isc-hmac-fixup - fixes HMAC keys generated by older versions of BIND +isc-hmac-fixup {algorithm} {secret} +Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer +incompatible with other DNS implementations. +versions of BIND, when using long keys. isc-hmac-fixup modifies those keys to restore compatibility. +To modify a key, run isc-hmac-fixup and specify the key's algorithm and secret on the command line. If +% +rcp - Remote copy +rcp [OPTION...] SOURCE DEST +rcp [OPTION...] SOURCE... DIRECTORY +rcp [OPTION...] --target-directory=DIRECTORY SOURCE... +Remote copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY. +-6, --ipv6 +use only IPv6 +-d, --target-directory[=DIRECTORY] +% +sed - stream editor for filtering and transforming text +sed [OPTION]... {script-only-if-no-other-script} [input-file]... +Sed is a stream editor. A stream editor is used to perform basic text transformations on an input stream +(a file or input from a pipeline). While in some ways similar to an editor which permits scripted edits +(such as ed), sed works by making only one pass over the input(s), and is consequently more efficient. +But it is sed's ability to filter text in a pipeline which particularly distinguishes it from other types +of editors. +-n, --quiet, --silent +suppress automatic printing of pattern space +-e script, --expression=script +% +run-parts - run scripts or programs in a directory +run-parts [--test] [--verbose] [--report] [--lsbsysinit] [--regex=RE] [--umask=umask] [--arg=argument] +[--exit-on-error] [--help] [--version] [--list] [--reverse] [--] DIRECTORY +run-parts -V +run-parts runs all the executable files named within constraints described below, found in directory +directory. Other files and directories are silently ignored. +If neither the --lsbsysinit option nor the --regex option is given then the names must consist entirely +If the --lsbsysinit option is given, then the names must not end in .dpkg-old or .dpkg-dist or .dpkg-new +or .dpkg-tmp, and must belong to one or more of the following namespaces: the LANANA-assigned namespace +% +ssh — OpenSSH SSH client (remote login program) +[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address] +[-S ctl_path] [-W host:port] [-w local_tun[:remote_tun]] [user@]hostname [command] +ssh (SSH client) is a program for logging into a remote machine and for executing commands on a remote +machine. It is intended to provide secure encrypted communications between two untrusted hosts over an +the secure channel. +ssh connects and logs into the specified hostname (with optional user name). The user must prove his/her +identity to the remote machine using one of several methods (see below). +% +flex - the fast lexical analyser generator +Generates programs that perform pattern-matching on text. +Table Compression: +-Ca, --align +trade off larger tables for better memory alignment +-Ce, --ecs +construct equivalence classes +-Cf do not compress tables; use -f representation +% +trust - Tool for operating on the trust policy store +trust list +trust extract --filter=<what> --format=<type> /path/to/destination +trust anchor /path/to/certificate.crt +trust is a command line tool to examine and modify the shared trust policy store. +See the various sub commands below. The following global options can be used: +-v, --verbose +Run in verbose mode with debug output. +% +preconv - convert encoding of input files to something GNU troff understands +preconv [-dr] [-e encoding] [files ...] +preconv -h | --help +preconv -v | --version +It is possible to have whitespace between the -e command line option and its parameter. +standard output. Currently, this means ASCII characters and ‘\[uXXXX]’ entities, where ‘XXXX’ is a hexa‐ +decimal number with four to six digits, representing a Unicode input code. Normally, preconv should be +invoked with the -k and -K options of groff. +-d Emit debugging messages to standard error (mainly the used encoding). +% +dircolors - color setup for ls +dircolors [OPTION]... [FILE] +Output commands to set the LS_COLORS environment variable. +Determine format of output: +-b, --sh, --bourne-shell +output Bourne shell code to set LS_COLORS +-c, --csh, --c-shell +output C shell code to set LS_COLORS +-p, --print-database +output defaults +% +thin_dump - dump thin provisioning metadata from device or file to standard output +thin_dump [options] {device|file} +thin_dump dumps binary thin provisioning metadata (optionally from alternate block; see option --meta‐ +data-snap) created by the device-mapper thin provisioning target on a device or file to standard output +for analysis or postprocessing in either XML or human readable format. XML formated metadata can be fed +device-mapper target) or file. +-f, --format {xml|human_readable} +Print output in XML or human readable format. +% +iptables-save — dump iptables rules to stdout +ip6tables-save — dump iptables rules to stdout +iptables-save [-M modprobe] [-c] [-t table] +ip6tables-save [-M modprobe] [-c] [-t table] +iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable +format to STDOUT. Use I/O-redirection provided by your shell to write to a file. +-M, --modprobe modprobe_program +Specify the path to the modprobe program. By default, iptables-save will inspect /proc/sys/ker‐ +nel/modprobe to determine the executable's path. +% +thin_repair - repair thin provisioning binary metadata from device/file to device/file +thin_repair [options] -i {device|file} -o {device|file} +thin_repair reads binary thin provisioning metadata created by the respective device-mapper target from +one device or file , repairs it and writes it to another device or file. If written to a metadata device +, the metadata can be processed by the device-mapper target. +-i, --input {device|file} +Input file or device with binary metadata. +-o, --output {device|file} +Output file or device for repaired binary metadata. If a file is used then it must be preallo‐ +% +msgcat - combines several message catalogs +msgcat [OPTION] [INPUTFILE]... +Concatenates and merges the specified PO files. Find messages which are common to two or more of the +extracted comments, and file positions will be cumulated, except that if --use-first is specified, they +will be taken from the first PO file to define them. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE ... +% +whatis - display one-line manual page descriptions +whatis [-dlv?V] [-r|-w] [-s list] [-m system[,...]] [-M path] [-L locale] [-C file] name ... +Each manual page has a short description available within it. whatis searches the manual page names and +displays the manual page descriptions of any name matched. +sary to quote the name or escape (\) the special characters to stop the shell from interpreting them. +index databases are used during the search, and are updated by the mandb program. Depending on your +pages have been installed. To produce an old style text whatis database from the relative index data‐ +base, issue the command: +% +dnssec-importkey - import DNSKEY records from external systems so they can be managed +dnssec-importkey [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-D date/offset] +[-D sync date/offset] [-h] [-v level] [-V] {keyfile} +dnssec-importkey {-f filename} [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] +[-D date/offset] [-D sync date/offset] [-h] [-v level] [-V] [dnsname] +dnssec-importkey reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY +.private files will be generated. +The newly-created .private file does not contain private key data, and cannot be used for signing. +However, having a .private file makes it possible to set publication (-P) and deletion (-D) times for the +% +logname - print user's login name +logname [OPTION] +Print the name of the current user. +--help display this help and exit +--version +output version information and exit +Written by FIXME: unknown. +REPORTING BUGS +% +cat - concatenate files and print on the standard output +cat [OPTION]... [FILE]... +Concatenate FILE(s) to standard output. +With no FILE, or when FILE is -, read standard input. +-A, --show-all +equivalent to -vET +-b, --number-nonblank +number nonempty output lines, overrides -n +-e equivalent to -vE +% +openvt - start a program on a new virtual terminal (VT). +openvt will find the first available VT, and run on it the given command with the given command options, +standard input, output and error are directed to that terminal. The current search path ($PATH) is used +to find the requested command. If no command is specified then the environment variable $SHELL is used. +-c, --console=VTNUMBER +plied VT for this to work; +-f, --force +Force opening a VT without checking whether it is already in use; +% +msgmerge - merge message catalog and template +msgmerge [OPTION] def.po ref.pot +Merges two Uniforum style .po files together. The def.po file is an existing PO file with translations +which will be taken over to the newly created file as long as they still match; comments will be pre‐ +served, but extracted comments and file positions will be discarded. The ref.pot file is the last cre‐ +ated PO file with up-to-date source references but old translations, or a PO Template file (generally +created by xgettext); any translations or comments in the file will be discarded, however dot comments +and file positions will be preserved. Where an exact match cannot be found, fuzzy matching is used to +produce better results. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +tc - show / manipulate traffic control settings +dle qdisc-id ] qdisc [ qdisc specific parameters ] +qdisc [ qdisc specific parameters ] +protocol prio priority filtertype [ filtertype specific parameters ] flowid flow-id +% +systemd-inhibit - Execute a program with an inhibition lock taken +lock will be acquired before the specified command line is executed and released afterwards. +being recorded, or similar operations that should not be interrupted. +% +thin_trim - Issue discard requests for free pool space (offline tool). +thin_trim [options] {device|file} +thin_trim sends discard requests to the pool device for unprovisioned areas. +--pool-inactive +Indicates you are aware the pool should be inactive. Suppresses a warning message and prompt. +-h, --help +Print help and exit. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +users - print the user names of users currently logged in to the current host +users [OPTION]... [FILE] +Output who is currently logged in according to FILE. If FILE is not specified, use /var/run/utmp. +/var/log/wtmp as FILE is common. +--help display this help and exit +--version +output version information and exit +Written by Joseph Arceneaux and David MacKenzie. +% +nsenter - run program with namespaces of other processes +nsenter [options] [program [arguments]] +Enters the namespaces of one or more other processes and then executes the specified program. Enterable +namespaces are: +mount namespace +Mounting and unmounting filesystems will not affect the rest of the system (CLONE_NEWNS flag), +except for filesystems which are explicitly marked as shared (with mount --make-shared; see /proc +/self/mountinfo for the shared flag). +UTS namespace +Setting hostname or domainname will not affect the rest of the system. (CLONE_NEWUTS flag) +% +tion to check how many free blocks are present as contiguous and aligned free space. The percentage of +contiguous free blocks of size and of alignment chunk_kb is reported. It also displays the minimum/maxi‐ +tion can be used to gauge the level of free space fragmentation in the filesystem. +-c chunk_kb +available in units of kilobytes (Kb). The chunk size must be a power of two and be larger than +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +cache_repair - repair cache binary metadata from device/file to device/file +cache_repair [options] -i {device|file} -o {device|file} +cache_repair reads binary cache metadata created by the respective device-mapper target from one device +or file , repairs it and writes it to another device or file. If written to a metadata device , the +metadata can be processed by the device-mapper target. +-i, --input {device|file} +Input file or device with binary metadata. +-o, --output {device|file} +Output file or device for repaired binary metadata. If a file is used then it must be preallo‐ +% +GNU Parted - a partition manipulation program +parted [options] [device [command [options...]...]] +parted is a program to manipulate disk partitions. It supports multiple partition table formats, includ‐ +ing MS-DOS and GPT. It is useful for creating space for new operating systems, reorganising disk usage, +and copying data to new hard disks. +Info format. +-h, --help +displays a help message +% +dig - DNS lookup utility +dig [@server] [-b address] [-c class] [-f filename] [-k filename] [-m] [-p port#] [-q name] [-t type] +dig [-h] +dig [global-queryopt...] [query...] +dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS +lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS +administrators use dig to troubleshoot DNS problems because of its flexibility, ease of use and clarity +of output. Other lookup tools tend to have less functionality than dig. +Although dig is normally used with command-line arguments, it also has a batch mode of operation for +% +dmsetup — low level logical volume management +dmsetup clear device_name +dmsetup create device_name [-u|--uuid uuid] [--addnodeoncreate|--addnodeonresume] [-n|--notable|--table +{table|table_file}] [--readahead {[+]sectors|auto|none}] +dmsetup deps [-o options] [device_name] +dmsetup help [-c|-C|--columns] +dmsetup info [device_name] +dmsetup info -c|-C|--columns [--count count] [--interval seconds] [--nameprefixes] [--noheadings] [-o +fields] [-O|--sort sort_fields] [--separator separator] [device_name] +dmsetup load device_name [--table {table|table_file}] +dmsetup ls [--target target_type] [--exec command] [--tree] [-o options] +dmsetup mangle [device_name] +dmsetup message device_name sector message +dmsetup mknodes [device_name] +dmsetup reload device_name [--table {table|table_file}] +% +mv - move (rename) files +mv [OPTION]... [-T] SOURCE DEST +mv [OPTION]... SOURCE... DIRECTORY +mv [OPTION]... -t DIRECTORY SOURCE... +Rename SOURCE to DEST, or move SOURCE(s) to DIRECTORY. +Mandatory arguments to long options are mandatory for short options too. +--backup[=CONTROL] +make a backup of each existing destination file +-b like --backup but does not accept an argument +% +grub-reboot - set the default boot entry for GRUB, for the next boot only +grub-reboot [OPTION] MENU_ENTRY +Set the default boot menu entry for GRUB, for the next boot only. +-h, --help +print this message and exit +-V, --version +print the version information and exit +--boot-directory=DIR +expect GRUB images under the directory DIR/grub instead of the /boot/grub directory +% +pldd - display dynamic shared objects linked into a process +pldd pid +pldd option +The pldd command displays a list of the dynamic shared objects that are linked into the process with the +-?, --help +Display program help message. +--usage +Display a short usage message. +% +ldns-zsplit - split up a zone file +-n NUMBER +Split after NUMBER RRs, ldns-zsplit will not split in the middle of an RRs. +Each part is saved with a numerical suffix, starting with .000. The largest suffix is thus .999. +-o ORIGIN +use ORIGIN as origin when reading the zonefile. +-z Sort the zone before splitting. +% +gsettings - GSettings configuration tool +gsettings get SCHEMA [:PATH] KEY +gsettings monitor SCHEMA [:PATH] [KEY] +gsettings writable SCHEMA [:PATH] KEY +gsettings range SCHEMA [:PATH] KEY +gsettings describe SCHEMA [:PATH] KEY +gsettings set SCHEMA [:PATH] KEY VALUE +gsettings reset SCHEMA [:PATH] KEY +% +lsipc - show information on IPC facilities currently employed in the system +lsipc [options] +lsipc shows information on the inter-process communication facilities for which the calling process has +read access. +-i, --id id +bined with one of the three resource options: -m, -q or -s. It is possible to override the +default output format for this option with the --list, --raw, --json or --export option. +-g, --global +% +resize_reiserfs - resizer tool for the ReiserFS filesystem +resize_reiserfs [ -s [+|-]size[K|M|G] ] [ -j dev ] [ -fqv ] device +The resize_reiserfs tool resizes an unmounted reiserfs file system. It enlarges or shrinks an reiserfs +file system located on a device so that it will have size bytes or size=old_size +(-) size bytes if the + +or - prefix is used. If the -s option is not specified, the filesystem will be resized to fill the given +ter is given in kilo-, mega-, gigabytes respectively. +The resize_reiserfs program does not manipulate the size of the device. If you wish to enlarge a filesys‐ +titions, by deleting the partition and recreating it with a larger size (assuming there is free space +after the partition in question). Make sure you re-create it with the same starting disk cylinder as +% +ldns-keygen - generate a DNSSEC key pair +ldns-keygen [ OPTION ] DOMAIN +with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the +DNSKEY record. +ldns-keygen can also be used to create symmetric keys (for TSIG) by selecting the appropriate algorithm: +file. +ldns-keygen prints the basename for the key files: K<name>+<alg>+<id> +% +-c, --iteration-count=NUM +-l, --buflen=NUM +Length of generated hash +-s, --salt=NUM +Length of salt +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +nameif - name network interfaces based on MAC addresses +nameif [-c configfile] [-s] +nameif [-c configfile] [-s] {interface macaddress} +nameif renames network interfaces based on mac addresses. When no arguments are given /etc/mactab is +read. Each line of it contains an interface name and a Ethernet MAC address. Comments are allowed start‐ +ing with #. Otherwise the interfaces specified on the command line are processed. nameif looks for the +interface with the given MAC address and renames it to the name given. +When the -s argument is given all error messages go to the syslog. +When the -c argument is given with a file name that file is read instead of /etc/mactab. +% +ranlib - generate index to archive. +ranlib [--plugin name] [-DhHvVt] archive +ranlib generates an index to the contents of an archive and stores it in the archive. The index lists +each symbol defined by a member of an archive that is a relocatable object file. +An archive with such an index speeds up linking to the library and allows routines in the library to call +each other without regard to their placement in the archive. +The GNU ranlib program is another form of GNU ar; running ranlib is completely equivalent to executing ar +-s. +% +jfs_fscklog - extract a JFS fsck service log into a file and/or format and display the extracted file +jfs_fscklog [ -d ] [ -e device ] [ -f output.file ] [ -p ] [ -V ] +jfs_fscklog with option -e device extracts the contents of either the most recent or immediately prior +(specified with option -p) JFS fsck service log from the specified device, and writes the output to a +If the -p option is used, the default file name is <pwd>fscklog.old. +jfs_fscklog with option -d formats and displays the contents of the extracted file. +jfs_fscklog with options -d and -e device extracts and displays the JFS fsck service log. +-d Format and display a previously extracted JFS fsck service log. +% +makeinfo [OPTION]... TEXINFO-FILE... +Translate Texinfo source documentation to various other formats, by default Info files suitable for read‐ +ing online with Emacs or standalone GNU Info. +not depend on the installed name. +General options: +--document-language=STR locale to use in translating Texinfo keywords +for the output document (default C). +--error-limit=NUM +% +psfgettable - extract the embedded Unicode character table from a console font +psfgettable fontfile [outfile] +psfgettable extracts the embedded Unicode character table from a .psf format console font into a human +the font is read from standard input. +% +iptables-xml — Convert iptables-save format to XML +iptables-xml [-c] [-v] +iptables-xml is used to convert the output of iptables-save into an easily manipulatable XML format to +STDOUT. Use I/O-redirection provided by your shell to write to a file. +-c, --combine +combine consecutive rules with the same matches but different targets. iptables does not currently +support more than one target per match, so this simulates that by collecting the targets from con‐ +secutive iptables rules into one action tag, but only when the rule matches are identical. Termi‐ +nating actions like RETURN, DROP, ACCEPT and QUEUE are not combined with subsequent targets. +-v, --verbose +Output xml comments containing the iptables line from which the XML is derived +% +fgconsole - print the number of the active VT. +fgconsole [--help|--version|--next-available] +If the active Virtual Terminal is /dev/ttyN, then prints N on standard output. +If the console is a serial console, then "serial" is printed instead. +--next-available +Will show the next unallocated virtual terminal. Normally 6 virtual terminals are allocated, with +% +whoami - print effective userid +whoami [OPTION]... +Print the user name associated with the current effective user ID. Same as id -un. +--help display this help and exit +--version +output version information and exit +Written by Richard Mlynarik. +REPORTING BUGS +% +firewall-offline-cmd - firewalld offline command line client +firewall-offline-cmd is an offline command line client of the firewalld daemon. It should be used only if +the firewalld service is not running. For example to migrate from system-config-firewall/lokkit or in the +install environment to configure firewall settings with kickstart. +Some lokkit options can not be automatically converted for firewalld, they will result in an error or +with custom rules, modules and masquerading. +Check the firewall configuration after using this tool. +% +pcretest - a program for testing Perl-compatible regular expressions. +pcretest [options] [input file [output file]] +pcretest was written as a test program for the PCRE regular expression library itself, but it can also be +gram; for details of the regular expressions themselves, see the pcrepattern documentation. For details +The input for pcretest is a sequence of regular expression patterns and strings to be matched, as +described below. The output shows the result of each match. Options on the command line and the patterns +control PCRE options and exactly what is output. +As PCRE has evolved, it has acquired many different features, and as a result, pcretest now has rather a +lot of obscure options for testing every possible feature. Some of these options are specifically +% +btrfs-select-super - overwrite primary superblock with a backup copy +btrfs-select-super -s number <device> +for example when write barriers were disabled during a power failure and not all superblocks were +written, or if the primary superblock is damaged, eg. accidentally overwritten. +The filesystem specified by device must not be mounted. +Prior to overwriting the primary superblock, please make sure that the backup copies are valid! +To dump a superblock use the btrfs inspect-internal dump-super command, or the obsolete command +btrfs-show-super. +% +localedef - compile locale definition files +localedef [options] outputpath +localedef --list-archive [options] +localedef --delete-from-archive [options] localename ... +localedef --add-to-archive [options] compiledpath +localedef --version +localedef --help +localedef --usage +The localedef program reads the indicated charmap and input files, compiles them to a binary form quickly +put in outputpath. +The outputpath argument is interpreted as follows: +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +raw - bind a Linux raw character device +raw /dev/raw/raw<N> <major> <minor> +raw /dev/raw/raw<N> /dev/<blockdev> +raw -q /dev/raw/raw<N> +raw -qa +kernel module later). +raw is used in two modes: it either sets raw device bindings, or it queries existing bindings. When set‐ +% +grolbp [ -l ] [ --landscape ] [ -v ] [ --version ] [ -cn ] [ --copies=numcopies ] [ -ppaper_size ] +[ --papersize=paper_size ] [ -oorientation ] [ --orientation=orientation ] [ -wwidth ] +[ --linewidth=width ] [ -Fdir ] [ --fontdir=dir ] [ -h ] [ --help ] [ files... ] +\D'R dh dv' +Draw a rule (i.e. a solid black rectangle), with one corner at the current position, and the diag‐ +onally opposite corner at the current position +(dh,dv). +% +vipw, vigr - edit the password or group file +vipw [options] +vigr [options] +vipw edits the password file after setting the appropriate locks, and does any necessary processing after +the password file is unlocked. If the password file is already locked for editing by another user, vipw +file in the same manner as vipw does the passwd file. +ENVIRONMENT +If the following environment variable exists, it will be utilized by vipw and vigr: +% +captest - a program to demonstrate capabilities +captest [ --drop-all | --drop-caps | --id ] [ --init-grp ] [ --lock ] [ --text ] +captest is a program that demonstrates and prints out the current process capabilities. Each option +prints the same report. It will output current capabilities. then it will try to access /etc/shadow +directly to show if that can be done. Then it creates a child process that attempts to read /etc/shadow +and outputs the results of that. Then it outputs the capabilities that a child process would have. +You can also apply file system capabilities to this program to study how they work. For example, filecap +/usr/bin/captest chown. Then run captest as a normal user. Another interesting test is to make captest +suid root so that you can see what the interaction is between root's credentials and capabilities. For +lation is possible. But do not leave this app setuid root after you are don testing so that an attacker +cannot take advantage of it. +% +rmmod - Simple program to remove a module from the Linux Kernel +rmmod [-f] [-s] [-v] [modulename] +rmmod is a trivial program to remove a module (when module unloading support is provided) from the +-v, --verbose +Print messages about what the program is doing. Usually rmmod prints messages only if something goes +wrong. +-f, --force +when the kernel was compiled. With this option, you can remove modules which are being used, or which +% +ipcs - show information on IPC facilities +ipcs [options] +ipcs shows information on the inter-process communication facilities for which the calling process has +read access. By default it shows information about all three resources: shared memory segments, message +queues, and semaphore arrays. +-i, --id id +bined with one of the three resource options: -m, -q or -s. +-h, --help +Display help text and exit. +% +routel - list routes with pretty output format +routef - flush routes +routel [tablenr [raw ip args...]] +routef +The routel script will list routes in a format that some might consider easier to interpret then the ip +route list equivalent. +The routef script does not take any arguments and will simply flush the routing table down the drain. +FILES +/usr/bin/routef +/usr/bin/routel +% +Mandatory arguments to long options are mandatory for short options too. +-c, --check +checks the syntax only +-o, --output=FILE +output file +-h, --help +% +uptime - Tell how long the system has been running. +uptime [options] +uptime gives a one line display of the following information. The current time, how long the system has +System load averages is the average number of processes that are either in a runnable or uninterruptable +state. A process in a runnable state is either using the CPU or waiting to use the CPU. A process in +uninterruptable state is waiting for some I/O access, eg waiting for disk. The averages are taken over +the three time intervals. Load averages are not normalized for the number of CPUs in a system, so a load +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +msguniq - unify duplicate translations in message catalog +msguniq [OPTION] [INPUTFILE] +Unifies duplicate translations in a translation catalog. Finds duplicate translations of the same mes‐ +sage ID. Such duplicates are invalid input for other programs like msgfmt, msgmerge or msgcat. By +default, duplicates are merged together. When using the --repeated option, only duplicates are output, +and all other messages are discarded. Comments and extracted comments will be cumulated, except that if +--use-first is specified, they will be taken from the first translation. File positions will be cumu‐ +lated. When using the --unique option, duplicates are discarded. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +% +newgrp - log in to a new group +newgrp [group] +logged in, and the current directory is unchanged, but calculations of access permissions to files are +performed with respect to the new group ID. +If no group is specified, the GID is changed to the login GID. +FILES +/etc/group +/etc/passwd +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +gnutls-cli - GnuTLS client +gnutls-cli [-flags] [-flag [value]] [--option-name[[=| ]value]] [hostname] +Simple client program to set up a TLS connection to some other computer. It sets up a TLS connection and +forwards data from the standard input to the secured socket and vice versa. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +xfs_repair - repair an XFS filesystem +xfs_repair [ -dfLnPv ] [ -m maxmem ] [ -c subopt=value ] [ -o subopt[=value] ] [ -t interval ] [ -l +logdev ] [ -r rtdev ] device +xfs_repair -V +the device argument which should be the device name of the disk partition or volume containing the +filesystem. If given the name of a block device, xfs_repair will attempt to find the raw device associ‐ +ated with the specified block device and will use the raw device instead. +inconsistent or corrupt. +% +addgnupghome - Create .gnupg home directories +If GnuPG is installed on a system with existing user accounts, it is sometimes required to populate the +GnuPG home directory with existing files. Especially a ‘trustlist.txt’ and a keybox with some initial +‘/etc/skel/.gnupg’ to the home directories of the accounts given on the command line. It takes care not +to overwrite existing GnuPG home directories. +addgnupghome is invoked by root as: +% +realpath - print the resolved path +realpath [OPTION]... FILE... +Print the resolved absolute file name; all but the last component must exist +-e, --canonicalize-existing +all components of the path must exist +-m, --canonicalize-missing +no path components need exist or be a directory +-L, --logical +resolve '..' components before symlinks +% +pvcreate — initialize a disk or partition for use by LVM +[-f[f]|--force [--force]] [-y|--yes] [--labelsector] [--bootloaderareasize size] [-M|--metadatatype type] +[--[pv]metadatacopies NumberOfCopies] [--metadatasize size] [--metadataignore {y|n}] [--dataalignment +alignment] [--dataalignmentoffset alignment_offset] [--restorefile file] [--norestorefile] [--reportfor‐ +mat {basic|json}] [--setphysicalvolumesize size] [-u|--uuid uuid] [-Z|--zero {y|n}] PhysicalVolume [Phys‐ +icalVolume...] +pvcreate initializes PhysicalVolume for later use by the Logical Volume Manager (LVM). Each PhysicalVol‐ +ume can be a disk partition, whole disk, meta device, or loopback file. For DOS disk partitions, the +first sector with: +% +stat - display file or file system status +stat [OPTION]... FILE... +Display file or file system status. +Mandatory arguments to long options are mandatory for short options too. +-L, --dereference +follow links +-f, --file-system +display file system status instead of file status +-c --format=FORMAT +% +lvmsar — LVM system activity reporter +lvmsar +% +nsupdate - Dynamic DNS update utility +nsupdate [-d] [-D] [-L level] [[-g] | [-o] | [-l] | [-y [hmac:]keyname:secret] | [-k keyfile]] +[-t timeout] [-u udptimeout] [-r udpretries] [-R randomdev] [-v] [-T] [-P] [-V] [filename] +allows resource records to be added or removed from a zone without manually editing the zone file. A +single update request can contain requests to add or remove more than one resource record. +Zones that are under dynamic control via nsupdate or a DHCP server should not be edited by hand. Manual +edits could conflict with dynamic updates and cause data to be lost. +The resource records that are dynamically added or removed with nsupdate have to be in the same zone. +record. +% +grub-mkimage - make a bootable image of GRUB +grub-mkimage [OPTION...] [OPTION]... [MODULES] +Make a bootable image of GRUB. +-c, --config=FILE +embed FILE as an early config +-C, --compression=(xz|none|auto) +choose the compression to use for core image +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +% +getcap - examine file capabilities +getcap [-v] [-r] [-h] filename [ ... ] +getcap displays the name and capabilities of each specified +-r enables recursive search. +-v enables to display all searched entries, even if it has no file-capabilities. +-h prints quick usage. +filename +One file per line. +% +firewall-config - firewalld GUI configuration tool +firewall-config is a GUI configuration tool for firewalld. +firewall-config does not support any special options. The only options that can be used are the general +options that Gtk uses for Gtk application initialization. For more information on these options, please +have a look at the runtime documentation for Gtk. +The following options are supported: +-h, --help +Prints a short help text and exists. +% +rtmon - listens to and monitors RTnetlink +rtmon [ options ] file FILE [ all | LISTofOBJECTS ] +rtmon listens on netlink socket and monitors routing table changes. +rtmon can be started before the first network configuration command is issued. For example if you +insert: +rtmon file /var/log/rtmon.log +in a startup script, you will be able to view the full history later. Certainly, it is possible to start +rtmon at any time. It prepends the history with the state snapshot dumped at the moment of starting. +% +mkfs.cramfs - make compressed ROM file system +mkfs.cramfs [options] directory file +Files on cramfs file systems are zlib-compressed one page at a time to allow random read access. The +metadata is not compressed, but is expressed in a terse representation that is more space-efficient than +conventional file systems. +The file system is intentionally read-only to simplify its design; random write access for compressed +files is difficult to implement. cramfs ships with a utility (mkcramfs) to pack files into new cramfs +images. +% +named-rrchecker - syntax checker for individual DNS resource records +named-rrchecker [-h] [-o origin] [-p] [-u] [-C] [-T] [-P] +named-rrchecker read a individual DNS resource record from standard input and checks if it is +syntactically correct. +The -h prints out the help menu. +The -o origin option specifies a origin to be used when interpreting the record. +The -p prints out the resulting record in canonical form. If there is no canonical form defined then the +record will be printed in unknown record format. +The -u prints out the resulting record in unknown record form. +% +ing, otherwise the expansion of the FILES. +together with all the previous files. +Operation modes: +% +pvchange — change attributes of a physical volume +[--deltag Tag] [--metadataignore {y|n}] [-h|-?|--help] [--reportformat {basic|json}] [-S|--select Selec‐ +tion] [-t|--test] [-v|--verbose] [-a|--all] [-x|--allocatable {y|n}] [-u|--uuid] [PhysicalVolumePath...] +pvchange allows you to change the allocation permissions of one or more physical volumes. +-a, --all +If PhysicalVolumePath is not specified on the command line all physical volumes are searched for +and used. +% +Generate Makefile.in for configure from Makefile.am. +Operation modes: +--help print this help, then exit +--version +print version number, then exit +-v, --verbose +verbosely list files processed +% +ctrlaltdel - set the function of the Ctrl-Alt-Del combination +ctrlaltdel hard|soft +Based on examination of the linux/kernel/reboot.c code, it is clear that there are two supported func‐ +tions that the Ctrl-Alt-Del sequence can perform. +is the default. +soft Make the kernel send the SIGINT (interrupt) signal to the init process (this is always the process +version that you are currently using. +% +file — determine file type +file [-bcdEhiklLNnprsvzZ0] [--apple] [--extension] [--mime-encoding] [--mime-type] [-e testname] +[-F separator] [-f namefile] [-m magicfiles] [-P name=value] file ... +file -C [-m magicfiles] +file [--help] +file tests each argument in an attempt to classify it. There are three sets of tests, performed in this +order: filesystem tests, magic tests, and language tests. The first test that succeeds causes the file +type to be printed. +The type printed will usually contain one of the words text (the file contains only printing characters and +a few common control characters and is probably safe to read on an ASCII terminal), executable (the file +% +firewall-cmd - firewalld command line client +firewall-cmd is the command line client of the firewalld daemon. It provides interface to manage runtime +and permanent configuration. +things can get changed in the runtime or permanent configuration. +The following options are supported: +General Options +-h, --help +% +Reads a PIC program as input; produces an image file (by default in Portable Network Graphics format) +images of mathematical formulae. +PIC is a rather expressive graphics minilanguage suitable for producing box-and-arrow diagrams of the +kind frequently used in technical papers and textbooks. The language is sufficiently flexible to be +quite useful for state charts, Petri-net diagrams, flow charts, simple circuit schematics, jumper lay‐ +outs, and other kinds of illustration involving repetitive uses of simple geometric forms and splines. +Because PIC descriptions are procedural and object-based, they are both compact and easy to modify. +The PIC language is fully documented in Making Pictures With GNU PIC, a document which is part of the +% +gpasswd - administer /etc/group and /etc/gshadow +gpasswd [option] group +The gpasswd command is used to administer /etc/group, and /etc/gshadow. Every group can have +administrators, members and a password. +System administrators can use the -A option to define group administrator(s) and the -M option to define +members. They have all rights of group administrators and members. +gpasswd called by a group administrator with a group name only prompts for the new password of the group. +the password. +% +fmt - simple optimal text formatter +fmt [-WIDTH] [OPTION]... [FILE]... +Reformat each paragraph in the FILE(s), writing to standard output. The option -WIDTH is an abbreviated +form of --width=DIGITS. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --crown-margin +preserve indentation of first two lines +-p, --prefix=STRING +% +lvmdump [-a] [-c] [-d directory] [-h] [-l] [-m] [-p] [-s] [-u] +for submission along with a problem report. +The content of the tarball is as follows: +- dmsetup info +- table of currently running processes +- recent entries from /var/log/messages (containing system messages) +- complete lvm configuration and cache (content of /etc/lvm) +- list of device nodes present under /dev +- list of files present /sys/block +- list of files present /sys/devices/virtual/block +% +ldns-notify - notify DNS servers that updates are available +ldns-notify [options] -z zone servers +the master servers. It can perform TSIG signatures and it can add a SOA serial number of the updated +zone. If a server already has that serial number it will disregard the message. +-z zone +The zone that is updated. +-h Show usage and exit +-v Show the version and exit +% +mmroff - cross reference preprocessor +mmroff [ -x ] groff_arguments +mmroff is a simple preprocessor for groff, it is used for expanding cross references in mm, see +to do the real processing when the cross reference file is up to date. +isn't always needed to have accurate cross references and by using this option groff will only be +run once. +FILES +% +readelf - Displays information about ELF files. +readelf [-a|--all] +[-h|--file-header] +[-l|--program-headers|--segments] +[-S|--section-headers|--sections] +[-g|--section-groups] +[-t|--section-details] +[-e|--headers] +[-s|--syms|--symbols] +[--dyn-syms] +[-n|--notes] +[-r|--relocs] +[-u|--unwind] +[-d|--dynamic] +[-V|--version-info] +% +dumpkeys - dump keyboard translation tables +dumpkeys [ -hilfn -ccharset --help --short-info --long-info --numeric --full-table --funcs-only +--keys-only --compose-only --charset=charset ] +dumpkeys writes, to the standard output, the current contents of the keyboard driver's translation +Using the various options, the format of the output can be controlled and also other information from the +-h --help +Prints the program's version number and a short usage message to the program's standard error out‐ +put and exits. +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +numastat +numastat - Show per-NUMA-node memory statistics for processes and the operating system +numastat +numastat [-V] +numastat [<PID>|<pattern>...] +numastat [-c] [-m] [-n] [-p <PID>|<pattern>] [-s[<node>]] [-v] [-z] [<PID>|<pattern>...] +numastat with no command options or arguments at all, displays per-node NUMA hit and miss system statis‐ +previous long-standing numastat perl script, written by Andi Kleen. The default numastat statistics +shows per-node numbers (in units of pages of memory) in these categories: +% +jfs_logdump - dump a JFS formatted device's journal log +jfs_logdump [ -a ] device +jfs_logdump dumps the contents of the journal log from the specified JFS formatted device into output +file ./jfslog.dmp. +device is the special file name corresponding to the actual device from which the journal log will be +jfs_logdump must be run as root. +-a Dump the entire contents of the journal log instead of just the committed transactions since the +last synch point. +% +man - an interface to the on-line reference manuals +man [-C file] [-d] [-D] [--warnings[=warnings]] [-R encoding] [-L locale] [-m system[,...]] [-M path] [-S +list] [-e extension] [-i|-I] [--regex|--wildcard] [--names-only] [-a] [-u] [--no-subpages] [-P pager] [-r +prompt] [-7] [-E encoding] [--no-hyphenation] [--no-justification] [-p string] [-t] [-T[device]] +[-H[browser]] [-X[dpi]] [-Z] [[section] page ...] ... +man -k [apropos options] regexp ... +man -K [-w|-W] [-S list] [-i|-I] [--regex] [section] term ... +man -f [whatis options] page ... +man -l [-C file] [-d] [-D] [--warnings[=warnings]] [-R encoding] [-L locale] [-P pager] [-r prompt] [-7] +[-E encoding] [-p string] [-t] [-T[device]] [-H[browser]] [-X[dpi]] [-Z] file ... +man -w|-W [-C file] [-d] [-D] page ... +man -c [-C file] [-d] [-D] page ... +man [-?V] +% +scp — secure copy (remote file copy program) +needed for authentication. +file names containing ‘:’ as host specifiers. Copies between two remote hosts are also permitted. +The options are as follows: +% +xfs_quota - manage use of quota on XFS filesystems +xfs_quota [ -x ] [ -p prog ] [ -c cmd ] ... [ -d project ] ... [ -D projects_file ] [ -P projid_file ] [ +path ... ] +xfs_quota -V +xfs_quota is a utility for reporting and editing various aspects of filesystem quota. +The options to xfs_quota are: +gram exits. +-p prog Set the program name for prompts and some error messages, the default value is xfs_quota. +% +talk - Talk client +talk [OPTION...] person [ttyname] +Talk to another user. +-?, --help +give this help list +--usage +give a short usage message +-V, --version +print program version +% +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --decode +decode data +-i, --ignore-garbage +when decoding, ignore non-alphabet characters +% +addpart - tell the kernel about the existence of a partition +addpart device partition start length +addpart tells the Linux kernel about the existence of the specified partition. The command is a simple +wrapper around the "add partition" ioctl. +PARAMETERS +device The disk device. +partition +The partition number. +% +pvremove — remove a physical volume +[-f[f]|--force [--force]] [--reportformat {basic|json}] [-y|--yes] PhysicalVolume [PhysicalVolume...] +pvremove wipes the label on a device so that LVM will no longer recognise it as a physical volume. +-ff, --force --force +Force the removal of a physical volume belonging to an existing volume group. Normally vgre‐ +by some active logical volume. +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +sleep - delay for a specified amount of time +sleep NUMBER[SUFFIX]... +sleep OPTION +trary floating point number. Given two or more arguments, pause for the amount of time specified by the +sum of their values. +--help display this help and exit +--version +output version information and exit +% +vgcfgrestore — restore volume group descriptor area +vgcfgbackup. You can specify a backup file with --file. If no backup file is specified, the most recent +-l, --list +% +rtpr - replace backslashes with newlines. +rtpr is a trivial bash script which converts backslashes in standard input to newlines. It's sole purpose +is to be fed with input from ip when executed with it's --oneline flag. +ip --oneline address show | rtpr +Undo oneline converted ip-address output. +Stephen Hemminger <shemming@brocade.com> +% +useradd - create a new user or update default new user information +useradd [options] LOGIN +useradd -D +useradd -D [options] +When invoked without the -D option, the useradd command creates a new user account using the values +specified on the command line plus the default values from the system. Depending on command line options, +initial files. +By default, a group will also be created for the new user (see -g, -N, -U, and USERGROUPS_ENAB). +% +dnssec-keyfromlabel - DNSSEC key generation tool +[-D sync date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-i interval] [-k] +[-K directory] [-L ttl] [-n nametype] [-P date/offset] [-P sync date/offset] +[-p protocol] [-R date/offset] [-S key] [-t type] [-v level] [-V] [-y] {name} +dnssec-keyfromlabel generates a key pair of files that referencing a key object stored in a cryptographic +hardware service module (HSM). The private key file can be used for DNSSEC signing of zone data as if it +were a conventional signing key created by dnssec-keygen, but the key material is stored within the HSM, +and the actual signing takes place there. +key is being generated. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +chcpu - configure CPUs +chcpu -c|-d|-e|-g cpu-list +chcpu -p mode +chcpu -r|-h|-V +chcpu can modify the state of CPUs. It can enable or disable CPUs, scan for new CPUs, change the CPU +dispatching mode of the underlying hypervisor, and request CPUs from the hypervisor (configure) or return +CPUs to the hypervisor (deconfigure). +Some options have a cpu-list argument. Use this argument to specify a comma-separated list of CPUs. The +% +nologin - politely refuse a login +nologin [-V] [-h] +nologin displays a message that an account is not available and exits non-zero. It is intended as a +replacement shell field to deny login access to an account. +If the file /etc/nologin.txt exists, nologin displays its contents to the user instead of the default +message. +-h, --help +Display help text and exit. +% +pvs — report information about physical volumes +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--namepre‐ +fixes] [--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--rows] [--segments] +[--separator Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] [--unquoted] [-v|--verbose] [--ver‐ +sion] [PhysicalVolume [PhysicalVolume...]] +pvs produces formatted output about physical volumes. +% +agetty - alternative Linux getty +agetty [options] port [baud_rate...] [term] +agetty opens a tty port, prompts for a login name and invokes the /bin/login command. It is normally +agetty has several non-standard features that are useful for hardwired and for dial-in lines: +when it reads a login name. The program can handle 7-bit characters with even, odd, none or space +Control-U (kill); DEL and backspace (erase); carriage return and line feed (end of line). See +also the --erase-chars and --kill-chars options. +% +ldns-revoke - sets the revoke bit of a DNSKEY +ldns-revoke file +ldns-revoke is used to revoke a public DNSKEY RR. When run it will read file with a DNSKEY RR in it, +sets the revoke bit and write back the output to file . +-n Write the result to stdout instead of a file +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +ebtables [-t table ] -[ACDI] chain rule specification [match extensions] [watcher extensions] target +ebtables [-t table ] -P chain ACCEPT | DROP | RETURN +ebtables [-t table ] -F [chain] +ebtables [-t table ] -Z [chain] +ebtables [-t table ] -N chain [-P ACCEPT | DROP | RETURN] +ebtables [-t table ] -X [chain] +ebtables [-t table ] -E old-chain-name new-chain-name +ebtables [-t table ] --init-table +ebtables [-t table ] [--atomic-file file] --atomic-commit +ebtables [-t table ] [--atomic-file file] --atomic-init +ebtables [-t table ] [--atomic-file file] --atomic-save +% +yacc - GNU Project parser generator +yacc [OPTION]... FILE +information. +Written by Paul Eggert. +REPORTING BUGS +Report bugs to <bug-bison@gnu.org>. +% +systemd-analyze - Analyze system boot-up performance +% +dnssec-revoke - set the REVOKED bit on a DNSSEC key +dnssec-revoke [-hr] [-v level] [-V] [-K directory] [-E engine] [-f] [-R] {keyfile} +creates a new pair of key files containing the now-revoked key. +-h +Emit usage message and exit. +-K directory +Sets the directory in which the key files are to reside. +-r +% +lspci - list all PCI devices +lspci [options] +lspci is a utility for displaying information about PCI buses in the system and devices connected to +them. +By default, it shows a brief list of devices. Use the options described below to request either a more +verbose output or output intended for parsing by other programs. +If you are going to report bugs in PCI device drivers or in lspci itself, please include output of "lspci +-vvx" or even better "lspci -vvxxx" (however, see below for possible caveats). +Some parts of the output, especially in the highly verbose modes, are probably intelligible only to expe‐ +rienced PCI hackers. For exact definitions of the fields, please consult either the PCI specifications or +% +screen [ -options ] [ cmd [ args ] ] +screen -r [[pid.]tty[.host]] +screen -r sessionowner/[[pid.]tty[.host]] +Screen is a full-screen window manager that multiplexes a physical terminal between several processes +dards (e.g. insert/delete line and support for multiple character sets). There is a scrollback history +buffer for each virtual terminal and a copy-and-paste mechanism that allows moving text regions between +windows. +When screen is called, it creates a single window with a shell in it (or the specified command) and then +gets out of your way so that you can use the program as you normally would. Then, at any time, you can +% +kernel-install - Add and remove kernel and initramfs images to and from /boot +kernel-install is used to install and remove kernel and initramfs images to and from /boot. +kernel-install will execute the files located in the directory /usr/lib/kernel/install.d/ and the local +administration directory /etc/kernel/install.d/. All files are collectively sorted and executed in +lexical order, regardless of the directory in which they live. However, files with identical filenames +replace each other. Files in /etc/kernel/install.d/ take precedence over files with the same name in +if needed; a symbolic link in /etc/kernel/install.d/ with the same name as an executable in +/usr/lib/kernel/install.d/, pointing to /dev/null, disables the executable entirely. Executables must +have the extension ".install"; other extensions are ignored. +% +setterm - set terminal attributes +setterm [options] +setterm writes to standard output a character string that will invoke the specified terminal capabili‐ +ties. Where possible terminfo is consulted to find the string to use. Some options however (marked +minal type is "con" or "linux" the string that invokes the specified capabilities on the PC Minix virtual +console driver is output. Options that are not implemented by the terminal are ignored. +For boolean options (on or off), the default is on. +% +mapscrn - load screen output mapping table +mapscrn [-v] [-o map.orig] mapfile +The mapscrn command is obsolete - its function is now built-in into setfont. However, for backwards com‐ +patibility it is still available as a separate command. +The mapscrn command loads a user defined output character mapping table into the console driver. The con‐ +character set. When the -o option is given, the old map is saved in map.orig. +USE +There are two kinds of mapping tables: direct-to-font tables, that give a font position for each user +byte value, and user-to-unicode tables that give a unicode value for each user byte. The corresponding +% +lvcreate - create a logical volume in an existing volume group +lvcreate [-a|--activate [a][e|l|s]{y|n}] [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup +{y|n}] [-H|--cache] [--cachemode {passthrough|writeback|writethrough}] [--cachepolicy Policy] +[--cachepool CachePoolLogicalVolume] [--cachesettings Key=Value] [-c|--chunksize ChunkSize] [--command‐ +[--errorwhenfull {y|n}] [{-l|--extents LogicalExtentsNumber[%{FREE|PVS|VG}] | -L|--size LogicalVolume‐ +Size} [-i|--stripes Stripes [-I|--stripesize StripeSize]]] [-h|-?|--help] [-K|--ignoreactivationskip] +Mirrors [--corelog|--mirrorlog {disk|core|mirrored}] [--nosync] [-R|--regionsize MirrorLogRegionSize]] +[--monitor {y|n}] [-n|--name LogicalVolume] [--noudevsync] [-p|--permission {r|rw}] [-M|--persistent +{y|n}] [--poolmetadatasize MetadataVolumeSize] [--poolmetadataspare {y|n}] [--[raid]maxrecoveryrate Rate] +[--[raid]minrecoveryrate Rate] [-r|--readahead {ReadAheadSectors|auto|none}] [--reportformat +{basic|json}] [-k|--setactivationskip {y|n}] [-s|--snapshot] [-V|--virtualsize VirtualSize] [-t|--test] +[-T|--thin] [--thinpool ThinPoolLogicalVolume] [--type SegmentType] [-v|--verbose] [-W|--wipesignatures +{y|n}] [-Z|--zero {y|n}] [VolumeGroup | {ExternalOrigin|Origin|Pool}LogicalVolume +% +renice - alter priority of running processes +renice [-n] priority [-g|-p|-u] identifier... +renice alters the scheduling priority of one or more running processes. The first argument is the prior‐ +ity value to be used. The other arguments are interpreted as process IDs (by default), process group +IDs, user IDs, or user names. renice'ing a process group causes all processes in the process group to +have their scheduling priority altered. renice'ing a user causes all processes owned by the user to have +their scheduling priority altered. +-n, --priority priority +Specify the scheduling priority to be used for the process, process group, or user. Use of the +option -n or --priority is optional, but when used it must be the first argument. +% +eqn - format equations for troff or MathML +eqn [-rvCNR] [-d xy] [-T name] [-M dir] [-f F] [-s n] [-p n] [-m n] [files...] +eqn compiles descriptions of equations embedded within troff input files into commands that are under‐ +stood by troff. Normally, it should be invoked using the -e option of groff. The syntax is quite com‐ +patible with Unix eqn. The output of GNU eqn cannot be processed with Unix troff; it must be processed +with GNU troff. If no files are given on the command line, the standard input is read. A filename of - +causes the standard input to be read. +eqn searches for the file eqnrc in the directories given with the -M option first, then in +/usr/lib/groff/site-tmac, /usr/share/groff/site-tmac, and finally in the standard macro directory +option prevents this. +% +who - show who is logged on +Print information about users who are currently logged in. +-a, --all +same as -b -d --login -p -r -t -T -u +-b, --boot +time of last system boot +-d, --dead +print dead processes +% +vgconvert - convert volume group metadata format +tor] [--bootloaderareasize size] [-M|--metadatatype type] [--pvmetadatacopies NumberOfCopies] [--meta‐ +into the same space. +Examples +% +zgrep - search possibly compressed files for a regular expression +zgrep [ grep_options ] [ -e ] pattern filename... +Zgrep invokes grep on compressed or gzipped files. All options specified are passed directly to grep. +If no file is specified, then the standard input is decompressed if necessary and fed to grep. Otherwise +the given files are uncompressed if necessary and fed to grep. +If the GREP environment variable is set, zgrep uses it as the grep program to be invoked. +BUGS +The following grep options are not supported: --dereference-recursive (-R), --directories (-d), +% +fdisk - manipulate disk partition table +fdisk [options] device +fdisk -l [device...] +fdisk is a dialog-driven program for creation and manipulation of partition tables. It understands GPT, +MBR, Sun, SGI and BSD partition tables. +in the partition table, usually found in sector 0 of the disk. (In the BSD world one talks about `disk +slices' and a `disklabel'.) +All partitioning is driven by device I/O limits (the topology) by default. fdisk is able to optimize the +% +truncate - shrink or extend the size of a file to the specified size +truncate OPTION... FILE... +Shrink or extend the size of each FILE to the specified size +A FILE argument that does not exist is created. +If a FILE is larger than the specified size, the extra data is lost. If a FILE is shorter, it is +extended and the extended part (hole) reads as zero bytes. +Mandatory arguments to long options are mandatory for short options too. +-c, --no-create +do not create any files +% +gpinyin - Chinese European-like writing within groff +gpinyin [-] [--] [ filespec ....] +gpinyin -h|--help +gpinyin -v|--version +groff(7) files. +Breaking Options +An option is breaking, when the program just writes the information that was asked for and then stops. +All other arguments will be ignored by that. The breaking options are here +-h | --help +% +neqn - format equations for ascii output +neqn [eqn options] +device. +for very simple input). +% +rndc-confgen - rndc key generation tool +rndc-confgen [-a] [-A algorithm] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port] [-r randomfile] +[-s address] [-t chrootdir] [-u user] +rndc-confgen generates configuration files for rndc. It can be used as a convenient alternative to +writing the rndc.conf file and the corresponding controls and key statements in named.conf by hand. +Alternatively, it can be run with the -a option to set up a rndc.key file and avoid the need for a +rndc.conf file and a controls statement altogether. +-a +specified as when BIND was built) that is read by both rndc and named on startup. The rndc.key file +defines a default command channel and authentication key allowing rndc to communicate with named on +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +pathchk - check whether file names are valid or portable +Diagnose invalid or unportable file names. +-p check for most POSIX systems +-P check for empty names and leading "-" +--portability +check for all POSIX systems (equivalent to -p -P) +--help display this help and exit +% +-b print the blocks which are reserved as bad in the filesystem. +-o superblock=superblock +by a filesystem wizard who is examining the remains of a very badly corrupted filesystem. +% +arp - manipulate the system ARP cache +arp [-vn] [-H type] [-i if] [-ae] [hostname] +arp [-v] [-i if] -d hostname [pub] +arp [-v] [-H type] [-i if] -s hostname hw_addr [temp] +arp [-v] [-H type] [-i if] -s hostname hw_addr [netmask nm] pub +arp [-v] [-H type] [-i if] -Ds hostname ifname [netmask nm] pub +arp [-vnD] [-H type] [-i if] -f [filename] +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +iptables [-t table] {-A|-C|-D} chain rule-specification +ip6tables [-t table] {-A|-C|-D} chain rule-specification +iptables [-t table] -I chain [rulenum] rule-specification +iptables [-t table] -R chain rulenum rule-specification +iptables [-t table] -D chain rulenum +iptables [-t table] -S [chain [rulenum]] +iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] +% +false - do nothing, unsuccessfully +false [ignored command line arguments] +false OPTION +Exit with a status code indicating failure. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +objcopy - copy and translate object files +objcopy [-F bfdname|--target=bfdname] +[-I bfdname|--input-target=bfdname] +[-O bfdname|--output-target=bfdname] +[-B bfdarch|--binary-architecture=bfdarch] +[-S|--strip-all] +[-g|--strip-debug] +[-K symbolname|--keep-symbol=symbolname] +[-N symbolname|--strip-symbol=symbolname] +[--strip-unneeded-symbol=symbolname] +[-G symbolname|--keep-global-symbol=symbolname] +[--localize-hidden] +[-L symbolname|--localize-symbol=symbolname] +[--globalize-symbol=symbolname] +[-W symbolname|--weaken-symbol=symbolname] +% +Set up images to boot from DEVICE. +You should not normally run this program directly. Use grub-install instead. +-a, --allow-floppy +make the drive also bootable as floppy (default for fdX devices). May break on some BIOSes. +-b, --boot-image=FILE +use FILE as the boot image [default=boot.img] +-c, --core-image=FILE +% +xtotroff - convert X font metrics into GNU troff font metrics +xtotroff [ -rresolution ] [ -spoint-size ] [ -v ] FontMap +fonts listed. Each line in FontMap consists of GNU troff font name and an X font name (XLFD) pattern, +separated by whitespace. Example: +The wildcards in the patterns are filled with the arguments to the -r and -s switches. If a font name is +still ambiguous, xtotroff aborts. +It is possible to have whitespace between a command line option and its parameter. +% +lvm [command|file] +If lvm is invoked with no arguments it presents a readline prompt (assuming it was compiled with readline +If lvm is invoked with argv[0] set to the name of a specific LVM command (for example by using a hard or +soft link) it acts as that command. +On invocation, lvm requires that only the standard file descriptors stdin, stdout and stderr are avail‐ +% +sulogin - single-user login +sulogin [options] [tty] +sulogin is invoked by init when the system goes into single-user mode. +The user is prompted: +Give root password for system maintenance +(or type Control-D for normal startup): +If the root account is locked and --force is specified, no password is required. +sulogin will be connected to the current terminal, or to the optional tty device that can be specified on +the command line (typically /dev/console). +% +mail -h | --help +mail [-BDdEFintv~] [-A account] [-a attachment] [-b bcc-addr] [-c cc-addr] [-q quote-file] [-r from-addr] +[-S variable[=value]] [-s subject] [-X cmd] [-.] to-addr ... [-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-X cmd] -f [file] +[-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-u user] [-X cmd] +[-- mta-option ...] +% +curl-config - Get information about a libcurl installation +curl-config [options] +curl-config displays information about the curl and libcurl installation. +--ca Displays the built-in path to the CA cert bundle this libcurl uses. +--cc Displays the compiler used to build libcurl. +--cflags +Set of compiler options (CFLAGS) to use when compiling files that use libcurl. Currently that is +only the include path to the curl include files. +% +grn - groff preprocessor for gremlin files +grn [ -Cv ] [ -Tdev ] [ -Mdir ] [ -Fdir ] [ file... ] +grn is a preprocessor for including gremlin pictures in groff input. grn writes to standard output, pro‐ +cessing only input lines between two that start with .GS and .GE. Those lines must contain grn commands +(see below). These commands request a gremlin file, and the picture in that file is converted and placed +justify the whole gremlin picture (default justification is center). If no file is mentioned, the stan‐ +dard input is read. At the end of the picture, the position on the page is the bottom of the gremlin +picture. If the grn entry is ended with .GF instead of .GE, the position is left at the top of the pic‐ +ture. +Please note that currently only the -me macro package has support for .GS, .GE, and .GF. +% +lvreduce — reduce the size of a logical volume +[-v|--verbose] [--version] [-f|--force] [--noudevsync] {-l|--extents [-]LogicalExtentsNum‐ +ber[%{VG|LV|FREE|ORIGIN}] | -L|--size [-]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [-n|--nofsck] [--reportfor‐ +lvreduce allows you to reduce the size of a logical volume. Be careful when reducing a logical volume's +size, because data in the reduced part is lost!!! +You should therefore ensure that any filesystem on the volume is resized before running lvreduce so that +the extents that are to be removed are not in use. +Sizes will be rounded if necessary - for example, the volume size must be an exact number of extents and +the size of a striped segment must be a multiple of the number of stripes. +% +grub-glue-efi - generate a fat binary for EFI +-o, --output=FILE +% +lkbib - search bibliographic databases +lkbib [ -v ] [ -ifields ] [ -pfilename ] [ -tn ] key... +lkbib searches bibliographic databases for references that contain the keys key... and prints any refer‐ +ences found on the standard output. lkbib will search any databases given by -p options, and then a +default database. The default database is taken from the REFER environment variable if it is set, other‐ +wise it is /usr/dict/papers/Ind. For each database filename to be searched, if an index filename.i cre‐ +It is possible to have whitespace between a command line option and its parameter. +-v Print the version number. +% +should give you access to the complete manual. +% +delpart - tell the kernel to forget about a partition +delpart device partition +delpart asks the Linux kernel to forget about the specified partition (a number) on the specified device. +The command is a simple wrapper around the "del partition" ioctl. +AVAILABILITY +The delpart command is part of the util-linux package and is available from ftp://ftp.ker‐ +nel.org/pub/linux/utils/util-linux/. +% +zramctl - set up and control zram devices +Get info: +zramctl [options] +Reset zram: +zramctl -r zramdev... +Print name of first unused zram device: +zramctl -f +Set up a zram device: +% +gpg-connect-agent - Communicate with a running agent +gpg-connect-agent [options][commands] +The gpg-connect-agent is a utility to communicate with a running gpg-agent. It is useful to check out +the commands gpg-agent provides using the Assuan interface. It might also be useful for scripting simple +applications. Input is expected at stdin and out put gets printed to stdout. +It is very similar to running gpg-agent in server mode; but here we connect to a running instance. +-v +--verbose +Output additional information while running. +% +gxditview - display groff intermediate output files +gxditview [-toolkitoption ...] [-option ...] [filename] +several ways to use gxditview. +gxditview filename. If filename is -, gxditview will read the standard input; filename cannot be omit‐ +ted. The groff intermediate output is different for all devices. gxditview can view it for all devices, +but the quality is device dependent. +The best results are achieved with the X* devices for groff's option -T. There are four X* devices: +% +wdctl - show hardware watchdog status +wdctl [options] [device...] +Show hardware watchdog status. The default device is /dev/watchdog. If more than one device is speci‐ +fied then the output is separated by one blank line. +-f, --flags list +Print only the specified flags. +-F, --noflags +Do not print information about flags. +% +grub-mkstandalone - make a memdisk-based GRUB image +grub-mkstandalone [OPTION...] [OPTION] SOURCE... +Generate a standalone image (containing all modules) in the selected format +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +nslookup - query Internet name servers interactively +nslookup [-option] [name | -] [server] +Nslookup is a program to query Internet domain name servers. Nslookup has two modes: interactive and +non-interactive. Interactive mode allows the user to query name servers for information about various +hosts and domains or to print a list of hosts in a domain. Non-interactive mode is used to print just the +name and requested information for a host or domain. +% +grub-render-label - generate a .disk_label for Apple Macs. +Render Apple .disk_label. +-b, --bgcolor=COLOR +use COLOR for background +-c, --color=COLOR +use COLOR for text +-f, --font=FILE +% +ar - create, modify, and extract from archives +The GNU ar program creates, modifies, and extracts from archives. An archive is a single file holding a +collection of other files in a structure that makes it possible to retrieve the original individual files +(called members of the archive). +The original files' contents, mode (permissions), timestamp, owner, and group are preserved in the +archive, and can be restored on extraction. +GNU ar can maintain archives whose members have names of any length; however, depending on how ar is +% +btrfs-image - create/restore an image of the filesystem +btrfs-image [options] <source> <target> +btrfs-image is used to create an image of a btrfs filesystem. All data will be zeroed, but metadata and +the like is preserved. Mainly used for debugging purposes. +In the dump mode, source is the btrfs device/file and target is the output file (use - for stdout). +In the restore mode (option -r), source is the dumped image and target is the btrfs device/file. +-r +primary device, so that file system can be restored by running tree log reply if possible. To restore +% +jfs_mkfs - create a JFS formatted partition +jfs_mkfs [options] device [ blocks ] +jfs_mkfs is used to create (format) a JFS partition. jfs_mkfs must be run as root. +system and/or JFS journal will be created. blocks is the number of blocks to be used for the file sys‐ +tem. If omitted, jfs_mkfs automatically figures the file system size. +WARNING +jfs_mkfs will destroy all data on the specified device! +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +btrfs-inspect-internal - query various internal information +btrfs inspect-internal <subcommand> <args> +simple UI to an ioctl or a more complex query that assembles the result from several internal structures. +The latter usually requires calls to privileged ioctls. +dump-super [options] <device> [device...] +(replaces the standalone tool btrfs-show-super) +Show btrfs superblock information stored on given devices in textual form. By default the first +superblock is printed, more details about all copies or additional backup data can be printed. +% +vdir - list directory contents +vdir [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +ul - do underlining +ul [options] [file...] +ul reads the named files (or standard input if none are given) and translates occurrences of underscores +to the sequence which indicates underlining for the terminal in use, as specified by the environment +variable TERM. The terminfo database is read to determine the appropriate sequences for underlining. If +the terminal is incapable of underlining but is capable of a standout mode, then that is used instead. +terminal cannot underline, underlining is ignored. +-i, --indicated +Underlining is indicated by a separate line containing appropriate dashes `-'; this is useful when +you want to look at the underlining which is present in an nroff output stream on a crt-terminal. +% +systool - view system device information by bus, class, and topology +systool [options [device]] +Calling systool without parameters will present all available bus types, device classes, and root +devices. +When device is supplied, the information reqested by options is shown only for the specified device, oth‐ +erwise all present devices are displayed. +systool uses APIs provided by libsysfs to gather information. systool runs only on Linux systems running +-a Show attributes of the requested resource +% +udevadm - udev management tool +udevadm [--debug] [--version] [--help] +udevadm info options +udevadm trigger [options] +udevadm settle [options] +udevadm control command +udevadm monitor [options] +udevadm test [options] devpath +% +true - do nothing, successfully +true [ignored command line arguments] +true OPTION +Exit with a status code indicating success. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +loadunimap - load the kernel unicode-to-font mapping table +loadunimap [ -C console ] [ -o oldmap ] [ map ] +The loadunimap command is obsolete - its function is now built-in into setfont. However, for backwards +compatibility it is still available as a separate command. +The program loadunimap loads the specified map in the kernel unicode-to-font mapping table. If no map is +given def is assumed. The default extension (that can be omitted) is .uni. +If the -o oldmap option is given, the old map is saved in the file specified. +Usually one does not call loadunimap directly - its function is also built into setfont. +% +keytab. +operation must be one of the following: +list Lists the keys in a keytab showing version number and principal name. +change Uses the kadmin protocol to update the keys in the Kerberos database to new randomly-generated +keys, and updates the keys in the keytab to match. If a key's version number doesn't match the +version number stored in the Kerberos server's database, then the operation will fail. Old keys +are retained in the keytab so that existing tickets continue to work. If the -i flag is given, +% +hostid - print the numeric identifier for the current host +hostid [OPTION] +Print the numeric identifier (in hexadecimal) for the current host. +--help display this help and exit +--version +output version information and exit +Written by Jim Meyering. +REPORTING BUGS +% +kdestroy - destroy Kerberos tickets +kdestroy [-A] [-q] [-c cache_name] +The kdestroy utility destroys the user's active Kerberos authorization tickets by overwriting and delet‐ +ing the credentials cache that contains them. If the credentials cache is not specified, the default +credentials cache is destroyed. +-A Destroys all caches in the collection, if a cache collection is available. +-q Run quietly. Normally kdestroy beeps if it fails to destroy the user's tickets. The -q flag sup‐ +presses this behavior. +-c cache_name +% +sysctl - configure kernel parameters at runtime +sysctl [options] [variable[=value]] [...] +sysctl -p [file or regexp] [...] +sysctl is used to modify kernel parameters at runtime. The parameters available are those listed under +/proc/sys/. Procfs is required for sysctl support in Linux. You can use sysctl to both read and write +sysctl data. +PARAMETERS +variable +The name of a key to read from. An example is kernel.ostype. The '/' separator is also accepted +in place of a '.'. +variable=value +% +ldns-testns - simple fake nameserver tool +ldns-testns [ OPTION ] datafile +ldns-testns can be used to provide answers to DNS queries for testing. The answers are premade, and can +be tailored to testing needs. The answers can be wildly invalid or unparseable. +ldns-testns is not meant for production use. +% +ipcrm - remove certain IPC resources +ipcrm [options] +ipcrm {shm|msg|sem} id... +ipcrm removes System V interprocess communication (IPC) objects and associated data structures from the +system. In order to delete such objects, you must be superuser, or the creator or owner of the object. +System V IPC objects are of three types: shared memory, message queues, and semaphores. Deletion of a +message queue or semaphore object is immediate (regardless of whether any process still holds an IPC +identifier for the object). A shared memory object is only removed after all currently attached pro‐ +Two syntax styles are supported. The old Linux historical syntax specifies a three-letter keyword indi‐ +% +ptx - produce a permuted index of file contents +ptx [OPTION]... [INPUT]... (without -G) +ptx -G [OPTION]... [INPUT [OUTPUT]] +Output a permuted index, including context, of the words in the input files. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-A, --auto-reference +output automatically generated references +-G, --traditional +% +awk — pattern scanning and processing language +awk [−F sepstring] [−v assignment]... program [argument...] +awk [−F sepstring] −f progfile [−f progfile]... [−v assignment]... +[argument...] +The awk utility shall execute programs written in the awk programming language, which is specialized for +textual data manipulation. An awk program is a sequence of patterns and corresponding actions. When input +is read that matches a pattern, the action associated with that pattern is carried out. +% +ln - make links between files +ate hard links by default, symbolic links with --symbolic. By default, each destination (name of new +link) should not already exist. When creating hard links, each TARGET must exist. Symbolic links can +hold arbitrary text; if later resolved, a relative link is interpreted in relation to its parent direc‐ +tory. +Mandatory arguments to long options are mandatory for short options too. +% +dbus-test-tool - D-Bus traffic generator and test tool +--empty] [--payload=S | --stdin | --message-stdin | --random-size] +dbus-test-tool is a multi-purpose tool for debugging and profiling D-Bus. +dbus-test-tool black-hole connects to D-Bus, optionally requests a name, then does not reply to messages. +It normally reads and discards messages from its D-Bus socket, but can be configured to sleep forever +without reading. +% +switch_root - switch to another filesystem as the root of the mount tree +switch_root [-hV] +switch_root newroot init [arg...] +switch_root moves already mounted /proc, /dev, /sys and /run to newroot and makes newroot the new root +filesystem and starts init process. +WARNING: switch_root removes recursively all files and directories on the current root filesystem. +-h, --help +Display help text and exit. +% +isc-config.sh - Get information about the installed version of ISC BIND +isc-config.sh [--cflags] [--exec-prefix] [--libs] [--prefix] [--version] [libraries...] +isc-config.sh prints information related to the installed version of ISC BIND, such as the compiler and +linker flags required to compile and link programs that use ISC BIND libraries. +The optional libraries are used to report specific details for compiling and linking for the listed +listed on the command line. (Some libraries require other libraries, so are implied.) +--cflags +Prints the compiler command line options required to compile files that use ISC BIND. Use the +libraries command line argument(s) to print additional specific flags to pass to the C compiler. +% +xfs_bmap - print block mapping for an XFS file +xfs_bmap [ -adlpv ] [ -n num_extents ] file +xfs_bmap -V +xfs_bmap prints the map of disk blocks used by files in an XFS filesystem. The map lists each extent +used by the file, as well as regions in the file that do not have any corresponding blocks (holes). Each +line of the listings takes the following form: +extent: [startoffset..endoffset]: startblock..endblock +Holes are marked by replacing the startblock..endblock with hole. All the file offsets and disk blocks +% +c99 — compile standard C programs +c99 [options...] pathname [[pathname] [−I directory] +[−L directory] [−l library]]... +The c99 utility is an interface to the standard C compilation system; it shall accept source code con‐ +forming to the ISO C standard. The system conceptually consists of a compiler and link editor. The input +files referenced by pathname operands and −l option-arguments shall be compiled and linked to produce an +executable file. (It is unspecified whether the linking occurs entirely within the operation of c99; some +% +lvmconfig, lvm dumpconfig, lvm config — Display LVM configuration +lvmconfig [-f|--file Filename] [--type {current|default|diff|full|list|missing|new|profilable|profilable- +command|profilable-metadata}] [--atversion Version] [--sinceversion Version] [--ignoreadvanced] +[--ignoreunsupported] [--ignorelocal] [-l|--list] [--config ConfigurationString] [--commandprofile Pro‐ +[--showunsupported] [--validate] [--withsummary] [--withcomments] [--withspaces] [--withversions] [Con‐ +figurationNode...] +lvmconfig produces formatted output from the LVM configuration tree. The command was added in release +-f, --file Filename +Send output to a file named 'filename'. +% +ntp-wait - Wait for ntpd to stabilize the system clock +ntp-wait [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +the boot sequence until after ntpd -g has set the time. +-n number, --tries=number +% +mtr - a network diagnostic tool +[--raw] [--csv] [--json] [--split] [--no-dns] [--show-ips] [-o FIELDS] [-y IPINFO] [--aslookup] +[-i INTERVAL] [-c COUNT] [-s PACKETSIZE] [-B BITPATTERN] [-G GRACEPERIOD] [-Q TOS] [--mpls] [-a ADDRESS] +[-f FIRST-TTL] [-m MAX-TTL] [-U MAX-UNKNOWN] [--udp] [--tcp] [-P PORT] [-L LOCALPORT] [-Z TIMEOUT] +mtr combines the functionality of the traceroute and ping programs in a single network diagnostic tool. +ing packets with purposely low TTLs. It continues to send packets with low TTL, noting the response time +a bad (or simply overloaded) link. +% +runcon - run command with specified security context +by one or more of LEVEL, ROLE, TYPE, and USER. +If none of -c, -t, -u, -r, or -l, is specified, the first argument is used as the complete context. Any +rent security context. +% +reiserfstune - The tunning tool for the ReiserFS filesystem. +reiserfstune [ -f ] [ -h | --help ] [ -j | --journal-device FILE ] [ --no-journal-available ] [ --jour‐ +nal-new-device FILE ] [ --make-journal-standard ] [ -s | --journal-new-size N ] [ -o | --journal-new-off‐ +set N ] [ -t | --max-transaction-size N ] [ -b | --add-badblocks file ] [ -B | --badblocks file ] [ -u | +--uuid UUID ] [ -l | --label LABEL ] [ -c | --check-interval interval-in-days ] [ -C | --time-last- +checked timestamp ] [ -m | --max-mnt-count count ] [ -M | --mnt-count count ] device +reiserfstune is used for tuning the ReiserFS. It can change two journal parameters (the journal size and +the maximum transaction size), and it can move the journal's location to a new specified block device. +the relocated journal was implemented for a special release of ReiserFS, and was not expected to be put +you must apply a special patch. Without this patch the kernel will refuse to mount the newly modified +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +psfstriptable - remove the embedded Unicode character table from a console font +psfstriptable fontfile outfile +psfstriptable reads a .psf format console font from fontfile, removes the embedded Unicode font table if +there is one, and writes the result to outfile. An input file name of "-" denotes standard input, and an +output file name of "-" denotes standard output. +% +btrfs-convert [options] <device> +Warning +The conversion utilizes free space of the original filesystem. The exact estimate of the required space +cannot be foretold. The final btrfs metadata might occupy several gigabytes on a hundreds-gigabyte +filesystem. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +kvno - print key version numbers of Kerberos principals +kvno acquires a service ticket for the specified Kerberos principals and prints out the key version num‐ +bers of each. +-c ccache +Specifies the name of a credentials cache to use (if not the default) +-e etype +Specifies the enctype which will be requested for the session key of all the services named on the +% +strfile - create a random access file for storing strings +unstr - dump strings in pointer order +strfile [-iorsx] [-c char] sourcefile [outputfile] +unstr [-c char] datafile[.ext] [outputfile] +strfile reads a file containing groups of lines separated by a line containing a single percent `%' sign +(or other specified delimiter character) and creates a data file which contains a header structure and a +The output file, if not specified on the command line, is named sourcefile.dat. +The purpose of unstr is to undo the work of strfile. It prints out the strings contained in the source‐ +file, which is datafile.ext without its extension, or datafile if no extension is specified (in this +% +msgcmp - compare message catalog and template +msgcmp [OPTION] def.po ref.pot +Compare two Uniforum style .po files to check that both contain the same set of msgid strings. The +def.po file is an existing PO file with the translations. The ref.pot file is the last created PO file, +lated each and every message in your program. Where an exact match cannot be found, fuzzy matching is +used to produce better diagnostics. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +def.po translations +% +anacron - runs commands periodically +anacron [-s] [-f] [-n] [-d] [-q] [-t anacrontab] [-S spooldir] [job] +anacron [-S spooldir] -u [-t anacrontab] [job] +anacron [-V|-h] +anacron -T [-t anacrontab] +does not assume that the machine is running continuously. Hence, it can be used on machines that are not +contains the list of jobs that Anacron controls. Each job entry specifies a period in days, a delay in +minutes, a unique job identifier, and a shell command. +% +cut - remove sections from each line of files +cut OPTION... [FILE]... +Print selected parts of lines from each FILE to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --bytes=LIST +select only these bytes +-c, --characters=LIST +select only these characters +% +pactree - package dependency tree viewer +pactree [options] package +Pactree produces a dependency tree for a package. +By default, a tree-like output is generated, but with the --graph option, a Graphviz description is +generated. +-a, --ascii +Use ASCII characters for tree formatting. By default, pactree will use Unicode line drawing +characters if it is able to detect that the locale supports them. +-b, --dbpath +% +zic - timezone compiler +zic [ -v ] [ -d directory ] [ -l localtime ] [ -p posixrules ] [ -L leapsecondfilename ] [ -s ] [ -y com‐ +mand ] [ filename ... ] +Zic reads text from the file(s) named on the command line and creates the time conversion information +files specified in this input. If a filename is -, the standard input is read. +These options are available: +-d directory +Create time conversion information files in the named directory rather than in the standard direc‐ +tory named below. +-l timezone +% +sfdisk - display or manipulate a disk partition table +sfdisk [options] device [-N partition-number] +sfdisk [options] command +sfdisk is a script-oriented tool for partitioning any block device. +functionality for CHS (Cylinder-Head-Sector) addressing. CHS has never been important for Linux, and +this addressing concept does not make any sense for new devices. +tive sizes are specified, or when the default values are used. +% +groupmod - modify a group definition on the system +groupmod [options] GROUP +The groupmod command modifies the definition of the specified GROUP by modifying the appropriate entry in +the group database. +The options which apply to the groupmod command are: +-g, --gid GID +The group ID of the given GROUP will be changed to GID. +option is used. +% +lessecho - expand metacharacters +lessecho [-ox] [-cx] [-pn] [-dn] [-mx] [-nn] [-ex] [-a] file ... +lessecho is a program that simply echos its arguments on standard output. But any metacharacter in the +output is preceded by an "escape" character, which by default is a backslash. +A summary of options is included below. +-ex Specifies "x", rather than backslash, to be the escape char for metachars. If x is "-", no escape +char is used and arguments containing metachars are surrounded by quotes instead. +-ox Specifies "x", rather than double-quote, to be the open quote character, which is used if the -e- +option is specified. +% +mcookie - generate magic cookies for xauth +mcookie [options] +usage: +xauth add :0 . `mcookie` +the sources /dev/urandom, /dev/random, or the libc pseudo-random functions, in this preference order. +-f, --file file +Use this file as an additional source of randomness. When file is '-', characters are read from +% +haveged - Generate random numbers and feed linux random device. +haveged [options] +haveged generates an unpredictable stream of random numbers harvested from the indirect effects of hard‐ +ware events on hidden processor state (caches, branch predictors, memory translation tables, etc) using +the HAVEGE (HArdware Volatile Entropy Gathering and Expansion) algorithm. The algorithm operates in user +space, no special privilege is required for file system access to the output stream. +Linux pools randomness for distribution by the /dev/random and /dev/urandom device interfaces. The stan‐ +fill the /dev/random pool whenever the supply of random bits in /dev/random falls below the low water +mark of the device. +% +pluginviewer - list loadable SASL plugins and their properties +pluginviewer [-a] [-s] [-c] [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECHS] [-x AUXPROP_MECH] [-f FLAGS] +[-p PATH] +pluginviewer can be used by a server administrator to troubleshoot SASL installations. The utility can +list loadable (properly configured) client and server side plugins, as well as auxprop plugins. +-a List auxprop plugins. +-s List server authentication (SASL) plugins. +-c List client authentication (SASL) plugins. +% +date - print or set the system date and time +date [OPTION]... [+FORMAT] +date [-u|--utc|--universal] [MMDDhhmm[[CC]YY][.ss]] +Display the current time in the given FORMAT, or set the system date. +Mandatory arguments to long options are mandatory for short options too. +-d, --date=STRING +display time described by STRING, not 'now' +-f, --file=DATEFILE +like --date; once for each line of DATEFILE +% +uuidgen - create a new UUID value +uuidgen [options] +library. The new UUID can reasonably be considered unique among all UUIDs created on the local system, +and among UUIDs created on other systems in the past and in the future. +There are two types of UUIDs which uuidgen can generate: time-based UUIDs and random-based UUIDs. By +default uuidgen will generate a random-based UUID if a high-quality random number generator is present. +Otherwise, it will choose a time-based UUID. It is possible to force the generation of one of these two +UUID types by using the -r or -t options. +-r, --random +% +glib-mkenums - C language enum description generation utility +glib-mkenums [OPTION...] [FILE...] +glib-mkenums is a small perl-script utility that parses C code to extract enum definitions and produces +enum descriptions based on text templates specified by the user. Most frequently this script is used to +produce C code that contains enum values as strings so programs can provide value name strings for +introspection. +glib-mkenums takes a list of valid C code files as input. The options specified control the text that is +output, certain substitutions are performed on the text templates for keywords enclosed in @ characters. +Production text substitutions +Certain keywords enclosed in @ characters will be substituted in the emitted text. For the substitution +examples of the keywords below, the following example enum definition is assumed: +% +deallocvt - deallocate unused virtual consoles +deallocvt [N ...] +The command deallocvt deallocates kernel memory and data structures for all unused virtual consoles. If +one or more arguments N ... are given, only the corresponding consoles /dev/ttyN are deallocated. +A virtual console is unused if it is not the foreground console, and no process has it open for reading +or writing, and no text has been selected on its screen. +% +ssh-agent — authentication agent +ssh-agent [-c | -s] [-Dd] [-a bind_address] [-E fingerprint_hash] [-t life] [command [arg ...]] +ssh-agent [-c | -s] -k +ssh-agent is usually started in the beginning of an X-session or a login session, and all other windows or +programs are started as clients to the ssh-agent program. Through use of environment variables the agent +to query the keys that are held in one. +% +sum - checksum and count the blocks in a file +sum [OPTION]... [FILE]... +Print checksum and block counts for each FILE. +With no FILE, or when FILE is -, read standard input. +-s, --sysv +--help display this help and exit +% +cryptsetup-reencrypt - tool for offline LUKS device re-encryption +cryptsetup-reencrypt <options> <device> +Cryptsetup-reencrypt can be used to change reencryption parameters which otherwise require full on-disk +data change (re-encryption). +You can regenerate volume key (the real key used in on-disk encryption unclocked by passphrase), cipher, +cipher mode. +Cryptsetup-reencrypt reencrypts data on LUKS device in-place. During reencryption process the LUKS device +is marked unavailable. +WARNING: The cryptsetup-reencrypt program is not resistant to hardware or kernel failures during reen‐ +% +msgconv - character set conversion for message catalog +msgconv [OPTION] [INPUTFILE] +Converts a translation catalog to a different character encoding. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +partprobe - inform the OS of partition table changes +partprobe [-d] [-s] [devices...] +partprobe is a program that informs the operating system kernel of partition table changes. +-d, --dry-run +Don't update the kernel. +-s, --summary +% +loginctl - Control the systemd login manager +The following options are understood: +--no-ask-password +Do not query the user for authentication for privileged operations. +-p, --property= +When showing session/user/seat properties, limit display to certain properties as specified as +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +sntp - standard Simple Network Time Protocol client program +sntp [-flags] [-flag [value]] [--option-name[[=| ]value]] [ hostname-or-IP ...] +sntp can be used as an SNTP client to query a NTP or SNTP server and either display the time or set the +local system's time (given suitable privilege). It can be run as an interactive command or from a cron +job. NTP (the Network Time Protocol) and SNTP (the Simple Network Time Protocol) are defined and +The default is to write the estimated correct local date and time (i.e. not UTC) to the standard output +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +ngettext - translate message and choose plural form +ngettext [OPTION] [TEXTDOMAIN] MSGID MSGID-PLURAL COUNT +The ngettext program translates a natural language message into the user's language, by looking up the +translation in a message catalog, and chooses the appropriate plural form, which depends on the number +COUNT and the language of the message catalog where the translation was found. +Display native language translation of a textual message whose grammatical form depends on a number. +-d, --domain=TEXTDOMAIN +retrieve translated message from TEXTDOMAIN +-e enable expansion of some escape sequences +% +lastlog - reports the most recent login of all users or of a given user +lastlog [options] +lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, +port, and last login time will be printed. The default (no flags) causes lastlog entries to be printed, +sorted by their order in /etc/passwd. +The options which apply to the lastlog command are: +-b, --before DAYS +Print only lastlog records older than DAYS. +-C, --clear +% +lvresize — resize a logical volume +[-I|--stripesize StripeSize]] {-l|--extents [+|-]LogicalExtentsNumber[%{VG|LV|PVS|FREE|ORIGIN}] | +-L|--size [+|-]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [--poolmetadatasize [+]MetadataVolumeSize[bBsSkKm‐ +[PhysicalVolumePath[:PE[-PE]]...] +lvresize allows you to resize a logical volume. Be careful when reducing a logical volume's size, +because data in the reduced part is lost!!! You should therefore ensure that any filesystem on the vol‐ +ume is shrunk first so that the extents that are to be removed are not in use. Resizing snapshot logical +% +keyctl - Key management facility control +keyctl --version +keyctl show [-x] [<keyring>] +keyctl add <type> <desc> <data> <keyring> +keyctl padd <type> <desc> <keyring> +keyctl request <type> <desc> [<dest_keyring>] +keyctl update <key> <data> +keyctl pupdate <key> +keyctl newring <name> <keyring> +keyctl revoke <key> +keyctl clear <keyring> +keyctl link <key> <keyring> +keyctl unlink <key> [<keyring>] +% +capsh - capability shell wrapper +capsh [OPTION]... +handy wrapper for certain types of capability testing and environment creation. It also provides some +debugging features useful for summarizing capability state. +The tool takes a number of optional arguments, acting on them in the order they are provided. They are as +follows: +--print Display prevailing capability and related state. +% +systemd-firstboot, systemd-firstboot.service - Initialize basic system settings on or before the first +boot-up of a system +systemd-firstboot.service +systemd-firstboot initializes the most basic system settings interactively on the first boot, or +· The system locale, more specifically the two locale variables LANG= and LC_MESSAGES +· The system time zone +· The system host name +% +gettextize - install or upgrade gettext infrastructure +gettextize [OPTION]... [package-dir] +Prepares a source package to use gettext. +--help print this help and exit +--version +print version information and exit +-f, --force +force writing of new files even if old exist +% +lt-recode [OPTION]... [ [CHARSET] | REQUEST [FILE]... ] +Free `recode' converts files between various character sets and surfaces. +If a long option shows an argument as mandatory, then it is mandatory for the equivalent short option +also. Similarly for optional arguments. +Listings: +-l, --list[=FORMAT] +list one or all known charsets and aliases +-k, --known=PAIRS +restrict charsets according to known PAIRS list +% +elfedit - Update the ELF header of ELF files. +elfedit [--input-mach=machine] +[--input-type=type] +[--input-osabi=osabi] +--output-mach=machine +--output-type=type +--output-osabi=osabi +[-v|--version] +[-h|--help] +elffile... +elfedit updates the ELF header of ELF files which have the matching ELF machine and file types. The +options control how and which fields in the ELF header should be updated. +% +grub-fstest - debug tool for GRUB filesystem drivers +Debug tool for filesystem driver. +Commands: +blocklist FILE +Display blocklist of FILE. +cat FILE +Copy FILE to standard output. +cmp FILE LOCAL +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +ldns-config - show compiler and linker flags for ldns usage. +When writing programs using ldns, you have to tell the compiler where to look for include files and what +libraries from which location to link to. ldns-config can be used to find out what flags to use with the +C compiler and the linker. +--cflags +Show the C compiler flags needed to compile with ldns +--libs Show the flags to be used to link with ldns +--version +% +pmap - report memory map of a process +pmap [options] pid [...] +The pmap command reports the memory map of a process or processes. +-x, --extended +Show the extended format. +-d, --device +Show the device format. +-q, --quiet +Do not display some header or footer lines. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +dnssec-keymgr - Ensures correct DNSKEY coverage for a zone based on a defined policy +dnssec-keymgr [-K directory] [-c file] [-f] [-k] [-q] [-v] [-z] [-g path] [-r path] [-s path] [zone...] +dnssec-keymgr is a high level Python wrapper to facilitate the key rollover process for zones handled by +BIND. It uses the BIND commands for manipulating DNSSEC key metadata: dnssec-keygen and dnssec-settime. +DNSSEC policy can be read from a configuration file (default /etc/dnssec-policy.conf), from which the key +parameters, publication and rollover schedule, and desired coverage duration for any given zone can be +default policy used for all zones. +When dnssec-keymgr runs, it examines the DNSSEC keys for one or more zones, comparing their timing +metadata against the policies for those zones. If key settings do not conform to the DNSSEC policy (for +example, because the policy has been changed), they are automatically corrected. +% +apropos - search the manual page names and descriptions +apropos [-dalv?V] [-e|-w|-r] [-s list] [-m system[,...]] [-M path] [-L locale] [-C file] keyword ... +Each manual page has a short description available within it. apropos searches the descriptions for +instances of keyword. +cial characters to stop the shell from interpreting them. +The standard matching rules allow matches to be made against the page name and word boundaries in the +description. +The database searched by apropos is updated by the mandb program. Depending on your installation, this +% +dbus-binding-tool - C language GLib bindings generation utility. +dbus-binding-tool [--force] [--help] [--ignore-unsupported] [--mode=pretty|glib-client|glib-server] +[--output=file] [--prefix=symbol-prefix] [--version] [file...] +dbus-binding-tool is used to expose a GObject via D-Bus. As input, dbus-binding-tool uses a D-Bus Intro‐ +header file which eases the use of a remote D-Bus object. Output is sent to standard out or to the file‐ +name specified with the --output argument. +The following is a sample D-Bus Introspection XML file which describes an object that exposes one method, +named ManyArgs: +% +readprofile - read kernel profiling information +readprofile [options] +The readprofile command uses the /proc/profile information to print ascii data on standard output. The +output is organized in three columns: the first is the number of clock ticks, the second is the name of +the C function in the kernel where those many ticks occurred, and the third is the normalized `load' of +the procedure, calculated as a ratio between the number of ticks and the length of the procedure. The +output is filled with blanks to ease readability. +-a, --all +% +rsync - a fast, versatile, remote (and local) file-copying tool +Access via remote shell: +Pull: rsync [OPTION...] [USER@]HOST:SRC... [DEST] +Push: rsync [OPTION...] SRC... [USER@]HOST:DEST +Access via rsync daemon: +Pull: rsync [OPTION...] [USER@]HOST::SRC... [DEST] +rsync [OPTION...] rsync://[USER@]HOST[:PORT]/SRC... [DEST] +Push: rsync [OPTION...] SRC... [USER@]HOST::DEST +rsync [OPTION...] SRC... rsync://[USER@]HOST[:PORT]/DEST +% +clockdiff - measure clock difference between hosts +-o Use IP TIMESTAMP with ICMP ECHO instead of ICMP TIMESTAMP messages. It is useful with some desti‐ +dresses instead of four term one. What flavor works better depends on target host. Particularly, +-o is better for Linux. +% +vgscan — scan all disks for volume groups and rebuild caches +[--notifydbus] [-P|--partial] [--reportformat {basic|json}] [-v|--verbose] +vgscan scans all SCSI, (E)IDE disks, multiple devices and a bunch of other disk devices in the system +to avoid a CD ROM, for example. +hardware. +% +delv - DNS lookup and validation utility +[-q name] [-t type] [-x addr] [name] [type] [class] [queryopt...] +delv [-h] +delv [-v] +delv [queryopt...] [query...] +delv (Domain Entity Lookup & Validation) is a tool for sending DNS queries and validating the results, +using the same internal resolver and validator logic as named. +delv will send to a specified name server all queries needed to fetch and validate the requested data; +% +pscap - a program to see capabilities +pscap [ -a ] +pscap is a program that prints out a report of process capabilities. If the application has any capabili‐ +ties, it will be in the report with the exception of init. By giving the -a command line option, init +will be included, too. If a process is not in the report, it has dropped all capabilities. If the process +has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is +found to be true, a '+' symbol is added. +Steve Grubb +% +dirname - strip last component from file name +output '.' (meaning the current directory). +-z, --zero +end each output line with NUL, not newline +--help display this help and exit +--version +output version information and exit +% +zcmp, zdiff - compare compressed files +Zcmp and zdiff are used to invoke the cmp or the diff program on files compressed via gzip. All options +fed to cmp or diff. The input files are not modified. The exit status from cmp or diff is preserved. +BUGS +% +named-journalprint - print zone journal in human-readable form +named-journalprint {journal} +named-journalprint prints the contents of a zone journal file in a human-readable form. +Journal files are automatically created by named when changes are made to dynamic zones (e.g., by +nsupdate). They record each addition or deletion of a resource record, in binary format, allowing the +changes to be re-applied to the zone when the server is restarted after a shutdown or crash. By default, +the name of the journal file is formed by appending the extension .jnl to the name of the corresponding +zone file. +named-journalprint converts the contents of a given journal file into a human-readable text format. Each +line begins with "add" or "del", to indicate whether the record was added or deleted, and continues with +the resource record in master-file format. +% +debugreiserfs - The debugging tool for the ReiserFS filesystem. +device +debugreiserfs sometimes helps to solve problems with reiserfs filesystems. When run without options it +prints the super block of the ReiserFS filesystem found on the device. +device is the special file corresponding to the device (e.g /dev/hdXX for an IDE disk partition or +/dev/sdXX for a SCSI disk partition). +-j device +prints the contents of the journal. The option -p allows it to pack the journal with other meta‐ +% +thin_metadata_size - thin provisioning metadata device/file size calculator. +thin_metadata_size [options] +thin_metadata_size calculates the size of the thin provisioning metadata based on the block size of the +thin provisioned devices, the size of the thin provisioning pool and the maximum number of all thin pri‐ +sioned devices and snapshots. Because thin provisioning pools are holding widely variable contents, this +tool is needed to provide sensible initial default size. +-b, --block-size BLOCKSIZE[bskKmMgGtTpPeEzZyY] +Block size of thin provisioned devices in units of bytes, sectors, kibibytes, kilobytes, ... +respectively. Default is in sectors without a block size unit specifier. Size/number option +% +findmnt - find a filesystem +findmnt [options] +findmnt [options] device|mountpoint +findmnt [options] [--source] device [--target|--mountpoint] mountpoint +findmnt will list all mounted filesytems or search for a filesystem. The findmnt command is able to +search in /etc/fstab, /etc/mtab or /proc/self/mountinfo. If device or mountpoint is not given, all +filesystems are shown. +mountpoint (and vice versa) if the --target, --mountpoint or --source options are not specified. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +last, lastb - show a listing of last logged in users +last [options] [username...] [tty...] +lastb [options] [username...] [tty...] +last searches back through the /var/log/wtmp file (or the file designated by the -f option) and displays +a list of all users logged in (and out) since that file was created. One or more usernames and/or ttys +be abbreviated, thus last 0 is the same as last tty0. +When catching a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal, +terminate. +The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all +% +ethtool - query or control network driver and hardware settings +ethtool devname +ethtool -h|--help +ethtool --version +ethtool -a|--show-pause devname +ethtool -A|--pause devname [autoneg on|off] [rx on|off] [tx on|off] +ethtool -c|--show-coalesce devname +ethtool -C|--coalesce devname [adaptive-rx on|off] [adaptive-tx on|off] [rx-usecs N] [rx-frames N] +[rx-usecs-irq N] [rx-frames-irq N] [tx-usecs N] [tx-frames N] [tx-usecs-irq N] [tx-frames-irq N] +% +groupmems - administer members of a user's primary group +groupmems -a user_name | -d user_name | [-g group_name] | -l | -p +The groupmems command allows a user to administer his/her own group membership list without the +requirement of superuser privileges. The groupmems utility is for systems that configure its users to be +in their own name sake primary group (i.e., guest / guest). +Only the superuser, as administrator, can use groupmems to alter the memberships of other groups. +The options which apply to the groupmems command are: +-a, --add user_name +Add a user to the group membership list. +% +decoded structures. +-b, --benchmark +perform a benchmark on decoding +-s, --strict +use strict DER decoding +-h, --help +display this help and exit +% +mkfs.xfs - construct an XFS filesystem +mkfs.xfs [ -b block_size ] [ -m global_metadata_options ] [ -d data_section_options ] [ -f ] [ -i +inode_options ] [ -l log_section_options ] [ -n naming_options ] [ -p protofile ] [ -q ] [ -r real‐ +time_section_options ] [ -s sector_size ] [ -L label ] [ -N ] [ -K ] device +mkfs.xfs -V +mkfs.xfs constructs an XFS filesystem by writing on a special file using the values found in the argu‐ +In its simplest (and most commonly used form), the size of the filesystem is determined from the disk +driver. As an example, to make a filesystem with an internal log on the first partition on the first +SCSI disk, use: +% +new_inode_size ] [ -j ] [ -J journal-options ] [ -m reserved-blocks-percentage ] [ -o [^]mount- +options[,...] ] [ -p mmp_update_interval ] [ -r reserved-blocks-count ] [ -s sparse-super-flag ] [ -u +user ] [ -g group ] [ -C mount-count ] [ -E extended-options ] [ -L volume-name ] [ -M last-mounted- +directory ] [ -O [^]feature[,...] ] [ -Q quota-options ] [ -T time-last-checked ] [ -U UUID ] [ -z +undo_file ] device +% +lsusb - list USB devices +lsusb [ options ] +lsusb is a utility for displaying information about USB buses in the system and the devices connected to +them. +-v, --verbose +configuration descriptors for the device's current speed. Class descriptors will be shown, when +available, for USB device classes including hub, audio, HID, communications, and chipcard. +-s [[bus]:][devnum] +% +cpio — copy files to and from archives +cpio -i [options] [pattern ...] [< archive] +cpio -o [options] < name-list [> archive] +cpio -p [options] dest-dir < name-list +zip, jar, ar, and ISO 9660 cdrom images and can create tar, pax, cpio, ar, and shar archives. +The first option to cpio is a mode indicator from the following list: +-i Input. Read an archive from standard input (unless overridden) and extract the contents to disk or +(if the -t option is specified) list the contents to standard output. If one or more file patterns +are specified, only files matching one of the patterns will be extracted. +-o Output. Read a list of filenames from standard input and produce a new archive on standard output +(unless overridden) containing the specified items. +% +systemd, init - systemd system and service manager +systemd is a system and service manager for Linux operating systems. When run as first process on boot +telinit and pass all command line arguments unmodified. That means init and telinit are mostly equivalent +When run as a system instance, systemd interprets the configuration file system.conf and the files in +system.conf.d directories; when run as a user instance, systemd interprets the configuration file +% +nstat, rtacct - network statistics tools. +nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics. +-h, --help Print help +-V, --version +Print version +-z, --zero +Dump zero counters too. By default they are not shown. +% +autoscan - Generate a preliminary configure.in +autoscan [OPTION]... [SRCDIR] +Examine source files in the directory tree rooted at SRCDIR, or the current directory if none is given. +Search the source files for common portability problems, check for incompleteness of `configure.ac', and +create a file `configure.scan' which is a preliminary `configure.ac' for that package. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +vgchange — change attributes of a volume group +vgchange [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-a|--activate [a|e|s|l] +{y|n}] [--activationmode {complete|degraded|partial}] [-K|--ignoreactivationskip] [--monitor {y|n}] +Tag] [--detachprofile] [-h|--help] [--ignorelockingfailure] [--ignoremonitoring] [--ignoreskippedcluster] +[--sysinit] [--noudevsync] [--lock-start] [--lock-stop] [--lock-type LockType] [-l|--logicalvolume Max‐ +datacopies NumberOfCopies|unmanaged|all] [-P|--partial] [-s|--physicalextentsize PhysicalExtent‐ +Size[bBsSkKmMgGtTpPeE]] [--reportformat {basic|json}] [-S|--select Selection] [--systemid SystemID] +vgchange allows you to change the attributes of one or more volume groups. Its main purpose is to acti‐ +groups are subject to changes and allow access to their logical volumes. [Not yet implemented: During +% +systemd-run - Run programs in transient scope or service or timer units +If a command is run as transient service unit, it will be started and managed by the service manager like +any other service, and thus shows up in the output of systemctl list-units like any other unit. It will +run in a clean and detached execution environment, with the service manager as its parent process. In +this mode, systemd-run will start the service asynchronously in the background and return after the +command has begun execution. +% +netcat - GNU Netcat Manual +netcat [options] hostname port [port] ... +netcat -l -p port [options] [hostname] [port] ... +netcat -L hostname:port -p port [options] ... +Netcat is a simple Unix utility which reads and writes data across network connections, using TCP or UDP +protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by +other programs and scripts. At the same time, it is a feature-rich network debugging and exploration +tool, since it can create almost any kind of connection you would need and has several interesting built- +in capabilities. Netcat, or "nc" as the original program was named, should have been supplied long ago +as another one of those cryptic but standard Unix tools. +% +telnet - User interface to TELNET +telnet [OPTION...] [HOST [PORT]] +Login to remote system HOST (optionally, on service port PORT) +General options: +-6, --ipv6 +use only IPv6 +% +If the output filename is present, the output is written there. If it is - or absent the output is writ‐ +ten to the standard output. +the BUGS section below. +% +grub-mkconfig - generate a GRUB configuration file +grub-mkconfig [OPTION] +Generate a grub config file +-o, --output=FILE +output generated config to FILE [default=stdout] +-h, --help +print this message and exit +-v, --version +print the version information and exit +% +arpd - userspace arp daemon. +rate ] [ <INTERFACES> ] +The arpd daemon collects gratuitous ARP information, saving it on local disk and feeding it to the kernel +on demand to avoid redundant broadcasting due to limited size of the kernel ARP cache. +-h -? Print help +-l Dump the arpd database to stdout and exit. The output consists of three columns: the interface +index, the IP address of the interface, and the MAC address of the interface. Negative entries for +a colon and the most recent time when the fact that the host is dead was proven. +% +soelim - interpret .so requests in groff input +soelim [-Crtv] [-I dir] [files ...] +It is possible to have whitespace between the -I command line option and its parameter. +soelim reads files and replaces lines of the form +.so file +by the contents of file. It is useful if files included with .so need to be preprocessed. Normally, +soelim should be invoked with the -s option of groff. +To embed ‘\’ in the file name, write ‘\\’ or ‘\e’. To embed a space, write ‘\ ’. Any other escape +sequence in file makes soelim ignore the whole line. +% +gpg-error-config - Script to get information about the installed version of libgpg-error +gpg-error-config [options] +gpg-error-config is a tool that is used to configure to determine the compiler and linker flags that +macros for GNU autoconf that are included with Libgpg-error. +gpg-error-config accepts the following options: +--mt Provide output appropriate for multithreaded programs. --mt is only useful when combined with +other options, and must be the first option if present. +--version +% +autoupdate - Update a configure.in to a newer Autoconf +autoupdate [OPTION]... [TEMPLATE-FILE]... +Update each TEMPLATE-FILE if given, or `configure.ac' if present, or else `configure.in', to the syntax +of the current version of Autoconf. The original files are backed up. +Operation modes: +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +ldns-verify-zone - read a DNSSEC signed zone and verify it. +ldns-verify-zone ZONEFILE +ldns-verify-zone reads a DNS zone file and verifies it. +RRSIG resource records are checked against the DNSKEY set at the zone apex. +-h Show usage and exit +-a Apex only, check only the zone apex +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +info - read Info documents +info [OPTION]... [MENU-ITEM...] +Read documentation in Info format. +-a, --all +use all matching manuals. +-k, --apropos=STRING +look up STRING in all indices of all manuals. +-d, --directory=DIR +add DIR to INFOPATH. +% +netstat - Print network connections, routing tables, interface statistics, masquerade connections, and +multicast memberships +[--rfcomm|-f] [--listening|-l] [--all|-a] [--numeric|-n] [--numeric-hosts] [--numeric-ports] +[--numeric-users] [--symbolic|-N] [--extend|-e[--extend|-e]] [--timers|-o] [--program|-p] [--verbose|-v] +[--continuous|-c] [--wide|-W] +netstat {--route|-r} [address_family_options] [--extend|-e[--extend|-e]] [--verbose|-v] [--numeric|-n] +[--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] +netstat {--interfaces|-i} [--all|-a] [--extend|-e[--extend|-e]] [--verbose|-v] [--program|-p] +[--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] +netstat {--groups|-g} [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continu‐ +ous|-c] +% +ldns-zcat - reunite (z)split up a zone files +ldns-zcat zonefiles +ldns-zcat will read in a bunch of (z)split up zonefiles and creates a new larger zone file. The SOA +record in the first part is used as the SOA record in the generated zone. +The resulted zone file is printed to standard output. +-o ORIGIN +use ORIGIN when reading in the zone +-v show the version number and exit +% +chem - groff preprocessor for producing chemical structure diagrams +chem [option ....] [--] [filespec ....] +chem -h | --help +chem -v | --version +There are no other options than -h, --help, -v, and --version; these options provoke the printing of a +version or usage information, respectively, and all filespec arguments are ignored. A filespec argument +is either a file name of an existing file or a minus character -, meaning standard input. If no argument +is specified then standard input is taken automatically. +chem produces chemical structure diagrams. Today's version is best suited for organic chemistry (bonds, +% +seq - print a sequence of numbers +seq [OPTION]... LAST +seq [OPTION]... FIRST LAST +seq [OPTION]... FIRST INCREMENT LAST +Print numbers from FIRST to LAST, in steps of INCREMENT. +Mandatory arguments to long options are mandatory for short options too. +-f, --format=FORMAT +use printf style floating-point FORMAT +-s, --separator=STRING +use STRING to separate numbers (default: \n) +% +groups - display current group names +groups [user] +The groups command displays the current group names or ID values. If the value does not have a +corresponding entry in /etc/group, the value will be displayed as the numerical group value. The optional +user parameter will display the groups for the named user. +Systems which do not support concurrent group sets will have the information from /etc/group reported. +The user must use newgrp or sg to change his current real and effective group ID. +FILES +/etc/group +Group account information. +% +ifconfig - configure a network interface +ifconfig [-v] [-a] [-s] [interface] +ifconfig [-v] interface [aftype] options | address ... +Ifconfig is used to configure the kernel-resident network interfaces. It is used at boot time to set up +interfaces as necessary. After that, it is usually only needed when debugging or when system tuning is +needed. +If no arguments are given, ifconfig displays the status of the currently active interfaces. If a single +interface argument is given, it displays the status of the given interface only; if a single -a argument +is given, it displays the status of all interfaces, even those that are down. Otherwise, it configures +an interface. +Address Families +% +vgdisplay — display attributes of volume groups +{basic|json}] [-s|--short] [-S|--select Selection] [-v|--verbose] [-d|--debug] [-h|--help] [--ignorelock‐ +ingfailure] [--ignoreskippedcluster] [--nosuffix] [-P|--partial] [--units hHbBsSkKmMgGtTpPeE] [--version] +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--noheadings] +[--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--separator Separator] [--unbuffered] [--units +with it's physical and logical volumes and their sizes etc. +% +dnssec-dsfromkey - DNSSEC DS RR generation tool +[-A] [-v level] {dnsname} +dnssec-dsfromkey [-h] [-V] +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +ftpd - File Transfer Protocol server. +ftpd [OPTION...] +File Transfer Protocol daemon. +-6, --ipv6 +restrict daemon to IPv6 +-a, --auth=AUTH +use AUTH for authentication +% +col - filter reverse line feeds from input +col [options] +col filters out reverse (and half-reverse) line feeds so the output is in the correct order, with only +forward and half-forward line feeds. It also replaces any whitespace characters with tabs where possi‐ +col reads from standard input and writes to standard output. +-b, --no-backspaces +Do not output any backspaces, printing only the last character written to each column position. +-f, --fine +% +unhide — forensic tool to find hidden processes +unhide-posix proc | sys +unhide is a forensic tool to find processes hidden by rootkits, Linux kernel modules or by other tech‐ +niques. It detects hidden processes using six techniques. +Options are only available for unhide-linux not for unhide-posix. +-d Do a double check in brute test to avoid false positive. +-f Write a log file (unhide-linux.log) in the current directory. +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +route - show / manipulate the IP routing table +[irtt I] [reject] [mod] [dyn] [reinstate] [[dev] If] +route [-V] [--version] [-h] [--help] +Route manipulates the kernel's IP routing tables. Its primary use is to set up static routes to specific +When the add or del options are used, route modifies the routing tables. Without these options, route +% +setfont - load EGA/VGA console screen font +setfont [-O font+umap.orig] [-o font.orig] [-om cmap.orig] [-ou umap.orig] [-N] [font.new ...] [-m cmap] +[-u umap] [-C console] [-hH] [-v] [-V] +The setfont command reads a font from the file font.new and loads it into the EGA/VGA character genera‐ +tor, and optionally outputs the previous font. It can also load various mapping tables and output the +previous versions. +and load the union. Typical use: +setfont +Load a default font. +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +flock - manage locks from shell scripts +flock [options] file|directory command [arguments] +flock [options] file|directory -c command +flock [options] number +The first and second of the above forms wrap the lock around the execution of a command, in a manner sim‐ +priate permissions) if it does not already exist. By default, if the lock cannot be immediately +acquired, flock waits until the lock is available. +The third form uses an open file by its file descriptor number. See the examples below for how that can +be used. +% +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --decode +decode data +-i, --ignore-garbage +when decoding, ignore non-alphabet characters +% +Mandatory arguments to long options are mandatory for short options too. +-c, --check +checks the syntax only +-o, --output=FILE +output file +% +infotocap - convert a terminfo description into a termcap description +infotocap looks in each given text file for terminfo descriptions. For each terminfo description found, +an equivalent termcap description is written to standard output. Terminfo use capabilities are trans‐ +lated directly to termcap tc capabilities. +-v print out tracing information on standard error as the program runs. +-V print out the version of the program in use on standard error and exit. +line to a maximum width of 60 characters. +% +setfattr - set extended attributes of filesystem objects +setfattr [-h] -n name [-v value] pathname... +setfattr [-h] -x name pathname... +setfattr [-h] --restore=file +The setfattr command associates a new value with an extended attribute name for each specified file. +-n name, --name=name +Specifies the name of the extended attribute to set. +-v value, --value=value +Specifies the new value of the extended attribute. There are three methods available for encoding the +value. If the given string is enclosed in double quotes, the inner string is treated as text. In +% +kadmind [-x db_args] [-r realm] [-m] [-nofork] [-proponly] [-port port-number] [-P pid_file] [-p +kadmind starts the Kerberos administration server. kadmind typically runs on the master Kerberos server, +which stores the KDC database. If the KDC database uses the LDAP module, the administration server and +the KDC server need not run on the same machine. kadmind accepts remote requests from programs such as +kadmind requires a number of configuration files to be set up in order for it to work: +The KDC configuration file contains configuration information for the KDC and admin servers. kad‐ +mind uses settings in this file to locate the Kerberos database, and is also affected by the +% +btrfs-check - check or repair an unmounted btrfs filesystem +btrfs check [options] <device> +The filesystem checker is used to verify structural integrity of a filesystem and attempt to repair it if +requested. The filesystem must be unmounted. +By default, btrfs check will not modify the device but you can reaffirm that by the option --readonly. +btrfsck is an alias of btrfs check command and is now deprecated. +Warning +Do not use --repair unless you are advised to by a developer, an experienced user or accept the fact +that fsck cannot possibly fix all sorts of damage that could happen to a filesystem because of +software and hardware bugs. +% +lsinitcpio - Examine an initramfs +lsinitcpio [action] [options] image +Examines the contents of an initcpio image. Without any options, lsinitcpio simply lists the contents of +an image. +ACTIONS +-a, --analyze +Analyze the contents of the specified image and print output in human readable form. +-c, --config +Show the configuration file the given image was built with. +-l, --list +% +eject - eject removable media +eject [options] device|mountpoint +eject allows removable media (typically a CD-ROM, floppy disk, tape, JAZ, ZIP or USB disk) to be ejected +under software control. The command can also control some multi-disc CD-ROM changers, the auto-eject +feature supported by some devices, and close the disc tray of some CD-ROM drives. +The device corresponding to device or mountpoint is ejected. If no name is specified, the default name +'/dev/sda'), UUID=uuid or LABEL=label tags. +There are four different methods of ejecting, depending on whether the device is a CD-ROM, SCSI device, +removable floppy, or tape. By default eject tries all four methods in order until it succeeds. +% +clear - clear the terminal screen +clear +bility is defined). clear looks in the environment for the terminal type and then in the terminfo data‐ +base to determine how to clear the screen. +% +rsh - Remote shell client +remote shell +-6, --ipv6 +use only IPv6 +allows an eight-bit input data path at all times +% +crontab - maintains crontab files for individual users +crontab [-u user] file +crontab [-u user] [-l | -r | -e] [-i] [-s] +crontab -n [ hostname ] +crontab -c +Crontab is the program used to install a crontab table file, remove or list the existing tables used to +/var/spool/, they are not intended to be edited directly. For SELinux in MLS mode, you can define more +In this version of Cron it is possible to use a network-mounted shared /var/spool/cron across a cluster +of hosts and specify that only one of the hosts should run the crontab jobs in the particular directory +% +netctl-auto - Control automatic selection of wireless netctl profiles +netctl-auto [--help | --version] +netctl-auto@.service file. See netctl.special(7) for details about the service file. +The following commands are understood: +list +List all profiles which are currently available for automatic selection. Active profiles will be +marked with a ‘*’, disabled profiles will be marked with a ‘!’. +% +setfacl - set file access control lists +setfacl [-bkndRLPvh] [{-m|-x} acl_spec] [{-M|-X} acl_file] file ... +setfacl --restore=file +of commands is followed by a sequence of files (which in turn can be followed by another sequence of com‐ +mands, ...). +The options -m, and -x expect an ACL on the command line. Multiple ACL entries are separated by comma +characters (`,'). The options -M, and -X read an ACL from a file or from standard input. The ACL entry +format is described in Section ACL ENTRIES. +The --set and --set-file options set the ACL of a file or a directory. The previous ACL is replaced. ACL +% +mkreiserfs - The create tool for the Linux ReiserFS filesystem. +mkreiserfs [ -dfV ] [ -b | --block-size N ] [ -h | --hash HASH ] [ -u | --uuid UUID ] [ -l | --label +LABEL ] [ --format FORMAT ] [ -q | --quiet ] [ -j | --journal-device FILE ] [ -s | --journal-size N ] [ +-o | --journal-offset N ] [ -t | --transaction-max-size N ] [ -B | --badblocks file ] device [ filesys‐ +tem-size ] +mkreiserfs creates a Linux ReiserFS filesystem on a device (usually a disk partition). +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +filesystem-size +is the size in blocks of the filesystem. If omitted, mkreiserfs will automatically set it. +% +jfs_debugfs - shell-type JFS file system editor +jfs_debugfs device +jfs_debugfs is a program which can be used to perform various low-level actions on a JFS formatted +device. +jfs_debugfs must be run as root. +a[lter] <block> <offset> <hex_string> +replaces the data located at the <offset> of <block> with <hex_string> +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +gnutls-cli-debug - GnuTLS debug client +gnutls-cli-debug [-flags] [-flag [value]] [--option-name[[=| ]value]] +TLS debug client. It sets up multiple TLS connections to a server and queries its capabilities. It was +created to assist in debugging GnuTLS, but it might be useful to extract a TLS server's capabilities. It +connects to a TLS server, performs tests and print the server's capabilities. If called with the `-v' +parameter more checks will be performed. Can be used to check for servers with special needs or bugs. +-d number, --debug=number +constrained to being: +% +tty - print the file name of the terminal connected to standard input +tty [OPTION]... +Print the file name of the terminal connected to standard input. +-s, --silent, --quiet +print nothing, only return an exit status +--help display this help and exit +--version +output version information and exit +% +csplit - split a file into sections determined by context lines +csplit [OPTION]... FILE PATTERN... +each piece to standard output. +Read standard input if FILE is - +Mandatory arguments to long options are mandatory for short options too. +-b, --suffix-format=FORMAT +-f, --prefix=PREFIX +% +systemd-cgtop - Show top control groups by their resource usage +systemd-cgtop shows the top control groups of the local Linux control group hierarchy, ordered by their +specified control group. +If systemd-cgtop is not connected to a tty, no column headers are printed and the default is to only run +Resource usage is only accounted for control groups in the relevant hierarchy, i.e. CPU usage is only +accounted for control groups in the "cpuacct" hierarchy, memory usage only for those in "memory" and disk +I/O usage for those in "blkio". If resource monitoring for these resources is required, it is recommended +% +tload - graphic representation of system load average +tload [options] [tty] +tload prints a graph of the current system load average to the specified tty (or the tty of the tload +process if none is specified). +-s, --scale number +The scale option allows a vertical scale to be specified for the display (in characters between +graph ticks); thus, a smaller value represents a larger scale, and vice versa. +-d, --delay seconds +The delay sets the delay between graph updates in seconds. +% +firewallctl - firewalld command line client +firewallctl is an alternate command line client of the firewalld daemon. It provides interface to manage +runtime and permanent configuration. +things can get changed in the runtime or permanent configuration. +The following options are supported: +General Options +-h, --help +% +jfs_fsck - initiate replay of the JFS transaction log, and check and repair a JFS formatted device +jfs_fsck [ -afnpvV ] [ -j journal_device ] [ --omit_journal_replay ] [ --replay_journal_only ] device +jfs_fsck is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any +errors found. +jfs_fsck must be run as root. +WARNING +jfs_fsck should only be used to check an unmounted file system or a file system that is mounted READ +ONLY. Using jfs_fsck to check a file system mounted other than READ ONLY could seriously damage the file +system! +% +pidof -- find the process ID of a running program. +pidof [-s] [-c] [-x] [-o omitpid[,omitpid..]] [-o omitpid[,omitpid..]..] program [program..] +Pidof finds the process id's (pids) of the named programs. It prints those id's on the standard output. +-s Single shot - this instructs the program to only return one pid. +non-root users, as they will be unable to check the current root directory of processes they do +not own. +-x Scripts too - this causes the program to also return process id's of shells running the named +scripts. +% +fdformat - low-level format a floppy disk +fdformat [options] device +fdformat does a low-level format on a floppy disk. device is usually one of the following (for floppy +% +tipc - a TIPC configuration and management tool +The Transparent Inter-Process Communication (TIPC) protocol offers total address transparency between +processes which allows applications in a clustered computer environment to communicate quickly and reli‐ +ably with each other, regardless of their location within the cluster. +TIPC originated at the telecommunications manufacturer Ericsson. The first open source version of TIPC +% +install-info - update info/dir entries +install-info [OPTION]... [INFO-FILE [DIR-FILE]] +Add or remove entries in INFO-FILE from the Info directory DIR-FILE. INFO-FILE and DIR-FILE are required +unless the --info-file or --dir-file (or --info-dir) options are given, respectively. +--add-once +add only to first matching section, not all. +--align=COL +start description of new entries at column COL. +--calign=COL +% +busctl - Introspect the bus +The following options are understood: +--address=ADDRESS +Connect to the bus specified by ADDRESS instead of using suitable defaults for either the system or +user bus (see --system and --user options). +--show-machine +When showing the list of peers, show a column containing the names of containers they belong to. See +% +make - GNU make utility to maintain groups of programs +make [OPTION]... [TARGET]... +The make utility will determine automatically which pieces of a large program need to be recompiled, and +issue the commands to recompile them. The manual describes the GNU implementation of make, which was +written by Richard Stallman and Roland McGrath, and is currently maintained by Paul Smith. Our examples +show C programs, since they are very common, but you can use make with any programming language whose +compiler can be run with a shell command. In fact, make is not limited to programs. You can use it to +describe any task where some files must be updated automatically from others whenever the others change. +To prepare to use make, you must write a file called the makefile that describes the relationships among +files in your program, and the states the commands for updating each file. In a program, typically the +executable file is updated from object files, which are in turn made by compiling source files. +% +mknod - make block or character special files +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file permission bits to MODE, not a=rw - umask +-Z set the SELinux security context to default type +--context[=CTX] +like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX +% +lsmod - Show the status of modules in the Linux Kernel +lsmod +lsmod is a trivial program which nicely formats the contents of the /proc/modules, showing what kernel +modules are currently loaded. +others. +% +fsfreeze --freeze|--unfreeze mountpoint +fsfreeze suspends or resumes access to a filesystem. +fsfreeze halts any new access to the filesystem and creates a stable image on disk. fsfreeze is intended +to be used with hardware RAID devices that support the creation of snapshots. +fsfreeze is unnecessary for device-mapper devices. The device-mapper (and LVM) automatically freezes a +page. +The mountpoint argument is the pathname of the directory where the filesystem is mounted. The filesystem +% +klist - list cached Kerberos tickets +klist [-e] [[-c] [-l] [-A] [-f] [-s] [-a [-n]]] [-C] [-k [-t] [-K]] [-V] [cache_name|keytab_name] +klist lists the Kerberos principal and Kerberos tickets held in a credentials cache, or the keys held in +a keytab file. +-e Displays the encryption types of the session key and the ticket for each credential in the creden‐ +tial cache, or each key in the keytab file. +-l If a cache collection is available, displays a table summarizing the caches present in the collec‐ +tion. +-A If a cache collection is available, displays the contents of all of the caches in the collection. +% +pdfmom - Produce PDF documents using the mom macro set +pdfmom [-Tps [pdfroff options]] [groff options] files ... +pdfmom [-Tpdf] [groff options] files ... +pdfmom is a wrapper around groff that facilitates the production of PDF documents from files formatted +with the mom macros. +pdfmom prints to stdout, so output must be redirected to a destination file. The size of the final PDF +If called with the -Tpdf option (which is the default), pdfmom processes files using groff's native PDF +driver, gropdf. If -Tps is given, processing is passed over to pdfroff, which uses groff's PostScript +% +uname - print system information +uname [OPTION]... +Print certain system information. With no OPTION, same as -s. +-a, --all +print all information, in the following order, except omit -p and -i if unknown: +-s, --kernel-name +print the kernel name +-n, --nodename +print the network node hostname +% +printenv - print all or part of environment +printenv [OPTION]... [VARIABLE]... +Print the values of the specified environment VARIABLE(s). If no VARIABLE is specified, print name and +value pairs for them all. +-0, --null +end each output line with NUL, not newline +--help display this help and exit +--version +output version information and exit +% +ipcmk - make various IPC resources +ipcmk [options] +ipcmk allows you to create shared memory segments, message queues, and semaphore arrays. +Resources can be specified with these options: +-M, --shmem size +for GB, etc. +% +mkdir - make directories +mkdir [OPTION]... DIRECTORY... +Create the DIRECTORY(ies), if they do not already exist. +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file mode (as in chmod), not a=rwx - umask +-p, --parents +no error if existing, make parent directories as needed +-v, --verbose +% +mkfifo - make FIFOs (named pipes) +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file permission bits to MODE, not a=rw - umask +-Z set the SELinux security context to default type +--context[=CTX] +like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX +% +genrandom - generate a file containing random data +genrandom [-n number] {size} {filename} +genrandom generates a file or a set of files containing a specified quantity of pseudo-random data, which +can be used as a source of entropy for other commands on systems with no random device. +-n number +size +The size of the file, in kilobytes, to generate. +filename +% +mount - mount a filesystem +mount [-l|-h|-V] +mount -a [-fFnrsvw] [-t fstype] [-O optlist] +mount [-fnrsvw] [-o options] device|dir +mount [-fnrsvw] [-t fstype] [-o options] device dir +All files accessible in a Unix system are arranged in one big tree, the file hierarchy, rooted at /. +These files can be spread out over several devices. The mount command serves to attach the filesystem +The standard form of the mount command is: +% +gpg-agent - Secret key management for GnuPG +gpg-agent [--homedir dir] [--options file] [options] +gpg-agent [--homedir dir] [--options file] [options] --server +gpg-agent [--homedir dir] [--options file] [options] --daemon [command_line] +gpg-agent is a daemon to manage secret (private) keys independently from any protocol. It is used as a +backend for gpg and gpgsm as well as for a couple of other utilities. +The agent is automatically started on demand by gpg, gpgsm, gpgconf, or gpg-connect-agent. Thus there is +the agent using: +gpg-connect-agent /bye +% +xfs_admin - change parameters of an XFS filesystem +xfs_admin -V +Devices that are mounted cannot be modified. Administrators must unmount filesystems before xfs_admin or +-e Enables unwritten extent support on a filesystem that does not already have this enabled (for +legacy filesystems, it can't be disabled anymore at mkfs time). +% +uncompress — expand compressed data +uncompress [−cfv] [file...] +The uncompress utility shall restore files to their original state after they have been compressed using +the compress utility. If no files are specified, the standard input shall be uncompressed to the standard +output. If the invoking process has appropriate privileges, the ownership, modes, access time, and modi‐ +fication time of the original file shall be preserved. +% +gdbus - Tool for working with D-Bus objects +gdbus introspect [--system | --session | --address address] --dest bus_name --object-path /path/to/object +[--xml] [--recurse] [--only-properties] +gdbus monitor [--system | --session | --address address] --dest bus_name [--object-path /path/to/object] +gdbus call [--system | --session | --address address] --dest bus_name --object-path /path/to/object +gdbus emit [--system | --session | --address address] --object-path /path/to/object +gdbus help +% +systemd-tmpfiles, systemd-tmpfiles-setup.service, systemd-tmpfiles-setup-dev.service, systemd-tmpfiles- +clean.service, systemd-tmpfiles-clean.timer - Creates, deletes and cleans up volatile and temporary files +and directories +systemd-tmpfiles-setup.service +systemd-tmpfiles-setup-dev.service +systemd-tmpfiles-clean.service +systemd-tmpfiles-clean.timer +systemd-tmpfiles creates, deletes, and cleans up volatile and temporary files and directories, based on +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +telinit - Change SysV runlevel +the runlevel requests will be transparently translated into systemd unit activation requests. +The following options are understood: +--help +Print a short help text and exit. +--no-wall +Do not send wall message before reboot/halt/power-off. +% +bootctl - Control the firmware and boot manager settings +bootctl checks, updates, installs or removes the boot loader from the current system. +bootctl status checks and prints the currently installed versions of the boot loader binaries and all +current EFI boot variables. +% +devlink - Devlink tool +OBJECT := { dev | port | monitor } +-V, -Version +Print the version of the devlink utility and exit. +-n, -no-nice-names +Turn off printing out nice names, for example netdevice ifnames instead of devlink port identifi‐ +cation. +% +mountpoint - see if a directory or file is a mountpoint +mountpoint [-d|-q] directory | file +mountpoint -x device +mountpoint checks whether the given directory or file is mentioned in the /proc/self/mountinfo file. +-d, --fs-devno +Show the major/minor numbers of the device that is mounted on the given directory. +-q, --quiet +Be quiet - don't print anything. +% +migratepages - Migrate the physical location a processes pages +migratepages pid from-nodes to-nodes +migratepages moves the physical location of a processes pages without any changes of the virtual address +space of the process. Moving the pages allows one to change the distances of a process to its memory. +If multiple nodes are specified for from-nodes or to-nodes then an attempt is made to preserve the rela‐ +tive location of each page in each nodeset. +Valid node specifiers +% +ssh-keygen — authentication key generation, management and conversion +[-f output_keyfile] +ssh-keygen -p [-P old_passphrase] [-N new_passphrase] [-f keyfile] +ssh-keygen -i [-m key_format] [-f input_keyfile] +ssh-keygen -e [-m key_format] [-f input_keyfile] +ssh-keygen -y [-f input_keyfile] +ssh-keygen -c [-P passphrase] [-C comment] [-f keyfile] +ssh-keygen -l [-v] [-E fingerprint_hash] [-f input_keyfile] +ssh-keygen -B [-f input_keyfile] +ssh-keygen -F hostname [-f known_hosts_file] [-l] +ssh-keygen -H [-f known_hosts_file] +ssh-keygen -R hostname [-f known_hosts_file] +ssh-keygen -r hostname [-f input_keyfile] [-g] +% +accessdb - dumps the content of a man-db database in a human readable format +/usr/sbin/accessdb [-d?V] [<index-file>] +accessdb will output the data contained within a man-db database in a human readable form. By default, +it will dump the data from /var/cache/man/index.<db-type>, where <db-type> is dependent on the database +library in use. +Supplying an argument to accessdb will override this default. +-d, --debug +Print debugging information. +-?, --help +% +sdiff - side-by-side merge of file differences +Mandatory arguments to long options are mandatory for short options too. +-o, --output=FILE +operate interactively, sending output to FILE +-E, --ignore-tab-expansion +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +dirmngr-client - Tool to access the Dirmngr services +dirmngr-client [options] [certfile|pattern] +The dirmngr-client is a simple tool to contact a running dirmngr and test whether a certificate has been +revoked --- either by being listed in the corresponding CRL or by running the OCSP protocol. If no dirm‐ +ngr is running, a new instances will be started but this is in general not a good idea due to the huge +performance overhead. +The usual way to run this tool is either: +dirmngr-client acert +or +% +whereis - locate the binary, source, and manual page files for a command +whereis [options] [-BMS directory... -f] name... +whereis locates the binary, source and manual files for the specified command names. The supplied names +are first stripped of leading pathname components and any (single) trailing extension of the form .ext +(for example: .c) Prefixes of s. resulting from use of source code control are also dealt with. whereis +then attempts to locate the desired program in the standard Linux places, and in the places specified by +$PATH and $MANPATH. +The search restrictions (options -b, -m and -s) are cumulative and apply to the subsequent name patterns +on the command line. Any new search restriction resets the search mask. For example, +whereis -bm ls tr -m gcc +% +geoiplookup - look up country using IP Address or hostname +geoiplookup [-d directory] [-f filename] [-v] <ipaddress|hostname> +geoiplookup uses the GeoIP library and database to find the Country that an IP address or hostname origi‐ +nates from. +For example +NL, Netherlands +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +ldns-version - print out the version of the ldns-library and tools on this system +ldns-version +ldns-version is used to print out version information of the ldns library and tools +ldns-version has no options. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +Transform syslinux config into GRUB one. +-c, --cwd=DIR +current directory of syslinux [default is parent directory of input file]. +-i, --isolinux +assume input is an isolinux configuration file. +-o, --output=FILE +write output to FILE [default=stdout]. +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +isosize - output the length of an iso9660 filesystem +isosize [options] iso9660_image_file +-x, --sectors +Show the block count and block size in human-readable form. The output uses the term "sectors" +for "blocks". +-d, --divisor number +% +toe - table of (terminfo) entries +toe [-v[n]] [-ahsuUV] file... +With no options, toe lists all available terminal types by primary name with descriptions. File argu‐ +ments specify the directories to be scanned; if no such arguments are given, your default terminfo direc‐ +tory is scanned. If you also specify the -h option, a directory header will be issued as each directory +is entered. +There are other options intended for use by terminfo file maintainers: +-a report on all of the terminal databases which ncurses would search, rather than only the first one +that it finds. +% +gcc - GNU project C and C++ compiler +gcc [-c|-S|-E] [-std=standard] +[-g] [-pg] [-Olevel] +[-Wwarn...] [-Wpedantic] +[-Idir...] [-Ldir...] +[-Dmacro[=defn]...] [-Umacro] +[-foption...] [-mmachine-option...] +[-o outfile] [@file] infile... +Only the most useful options are listed here; see below for the remainder. g++ accepts mostly the same +options as gcc. +When you invoke GCC, it normally does preprocessing, compilation, assembly and linking. The "overall +options" allow you to stop this process at an intermediate stage. For example, the -c option says not to +% +debugfs [ -DVwcin ] [ -b blocksize ] [ -s superblock ] [ -f cmd_file ] [ -R request ] [ -d +data_source_device ] [ -z undo_file ] [ device ] +The debugfs program is an interactive file system debugger. It can be used to examine and change the +device is a block device (e.g., /dev/sdXX) or a file containing the file system. +-w Specifies that the file system should be opened in read-write mode. Without this option, the file +system is opened in read-only mode. +% +badblocks - search a device for bad blocks +badblocks [ -svwnfBX ] [ -b block_size ] [ -c blocks_at_once ] [ -d read_delay_factor ] [ -e +max_bad_blocks ] [ -i input_file ] [ -o output_file ] [ -p num_passes ] [ -t test_pattern ] device [ +last_block ] [ first_block ] +badblocks is used to search for bad blocks on a device (usually a disk partition). device is the special +not specified, the last block on the device is used as a default. first_block is an optional parameter +specifying the starting block number for the test, which allows the testing to start in the middle of the +disk. If it is not specified the first block on the disk is used as a default. +important that the block size is properly specified, since the block numbers which are generated are very +dependent on the block size in use by the filesystem. For this reason, it is strongly recommended that +% +userdel - delete a user account and related files +userdel [options] LOGIN +The userdel command modifies the system account files, deleting all entries that refer to the user name +LOGIN. The named user must exist. +The options which apply to the userdel command are: +-f, --force +forces userdel to remove the user's home directory and mail spool, even if another user uses the same +home directory or if the mail spool is not owned by the specified user. If USERGROUPS_ENAB is defined +to yes in /etc/login.defs and if a group exists with the same name as the deleted user, then this +% +symcryptrun - Call a simple symmetric encryption tool +symcryptrun --class class --program program --keyfile keyfile [--decrypt|--encrypt] [inputfile] +Sometimes simple encryption tools are already in use for a long time and there might be a desire to inte‐ +grate them into the GnuPG framework. The protocols and encryption methods might be non-standard or not +even properly documented, so that a full-fledged encryption tool with an interface like gpg is not +doable. symcryptrun provides a solution: It operates by calling the external encryption/decryption mod‐ +ule and provides a passphrase for a key using the standard pinentry based mechanism through gpg-agent. +build time. +For encryption, the plain text must be provided on STDIN or as the argument inputfile, and the ciphertext +will be output to STDOUT. For decryption vice versa. +% +ownership - Compaq ownership tag retriever +ownership retrieves and prints the "ownership tag" that can be set on Compaq computers. Contrary to all +other programs of the dmidecode package, ownership doesn't print any version information, nor labels, but +-d, --dev-mem FILE +Read memory from device FILE (default: /dev/mem) +-h, --help +Display usage information and exit +% +sln - create symbolic links +sln source dest +sln filelist +that if for some reason the dynamic linker is not working, sln can be used to make symbolic links to +dynamic libraries. +The command line has two forms. In the first form, it creates dest as a new symbolic link to source. +In the second form, filelist is a list of space-separated pathname pairs, and the effect is as if sln was +executed once for each line of the file, with the two pathnames as the arguments. +The sln program supports no command-line options. +% +gdbus-codegen - D-Bus code and documentation generator +gdbus-codegen [-h, --help] [--interface-prefix org.project.Prefix] [--generate-c-code OUTFILES] +[--c-namespace YourProject] [--c-generate-object-manager] +[--c-generate-autocleanup none|objects|all] [--generate-docbook OUTFILES] +[--xml-files FILE] [--annotate ELEMENT KEY VALUE]... FILE [FILE...] +gdbus-codegen is used to generate code and/or documentation for one or more D-Bus interfaces. The tool +C code (via --generate-c-code) and Docbook XML (via --generate-docbook). +GENERATING C CODE +When generating C code, a #GInterface -derived type is generated for each D-Bus interface. Additionally, +for every generated type, FooBar, two concrete instantiable types, FooBarProxy and FooBarSkeleton, +implementing said interface are also generated. The former is derived from #GDBusProxy and intended for +% +talkd - Talk server +talkd [OPTION...] +Talk daemon, using service `ntalk'. +-a, --acl=FILE +read site-wide ACLs from FILE +-d, --debug +enable debugging +-i, --idle-timeout=SECONDS set idle timeout value to SECONDS +-l, --logging +% +dbus-run-session - start a process as a new D-Bus session +dbus-run-session --help +dbus-run-session --version +dbus-run-session is used to start a session bus instance of dbus-daemon from a shell script, and start a +specified program in that session. The dbus-daemon will run for as long as the program does, after which +it will terminate. +One use is to run a shell with its own dbus-daemon in a text‐mode or SSH session, and have the +dbus-daemon terminate automatically on leaving the sub‐shell, like this: +% +ldns-read-zone - read a zonefile and print it +ldns-read-zone ZONEFILE +pretty-printing makeup. +-c Canonicalize all resource records in the zone before printing +-b Include Bubble Babble encoding of DS's. +% +tracepath, tracepath6 - traces path to a network host discovering MTU along this path +tracepath [-n] [-b] [-l pktlen] [-m max_hops] [-p port] {destination} +It traces path to destination discovering MTU along this path. It uses UDP port port or some random +port. It is similar to traceroute, only does not require superuser privileges and has no fancy options. +tracepath6 is good replacement for traceroute6 and classic example of application of Linux error queues. +error messages. Probably, it will change, when they will be updated. For now it uses Van Jacobson's +trick, sweeping a range of UDP ports to maintain trace history. +-n Print primarily IP addresses numerically. +% +msgfilter - edit translations of message catalog +msgfilter [OPTION] FILTER [FILTER-OPTION] +Applies a filter to all translations of a translation catalog. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +-i, --input=INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +arpaname - translate IP addresses to the corresponding ARPA names +arpaname {ipaddress ...} +BIND 9 Administrator Reference Manual. +Internet Systems Consortium, Inc. +% +ntp-keygen - Create a NTP host key +ntp-keygen [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +software library has been installed, it generates keys, certificate and identity files used in public key +cryptography. These files are used for cookie encryption, digital signature and challenge/response iden‐ +tification algorithms compatible with the Internet standard security infrastructure. +All files are in PEM-encoded printable ASCII format, so they can be embedded as MIME attachments in mail +to other sites and certificate authorities. By default, files are not encrypted. +% +dnsdomainname - show DNS domain name +dnsdomainname [OPTION...] +Show domain part of the system's fully qualified host name. +The tool uses gethostname to get the host name of the system and getaddrinfo to resolve it into a canoni‐ +cal name. The part after the first period ('.') of the canonical name is shown. +-?, --help +give this help list +--usage +give a short usage message +% +ntpd - NTP daemon program +The ntpd utility is an operating system daemon which sets and maintains the system time of day in syn‐ +chronism with Internet standard time servers. It is a complete implementation of the Network Time Proto‐ +onds. While the ultimate precision is not achievable with ordinary workstations and networks of today, +% +indxbib - make inverted index for bibliographic databases +indxbib [ -vw ] [ -cfile ] [ -ddir ] [ -ffile ] [ -hn ] [ -istring ] [ -kn ] [ -ln ] [ -nn ] [ -ofile ] +[ -tn ] [ filename... ] +which is then renamed to this. If no filenames are given on the command line because the -f option has +been used, and no -o option is given, the index will be named Ind.i. +Bibliographic databases are divided into records by blank lines. Within a record, each fields starts +with a % character at the beginning of a line. Fields have a one letter name which follows the % charac‐ +ter. +The values set by the -c, -n, -l and -t options are stored in the index; when the index is searched, keys +% +gencat — generate a formatted message catalog +gencat catfile msgfile... +The gencat utility shall merge the message text source file msgfile into a formatted message catalog cat‐ +file. The file catfile shall be created if it does not already exist. If catfile does exist, its mes‐ +sages shall be included in the new catfile. If set and message numbers collide, the new message text +defined in msgfile shall replace the old message text currently contained in catfile. +% +grub-mkrescue - make a GRUB rescue image +grub-mkrescue [OPTION...] [OPTION] SOURCE... +Make GRUB CD-ROM, disk, pendrive and floppy bootable image. +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +xfs_fsr - filesystem reorganizer for XFS +xfs_fsr [-vdg] [-t seconds] [-p passes] [-f leftoff] [-m mtab] +xfs_fsr [-vdg] [xfsdev | file] ... +xfs_fsr -V +xfs_fsr is applicable only to XFS filesystems. +xfs_fsr improves the organization of mounted filesystems. The reorganization algorithm operates on one +file at a time, compacting or otherwise improving the layout of the file extents (contiguous blocks of +file data). +The following options are accepted by xfs_fsr. The -m, -t, and -f options have no meaning if any +filesystems or files are specified on the command line. +% +touch - change file timestamps +touch [OPTION]... FILE... +Update the access and modification times of each FILE to the current time. +A FILE argument that does not exist is created empty, unless -c or -h is supplied. +A FILE argument string of - is handled specially and causes touch to change the times of the file associ‐ +ated with standard output. +Mandatory arguments to long options are mandatory for short options too. +-a change only the access time +% +chacl - change the access control list of a file or directory +chacl acl pathname... +chacl -b acl dacl pathname... +chacl -d dacl pathname... +chacl -R pathname... +chacl -D pathname... +chacl -B pathname... +chacl -l pathname... +chacl -r pathname... +chacl is an IRIX-compatibility command, and is maintained for those users who are familiar with its use +% +secret-tool - Store and retrieve passwords +secret-tool store --label='Label' {attribute} {value} ... +secret-tool lookup {attribute} {value} ... +secret-tool clear {attribute} {value} ... +secret-tool search [--all]{attribute} {value} ... +secret-tool is a command line tool that can be used to store and retrieve passwords. +Each password is stored in an item. Items are uniquely identified by a set of attribute keys and values. +When storing a password you must specify unique pairs of attributes names and values, and when looking up +a password you provide the same attribute name and value pairs. +% +cations to provide batch processing features. +database file. If the database file does not exist, it will be created. If the database file does +exist, it will be opened. +For example, to create a new database file named "mydata.db", create a table named "memos" and insert a +couple of records into that table: +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +glib-gettextize - gettext internationalization utility +glib-gettextize [OPTION...] [DIRECTORY] +glib-gettextize helps to prepare a source package for being internationalized through gettext. It is a +variant of the gettextize that ships with gettext. +glib-gettextize differs from gettextize in that it doesn't create an intl/ subdirectory and doesn't +modify po/ChangeLog (note that newer versions of gettextize behave like this when called with the +--no-changelog option). +--help +print help and exit +% +ldns-compare-zones - read and compare two zonefiles and print differences +ldns-compare-zones reads two DNS zone files and prints number of differences. +Output is formated to: ++NUM_INS -NUM_DEL ~NUM_CHG +are considered inserted, and counted as NUM_INS. If an owner name is present in both, but there is a dif‐ +ference in the amount or content of the records, these are considered changed, and counted as NUM_CHG. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +fsck.cramfs - fsck compressed ROM file system +fsck.cramfs [options] file +fsck.cramfs is used to check the cramfs file system. +-v, --verbose +Enable verbose messaging. +-b, --blocksize blocksize +Use this blocksize, defaults to page size. Must be equal to what was set at creation time. Only +used for --extract. +--extract[=directory] +% +xmlcatalog - Command line tool to parse and manipulate XML or SGML catalog files. +--noout | --no-super-update | [-v | --verbose]] {CATALOGFILE} {ENTITIES...} +xmlcatalog is a command line application allowing users to monitor and manipulate XML and SGML catalogs. +Its functions can be invoked from a single command from the command line, or it can perform multiple +functions in interactive mode. It can operate on both XML and SGML files. +xmlcatalog accepts the following options (in alphabetical order): +--add TYPE ORIG REPLACE +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +irqbalance - distribute hardware interrupts across processors on a multiprocessor system +irqbalance +The purpose of irqbalance is to distribute hardware interrupts across processors on a multiprocessor sys‐ +tem in order to increase performance. +-o, --oneshot +Causes irqbalance to be run once, after which the daemon exits. +-d, --debug +Causes irqbalance to print extra debug information. Implies --foreground. +-f, --foreground +% +xfs_ncheck - generate pathnames from i-numbers for XFS +xfs_ncheck [ -i ino ] ... [ -f ] [ -s ] [ -l logdev ] device +xfs_ncheck -V +xfs_ncheck with no -i arguments generates an inode number and pathname list of all files on the given +order. The filesystem to be examined is specified by the device argument, which should be the disk or +volume device for the filesystem. Filesystems stored in files can also be checked, using the -f flag. +-f Specifies that the filesystem image to be processed is stored in a regular file at device (see +into an ordinary file. +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +btrfs-rescue - Recover a damaged btrfs filesystem +btrfs rescue <subcommand> <args> +btrfs rescue is used to try to recover a damaged btrfs filesystem. +chunk-recover [options] <device> +Recover the chunk tree by scanning the devices +Options +-y +assume an answer of yes to all questions. +% +tracepath, tracepath6 - traces path to a network host discovering MTU along this path +tracepath [-n] [-b] [-l pktlen] [-m max_hops] [-p port] {destination} +It traces path to destination discovering MTU along this path. It uses UDP port port or some random +port. It is similar to traceroute, only does not require superuser privileges and has no fancy options. +tracepath6 is good replacement for traceroute6 and classic example of application of Linux error queues. +error messages. Probably, it will change, when they will be updated. For now it uses Van Jacobson's +trick, sweeping a range of UDP ports to maintain trace history. +-n Print primarily IP addresses numerically. +% +coredumpctl - Retrieve and process saved core dumps and metadata +coredumpctl is a tool that can be used to retrieve and process core dumps and metadata which were saved +The following options are understood: +-h, --help +Print a short help text and exit. +--version +Print a short version string and exit. +% +-D user_dn +tion on the LDAP server. +-w passwd +-H ldapuri +% +xfs_growfs, xfs_info - expand an XFS filesystem +xfs_growfs [ -dilnrx ] [ -D size ] [ -e rtextsize ] [ -L size ] [ -m maxpct ] [ -t mtab ] [ -R size ] +mount-point +xfs_growfs -V +xfs_info [ -t mtab ] mount-point +xfs_info -V +The existing contents of the filesystem are undisturbed, and the added space becomes available for addi‐ +tional file storage. +% +tr - translate or delete characters +Translate, squeeze, and/or delete characters from standard input, writing to standard output. +-c, -C, --complement +-d, --delete +-s, --squeeze-repeats +replace each sequence of a repeated character that is listed in the last specified SET, with a +single occurrence of that character +% +rarp - manipulate the system RARP table +rarp [-V] [--version] [-h] [--help] +rarp -a +rarp [-v] -d hostname ... +rarp [-v] [-t type] -s hostname hw_addr +replacement RARP daemon, see ftp://ftp.dementia.org/pub/net-tools +Rarp manipulates the kernel's RARP table in various ways. The primary options are clearing an address +mapping entry and manually setting up one. For debugging purposes, the rarp program also allows a com‐ +plete dump of the RARP table. +% +kadmin [-O|-N] [-r realm] [-p principal] [-q query] [[-c cache_name]|[-k [-t keytab]]|-n] [-w password] +[-s admin_server[:port]] +kadmin.local [-r realm] [-p principal] [-q query] [-d dbname] [-e enc:salt ...] [-m] [-x db_args] +vide nearly identical functionalities; the difference is that kadmin.local directly accesses the KDC +man page will use "kadmin" to refer to both versions. kadmin provides for the maintenance of Kerberos +principals, password policies, and service key tables (keytabs). +The remote kadmin client uses Kerberos to authenticate to kadmind using the service principal kad‐ +min/ADMINHOST (where ADMINHOST is the fully-qualified hostname of the admin server) or kadmin/admin. If +% +machinectl - Control the systemd machine manager +considered running instances of: +· Virtual Machines (VMs) that virtualize hardware to run full operating system (OS) instances +(including their kernels) in a virtualized environment on top of the host OS. +· Containers that share the hardware and OS kernel with the host OS, in order to run OS userspace +instances on top the host OS. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +less - opposite of more +less -? +less --help +less -V +less --version +less [-[+]aABcCdeEfFgGiIJKLmMnNqQrRsSuUVwWX~] +[-b space] [-h lines] [-j line] [-k keyfile] +[-{oO} logfile] [-p pattern] [-P prompt] [-t tag] +[-T tagsfile] [-x tab,...] [-y lines] [-[z] lines] +[-# shift] [+[+]cmd] [--] [filename]... +movement. Also, less does not have to read the entire input file before starting, so with large input +% +nproc - print the number of processing units available +nproc [OPTION]... +of online processors +--all print the number of installed processors +--ignore=N +if possible, exclude N processing units +--help display this help and exit +--version +% +unicode_start - put keyboard and console in unicode mode +unicode_start [font [umap]] +put accordingly. +The parameter font is a font that is loaded. It should have a built-in Unicode map, or, if it hasn't, +such a map can be given explicitly as second parameter. When no font was specified, the current font is +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +ldns-rrsig - print out the inception and expiration dates in human readable form +ldns-rrsig domain [ type ] +ldns-rrsig is used to print the expiration and inception date of a RRSIG. The first argument is a domain +name. ldns-rrsig will query the authoritative servers for that domain to get a list of RRSIGs. It will +then print out the inception and experiration dates for the RRSIG covering the SOA record. +If the second argument type is given the RRSIG covering that type will be shown. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +blkdiscard - discard sectors on a device +blkdiscard [options] [-o offset] [-l length] device +ior based on range or size, as explained below. +The device argument is the pathname of the block device. +WARNING: All data in the discarded region on the device will be lost! +% +lvdisplay — display attributes of a logical volume +lockingfailure] [--ignoreskippedcluster] [--maps] [--nosuffix] [-P|--partial] [--reportformat +{basic|json}] [-S|--select Selection] [--units hHbBsSkKmMgGtTpPeE] [-v|--verbose] [--version] [Vol‐ +tion] ...] [-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] +[--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--segments] [--separator Sepa‐ +lvdisplay allows you to see the attributes of a logical volume like size, read/write status, snapshot +% +xmllint - command line XML tool +xmllint [--version | --debug | --shell | --xpath "XPath_expression" | --debugent | --copy | --recover | +--noent | --noout | --nonet | --path "PATH(S)" | --load-trace | --htmlout | --nowrap | --valid | +--postvalid | --dtdvalid URL | --dtdvalidfpi FPI | --timing | --output FILE | --repeat | --insert +| --compress | --html | --xmlout | --push | --memory | --maxmem NBBYTES | --nowarning | +--noblanks | --nocdata | --format | --encode ENCODING | --dropdtd | --nsclean | --testIO | +--catalogs | --nocatalogs | --auto | --xinclude | --noxincludenode | --loaddtd | --dtdattr | +--stream | --walker | --pattern PATTERNVALUE | --chkregister | --relaxng SCHEMA | --schema SCHEMA +xmllint --help +The xmllint program parses one or more XML files, specified on the command line as XML-FILE (or the +standard input if the filename provided is - ). It prints various types of output, depending upon the +% +gcc - GNU project C and C++ compiler +gcc [-c|-S|-E] [-std=standard] +[-g] [-pg] [-Olevel] +[-Wwarn...] [-Wpedantic] +[-Idir...] [-Ldir...] +[-Dmacro[=defn]...] [-Umacro] +[-foption...] [-mmachine-option...] +[-o outfile] [@file] infile... +Only the most useful options are listed here; see below for the remainder. g++ accepts mostly the same +options as gcc. +When you invoke GCC, it normally does preprocessing, compilation, assembly and linking. The "overall +options" allow you to stop this process at an intermediate stage. For example, the -c option says not to +% +gcov - coverage testing tool +gcov [-v|--version] [-h|--help] +[-a|--all-blocks] +[-b|--branch-probabilities] +[-c|--branch-counts] +[-d|--display-progress] +[-f|--function-summaries] +[-i|--intermediate-format] +[-l|--long-file-names] +[-m|--demangled-names] +[-n|--no-output] +[-o|--object-directory directory|file] +[-p|--preserve-paths] +[-r|--relative-only] +[-s|--source-prefix directory] +% +libtoolize [OPTION]... +Prepare a package to use libtool. +-c, --copy +copy files rather than symlinking them +--debug +enable verbose shell tracing +-n, --dry-run +print commands rather than running them +% +cpp - The C Preprocessor +cpp [-Dmacro[=defn]...] [-Umacro] +[-Idir...] [-iquotedir...] +[-Wwarn...] +[-M|-MM] [-MG] [-MF filename] +[-MP] [-MQ target...] +[-MT target...] +[-P] [-fno-working-directory] +[-x language] [-std=standard] +infile outfile +Only the most useful options are listed here; see below for the remainder. +The C preprocessor, often known as cpp, is a macro processor that is used automatically by the C compiler +% +wall - write a message to all users +wall [-n] [-t timeout] [message | file] +wall displays a message, or the contents of a file, or otherwise its standard input, on the terminals of +all currently logged in users. The command will wrap lines that are longer than 79 characters. Short +lines are whitespace padded to have 79 characters. The command will always put a carriage return and new +line at the end of each line. +Only the superuser can write on the terminals of users who have chosen to deny messages or are using a +program which automatically denies messages. +Reading from a file is refused when the invoker is not superuser and the program is suid or sgid. +% +sftp — secure file transfer program +[-i identity_file] [-l limit] [-o ssh_option] [-P port] [-R num_requests] [-S program] +[-s subsystem | sftp_server] host +sftp [user@]host[:file ...] +sftp [user@]host[:dir[/]] +sftp -b batchfile [user@]host +compression. sftp connects and logs into the specified host, then enters an interactive command mode. +The second usage format will retrieve files automatically if a non-interactive authentication method is +used; otherwise it will do so after successful interactive authentication. +% +systemd-cat - Connect a pipeline or program's output with the journal +filter tool in a shell pipeline to pass the output the previous pipeline element generates to the +journal. +If no parameter is passed, systemd-cat will write everything it reads from standard input (stdin) to the +journal. +If parameters are passed, they are executed as command line with standard output (stdout) and standard +error output (stderr) connected to the journal, so that all it writes is stored in the journal. +% +glilypond — integrate lilypond parts into groff +glilypond [ options] [-] [--] [ filespec ....] +glilypond transforms sheet music written in the lilypond language into the groff(7) language using the +Files in groff language and standard input can be provided as arguments. +Breaking Options +-?|-h|--help|--usage +Print help or usage information, then leave the program. +--version +% +hostname - show or set system host name +Show or set the system's host name. +-a, --aliases +alias names +-d, --domain +DNS domain name +-f, --fqdn, --long +DNS host name or FQDN +% +systemd-sysusers, systemd-sysusers.service - Allocate system users and groups +systemd-sysusers.service +systemd-sysusers creates system users and groups, based on the file format and location specified in +If invoked with no arguments, it applies all directives from all files found. If one or more filenames +are passed on the command line, only the directives in these files are applied. If only the basename of a +string - is specified as filename, entries from the standard input of the process are read. +% +dnssec-keygen - DNSSEC key generation tool +[-D date/offset] [-D sync date/offset] [-E engine] [-f flag] [-G] [-g generator] [-h] +[-I date/offset] [-i interval] [-K directory] [-k] [-L ttl] [-P date/offset] +[-P sync date/offset] [-p protocol] [-q] [-R date/offset] [-r randomdev] [-S key] +[-s strength] [-t type] [-V] [-v level] [-z] {name} +The name of the key is specified on the command line. For DNSSEC keys, this must match the name of the +zone for which the key is being generated. +% +msgen - create English message catalog +msgen [OPTION] INPUTFILE +Creates an English translation catalog. The input file is the last created English PO file, or a PO Tem‐ +plate file (generally created by xgettext). Untranslated entries are assigned a translation that is +identical to the msgid. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO or POT file +-D, --directory=DIRECTORY +% +srptool - GnuTLS SRP tool +srptool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Simple program that emulates the programs in the Stanford SRP (Secure Remote Password) libraries using +GnuTLS. It is intended for use in places where you don't expect SRP authentication to be the used for +system users. +In brief, to use SRP you need to create two files. These are the password file that holds the users and +the verifiers associated with them and the configuration file to hold the group parameters (called +tpasswd.conf). +% +install - copy files and set attributes +install [OPTION]... [-T] SOURCE DEST +install [OPTION]... SOURCE... DIRECTORY +install [OPTION]... -t DIRECTORY SOURCE... +install [OPTION]... -d DIRECTORY... +want to download and install a ready-to-use package on a GNU/Linux system, you should instead be using a +In the first three forms, copy SOURCE to DEST or multiple SOURCE(s) to the existing DIRECTORY, while set‐ +TORY(ies). +% +modinfo - Show information about a Linux Kernel module +modinfo [-0] [-F field] [-k kernel] [modulename|filename...] +modinfo -V +modinfo -h +modinfo extracts information from the Linux Kernel modules given on the command line. If the module name +when loading kernel modules. +modinfo by default lists each attribute of the module in form fieldname : value, for easy reading. The +filename is listed the same way (although it's not really an attribute). +% +scriptreplay - play back typescripts, using timing information +scriptreplay [options] [-t] timingfile [typescript [divisor]] +rhythm as it originally appeared when the script was recorded. +The replay simply displays the information again; the programs that were run when the typescript was +being recorded are not run again. Since the same information is simply being displayed, scriptreplay is +only guaranteed to work properly if run on the same type of terminal the typescript was recorded on. +which scriptreplay is sending its output. +% +routel - list routes with pretty output format +routef - flush routes +routel [tablenr [raw ip args...]] +routef +The routel script will list routes in a format that some might consider easier to interpret then the ip +route list equivalent. +The routef script does not take any arguments and will simply flush the routing table down the drain. +FILES +/usr/bin/routef +/usr/bin/routel +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +ldnsd - simple daemon example code +ldnsd port zone zonefile +server! +ldnsd takes a port, zone and zonefile as arguments. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +ncursesw6-config - helper script for ncurses libraries +ncursesw6-config [options] +libraries. +--prefix +echos the package-prefix of ncurses +--exec-prefix +echos the executable-prefix of ncurses +--cflags +% +bsdcat — expand files to standard output +bsdcat [options] [files] +bsdcat expands files to standard output. +decompressed data it written to standard output. +To decompress a file: +bsdcat example.txt.gz > example.txt +% +mesg - display (or do not display) messages from other users +mesg [option] [n|y] +The mesg utility is invoked by a user to control write access others have to the terminal device associ‐ +Traditionally, write access is allowed by default. However, as users become more conscious of various +security risks, there is a trend to remove write access by default, at least for the primary login shell. +To make sure your ttys are set the way you want them to be set, mesg should be executed in your login +scripts. +n Disallow messages. +% +pvmove — move physical extents +[-d|--debug] [-h|--help] [-i|--interval Seconds] [--noudevsync] [--reportformat {basic|json}] [-v|--ver‐ +bose] [-n|--name LogicalVolume] [SourcePhysicalVolume[:PE[-PE]...] [DestinationPhysicalVol‐ +ume[:PE[-PE]...]...]] +pvmove allows you to move the allocated physical extents (PEs) on SourcePhysicalVolume to one or more +extents used by that LV will be moved to free (or specified) extents on DestinationPhysicalVolume(s). If +no DestinationPhysicalVolume is specified, the normal allocation rules for the Volume Group are used. +If pvmove gets interrupted for any reason (e.g. the machine crashes) then run pvmove again without any +PhysicalVolume arguments to restart any moves that were in progress from the last checkpoint. Alterna‐ +tively use pvmove --abort at any time to abort. The resulting location of logical volumes after an abort +% +makeinfo [OPTION]... TEXINFO-FILE... +Translate Texinfo source documentation to various other formats, by default Info files suitable for read‐ +ing online with Emacs or standalone GNU Info. +not depend on the installed name. +General options: +--document-language=STR locale to use in translating Texinfo keywords +for the output document (default C). +--error-limit=NUM +% +lsof - list open files +lsof [ -?abChKlnNOPRtUvVX ] [ -A A ] [ -c c ] [ +c c ] [ +|-d d ] [ +|-D D ] [ +|-e s ] [ +|-E ] [ +|-f +[cfgGn] ] [ -F [f] ] [ -g [s] ] [ -i [i] ] [ -k k ] [ +|-L [l] ] [ +|-m m ] [ +|-M ] [ -o [o] ] [ -p s ] +[ +|-r [t[m<fmt>]] ] [ -s [p:s] ] [ -S [t] ] [ -T [t] ] [ -u s ] [ +|-w ] [ -x [fl] ] [ -z [z] ] [ -Z [Z] +] [ -- ] [names] +% +setcap - set file capabilities +setcap [-q] [-v] (capabilities|-|-r) filename [ ... capabilitiesN fileN ] +In the absence of the -v (verify) option setcap sets the capabilities of each specified filename to the +capabilities specified. The -v option is used to verify that the specified capabilities are currently +associated with the file. +The special capability string, '-', can be used to indicate that capabilities are read from the standard +The special capability string, '-r', is used to remove a capability set from a file. +% +jfs_tune - adjust tunable file system parameters on JFS +jfs_tune [options] device +jfs_tune adjusts tunable parameters on a Linux JFS file system or external journal. jfs_tune must be run +as root. +system or JFS external journal has been created. +-J device=external-journal +Attach the JFS external journal located on external-journal to the JFS file system on device. +The external journal must already have been created using the command. More than one file system +% +resizecons - change kernel idea of the console size +resizecons COLSxROWS +resizecons -lines ROWS +The resizecons command tries to change the videomode of the console. There are several aspects to this: +(a) the kernel must know about it, (b) the hardware must know about it, (c) user programs must know about +console screen memory for all virtual consoles, and might fail if there is not enough memory. (In that +The most difficult part of this is (b), since it requires detailed knowledge of the video card hardware, +% +firewalld - Dynamic Firewall Manager +firewalld provides a dynamically managed firewall with support for network/firewall zones to define the +ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an +interface for services or applications to add firewall rules directly. +These are the command line options of firewalld: +-h, --help +Prints a short help text and exists. +% +mkinitcpio - Create an initial ramdisk environment +mkinitcpio [options] +Creates an initial ramdisk environment for booting the linux kernel. The initial ramdisk is in essence a +very small environment (early userspace) which loads various kernel modules and sets up necessary things +filesystems and root filesystems on a software RAID array. mkinitcpio allows for easy extension with +custom hooks, has autodetection at runtime, and many other features. +-A, --addhooks hooks +Add the additional hooks to the image. These will be processed in order after all other hooks from +times. +% +chage - change user password expiry information +chage [options] LOGIN +The chage command changes the number of days between password changes and the date of the last password +The options which apply to the chage command are: +-d, --lastday LAST_DAY +be expressed in the format YYYY-MM-DD (or the format more commonly used in your area). +-E, --expiredate EXPIRE_DATE +% +groupadd - create a new group +groupadd [options] group +The groupadd command creates a new group account using the values specified on the command line plus the +default values from the system. The new group will be entered into the system files as needed. +The options which apply to the groupadd command are: +-f, --force +exists. When used with -g, and the specified GID already exists, another (unique) GID is chosen (i.e. +-g is turned off). +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +workers] [-P pid_file] [-T time_offset] +The -r realm option specifies the realm for which the server should provide service. +does not apply to the LDAP database. +The -k keytype option specifies the key type of the master key to be entered manually as a password when +-m is given; the default is des-cbc-crc. +% +env - run a program in a modified environment +Mandatory arguments to long options are mandatory for short options too. +-i, --ignore-environment +start with an empty environment +-0, --null +end each output line with NUL, not newline +% +mdadm - manage MD devices aka Linux Software RAID +mdadm [mode] <raiddevice> [options] <component-devices> +devices (typically disk drives or partitions thereof) to be combined into a single device to hold (for +example) a single filesystem. Some RAID levels include redundancy and so can survive some degree of +device failure. +Linux Software RAID devices are implemented through the md (Multiple Devices) device driver. +MULTIPATH is not a Software RAID mechanism, but does involve multiple devices: each device is a path to +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +bc - An arbitrary precision calculator language +bc [ -hlwsqv ] [long-options] [ file ... ] +bc is a language that supports arbitrary precision numbers with interactive execution of statements. +There are some similarities in the syntax to the C programming language. A standard math library is +available by command line option. If requested, the math library is defined before processing any files. +bc starts by processing code from all the files listed on the command line in the order listed. After +all files have been processed, bc reads from the standard input. All code is executed as it is read. +(If a file contains a command to halt the processor, bc will never read from the standard input.) +document describes the language accepted by this processor. Extensions will be identified as such. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +taskset - set or retrieve a process's CPU affinity +taskset [options] mask command [argument...] +taskset [options] -p [mask] pid +taskset is used to set or retrieve the CPU affinity of a running process given its pid, or to launch a +new command with a given CPU affinity. CPU affinity is a scheduler property that "bonds" a process to a +given set of CPUs on the system. The Linux scheduler will honor the given CPU affinity and the process +scheduler attempts to keep processes on the same CPU as long as practical for performance reasons. +Therefore, forcing a specific CPU affinity is useful only in certain applications. +The CPU affinity is represented as a bitmask, with the lowest order bit corresponding to the first logi‐ +% +nm - list symbols from object files +nm [-A|-o|--print-file-name] [-a|--debug-syms] +[-B|--format=bsd] [-C|--demangle[=style]] +[-D|--dynamic] [-fformat|--format=format] +[-g|--extern-only] [-h|--help] +[-l|--line-numbers] [-n|-v|--numeric-sort] +[-P|--portability] [-p|--no-sort] +[-r|--reverse-sort] [-S|--print-size] +[-s|--print-armap] [-t radix|--radix=radix] +[-u|--undefined-only] [-V|--version] +[--plugin name] [--size-sort] [--special-syms] +[--synthetic] [--target=bfdname] +[objfile...] +% +gropdf - PDF driver for groff +gropdf [-delvs] [-F dir] [-p papersize] [-y foundry] [-u [cmapfile]] [files ...] +It is possible to have whitespace between a command line option and its parameter. +gropdf translates the output of GNU troff to PDF. Normally gropdf should be invoked by using the groff +command with a -Tpdf option. If no files are given, gropdf reads the standard input. A filename of - +also causes gropdf to read the standard input. PDF output is written to the standard output. When +gropdf is run by groff options can be passed to gropdf using groff's -P option. +See section FONT INSTALLATION below for a guide how to install fonts for gropdf. +-d Include debug information as comments within the PDF. Also produces an uncompressed PDF. +% +ksu - Kerberized super-user +ksu [ target_user ] [ -n target_principal_name ] [ -c source_cache_name ] [ -k ] [ -r time ] [ -pf ] [ -l +lifetime ] [ -z | Z ] [ -q ] [ -e command [ args ... ] ] [ -a [ args ... ] ] +REQUIREMENTS +use ksu. +ksu is a Kerberized version of the su program that has two missions: one is to securely change the real +and effective user ID to that of the target user, and the other is to create a new security context. +For the sake of clarity, all references to and attributes of the user invoking the program will start +with "source" (e.g., "source user", "source cache", etc.). +% +msgcomm - match two message catalogs +msgcomm [OPTION] [INPUTFILE]... +Find messages which are common to two or more of the specified PO files. By using the --more-than +print the unique messages). Translations, comments and extracted comments will be preserved, but only +from the first PO file to define them. File positions from all PO files will be cumulated. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE ... +input files +% +reiserfsck - The checking tool for the ReiserFS filesystem. +reiserfsck [ -aprVy ] [ --rebuild-sb | --check | --fix-fixable | --rebuild-tree | --clean-attributes ] [ +-j | --journal device ] [ -z | --adjust-size ] [ -n | --nolog ] [ -B | --badblocks file ] [ -l | --log‐ +file file ] [ -q | --quiet ] [ -y | --yes ] [ -f | --force ] [ -S | --scan-whole-partition ] [ --no-jour‐ +nal-available ] device +Reiserfsck searches for a Reiserfs filesystem on a device, replays any necessary transactions, and either +checks or repairs the file system. +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +--rebuild-sb +% +xfs_metadump - copy XFS filesystem metadata to a file +xfs_metadump [ -aefFgow ] [ -m max_extents ] ] [ -l logdev ] source target +xfs_metadump -V +xfs_metadump is a debugging tool that copies the metadata from an XFS filesystem to a file. The source +argument must be the pathname of the device or file containing the XFS filesystem and the target argument +output to be redirected to another program such as a compression application. +xfs_metadump does not alter the source filesystem in any way. The target image is a contiguous (non- +sparse) file containing all the filesystem's metadata and indexes to where the blocks were copied from. +% +ldd - print shared object dependencies +ldd [option]... file... +ldd prints the shared objects (shared libraries) required by each program or shared object specified on +the command line. An example of its use and output is the following: +$ ldd /bin/ls +% +expand - convert tabs to spaces +expand [OPTION]... [FILE]... +Convert tabs in each FILE to spaces, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-i, --initial +do not convert tabs after non blanks +-t, --tabs=NUMBER +% +basename - strip directory and suffix from filenames +Mandatory arguments to long options are mandatory for short options too. +-a, --multiple +-s, --suffix=SUFFIX +remove a trailing SUFFIX; implies -a +% +safety mechanism. The -f option disables this safety mechanism. +-h Display a usage message. +-n Dry-run; do not actually write blocks back to the filesystem. +% +mkfs.btrfs - create a btrfs filesystem +mkfs.btrfs [-A|--alloc-start <alloc-start>] [-b|--byte-count <byte-count>] [-d|--data <data-profile>] +[-m|--metadata <metadata profile>] [-M|--mixed] [-l|--leafsize <leafsize>] [-n|--nodesize <nodesize>] +[-s|--sectorsize <sectorsize>] [-L|--label <label>] [-K|--nodiscard] [-r|--rootdir <rootdir>] +[-V|--version] <device> [<device>...] +mkfs.btrfs is used to create the btrfs filesystem on a single or multiple devices. <device> is typically +a block device but can be a file-backed image as well. Multiple devices are grouped by UUID of the +filesystem. +Before mounting such filesystem, the kernel module must know all the devices either via preceding +execution of btrfs device scan or using the device mount option. See section MULTIPLE DEVICES for more +details. +% +runlevel - Print previous and current SysV runlevel +runlevel [options...] +"Runlevels" are an obsolete way to start and stop groups of services used in SysV init. systemd provides +a compatibility layer that maps runlevels to targets, and associated binaries like runlevel. +Nevertheless, only one runlevel can be "active" at a given time, while systemd can activate multiple +targets concurrently, so the mapping to runlevels is confusing and only approximate. Runlevels should not +be used in new code, and are mostly useful as a shorthand way to refer the matching systemd targets in +kernel boot parameters. +┌─────────┬───────────────────┐ +│Runlevel │ Target │ +├─────────┼───────────────────┤ +% +pdfroff - create PDF documents using groff +pdfroff [-abcegilpstzCEGNRSUVXZ] [-d cs] [-f fam] [-F dir] [-I dir] [-L arg] [-m name] [-M dir] [-n num] +[-o list] [-P arg] [-r cn] [-T dev] [-w name] [-W name] [--emit-ps] [--no-toc-relocation] [--no- +kill-null-pages] [--stylesheet=name] [--no-pdf-output] [--pdf-output=name] +[--no-reference-dictionary] [--reference-dictionary=name] [--report-progress] +[--keep-temporary-files] file ... +pdfroff -h | --help +pdfroff -v | --version [option ...] +pdfroff is a wrapper program for the GNU text processing system, groff. It transparently handles the +mechanics of multiple pass groff processing, when applied to suitably marked up groff source files, such +that tables of contents and body text are formatted separately, and are subsequently combined in the cor‐ +rect order, for final publication as a single PDF document. A further optional “style sheet” capability +is provided; this allows for the definition of content which is required to precede the table of con‐ +% +update-smart-drivedb - update smartmontools drive database +other platforms.] +update-smart-drivedb updates /usr/share/smartmontools/drivedb.h or DESTFILE from smartmontools SVN repos‐ +itory. +It tries to download first from the current branch and then from trunk. The tools used for downloading +The old file is kept if the downloaded file is identical (ignoring the differences in Id string) other‐ +wise it is moved to drivedb.h.old. +% +sg - execute command as different group ID +sg [-] [group [-c ] command] +The sg command works similar to newgrp but accepts a command. The command will be executed with the +Another difference between newgrp and sg is that some shells treat newgrp specially, replacing themselves +command you are returned to your previous group ID. +CONFIGURATION +The following configuration variables in /etc/login.defs change the behavior of this tool: +SYSLOG_SG_ENAB (boolean) +Enable "syslog" logging of sg activity. +% +slabtop - display kernel slab cache information in real time +slabtop [options] +slabtop displays detailed kernel slab cache information in real time. It displays a listing of the top +caches sorted by one of the listed sort criteria. It also displays a statistics header filled with slab +layer information. +Normal invocation of slabtop does not require any options. The behavior, however, can be fine-tuned by +specifying one or more of the following flags: +-d, --delay=N +Refresh the display every n in seconds. By default, slabtop refreshes the display every three +seconds. To exit the program, hit q. +% +journalctl - Query the systemd journal +If called without parameters, it will show the full contents of the journal, starting with the oldest +entry collected. +If one or more match arguments are passed, the output is filtered accordingly. A match is in the format +"FIELD=VALUE", e.g. "_SYSTEMD_UNIT=httpd.service", referring to the components of a structured journal +entry. See systemd.journal-fields(7) for a list of well-known fields. If multiple matches are specified +matching different fields, the log entries are filtered by both, i.e. the resulting output will show only +entries matching all the specified matches of this kind. If two matches apply to the same field, then +% +setmetamode - define the keyboard meta key handling +setmetamode [ {meta|bit|metabit | esc|prefix|escprefix} ] +Without argument, setmetamode prints the current Meta key mode. With argument, it sets the Meta key mode +as indicated. The setting before and after the change are reported. +The Meta key mode is specific for each VT (and the VT corresponding to stdin is used). One might use +setmetamode in /etc/rc to define the initial state of the Meta key mode, e.g. by +for tty in $INITTY; do +setmetamode escprefix < $tty +done +% +gpgconf - Modify .gnupg home directories +gpgconf [options] --list-components +gpgconf [options] --list-options component +gpgconf [options] --change-options component +The gpgconf is a utility to automatically and reasonable safely query and modify configuration files in +the ‘.gnupg’ home directory. It is designed not to be invoked manually by the user, but automatically by +graphical user interfaces (GUI). ([Please note that currently no locking is done, so concurrent access +guarantees.]) +gpgconf provides access to the configuration of one or more components of the GnuPG system. These compo‐ +nents correspond more or less to the programs that exist in the GnuPG framework, like GnuPG, GPGSM, DirM‐ +% +grub-set-default - set the saved default boot entry for GRUB +grub-set-default [OPTION] MENU_ENTRY +-h, --help +print this message and exit +-V, --version +print the version information and exit +--boot-directory=DIR +expect GRUB images under the directory DIR/grub instead of the /boot/grub directory +% +vgimport — make exported volume groups known to the system +vgimport [-a|--all] [-d|--debug] [-h|-?|--help] [--reportformat {basic|json}] [-S|--select Selection] +system again, perhaps after moving its Physical Volumes from a different machine. vgexport clears the VG +system ID, and vgimport sets the VG system ID to match the host running vgimport (if the host has a sys‐ +tem ID). +-a, --all +Import all exported Volume Groups. +% +chsh - change your login shell +chsh [-s shell] [-l] [-u] [-v] [username] +chsh is used to change your login shell. If a shell is not given on the command line, chsh prompts for +one. +chsh supports non-local entries (kerberos, LDAP, etc.) if linked with libuser, otherwise use ypchsh, +lchsh or any other implementation for non-local entries. +-s, --shell shell +Specify your login shell. +-l, --list-shells +% +localectl - Control the system locale and keyboard layout settings +The system locale controls the language settings of system services and of the UI before the user logs +in, such as the display manager, as well as the default for users after login. +The keyboard settings control the keyboard layout used on the text console and of the graphical UI before +the user logs in, such as the display manager, as well as the default for users after login. +during early system boot. The initramfs is not rebuilt automatically by localectl. +% +whistles you can expect from a decent OpenPGP implementation. +as it requires several other modules to be installed. +RETURN VALUE +for fatal errors. +% +biosdecode - BIOS information decoder +biosdecode parses the BIOS memory and prints information about all structures (or entry points) it knows +of. Currently known entry point types are: +· SMBIOS (System Management BIOS) +Use dmidecode for a more detailed output. +· DMI (Desktop Management Interface, a legacy version of SMBIOS) +Use dmidecode for a more detailed output. +· SYSID +% +whistles you can expect from a decent OpenPGP implementation. +as it requires several other modules to be installed. +RETURN VALUE +for fatal errors. +% +manpath - determine search path for manual pages +manpath [-qgdc?V] [-m system[,...]] [-C file] +If $MANPATH is set, manpath will simply display its contents and issue a warning. If not, manpath will +determine a suitable manual page hierarchy search path and display the results. +The colon-delimited path is determined using information gained from the man-db configuration file - +(/etc/man_db.conf) and the user's environment. +-q, --quiet +Do not issue warnings. +-d, --debug +% +guile - The GNU Project Extension Language +guile [-L DIRECTORY] [-l FILE] [-e FUNCTION] [\] [-c EXPR] [-s SCRIPT] [--] [SCRIPT [ARGs for SCRIPT]] +Only the most useful options are listed here; see below for the remainder. +standards, providing additional features necessary for real-world use. +Guile works well for interactive use, basic scripting, and extension of larger applications, as well as +for stand-alone Scheme application development. +The guile executable itself provides a stand-alone interactive compiler and run-time for Scheme programs, +both for interactive use and for executing Scheme scripts or programs. +% +namei - follow a pathname until a terminal point is found +namei [options] pathname... +namei interprets its arguments as pathnames to any type of Unix file (symlinks, files, directories, and +so forth). namei then follows each pathname until an endpoint is found (a file, a directory, a device +node, etc). If it finds a symbolic link, it shows the link, and starts following it, indenting the out‐ +put to show the context. +For each line of output, namei uses the following characters to identify the file type found: +f: = the pathname currently being resolved +d = directory +% +emacs - GNU project Emacs +emacs [ command-line switches ] [ files ... ] +The user functionality of GNU Emacs encompasses everything other editors do, and it is easily extensible +since its editing commands are written in Lisp. +The primary documentation of GNU Emacs is in the GNU Emacs Manual, which you can read using Info, either +from Emacs or as a standalone program. Please look there for complete and up-to-date documentation. +Emacs has an extensive interactive help facility, but the facility assumes that you know how to manipu‐ +% +swapon, swapoff - enable/disable devices and files for paging and swapping +swapon [options] [specialfile...] +swapoff [-va] [specialfile...] +swapon is used to specify devices on which paging and swapping are to take place. +to indicate a device by label or uuid. +Calls to swapon normally occur in the system boot scripts making all swap devices available, so that the +paging and swapping activity is interleaved across several devices and files. +swapoff disables swapping on the specified devices and files. When the -a flag is given, swapping is +disabled on all known swap devices and files (as found in /proc/swaps or /etc/fstab). +% +perl [ -sTtuUWX ] [ -hv ] [ -V[:configvar] ] [ -cw ] [ -d[t][:debugger] ] [ -D[number/list] ] +[ -pna ] [ -Fpattern ] [ -l[octal] ] [ -0[octal/hexadecimal] ] +[ -Idir ] [ -m[-]module ] [ -M[-]'module...' ] [ -f ] [ -C [number/list] ] [ -S ] +[ -x[dir] ] [ -i[extension] ] [ [-e|-E] 'command' ] [ -- ] [ programfile ] [ argument ]... +For more information on these options, you can run "perldoc perlrun". +GETTING HELP +The perldoc program gives you access to all the documentation that comes with Perl. You can get more +documentation, tutorials and community support online at <http://www.perl.org/>. +If you're new to Perl, you should start by running "perldoc perlintro", which is a general intro for +beginners and provides some background to help you navigate the rest of Perl's extensive documentation. +Run "perldoc perldoc" to learn more things you can do with perldoc. +% +usbhid-dump - dump USB HID device report descriptors and streams +usbhid-dump [OPTION]... +usbhid-dump uses libusb to dump report descriptors and streams from HID (human interface device) inter‐ +faces of USB devices. By default, it dumps HID interfaces of all connected USB devices, but could be +limited to a subset of them, or to a single interface, using options. +other program receives the input in the meantime. The report descriptor dumping is instantaneous, but +the stream dumping continues until terminated with SIGINT (^C from the terminal) or a timeout expires. +If you accidentally start dumping a stream from the USB keyboard you use to control the terminal, the +system will stop receiving the input and you won't be able to terminate usbhid-dump. Just stop your input +and wait until the timeout expires. The stream dumping will stop, the keyboard will be reattached to the +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +chvt - change foreground virtual terminal +chvt N +The command chvt N makes /dev/ttyN the foreground terminal. (The corresponding screen is created if it +% +dmidecode - DMI table decoder +dmidecode is a tool for dumping a computer's DMI (some say SMBIOS) table contents in a human-readable +pieces of information such as serial numbers and BIOS revision. Thanks to this table, you can retrieve +this information without having to probe for the actual hardware. While this is a good point in terms of +report speed and safeness, this also makes the presented information possibly unreliable. +The DMI table doesn't only describe what the system is currently made of, it also can report the possible +evolutions (such as the fastest supported CPU or the maximal amount of memory supported). +SMBIOS stands for System Management BIOS, while DMI stands for Desktop Management Interface. Both stan‐ +dards are tightly related and developed by the DMTF (Desktop Management Task Force). +% +ld - The GNU linker +ld [options] objfile ... +ld combines a number of object and archive files, relocates their data and ties up symbol references. +Usually the last step in compiling a program is to run ld. +ld accepts Linker Command Language files written in a superset of AT&T's Link Editor Command Language +syntax, to provide explicit and total control over the linking process. +command language and on other aspects of the GNU linker. +read, combine, and write object files in many different formats---for example, COFF or "a.out". +% +vgmerge — merge two volume groups +-l, --list +% +reiserfstune - The tunning tool for the ReiserFS filesystem. +reiserfstune [ -f ] [ -h | --help ] [ -j | --journal-device FILE ] [ --no-journal-available ] [ --jour‐ +nal-new-device FILE ] [ --make-journal-standard ] [ -s | --journal-new-size N ] [ -o | --journal-new-off‐ +set N ] [ -t | --max-transaction-size N ] [ -b | --add-badblocks file ] [ -B | --badblocks file ] [ -u | +--uuid UUID ] [ -l | --label LABEL ] [ -c | --check-interval interval-in-days ] [ -C | --time-last- +checked timestamp ] [ -m | --max-mnt-count count ] [ -M | --mnt-count count ] device +reiserfstune is used for tuning the ReiserFS. It can change two journal parameters (the journal size and +the maximum transaction size), and it can move the journal's location to a new specified block device. +the relocated journal was implemented for a special release of ReiserFS, and was not expected to be put +you must apply a special patch. Without this patch the kernel will refuse to mount the newly modified +% +fuser - identify processes using files or sockets +fuser -l +fuser -V +fuser displays the PIDs of processes using the specified files or file systems. In the default display +mode, each file name is followed by a letter denoting the type of access: +c current directory. +e executable being run. +f open file. f is omitted in default display mode. +F open file for writing. F is omitted in default display mode. +r root directory. +m mmap'ed file or shared library. +% +pstree - display a tree of processes +pstree [-a, --arguments] [-c, --compact] [-h, --highlight-all, -Hpid, --highlight-pid pid] +[-g] --show-pgids] [-l, --long] [-n, --numeric-sort] [-N, --ns-sortns [-p, --show-pids] [-s, --show-par‐ +ents] [-S, --ns-changes] [-u, --uid-changes] [-Z, --security-context] +pstree -V, --version +pstree shows running processes as a tree. The tree is rooted at either pid or init if pid is omitted. +If a user name is specified, all process trees rooted at processes owned by that user are shown. +pstree visually merges identical branches by putting them in square brackets and prefixing them with the +repetition count, e.g. +init-+-getty +% +emacsclient - tells a running Emacs to visit a file +emacsclient [options] files ... +but is not specific to that system. +emacsclient works in conjunction with the built-in Emacs server. +You can either call emacsclient directly or let other programs run it for you when necessary. On GNU and +Unix systems many programs consult the environment variable EDITOR (sometimes also VISUAL) to obtain the +command used for editing. Thus, setting this environment variable to 'emacsclient' will allow these pro‐ +grams to use an already running Emacs for editing. Other operating systems might have their own methods +for defining the default editor. +% +vgcfgbackup — backup volume group descriptor area +vgcfgbackup allows you to backup the metadata of your volume groups. If you don't name any volume groups +on the command line, all of them will be backed up. +In a default installation, each volume group gets backed up into a separate file bearing the name of the +volume group in the directory /etc/lvm/backup. You can write the backup to an alternative file using -f. +%s gets replaced by the volume group name. +% +mouse-test - a tool for determining mouse type and device it's attached to. +mouse-test [ device ... ] +speak. It is able to detect MouseMan devices, and to choose between -t ms (three-buttons aware) and -t +bare old two-buttons-only serial mice. +BUGS +I know the application is buggy, but I only own one mouse device. If you are interested in this applica‐ +tion, just call me and awake me from my laziness. +device [ device ... ] +% +grub-mount - export GRUB filesystem with FUSE +Debug tool for filesystem driver. +-C, --crypto +Mount crypto devices. +-d, --debug=STRING +Set debug environment variable. +-K, --zfs-key=FILE|prompt +Load zfs crypto key. +% +gnutls-serv - GnuTLS server +gnutls-serv [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Server program that listens to incoming TLS connections. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +Specifies the debug level. +% +faked - daemon that remembers fake ownership/permissions of files manipulated by fakeroot processes. +faked [--debug] [--foreground] [--cleanup] [--key msg-key] [--load] [--save-file save-file] [--port TCP- +port] +If a fakeroot process wants to change the ownership of a file, then faked is the process that remembers +that new owner. If later the same fakeroot process does a stat() for that filename, then the libfakeroot +wrapped stat() call will first ask faked for the fake ownership etc of that file, and then report it. +--debug +Print debugging information on stderr. +--foreground +Don't fork into the background. +% +era_invalidate - Provide a list of blocks that have changed since a particular era. +era_invalidate [options] {device|file} +-h, --help +Print help and exit. +-V, --version +Output version information and exit. +% +vmstat - Report virtual memory statistics +vmstat [options] [delay [count]] +vmstat reports information about processes, memory, paging, block IO, traps, disks and cpu activity. +The first report produced gives averages since the last reboot. Additional reports give information on a +delay The delay between updates in seconds. If no delay is specified, only one report is printed with +the average values since boot. +count Number of updates. In absence of count, when delay is defined, default is infinite. +% +vgreduce — reduce a volume group +umePath...] +vgreduce allows you to remove one or more unused physical volumes from a volume group. +-a, --all +Removes all empty physical volumes if none are given on command line. +--removemissing +% +serve as a pager for text files named as arguments or passed on standard input, and as a general purpose +directory browser. +capabilities do not meet your needs, the target URL can be handed over to a graphical browser with a sin‐ +gle command. +% +Mandatory arguments to long options are mandatory for short options too. +-i, --input=MODE +adjust standard input stream buffering +-o, --output=MODE +adjust standard output stream buffering +-e, --error=MODE +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +usermod - modify a user account +usermod [options] LOGIN +The usermod command modifies the system account files to reflect the changes that are specified on the +command line. +The options which apply to the usermod command are: +-a, --append +Add the user to the supplementary group(s). Use only with the -G option. +-c, --comment COMMENT +% +zless - file perusal filter for crt viewing of compressed text +zless [ name ... ] +Zless is a filter which allows examination of compressed or plain text files one screenful at a time on a +soft-copy terminal. It is the equivalent of setting the environment variable LESSOPEN to '|gzip -cdfq -- +%s', and the environment variable LESSMETACHARS to '<space><tab><newline>;*?"()<>[|&^`#\$%=~', and then +running less. However, enough people seem to think that having the command zless available is important +to be worth providing it. +BUGS +Zless does not work with compressed data that is piped to it via standard input; it requires that input +% +timeout - run a command with a time limit +timeout [OPTION] +Mandatory arguments to long options are mandatory for short options too. +--preserve-status +command times out +% +openssl - OpenSSL command line tool +openssl command [ command_opts ] [ command_args ] +openssl [ list-standard-commands | list-message-digest-commands | list-cipher-commands | list-cipher- +algorithms | list-message-digest-algorithms | list-public-key-algorithms] +openssl no-XXX [ arbitrary options ] +The openssl program is a command line tool for using the various cryptography functions of OpenSSL's +crypto library from the shell. It can be used for +% +dnssec-checkds - DNSSEC delegation consistency checking tool +dnssec-checkds [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} +dnssec-dsfromkey [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} +dnssec-checkds verifies the correctness of Delegation Signer (DS) or DNSSEC Lookaside Validation (DLV) +resource records for keys in a specified zone. +-f file +If a file is specified, then the zone is read from that file to find the DNSKEY records. If not, then +the DNSKEY records for the zone are looked up in the DNS. +-l domain +% +column - columnate lists +column [options] [file...] +The column utility formats its input into multiple columns. By default, rows are filled before columns. +Input is taken from file, or otherwise from standard input. Empty lines are ignored. +-c, --columns width +Output is formatted to a width specified as number of characters. +-o, --output-separator string +Specify the columns delimiter for table output (default is two spaces). +-s, --separator separators +% +cal - display a calendar +cal [options] [[[day] month] year] +cal displays a simple calendar. If no arguments are specified, the current month is displayed. +Display three months spanning the date. +-n , --months number +Display number of months, starting from the month containing the date. +% +echo - display a line of text +echo [SHORT-OPTION]... [STRING]... +echo LONG-OPTION +Echo the STRING(s) to standard output. +-n do not output the trailing newline +-e enable interpretation of backslash escapes +-E disable interpretation of backslash escapes (default) +--help display this help and exit +% +chmod - change file mode bits +chmod [OPTION]... MODE[,MODE]... FILE... +chmod [OPTION]... OCTAL-MODE FILE... +chmod [OPTION]... --reference=RFILE FILE... +according to mode, which can be either a symbolic representation of changes to make, or an octal number +representing the bit pattern for the new mode bits. +The format of a symbolic mode is [ugoa...][[-+=][perms...]...], where perms is either zero or more let‐ +ters from the set rwxXst, or a single letter from the set ugo. Multiple symbolic modes can be given, +separated by commas. +A combination of the letters ugoa controls which users' access to the file will be changed: the user who +% +sshd — OpenSSH SSH daemon +[-g login_grace_time] [-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len] +and provide secure encrypted communications between two untrusted hosts over an insecure network. +sshd listens for connections from clients. It is normally started at boot from /etc/rc. It forks a new +daemon for each incoming connection. The forked daemons handle key exchange, encryption, authentication, +command execution, and data exchange. +mand-line options override values specified in the configuration file. sshd rereads its configuration file +when it receives a hangup signal, SIGHUP, by executing itself with the name and options it was started +% +sort - sort lines of text files +sort [OPTION]... [FILE]... +sort [OPTION]... --files0-from=F +Write sorted concatenation of all FILE(s) to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. Ordering options: +-b, --ignore-leading-blanks +ignore leading blanks +-d, --dictionary-order +% +mdmon - monitor MD external metadata arrays +mdmon [--all] [--takeover] [--foreground] CONTAINER +user space handles all updates to the metadata. The kernel's responsibility is to notify user space when +a "metadata event" occurs, like disk failures and clean-to-dirty transitions. The kernel, in important +Metadata updates: +To service metadata update requests a daemon, mdmon, is introduced. Mdmon is tasked with polling the +sysfs namespace looking for changes in array_state, sync_action, and per disk state attributes. When a +change is detected it calls a per metadata type handler to make modifications to the metadata. The fol‐ +lowing actions are taken: +% +somewhat smaller than the fully-blown gpg and uses a different (and simpler) way to check that the public +keys used to make the signature are valid. There are no configuration files and only a few options are +implemented. +for expired or revoked keys. +By default a keyring named ‘trustedkeys.kbx’ is used; if that does not exist a keyring named ‘trusted‐ +% +grub-ofpathname - find OpenBOOT path for a device +grub-ofpathname DEVICE +The full documentation for grub-ofpathname is maintained as a Texinfo manual. If the info and grub- +ofpathname programs are properly installed at your site, the command +info grub-ofpathname +should give you access to the complete manual. +% +firewall-applet - firewalld applet +firewall-applet is a tray applet for firewalld. +firewall-applet does not support any special options. +The following options are supported: +-h, --help +Prints a short help text and exists. +QSETTINGS +% +mail -h | --help +mail [-BDdEFintv~] [-A account] [-a attachment] [-b bcc-addr] [-c cc-addr] [-q quote-file] [-r from-addr] +[-S variable[=value]] [-s subject] [-X cmd] [-.] to-addr ... [-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-X cmd] -f [file] +[-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-u user] [-X cmd] +[-- mta-option ...] +% +nohup - run a command immune to hangups, with output to a non-tty +nohup OPTION +--help display this help and exit +--version +output version information and exit +If standard input is a terminal, redirect it from an unreadable file. If standard output is a terminal, +append output to 'nohup.out' if possible, '$HOME/nohup.out' otherwise. If standard error is a terminal, +% +mkswap - set up a Linux swap area +mkswap [options] device [size] +mkswap sets up a Linux swap area on a device or in a file. +The device argument will usually be a disk partition (something like /dev/sdb7) but can also be a file. +The Linux kernel does not look at partition IDs, but many installation scripts will assume that parti‐ +type. Be careful not to kill your Solaris partitions.) +The size parameter is superfluous but retained for backwards compatibility. (It specifies the desired +% +systemd-delta - Find overridden configuration files +files. Files in /etc have highest priority, files in /run have the second highest priority, ..., files in +/lib have lowest priority. Files in a directory with higher priority override files with the same name in +directories of lower priority. In addition, certain configuration files can have ".d" directories which +contain "drop-in" files with configuration snippets which augment the main configuration file. "Drop-in" +files can be overridden in the same way by placing files with the same name in a directory of higher +containing directory, which corresponds to the name of the main configuration file, must match). For a +The command line argument will be split into a prefix and a suffix. Either is optional. The prefix must +% +xgettext - extract gettext strings from source +xgettext [OPTION] [INPUTFILE]... +Extract translatable strings from given input files. +Mandatory arguments to long options are mandatory for short options too. Similarly for optional argu‐ +ments. +Input file location: +INPUTFILE ... +input files +-f, --files-from=FILE +get list of input files from FILE +% +era_check - validate era metadata on device or file +era_check [options] {device|file} +era_check checks era metadata created by the device-mapper era target on a device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +xfs_db - debug an XFS filesystem +xfs_db [ -c cmd ] ... [ -i|r|x|F ] [ -f ] [ -l logdev ] [ -p progname ] device +xfs_db -V +xfs_db is used to examine an XFS filesystem. Under rare circumstances it can also be used to modify an +run xfs_db. +-f Specifies that the filesystem image to be processed is stored in a regular file at device (see the +% +chown - change file owner and group +chown [OPTION]... [OWNER][:[GROUP]] FILE... +chown [OPTION]... --reference=RFILE FILE... +each given file. If only an owner (a user name or numeric user ID) is given, that user is made the owner +of each given file, and the files' group is not changed. If the owner is followed by a colon and a group +name (or numeric group ID), with no spaces between them, the group ownership of the files is changed as +well. If a colon but no group name follows the user name, that user is made the owner of the files and +the group of the files is changed to that user's login group. If the colon and group are given, but the +as chgrp. If only a colon is given, or if the entire operand is empty, neither the owner nor the group +is changed. +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +kinit - obtain and cache Kerberos ticket-granting ticket +kinit [-V] [-l lifetime] [-s start_time] [-r renewable_life] [-p | -P] [-f | -F] [-a] [-A] [-C] [-E] [-v] +[-R] [-k [-t keytab_file]] [-c cache_name] [-n] [-S service_name] [-I input_ccache] [-T armor_ccache] [-X +attribute[=value]] [principal] +kinit obtains and caches an initial ticket-granting ticket for principal. +-V display verbose output. +-l lifetime +(duration string.) Requests a ticket with the lifetime lifetime. +% +tset, reset - terminal initialization +tset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +reset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +mination is done as follows, using the first terminal type found. +ting TERM according to the type passed to it by /etc/inittab.) +% +vgimportclone — import and rename duplicated volume group (e.g. a hardware snapshot) +vgimportclone is used to import a duplicated VG (e.g. hardware snapshot). Duplicate VG(s) and PV(s) are +not able to be used until they are made to coexist with the origin VG(s) and PV(s). vgimportclone +renames the VG associated with the specified PV(s) and changes the associated VG and PV UUIDs. +By default the snapshot VG will be renamed to the original name plus a numeric suffix to avoid +base VG name that is used for all VG renames. If a VG already exists with the specified name a +% +newuidmap - set the uid mapping of a user namespace +newuidmap pid uid loweruid count [uid loweruid count [ ... ]] +The newuidmap sets /proc/[pid]/uid_map based on its command line arguments and the uids allowed in +uid +Beginning of the range of UIDs inside the user namespace. +loweruid +Beginning of the range of UIDs outside the user namespace. +% +getconf — get configuration values +getconf [−v specification] system_var +getconf [−v specification] path_var pathname +In the first synopsis form, the getconf utility shall write to the standard output the value of the vari‐ +able specified by the system_var operand. +In the second synopsis form, the getconf utility shall write to the standard output the value of the +% +setvtrgb - set the virtual terminal RGB colors +setvtrgb vga|FILE|- +The setvtrgb command takes a single argument, either the string vga , or a path to a file containing the +red, green, and blue colors to be used by the Linux virtual terminals. +RED, GREEN, and BLUE. +To seed a valid FILE : +cat /sys/module/vt/parameters/default_{red,grn,blu} > FILE +And then edit the values in FILE +% +nstat, rtacct - network statistics tools. +nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics. +-h, --help Print help +-V, --version +Print version +-z, --zero +Dump zero counters too. By default they are not shown. +% +pwck - verify integrity of password files +pwck [options] [passwd [ shadow ]] +The pwck command verifies the integrity of the users and authentication information. It checks that all +entries in /etc/passwd and /etc/shadow have the proper format and contain valid data. The user is +prompted to delete entries that are improperly formatted or which have other uncorrectable errors. +Checks are made to verify that each entry has: +· the correct number of fields +· a unique and valid user name +· a valid user and group identifier +% +pic - compile pictures for troff or TeX +pic [ -nvCSU ] [ filename ... ] +pic -t [ -cvzCSU ] [ filename ... ] +pic compiles descriptions of pictures embedded within troff or TeX input files into commands that are +understood by TeX or troff. Each picture starts with a line beginning with .PS and ends with a line +beginning with .PE. Anything outside of .PS and .PE is passed through without change. +It is the user's responsibility to provide appropriate definitions of the PS and PE macros. When the +macro package being used does not supply such definitions (for example, old versions of -ms), appropriate +definitions can be obtained with -mpic: These will center each picture. +% +salt +The salt provided to the hash algorithm. +algorithm +argument. +% +rlogin - Remote login +rlogin [OPTION...] HOST +Starts a terminal session on a remote host. +-6, --ipv6 +use only IPv6 +allows an eight-bit input data path at all times +% +ssh-copy-id — use locally available keys to authorise logins on a remote machine +ssh-copy-id [-f] [-n] [-i [identity_file]] [-p port] [-o ssh_option] [user@]hostname +ssh-copy-id -h | -? +so password authentication should be enabled, unless you've done some clever use of multiple identities). +It assembles a list of one or more fingerprints (as described below) and tries to log in with each key, to +you being repeatedly prompted for pass-phrases). It then assembles a list of those that failed to log in, +and using ssh, enables logins with those keys on the remote server. By default it adds the keys by append‐ +ing them to the remote user's ~/.ssh/authorized_keys (creating the file, and directory, if necessary). It +is also capable of detecting if the remote system is a NetScreen, and using its ‘set ssh pka-dsa key ...’ +command instead. +% +mktemp - create a temporary file or directory +mktemp [OPTION]... [TEMPLATE] +secutive 'X's in last component. If TEMPLATE is not specified, use tmp.XXXXXXXXXX, and --tmpdir is +implied. Files are created u+rw, and directories u+rwx, minus umask restrictions. +-d, --directory +create a directory, not a file +-u, --dry-run +do not create anything; merely print a name (unsafe) +-q, --quiet +% +tabs - set tabs on a terminal +tabs [options]] [tabstop-list] +set_tab capabilities. If either is absent, tabs is unable to clear/set tab-stops. The terminal should +be configured to use hard tabs, e.g., +stty tab0 +General Options +-Tname +Tell tabs which terminal type to use. If this option is not given, tabs will use the $TERM environ‐ +ment variable. If that is not set, it will use the ansi+tabs entry. +% +libtool [OPTION]... [MODE-ARG]... +Provide generalized library-building support services. +--config +show all configuration variables +--debug +enable verbose shell tracing +-n, --dry-run +display commands without modifying any files +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +cache_check - repair cache metadata on device or file +cache_check [options] {device|file} +cache_check checks cache metadata created by the device-mapper cache target on a device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +ssh-add — adds private key identities to the authentication agent +ssh-add [-cDdkLlXx] [-E fingerprint_hash] [-t life] [file ...] +After loading a private key, ssh-add will try to load corresponding certificate information from the file‐ +name obtained by appending -cert.pub to the name of the private key file. Alternative file names can be +given on the command line. +If any file requires a passphrase, ssh-add asks for the passphrase from the user. The passphrase is read +from the user's tty. ssh-add retries the last passphrase if multiple identity files are given. +% +ktutil - Kerberos keytab file maintenance utility +ktutil +The ktutil command invokes a command interface from which an administrator can read, write, or edit +list +list +Displays the current keylist. +Alias: l +% +filefrag - report on file fragmentation +filefrag [ -bblocksize ] [ -BeksvxX ] [ files... ] +filefrag reports on how badly fragmented a particular file might be. It makes allowances for indirect +The filefrag program initially attempts to get the extent information using FIEMAP ioctl which is more +efficient and faster. If FIEMAP is not supported then filefrag will fall back to using FIBMAP. +-B Force the use of the older FIBMAP ioctl instead of the FIEMAP ioctl for testing purposes. +-bblocksize +Use blocksize in bytes for output instead of the filesystem blocksize. For compatibility with +% +prtstat - print statistics of a process +prtstat [-r|--raw] pid +prtstat -V|--version +file. +-r, --raw +Print the information in raw format. +-V, --version +Show the version information for prtstat. +% +kill - terminate a process +kill [-signal|-s signal|-p] [-q value] [-a] [--] pid|name... +kill -l [number] | -L +The command kill sends the specified signal to the specified processes or process groups. If no signal +caught. +Most modern shells have a builtin kill function, with a usage rather similar to that of the command +described here. The --all, --pid, and --queue options, and the possibility to specify processes by com‐ +mand name, are local extensions. +If signal is 0, then no actual signal is sent, but error checking is still performed. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +lvs — report information about logical volumes +[-d|--debug] [-h|-?|--help] [-H|--history] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] +{basic|json}] [--rows] [--separator Separator] [--segments] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] +lvs produces formatted output about logical volumes. +% +pkaction - Get details about a registered action +pkaction [--version] [--help] +pkaction [--verbose] +pkaction --action-id action [--verbose] +pkaction is used to obtain information about registered polkit actions. If called without --action-id +then all actions are displayed. Otherwise the action action. If called without the --verbose option only +the name of the action is shown. Otherwise details about the actions are shown. +RETURN VALUE +On success pkaction returns 0. Otherwise a non-zero value is returned and a diagnostic message is printed +on standard error. +% +printf - format and print data +printf FORMAT [ARGUMENT]... +printf OPTION +Print ARGUMENT(s) according to FORMAT, or execute according to OPTION: +--help display this help and exit +--version +output version information and exit +FORMAT controls the output as in C printf. Interpreted sequences are: +\" double quote +% +gpm - a cut and paste utility and mouse server for virtual consoles +gpm [ options ] +intended as a replacement for "selection" as a cut-and-paste mechanism; it also provides additional +facilities. The "selection" package offered the first cut-and-paste implementation for Linux using two +mouse buttons, and the cut buffer is still called "selection buffer" or just "selection" throughout this +document. The information below is extracted from the texinfo file, which is the preferred source of +information. +is meant to describe the command-line options for gpm, while its internals are outlined in the next sec‐ +tion. +% +ldconfig - configure dynamic linker run-time bindings +/sbin/ldconfig [ -nNvXV ] [ -f conf ] [ -C cache ] [ -r root ] directory ... +/sbin/ldconfig -l [ -v ] library ... +/sbin/ldconfig -p +ldconfig creates the necessary links and cache to the most recent shared libraries found in the directo‐ +ries specified on the command line, in the file /etc/ld.so.conf, and in the trusted directories, /lib and +The cache is used by the run-time linker, ld.so or ld-linux.so. ldconfig checks the header and filenames +of the libraries it encounters when determining which versions should have their links updated. +% +gdbm_dump - dump a GDBM database to a file +gdbm_dump [-H FMT] [--format=FMT] DB_FILE [FILE] +gdbm_dump [-Vh] [--help] [--usage] [--version] +dump file is supplied by the second argument (FILE). If not specified, the output goes to the standard +error. +of the DB_FILE. +-H, --format=FMT +% +chgpasswd - update group passwords in batch mode +chgpasswd [options] +The chgpasswd command reads a list of group name and password pairs from standard input and uses this +information to update a set of existing groups. Each line is of the format: +group_name:password +By default the supplied password must be in clear-text, and is encrypted by chgpasswd. +The default encryption algorithm can be defined for the system with the ENCRYPT_METHOD variable of +/etc/login.defs, and can be overwritten with the -e, -m, or -c options. +% +dbus-send - Send a message to a message bus +[--reply-timeout=MSEC] [--type=TYPE] OBJECT_PATH INTERFACE.MEMBER [CONTENTS...] +The dbus-send command is used to send a message to a D-Bus message bus. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +There are two well-known message buses: the systemwide message bus (installed on many systems as the +"messagebus" service) and the per-user-login-session message bus (started each time a user logs in). The +--system and --session options direct dbus-send to send messages to the system or session buses +respectively. If neither is specified, dbus-send sends to the session bus. +Nearly all uses of dbus-send must provide the --dest argument which is the name of a connection on the +bus to send the message to. If --dest is omitted, no destination is set. +% +named-checkzone, named-compilezone - zone file validity checking or converting tool +named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] +[-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] +[-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} +{filename} +named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] +[-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] +[-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} +{filename} +named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does +into a name server. +% +dbus-monitor - debug probe to print message bus messages +dbus-monitor [--system | --session | --address ADDRESS] [--profile | --monitor | --pcap | --binary] +[watch expressions] +The dbus-monitor command is used to monitor messages going through a D-Bus message bus. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +There are two well-known message buses: the systemwide message bus (installed on many systems as the +"messagebus" service) and the per-user-login-session message bus (started each time a user logs in). The +--system and --session options direct dbus-monitor to monitor the system or session buses respectively. +If neither is specified, dbus-monitor monitors the session bus. +dbus-monitor has two different text output modes: the 'classic'-style monitoring mode, and profiling +mode. The profiling format is a compact format with a single line per message and microsecond-resolution +% +rlogind - Remote login server +rlogind [OPTION...] +Remote login server +-6, --ipv6 +only IPv6 in daemon mode +-a, --verify-hostname +ask hostname for verification +% +ldns-signzone - sign a zonefile with DNSSEC data +ldns-signzone is used to generate a DNSSEC signed zone. When run it will create a new zonefile that con‐ +Keys must be specified by their base name (i.e. without .private). If the DNSKEY that belongs to the key +in the .private file is not present in the zone, it will be read from the file <base name>.key. If that +file does not exist, the DNSKEY value will be generated from the private key. +Multiple keys can be specified, Key Signing Keys are used as such when they are either already present in +the zone, or specified in a .key file, and have the KSK bit set. +% +grub-file - check file type +Check if FILE is of specified type. +% +lesskey - specify key bindings for less +lesskey [-o output] [--] [input] +lesskey [--output=output] [--] [input] +lesskey -V +lesskey --version +Lesskey is used to specify a set of key bindings to be used by less. The input file is a text file which +describes the key bindings. If the input file is "-", standard input is read. If no input file is spec‐ +ified, a standard filename is used as the name of the input file, which depends on the system being used: +$HOME/lesskey.ini is used, or $INIT/lesskey.ini if $HOME is undefined. The output file is a binary file +which is used by less. If no output file is specified, and the environment variable LESSKEY is set, the +value of LESSKEY is used as the name of the output file. Otherwise, a standard filename is used as the +name of the output file, which depends on the system being used: On Unix and OS-9 systems, $HOME/.less is +% +pg - browse pagewise through text files +pg [-amount] [-p prompt] [-cefnrs] [+line] [+/pattern/] [file...] +pg displays a text file on a CRT one screenful at once. After each page, a prompt is displayed. The +If no filename is given on the command line, pg reads from standard input. If standard output is not a +If input comes from a pipe, pg stores the data in a buffer file while reading, to make navigation possi‐ +ble. +pg accepts the following options: +% +debugreiserfs - The debugging tool for the ReiserFS filesystem. +device +debugreiserfs sometimes helps to solve problems with reiserfs filesystems. When run without options it +prints the super block of the ReiserFS filesystem found on the device. +device is the special file corresponding to the device (e.g /dev/hdXX for an IDE disk partition or +/dev/sdXX for a SCSI disk partition). +-j device +prints the contents of the journal. The option -p allows it to pack the journal with other meta‐ +% +unexpand - convert spaces to tabs +unexpand [OPTION]... [FILE]... +Convert blanks in each FILE to tabs, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +convert all blanks, instead of just initial blanks +--first-only +convert only leading sequences of blanks (overrides -a) +% +loadkeys - load keyboard translation tables +loadkeys [ -b --bkeymap ] [ -c --clearcompose ] [ -C '<FILE>' | --console=<FILE> ] [ -d --default ] [ -h +--help ] [ -m --mktable ] [ -q --quiet ] [ -s --clearstrings ] [ -u --unicode ] [ -v --verbose ] [ file‐ +name... ] +The program loadkeys reads the file or files specified by filename.... Its main purpose is to load the +kernel keymap for the console. You can specify console device by the -C (or --console ) option. +RESET TO DEFAULT +If the -d (or --default ) option is given, loadkeys loads a default keymap, probably the file +defkeymap.map either in /usr/share/kbd/keymaps or in /usr/src/linux/drivers/char. (Probably the former +times, with a strange keymap loaded (with the minus on some obscure unknown modifier combination) it is +easier to type `loadkeys defkeymap'. +% +dbus-uuidgen - Utility to generate UUIDs +The dbus-uuidgen command generates or reads a universally unique ID. +spec. Many systems have a separate command for that (often called "uuidgen"). +See http://www.freedesktop.org/software/dbus/ for more information about D-Bus. +The primary usage of dbus-uuidgen is to run in the post-install script of a D-Bus package like this: +dbus-uuidgen --ensure +% +ldns-resolver - tries to create a resolver from a resolv.conf file. +ldns-resolver file +library for robusteness with input data. +ldns-resolver takes a filename of the resolv.conf file as input. For example ldns-resolver +/etc/resolv.conf will show if the file can be parsed successfully. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +% +vpddecode - VPD structure decoder +vpddecode prints the "vital product data" information that can be found in almost all IBM and Lenovo com‐ +puters. Available items are: +· BIOS Build ID +· Box Serial Number +· Motherboard Serial Number +· Machine Type/Model +% +git-upload-archive - Send archive back to git-archive +git upload-archive <directory> +Invoked by git archive --remote and sends a generated archive to the other end over the Git protocol. +archive side, and the program pair is meant to be used to get an archive from a remote repository. +SECURITY +pruned, git-upload-archive avoids serving archives for commits and trees that are not reachable from the +repository’s refs. However, because calculating object reachability is computationally expensive, +git-upload-archive implements a stricter but easier-to-check set of rules: +% +cmp - compare two files byte by byte +Compare two files byte by byte. +default). +Mandatory arguments to long options are mandatory for short options too. +-b, --print-bytes +print differing bytes +-i, --ignore-initial=SKIP +% +plipconfig - fine tune PLIP device parameters +plipconfig interface [nibble NN] [trigger NN] +plipconfig [-V] [--version] [-h] [--help] +Plipconfig is used to (hopefully) improve PLIP performance by changing the default timing parameters used +by the PLIP protocol. Results are dependent on the parallel port hardware, cable, and the CPU speed of +each machine on each end of the PLIP link. +If the single interface argument is given, plipconfig displays the status of the given interface only. +Otherwise, it will try to set the options. +nibble NN +% +uuidd - UUID generation daemon +uuidd [options] +The uuidd daemon is used by the UUID library to generate universally unique identifiers (UUIDs), espe‐ +cially time-based UUIDs, in a secure and guaranteed-unique fashion, even in the face of large numbers of +threads running on different CPUs trying to grab UUIDs. +-d, --debug +-F, --no-fork +Do not daemonize using a double-fork. +% +dbus-update-activation-environment - update environment used for D-Bus session services +dbus-update-activation-environment [--systemd] [--verbose] --all | VAR... | VAR=VAL... +dbus-update-activation-environment updates the list of environment variables used by dbus-daemon +--session when it activates session services without using systemd. +With the --systemd option, if an instance of systemd --user is available on D-Bus, it also updates the +list of environment variables used by systemd --user when it activates user services, including D-Bus +a service is started. For instance, it is not useful to add DBUS_SESSION_BUS_ADDRESS to dbus-daemon's +activation environment, although it might still be useful to add it to systemd's activation environment. +% +shred - overwrite a file to hide its contents, and optionally delete it +shred [OPTION]... FILE... +Overwrite the specified FILE(s) repeatedly, in order to make it harder for even very expensive hardware +probing to recover the data. +If FILE is -, shred standard output. +Mandatory arguments to long options are mandatory for short options too. +-f, --force +change permissions to allow writing if necessary +-n, --iterations=N +% +cryptsetup - manage plain dm-crypt and LUKS encrypted volumes +cryptsetup <options> <action> <action args> +cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings. These include plain dm- +crypt volumes and LUKS volumes. The difference is that LUKS uses a metadata header and can hence offer +more features than plain dm-crypt. On the other hand, the header is visible and vulnerable to damage. +In addition, cryptsetup provides limited support for the use of historic loopaes volumes and for True‐ +Crypt compatible volumes. +PLAIN DM-CRYPT OR LUKS? +Unless you understand the cryptographic background well, use LUKS. With plain dm-crypt there are a num‐ +ber of possible user errors that massively decrease security. While LUKS cannot fix them all, it can +lessen the impact for many of them. +% +getkeycodes - print kernel scancode-to-keycode mapping table +getkeycodes +The getkeycodes command prints the kernel scancode-to-keycode mapping table. +None. +% +locale - get locale-specific information +locale [option] +locale [option] -a +locale [option] -m +locale [option] name... +The locale command displays information about the current locale, or all locales, on standard output. +When invoked without arguments, locale displays the current locale settings for each locale category (see +Values for variables set in the environment are printed without double quotes, implied values are printed +with double quotes. +If either the -a or the -m option (or one of their long-format equivalents) is specified, the behavior is +% +runuser - run a command with substitute user and group ID +runuser [options] -u user command [argument...] +runuser [options] [-] [user [argument...]] +runuser allows to run commands with a substitute user and group ID. If the option -u is not given, it +falls back to su-compatible semantics and a shell is executed. The difference between the commands +only) and it uses a different PAM configuration. The command runuser does not have to be installed with +suid permissions. +When called without arguments, runuser defaults to running an interactive shell as root. +For backward compatibility, runuser defaults to not change the current directory and to only set the +% +groffer - display groff files and man pages on X and tty +groffer [--] [filespec ....] +groffer [mode-option ....] [groff-options ....] [man-options ....] [X-options ....] [--] [‐ +filespec ....] +groffer -h | --help +groffer -v | --version +the groff language, see groff(7), or other roff languages, see roff(7), that are compatible to the origi‐ +nal troff language. It finds and runs all necessary groff preprocessors, such as chem. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +pwdx - report current working directory of a process +pwdx [options] pid [...] +-V, --version +Output version information and exit. +-h, --help +Output help screen and exit. +STANDARDS +No standards apply, but pwdx looks an awful lot like a SunOS command. +% +newgidmap - set the gid mapping of a user namespace +newgidmap pid gid lowergid count [gid lowergid count [ ... ]] +The newgidmap sets /proc/[pid]/gid_map based on its command line arguments and the gids allowed in +gid +Beginning of the range of GIDs inside the user namespace. +lowergid +Beginning of the range of GIDs outside the user namespace. +% +ntpq - standard NTP query program +ntpq [-flags] [-flag [value]] [--option-name[[=| ]value]] [ host ...] +The ntpq utility program is used to query NTP servers which implement the standard NTP mode 6 control +read and write arbitrary variables can be assembled, with raw and pretty-printed output options being +available. The ntpq utility can also obtain and print a list of peers in a common format by sending mul‐ +tiple queries to the server. If one or more request options is included on the command line when ntpq is +executed, each of the requests will be sent to the NTP servers running on each of the hosts given as com‐ +mand line arguments, or on localhost by default. If no request options are given, ntpq will attempt to +read commands from the standard input and execute these on the NTP server running on the first host given +% +ps - report a snapshot of the current processes. +ps [options] +ps displays information about a selection of the active processes. If you want a repetitive update of +options, which are functionally identical, due to the many standards and ps implementations that this ps +% +drill - get (debug) information out of DNS(SEC) +drill is a tool to designed to get all sorts of information out of the DNS. It is specificly designed to +be used with DNSSEC. +The name drill is a pun on dig. With drill you should be able get even more information than with dig. +If no arguments are given class defaults to 'IN' and type to 'A'. The server(s) specified in +/etc/resolv.conf are used to query against. +name Ask for this name. +@server Send to query to this server. If not specified use the nameservers from /etc/resolv.conf. +% +kbdrate - reset the keyboard repeat rate and delay time +kbdrate [ -s ] [ -r rate ] [ -d delay ] +kbdrate is used to change the keyboard repeat rate and delay time. The delay is the amount of time that +a key must be depressed before it will start to repeat. +-s Silent. No messages are printed. +-r rate +% +grpck - verify integrity of group files +grpck [options] [group [ shadow ]] +The grpck command verifies the integrity of the groups information. It checks that all entries in +/etc/group and /etc/gshadow have the proper format and contain valid data. The user is prompted to delete +entries that are improperly formatted or which have other uncorrectable errors. +Checks are made to verify that each entry has: +· the correct number of fields +· a unique and valid group name +· a valid group identifier (/etc/group only) +% +tac - concatenate and print files in reverse +tac [OPTION]... [FILE]... +Write each FILE to standard output, last line first. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --before +attach the separator before instead of after +-r, --regex +interpret the separator as a regular expression +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +vgck — check volume group metadata +vgck checks LVM metadata for each named volume group for consistency. +% +lvextend — extend the size of a logical volume +[-h|-?|--help] [-f|--force] [-i|--stripes Stripes [-I|--stripesize StripeSize]] {-l|--extents [+]Logi‐ +calExtentsNumber[%{VG|LV|PVS|FREE|ORIGIN}] | -L|--size [+]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [-n|--nof‐ +sck] [--noudevsync] [-r|--resizefs] [--reportformat {basic|json}] [--use-policies] [-t|--test] [-v|--ver‐ +bose] LogicalVolumePath [PhysicalVolumePath[:PE[-PE]]...] +lvextend allows you to extend the size of a logical volume. Extension of snapshot logical volumes (see +% +grub-bios-setup - set up a device to boot using GRUB +grub-bios-setup [OPTION...] DEVICE +Set up images to boot from DEVICE. +You should not normally run this program directly. Use grub-install instead. +-a, --allow-floppy +make the drive also bootable as floppy (default for fdX devices). May break on some BIOSes. +-b, --boot-image=FILE +use FILE as the boot image [default=boot.img] +-c, --core-image=FILE +% +catman - create or update the pre-formatted manual pages +catman [-d?V] [-M path] [-C file] [section] ... +catman is used to create an up to date set of pre-formatted manual pages known as cat pages. Cat pages +are generally much faster to display than the original manual pages, but require extra storage space. +The decision to support cat pages is that of the local administrator, who must provide suitable directo‐ +ries to contain them. +The options available to catman are the manual page hierarchies and sections to pre-format. The default +hierarchies are those specified as system hierarchies in the man-db configuration file, and the default +sections are either the colon-delimited contents of the environment variable $MANSECT or the standard set +compiled into man if $MANSECT is undefined. Supplying catman with a set of whitespace-delimited section +names will override both of the above. +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +sprof - read and display shared object profiling data +sprof [option]... shared-object-path [profile-data-path] +The sprof command displays a profiling summary for the shared object (shared library) specified as its +first command-line argument. The profiling summary is created using previously generated profiling data +in the (optional) second command-line argument. If the profiling data pathname is omitted, then sprof +will attempt to deduce it using the soname of the shared object, looking for a file with the name <son‐ +ame>.profile in the current directory. +The following command-line options specify the profile output to be produced: +-c, --call-pairs +Print a list of pairs of call paths for the interfaces exported by the shared object, along with +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +dnssec-coverage - checks future DNSKEY coverage for a zone +dnssec-coverage [-K directory] [-l length] [-f file] [-d DNSKEY TTL] [-m max TTL] [-r interval] +[-c compilezone path] [-k] [-z] [zone...] +dnssec-coverage verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set +properly to ensure no future lapses in DNSSEC coverage. +If zone is specified, then keys found in the key repository matching that zone are scanned, and an +ordered list is generated of the events scheduled for that key (i.e., publication, activation, +inactivation, deletion). The list of events is walked in order of occurrence. Warnings are generated if +any event is scheduled which could cause the zone to enter a state in which validation failures might +occur: for example, if the number of published or active keys for a given algorithm drops to zero, or if +a key is deleted from the zone too soon after a new key is rolled, and cached data signed by the prior +key has not had time to expire from resolver caches. +% +mkhomedir_helper {user} [umask [ path-to-skel ]] +mkhomedir_helper is a helper program for the pam_mkhomedir module that creates home directories and +populates them with contents of the specified skel directory. +The helper is separated from the module to not require direct access from login SELinux domains to the +contents of user home directories. The SELinux domain transition happens when the module is executing the +mkhomedir_helper. +The helper never touches home directories if they already exist. +% +patch - apply a diff file to an original +patch [options] [originalfile [patchfile]] +but usually just +patch -pnum <patchfile +patch takes a patch file patchfile containing a difference listing produced by the diff program and +applies those differences to one or more original files, producing patched versions. Normally the +patched versions are put in place of the originals. Backups can be made; see the -b or --backup option. +The names of the files to be patched are usually taken from the patch file, but if there's just one file +to be patched it can be specified on the command line as originalfile. +Upon startup, patch attempts to determine the type of the diff listing, unless overruled by a -c (--con‐ +% +vgremove — remove a volume group +vgremove allows you to remove one or more volume groups. If one or more physical volumes in the volume +group are lost, consider vgreduce --removemissing to make the volume group metadata consistent again. +If there are logical volumes that exist in the volume group, a prompt will be given to confirm removal. +You can override the prompt with -f. +-f, --force +% +afmtodit - create font files for use with groff -Tps and -Tpdf +afmtodit [ -ckmnsvx ] [ -a n ] [ -d desc_file ] [ -e enc_file ] [ -f internal_name ] [ -i n ] +[ -o out_file ] afm_file map_file font +The whitespace between a command line option and its argument is optional. +afmtodit creates a font file for use with groff, grops, and gropdf. afmtodit is written in perl; you +afm_file is the AFM (Adobe Font Metric) file for the font. +map_file is a file that says which groff character names map onto each PostScript character name; this +file should contain a sequence of lines of the form +% +an unmounted file system located on device. If the filesystem is mounted, it can be used to expand the +size of the mounted filesystem, assuming the kernel and the file system supports on-line resizing. (Mod‐ +systems will require the use of file systems with the resize_inode feature enabled.) +The size parameter specifies the requested new size of the filesystem. If no units are specified, the +units of the size parameter shall be the filesystem blocksize of the filesystem. Optionally, the size +larger than the size of the partition. If size parameter is not specified, it will default to the size +% +systemd-escape - Escape strings for usage in system unit names +to escape and to undo escaping of strings. +The command takes any number of strings on the command line, and will process them individually, one +after another. It will output them separated by spaces to stdout. +By default, this command will escape the strings passed, unless --unescape is passed which results in the +inverse operation being applied. If --mangle is given, a special mode of escaping is applied instead, +which assumes the string is already escaped but will escape everything that appears obviously +non-escaped. +% +gprof - display call graph profile data +gprof [ -[abcDhilLrsTvwxyz] ] [ -[ACeEfFJnNOpPqQZ][name] ] +[ -I dirs ] [ -d[num] ] [ -k from/to ] +[ -m min-count ] [ -R map_file ] [ -t table-length ] +[ --[no-]annotated-source[=name] ] +[ --[no-]exec-counts[=name] ] +[ --[no-]flat-profile[=name] ] [ --[no-]graph[=name] ] +[ --[no-]time=name] [ --all-lines ] [ --brief ] +[ --debug[=level] ] [ --function-ordering ] +[ --file-ordering map_file ] [ --directory-path=dirs ] +[ --display-unused-functions ] [ --file-format=name ] +[ --file-info ] [ --help ] [ --line ] [ --inline-file-names ] +[ --min-count=n ] [ --no-static ] [ --print-path ] +[ --separate-files ] [ --static-call-graph ] [ --sum ] +[ --table-length=len ] [ --traditional ] [ --version ] +% +lvremove — remove a logical volume +[--reportformat {basic|json}] [-S|--select Selection] [-t|--test] [-v|--verbose] [--version] [-f|--force] +lvremove removes one or more logical volumes. Confirmation will be requested before deactivating any +active logical volume prior to removal. Logical volumes cannot be deactivated or removed while they are +open (e.g. if they contain a mounted filesystem). Removing an origin logical volume will also remove all +dependent snapshots. +If the logical volume is clustered then it must be deactivated on all nodes in the cluster before it can +be removed. A single lvchange command issued from one node can do this. +If the configuration setting metadata/record_lvs_history is enabled and the logical volume being removed +% +blkid - locate/print block device attributes +blkid -L label | -U uuid +blkid [-dghlv] [-c file] [-o format] [-s tag] +blkid -p [-O offset] [-o format] [-S size] [-s tag] +[-n list] [-u list] device ... +blkid -i [-o format] [-s tag] device ... +mine the type of content (e.g. filesystem or swap) that a block device holds, and also the attributes +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +Generate Makefile.in for configure from Makefile.am. +Operation modes: +--help print this help, then exit +--version +print version number, then exit +-v, --verbose +verbosely list files processed +% +sh — shell, the standard command language interpreter +sh [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +[command_file [argument...]] +sh −c [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +command_string [command_name [argument...]] +sh −s [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +[argument...] +% +dd - convert and copy a file +dd [OPERAND]... +dd OPTION +Copy a file, converting and formatting according to the operands. +bs=BYTES +read and write up to BYTES bytes at a time +cbs=BYTES +convert BYTES bytes at a time +conv=CONVS +convert the file as per the comma separated symbol list +% +gio-querymodules - GIO module cache creation +gio-querymodules {DIRECTORY...} +implemented extension points for each module that has been found. It is used by GIO at runtime to avoid +opening all modules just to find out which extension points they are implementing. +GIO modules are usually installed in the gio/modules subdirectory of libdir. +% +mkfs - build a Linux filesystem +mkfs [options] [-t type] [fs-options] device [size] +mkfs is used to build a Linux filesystem on a device, usually a hard disk partition. The device argument +tem. The size argument is the number of blocks to be used for the filesystem. +In actuality, mkfs is simply a front-end for the various filesystem builders (mkfs.fstype) available +under Linux. The filesystem-specific builder is searched for via your PATH environment setting only. +Please see the filesystem-specific builder manual pages for further details. +% +[ Certificate-usage [ Selector [ Matching-type ] ] ] +ldns-dane -h +ldns-dane -v +In the first form: A TLS connection to name:port is established. The TLSA resource record(s) for name +are used to authenticate the connection. +In the second form: The TLSA record(s) are read from tlsafile and used to authenticate the TLS service +% +gpm-root - a default handler for gpm, used to draw menus on the root window +gpm-root [ options ] +The program gpm-root is designed to handle Control-Mouse events to draw menus on the background of the +current tty. The actual menus are described by a configuration file in the user's home directory. +screen handling capabilities required by the program. +The program uses the files /dev/vcs* to draw to the console screen. These are available only from kernel +dump/restore capability. +% +mtrace - interpret the malloc trace log +mtrace [option]... [binary] mtracedata +mtrace is a Perl script used to interpret and provide human readable output of the trace log contained in +mtrace also contains the source file name with line number information for problem locations (assuming +that binary was compiled with debugging information). +--help Print help and exit. +--version +% +lslocks - list local system locks +lslocks [options] +lslocks lists information about all the currently held file locks in a Linux system. +-J, --json +Use JSON output format. +-n, --noheadings +Do not print a header line. +-o, --output list +% +xzmore, lzmore - view xz or lzma compressed (text) files +xzmore [file...] +lzmore [file...] +time on a soft-copy terminal. +To use a pager other than the default more, set environment variable PAGER to the name of the desired +program. The name lzmore is provided for backward compatibility with LZMA Utils. +e or q When the prompt --More--(Next file: file) is printed, this command causes xzmore to exit. +s When the prompt --More--(Next file: file) is printed, this command causes xzmore to skip the next +file and continue. +% +Prompts the user for a passphrase and inserts it into the specified keyring. If no keyring is +does not. +% +hpftodit [ -adqsv ] [ -in ] tfm_file map_file font +It is possible to have whitespace between the -i option and its parameter. +for the font; Intellifont and TrueType TFM files are supported, but symbol set TFM files are not. +map_file is a file giving the groff names for characters in the font; this file should consist of a +sequence of lines of the form: +where m is a decimal integer giving the MSL number of the character, u is a hexadecimal integer giving +% +dirmngr - CRL and OCSP daemon +dirmngr [options] command [args] +versions it is also used as a server for managing and downloading certificate revocation lists (CRLs) for +invoked internally by gpg, gpgsm, or via the gpg-connect-agent tool. +Commands are not distinguished from options except for the fact that only one command is allowed. +--version +mand. +% +grub-mklayout - generate a GRUB keyboard layout file +by GRUB's keymap command. +Generate GRUB keyboard layout from Linux console one. +-i, --input=FILE +set input filename. Default is STDIN +-o, --output=FILE +set output filename. Default is STDOUT +% +mdig - DNS pipelined lookup utility +[-x addr] [plusopt...] +mdig {-h} +mdig [@server] {global-opt...} {{local-opt...} {query}...} +mdig is a multiple/pipelined query version of dig: instead of waiting for a response after sending each +query, it begins by sending all queries. Responses are displayed in the order in which they are received, +not in the order the corresponding queries were sent. +mdig options are a subset of the dig options, and are divided into "anywhere options" which can occur +anywhere, "global options" which must occur before the query name (or they are ignored with a warning), +% +grub-script-check - check grub.cfg for syntax errors +grub-script-check [OPTION...] [PATH] +Checks GRUB script configuration file for syntax errors. +-v, --verbose +print verbose messages. +-?, --help +give this help list +--usage +give a short usage message +% +captoinfo - convert a termcap description into a terminfo description +captoinfo looks in each given text file for termcap descriptions. For each one found, an equivalent ter‐ +minfo description is written to standard output. Termcap tc capabilities are translated directly to ter‐ +minfo use capabilities. +If no file is given, then the environment variable TERMCAP is used for the filename or entry. If TERMCAP +is a full pathname to a file, only the terminal whose name is specified in the environment variable TERM +is extracted from that file. If the environment variable TERMCAP is not set, then the file +/usr/share/terminfo is read. +-v print out tracing information on standard error as the program runs. +% +tee - read from standard input and write to standard output and files +tee [OPTION]... [FILE]... +Copy standard input to each FILE, and also to standard output. +-a, --append +append to the given FILEs, do not overwrite +-i, --ignore-interrupts +ignore interrupt signals +-p diagnose errors writing to non pipes +--output-error[=MODE] +% +netcap - a program to see capabilities +netcap +netcap is a program that prints out a report of process capabilities. If the application is using tcp, +udp, raw, or packet family of sockets AND has any capabilities, it will be in the report. If the process +has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is +found to be true, a '+' symbol is added. +Some directories in the /proc file system are readonly by root. The program will try to access and report +what it can. But if nothing comes out, try changing to the root user and re-run this program. +% +thin_restore - restore thin provisioning metadata file to device or file +thin_restore [options] -i {device|file} -o {device|file} +thin_restore restores thin provisioning metadata created by the respective device-mapper target dumped +to another device or file. If restored to a metadata device , the metadata can be processed by the +device-mapper target. +-q, --quiet +Suppress output messages, return only exit code. +-i, --input {device|file} +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +dbus-launch - Utility to start a message bus from a shell script +dbus-launch [--version] [--help] [--sh-syntax] [--csh-syntax] [--auto-syntax] [--binary-syntax] +[PROGRAM] [ARGS...] +The dbus-launch command is used to start a session bus instance of dbus-daemon from a shell script. It +would normally be called from a user's login scripts. Unlike the daemon itself, dbus-launch exits, so +backticks or the $() construct can be used to read information from dbus-launch. +With no arguments, dbus-launch will launch a session bus instance and print the address and PID of that +instance to standard output. +the appropriate environment variables so the specified program can find the bus, and then execute the +% +telnetd - Telnet server +telnetd [OPTION...] +DARPA telnet protocol server +-D, --debug[=LEVEL] +set debugging level +-E, --exec-login=STRING +set program to be executed instead of /usr/bin/login +-h, --no-hostinfo +do not print host information before login has been completed +% +ionice - set or get process I/O scheduling class and priority +ionice [-c class] [-n level] [-t] -p PID... +ionice [-c class] [-n level] [-t] -P PGID... +ionice [-c class] [-n level] [-t] -u UID... +ionice [-c class] [-n level] [-t] command [argument...] +-p is given, ionice will query the current I/O scheduling class and priority for that process. +When command is given, ionice will run this command with the given arguments. If no class is specified, +As of this writing, a process can be in one of three scheduling classes: +% +tcpdump - dump traffic on a network +tcpdump [ -AbdDefhHIJKlLnNOpqRStuUvxX# ] [ -B buffer_size ] +[ -c count ] +[ -C file_size ] [ -G rotate_seconds ] [ -F file ] +[ -i interface ] [ -j tstamp_type ] [ -m module ] [ -M secret ] +[ --number ] [ -Q in|out|inout ] +[ -r file ] [ -V file ] [ -s snaplen ] [ -T type ] [ -w file ] +[ -W filecount ] +[ -E spi@ipaddr algo:secret,... ] +[ -y datalinktype ] [ -z postrotate-command ] [ -Z user ] +[ --time-stamp-precision=tstamp_precision ] +[ --immediate-mode ] [ --version ] +[ expression ] +% +lex — generate programs for lexical tasks (DEVELOPMENT) +lex [−t] [−n|−v] [file...] +The lex utility shall generate C programs to be used in lexical processing of character input, and that +can be used as an interface to yacc. The C programs shall be generated from lex source code and conform +to the ISO C standard, without depending on any undefined, unspecified, or implementation-defined behav‐ +documented by the implementation. Usually, the lex utility shall write the program it generates to the +file lex.yy.c; the state of this file is unspecified if lex exits with a non-zero exit status. See the +% +chgrp - change group ownership +chgrp [OPTION]... GROUP FILE... +chgrp [OPTION]... --reference=RFILE FILE... +Change the group of each FILE to GROUP. With --reference, change the group of each FILE to that of +RFILE. +-c, --changes +like verbose but report only when a change is made +-f, --silent, --quiet +suppress most error messages +-v, --verbose +% +named-checkzone, named-compilezone - zone file validity checking or converting tool +named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] +[-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] +[-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} +{filename} +named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] +[-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] +[-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} +{filename} +named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does +into a name server. +% +grub-mkfont - make GRUB font files +-a, --force-autohint +force autohint +-b, --bold +convert to bold font +-c, --asce=NUM +set font ascent +% +key.dns_resolver - Upcall for request-key to handle dns_resolver keys +/sbin/key.dns_resolver <key> +/sbin/key.dns_resolver -D [-v] [-v] <keydesc> <calloutinfo> +and AFS) want to perform a hostname lookup and the kernel does not have the key cached. It is not ordi‐ +narily intended to be called directly. +It can be called in debugging mode to test its functionality by passing a -D flag on the command line. +For this to work, the key description and the callout information must be supplied. Verbosity can be +increased by supplying one or more -v flags. +ERRORS +All errors will be logged to the syslog. +% +newusers - update and create new users in batch +newusers [options] [file] +The newusers command reads a file (or the standard input by default) and uses this information to update +a set of existing users or to create new users. Each line is in the same format as the standard password +pw_name:pw_passwd:pw_uid:pw_gid:pw_gecos:pw_dir:pw_shell +pw_name +It can be the name of a new user or the name of an existing user (or a user created before by +% +swaplabel - print or change the label or UUID of a swap area +swaplabel [-L label] [-U UUID] device +swaplabel will display or change the label or UUID of a swap partition located on device (or regular +file). +If the optional arguments -L and -U are not given, swaplabel will simply display the current swap-area +label and UUID of device. +If an optional argument is present, then swaplabel will change the appropriate value on device. These +label or UUID on an actively used swap device. +% +find - search for files in a directory hierarchy +find [-H] [-L] [-P] [-D debugopts] [-Olevel] [starting-point...] [expression] +given starting-point by evaluating the given expression from left to right, according to the rules of +precedence (see section OPERATORS), until the outcome is known (the left hand side is false for and oper‐ +ations, true for or), at which point find moves on to the next file name. If no starting-point is speci‐ +fied, `.' is assumed. +If you are using find in an environment where security is important (for example if you are using it to +search directories that are writable by other users), you should read the "Security Considerations" chap‐ +ter of the findutils documentation, which is called Finding Files and comes with findutils. That docu‐ +ful source of information. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +etags, ctags - generate tag file for Emacs, vi +etags [-aCDGIQRVh] [-i file] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--no-defines] [--globals] [--no-globals] [--no-line-directive] [--include=file] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--output=tagfile] +[--class-qualify] [--regex=regexp] [--no-regex] [--help] [--version] file ... +ctags [-aCdgIQRVh] [-BtTuvwx] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--backward-search] [--cxref] [--no-defines] [--globals] [--no-globals] [--no-line-directive] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--class-qualify] +[--output=tagfile] [--regex=regexp] [--update] [--help] [--version] file ... +% +pcregrep - a grep with Perl-compatible regular expressions. +pcregrep searches files for character patterns, in the same way as other grep commands do, but it uses +the PCRE regular expression library to support patterns that are compatible with the regular expressions +full description of the syntax and semantics of the regular expressions that PCRE supports. +Patterns, whether supplied on the command line or in a separate file, are given without delimiters. For +example: +pcregrep Thursday /etc/motd +% +xzless, lzless - view xz or lzma compressed (text) files +xzless [file...] +lzless [file...] +xzless is a filter that displays text from compressed files to a terminal. It works on files compressed +The command named lzless is provided for backward compatibility with LZMA Utils. +ENVIRONMENT +% +pvscan — scan all disks for physical volumes +ingfailure] [-e|--exported] [-n|--novolumegroup] [--reportformat {basic|json}] [-s|--short] [-u|--uuid] +pvscan [-d|--debug] [-h|--help] --cache [-a|--activate ay] [-b|--background] [--reportformat +{basic|json}] [--major major --minor minor | DevicePath | major:minor]... +pvscan scans all supported LVM block devices in the system for physical volumes. +Scanning with lvmetad +Scanning disks is required to read LVM metadata and identify LVM PVs. Once read, lvmetad caches the +% +[--reportformat {basic|json}] [--setphysicalvolumesize size] PhysicalVolume [PhysicalVolume...] +allocated on it. +--setphysicalvolumesize size +Overrides the automatically-detected size of the PV. Use with care, or prior to reducing the +physical size of the device. +% +ntptrace - Trace peers of an NTP server +ntptrace [-flags] [-flag [value]] [--option-name[[=| ]value]] [host] +ntptrace is a perl script that uses the ntpq utility program to follow the chain of NTP servers from a +given host back to the primary time source. For ntptrace to work properly, each of these servers must +If given no arguments, ntptrace starts with localhost. Here is an example of the output from ntptrace: +On each line, the fields are (left to right): the host name, the host stratum, the time offset between +% +findfs - find a filesystem by label or UUID +findfs will search the block devices in the system looking for a filesystem or partition with specified +tag. The currently supported tags are: +LABEL=<label> +Specifies filesystem label. +UUID=<uuid> +Specifies filesystem UUID. +PARTUUID=<uuid> +% +kpasswd - change a user's Kerberos password +kpasswd [principal] +The kpasswd command is used to change a Kerberos principal's password. kpasswd first prompts for the +current Kerberos password, then prompts the user twice for the new password, and the password is changed. +If the principal is governed by a policy that specifies the length and/or number of character classes +required in the new password, the new password must conform to the policy. (The five character classes +principal +Change the password for the Kerberos principal principal. Otherwise, kpasswd uses the principal +name from an existing ccache if there is one; if not, the principal is derived from the identity +% +pvdisplay - display attributes of a physical volume +ure] [--ignoreskippedcluster] [--maps] [--nosuffix] [--reportformat {basic|json}] [-s|--short] +[-S|--select Selection] [--units hsbkmgtHKMGT] [-v[v]|--verbose [--verbose]] [--version] [PhysicalVol‐ +umePath...] +[--reportformat {basic|json}] [--separator Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] +[-v[v]|--verbose [--verbose]] [--version] [PhysicalVolumePath...] +pvdisplay allows you to see the attributes of one or more physical volumes like size, physical extent +size, space used for the volume group descriptor area and so on. +% +nroff - emulate nroff command with groff +nroff [-CchipStUvwW] [-dcs] [-Mdir] [-mname] [-nnum] [-olist] [-rcn] [-Tname] [file ...] +nroff --help +nroff -v | --version +devices accepted by nroff to select the output encoding emitted by grotty, groff's TTY output device. If +neither the GROFF_TYPESETTER environment variable nor the -T command line option (which overrides the +environment variable) specifies a (valid) device, nroff checks the current locale to select a default +output device. It first tries the locale program, then the environment variables LC_ALL, LC_CTYPE, and +LANG, and finally the LESSCHARSET environment variable. +The -h and -c options are equivalent to grotty's options -h (using tabs in the output) and -c (using the +old output scheme instead of SGR escape sequences). The -d, -C, -i, -M, -m, -n, -o, -r, -w, and -W +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +sudoreplay — replay sudo session logs +sudoreplay [-h] [-d dir] [-f filter] [-m num] [-s num] ID +sudoreplay [-h] [-d dir] -l [search expression] +sudoreplay plays back or lists the output logs created by sudo. When replaying, sudoreplay can play the +line options. +tern matching the iolog_file option in the sudoers file. When a command is run via sudo with log_output +also be determined using sudoreplay's list mode. +% +grub-probe - probe device information for GRUB +grub-probe [OPTION...] [OPTION]... [PATH|DEVICE] +Probe device information for a given path (or device, if the -d option is given). +-0 separate items in output using ASCII NUL characters +-d, --device +given argument is a system device, not a path +-m, --device-map=FILE +use FILE as the device map [default=//boot/grub/device.map] +-t, --target=TARGET +% +numactl - Control NUMA policy for processes or shared memory +numactl [ --all ] [ --interleave nodes ] [ --preferred node ] [ --membind nodes ] [ --cpunodebind nodes ] +[ --physcpubind cpus ] [ --localalloc ] [--] command {arguments ...} +numactl --show +numactl --hardware +numactl [ --huge ] [ --offset offset ] [ --shmmode shmmode ] [ --length length ] [ --strict ] +[ --shmid id ] --shm shmkeyfile | --file tmpfsfile +[ --touch ] [ --dump ] [ --dump-nodes ] memory policy +numactl runs processes with a specific NUMA scheduling or memory placement policy. The policy is set for +command and inherited by all of its children. In addition it can set persistent policy for shared memory +segments or files. +Use -- before command if using command options that could be confused with numactl options. +% +logger - enter messages into the system log +logger [options] [message] +logger makes entries in the system log. +When the optional message argument is present, it is written to the log. If it is not present, and the +-f option is not given either, then standard input is logged. +-d, --udp +Use datagrams (UDP) only. By default the connection is tried to the syslog port defined in +-e, --skip-empty +% +sclient remotehost +sclient is a sample application, primarily useful for testing purposes. It contacts a sample server +MIT +% +cache_dump - dump cache metadata from device or file to standard output +cache_dump [options] {device|file} +cache_dump dumps binary cache metadata created by the device-mapper cache target on a device or file to +standard output for analysis or postprocessing in XML format. XML formated metadata can be fed into +device-mapper target) or file. +-r, --repair +Repair the metadata whilst dumping it. +-h, --help +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +glib-compile-resources - GLib resource compiler +glib-compile-resources [OPTION...] {FILE} +glib-compile-resources reads the resource description from FILE and the files that it references and +creates a binary resource bundle that is suitable for use with the GResource API. The resulting bundle is +then written out as-is, or as C source for linking into an application. +The XML resource files normally have the filename extension .gresource.xml. For a detailed description of +the XML file format, see the GResource documentation. +-h, --help +Print help and exit +% +tar - an archiving utility +Traditional usage +tar {A|c|d|r|t|u|x}[GnSkUWOmpsMBiajJzZhPlRvwo] [ARG...] +% +grub-kbdcomp - generate a GRUB keyboard layout file +used by GRUB's keymap command. +Make GRUB keyboard layout file. +-h, --help +print this message and exit +-V, --version +print the version information and exit +% +vgextend — add physical volumes to a volume group +ume group to extend it in size. Moreover, it allows you to re-add a physical volume that has gone missing +previously, due to a transient device failure, without re-initialising it. Use vgextend --restoremissing +to that effect. +% +look - display lines beginning with a given string +look [options] string [file] +The look utility displays any lines in file which contain string. As look performs a binary search, the +with). +If file is not specified, the file /usr/share/dict/words is used, only alphanumeric characters are com‐ +-a, --alternative +Use the alternative dictionary file. +% +repo-add - package database maintenance utility +repo-add [options] <path-to-db> <package|delta> [<package|delta> ...] +repo-remove [options] <path-to-db> <packagename|delta> [<packagename|delta> ...] +repo-add and repo-remove are two scripts to help build a package database for packages built with +repo-add will update a package database by reading a built package or package delta file. Multiple +packages and/or deltas to add can be specified on the command line. +If a matching “.sig” file is found alongside a package file, the signature will automatically be embedded +into the database. +% +Translate Pod file(s) to Texinfo. There are two basic modes of operation. First, by default, each pod +is translated to a standalone Texinfo manual. +Second, if "--base-level" is set higher than 0, each pod is translated to a file suitable for @include, +and one more file with all the @includes is generated, intended to be @included in turn within a hand- +written top-level file. +--appendix-sections +Use appendix sectioning commands (@appendix, ...) instead of the default numbered sectioning Texinfo +@-commands (@chapter, @section, ...). +% +bison - GNU Project parser generator (yacc replacement) +bison [OPTION]... FILE +designed for yacc. +Input files should follow the yacc convention of ending in .y. Unlike yacc, the generated files do not +have fixed names, but instead use the prefix of the input file. Moreover, if you need to put C++ code in +the input file, you can end his name by a C++-like extension (.ypp or .y++), then bison will follow your +extension to name the output file (.cpp or .c++). For instance, a grammar description file named +parse.yxx would produce the generated parser in a file named parse.tab.cxx, instead of yacc's y.tab.c or +old Bison version's parse.tab.c. +% +aclocal [OPTION]... +--automake-acdir=DIR +--system-acdir=DIR +directory holding third-party system-wide files +% +dir - list directory contents +dir [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +xfs_growfs, xfs_info - expand an XFS filesystem +xfs_growfs [ -dilnrx ] [ -D size ] [ -e rtextsize ] [ -L size ] [ -m maxpct ] [ -t mtab ] [ -R size ] +mount-point +xfs_growfs -V +xfs_info [ -t mtab ] mount-point +xfs_info -V +The existing contents of the filesystem are undisturbed, and the added space becomes available for addi‐ +tional file storage. +% +Reads a grap program as input; produces an image file (by default in Portable Network Graphics format) +The output image will be a black-on-white graphic clipped to the smallest possible bounding box that con‐ +it a border, set the background transparent, set the image's pixel density, or perform other useful +transformations. +% +blockdev - call block device ioctls from the command line +blockdev [-q] [-v] command [command...] device [device...] +blockdev --report [device...] +The utility blockdev allows one to call block device ioctls from the command line. +-V Print version and exit. +-q Be quiet. +-v Be verbose. +--report +% +dmeventd — Device-mapper event daemon +dmeventd [-d [-d [-d]]] [-f] [-h] [-l] [-R] [-V] [-?] +dmeventd is the event monitoring daemon for device-mapper devices. Library plugins can register and +carry out actions triggered when particular events occur. +LVM PLUGINS +Mirror +Raid +Snapshot +% +zdump - timezone dumper +zdump [ --version ] [ --help ] [ -v ] [ -c [loyear,]hiyear ] [ zonename ... ] +Zdump prints the current time in each zonename named on the command line. +These options are available: +--version +Output version information and exit. +--help Output short usage and exit. +-v For each zonename on the command line, print the time at the lowest possible time value, the time +one day after the lowest possible time value, the times both one second before and exactly at each +% +mand [command_options] +key stash file or perform live rollover of the master key. +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +filecap - a program to see capabilities +filecap is a program that prints out a report of programs with file based capabilities. If a file is not +in the report or there is no report at all, no capabilities were found. For expedience, the default is to +check only the directories in the PATH environmental variable. If the -a command line option is given, +then all directories will be checked. If a directory is passed, it will recursively check that directory. +If a path to a file is given, it will only check that file. If the path to the file includes capabili‐ +ties, then they are written to the file. +environmental variable is used to show you capabilities on files you are likely to execute. +% +su - run a command with substitute user and group ID +su [options] [-] [user [argument...]] +su allows to run commands with a substitute user and group ID. +When called without arguments, su defaults to running an interactive shell as root. +For backward compatibility, su defaults to not change the current directory and to only set the environ‐ +to always use the --login option (instead of its shortcut -) to avoid side effects caused by mixing envi‐ +ronments. +options found in other su implementations, such as support for a wheel group, have to be configured via +% +fakeroot - run a command in an environment faking root privileges for file manipulation +fakeroot [-l|--lib library] [--faked faked-binary] [-i load-file] [-s save-file] [-u|--unknown-is-real ] +[-b|--fd-base ] [-h|--help ] [-v|--version ] [--] [command] +fakeroot runs a command in an environment wherein it appears to have root privileges for file manipula‐ +root permissions/ownership. Without fakeroot one would need to have root privileges to create the con‐ +stituent files of the archives with the correct permissions and ownership, and then pack them up, or one +would have to construct the archives directly, without using the archiver. +simulate the effect the real library functions would have had, had the user really been root. These wrap‐ +per functions are in a shared library /usr/lib/*/libfakeroot-*.so or similar location on your platform. +% +lvmchange — change attributes of the logical volume manager +lvmchange +% +cp - copy files and directories +cp [OPTION]... [-T] SOURCE DEST +cp [OPTION]... SOURCE... DIRECTORY +cp [OPTION]... -t DIRECTORY SOURCE... +Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY. +Mandatory arguments to long options are mandatory for short options too. +-a, --archive +same as -dR --preserve=all +--attributes-only +don't copy the file data, just the attributes +% +setpci - configure PCI devices +setpci [options] devices operations... +setpci is a utility for querying and configuring PCI devices. +All numbers are entered in hexadecimal notation. +Root privileges are necessary for almost all operations, excluding reads of the standard header of the +General options +-v Tells setpci to be verbose and display detailed information about configuration space accesses. +% +A summary of options is included below. +-M path +Specify path as MANPATH. +-k keyword +% +fsck.btrfs - do nothing, successfully +fsck.btrfs [-aApy] [<device>...] +fsck.btrfs is a type of utility that should exist for any filesystem and is called during system setup +set fs_passno to 0. +If you wish to check the consistency of a BTRFS filesystem or repair a damaged filesystem, see +option (use with care!). +% +migspeed - Test the speed of page migration +migspeed -p pages from-nodes to-nodes +migspeed attempts to move a sample of pages from the indicated node to the target node and measures the +time it takes to perform the move. +-p pages +% +era_dump - dump era metadata from device or file to standard output +era_dump [options] {device|file} +era_dump dumps binary era metadata created by the device-mapper era target on a device or file to stan‐ +dard output for analysis or postprocessing in XML format. XML formated metadata can be fed into +device-mapper target) or file. +-r, --repair +Repair the metadata whilst dumping it. +-h, --help +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +ftp - File Transfer Protocol client. +ftp [OPTION...] [HOST [PORT]] +Remote file transfer. +-6, --ipv6 +contact IPv6 hosts +-A, --active +enable active mode transfer +% +strings - print the strings of printable characters in files. +strings [-afovV] [-min-len] +[-n min-len] [--bytes=min-len] +[-t radix] [--radix=radix] +[-e encoding] [--encoding=encoding] +[-] [--all] [--print-file-name] +[-T bfdname] [--target=bfdname] +[-w] [--include-all-whitespace] +[-s] [--output-separatorsep_string] +[--help] [--version] file... +long (or the number given with the options below) and are followed by an unprintable character. +% +pcre-config - program to return PCRE configuration +pcre-config [--prefix] [--exec-prefix] [--version] [--libs] +[--cflags] [--cflags-posix] +pcre-config returns the configuration of the installed PCRE libraries and the options required to compile +respectively, and are not available if only one of those libraries has been built. If an unavailable +option is encountered, the "usage" information is output. +% +glib-genmarshal - C code marshaller generation utility for GLib closures +glib-genmarshal [OPTION...] [FILE...] +glib-genmarshal is a small utility that generates C code marshallers for callback functions of the +GClosure mechanism in the GObject sublibrary of GLib. The marshaller functions have a standard signature, +they get passed in the invoking closure, an array of value structures holding the callback function +parameters and a value structure for the return value of the callback. The marshaller is then responsible +to call the respective C code function of the closure with all the parameters on the stack and to collect +its return value. +glib-genmarshal takes a list of marshallers to generate as input. The marshaller list is either read from +standard input or from files passed as additional arguments on the command line. +Marshaller list format +% +smartctl - Control and Monitor Utility for SMART Disks +smartctl [options] device +other platforms.] +smartctl controls the Self-Monitoring, Analysis and Reporting Technology (SMART) system built into most +ATA/SATA and SCSI/SAS hard drives and solid-state drives. The purpose of SMART is to monitor the relia‐ +bility of the hard drive and predict drive failures, and to carry out different types of drive self- +smartctl also provides support for polling TapeAlert messages from SCSI tape drives and changers. +% +kproplog - display the contents of the Kerberos principal update log +kproplog [-h] [-e num] [-v] kproplog [-R] +The kproplog command displays the contents of the KDC database update log to standard output. It can be +used to keep track of incremental updates to the principal database. The update log file contains the +slave KDC servers. When updates occur, they are logged to this file. Subsequently any KDC slave config‐ +ured for incremental updates will request the current data from the master KDC and update their log file +with any updates returned. +The kproplog command requires read access to the update log file. It will display update entries only +for the KDC it runs on. +If no options are specified, kproplog displays a summary of the update log. If invoked on the master, +% +xml-config - script to get information about the installed version of GNOME-XML +xml-config [--prefix[=DIR]] [--libs] [--cflags] [--version] [--help] +xml-config is a tool that is used to determine the compile and linker flags that should be used to com‐ +pile and link programs that use GNOME-XML. +xml-config accepts the following options: +--version +Print the currently installed version of GNOME-XML on the standard output. +--libs Print the linker flags that are necessary to link a GNOME-XML program. +% +rdisc - network router discovery daemon +rdisc [-abdfrstvV] [-p preference] [-T max_interval] [send_address] [receive_address] +rdisc implements client side of the ICMP router discover protocol. rdisc is invoked at boot time to pop‐ +ulate the network routing tables with default routes. +for ROUTER_ADVERTISE messages from routers. The received messages are handled by first ignoring those +listed router addresses with which the host does not share a network. Among the remaining addresses the +ones with the highest preference are selected as default routers and a default route is entered in the +kernel routing table for each one of them. +Optionally, rdisc can avoid waiting for routers to announce themselves by sending out a few ROUTER_SOLIC‐ +% +ifnames - Extract CPP conditionals from a set of files +ifnames [OPTION]... [FILE]... +Scan all of the C source FILES (or the standard input, if none are given) and write to the standard out‐ +put a sorted list of all the identifiers that appear in those files in `#if', `#elif', `#ifdef', or +`#ifndef' directives. Print each identifier on a line, followed by a space-separated list of the files +in which that identifier occurs. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +% +showkey - examine the codes sent by the keyboard +showkey [-h|--help] [-a|--ascii] [-s|--scancodes] [-k|--keycodes] +showkey prints to standard output either the scan codes or the keycode or the `ascii' code of each key +or release event, or until it receives a suitable signal, like SIGTERM, from another process. In `ascii' +mode the program terminates when the user types ^D. +When in scancode dump mode, showkey prints in hexadecimal format each byte received from the keyboard to +sequences the keyboard sends at once on a given key press. The scan code dumping mode is primarily +intended for debugging the keyboard driver or other low level interfaces. As such it shouldn't be of much +interest to the regular end-user. However, some modern keyboards have keys or buttons that produce scan‐ +% +systemd-detect-virt - Detect execution in a virtualized environment +systemd-detect-virt detects execution in a virtualized environment. It identifies the virtualization +technology and can distinguish full machine virtualization from container virtualization. +systemd-detect-virt exits with a return value of 0 (success) if a virtualization technology is detected, +and non-zero (error) otherwise. By default, any type of virtualization is detected, and the options +--container and --vm can be used to limit what types of virtualization are detected. +When executed without --quiet will print a short identifier for the detected virtualization technology. +The following technologies are currently identified: +i.e. shared kernel virtualization) +% +ls - list directory contents +ls [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +gpgparsemail - Parse a mail message into an annotated format +gpgparsemail [options] [file] +The gpgparsemail is a utility currently only useful for debugging. Run it with --help for usage informa‐ +tion. +% +unix_update [...] +unix_update is a helper program for the pam_unix module that updates the password of a given user. It is +not intended to be run directly from the command line and logs a security violation if done so. +The purpose of the helper is to enable tighter confinement of login and password changing services. The +helper is thus called only when SELinux is enabled on the system. +The interface of the helper - command line options, and input/output data format are internal to the +pam_unix module and it should not be called directly from applications. +% +applygnupgdefaults - Run gpgconf --apply-defaults for all users. +applygnupgdefaults +with an existing GnuPG home directory. Admins might want to use this script to update he GnuPG configu‐ +applygnupgdefaults is invoked by root as: +applygnupgdefaults +% +libnetcfg - configure libnet +standard Perl distribution, but the libnetcfg can be used for any libnet installation. +Without arguments libnetcfg displays the current configuration. +$ libnetcfg +# old config ./libnet.cfg +ftp_int_passive 0 +ftp_testhost ftp.funet.fi +inet_domain none.such +nntp_hosts nntp.none.such +ph_hosts +% +--infile=<name> --outfile=<name> +--podpath=<name>:...:<name> --podroot=<name> +--cachedir=<name> --flush --recurse --norecurse +--quiet --noquiet --verbose --noverbose +--index --noindex --backlink --nobacklink +--header --noheader --poderrors --nopoderrors +--css=<URL> --title=<name> +Converts files from pod format (see perlpod) to HTML format. +% +podchecker - check the syntax of POD format documentation files +podchecker [-help] [-man] [-(no)warnings] [file ...] +-help Print a brief help message and exit. +-man Print the manual page and exit. +-warnings -nowarnings +Turn on/off printing of warnings. Repeating -warnings increases the warning level, i.e. more +warnings are printed. Currently increasing to level two causes flagging of unescaped "<,>" +characters. +file The pathname of a POD file to syntax-check (defaults to standard input). +% +piconv [-f from_encoding] [-t to_encoding] +[-p|--perlqq|--htmlcref|--xmlcref] [-C N|-c] [-D] [-S scheme] +[-s string|file...] +piconv -l +piconv -r encoding_alias +piconv -h +piconv is perl version of iconv, a character encoding converter widely available for various Unixen +piconv converts the character encoding of either STDIN or files specified in the argument and prints out +to STDOUT. +% +encguess - guess character encodings of files +encguess [switches] filename... +SWITCHES +-h +show this message and exit. +-s +specify a list of "suspect encoding types" to test, seperated by either ":" or "," +-S +output a list of all acceptable encoding types that can be used with the -s param +% +[--fixed=font] [--fixedbold=font] [--fixeditalic=font] +[--fixedbolditalic=font] [--name=name] [--nourls] +[--official] [--quotes=quotes] [--release=version] +[input [output] ...] +% +ptardiff - program that diffs an extracted archive against an unextracted one +ptardiff is a small program that diffs an extracted archive +against an unextracted one, using the perl module Archive::Tar. +Provide the progam with an ARCHIVE_FILE and it will look up all +the files with in the archive, scan the current working directory +for a file with the name and diff it against the contents of the +archive. +ptardiff ARCHIVE_FILE +ptardiff -h +% +perlbug - how to submit bug reports on Perl +perlbug +perlbug [ -v ] [ -a address ] [ -s subject ] [ -b body | -f inputfile ] [ -F outputfile ] +[ -r returnaddress ] [ -e editor ] [ -c adminaddress | -C ] [ -S ] [ -t ] [ -d ] [ -A ] [ -h ] [ -T ] +perlbug [ -v ] [ -r returnaddress ] +[ -A ] [ -ok | -okay | -nok | -nokay ] +perlthanks +the modules which ship with it. +% +Tcl Encoding Files (.enc). Besides being used internally during the build process of the Encode module, +Quick Guide +If you want to know as little about Perl as possible but need to add a new encoding, just read this +chapter and forget the rest. +0. Have a .ucm file ready. You can get it from somewhere or you can write your own from scratch or you +% +cpan - easily interact with CPAN from the command line +# with arguments and no switches, installs specified modules +cpan module_name [ module_name ... ] +# with switches, installs modules with extra behavior +cpan [-cfgimtTw] module_name [ module_name ... ] +# with just the dot, install from the distribution in the +# current directory +cpan . +# without arguments, starts CPAN.pm shell +cpan +# force install modules (usually those that fail tests) +% +[-q quotes] [--nourls] [--stderr] [-w width] +[input [output ...]] +from POD source. It can optionally use either termcap sequences or ANSI color escape sequences to format +the text. +input is the file to read for POD source (the POD can be embedded in code). If input isn't given, it +defaults to "STDIN". output, if given, is the file to which to write the formatted output. If output +isn't given, the formatted output is written to "STDOUT". Several POD files can be processed in the same +% +-help Print a brief help message and exit. +-man Print this command's manual page and exit. +-exit exitval +The exit status value to return. +-output outfile +% +prove - Run tests through a TAP harness. +prove [options] [files or directories] +Boolean options: +-v, --verbose Print all test lines. +-l, --lib Add 'lib' to the path for your tests (-Ilib). +-b, --blib Add 'blib/lib' and 'blib/arch' to the path for +your tests +-s, --shuffle Run the tests in random order. +-c, --color Colored test output (default). +--nocolor Do not color test output. +--count Show the X/Y test count when not verbose +(default) +% +easily run while in /usr/include: +or +or +% +diagnostics, splain - produce verbose warning diagnostics +Using the "diagnostics" pragma: +use diagnostics; +use diagnostics -verbose; +enable diagnostics; +disable diagnostics; +Using the "splain" standalone filter program: +splain [-v] [-p] diag.out +Using diagnostics to get stack traces from a misbehaving script: +% +ptar - a tar-like program written in perl +ptar is a small, tar look-alike program that uses the perl module +Archive::Tar to extract, create and list tar archives. +ptar -c [-v] [-z] [-C] [-f ARCHIVE_FILE | -] FILE FILE ... +ptar -c [-v] [-z] [-C] [-T index | -] [-f ARCHIVE_FILE | -] +ptar -x [-v] [-z] [-f ARCHIVE_FILE | -] +ptar -t [-z] [-f ARCHIVE_FILE | -] +ptar -h +c Create ARCHIVE_FILE or STDOUT (-) from FILE +x Extract from ARCHIVE_FILE or STDIN (-) +t List the contents of ARCHIVE_FILE or STDIN (-) +% +podselect - print selected sections of pod documentation on standard output +podselect [-help] [-man] [-section section-spec] [file ...] +-help Print a brief help message and exit. +-man Print the manual page and exit. +-section section-spec +Specify a section to include in the output. See "SECTION SPECIFICATIONS" in Pod::Parser for the +file The pathname of a file from which to select sections of pod documentation (defaults to standard +input). +% +shasum - Print or Check SHA Checksums +Print or check SHA checksums. +With no FILE, or when FILE is -, read standard input. +-b, --binary read in binary mode +-c, --check read SHA sums from the FILEs and check them +-t, --text read in text mode (default) +-U, --UNIVERSAL read in Universal Newlines mode +produces same digest on Windows/Unix/Mac +ASCII '0' interpreted as 0-bit, +all other characters ignored +% +json_pp - JSON::PP command utility +json_pp [-v] [-f from_format] [-t to_format] [-json_opt options_to_json] +from json_xs and modified. +The default input format is json and the default output format is json with pretty option. +-f +-f from_format +Reads a data in the given format from STDIN. +% +perlbug - how to submit bug reports on Perl +perlbug +perlbug [ -v ] [ -a address ] [ -s subject ] [ -b body | -f inputfile ] [ -F outputfile ] +[ -r returnaddress ] [ -e editor ] [ -c adminaddress | -C ] [ -S ] [ -t ] [ -d ] [ -A ] [ -h ] [ -T ] +perlbug [ -v ] [ -r returnaddress ] +[ -A ] [ -ok | -okay | -nok | -nokay ] +perlthanks +the modules which ship with it. +% +Usually, your old .pl file will still work fine and you should only use this tool if you plan to update +LIMITATIONS +It's just a first step, but it's usually a good first step. +Larry Wall <larry@wall.org> +% +perldoc - Look up Perl documentation in Pod format. +perldoc [-h] [-D] [-t] [-u] [-m] [-l] [-F] +[-i] [-V] [-T] [-r] +[-d destination_file] +[-o formatname] +[-w formatteroption:value] +[-n nroff-replacement] +[-X] +[-L language_code] +Examples: +perldoc -f BuiltinFunction +% +corelist - a commandline frontend to Module::CoreList +See Module::CoreList for one. +corelist -v +corelist [-r <PerlVersion>] ... +corelist --diff PerlVersion PerlVersion +the perls Module::CoreList knows about. +% +ptargrep - Apply pattern matching to the contents of files in a tar archive +ptargrep [options] <pattern> <tar file> ... +Options: +--basename|-b ignore directory paths from archive +--list-only|-l list matching filenames rather than extracting matches +--verbose|-v write debugging message to STDERR +--help|-? detailed help message +You might use this to identify all files in an archive which contain lines matching the specified pattern +and either print out the pathnames or extract the files. +% +xsubpp - compiler to convert Perl XS code into C code +xsubpp [-v] [-except] [-s pattern] [-prototypes] [-noversioncheck] [-nolinenumbers] [-nooptimize] +[-typemap typemap] [-output filename]... file.xs +other Perl module build tools. +xsubpp will compile XS code into C code by embedding the constructs necessary to let C functions +manipulate Perl values and creates the glue necessary to let Perl access those functions. The compiler +uses typemaps to determine how to map C function parameters and variables to Perl values. +The compiler will search for typemap files called typemap. It will use the following search path to find +default typemaps, with the rightmost typemap taking precedence. +% +Options: +-n do not generate perl code (default when invoked as pstruct) +-v generate perl code, with C decls as comments +-i do NOT recompute sizes for intrinsic datatypes +% +to retrieve the value of any #define statement which was in the C header files. +The module_name will be used for the name of the extension. If module_name is not supplied then the name +of the first header file will be used, with the first character capitalized. +If the extension might need extra libraries, they should be included here. The extension Makefile.PL +will take care of checking whether the libraries actually exist and how they should be loaded. The extra +libraries should be specified in the form -lm -lposix, etc, just as on the cc command line. By default, +% +perlivp - Perl Installation Verification Procedure +perlivp [-p] [-v] [-h] +The perlivp program is set up at Perl source code build time to test the Perl version it was built under. +It can be used after running: +make install +(or your platform's equivalent procedure) to verify that perl and its libraries have been installed +correctly. A correct installation is verified by output that looks like: +% +Options: +-n do not generate perl code (default when invoked as pstruct) +-v generate perl code, with C decls as comments +-i do NOT recompute sizes for intrinsic datatypes +% +instmodsh - A shell to examine installed modules +instmodsh +A little interface to ExtUtils::Installed to examine installed modules, validate your packlists and even +create a tarball from an installed module. +ExtUtils::Installed +% +zipdetails - display the internal structure of zip files +zipdetaile [-v] zipfile.zip +zipdetails -h +Zipdetails displays information about the internal record structure of the zip file. It is not concerned +with displaying any details of the compressed data stored in the zip file. +The program assumes prior understanding of the internal structure of a Zip file. You should have a copy +-v Enable Verbose mode +-h Display help +% diff --git a/pkg/fortune-mod-rtfm/usr/share/fortune/rtfm.dat b/pkg/fortune-mod-rtfm/usr/share/fortune/rtfm.dat Binary files differnew file mode 100644 index 0000000..2102dc6 --- /dev/null +++ b/pkg/fortune-mod-rtfm/usr/share/fortune/rtfm.dat diff --git a/src/fortune-rtfm b/src/fortune-rtfm new file mode 120000 index 0000000..a6b3928 --- /dev/null +++ b/src/fortune-rtfm @@ -0,0 +1 @@ +/home/aurelien/git/fortune-mod-rtfm/fortune-rtfm
\ No newline at end of file diff --git a/src/rtfm b/src/rtfm new file mode 100644 index 0000000..a218f0a --- /dev/null +++ b/src/rtfm @@ -0,0 +1,10246 @@ +if - "use" a Perl module if a condition holds (also can "no" a module) +The "if" module is used to conditionally load or unload another module. The construct +will load MODULE only if CONDITION evaluates to true. The above statement has no effect unless +"CONDITION" is true. If the CONDITION does evaluate to true, then the above line has the same effect as: +The use of "=>" above provides necessary quoting of "MODULE". If you don't use the fat comma (eg you +% +select — synchronous I/O multiplexing +#include <sys/select.h> +int select(int nfds, fd_set *restrict readfds, +fd_set *restrict writefds, fd_set *restrict errorfds, +struct timeval *restrict timeout); +Refer to pselect(). +% +time - time a simple command or give resource usage +time [options] command [arguments...] +The time command runs the specified program command with the given arguments. When command finishes, +time writes a message to standard error giving timing statistics about this program run. These statis‐ +tics consist of (i) the elapsed real time between invocation and termination, (ii) the user CPU time (the +pathname (something like /usr/bin/time). +% +alias — define or display aliases +alias [alias-name[=string]...] +The alias utility shall create or redefine alias definitions or write the values of existing alias defi‐ +nitions to standard output. An alias definition provides a string value that shall replace a command name +An alias definition shall affect the current shell execution environment and the execution environments +% +bg — run jobs in the background +bg [job_id...] +If job control is enabled (see the description of set −m), the bg utility shall resume suspended jobs +ground jobs. If the job specified by job_id is already a running background job, the bg utility shall +have no effect and shall exit successfully. +Using bg to place a job into the background shall cause its process ID to become ``known in the current +% +bind — bind a name to a socket +#include <sys/socket.h> +int bind(int socket, const struct sockaddr *address, +socklen_t address_len); +The bind() function shall assign a local socket address address to a socket identified by descriptor +socket that has no local socket address assigned. Sockets created with the socket() function are ini‐ +tially unnamed; they are identified only by their address family. +% +break — exit from for, while, or until loop +break [n] +The break utility shall exit from the smallest enclosing for, while, or until loop, if any; or from the +nth enclosing loop if n is specified. The value of n is an unsigned decimal integer greater than or equal +outermost enclosing loop shall be exited. Execution shall continue with the command immediately following +the loop. +% +cd — change the working directory +cd [−L|−P] [directory] +cd − +The cd utility shall change the working directory of the current shell execution environment (see Section +the symbol curpath represents an intermediate value used to simplify the description of the algorithm +used by cd. There is no requirement that curpath be made visible to the application.) +% +command — execute a simple command +command [−p] command_name [argument...] +command [−p][−v|−V] command_name +The command utility shall cause the shell to treat the arguments as a simple command, suppressing the +If the command_name is the same as the name of one of the special built-in utilities, the special proper‐ +% +continue — continue for, while, or until loop +continue [n] +The continue utility shall return to the top of the smallest enclosing for, while, or until loop, or to +while or until loop or performing the next assignment of a for loop, and re-executing the loop if appro‐ +priate. +% +echo - display a line of text +echo [SHORT-OPTION]... [STRING]... +echo LONG-OPTION +Echo the STRING(s) to standard output. +-n do not output the trailing newline +-e enable interpretation of backslash escapes +-E disable interpretation of backslash escapes (default) +--help display this help and exit +% +eval — construct command by concatenating arguments +eval [argument...] +The eval utility shall construct a command by concatenating arguments together, separating each with a +<space> character. The constructed command shall be read and executed by the shell. +None. +% +exec — execute commands and open, close, or copy file descriptors +exec [command [argument...]] +The exec utility shall open, close, and/or copy file descriptors as specified by any redirections as part +of the command. +are opened with associated redirection statements, it is unspecified whether those file descriptors +remain open when the shell invokes another utility. Scripts concerned that child shells could misuse +% +exit — cause the shell to exit +exit [n] +The exit utility shall cause the shell to exit with the exit status specified by the unsigned decimal +undefined. +A trap on EXIT shall be executed before the shell terminates, except when the exit utility is invoked in +% +export — set the export attribute for variables +export name[=word]... +export −p +The shell shall give the export attribute to the variables corresponding to the specified names, which +shall cause them to be in the environment of subsequently executed commands. If the name of a variable is +followed by =word, then the value of that variable shall be set to word. +% +false - do nothing, unsuccessfully +false [ignored command line arguments] +false OPTION +Exit with a status code indicating failure. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +fc — process the command history list +fc [−r] [−e editor] [first [last]] +fc −l [−nr] [first [last]] +fc −s [old=new] [first] +The fc utility shall list, or shall edit and re-execute, commands previously entered to an interactive +sh. +% +fg — run jobs in the foreground +fg [job_id] +If job control is enabled (see the description of set −m), the fg utility shall move a background job +Using fg to place a job into the foreground shall remove its process ID from the list of those ``known in +% +getopts — parse utility options +getopts optstring name [arg...] +The getopts utility shall retrieve options and option-arguments from a list of parameters. It shall sup‐ +Each time it is invoked, the getopts utility shall place the value of the next option in the shell vari‐ +able specified by the name operand and the index of the next argument to be processed in the shell vari‐ +% +hash — remember or report utility locations +hash [utility...] +hash −r +The hash utility shall affect the way the current shell environment remembers the locations of utilities +fied, it shall add utility locations to its list of remembered locations or it shall purge the contents +of the list. When no arguments are specified, it shall report on the contents of the list. +% +history - GNU History Library +Many programs read input from the user a line at a time. The GNU History library is able to keep track +of those lines, associate arbitrary data with each line, and utilize information from previous lines in +composing new ones. +HISTORY EXPANSION +The history library supports a history expansion feature that is identical to the history expansion in +History expansions introduce words from the history list into the input stream, making it easy to repeat +commands, insert the arguments to a previous command into the current input line, or fix errors in previ‐ +ous commands quickly. +% +jobs — display status of jobs in the current session +jobs [−l|−p] [job_id...] +The jobs utility shall display the status of jobs that were started in the current shell environment; see +When jobs reports the termination status of a job, the shell shall remove its process ID from the list of +% +kill - terminate a process +kill [-signal|-s signal|-p] [-q value] [-a] [--] pid|name... +kill -l [number] | -L +The command kill sends the specified signal to the specified processes or process groups. If no signal +caught. +Most modern shells have a builtin kill function, with a usage rather similar to that of the command +described here. The --all, --pid, and --queue options, and the possibility to specify processes by com‐ +mand name, are local extensions. +If signal is 0, then no actual signal is sent, but error checking is still performed. +% +login, logout - write utmp and wtmp entries +#include <utmp.h> +void login(const struct utmp *ut); +int logout(const char *ut_line); +Link with -lutil. +The utmp file records who is currently using the system. The wtmp file records all logins and logouts. +The function login() takes the supplied struct utmp, ut, and writes it to both the utmp and the wtmp +file. +% +printf - format and print data +printf FORMAT [ARGUMENT]... +printf OPTION +Print ARGUMENT(s) according to FORMAT, or execute according to OPTION: +--help display this help and exit +--version +output version information and exit +FORMAT controls the output as in C printf. Interpreted sequences are: +\" double quote +% +pwd - print name of current/working directory +pwd [OPTION]... +Print the full filename of the current working directory. +-L, --logical +use PWD from environment, even if it contains symlinks +-P, --physical +avoid all symlinks +--help display this help and exit +--version +% +read — read a line from standard input +read [−r] var... +The read utility shall read a single line from standard input. +By default, unless the −r option is specified, <backslash> shall act as an escape character. An unescaped +<backslash> shall preserve the literal value of the following character, with the exception of a <new‐ +line>. If a <newline> follows the <backslash>, the read utility shall interpret this as line continua‐ +tion. The <backslash> and <newline> shall be removed before splitting the input into fields. All other +% +readonly — set the readonly attribute for variables +readonly name[=word]... +readonly −p +The variables whose names are specified shall be given the readonly attribute. The values of variables +with the readonly attribute cannot be changed by subsequent assignment, nor can those variables be unset +by the unset utility. If the name of a variable is followed by =word, then the value of that variable +shall be set to word. +% +return — return from a function or dot script +return [n] +The return utility shall cause the shell to stop executing the current function or dot script. If the +shell is not currently executing a function or dot script, the results are unspecified. +None. +% +set — set or unset options and positional parameters +set [−abCefhmnuvx] [−o option] [argument...] +set [+abCefhmnuvx] [+o option] [argument...] +set −− [argument...] +set −o +set +o +% +shift — shift positional parameters +shift [n] +the new number of positional parameters. +The value n shall be an unsigned decimal integer less than or equal to the value of the special parameter +% +test - check file types and compare values +test EXPRESSION +test +[ EXPRESSION ] +[ ] +[ OPTION +Exit with the status determined by EXPRESSION. +--help display this help and exit +--version +output version information and exit +% +times — write process times +times +The times utility shall write the accumulated user and system times for the shell and for all of its +child processes, in the following POSIX locale format: +"%dm%fs %dm%fs\n%dm%fs %dm%fs\n", <shell user minutes>, +<shell user seconds>, <shell system minutes>, +<shell system seconds>, <children user minutes>, +% +trap — trap signals +trap n [condition...] +trap [action condition...] +If the first operand is an unsigned decimal integer, the shell shall treat all operands as conditions, +and shall reset each condition to the default value. Otherwise, if there are operands, the first is +treated as an action and the remaining as conditions. +If action is '−', the shell shall reset each condition to the default value. If action is null (""), the +% +true - do nothing, successfully +true [ignored command line arguments] +true OPTION +Exit with a status code indicating success. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +type — write a description of command type +type name... +The type utility shall indicate how each argument would be interpreted if used as a command name. +None. +OPERANDS +% +ulimit — set or report file size limit +ulimit [−f] [blocks] +The ulimit utility shall set or report the file-size writing limit imposed on files written by the shell +increase the limit. +% +umask — get or set the file mode creation mask +umask [−S] [mask] +The umask utility shall set the file mode creation mask of the current shell execution environment (see +affect the initial value of the file permission bits of subsequently created files. If umask is called in +a subshell or separate utility execution environment, such as one of the following: +% +unalias — remove alias definitions +unalias alias-name... +unalias −a +Substitution. The aliases shall be removed from the current shell execution environment; see Section +% +unset — unset values and attributes of variables and functions +unset [−fv] name... +Each variable or function specified by name shall be unset. +If −v is specified, name refers to a variable name and the shell shall unset it and remove it from the +environment. Read-only variables cannot be unset. +If −f is specified, name refers to a function and the shell shall unset the function definition. +% +wait — await process completion +wait [pid...] +last command in each element of the asynchronous list shall become known in the current shell execution +If the wait utility is invoked with no operands, it shall wait until all process IDs known to the invok‐ +ing shell have terminated and exit with a zero exit status. +% +timedatectl - Control the system time and date +The following options are understood: +--no-ask-password +Do not query the user for authentication for privileged operations. +--adjust-system-clock +% +iptables-save — dump iptables rules to stdout +ip6tables-save — dump iptables rules to stdout +iptables-save [-M modprobe] [-c] [-t table] +ip6tables-save [-M modprobe] [-c] [-t table] +iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable +format to STDOUT. Use I/O-redirection provided by your shell to write to a file. +-M, --modprobe modprobe_program +Specify the path to the modprobe program. By default, iptables-save will inspect /proc/sys/ker‐ +nel/modprobe to determine the executable's path. +% +c_rehash - Create symbolic links to files named by the hash values +c_rehash [-old] [-h] [-n] [-v] [ directory...] +c_rehash scans directories and calculates a hash value of each ".pem", ".crt", ".cer", or ".crl" file in +the specified directory list and creates symbolic links for each file, where the name of the link is the +as many programs that use OpenSSL require directories to be set up like this in order to find +certificates. +If any directories are named on the command line, then those are processed in turn. If not, then the +SSL_CERT_DIR environment variable is consulted; this shold be a colon-separated list of directories, like +the Unix PATH variable. If that is not set then the default directory (installation-specific but often +/usr/local/ssl/certs) is processed. +% +gdbm_load - re-create a GDBM database from a dump file. +[--block-size=NUM] [--cache-size=NUM] [--mmap=NUM] +[--mode=MODE] [--no-meta] [--replace] +gdbm_load [-Vh] [--help] [--usage] [--version] +Create a gdbm database file DB_FILE from the dump file FILE. If the FILE argument is not supplied, out‐ +put the created database to the standard error. +If the input file is in ASCII dump format, the mode and ownership of the created database are restored +% +yes - output a string repeatedly until killed +yes [STRING]... +yes OPTION +Repeatedly output a line with all specified STRING(s), or 'y'. +--help display this help and exit +--version +output version information and exit +Written by David MacKenzie. +% +named-checkconf - named configuration file syntax checking tool +named-checkconf [-h] [-v] [-j] [-t directory] {filename} [-p] [-x] [-z] +named-checkconf checks the syntax, but not the semantics, of a named configuration file. The file is +parsed and checked for syntax errors, along with all files included by it. If no file is specified, +/etc/named.conf is read by default. +run, even if named-checkconf was successful. named-checkconf can be run on these files explicitly, +however. +-h +% +grotty - groff driver for typewriter-like devices +grotty [ -bBcdfhioruUv ] [ -Fdir ] [ files... ] +It is possible to have whitespace between the -F option and its parameter. +grotty translates the output of GNU troff into a form suitable for typewriter-like devices. Normally +the standard input. A filename of - also causes grotty to read the standard input. Output is written to +the standard output. +foreground colors; additionally, bold and italic attributes can be used at the same time (by using the BI +% +systemd-machine-id-setup - Initialize the machine ID in /etc/machine-id +systemd-machine-id-setup +information about this file. +If the tool is invoked without the --commit switch, /etc/machine-id is initialized with a valid, new +machined ID if it is missing or empty. The new machine ID will be acquired in the following fashion: +used to initialize the machine ID in /etc/machine-id. +% +bridge - show / manipulate bridge addresses and devices +OBJECT := { link | fdb | mdb | vlan | monitor } +bridge link set dev DEV [ cost COST ] [ priority PRIO ] [ state STATE] [ guard { on | off } ] [ hairpin +{ on | off } ] [ fastleave { on | off } ] [ root_block { on | off } ] [ learning { on | off } ] [ +learning_sync { on | off } ] [ flood { on | off } ] [ hwmode { vepa | veb } ] [ self ] [ master ] +bridge link [ show ] [ dev DEV ] +bridge fdb { add | append | del | replace } LLADDR dev DEV { local | static | dynamic } [ self ] [ master +] [ router ] [ use ] [ dst IPADDR ] [ vni VNI ] [ port PORT ] [ via DEVICE ] +% +grub-mkrelpath - make a system path relative to its root +grub-mkrelpath [OPTION...] PATH +Transform a system filename into GRUB one. +-?, --help +give this help list +--usage +give a short usage message +-V, --version +print program version +% +vgrename — rename a volume group +will refuse to run or give warning messages. +a Volume Group with the same name as the Volume Group containing your root filesystem the machine might +not even boot correctly. However, the two Volume Groups should have different UUIDs (unless the disk was +cloned) so you can rename one of the conflicting Volume Groups with vgrename. +% +rename - rename files +rename [options] expression replacement file... +rename will rename the specified files by replacing the first occurrence of expression in their name by +replacement. +-s, --symlink +Do not rename a symlink but its target. +-v, --verbose +Show which files where renamed, if any. +-V, --version +% +grub-install - install GRUB to a device +grub-install [OPTION...] [OPTION] [INSTALL_DEVICE] +Install GRUB on your drive. +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +pvck — check physical volume metadata +calVolume [PhysicalVolume...] +pvck checks physical volume LVM metadata for consistency. +--labelsector sector +parameter allows you to specify a different starting sector for the scan and is useful for recov‐ +ery situations. For example, suppose the partition table is corrupted or lost on /dev/sda, but +% +xfs_copy - copy the contents of an XFS filesystem +xfs_copy -V +argument must be the pathname of the device or file containing the XFS filesystem. The remaining argu‐ +ments specify one or more target devices or file names. If the pathnames specify devices, a copy of the +source XFS filesystem is created on each device. The target can also be the name of a regular file, in +xfs_copy creates the file. The length of the resulting file is equal to the size of the source filesys‐ +tem. However, if the file is created on an XFS filesystem, the file consumes roughly the amount of space +actually used in the source filesystem by the filesystem and the XFS log. The space saving is because +xfs_copy seeks over free blocks instead of copying them and the XFS filesystem supports sparse files +efficiently. +% +pacman - package manager utility +pacman <operation> [options] [targets] +Pacman is a package management utility that tracks installed packages on a Linux system. It features +dependency support, package groups, install and uninstall scripts, and the ability to sync your local +machine with a remote repository to automatically upgrade packages. Pacman packages are a zipped tar +format. +Invoking pacman involves specifying an operation with any potential options and targets to operate on. A +target is usually a package name, file name, URL, or a search string. Targets can be provided as command +line arguments. Additionally, if stdin is not from a terminal and a single hyphen (-) is passed as an +% +ip - show / manipulate routing, devices, policy routing and tunnels +ip [ -force ] -batch filename +OBJECT := { link | address | addrlabel | route | rule | neigh | ntable | tunnel | tuntap | maddress | +flush-attempts } | -o[neline] | -rc[vbuf] [size] | -t[imestamp] | -ts[hort] | -n[etns] name | +-a[ll] | -c[olor] } +-V, -Version +% +mk_cmds - error table compiler +mk_cmds file +Mk_cmds converts a table listing command names and associated help messages into a C source file suitable +The source file name must end with a suffix of ``.ct''; the file consists of a declaration supplying the +name of the command table: +command_table name +followed by entries of the form: +[ request | unimplemented ] name, " string "[, abbrev]...; +% +uniq - report or omit repeated lines +uniq [OPTION]... [INPUT [OUTPUT]] +Filter adjacent matching lines from INPUT (or standard input), writing to OUTPUT (or standard output). +With no options, matching lines are merged to the first occurrence. +Mandatory arguments to long options are mandatory for short options too. +-c, --count +prefix lines by the number of occurrences +-d, --repeated +only print duplicate lines, one for each group +% +ldattach - attach a line discipline to a serial line +The ldattach daemon opens the specified device file (which should refer to a serial device) and attaches +the line discipline ldisc to it for processing of the sent and/or received data. It then goes into the +background keeping the device open so that the line discipline stays loaded. +With no arguments, ldattach prints usage information. +LINE DISCIPLINES +% +gawk - pattern scanning and processing language +gawk [ POSIX or GNU style options ] -f program-file [ -- ] file ... +gawk [ POSIX or GNU style options ] [ -- ] program-text file ... +Gawk is the GNU Project's implementation of the AWK programming language. It conforms to the definition +AWK Programming Language, by Aho, Kernighan, and Weinberger. Gawk provides the additional features found +in the current version of Brian Kernighan's awk and a number of GNU-specific extensions. +The command line consists of options to gawk itself, the AWK program text (if not supplied via the -f or +--file options), and values to be made available in the ARGC and ARGV pre-defined AWK variables. +When gawk is invoked with the --profile option, it starts gathering profiling statistics from the execu‐ +tion of the program. Gawk runs more slowly in this mode, and automatically produces an execution profile +% +lookbib - search bibliographic databases +lookbib [ -v ] [ -istring ] [ -tn ] filename... +lookbib prints a prompt on the standard error (unless the standard input is not a terminal), reads from +the standard input a line containing a set of keywords, searches the bibliographic databases filename... +for references containing those keywords, prints any references found on the standard output, and repeats +this process until the end of input. For each database filename to be searched, if an index filename.i +It is possible to have whitespace between a command line option and its parameter. +-v Print the version number. +% +size - list section sizes and total size. +size [-A|-B|--format=compatibility] +[--help] +[-d|-o|-x|--radix=number] +[--common] +[-t|--totals] +[--target=bfdname] [-V|--version] +[objfile...] +The GNU size utility lists the section sizes---and the total size---for each of the object or archive +files objfile in its argument list. By default, one line of output is generated for each object file or +each module in an archive. +objfile... are the object files to be examined. If none are specified, the file "a.out" will be used. +% +join - join lines of two files on a common field +For each pair of input lines with identical join fields, write a line to standard output. The default +join field is the first, delimited by blanks. +-a FILENUM +-e EMPTY +replace missing input fields with EMPTY +% +idle - make process 0 idle +#include <unistd.h> +int idle(void); +idle() is an internal system call used during bootstrap. It marks the process's pages as swappable, low‐ +ers its priority, and enters the main scheduling loop. idle() never returns. +EPERM. +RETURN VALUE +% +refer - preprocess bibliographic references for groff +refer [ -benvCPRS ] [ -an ] [ -cfields ] [ -fn ] [ -ifields ] [ -kfield ] [ -lm,n ] [ -pfilename ] +[ -sfields ] [ -tn ] [ -Bfield.macro ] [ filename... ] +refer copies the contents of filename... to the standard output, except that lines between .[ and .] are +are to be processed. +Each citation specifies a reference. The citation can specify a reference that is contained in a biblio‐ +graphic database by giving a set of keywords that only that reference contains. Alternatively it can +specify a reference by supplying a database record in the citation. A combination of these alternatives +is also possible. +% +xzmore, lzmore - view xz or lzma compressed (text) files +xzmore [file...] +lzmore [file...] +time on a soft-copy terminal. +To use a pager other than the default more, set environment variable PAGER to the name of the desired +program. The name lzmore is provided for backward compatibility with LZMA Utils. +e or q When the prompt --More--(Next file: file) is printed, this command causes xzmore to exit. +s When the prompt --More--(Next file: file) is printed, this command causes xzmore to skip the next +file and continue. +% +sserver [ -p port ] [ -S keytab ] [ server_port ] +sserver, it performs a Kerberos authentication, and then sserver returns to sclient the Kerberos princi‐ +pal which was used for the Kerberos authentication. It makes a good test that Kerberos has been success‐ +fully installed on a machine. +The service name used by sserver and sclient is sample. Hence, sserver will require that there be a +The -S option allows for a different keytab than the default. +% +wc - print newline, word, and byte counts for each file +wc [OPTION]... [FILE]... +wc [OPTION]... --files0-from=F +Print newline, word, and byte counts for each FILE, and a total line if more than one FILE is specified. +A word is a non-zero-length sequence of characters delimited by white space. +With no FILE, or when FILE is -, read standard input. +word, character, byte, maximum line length. +-c, --bytes +print the byte counts +% +calc_tickadj - Calculates optimal value for tick given ntp drift file. +calc_tickadj [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +The calc_tickadj script uses provided ntp drift file to generate optimal tick value. Generally, ntpd can +do better job if the drift value is the smallest possible number. +The example output of +$ ./calc_tickadj +9999 usec; 9999779 nsec +$ cat /etc/ntp/drift +% +pcap-config - write libpcap compiler and linker flags to standard output +pcap-config [ --static ] [ --cflags | --libs | --additional-libs ] +When run with the --cflags option, pcap-config writes to the standard output the -I compiler flags +required to include libpcap's header files. When run with the --libs option, pcap-config writes to the +standard output the -L and -l linker flags required to link with libpcap, including -l flags for +libraries required by libpcap. When run with the --additional-libs option, pcap-config writes to the +standard output the -L and -l flags for libraries required by libpcap, but not the -lpcap flag to link +with libpcap itself. +By default, it writes flags appropriate for compiling with a dynamically-linked version of libpcap; the +--static flag causes it to write flags appropriate for compiling with a statically-linked version of +libpcap. +% +xfs_logprint - print the log of an XFS filesystem +xfs_logprint [ options ] device +the partition or logical volume containing the filesystem. The device can be a regular file if the -f +option is used. The contents of the filesystem remain undisturbed. There are two major modes of opera‐ +tion in xfs_logprint. +One mode is better for filesystem operation debugging. It is called the transactional view and is +enabled through the -t option. The transactional view prints only the portion of the log that pertains to +tries to display each transaction without regard to how they are split across log records. +The second mode starts printing out information from the beginning of the log. Some error blocks might +% +kswitch - switch primary ticket cache +kswitch {-c cachename|-p principal} +kswitch makes the specified credential cache the primary cache for the collection, if a cache collection +is available. +-c cachename +Directly specifies the credential cache to be made primary. +-p principal +Causes the cache collection to be searched for a cache containing credentials for principal. If +one is found, that collection is made primary. +% +hexdump - display file contents in hexadecimal, decimal, octal, or ascii +hexdump [options] file... +The hexdump utility is a filter which displays the specified files, or standard input if no files are +specified, in a user-specified format. +-b, --one-byte-octal +One-byte octal display. Display the input offset in hexadecimal, followed by sixteen space-sepa‐ +rated, three-column, zero-filled bytes of input data, in octal, per line. +% +btrfs - a toolbox to manage btrfs filesystems +btrfs <command> [<args>] +The btrfs utility is a toolbox for managing btrfs filesystems. There are command groups to work with +There are also standalone tools for some tasks like btrfs-convert or btrfstune that were separate +historically and/or haven’t been merged to the main utility. See section STANDALONE TOOLS for more +details. +Any command name can be shortened as far as it stays unambiguous, however it is recommended to use full +% +xzdec, lzmadec - Small .xz and .lzma decompressors +xzdec [option...] [file...] +lzmadec [option...] [file...] +xzdec is a liblzma-based decompression-only tool for .xz (and only .xz) files. xzdec is intended to work +xz --decompress --stdout (and possibly a few other commonly used options) to decompress .xz files. +lzmadec is identical to xzdec except that lzmadec supports .lzma files instead of .xz files. +To reduce the size of the executable, xzdec doesn't support multithreading or localization, and doesn't +read options from XZ_DEFAULTS and XZ_OPT environment variables. xzdec doesn't support displaying inter‐ +process instead of displaying progress information. +% +mii-tool - view, manipulate media-independent interface status +mii-tool [-v, --verbose] [-V, --version] [-R, --reset] [-r, --restart] [-w, --watch] [-l, --log] [-A, +--advertise=media,...] [-F, --force=media] [-p, --phy=addr] interface ... +Most fast ethernet adapters use an MII to autonegotiate link speed and duplex setting. +Most intelligent network devices use an autonegotiation protocol to communicate what media technologies +they support, and then select the fastest mutually supported media technology. The -A or --advertise +options can be used to tell the MII to only advertise a subset of its capabilities. Some passive +devices, such as single-speed hubs, are unable to autonegotiate. To handle such devices, the MII proto‐ +-F or --force options can be used to force the MII to operate in one mode, instead of autonegotiating. +The -A and -F options are mutually exclusive. +% +lsblk - list block devices +lsblk [options] [device...] +lsblk lists information about all available or the specified block devices. The lsblk command reads the +sysfs filesystem and udev db to gather information. +The command prints all block devices (except RAM disks) in a tree-like format by default. Use lsblk +--help to get a list of all available columns. +The default output, as well as the default output from options like --fs and --topology, is subject to +change. So whenever possible, you should avoid using default outputs in your scripts. Always explicitly +define expected columns by using --output columns-list in environments where a stable output is required. +% +watch - execute a program periodically, showing output fullscreen +watch [options] command +run until interrupted. +-d, --differences [permanent] +Highlight the differences between successive updates. Option will read optional argument that +changes highlight to be permanent, allowing to see what has changed at least once since first +iteration. +-n, --interval seconds +% +slattach - attach a network interface to a serial line +slattach [-dehlLmnqv] [-c command] [-p proto] [-s speed] [tty] +Slattach is a tiny little program that can be used to put a normal terminal ("serial") line into one of +several "network" modes, thus allowing you to use it for point-to-point links to other computers. +tty Path to a serial device like /dev/ttyS*, /dev/cua* or /dev/ptmx to spawn a new pseudo tty. +[-c command] +tions when a link goes down. +[-d] Enable debugging output. Useful when determining why a given setup doesn't work. +% +systemd-notify - Notify service manager about start-up completion and other daemon status changes +used to send arbitrary information, encoded in an environment-block-like list of strings. Most +importantly, it can be used for start-up completion notification. +set for the service unit this command is called from. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +xfs_io - debug the I/O path of an XFS filesystem +xfs_io [ -adfmrRstxT ] [ -c cmd ] ... [ -p prog ] file +xfs_io -V +than the raw XFS volume itself. These code paths include not only the obvious read/write/mmap interfaces +for manipulating files, but also cover all of the XFS extensions (such as space preallocation, additional +inode flags, etc). +gram exits. +% +pkttyagent - Textual authentication helper +pkttyagent [--version] [--help] +pkttyagent [--process { pid | pid,pid-start-time } | --system-bus-name busname] [--notify-fd fd] +[--fallback] +pkttyagent is used to start a textual authentication agent for the subject specified by either --process +or --system-bus-name. If neither of these options are given, the parent process is used. +To get notified when the authentication agent has been registered either listen to the Changed D-Bus +signal or use --notify-fd to pass the number of a file descriptor that has been passed to the program. +If --fallback is used, the textual authentication agent will not replace an existing authentication +% +more - file perusal filter for crt viewing +more [options] file... +Options are also taken from the environment variable MORE (make sure to precede them with a dash (-)) but +command-line options will override those. +-d Prompt with "[Press space to continue, 'q' to quit.]", and display "[Press 'h' for instructions.]" +instead of ringing the bell when an illegal key is pressed. +-l Do not pause after any line containing a ^L (form feed). +% +head - output the first part of files +head [OPTION]... [FILE]... +header giving the file name. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --bytes=[-]NUM +print the first NUM bytes of each file; with the leading '-', print all but the last NUM bytes of +each file +% +expr - evaluate expressions +expr EXPRESSION +expr OPTION +--help display this help and exit +--version +output version information and exit +Print the value of EXPRESSION to standard output. A blank line below separates increasing precedence +% +ipset — administration tool for IP sets +| version | - } +-file filename } +% +objdump - display information from object files. +objdump [-a|--archive-headers] +[-b bfdname|--target=bfdname] +[-C|--demangle[=style] ] +[-d|--disassemble] +[-D|--disassemble-all] +[-z|--disassemble-zeroes] +[-EB|-EL|--endian={big | little }] +[-f|--file-headers] +[-F|--file-offsets] +[--file-start-context] +[-g|--debugging] +[-e|--debugging-tags] +[-h|--section-headers|--headers] +[-i|--info] +% +gresource - GResource tool +gresource [--section SECTION] list FILE [PATH] +gresource [--section SECTION] details FILE [PATH] +gresource [--section SECTION] extract FILE PATH +gresource sections FILE +gresource offers a simple commandline interface to GResource. It lets you list and extract resources that +have been compiled into a resource file or included in an elf file (a binary or a shared library). +% +lvmdiskscan scans all SCSI, (E)IDE disks, multiple devices and a bunch of other block devices in the sys‐ +tem looking for LVM physical volumes. The size reported is the real device size. Define a filter in +-l, --lvmpartition +Only reports Physical Volumes. +% +numfmt - Convert numbers from/to human-readable strings +numfmt [OPTION]... [NUMBER]... +Reformat NUMBER(s), or the numbers from standard input if none are specified. +Mandatory arguments to long options are mandatory for short options too. +--debug +print warnings about invalid input +-d, --delimiter=X +use X instead of whitespace for field delimiter +--field=FIELDS +% +logsave - save the output of a command in a logfile +logsave [ -asv ] logfile cmd_prog [ ... ] +The logsave program will execute cmd_prog with the specified argument(s), and save a copy of its output +to logfile. If the containing directory for logfile does not exist, logsave will accumulate the output +in memory until it can be written out. A copy of the output will also be written to standard output. +If cmd_prog is a single hyphen ('-'), then instead of executing a program, logsave will take its input +from standard input and save it in logfile +logsave is useful for saving the output of initial boot scripts until the /var partition is mounted, so +the output can be written to /var/log. +% +certtool - GnuTLS certificate tool +certtool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +or non interactively by specifying the template command line option. +provide it using the environment variables GNUTLS_PIN and GNUTLS_SO_PIN. +-d number, --debug=number +% +systemd-socket-activate - Test socket activation of daemons +connection. +The daemon to launch and its options should be specified after options intended for +systemd-socket-activate. +If the --inetd option is given, the socket file descriptor will be used as the standard input and output +of the launched process. Otherwise, standard input and output will be inherited, and sockets will be +systemd-socket-activate will be passed through to the daemon, in the original positions. Other sockets +% +losetup - set up and control loop devices +Get info: +losetup loopdev +losetup -l [-a] +losetup -j file [-o offset] +Detach a loop device: +losetup -d loopdev... +Detach all associated loop devices: +% +passwd - change user password +passwd [options] [LOGIN] +the account or associated password validity period. +Password Changes +and compared against the stored password. The user has only one chance to enter the correct password. The +After the password has been entered, password aging information is checked to see if the user is +permitted to change the password at this time. If not, passwd refuses to change the password and exits. +% +unicode_stop - revert keyboard and console from unicode mode +unicode_stop +The unicode_stop command will more-or-less undo the effect of unicode_start. It puts the keyboard in +% +sudo, sudoedit — execute a command as another user +sudo -h | -K | -k | -V +sudo -v [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-u user] +sudo -l [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command] +sudo [-AbEHnPS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-r role] [-t type] +[-u user] [VAR=value] [-i | -s] [command] +sudoedit [-AknS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-u user] file ... +sudo allows a permitted user to execute a command as the superuser or another user, as specified by the +security policy. The invoking user's real (not effective) user ID is used to determine the user name with +which to query the security policy. +sudo supports a plugin architecture for security policies and input/output logging. Third parties can +develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. +% +groff - front-end for the groff document formatting system +groff [-abcegijklpstzCEGNRSUVXZ] [-d cs] [-D arg] [-f fam] [-F dir] [-I dir] [-K arg] [-L arg] [-m name] +[-M dir] [-n num] [-o list] [-P arg] [-r cn] [-T dev] [-w name] [-W name] [file ...] +groff -h | --help +groff -v | --version [option ...] +The groff program and macro suite is the implementation of a roff(7) system within the free software col‐ +lection GNU ⟨http://www.gnu.org⟩. The groff system has all features of the classical roff, but adds many +extensions. +% +tzselect - select a timezone +tzselect +The tzselect program asks the user for information about the current location, and outputs the resulting +timezone description to standard output. The output is suitable as a value for the TZ environment vari‐ +able. +All interaction with the user is done via standard input and standard error. +The exit status is zero if a timezone was successfully obtained from the user, nonzero otherwise. +ENVIRONMENT +% +modprobe - Add and remove modules from the Linux Kernel +modprobe [-v] [-V] [-C config-file] [-n] [-i] [-q] [-b] [modulename] [module parameters...] +modprobe [-r] [-v] [-n] [-i] [modulename...] +modprobe [-c] +modprobe [--dump-modversions] [filename] +modprobe intelligently adds or removes a module from the Linux kernel: note that for convenience, there +is no difference between _ and - in module names (automatic underscore conversion is performed). +modprobe looks in the module directory /lib/modules/`uname -r` for all the modules and other files, +modprobe will also use module options specified on the kernel command line in the form of +% +systemd-hwdb - hardware database management tool +systemd-hwdb [options] update +systemd-hwdb [options] query modalias +systemd-hwdb expects a command and command specific arguments. It manages the binary hardware database. +-h, --help +Print help text. +--usr +Generate in /usr/lib/udev instead of /etc/udev. +% +named - Internet domain name server +[-M option] [-m flag] [-n #cpus] [-p port] [-s] [-S #max-socks] [-t directory] [-U #listeners] +[-u user] [-v] [-V] [-X lock-file] [-x cache-file] +When invoked without arguments, named will read the default configuration file /etc/named.conf, read any +initial data, and listen for queries. +% +systemctl - Control the systemd system and service manager +manages. +The following options are understood: +-t, --type= +The argument should be a comma-separated list of unit types such as service and socket. +If one of the arguments is a unit type, when listing units, limit display to certain unit types. +% +geouplookup6 - look up country using IP Address or hostname +geouplookup6 [-d directory] [-f filename] [-v] <ipaddress|hostname> +geouplookup6 uses the GeoIP library and database to find the Country that an IP address or hostname orig‐ +inates from. You must install a database suitable for geoiplookup6. IE: GeoIPv6.dat +For example: +geoiplookup6 ipv6.google.com +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +unshare - run program with some namespaces unshared from parent +unshare [options] program [arguments] +Unshares the indicated namespaces from the parent process and then executes the specified program. +The namespaces can optionally be made persistent by bind mounting /proc/pid/ns/type files to a filesystem +The namespaces to be unshared are indicated via options. Unshareable namespaces are: +mount namespace +Mounting and unmounting filesystems will not affect the rest of the system (CLONE_NEWNS flag), +except for filesystems which are explicitly marked as shared (with mount --make-shared; see +% +mechanisms which use the standard libsasl database of user secrets. +the -d (delete user) flag. +% +pinky - lightweight finger +pinky [OPTION]... [USER]... +-l produce long format output for the specified USERs +-b omit the user's home directory and shell in long format +-h omit the user's project file in long format +-p omit the user's plan file in long format +-s do short format output, this is the default +-f omit the line of column headings in short format +% +tic - the terminfo entry-description compiler +The tic command translates a terminfo file from source format into compiled format. The compiled format +hashed database (one record per entry). The tic command writes only one type of entry, depending on how +it was built: +· For directory trees, the top-level directory, e.g., /usr/share/terminfo, specifies the location of +the database. +· For hashed databases, a filename is needed. If the given file is not found by that name, but can be +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +troff - the troff processor of the groff text formatting system +troff [-abcivzCERU] [-d cs] [-f fam] [-F dir] [-I dir] [-m name] [-M dir] [-n num] [-o list] [-r cn] +[-T name] [-w name] [-W name] [file ...] +appropriate order and with the appropriate options. +It is possible to have whitespace between a command line option and its parameter. +-a Generate an ASCII approximation of the typeset output. +% +gtester - test running utility +gtester [OPTION...] [testprogram] +gtester is a utility to run unit tests that have been written using the GLib test framework. +When called with the -o option, gtester writes an XML report of the test results, which can be converted +into HTML using the gtester-report utility. +-h, --help +print help and exit +-v, --version +print version information and exit +% +lexgrog - parse header information in man pages +lexgrog [-m|-c] [-dfw?V] [-E encoding] file ... +lexgrog is an implementation of the traditional “groff guess” utility in lex. It reads the list of files +on its command line as either man page source files or preformatted “cat” pages, and displays their name +and description as used by apropos and whatis, the list of preprocessing filters required by the man page +before it is passed to nroff or troff, or both. +grams that need to check man pages for correctness. If one of lexgrog's input files is “-”, it will read +from standard input; if any input file is compressed, a decompressed version will be read automatically. +-d, --debug +% +lvscan — scan (all disks) for Logical Volumes +lockingfailure] [-P|--partial] [--reportformat {basic|json}] [-v|--verbose] +lvscan scans all known volume groups or all supported LVM block devices in the system for defined Logical +Volumes. The output consists of one line for each Logical Volume indicating whether or not it is active, +obtain more-comprehensive information about the Logical Volumes. +--all Include information in the output about internal Logical Volumes that are components of normally- +accessible Logical Volumes, such as mirrors, but which are not independently accessible (e.g. not +% +msggrep - pattern matching on message catalog +msggrep [OPTION] [INPUTFILE] +Extracts all messages of a translation catalog that match a given pattern or belong to some given source +files. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +lvmconf — LVM configuration modifier +lvmconf [--disable-cluster] [--enable-cluster] [--enable-halvm] [--disable-halvm] [--file <configfile>] +[--lockinglib <lib>] [--lockinglibdir <dir>] [--services] [--mirrorservice] [--startstopservices] +lvmconf is a script that modifies the locking configuration in an lvm configuration file. See +lvm configuration if needed. +--disable-cluster +Set locking_type to the default non-clustered type. Also reset lvmetad use to its default. +--enable-cluster +Set locking_type to the default clustered type on this system. Also disable lvmetad use as it is +% +colrm - remove columns from a file +colrm [first [last]] +colrm removes selected columns from a file. Input is taken from standard input. Output is sent to stan‐ +dard output. +If called with one parameter the columns of each line will be removed starting with the specified first +column. If called with two parameters the columns from the first column to the last column will be +removed. +-V, --version +% +ntpdc - vendor-specific NTPD control program +ntpdc [-flags] [-flag [value]] [--option-name[[=| ]value]] [ host ...] +using a much more sane interface. +either in interactive mode or controlled using command line arguments. Extensive state and statistics +information is available through the ntpdc interface. In addition, nearly all the configuration options +ntpdc. +% +paste - merge lines of files +paste [OPTION]... [FILE]... +Write lines consisting of the sequentially corresponding lines from each FILE, separated by TABs, to +standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --delimiters=LIST +reuse characters from LIST instead of TABs +-s, --serial +% +vgsplit — split a volume group into two +vgsplit [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-c|--clustered {y|n}] [--commandprofile Pro‐ +[-p|--maxphysicalvolumes MaxPhysicalVolumes] [--[vg]metadatacopies NumberOfCopies|unmanaged|all] +[PhysicalVolumePath...] +The physical volumes moved can be specified either explicitly via PhysicalVolumePath, or implicitly by -n +moved. +for the new volume group can be specified with --alloc, --clustered, --maxlogicalvolumes, --metadatatype, +% +makepkg - package build utility +makepkg [options] [ENVVAR=value] [ENVVAR+=value] ... +makepkg is a script to automate the building of packages. The requirements for using the script are a +build-capable *nix platform and a custom build script for each package you wish to build (known as a +The advantage to a script-based build is that the work is only done once. Once you have the build script +for a package, makepkg will do the rest: download and validate source files, check dependencies, +configure the build-time settings, build the package, install the package into a temporary root, make +customizations, generate meta-info, and package the whole thing up for pacman to use. +makepkg uses your current locale by default and does not unset it when building packages. If you wish +% +mev - a program to report mouse events +mev [ options ] +The `mev' program is part of the gpm package. The information below is extracted from the texinfo file, +which is the preferred source of information. +The mev program is modeled after xev. It prints to stdout the mouse console events it gets. +mev's default behaviour is to get anything, but command line switches can be used to set the various +fields in the Gpm_Connect structure, in order to customize the program's behaviour. I'm using mev to han‐ +dle mouse events to Emacs. +Command line switches for mev are the following: +% +last, lastb - show a listing of last logged in users +last [options] [username...] [tty...] +lastb [options] [username...] [tty...] +last searches back through the /var/log/wtmp file (or the file designated by the -f option) and displays +a list of all users logged in (and out) since that file was created. One or more usernames and/or ttys +be abbreviated, thus last 0 is the same as last tty0. +When catching a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal, +terminate. +The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all +% +mandb - create or update the manual page index caches +mandb [-dqsucpt?V] [-C file] [manpath] +mandb [-dqsut] [-C file] -f filename ... +mandb is used to initialise or manually update index database caches that are usually maintained by man. +The caches contain information relevant to the current state of the manual page system and the informa‐ +tion stored within them is used by the man-db utilities to enhance their speed and functionality. +When creating or updating an index, mandb will warn of bad ROFF .so requests, bogus manual page filenames +and manual pages from which the whatis cannot be parsed. +Supplying mandb with an optional colon-delimited path will override the internal system manual page hier‐ +archy search path, determined from information found within the man-db configuration file. +% +showconsolefont - Show the current EGA/VGA console screen font +showconsolefont [ -V ] [ -v ] [ -C console ] +The showconsolefont command outputs the current console font to stdout. The option -v prints additional +-C allows one to indicate the console involved. Its argument is a pathname. +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +gzexe - compress executable files in place +gzexe name ... +The gzexe utility allows you to compress executables in place and have them automatically uncompress and +execute when you run them (at a penalty in performance). For example if you execute ``gzexe +/usr/bin/gdb'' it will create the following two files: +/usr/bin/gdb~ is the original file and /usr/bin/gdb is the self-uncompressing executable file. You can +remove /usr/bin/gdb~ once you are sure that /usr/bin/gdb works properly. +% +recode-sr-latin - convert Serbian text from Cyrillic to Latin script +recode-sr-latin [OPTION] +Recode Serbian text from Cyrillic to Latin script. The input text is read from standard input. The con‐ +verted text is output to standard output. +Informative output: +-h, --help +display this help and exit +-V, --version +output version information and exit +% +nice - run a program with modified scheduling priority +the process). +Mandatory arguments to long options are mandatory for short options too. +-n, --adjustment=N +--help display this help and exit +% +zforce - force a '.gz' extension on all gzip files +zforce [ name ... ] +% +lwresd - lightweight resolver daemon +lwresd [-c config-file] [-C config-file] [-d debug-level] [-f] [-g] [-i pid-file] [-m flag] [-n #cpus] +lwresd is the daemon providing name lookup services to clients that use the BIND 9 lightweight resolver +library. It is essentially a stripped-down, caching-only name server that answers queries using the BIND +9 lightweight resolver protocol rather than the DNS protocol. +is used for lightweight resolver requests and responses. +Incoming lightweight resolver requests are decoded by the server which then resolves them using the DNS +protocol. When the DNS lookup completes, lwresd encodes the answers in the lightweight resolver format +% +tput, reset - initialize a terminal or query terminfo database +tput [-Ttype] capname [parms ... ] +tput [-Ttype] init +tput [-Ttype] reset +tput [-Ttype] longname +tput -S << +tput -V +The tput utility uses the terminfo database to make the values of terminal-dependent capabilities and +name of the requested terminal type. The result depends upon the capability's type: +string +tput writes the string to the standard output. No trailing newline is supplied. +% +xfs_estimate - estimate the space that an XFS filesystem will take +xfs_estimate [ -h ] [ -b blocksize ] [ -i logsize ] +[ -e logsize ] [ -v ] directory ... +xfs_estimate -V +For each directory argument, xfs_estimate estimates the space that directory would take if it were copied +to an XFS filesystem. xfs_estimate does not cross mount points. The following definitions are used: +The xfs_estimate options are: +-b blocksize +% +request-key - Handle key instantiation callback requests from the kernel +/sbin/request-key <op> <key> <uid> <gid> <threadring> <processring> <sessionring> [<info>] +available. The kernel creates a partially set up key and then calls out to this program to instantiate +it. It is not intended to be called directly. +ERRORS +All errors will be logged to the syslog. +FILES +/etc/request-key.conf Instantiation handler configuration file. +/etc/request-key.d/<keytype>.conf Keytype specific configuration file. +% +vlock - Virtual Console lock program +vlock +vlock [ -a,--all ] [ -c,--current ] [ -h,--help ] [ -v,--version ] +sion(s) while still allowing other users to use the system on other virtual consoles. If desired, the +By default, only the current VC (virtual console) is locked. With the -a,-all option all VCs are locked. +The locked VCs cannot be unlocked without the invoker's password. And, for the paranoid, vlock makes it +a trying experience for those attempting to guess the password, so unauthorized access to session(s) is +highly unlikely. +% +psfxtable - handle Unicode character tables for console fonts +psfxtable [-i infont] [-o outfont] [-it intable] [-ot outtable] [-nt] +psfxtable handles the embedded Unicode character table for .psf format console fonts. It reads a font and +are links to it. +standard input. If no -it or -o or -ot option is given, no input table is read or no output font or out‐ +put table is written. +By default the output font (if any) will have a Unicode table when either the input font has one, or an +explicit table (which overrides an input font table) has been provided. The option -nt causes output of +% +kmod - Program to manage Linux Kernel modules +kmod is a multi-call binary which implements the programs used to control Linux Kernel modules. Most +users will only run it using its other names. +-V --version +Show the program version and exit. +-h --help +Show the help message. +% +vimdiff - edit two, three or four versions of a file with Vim and show differences +gvimdiff +Vimdiff starts Vim on two (or three or four) files. Each file gets its own window. The differences +version to another version of the same file. +When started as gvimdiff the GUI will be started, if available. +In each window the 'diff' option will be set, which causes the differences to be highlighted. +% +dnssec-verify - DNSSEC zone verification tool +dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-V] [-x] [-z] {zonefile} +dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the +-c class +Specifies the DNS class of the zone. +-E engine +Specifies the cryptographic hardware to use, when applicable. +% +vgcreate — create a volume group +vgcreate [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-c|--clustered {y|n}] [--com‐ +datacopies NumberOfCopies|unmanaged|all] [-s|--physicalextentsize PhysicalExtentSize[bBsSkKmMgGtTpPeE]] +[--reportformat {basic|json}] [--shared] [--systemid SystemID] [-t|--test] [-v|--verbose] [--version] +cePath. +% +expiry - check and enforce password expiration policy +expiry option +The expiry command checks (-c) the current password expiration and forces (-f) changes when required. It +is callable as a normal user command. +The options which apply to the expiry command are: +-c, --check +Check the password expiration of the current user. +-f, --force +Force a password change if the current user has an expired password. +% +vconfig [lots of long options] +The vconfig program allows you to create and remove vlan-devices on a vlan enabled kernel. Vlan-devices +are virtual ethernet devices which represents the virtual lans on the physical lan. +add [interface-name] [vlan-id] +Creates a vlan-device on [interface-name]. The resulting vlan-device will be called according to +the nameing convention set. +rem [vlan-device] +Removes the named vlan-device. +% +lvmetad — LVM metadata cache daemon +lvmetad [-l level[,level...]] [-p pidfile_path] [-s socket_path] [-t timeout_value] [-f] [-h] [-V] [-?] +The lvmetad daemon caches LVM metadata so that LVM commands can read metadata from the cache rather than +the normal work of the system. lvmetad can be a disadvantage when disk event notifications from the sys‐ +tem are unreliable. +lvmetad does not read metadata from disks itself. Instead, it relies on an LVM command, like pvscan +--cache, to read metadata from disks and send it to lvmetad to be cached. +New LVM disks that appear on the system must be scanned before lvmetad knows about them. If lvmetad does +not know about a disk, then LVM commands using lvmetad will also not know about it. When disks are added +or removed from the system, lvmetad must be updated. +% +repo-add - package database maintenance utility +repo-add [options] <path-to-db> <package|delta> [<package|delta> ...] +repo-remove [options] <path-to-db> <packagename|delta> [<packagename|delta> ...] +repo-add and repo-remove are two scripts to help build a package database for packages built with +repo-add will update a package database by reading a built package or package delta file. Multiple +packages and/or deltas to add can be specified on the command line. +If a matching “.sig” file is found alongside a package file, the signature will automatically be embedded +into the database. +% +c++filt - Demangle C++ and Java symbols. +c++filt [-_|--strip-underscore] +[-n|--no-strip-underscore] +[-p|--no-params] +[-t|--types] +[-i|--no-verbose] +[-s format|--format=format] +[--help] [--version] [symbol...] +The C++ and Java languages provide function overloading, which means that you can write many functions +with the same name, providing that each function takes parameters of different types. In order to be +able to distinguish these similarly named functions C++ and Java encode them into a low-level assembler +% +pkexec - Execute a command as another user +pkexec [--version] [--disable-internal-agent] [--help] +pkexec allows an authorized user to execute PROGRAM as another user. If PROGRAM is not specified, the +default shell will be run. If username is not specified, then the program will be executed as the +administrative super user, root. +RETURN VALUE +Upon successful completion, the return value is the return value of PROGRAM. If the calling process is +not authorized or an authorization could not be obtained through authentication or an error occured, +% +du - estimate file space usage +du [OPTION]... [FILE]... +du [OPTION]... --files0-from=F +Summarize disk usage of the set of FILEs, recursively for directories. +Mandatory arguments to long options are mandatory for short options too. +-0, --null +end each output line with NUL, not newline +-a, --all +write counts for all files, not just directories +% +There is an additional drawing command available: +\D'R dh dv' +Draw a rule (solid black rectangle), with one corner at the current position, and the diagonally +opposite corner at the current position +(dh,dv). Afterwards the current position will be at the +% +gperl - groff preprocessor for Perl parts in roff files +gperl [-] [--] [ filespec ....] +gperl -h|--help +gperl -v|--version +Perl part can be stored in groff strings or numerical registers based on the arguments at a final line of +a Perl part. +So far, there are only filespec or breaking options. +filespec are file names or the minus character - character for standard input. As usual, the argument -- +can be used in order to let all fowllowing arguments mean file names, even if the names begin with a +% +git - the stupid content tracker +git [--version] [--help] [-C <path>] [-c <name>=<value>] +[--exec-path[=<path>]] [--html-path] [--man-path] [--info-path] +[-p|--paginate|--no-pager] [--no-replace-objects] [--bare] +[--git-dir=<path>] [--work-tree=<path>] [--namespace=<name>] +<command> [<args>] +Git is a fast, scalable, distributed revision control system with an unusually rich command set that +provides both high-level operations and full access to internals. +See gittutorial(7) to get started, then see giteveryday(7) for a useful minimum set of commands. The Git +After you mastered the basic concepts, you can come back to this page to learn what commands Git offers. +% +igawk - gawk with include files +igawk [ all gawk options ] -f program-file [ -- ] file ... +igawk [ all gawk options ] [ -- ] program-text file ... +@include getopt.awk +in your program to include the file getopt.awk from either the current directory or one of the other +directories in the search path. +% +nl-classid-lookup - Lookup classid definitions +nl-classid-lookup [-hv] [-r] [--raw] name +nl-classid-lookup searches the classid database for a matching entry. It is used to resolve qdisc/class +names to classid values and vice versa. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +-r or --reverse +% +host - DNS lookup utility +{name} [server] +host is a simple utility for performing DNS lookups. It is normally used to convert names to IP addresses +and vice versa. When no arguments or options are given, host prints a short summary of its command line +arguments and options. +address. server is an optional argument which is either the name or IP address of the name server that +host should query instead of the server or servers listed in /etc/resolv.conf. +% +stty - change and print terminal line settings +stty [-F DEVICE | --file=DEVICE] [SETTING]... +stty [-F DEVICE | --file=DEVICE] [-a|--all] +stty [-F DEVICE | --file=DEVICE] [-g|--save] +Print or change terminal characteristics. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +print all current settings in human-readable form +-g, --save +print all current settings in a stty-readable form +% +rarpd - answer RARP REQUESTs +arping [-aAvde] [-b bootdir] [interface] +is found in /etc/ethers database and obtained host name is resolvable to an IP address appropriate for +attached network, rarpd answers to client with RARPD reply carrying an IP address. +To allow multiple boot servers on the network rarpd optionally checks for presence Sun-like bootable im‐ +WARNING +% +swapon, swapoff - enable/disable devices and files for paging and swapping +swapon [options] [specialfile...] +swapoff [-va] [specialfile...] +swapon is used to specify devices on which paging and swapping are to take place. +to indicate a device by label or uuid. +Calls to swapon normally occur in the system boot scripts making all swap devices available, so that the +paging and swapping activity is interleaved across several devices and files. +swapoff disables swapping on the specified devices and files. When the -a flag is given, swapping is +disabled on all known swap devices and files (as found in /proc/swaps or /etc/fstab). +% +dnssec-settime - set the key timing metadata for a DNSSEC key +dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-A date/offset] +[-R date/offset] [-I date/offset] [-D date/offset] [-D sync date/offset] [-h] [-V] +[-v level] [-E engine] {keyfile} +dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, +-A, -R, -I, and -D options. The metadata can then be used by dnssec-signzone or other signing software to +determine when a key is to be published, whether it should be used for signing a zone, etc. +If none of these options is set on the command line, then dnssec-settime simply prints the key timing +metadata already stored in the key. +When key metadata fields are changed, both files of a key pair (Knnnn.+aaa+iiiii.key and +Knnnn.+aaa+iiiii.private) are regenerated. Metadata fields are stored in the private file. A +% +systemd-path - List and query system and user paths +file-hierarchy(7) available for querying. +When invoked without arguments, a list of known paths and their current values is shown. When at least +one argument is passed, the path with this name is queried and its value shown. The variables whose name +begins with "search-" do not refer to individual paths, but instead to a list of colon-separated search +paths, in their order of precedence. +The following options are understood: +% +cfdisk - display or manipulate a disk partition table +cfdisk [options] [device] +cfdisk is a curses-based program for partitioning any block device. The default device is /dev/sda. +functionality for CHS (Cylinder-Head-Sector) addressing. CHS has never been important for Linux, and +this addressing concept does not make any sense for new devices. +% +setsid - run a program in a new session +setsid [options] program [arguments] +setsid runs a program in a new session. +-c, --ctty +Set the controlling terminal to the current one. +-w, --wait +Wait for the execution of the program to end, and return the exit value of this program as the +return value of setsid. +-V, --version +% +xfs_freeze - suspend access to an XFS filesystem +xfs_freeze [ -f | -u ] mount-point +xfs_freeze -V +xfs_freeze halts new access to the filesystem and creates a stable image on disk. xfs_freeze is intended +to be used with volume managers and hardware RAID devices that support the creation of snapshots. +The mount-point argument is the pathname of the directory where the filesystem is mounted. The filesys‐ +The -f flag requests the specified XFS filesystem to be frozen from new modifications. When this is +selected, all ongoing transactions in the filesystem are allowed to complete, new write system calls are +% +dc - an arbitrary precision calculator +dc [-V] [--version] [-h] [--help] +[-e scriptexpression] [--expression=scriptexpression] +[-f scriptfile] [--file=scriptfile] +[file ...] +dc is a reverse-polish desk calculator which supports unlimited precision arithmetic. It also allows you +to define and call macros. Normally dc reads from the standard input; if any command arguments are given +to it, they are filenames, and dc reads and executes the contents of the files before reading from stan‐ +dard input. All normal output is to standard output; all error output is to standard error. +A reverse-polish calculator stores numbers on a stack. Entering a number pushes it on the stack. Arith‐ +metic operations pop arguments off the stack and push the results. +% +xfs_mdrestore - restores an XFS metadump image to a filesystem image +xfs_mdrestore [ -g ] source target +xfs_mdrestore -V +filesystem. The source argument specifies the location of the metadump image and the target argument +specifies the destination for the filesystem image. If the source is -, then the metadata image is read +rected to xfs_mdrestore. The target can be either a file or a device. +xfs_mdrestore should not be used to restore metadata onto an existing filesystem unless you are com‐ +pletely certain the target can be destroyed. +% +ssh-keyscan — gather ssh public keys +ssh-keyscan is a utility for gathering the public ssh host keys of a number of hosts. It was designed to +aid in building and verifying ssh_known_hosts files. ssh-keyscan provides a minimal interface suitable for +use by shell and perl scripts. +ssh-keyscan uses non-blocking socket I/O to contact as many hosts as possible in parallel, so it is very +those hosts are down or do not run ssh. For scanning, one does not need login access to the machines that +are being scanned, nor does the scanning process involve any encryption. +The options are as follows: +% +RR in it and it will create a .ds file with the DS RR in it. +It prints out the basename for this file (K<name>+<alg>+<id>). +-f Ignore SEP flag (i.e. make DS records for any key) +-n Write the result DS Resource Record to stdout instead of a file +% +rev - reverse lines characterwise +rev [option] [file...] +The rev utility copies the specified files to standard output, reversing the order of characters in every +line. If no files are specified, standard input is read. +-V, --version +Display version information and exit. +-h, --help +Display help text and exit. +% +hostnamectl - Control the system hostname +all kinds of special characters (e.g. "Lennart's Laptop"), the static hostname which is used to +initialize the kernel hostname at boot (e.g. "lennarts-laptop"), and the transient hostname which is a +fallback value received from network configuration. If a static hostname is set, and is valid (something +other than localhost), then the transient hostname is not used. +transient hostnames are limited to the usually accepted characters of Internet domain names. +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +dnssec-signzone - DNSSEC zone signing tool +dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] +[-K directory] [-k key] [-L serial] [-l domain] [-M domain] [-i interval] +[-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] +[-p] [-Q] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-V] +dnssec-signzone signs a zone. It generates NSEC and RRSIG records and produces a signed version of the +zone. The security status of delegations from the signed zone (that is, whether the child zones are +secure or not) is determined by the presence or absence of a keyset file for each child zone. +-a +Verify all generated signatures. +% +nl-pktloc-lookup - Lookup packet location definitions +nl-pktloc-lookup name +nl-pktloc-lookup --list +nl-pktloc-lookup searches the packet location database for a matching entry. It is used to resolve packet +location aliases to their definition, i.e. alignment, layer, offset, and mask. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +% +strip - Discard symbols from object files. +strip [-F bfdname |--target=bfdname] +[-I bfdname |--input-target=bfdname] +[-O bfdname |--output-target=bfdname] +[-s|--strip-all] +[-S|-g|-d|--strip-debug] +[--strip-dwo] +[-K symbolname |--keep-symbol=symbolname] +[-N symbolname |--strip-symbol=symbolname] +[-w|--wildcard] +[-x|--discard-all] [-X |--discard-locals] +[-R sectionname |--remove-section=sectionname] +[-o file] [-p|--preserve-dates] +[-D|--enable-deterministic-archives] +[-U|--disable-deterministic-archives] +% +ldns-keyfetcher - retrieve the DNSSEC DNSKEYs for a zone +ldns-keyfetcher is used to retrieve the DNSKEYs of a zone. +First it finds all authoritative nameservers of the zone by tracing it from the root down. All authorita‐ +tive nameservers are then queried (using TCP) for the DNSKEY RRset of the zone apex. If the results are +all the same, the key resource record set is printed. +-6 Only use IPv6 +% +makepkg-template - package build templating utility +makepkg-template [options] +makepkg-template is a script to ease the work of maintaining multiple similar PKGBUILDs. It allows you to +move most of the code from the PKGBUILD into a template file and uses markers to allow in-place updating +of existing PKGBUILDs if the template has been changed. +Template files can contain any code allowed in a PKGBUILD. You can think of them like external files +included with "." or "source", but they will be inlined into the PKGBUILD by makepkg-template so you do +not depend on the template file when building the package. +Markers are bash comments in the form of: +% +chpasswd - update passwords in batch mode +chpasswd [options] +The chpasswd command reads a list of user name and password pairs from standard input and uses this +information to update a group of existing users. Each line is of the format: +user_name:password +By default the passwords must be supplied in clear-text, and are encrypted by chpasswd. Also the password +age will be updated, if present. +By default, passwords are encrypted by PAM, but (even if not recommended) you can select a different +encryption method with the -e, -m, or -c options. +% +autoheader - Create a template header for configure +autoheader [OPTION]... [TEMPLATE-FILE] +Create a template file of C `#define' statements for `configure' to use. To this end, scan TEM‐ +PLATE-FILE, or `configure.ac' if present, or else `configure.in'. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +verbosely report processing +% +ldns-gen-zone - read a zonefile and print it while adding DS records and extra RR's +ldns-gen-zone ZONEFILE +ldns-gen-zone reads a DNS zone file and prints it. +It is build for speed, not for a nice formatting. The output has one resource record per line and no +pretty-printing makeup. +Existing DS records are also not stripped. +The idea is to use this tool for quickly generating a representative artificial zonefile from a real +zonefile, to use it for testing purposes. +% +infocmp - compare or print out terminfo descriptions +[-v n] [-s d| i| l| c] [-R subset] +[-w width] [-A directory] [-B directory] +[termname...] +infocmp can be used to compare a binary terminfo entry with other terminfo entries, rewrite a terminfo +description to take advantage of the use= terminfo field, or print out a terminfo description from the +lowed by the numeric fields, followed by the string fields. +Default Options +If no options are specified and zero or one termnames are specified, the -I option will be assumed. If +more than one termname is specified, the -d option will be assumed. +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +damaged filesystem. +requirement can be overridden using the -f option, but the resulting image file is very likely not going +% +cksum - checksum and count the bytes in a file +cksum [FILE]... +cksum [OPTION] +Print CRC checksum and byte counts of each FILE. +--help display this help and exit +--version +output version information and exit +Written by Q. Frank Xia. +% +the system. +See the various sub commands below. The following global options can be used: +-v, --verbose +Run in verbose mode with debug output. +-q, --quiet +% +-a number +-s salt +Use the given salt for the hash calculation. Salt value should be in hexadecimal format. +-t count +Use count iterations for the hash calculation. +% +pkgdelta - package delta generation utility +pkgdelta is used to create package delta files between two versions of the same package. These files are +with the previous versions of packages (in the package cache) to synthesize the upgraded version of the +--max-delta-size <ratio> +Only create delta files if the delta is smaller than ratio * package_size. Possible values: 0.0 to +% +visudo — edit the sudoers file +visudo [-chqsV] [-f sudoers] [-x output_file] +against multiple simultaneous edits, provides basic sanity checks, and checks for parse errors. If the +sudoers file is currently being edited you will receive a message to try again later. +honor the VISUAL or EDITOR environment variables unless they contain an editor in the aforementioned edi‐ +tors list. However, if visudo is configured with the --with-env-editor option or the env_editor Default +be a security hole since it allows the user to execute any program they wish simply by setting VISUAL or +EDITOR. +% +fsck - check and repair a Linux filesystem +fsck [-lsAVRTMNP] [-r [fd]] [-C [fd]] [-t fstype] [filesystem...] [--] [fs-specific-options] +fsck is used to check and optionally repair one or more Linux filesystems. filesys can be a device name +handle filesystems on different physical disk drives in parallel to reduce the total amount of time +needed to check all of them. +If no filesystems are specified on the command line, and the -A option is not specified, fsck will +The exit code returned by fsck is the sum of the following conditions: +% +zcmp, zdiff - compare compressed files +Zcmp and zdiff are used to invoke the cmp or the diff program on files compressed via gzip. All options +fed to cmp or diff. The input files are not modified. The exit status from cmp or diff is preserved. +BUGS +% +chattr - change file attributes on a Linux file system +chattr [ -RVf ] [ -v version ] [ -p project ] [ mode ] files... +chattr changes the file attributes on a Linux file system. +The format of a symbolic mode is +-=[aAcCdDeijsStTu]. +The operator '+' causes the selected attributes to be added to the existing attributes of the files; '-' +causes them to be removed; and '=' causes them to be the only attributes that the files have. +The letters 'aAcCdDeijsStTu' select the new attributes for the files: append only (a), no atime updates +(A), compressed (c), no copy on write (C), no dump (d), synchronous directory updates (D), extent format +(e), immutable (i), data journalling (j), project hierarchy (P), secure deletion (s), synchronous updates +(S), no tail-merging (t), top of directory hierarchy (T), and undeletable (u). +% +scmp_sys_resolver - Resolve system calls +in the optional ARCH argument. If the architecture is not supplied on the command line then the native +architecture is used. If the "-t" argument is specified along with a system call name, then the system +call will be translated as necessary for the given architecture. The "-t" argument has no effect if a +system call number is specified. +In some combinations of architecture and system call, a negative system call number will be displayed. A +negative system call number indicates that the system call is not defined for the given architecture and +is treated in a special manner by libseccomp depending on the operation. +-a ARCH +% +pfbtops - translate a PostScript font in .pfb format to ASCII +pfbtops [ -v ] [ pfb_file ] +pfbtops translates a PostScript font in .pfb format to ASCII, splitting overlong lines in text packets +into smaller chunks. If pfb_file is omitted the pfb file will be read from the standard input. The +ASCII format PostScript font will be written on the standard output. PostScript fonts for MS-DOS are +normally supplied in .pfb format. +The resulting ASCII format PostScript font can be used with groff. It must first be listed in +-v Print the version number. +% +fsck.xfs - do nothing, successfully +fsck.xfs [ filesys ... ] +exits with a zero exit status. +If you wish to check the consistency of an XFS filesystem, or repair a damaged or corrupt XFS filesystem, +FILES +/etc/fstab. +% +getfattr - get extended attributes of filesystem objects +getfattr [-hRLP] -n name [-e en] pathname... +getfattr [-hRLP] -d [-e en] [-m pattern] pathname... +For each file, getfattr displays the file name, and the set of extended attribute names (and optionally +values) which are associated with that file. +The output format of getfattr -d is as follows: +% +gdbmtool - examine and modify a GDBM database +gdbmtool [-lmNnqrs] [-b SIZE] [-c SIZE] [-f FILE] [--block-size=SIZE] +[--cache-size=SIZE] [--file FILE] [--newdb] [--no-lock] +[--no-mmap] [--norc] +[--quiet] [--read-only] [--synchronize] [DBFILE] +gdbmtool [-Vh] ][--help] [--usage] [--version] +The gdbmtool utility allows you to view and modify an existing GDBM database or to create a new one. +The DBFILE argument supplies the name of the database to open. If not supplied, the default name +junk.gdbm is used instead. If the named database does not exist, it will be created. An existing data‐ +base can be cleared (i.e. all records removed from it) using the --newdb option (see below). +% +logrotate ‐ rotates, compresses, and mails system logs +logrotate [-dv] [-f|--force] [-s|--state file] config_file .. +logrotate is designed to ease administration of systems that generate large numbers of log files. It +daily, weekly, monthly, or when it grows too large. +Normally, logrotate is run as a daily cron job. It will not modify a log more than once in one day +unless the criterion for that log is based on the log's size and logrotate is being run more than once +each day, or unless the -f or --force option is used. +given in earlier files, so the order in which the logrotate config files are listed is important. Nor‐ +mally, a single config file which includes any other config files which are needed should be used. See +% +kadmin [-O|-N] [-r realm] [-p principal] [-q query] [[-c cache_name]|[-k [-t keytab]]|-n] [-w password] +[-s admin_server[:port]] +kadmin.local [-r realm] [-p principal] [-q query] [-d dbname] [-e enc:salt ...] [-m] [-x db_args] +vide nearly identical functionalities; the difference is that kadmin.local directly accesses the KDC +man page will use "kadmin" to refer to both versions. kadmin provides for the maintenance of Kerberos +principals, password policies, and service key tables (keytabs). +The remote kadmin client uses Kerberos to authenticate to kadmind using the service principal kad‐ +min/ADMINHOST (where ADMINHOST is the fully-qualified hostname of the admin server) or kadmin/admin. If +% +grub-editenv - edit GRUB environment block +Tool to edit environment block. +Commands: +create Create a blank environment block file. +list List the current variables. +Set variables. +% +pwd - print name of current/working directory +pwd [OPTION]... +Print the full filename of the current working directory. +-L, --logical +use PWD from environment, even if it contains symlinks +-P, --physical +avoid all symlinks +--help display this help and exit +--version +% +setleds - set the keyboard leds +setleds [-v] [-L] [-D] [-F] [{+|-}num] [{+|-}caps] [{+|-}scroll] +Setleds reports and changes the led flag settings of a VT (namely NumLock, CapsLock and ScrollLock). +Without arguments, setleds prints the current settings. With arguments, it sets or clears the indicated +flags (and leaves the others unchanged). The settings before and after the change are reported if the -v +flag is given. +The led flag settings are specific for each VT (and the VT corresponding to stdin is used). +by the keyboard leds). +With option -D, setleds will change both the VT flags and their default settings (so that a subsequent +% +jfs_mkfs - create a JFS formatted partition +jfs_mkfs [options] device [ blocks ] +jfs_mkfs is used to create (format) a JFS partition. jfs_mkfs must be run as root. +system and/or JFS journal will be created. blocks is the number of blocks to be used for the file sys‐ +tem. If omitted, jfs_mkfs automatically figures the file system size. +WARNING +jfs_mkfs will destroy all data on the specified device! +% +getopt - parse command options (enhanced) +getopt optstring parameters +getopt [options] [--] optstring parameters +getopt [options] -o|--options optstring [options] [--] parameters +getopt is used to break up (parse) options in command lines for easy parsing by shell procedures, and to +The parameters getopt is called with can be divided into two parts: options which modify the way getopt +is not an option argument, or after the first occurrence of '--'. If no '-o' or '--options' option is +found in the first part, the first parameter of the second part is used as the short options string. +% +lvchange — change attributes of a logical volume +lvchange [-a|--activate [a][e|s|l]{y|n}] [--activationmode {complete|degraded|partial}] [--addtag Tag] +[-K|--ignoreactivationskip] [-k|--setactivationskip {y|n}] [--alloc AllocationPolicy] [-A|--autobackup +{y|n}] [--rebuild PhysicalVolume] [--cachemode {passthrough|writeback|writethrough}] [--cachepolicy Pol‐ +[--deltag Tag] [--detachprofile] [--discards {ignore|nopassdown|passdown}] [--errorwhenfull {y|n}] +[-h|-?|--help] [--ignorelockingfailure] [--ignoremonitoring] [--ignoreskippedcluster] [--metadataprofile +{y|n} [--major Major] [--minor Minor]] [--poll {y|n}] [--[raid]maxrecoveryrate Rate] [--[raid]minrecov‐ +eryrate Rate] [--[raid]syncaction {check|repair}] [--[raid]writebehind IOCount] [--[raid]writemostly +PhysicalVolume[:{y|n|t}]] [-r|--readahead {ReadAheadSectors|auto|none}] [--refresh] [--reportformat +{basic|json}] [--resync] [-S|--select Selection] [--sysinit] [-t|--test] [-v|--verbose] [-Z|--zero {y|n}] +[LogicalVolumePath...] +% +df - report file system disk space usage +df [OPTION]... [FILE]... +file system containing each file name argument. If no file name is given, the space available on all +If an argument is the absolute file name of a disk device node containing a mounted file system, df shows +version of df cannot show the space available on unmounted file systems, because on most kinds of systems +doing so requires very nonportable intimate knowledge of file system structures. +% +depmod - Generate modules.dep and map files. +depmod [-b basedir] [-e] [-E Module.symvers] [-F System.map] [-n] [-v] [-A] [-P prefix] [-w] [version] +depmod [-e] [-E Module.symvers] [-F System.map] [-m] [-n] [-v] [-P prefix] [-w] [version] [filename...] +Linux kernel modules can provide services (called "symbols") for other modules to use (using one of the +EXPORT_SYMBOL variants in the code). If a second module uses this symbol, that second module clearly +depends on the first module. These dependencies can get quite complex. +depmod creates a list of module dependencies by reading each module under /lib/modules/version and +determining what symbols it exports and what symbols it needs. By default, this list is written to +modules.dep, and a binary hashed version named modules.dep.bin, in the same directory. If filenames are +given on the command line, only those modules are examined (which is rarely useful unless all modules are +listed). depmod also creates a list of symbols provided by modules in the file named modules.symbols and +% +peekfd - peek at file descriptors of running processes +[-h,--help] pid [fd] [fd] ... +peekfd attaches to a running process and intercepts all reads and writes to file descriptors. You can +specify the desired file descriptor numbers or dump all of them. +-n Do not display headers indicating the source of the bytes dumped. +-c Also dump the requested file descriptor activity in any new child processes that are created. +% +faillog - display faillog records or set login failure limits +faillog [options] +faillog displays the contents of the failure log database (/var/log/faillog). It can also set the failure +counters and limits. When faillog is run without arguments, it only displays the faillog records of the +users who had a login failure. +The options which apply to the faillog command are: +-a, --all +Display (or act on) faillog records for all users having an entry in the faillog database. +The range of users can be restricted with the -u option. +% +btrfs-inspect-internal - query various internal information +btrfs inspect-internal <subcommand> <args> +simple UI to an ioctl or a more complex query that assembles the result from several internal structures. +The latter usually requires calls to privileged ioctls. +dump-super [options] <device> [device...] +(replaces the standalone tool btrfs-show-super) +Show btrfs superblock information stored on given devices in textual form. By default the first +superblock is printed, more details about all copies or additional backup data can be printed. +% +login - begin session on the system +login [ -p ] [ -h host ] [ -H ] [ -f username | username ] +login is used when signing onto a system. If no argument is given, login prompts for the username. +The user is then prompted for a password, where approprate. Echoing is disabled to prevent revealing the +password. Only a small number of password failures are permitted before login exits and the communica‐ +tions link is severed. +proceeding. He will be forced to provide his old password and the new password before continuing. +The user and group ID will be set according to their values in the /etc/passwd file. There is one excep‐ +% +grub-mknetdir - prepare a GRUB netboot directory. +grub-mknetdir [OPTION...] +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +--install-modules=MODULES +install only MODULES and their dependencies [default=all] +% +Reads an EQN equation (one line) as input; produces an image file (by default in Portable Network Graph‐ +ics format) suitable for the Web as output. +macros; nor do you need to have dollar-sign or other delimiters around the equation. +The output image will be clipped to the smallest possible bounding box that contains all the black pix‐ +border, force the background transparent, set the image's pixel density, or perform other useful trans‐ +formations. +% +shutdown - Halt, power-off or reboot the machine +wall message to be sent to all logged-in users before going down. +specified number of minutes m from now. "now" is an alias for "+0", i.e. for triggering an immediate +% +hddtemp - Utility to monitor hard drive temperature +hddtemp [options] [type:]disk... +hddtemp will give you the temperature of your hard drive by reading Self-Monitoring Analysis and Report‐ +ing Technology (S.M.A.R.T.) information on drives that support this feature. Only modern hard drives +have a temperature sensor. hddtemp supports reading S.M.A.R.T. information from SCSI drives too. +hddtemp can work as simple command line tool or as a daemon. +You can specify one or more device drive path, where each path can be prefixed with a type like PATA, +SATA or SCSI to force hddtemp too use one of these type (because detection can fail). +The program follows the usual GNU command line syntax, with long options starting with two dashes (`-'). +A summary of options is included below. +% +dhcpcd — a DHCP client +[-F, --fqdn FQDN] [-f, --config file] [-h, --hostname hostname] [-I, --clientid clientid] +[-i, --vendorclassid vendorclassid] [-j, --logfile logfile] [-l, --leasetime seconds] +[-m, --metric metric] [-O, --nooption option] [-o, --option option] [-Q, --require option] +[-r, --request address] [-S, --static value] [-s, --inform address[/cidr]] [--inform6] +[-t, --timeout seconds] [-u, --userclass class] [-v, --vendor code, value] +[-X, --blacklist address[/cidr]] [-Z, --denyinterfaces pattern] [-z, --allowinterfaces pattern] +[--inactive] [interface] [...] +dhcpcd -n, --rebind [interface] +dhcpcd -k, --release [interface] +dhcpcd -U, --dumplease interface +dhcpcd --version +dhcpcd -x, --exit [interface] +% +grodvi - convert groff output to TeX dvi format +grodvi [ -dlv ] [ -Fdir ] [ -ppapersize ] [ -wn ] [ files... ] +It is possible to have whitespace between a command line option and its parameter. +grodvi is a driver for groff that produces TeX dvi format. Normally it should be run by groff -Tdvi. +The dvi file generated by grodvi can be printed by any correctly-written dvi driver. The troff drawing +\D commands will not produce any output. +There is an additional drawing command available: +% +znew - recompress .Z files to .gz files +znew [ -ftv9PK] [ name.Z ... ] +Znew recompresses files from .Z (compress) format to .gz (gzip) format. If you want to recompress a file +already in gzip format, rename the file to force a .Z extension then apply znew. +-f Force recompression from .Z to .gz format even if a .gz file already exists. +-t Tests the new files before deleting originals. +-v Verbose. Display the name and percentage reduction for each file compressed. +-9 Use the slowest compression method (optimal compression). +% +od - dump files in octal and other formats +od [OPTION]... [FILE]... +od [-abcdfilosx]... [FILE] [[+]OFFSET[.][b]] +od --traditional [OPTION]... [FILE] [[+]OFFSET[.][b] [+][LABEL][.][b]] +Write an unambiguous representation, octal bytes by default, of FILE to standard output. With more than +one FILE argument, concatenate them in the listed order to form the input. +With no FILE, or when FILE is -, read standard input. +If first and second call formats both apply, the second format is assumed if the last operand begins with +at first byte printed, incremented when dump is progressing. For OFFSET and LABEL, a 0x or 0X prefix +% +thin_ls - List thin volumes within a pool. +thin_ls [options] {metadata device} +thin_ls Displays infomation about thin volumes in a pool. Pass the metadata device on the command line, +not the pool device. +-o, --format +Give a comma separated list of the fields to be output. Valid fields are: DEV, MAPPED_BLOCKS, +EXCLUSIVE_BLOCKS, SHARED_BLOCKS, MAPPED_SECTORS, EXCLUSIVE_SECTORS, SHARED_SECTORS, MAPPED_BYTES, +EXCLUSIVE_BYTES, SHARED_BYTES, MAPPED, EXCLUSIVE, SHARED, TRANSACTION CREATE_TIME, SNAP_TIME +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +pivot_root - change the root filesystem +pivot_root new_root put_old +pivot_root moves the root file system of the current process to the directory put_old and makes new_root +the latter for further details. +pivot_root and chroot are in the current PATH: +cd new_root +pivot_root . put_old +exec chroot . command +% +| --defcktname | --cflags | --libs [libraries]] +installed Kerberos libraries. +--all prints the version, vendor, prefix, and exec-prefix. +--version +prints the version number of the Kerberos installation. +% +chcon - change file security context +chcon [OPTION]... CONTEXT FILE... +chcon [OPTION]... [-u USER] [-r ROLE] [-l RANGE] [-t TYPE] FILE... +chcon [OPTION]... --reference=RFILE FILE... +Change the SELinux security context of each FILE to CONTEXT. With --reference, change the security con‐ +text of each FILE to that of RFILE. +Mandatory arguments to long options are mandatory for short options too. +--dereference +affect the referent of each symbolic link (this is the default), rather than the symbolic link +itself +% +curl - transfer a URL +curl [options] [URL...] +curl is a tool to transfer data from or to a server, using one of the supported protocols (DICT, FILE, +SMTP, SMTPS, TELNET and TFTP). The command is designed to work without user interaction. +curl offers a busload of useful tricks like proxy support, user authentication, FTP upload, HTTP post, +SSL connections, cookies, file transfer resume, Metalink, and more. As you will see below, the number of +features will make your head spin! +URL +% +setkeycodes - load kernel scancode-to-keycode mapping table entries +setkeycodes scancode keycode ... +The setkeycodes command reads its arguments two at a time, each pair of arguments consisting of a scan‐ +code (given in hexadecimal) and a keycode (given in decimal). For each such pair, it tells the kernel +keyboard driver to map the specified scancode to the specified keycode. +duce scancodes that the kernel does not recognize. +THEORY +The usual PC keyboard produces a series of scancodes for each key press and key release. (Scancodes are +stream of keycodes (key press/release events). (Keycodes are shown by showkey.) Apart from a few scan‐ +% +tar — manipulate tape archives +tar [bundled-flags ⟨args⟩] [⟨file⟩ | ⟨pattern⟩ ...] +tar {-c} [options] [files | directories] +tar {-r | -u} -f archive-file [options] [files | directories] +tar {-t | -x} [options] [patterns] +zip, jar, ar, xar, rpm, 7-zip, and ISO 9660 cdrom images and can create tar, pax, cpio, ar, zip, 7-zip, and +shar archives. +torical implementations. See COMPATIBILITY below for details. +The other synopsis forms show the preferred usage. The first option to tar is a mode indicator from the +% +idnconv - codeset converter for named.conf and zone master files +idnconv [options..] [file...] +idnconv is a codeset converter for named configuration files and zone master files. idnconv performs +codeset conversion specified either by the command-line arguments or by the configuration file, and +writes the converted text to stdout. +If file name is specified, idnconv converts the contents of the file. Otherwise, idnconv converts stdin. +able as a general codeset converter. +OPERATION MODES +idnconv has two operation modes. +% +pkcheck - Check whether a process is authorized +pkcheck [--version] [--help] +pkcheck [--list-temp] +pkcheck [--revoke-temp] +pkcheck --action-id action {--process { pid | pid,pid-start-time | pid,pid-start-time,uid } | +--system-bus-name busname} [--allow-user-interaction] [--enable-internal-agent] +[--detail key value...] +pkcheck is used to check whether a process, specified by either --process (see below) or +--system-bus-name, is authorized for action. The --detail option can be used zero or more times to pass +details about action. If --allow-user-interaction is passed, pkcheck blocks while waiting for +% +ldns-walk - Retrieve the contents of a DNSSEC signed zone +ldns-walk [ OPTION ] ZONE +ldns-walk is used to retrieve the contents of a DNSSEC signed zone. It does this through NSEC-walking +(following the chain of NSEC records) and 'guessing' the next non-existent owner name for each NSEC. +can be circumvented by querying the authoritative nameserver directly (with the @ argument). +Of course the nameserver that is used must be DNSSEC-aware. +% +ddns-confgen - ddns key generation tool +tsig-keygen [-a algorithm] [-h] [-r randomfile] [name] +ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [-s name | -z zone] +tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG +signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the +rndc command channel. +When run as tsig-keygen, a domain name can be specified on the command line which will be used as the +name of the generated key. If no name is specified, the default is tsig-key. +When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that +can be used with nsupdate and named when setting up dynamic DNS, including an example update-policy +% +gio - GIO commandline tool +gio version +gio cat LOCATION... +gio copy [OPTION...] SOURCE... DESTINATION +gio info [OPTION...] LOCATION... +gio list [OPTION...] [LOCATION...] +gio mime MIMETYPE [HANDLER] +% +dbus-daemon - Message bus daemon +dbus-daemon +dbus-daemon [--version] [--session] [--system] [--config-file=FILE] [--print-address [=DESCRIPTOR]] +[--print-pid [=DESCRIPTOR]] [--fork] +dbus-daemon is the D-Bus message bus daemon. See http://www.freedesktop.org/software/dbus/ for more +information about the big picture. D-Bus is first a library that provides one-to-one communication +between any two applications; dbus-daemon is an application that uses this library to implement a message +bus daemon. Multiple programs connect to the message bus daemon and can exchange messages with one +another. +There are two standard message bus instances: the systemwide message bus (installed on many systems as +the "messagebus" init service) and the per-user-login-session message bus (started each time a user logs +% +thin_check - validate thin provisioning metadata on device or file +thin_check [options] {device|file} +thin_check checks thin provisioning metadata created by the device-mapper thin provisioning target on a +device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +jfs_fsck - initiate replay of the JFS transaction log, and check and repair a JFS formatted device +jfs_fsck [ -afnpvV ] [ -j journal_device ] [ --omit_journal_replay ] [ --replay_journal_only ] device +jfs_fsck is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any +errors found. +jfs_fsck must be run as root. +WARNING +jfs_fsck should only be used to check an unmounted file system or a file system that is mounted READ +ONLY. Using jfs_fsck to check a file system mounted other than READ ONLY could seriously damage the file +system! +% +cache_restore - restore cache metadata file to device or file +cache_restore [options] -i {device|file} -o {device|file} +cache_restore restores cache metadata created by the respective device-mapper target dumped into an XML +device or file. If restored to a metadata device , the metadata can be processed by the device-mapper +target. +-i, --input {device|file} +Input file or device with metadata. +-o, --output {device|file} +% +btrfstune - tune various filesystem parameters +btrfstune [options] <dev> [<dev>...] +btrfstune can be used to enable, disable or set various filesystem parameters. The filesystem must be +unmounted. +have kernel support for the features. You can find a complete list of features and kernel version of +their introduction at https://btrfs.wiki.kernel.org/index.php/Changelog#By_feature . Also, the manual +Some of the features could be enabled on a mounted filesystem. Please refer to the respective section in +% +script - make typescript of terminal session +script [options] [file] +script makes a typescript of everything displayed on your terminal. It is useful for students who need a +hardcopy record of an interactive session as proof of an assignment, as the typescript file can be +If the argument file is given, script saves the dialogue in this file. If no filename is given, the dia‐ +logue is saved in the file typescript. +-a, --append +Append the output to file or to typescript, retaining the prior contents. +% +btrfs-find-root - filter to find btrfs root +btrfs-find-root [options] <dev> +btrfs-find-root is used to find the satisfied root, you can filter by root tree’s objectid, generation, +level. +-a +Search through all the metadata extents, even the root is already found. +-g <generation> +Filter root tree by it’s original transaction id, tree root’s generation in default. +-o <objectid> +% +rshd - Remote shell server +rshd [OPTION...] +Remote shell server. +-a, --verify-hostname +ask hostname for verification +-l, --no-rhosts +ignore .rhosts file +-L, --log-sessions +log successful logins +% +free - Display amount of free and used memory in the system +free [options] +free displays the total amount of free and used physical and swap memory in the system, as well as the +buffers and caches used by the kernel. The information is gathered by parsing /proc/meminfo. The dis‐ +played columns are: +total Total installed memory (MemTotal and SwapTotal in /proc/meminfo) +used Used memory (calculated as total - free - buffers - cache) +free Unused memory (MemFree and SwapFree in /proc/meminfo) +shared Memory used (mostly) by tmpfs (Shmem in /proc/meminfo) +% +tfmtodit - create font files for use with groff -Tdvi +tfmtodit [ -sv ] [ -ggf_file ] [ -kskewchar ] tfm_file map_file font +tfmtodit creates a font file for use with groff -Tdvi. tfm_file is the name of the TeX font metric file +for the font. map_file is a file giving the groff names for characters in the font; this file should +consist of a sequence of lines of the form: +groff names of the character. If a character has no groff names but exists in the tfm file, then it will +be put in the groff font file as an unnamed character. font is the name of the groff font file. The +groff font file is written to font. +% +smartd - SMART Disk Monitoring Daemon +smartd [options] +other platforms.] +smartd is a daemon that monitors the Self-Monitoring, Analysis and Reporting Technology (SMART) system +built into most ATA/SATA and SCSI/SAS hard drives and solid-state drives. The purpose of SMART is to +monitor the reliability of the hard drive and predict drive failures, and to carry out different types of +lier standards (see REFERENCES below). +smartd will attempt to enable SMART monitoring on ATA devices (equivalent to smartctl -s on) and polls +% +lscpu - display information about the CPU architecture +lscpu [-a|-b|-c] [-x] [-s directory] [-e[=list]|-p[=list]] +lscpu -h|-V +lscpu gathers CPU architecture information from sysfs, /proc/cpuinfo and any applicable architecture-spe‐ +cific libraries (e.g. librtas on Powerpc). The command output can be optimized for parsing or for easy +readability by humans. The information includes, for example, the number of CPUs, threads, cores, sock‐ +ets, and Non-Uniform Memory Access (NUMA) nodes. There is also information about the CPU caches and +cache sharing, family, model, bogoMIPS, byte order, and stepping. +In virtualized environments, the CPU architecture information displayed reflects the configuration of the +guest operating system which is typically different from the physical (host) system. On architectures +that support retrieving physical topology information, lscpu also displays the number of physical sock‐ +ets, chips, cores in the host system. +% +ldns-mx - print out the mx record(s) for a domain +ldns-mx DOMAIN +ldns-mx is used to print out mx information of a domain. +ldns-mx has no options. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +bash - GNU Bourne-Again SHell +bash [options] [command_string | file] +Bash is an sh-compatible command language interpreter that executes commands read from the standard input +or from a file. Bash also incorporates useful features from the Korn and C shells (ksh and csh). +Bash is intended to be a conformant implementation of the Shell and Utilities portion of the IEEE POSIX +All of the single-character shell options documented in the description of the set builtin command can +% +fortune - print a random, hopefully interesting, adage +fortune [-acefilosw] [-n length] [ -m pattern] [[n%] file/dir/all] +When fortune is run with no arguments it prints out a random epigram. Epigrams are divided into several +categories, where each category is sub-divided into those which are potentially offensive and those which +are not. +Options +The options are as follows: +-a Choose from all lists of maxims, both offensive and not. (See the -o option for more information +on offensive fortunes.) +-c Show the cookie file from which the fortune came. +% +ldns-chaos - give some information about a nameserver +ldns-chaos retrieves all the addresses of the nameserver and then queries each address for its ver‐ +sion.bind and hostname.bind. +ldns-chaos is a bit more complex than ldns-mx. +ldns-chaos has no options. +Written by the ldns team as an example for ldns usage. +% +utmpdump - dump UTMP and WTMP files in raw format +utmpdump [options] [filename] +utmpdump is a simple program to dump UTMP and WTMP files in raw format, so they can be examined. utmp‐ +dump reads from stdin unless a filename is passed. +-f, --follow +Output appended data as the file grows. +-o, --output file +Write command output to file instead of standard output. +-r, --reverse +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +dmesg - print or control the kernel ring buffer +dmesg [options] +dmesg --clear +dmesg --read-clear [options] +dmesg --console-level level +dmesg --console-on +dmesg --console-off +dmesg is used to examine or control the kernel ring buffer. +The default action is to display all messages from the kernel ring buffer. +% +git-receive-pack - Receive what is pushed into the repository +git-receive-pack <directory> +Invoked by git send-pack and updates the repository with the information fed from the remote end. +send-pack side, and the program pair is meant to be used to push updates to remote repository. For pull +speaking, it is the local end git-receive-pack runs, but to the user who is sitting at the send-pack end, +it is updating the remote. Confused?) +There are other real-world examples of using update and post-update hooks found in the +% +efibootmgr - manipulate the EFI Boot Manager +... ] [ -O ] [ -p PART ] [ -q ] [ -t seconds ] [ -T ] [ -u ] [ -v ] [ -V ] [ -w ] [ -@ file ] +efibootmgr is a userspace application used to modify the Intel Extensible Firmware Interface (EFI) Boot +running boot option, and more. +<URL:http://developer.intel.com> +/sys/firmware/efi/vars or /sys/firmware/efi/efivars/. +% +link - call the link function to create a link to a file +link OPTION +--help display this help and exit +--version +output version information and exit +Written by Michael Stone. +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +which - shows the full path of (shell) commands. +which [options] [--] programname [...] +Which takes one or more arguments. For each of its arguments it prints to stdout the full path of the +executables that would have been executed when this argument had been entered at the shell prompt. It +does this by searching for an executable or script in the directories listed in the environment variable +--all, -a +Print all matching executables in PATH, not just the first. +% +git-shell - Restricted login shell for Git-only SSH access +chsh -s $(command -v git-shell) <user> +git clone <user>@localhost:/path/to/repo.git +ssh <user>@localhost +server-side Git commands implementing the pull/push functionality, plus custom commands present in a +subdirectory named git-shell-commands in the user’s home directory. +git shell accepts the following commands after the -c option: +git receive-pack <argument>, git upload-pack <argument>, git upload-archive <argument> +Call the corresponding server-side command to support the client’s git push, git fetch, or git +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +update-leap - leap-seconds file manager/updater +update-leap [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +update-leap will validate the file currently on the local system and if necessary, updates leap-second +definition file. +tion can be specified on the command line. +If the file does not exist, is not valid, has expired, or is expiring soon, a new copy will be down‐ +loaded. If the new copy validates, it is installed and NTP is (optionally) restarted. +% +idn [OPTION]... [STRINGS]... +Command line interface to the internationalized domain name library. +All strings are expected to be encoded in the preferred charset used by your locale. Use `--debug' to +find out what this charset is. You can override the charset used by setting environment variable +CHARSET. +To process a string that starts with `-', for example `-foo', use `--' to signal the end of parameters, +as in `idn --quiet -a -- -foo'. +% +will NOT list all the users in /etc/passwd, shadow, PAM, etc. only those created by SASL (via +-f file +use file for sasldb +% +xzdec, lzmadec - Small .xz and .lzma decompressors +xzdec [option...] [file...] +lzmadec [option...] [file...] +xzdec is a liblzma-based decompression-only tool for .xz (and only .xz) files. xzdec is intended to work +xz --decompress --stdout (and possibly a few other commonly used options) to decompress .xz files. +lzmadec is identical to xzdec except that lzmadec supports .lzma files instead of .xz files. +To reduce the size of the executable, xzdec doesn't support multithreading or localization, and doesn't +read options from XZ_DEFAULTS and XZ_OPT environment variables. xzdec doesn't support displaying inter‐ +process instead of displaying progress information. +% +hdparm - get/set SATA/IDE device parameters +hdparm [options] [device ...] +hdparm provides a command line interface to various kernel interfaces supported by the Linux +rectly only with the latest kernels. +When no options are given, -acdgkmur is assumed. For "Get/set" options, a query without the optional +parameter (e.g. -d) will query (get) the device state, and with a parameter (e.g., -d0) will set the +device state. +% +mkreiserfs - The create tool for the Linux ReiserFS filesystem. +mkreiserfs [ -dfV ] [ -b | --block-size N ] [ -h | --hash HASH ] [ -u | --uuid UUID ] [ -l | --label +LABEL ] [ --format FORMAT ] [ -q | --quiet ] [ -j | --journal-device FILE ] [ -s | --journal-size N ] [ +-o | --journal-offset N ] [ -t | --transaction-max-size N ] [ -B | --badblocks file ] device [ filesys‐ +tem-size ] +mkreiserfs creates a Linux ReiserFS filesystem on a device (usually a disk partition). +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +filesystem-size +is the size in blocks of the filesystem. If omitted, mkreiserfs will automatically set it. +% +isc-config.sh - Get information about the installed version of ISC BIND +isc-config.sh [--cflags] [--exec-prefix] [--libs] [--prefix] [--version] [libraries...] +isc-config.sh prints information related to the installed version of ISC BIND, such as the compiler and +linker flags required to compile and link programs that use ISC BIND libraries. +The optional libraries are used to report specific details for compiling and linking for the listed +listed on the command line. (Some libraries require other libraries, so are implied.) +--cflags +Prints the compiler command line options required to compile files that use ISC BIND. Use the +libraries command line argument(s) to print additional specific flags to pass to the C compiler. +% +ping - send ICMP ECHO_REQUEST to network hosts +[-M pmtudisc_option] [-N nodeinfo_option] [-w deadline] [-W timeout] [-p pattern] [-Q tos] [-s +packetsize] [-S sndbuf] [-t ttl] [-T timestamp option] [hop]... {destination} +ping uses the ICMP protocol's mandatory ECHO_REQUEST datagram to elicit an ICMP ECHO_RESPONSE from a host +or gateway. ECHO_REQUEST datagrams (``pings'') have an IP and ICMP header, followed by a struct timeval +and then an arbitrary number of ``pad'' bytes used to fill out the packet. +-6. +% +and GNUTLS_SO_PIN. +% +grops - PostScript driver for groff +grops [-glmv] [-b n] [-c n] [-F dir] [-I dir] [-p papersize] [-P prologue] [-w n] [files ...] +grops translates the output of GNU troff to PostScript. Normally grops should be invoked by using the +groff command with a -Tps option. (Actually, this is the default for groff.) If no files are given, +grops reads the standard input. A filename of - also causes grops to read the standard input. Post‐ +Script output is written to the standard output. When grops is run by groff options can be passed to +grops using groff's -P option. +vention) if called with multiple file arguments. To print such concatenated output it is necessary to +deactivate DSC handling in the printing program or previewer. See section FONT INSTALLATION below for a +guide how to install fonts for grops. +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +reiserfsck - The checking tool for the ReiserFS filesystem. +reiserfsck [ -aprVy ] [ --rebuild-sb | --check | --fix-fixable | --rebuild-tree | --clean-attributes ] [ +-j | --journal device ] [ -z | --adjust-size ] [ -n | --nolog ] [ -B | --badblocks file ] [ -l | --log‐ +file file ] [ -q | --quiet ] [ -y | --yes ] [ -f | --force ] [ -S | --scan-whole-partition ] [ --no-jour‐ +nal-available ] device +Reiserfsck searches for a Reiserfs filesystem on a device, replays any necessary transactions, and either +checks or repairs the file system. +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +--rebuild-sb +% +autoreconf - Update generated configuration files +autoreconf [OPTION]... [DIRECTORY]... +Run `autoconf' (and `autoheader', `aclocal', `automake', `autopoint' (formerly `gettextize'), and +`libtoolize' where appropriate) repeatedly to remake the GNU Build System files in specified DIRECTORIES +and their subdirectories (defaulting to `.'). +By default, it only remakes those files that are older than their sources. If you install new versions +of the GNU Build System, you can make `autoreconf' remake all of the files by giving it the `--force' +option. +Operation modes: +-h, --help +print this help, then exit +% +crond - daemon to execute scheduled commands +crond [-c | -h | -i | -n | -p | -P | -s | -m<mailcommand>] +crond -x [ext,sch,proc,pars,load,misc,test,bit] +systemd is enabled, then unit file is installed into /lib/systemd/system/crond.service and daemon is +started by systemctl start crond.service command. It returns immediately, thus, there is no need to need +to start it with the '&' parameter. +Cron searches /var/spool/cron for crontab files which are named after accounts in /etc/passwd; The found +crontabs are loaded into the memory. Cron also searches for /etc/anacrontab and any files in the +and checks each job to see if it needs to be run in the current minute. When executing commands, any +output is mailed to the owner of the crontab (or to the user specified in the MAILTO environment variable +% +rmdir - remove empty directories +rmdir [OPTION]... DIRECTORY... +Remove the DIRECTORY(ies), if they are empty. +--ignore-fail-on-non-empty +ignore each failure that is solely because a directory +is non-empty +-p, --parents +remove DIRECTORY and its ancestors; e.g., 'rmdir -p a/b/c' is similar to 'rmdir a/b/c a/b a' +% +addftinfo - add information to troff font files for use with groff +addftinfo [ -v ] [ param-option value.... ] res unitwidth font +addftinfo reads a troff font file and adds some additional font-metric information that is used by the +groff system. The font file with the information added is written on the standard output. The informa‐ +tion added is guessed using some parametric information about the font and assumptions about the tradi‐ +tional troff names for characters. The main information added is the heights and depths of characters. +The res and unitwidth arguments should be the same as the corresponding parameters in the DESC file; font +is the name of the file describing the font; if font ends with I the font will be assumed to be italic. +–v prints the version number. +All other options change one of the parameters that are used to derive the heights and depths. Like the +% +write - send a message to another user +write user [ttyname] +write allows you to communicate with other users, by copying lines from your terminal to theirs. +When you run the write command, the user you are writing to gets a message of the form: +Message from yourname@yourhost on yourtty at hh:mm ... +Any further lines you enter will be copied to the specified user's terminal. If the other user wants to +reply, they must run write as well. +When you are done, type an end-of-file or interrupt character. The other user will see the message EOF +indicating that the conversation is over. +% +msgexec - process translations of message catalog +reads a translation from standard input. It is invoked once for each translation. Its output becomes +msgexec's output. msgexec's return code is the maximum return code across all invocations. +A special builtin command called '0' outputs the translation, followed by a null byte. The output of +"msgexec 0" is suitable as input for "xargs -0". +Command input: +--newline +add newline at the end of input +% +code. The tool has originally been developed as a second implementation for Libgcrypt to allow comparing +against the primary implementation and to be used for internal consistency checks. It should not be used +for sensitive data because no mechanisms to clear the stack etc are used. +The code has been written in a highly portable manner and requires only a few standard definitions to be +provided in a config.h file. +% +[-b bfdname|--target=bfdname] +[-C|--demangle[=style]] +[-e filename|--exe=filename] +[-f|--functions] [-s|--basename] +[-i|--inlines] +[-p|--pretty-print] +[-j|--section=name] +[-H|--help] [-V|--version] +[addr addr ...] +offset in a section of a relocatable object, it uses the debugging information to figure out which file +% +systemd-ask-password - Query the user for a system password +message specified on the command line. When run from a TTY it will query a password on the TTY and print +it to standard output. When run with no TTY or with --no-tty it will query the password system-wide and +allow active users to respond via several agents. The latter is only available to privileged processes. +The purpose of this tool is to query system-wide passwords — that is passwords not attached to a specific +user account. Examples include: unlocking encrypted hard disks when they are plugged in or at boot, +entering an SSL certificate passphrase for web and VPN servers. +Existing agents are: +% +pkg-config - Return metainformation about installed libraries +[--short-errors] [--silence-errors] [--errors-to-stdout] [--debug] [--cflags] [--libs] [--libs-only-L] +provides] [--print-requires] [--print-requires-private] [LIBRARIES...] +The pkg-config program is used to retrieve information about installed libraries in the system. It is +typically used to compile and link against one or more libraries. Here is a typical usage scenario in a +Makefile: +program: program.c +cc program.c $(pkg-config --cflags --libs gnomeui) +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +pacman-key - manage pacman's list of trusted keys +pacman-key [options] operation [targets] +pacman-key is a wrapper script for GnuPG used to manage pacman’s keyring, which is the collection of PGP +keys used to check signed packages and databases. It provides the ability to import and export keys, +fetch keys from keyservers and update the key trust database. +More complex keyring management can be achieved using GnuPG directly combined with the --homedir option +pointing at the pacman keyring (located in /etc/pacman.d/gnupg by default). +Invoking pacman-key consists of supplying an operation with any potential options and targets to operate +OPERATIONS +% +umount - unmount file systems +umount -a [-dflnrv] [-t fstype] [-O option...] +umount [-dflnrv] {directory|device}... +umount -h|-V +The umount command detaches the mentioned file system(s) from the file hierarchy. A file system is spec‐ +ified by giving the directory where it has been mounted. Giving the special device on which the file +on more than one directory. +it, or when some process has its working directory there, or when a swap file on it is in use. The +% +pam_tally - The login counter (tallying) module +pam_tally.so [file=/path/to/counter] [onerr=[fail|succeed]] [magic_root] [even_deny_root_account] +[deny=n] [lock_time=n] [unlock_time=n] [per_user] [no_lock_time] [no_reset] [audit] [silent] +[no_log_info] +pam_tally [--file /path/to/counter] [--user username] [--reset[=n]] [--quiet] +many attempts fail. +deprecated and will be removed in a future release. +pam_tally comes in two parts: pam_tally.so and pam_tally. The former is the PAM module and the latter, a +% +psfaddtable - add a Unicode character table to a console font +psfaddtable fontfile tablefile outfile +psfaddtable takes a console font in .psf format given by fontfile and merges it with the Unicode charac‐ +ter table given by tablefile to produce a font file with an embedded character table, which is written to +outfile. An input file name of "-" denotes standard input, and an output file name of "-" denotes stan‐ +dard output. If the fontfile already contains an embedded character table, it is ignored. +TABLE FILE FORMAT +Each line in the tablefile should be either blank, contain a comment (preceded by #), or contain a +sequence of numbers in either decimal (default), octal (preceded by 0), or hexadecimal (preceded by 0x) +format, separated by spaces or tabs. The first number on each line indicates the glyph slot in the font +% +fstrim - discard unused blocks on a mounted filesystem +fstrim [-a] [-o offset] [-l length] [-m minimum-size] [-v] mountpoint +fstrim is used on a mounted filesystem to discard (or "trim") blocks which are not in use by the filesys‐ +behavior based on range or size, as explained below. +The mountpoint argument is the pathname of the directory where the filesystem is mounted. +Running fstrim frequently, or even using mount -o discard, might negatively affect the lifetime of poor- +quality SSD devices. For most desktop and server systems a sufficient trimming frequency is once a week. +% +rm - remove files or directories +rm [OPTION]... [FILE]... +not remove directories. +If the -I or --interactive=once option is given, and there are more than three files or the -r, -R, or +--recursive are given, then rm prompts the user for whether to proceed with the entire operation. If the +response is not affirmative, the entire command is aborted. +Otherwise, if a file is unwritable, standard input is a terminal, and the -f or --force option is not +given, or the -i or --interactive=always option is given, rm prompts the user for whether to remove the +file. If the response is not affirmative, the file is skipped. +% +ddns-confgen - ddns key generation tool +tsig-keygen [-a algorithm] [-h] [-r randomfile] [name] +ddns-confgen [-a algorithm] [-h] [-k keyname] [-q] [-r randomfile] [-s name | -z zone] +tsig-keygen and ddns-confgen are invocation methods for a utility that generates keys for use in TSIG +signing. The resulting keys can be used, for example, to secure dynamic DNS updates to a zone or for the +rndc command channel. +When run as tsig-keygen, a domain name can be specified on the command line which will be used as the +name of the generated key. If no name is specified, the default is tsig-key. +When run as ddns-confgen, the generated key is accompanied by configuration text and instructions that +can be used with nsupdate and named when setting up dynamic DNS, including an example update-policy +% +mklost+found - create a lost+found directory on a mounted Linux second extended file system +mklost+found +mklost+found is used to create a lost+found directory in the current working directory on a Linux second +extended file system. There is normally a lost+found directory in the root directory of each filesystem. +recover a filesystem, it does not need to allocate blocks in the filesystem to store a large number of +recovery. +There are none. +% +efivar - Tool to manipulate UEFI variables +efivar [OPTION...] +-L, --list-guids +list guids efivar knows about +-l, --list +list current variables +-p, --print +print variable specified by --name +-n, --name=<guid-name> +% +pr - convert text files for printing +pr [OPTION]... [FILE]... +Paginate or columnate FILE(s) for printing. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. ++FIRST_PAGE[:LAST_PAGE], --pages=FIRST_PAGE[:LAST_PAGE] +begin [stop] printing with page FIRST_[LAST_]PAGE +-COLUMN, --columns=COLUMN +output COLUMN columns and print columns down, unless -a is used. Balance number of lines in the +% +netctl - Control the netctl network profile manager +netctl [--help | --version] +manager. +The following commands are understood: +list +List all available profiles. Active profiles will be marked with a ‘*’. +% +vgmknodes — recreate volume group directory and logical volume special files +ones and removes unused ones. +--refresh +manually without a clustered lock manager. +% +killall - kill processes by name +killall [-Z, --context pattern] [-e, --exact] [-g, --process-group] [-i, --interactive] [-o, --older-than +TIME] [-q, --quiet] [-r, --regexp] [-s, --signal SIGNAL, -SIGNAL] [-u, --user user] [-v, --verbose] +killall -l +killall -V, --version +killall sends a signal to all processes running any of the specified commands. If no signal name is +specified, SIGTERM is sent. +If the command name is not regular expression (option -r) and contains a slash (/), processes executing +that particular file will be selected for killing, independent of their name. +% +ebrowse - create a class hierarchy database +ebrowse [options] [FILES...] +format. +ebrowse is used to create the database used by the class browser in Emacs. +The program follows the usual GNU command line syntax, with long options starting with two dashes ("-"). +-a, --append +append output to existing file +% +prlimit - get and set process resource limits +prlimit [options] [--resource[=limits] [--pid PID] +prlimit [options] [--resource[=limits] command [argument...] +Given a process id and one or more resources, prlimit tries to retrieve and/or modify the limits. +When command is given, prlimit will run this command with the given arguments. +The limits parameter is composed of a soft and a hard value, separated by a colon (:), in order to modify +the existing values. If no limits are given, prlimit will display the current values. If one of the +values is not given, then the existing one will be used. To specify the unlimited or infinity limit +% +zsoelim - satisfy .so requests in roff input +zsoelim [-CVh] [file ...] +zsoelim parses file arguments, or if none are specified, its standard input for lines of the form: +.so <filename> +These requests are replaced by the contents of the filename specified. If the request cannot be met, +ported depending upon compile time options. If the request can be met by a compressed file, this file is +decompressed using an appropriate decompressor and its output is used to satisfy the request. +Traditionally, soelim programs were used to allow roff preprocessors to be able to preprocess the files +% +[lock_time=n] [unlock_time=n] [root_unlock_time=n] [serialize] [audit] [silent] +[no_log_info] [debug] +many attempts fail. +manipulate the counter file. It can display user counts, set individual counts, or clear all counts. +% +etags, ctags - generate tag file for Emacs, vi +etags [-aCDGIQRVh] [-i file] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--no-defines] [--globals] [--no-globals] [--no-line-directive] [--include=file] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--output=tagfile] +[--class-qualify] [--regex=regexp] [--no-regex] [--help] [--version] file ... +ctags [-aCdgIQRVh] [-BtTuvwx] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--backward-search] [--cxref] [--no-defines] [--globals] [--no-globals] [--no-line-directive] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--class-qualify] +[--output=tagfile] [--regex=regexp] [--update] [--help] [--version] file ... +% +Compare three files line by line. +Mandatory arguments to long options are mandatory for short options too. +-A, --show-all +output all changes, bracketing conflicts +-e, --ed +output ed script incorporating changes from OLDFILE to YOURFILE into MYFILE +-E, --show-overlap +% +iconvconfig - create iconv module configuration cache +iconvconfig [options] [directory]... +tion file is used to determine the needed modules for a conversion. Loading and parsing such a configu‐ +The iconvconfig program reads iconv module configuration files and writes a fast-loading gconv module +configuration cache file. +In addition to the system provided gconv modules, the user can specify custom gconv module directories +with the environment variable GCONV_PATH. However, iconv module configuration caching is used only when +the environment variable GCONV_PATH is not set. +% +msginit - initialize a message catalog +msginit [OPTION] +Creates a new PO file, initializing the meta information with values from the user's environment. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +-i, --input=INPUTFILE +input POT file +If no input file is given, the current directory is searched for the POT file. If it is -, standard +input is read. +% +autoconf - Generate configuration scripts +autoconf [OPTION]... [TEMPLATE-FILE] +Generate a configuration script from a TEMPLATE-FILE if given, or `configure.ac' if present, or else +`configure.in'. Output is sent to the standard output if TEMPLATE-FILE is given, else into `configure'. +Operation modes: +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +update-ca-trust - manage consolidated and dynamic configuration of CA certificates and associated trust +Authority (CA) certificates and associated trust. +The feature is available for new applications that read the consolidated configuration files found in the +Parts of the new feature are also provided in a way to make it useful for legacy applications. +Many legacy applications expect CA certificates and trust configuration in a fixed location, contained in +% +resizepart - tell the kernel about the new size of a partition +resizepart device partition length +resizepart tells the Linux kernel about the new size of the specified partition. The command is a simple +wrapper around the "resize partition" ioctl. +PARAMETERS +device The disk device. +partition +The partition number. +% +unix_chkpwd [...] +unix_chkpwd is a helper program for the pam_unix module that verifies the password of the current user. +It also checks password and account expiration dates in shadow. It is not intended to be run directly +from the command line and logs a security violation if done so. +It is typically installed setuid root or setgid shadow. +The interface of the helper - command line options, and input/output data format are internal to the +pam_unix module and it should not be called directly from applications. +% +getfacl - get file access control lists +getfacl [-aceEsRLPtpndvh] file ... +getfacl [-aceEsRLPtpndvh] - +For each file, getfacl displays the file name, owner, the group, and the Access Control List (ACL). If a +directory has a default ACL, getfacl also displays the default ACL. Non-directories cannot have default +ACLs. +If getfacl is used on a file system that does not support ACLs, getfacl displays the access permissions +defined by the traditional file mode permission bits. +The output format of getfacl is as follows: +% +vimtutor - the Vim tutor +vimtutor [-g] [language] +Vimtutor starts the Vim tutor. It copies the tutor file first, so that it can be modified without chang‐ +ing the original file. +The Vimtutor is useful for people that want to learn their first Vim commands. +The optional argument -g starts vimtutor with gvim rather than vim, if the GUI version of vim is avail‐ +able, or falls back to Vim if gvim is not found. +The optional [language] argument is the two-letter name of a language, like "it" or "es". If the [lan‐ +guage] argument is missing, the language of the current locale will be used. If a tutor in this language +is available, it will be used. Otherwise the English version will be used. +% +partx - tell the kernel about the presence and numbering of on-disk partitions +partx [-a|-d|-P|-r|-s|-u] [-t type] [-n M:N] [-] disk +partx [-a|-d|-P|-r|-s|-u] [-t type] partition [disk] +Given a device or disk-image, partx tries to parse the partition table and list its contents. It can +also tell the kernel to add or remove partitions from its bookkeeping. +The disk argument is optional when a partition argument is provided. To force scanning a partition as if +it were a whole disk (for example to list nested subpartitions), use the argument "-" (hyphen-minus). +For example: +% +glib-compile-schemas - GSettings schema compiler +glib-compile-schemas [OPTION...] {DIRECTORY} +glib-compile-schemas compiles all the GSettings XML schema files in DIRECTORY into a binary file with the +name gschemas.compiled that can be used by GSettings. The XML schema files must have the filename +extension .gschema.xml. For a detailed description of the XML file format, see the GSettings +documentation. +specified in the XDG_DATA_DIRS environment variable. The usual location to install schema files is +In addition to schema files, glib-compile-schemas reads 'vendor override' files, which are key files that +can override default values for keys in the schemas. The group names in the key files are the schema id, +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +top - display Linux processes +top -hv|-bcHiOSs -d secs -n max -u|U user -p pid -o fld -w [cols] +The traditional switches `-' and whitespace are optional. +The top program provides a dynamic real-time view of a running system. It can display system summary +information as well as a list of processes or threads currently being managed by the Linux kernel. The +types of system summary information shown and the types, order and size of information displayed for pro‐ +cesses are all user configurable and that configuration can be made persistent across restarts. +The program provides a limited interactive interface for process manipulation as well as a much more +extensive interface for personal configuration -- encompassing every aspect of its operation. And +while top is referred to throughout this document, you are free to name the program anything you wish. +That new name, possibly an alias, will then be reflected on top's display and used when reading and writ‐ +% +systemd-nspawn - Spawn a namespace container for debugging, testing and building +as the process tree, the various IPC subsystems and the host and domain name. +--directory= command line option. By using the --machine= option an OS tree is automatically searched for +in a couple of locations, most importantly in /var/lib/machines, the suggested directory to place +container images installed on the system. +% +readlink - print resolved symbolic links or canonical file names +readlink [OPTION]... FILE... +Print value of a symbolic link or canonical file name +-f, --canonicalize +canonicalize by following every symlink in every component of the given name recursively; all but +the last component must exist +-e, --canonicalize-existing +canonicalize by following every symlink in every component of the given name recursively, all com‐ +ponents must exist +-m, --canonicalize-missing +% +insmod - Simple program to insert a module into the Linux Kernel +insmod [filename] [module options...] +instead, which is more clever and can handle module dependencies. +Only the most general of error messages are reported: as the work of trying to link the module is now +done inside the kernel, the dmesg usually gives more information about errors. +others. +% +bashbug - report a bug in bash +bashbug [--version] [--help] [email-address] +bashbug is a shell script to help the user compose and mail bug reports concerning bash in a standard +format. bashbug invokes the editor specified by the environment variable EDITOR on a temporary copy of +the bug report format outline. The user must fill in the appropriate fields and exit the editor. bashbug +then mails the completed report to bug-bash@gnu.org, or email-address. If the report cannot be mailed, +it is saved in the file dead.bashbug in the invoking user's home directory. +The bug report format outline consists of several sections. The first section provides information about +the machine, operating system, the bash version, and the compilation environment. The second section +should be filled in with a description of the bug. The third section should be a description of how to +reproduce the bug. The optional fourth section is for a proposed fix. Fixes are encouraged. +% +comm - compare two sorted files line by line +% +xargs - build and execute command lines from standard input +xargs [-0prtx] [-E eof-str] [-e[eof-str]] [--eof[=eof-str]] [--null] [-d delimiter] [--delimiter +delimiter] [-I replace-str] [-i[replace-str]] [--replace[=replace-str]] [-l[max-lines]] [-L max-lines] +[--max-lines[=max-lines]] [-n max-args] [--max-args=max-args] [-s max-chars] [--max-chars=max-chars] [-P +max-procs] [--max-procs=max-procs] [--process-slot-var=name] [--interactive] [--verbose] [--exit] +[--no-run-if-empty] [--arg-file=file] [--show-limits] [--version] [--help] [command [initial-arguments]] +ed by blanks (which can be protected with double or single quotes or a backslash) or newlines, and exe‐ +cutes the command (default is /bin/echo) one or more times with any initial-arguments followed by items +read from standard input. Blank lines on the standard input are ignored. +The command line for command is built up until it reaches a system-defined limit (unless the -n and -L +options are used). The specified command will be invoked as many times as necessary to use up the list +% +blkdeactivate — utility to deactivate block devices +blkdeactivate [-d dm_options] [-e] [-h] [-l lvm_options] [-m mpath_options] [-u] [-v] [device] +blkdeactivate utility deactivates block devices. If a device is mounted, the utility can unmount it auto‐ +matically before trying to deactivate. The utility currently supports device-mapper devices (DM), includ‐ +-d, --dmoption dm_options +% +usb-devices - print USB device details +usb-devices +usb-devices is a (bash) shell script that can be used to display details of USB buses in the system and +the devices connected to them. +The output of the script is similar to the usb/devices file available either under /proc/bus (if usbfs is +mounted), or under /sys/kernel/debug (if debugfs is mounted there). The script is primarily intended to +be used if the file is not available. +In contrast to the usb/devices file, this script only lists active interfaces (those marked with a "*" in +the usb/devices file) and their endpoints. +Be advised that there can be differences in the way information is sorted, as well as in the format of +% +systemd-tty-ask-password-agent - List or process pending systemd password requests +systemd-tty-ask-password-agent is a password agent that handles password requests of the system, for +example for hard disk encryption passwords or SSL certificate passwords that need to be queried at +boot-time or during runtime. +The following options are understood: +--list +Lists all currently pending system password requests. +% +tail - output the last part of files +tail [OPTION]... [FILE]... +header giving the file name. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --bytes=[+]NUM +output the last NUM bytes; or use -c +NUM to output starting with byte NUM of each file +-f, --follow[={name|descriptor}] +% +dmstats — device-mapper statistics management +dmsetup stats command [options] +dmstats command [device_name |--uuid uuid|--major major --minor minor] +dmstats clear device_name [--allprograms|--programid id] [--allregions|--regionid id] +dmstats create [device_name... |file_path...] [--alldevices] [--areas nr_areas|--areasize area_size] +[--bounds histogram_boundaries] [--filemap] [--nogroup] [--precise] [--start start_sector --length +length|--segments] [--userdata user_data] [--programid id] +dmstats delete [device_name] [--alldevices] [--allprograms|--programid id] [--allregions|--regionid id] +dmstats group [device_name] [--alias name] [--alldevices] [--regions regions] +dmstats help [-c|-C|--columns] +dmstats list [device_name] [--histogram] [--allprograms|--programid id] [--units units] [--area] +[--region] [--group] [--nosuffix] [--notimesuffix] [-v|--verbose[-v|--verbose]] +dmstats print [device_name] [--clear] [--allprograms|--programid id] [--allregions|--regionid id] +dmstats report [device_name] [--interval seconds] [--count count] [--units units] [--histogram] +% +systemd-cgls - Recursively show control group contents +systemd-cgls recursively shows the contents of the selected Linux control group hierarchy in a tree. If +arguments are specified, shows all member processes of the specified control groups plus all their +assumed in the systemd control group hierarchy. If no argument is specified and the current working +directory is beneath the control group mount point /sys/fs/cgroup, shows the contents of the control +group the working directory refers to. Otherwise, the full systemd control group hierarchy is shown. +By default, empty control groups are not shown. +The following options are understood: +% +groupdel - delete a group +groupdel [options] GROUP +The groupdel command modifies the system account files, deleting all entries that refer to GROUP. The +named group must exist. +The options which apply to the groupdel command are: +-h, --help +Display help message and exit. +-R, --root CHROOT_DIR +Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR +% +tftpd - Trivial File Transfer Protocol server +tftpd {directory} +requested via TFTP protocol, effectively chrooting tftpd to this directory. File names are validated not +It is in difference of variants of tftpd usually distributed with unix-like systems, which take a list of +directories and match file names to start from one of given prefixes or to some random default, when no +arguments were given. There are two reasons not to behave in this way: first, it is inconvenient, clients +are not expected to know something about layout of filesystem on server host. And second, TFTP protocol +% +git-upload-pack - Send objects packed back to git-fetch-pack +git-upload-pack [--[no-]strict] [--timeout=<n>] [--stateless-rpc] +[--advertise-refs] <directory> +Invoked by 'git fetch-pack', learns what +objects the other side is missing, and sends them after packing. +The UI for the protocol is on the 'git fetch-pack' side, and the +program pair is meant to be used to pull updates from a remote +repository. For push operations, see 'git send-pack'. +% +shuf - generate random permutations +shuf [OPTION]... [FILE] +shuf -e [OPTION]... [ARG]... +shuf -i LO-HI [OPTION]... +Write a random permutation of the input lines to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-e, --echo +treat each ARG as an input line +% +lsattr - list file attributes on a Linux second extended file system +lsattr [ -RVadlpv ] [ files... ] +the attributes and what they mean. +-R Recursively list attributes of directories and their contents. +-V Display the program version. +-a List all files in directories, including files that start with `.'. +-d List directories like other files, rather than listing their contents. +% +thin_delta - Print the differences in the mappings between two thin devices. +thin_delta [options] {device|file} +thin_delta allows you to compare the mappings in two thin volumes (snapshots allow common blocks between +thin volumes). +The numeric identifier for the first thin volume to diff. +The numeric identifier for the second thin volume to diff. +% +test - check file types and compare values +test EXPRESSION +test +[ EXPRESSION ] +[ ] +[ OPTION +Exit with the status determined by EXPRESSION. +--help display this help and exit +--version +output version information and exit +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +resolvconf — a framework for managing multiple DNS configurations +resolvconf -I +resolvconf [-m metric] [-p] [-x] -a interface[.protocol] <file +resolvconf [-f] -d interface[.protocol] +resolvconf [-x] -il pattern +resolvconf -u +ally, the host runs just one client and that updates /etc/resolv.conf. More modern systems frequently have +wired and wireless interfaces and there is no guarantee both are on the same network. With the advent of +VPN and other types of networking daemons, many things now contend for the contents of /etc/resolv.conf. +the argument -a interface[.protocol] instead of the filesystem. resolvconf then updates /etc/resolv.conf +% +chfn - change your finger information +chfn [-f full-name] [-o office] [-p office-phone] [-h home-phone] [-u] [-v] [username] +is displayed by the finger program. The Linux finger command will display four pieces of information +that can be changed by chfn: your real name, your work room and phone, and your home phone. +Any of the four pieces of information can be specified on the command line. If no information is given +on the command line, chfn enters interactive mode. +In interactive mode, chfn will prompt for each field. At a prompt, you can enter the new information, or +just press return to leave the field unchanged. Enter the keyword "none" to make the field blank. +chfn supports non-local entries (kerberos, LDAP, etc.) if linked with libuser, otherwise use ypchfn, +% +vgexport - make volume groups unknown to the system +ignore exported Volume Groups. vgexport clears the VG system ID, and vgimport sets the VG system ID to +match the host running vgimport (if the host has a system ID). +-a, --all +Export all inactive Volume Groups. +% +gitk - The Git repository browser +gitk [<options>] [<revision range>] [--] [<path>...] +graph, showing information related to each commit, and the files in the trees of each revision. +To control which revisions to show, gitk supports most options applicable to the git rev-list command. It +also supports a few options applicable to the git diff-* commands to control how the changes each commit +introduces are shown. Finally, it supports some gitk-specific options. +gitk generally only understands options with arguments in the sticked form (see gitcli(7)) due to +limitations in the command-line parser. +% +device. +label. +% +fsck.minix - check consistency of Minix filesystem +fsck.minix [options] device +fsck.minix performs a consistency check for the Linux MINIX filesystem. +The program assumes the filesystem is quiescent. fsck.minix should not be used on a mounted device +unless you can be sure nobody is writing to it. Remember that the kernel can write to device when it +searches for files. +The device name will usually have the following form: +% +lslogins - display information about known users in the system +lslogins [options] [-s|-u[=UID]] [-g groups] [-l logins] +Examine the wtmp and btmp logs, /etc/shadow (if necessary) and /etc/passwd and output the desired data. +The default action is to list info about all the users in the system. +Mandatory arguments to long options are mandatory for short options too. +-a, --acc-expiration +for more info). (Requires root privileges.) +% +w - Show who is logged on and what they are doing. +w [options] user [...] +w displays information about the users currently on the machine, and their processes. The header shows, +in this order, the current time, how long the system has been running, how many users are currently +The following entries are displayed for each user: login name, the tty name, the remote host, login time, +idle time, JCPU, PCPU, and the command line of their current process. +The JCPU time is the time used by all processes attached to the tty. It does not include past background +jobs, but does include currently running background jobs. +The PCPU time is the time used by the current process, named in the "what" field. +% +compile_et - error table compiler +compile_et file +Compile_et converts a table listing error-code names and associated messages into a C source file suit‐ +The source file name must end with a suffix of ``.et''; the file consists of a declaration supplying the +name (up to four characters long) of the error-code table: +error_table name +error_code name, " string " +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +attr - extended attributes on XFS filesystem objects +attr [ -LRSq ] -s attrname [ -V attrvalue ] pathname +attr [ -LRSq ] -g attrname pathname +attr [ -LRSq ] -r attrname pathname +attr [ -LRSq ] -l pathname +Extended attributes implement the ability for a user to attach name:value pairs to objects within the XFS +filesystem. +name. It is thus aimed specifically at users of the XFS filesystem - for filesystem independent extended +% +genl-ctrl-list - List available kernel-side Generic Netlink families +genl-ctrl-list [-d] +Queries the Generic Netlink controller in kernel and prints a list of all registered Generic Netlink fam‐ +ilies including the version of the interface that has been registered. +-h or --help +Print help text to console and exit. +-v or --version +Print versioning information to console and exit. +-d or --details +% +ldns-test-edns - test if dns cache supports EDNS and DNSSEC. +ldns-test-edns [ -i ] { ip } +ldns-test-edns tests a DNS cache and checks if it supports EDNS0 and DNSSEC types so that it can be used +as a dnssec-enabled DNS cache. It sends two queries to the cache, one for the root key and one for a DS +record. These must succeed, the answer must have EDNS, that type and signatures. +If the IP address is good for DNSSEC, it is printed with 'OK'. Otherwise short description is given of +the failure. If OK is given, the cache should be good to use as a cache for a local configured DNSSEC +validator. +The tool assumes the root is signed and Sweden is signed. Also, the queries are sent with the CD flag, +the tool does not check that the results are validated, but that they can be validated. +% +ldns-update - send a dynamic update packet +ldns-update [ zone ] ip [ tsig_name tsig_als tsig_hmac ] +ldns-update is used to send a dynamic update packet. +zone Use this zone instead of trying to read it from the zonefile's SOA record. +ip Send the update to this IP address +tsig_name tsig_alg tsig_hmac +% +kprop [-r realm] [-f file] [-d] [-P port] [-s keytab] slave_host +-r realm +Specifies the realm of the master server. +-f file +Specifies the filename where the dumped principal database file is to be found; by default the +% +zmore - file perusal filter for crt viewing of compressed text +zmore [ name ... ] +Zmore is a filter which allows examination of compressed or plain text files one screenful at a time on a +soft-copy terminal. zmore works on files compressed with compress, pack or gzip, and also on uncom‐ +pressed files. If a file does not exist, zmore looks for a file of the same name with the addition of a +.gz, .z or .Z suffix. +Zmore normally pauses after each screenful, printing --More-- at the bottom of the screen. If the user +then types a carriage return, one more line is displayed. If the user hits a space, another screenful is +displayed. Other possibilities are enumerated later. +Zmore looks in the file /etc/termcap to determine terminal characteristics, and to determine the default +% +aclocal [OPTION]... +--automake-acdir=DIR +--system-acdir=DIR +directory holding third-party system-wide files +% +thin_rmap - output reverse map of a thin provisioned region of blocks from metadata device or file +thin_rmap [options] {device|file} +thin_rmap outputs the reverse mapping stored in the metadata on a device or file between a region of thin +provisioned pool blocks and the associated thin provisioned devices. +--region <block range> +output reverse map +-h, --help +Print help and exit. +% +msgunfmt - uncompile message catalog from binary format +msgunfmt [OPTION] [FILE]... +Convert binary message catalog to Uniforum style .po file. +Mandatory arguments to long options are mandatory for short options too. +Operation mode: +-j, --java +Java mode: input is a Java ResourceBundle class +--csharp +C# mode: input is a .NET .dll file +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +tsort - perform topological sort +tsort [OPTION] [FILE] +Write totally ordered list consistent with the partial ordering in FILE. +With no FILE, or when FILE is -, read standard input. +--help display this help and exit +--version +output version information and exit +Written by Mark Kettenis. +% +gpgsm - CMS encryption and signing tool +gpgsm [--homedir dir] [--options file] [options] command [args] +and the CMS protocol. It is mainly used as a backend for S/MIME mail processing. gpgsm includes a full +featured certificate management and complies with all rules defined for the German Sphinx project. +Commands are not distinguished from options except for the fact that only one command is allowed. +Commands not specific to the function +--version +% +fsadm — utility to resize or check filesystem on a device +fsadm [options] check device +fsadm [options] resize device [new_size] +-e|--ext-offline +-f|--force +Bypass some sanity checks. +% +pgrep, pkill - look up or signal processes based on name and other attributes +pgrep [options] pattern +pkill [options] pattern +pgrep looks through the currently running processes and lists the process IDs which match the selection +criteria to stdout. All the criteria have to match. For example, +$ pgrep -u root sshd +will only list the processes called sshd AND owned by root. On the other hand, +$ pgrep -u root,daemon +will list the processes owned by root OR daemon. +% +Process macros in FILEs. If no FILE or if FILE is `-', standard input is read. +Mandatory or optional arguments to long options are mandatory or optional for short options too. +Operation modes: +--help display this help and exit +--version +output version information and exit +-E, --fatal-warnings +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +msgfmt - compile message catalog to binary format +msgfmt [OPTION] filename.po ... +Generate binary message catalog from textual translation description. +Mandatory arguments to long options are mandatory for short options too. Similarly for optional argu‐ +ments. +Input file location: +filename.po ... +input files +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +nscd - name service cache daemon +Nscd is a daemon that provides a cache for the most common name service requests. The default configura‐ +There are two caches for each database: a positive one for items found, and a negative one for items not +--help will give you a list with all options and what they do. +% +xzless, lzless - view xz or lzma compressed (text) files +xzless [file...] +lzless [file...] +xzless is a filter that displays text from compressed files to a terminal. It works on files compressed +The command named lzless is provided for backward compatibility with LZMA Utils. +ENVIRONMENT +% +and improves the file access speed. +mount point of it and reduces fragmentation of all files in this mount point. +-c Get a current fragmentation count and an ideal fragmentation count, and calculate fragmentation +% +factor - factor numbers +factor [NUMBER]... +factor OPTION +Print the prime factors of each specified integer NUMBER. If none are specified on the command line, +read them from standard input. +--help display this help and exit +--version +output version information and exit +Written by Paul Rubin, Torbjorn Granlund, and Niels Moller. +% +strfile - create a random access file for storing strings +unstr - dump strings in pointer order +strfile [-iorsx] [-c char] sourcefile [outputfile] +unstr [-c char] datafile[.ext] [outputfile] +strfile reads a file containing groups of lines separated by a line containing a single percent `%' sign +(or other specified delimiter character) and creates a data file which contains a header structure and a +The output file, if not specified on the command line, is named sourcefile.dat. +The purpose of unstr is to undo the work of strfile. It prints out the strings contained in the source‐ +file, which is datafile.ext without its extension, or datafile if no extension is specified (in this +% +rtcwake - enter a system sleep state until specified wakeup time +rtcwake [options] [-d device] [-m standby_mode] {-s seconds|-t time_t} +specified time. It uses any RTC framework driver that supports standard driver model wakeup flags. +disk). Not all systems have persistent media that are appropriate for such suspend modes. +% +grog — guess options for a following groff command +grog [-C] [--run] [--warnings] [--ligatures] [ groff-option ....] [--] [ filespec ....] +grog -h | --help +grog -v | --version +to perform the input with the groff program. +The corresponding groff command is usually displayed in standard output. With the option --run, +the generated line is output into standard error and the generated groff command is run on the +standard output. +The option -v or --version prints information on the version number. Also -h or --help prints usage +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +nl - number lines of files +nl [OPTION]... [FILE]... +Write each FILE to standard output, with line numbers added. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --body-numbering=STYLE +use STYLE for numbering body lines +-d, --section-delimiter=CC +use CC for separating logical pages +% +git-cvsserver - A CVS server emulator for Git +SSH: +export CVS_SERVER="git cvsserver" +cvs -d :ext:user@server/path/repo.git co <HEAD_name> +pserver (/etc/inetd.conf): +cvspserver stream tcp nowait nobody /usr/bin/git-cvsserver git-cvsserver pserver +git-cvsserver [options] [pserver|server] [<directory> ...] +% +ocsptool - GnuTLS OCSP tool +ocsptool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Ocsptool is a program that can parse and print information about OCSP requests/responses, generate +requests and verify responses. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +grub-macbless - bless a mac file/directory +Mac-style bless on HFS or HFS+ +-p, --ppc +bless for ppc-based macs +-v, --verbose +print verbose messages. +% +iptables-restore — Restore IP Tables +ip6tables-restore — Restore IPv6 Tables +iptables-restore [-chntv] [-M modprobe] [-T name] [file] +ip6tables-restore [-chntv] [-M modprobe] [-T name] [file] +iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on +STDIN or in file. Use I/O redirection provided by your shell to read from a file or specify file as an +argument. +-c, --counters +restore the values of all packet and byte counters +% +tbl - format tables for troff +tbl [-Cv] [files ...] +tbl compiles descriptions of tables embedded within troff input files into commands that are understood +by troff. Normally, it should be invoked using the -t option of groff. It is highly compatible with +Unix tbl. The output generated by GNU tbl cannot be processed with Unix troff; it must be processed with +GNU troff. If no files are given on the command line or a filename of - is given, the standard input is +read. +-C Enable compatibility mode to recognize .TS and .TE even when followed by a character other than +space or newline. Leader characters (\a) are handled as interpreted. +% +networkctl - Query the status of network links +configuration syntax. +The following options are understood: +-a --all +Show all links with status. +-h, --help +% +gtester-report - test report formatting utility +gtester-report [option...] [gtester-log] +gtester-report is a script which converts the XML output generated by gtester into HTML. +-h, --help +print help and exit +-v, --version +print version information and exit +-s, --subunit +Output subunit. Needs python-subunit. +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +watchgnupg - Read and print logs from a socket +watchgnupg [--force] [--verbose] socketname +Most of the main utilities are able to write their log files to a Unix Domain socket if configured that +way. watchgnupg is a simple listener for such a socket. It ameliorates the output with a time stamp and +available for Windows. +watchgnupg is commonly invoked as +watchgnupg --force ~/.gnupg/S.log +watchgnupg understands these options: +% +sudo, sudoedit — execute a command as another user +sudo -h | -K | -k | -V +sudo -v [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-u user] +sudo -l [-AknS] [-a type] [-g group] [-h host] [-p prompt] [-U user] [-u user] [command] +sudo [-AbEHnPS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-r role] [-t type] +[-u user] [VAR=value] [-i | -s] [command] +sudoedit [-AknS] [-a type] [-C num] [-c class] [-g group] [-h host] [-p prompt] [-u user] file ... +sudo allows a permitted user to execute a command as the superuser or another user, as specified by the +security policy. The invoking user's real (not effective) user ID is used to determine the user name with +which to query the security policy. +sudo supports a plugin architecture for security policies and input/output logging. Third parties can +develop and distribute their own policy and I/O logging plugins to work seamlessly with the sudo front end. +% +vercmp - version comparison utility +vercmp is used to determine the relationship between two given version numbers. It outputs values as +follows: +Version comparison operates as follows: +% +xxd - make a hexdump or do the reverse. +xxd -h[elp] +xxd [options] [infile [outfile]] +xxd -r[evert] [options] [infile [outfile]] +xxd creates a hex dump of a given file or standard input. It can also convert a hex dump back to its +`mail-safe' ASCII representation, but has the advantage of decoding to standard output. Moreover, it can +be used to perform binary file patching. +If no infile is given, standard input is read. If infile is specified as a `-' character, then input is +taken from standard input. If no outfile is given (or a `-' character is in its place), results are sent +to standard output. +% +tailf - follow the growth of a log file +tailf [option] file +days it's safe to use tail -f (from coreutils), in contrast to what the original documentation below +says. +updating the access time for the file, so a filesystem flush does not occur periodically when no log +activity is happening. +tailf is extremely useful for monitoring log files on a laptop when logging is infrequent and the user +wishes the hard disk to spin down to conserve battery life. +% +fallocate - preallocate or deallocate space to a file +fallocate [-c|-p|-z] [-o offset] -l length [-n] filename +fallocate -d [-o offset] [-l length] filename +fallocate is used to manipulate the allocated disk space for a file, either to deallocate or preallocate +it. For filesystems which support the fallocate system call, preallocation is done quickly by allocating +creating a file by filling it with zeroes. +% +colcrt - filter nroff output for CRT previewing +colcrt [options] [file...] +colcrt provides virtual half-line and reverse line feed sequences for terminals without such capability, +and on which overstriking is destructive. Half-line characters and underlining (changed to dashing `-') +are placed on new lines in between the normal output lines. +-, --no-underlining +Causes all half-lines to be printed, effectively double spacing the output. Normally, a minimal +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +mkfs.bfs - make an SCO bfs filesystem +mkfs.bfs [options] device [block-count] +mkfs.bfs creates an SCO bfs filesystem on a block device (usually a disk partition or a file accessed via +the loop device). +The block-count parameter is the desired size of the filesystem, in blocks. If nothing is specified, the +entire partition will be used. +-N, --inodes number +% +vipw, vigr - edit the password or group file +vipw [options] +vigr [options] +vipw edits the password file after setting the appropriate locks, and does any necessary processing after +the password file is unlocked. If the password file is already locked for editing by another user, vipw +file in the same manner as vipw does the passwd file. +ENVIRONMENT +If the following environment variable exists, it will be utilized by vipw and vigr: +% +gapplication - D-Bus application launcher +gapplication version +gapplication list-apps +gapplication launch APPID +gapplication launch APPID [FILE...] +gapplication list-actions APPID +gapplication action APPID ACTION [PARAMETER] +% +gettext - translate message +gettext [OPTION] [[TEXTDOMAIN] MSGID] +gettext [OPTION] -s [MSGID]... +The gettext program translates a natural language message into the user's language, by looking up the +translation in a message catalog. +Display native language translation of a textual message. +-d, --domain=TEXTDOMAIN +retrieve translated messages from TEXTDOMAIN +-e enable expansion of some escape sequences +% +veritysetup - manage dm-verity (block level verification) volumes +veritysetup <options> <action> <action args> +Veritysetup is used to configure dm-verity managed device-mapper mappings. +Device-mapper verity target provides read-only transparent integrity checking of block devices using ker‐ +nel crypto API. +The dm-verity devices are always read-only. +Veritysetup supports these operations: +format <data_device> <hash_device> +% +btrfs-map-logical - map btrfs logical extent to physical extent +btrfs-map-logical <options> <device> +btrfs-map-logical can be used to find out what the physical offsets are on the mirrors, the result is +dumped into stdout in default. +Mainly used for debug purpose. +-l|--logical <logical_num> +Logical extent to map. +-c|--copy <copy> +% +diff - compare files line by line +diff [OPTION]... FILES +Compare FILES line by line. +Mandatory arguments to long options are mandatory for short options too. +--normal +output a normal diff (the default) +-q, --brief +report only when files differ +-s, --report-identical-files +% +psktool - GnuTLS PSK tool +psktool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Program that generates random keys for use with TLS-PSK. The keys are stored in hexadecimal format in a +key file. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +AS - the portable GNU assembler. +as [-a[cdghlns][=file]] [--alternate] [-D] +[--compress-debug-sections] [--nocompress-debug-sections] +[--debug-prefix-map old=new] +[--defsym sym=val] [-f] [-g] [--gstabs] +[--help] [-I dir] [-J] +[-K] [-L] [--listing-lhs-width=NUM] +[--listing-cont-lines=NUM] [--keep-locals] +[--no-pad-sections] +[-o objfile] [-R] +[--hash-size=NUM] [--reduce-memory-overheads] +[--statistics] +[-v] [-version] [--version] +% +mkfs.minix - make a Minix filesystem +mkfs.minix [options] device [size-in-blocks] +mkfs.minix creates a Linux MINIX filesystem on a device (usually a disk partition). +The device is usually of the following form: +on a character device :-). +% +id - print real and effective user and group IDs +id [OPTION]... [USER] +Print user and group information for the specified USER, or (when USER omitted) for the current user. +-a ignore, for compatibility with other versions +-Z, --context +print only the security context of the process +-g, --group +print only the effective group ID +-G, --groups +% +xmlwf - Determines if an XML document is well-formed +xmlwf [-s] [-n] [-p] [-x] [-e encoding] [-w] [-d output-dir] [-c] [-m] [-r] [-t] [-v] [file ...] +xmlwf uses the Expat library to determine if an XML document is well-formed. It is non-validating. +If you do not specify any files on the command-line, and you have a recent version of xmlwf, the input +file will be read from standard input. +A well-formed document must adhere to the following rules: +xmlwf does not currently check for a valid XML declaration. +% +wipefs - wipe a signature from a device +wipefs [-ahnpqtV] [-o offset] device... +wipefs can erase filesystem, raid or partition-table signatures (magic strings) from the specified device +to make the signatures invisible for libblkid. +wipefs does not erase the filesystem itself nor any other data from the device. When used without any +options, wipefs lists all visible filesystems and the offsets of their basic signatures. +wipefs calls the BLKRRPART ioctl when it has erased a partition-table signature to inform the kernel +about the change. +command lists only the first offset where a magic string has been detected. The device is not scanned +% +Wget - The non-interactive network downloader. +wget [option]... [URL]... +GNU Wget is a free utility for non-interactive download of files from the Web. It supports HTTP, HTTPS, +and FTP protocols, as well as retrieval through HTTP proxies. +Wget is non-interactive, meaning that it can work in the background, while the user is not logged on. +contrast, most of the Web browsers require constant user's presence, which can be a great hindrance when +transferring a lot of data. +Wget can follow links in HTML, XHTML, and CSS pages, to create local versions of remote web sites, fully +downloading." While doing that, Wget respects the Robot Exclusion Standard (/robots.txt). Wget can be +% +vgs — report information about volume groups +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--namepre‐ +fixes] [--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--rows] [--separator +Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] [--unquoted] [-v|--verbose] [--version] [Vol‐ +vgs produces formatted output about volume groups. +--all List all volume groups. Equivalent to not specifying any volume groups. +% +hwclock - read or set the hardware clock (RTC) +hwclock [function] [option...] +hwclock is a tool for accessing the Hardware Clock. It can: display the Hardware Clock time; set the +Hardware Clock to a specified time; set the Hardware Clock from the System Clock; set the System Clock +from the Hardware Clock; compensate for Hardware Clock drift; correct the System Clock timescale; set the +kernel's timezone, NTP timescale, and epoch (Alpha only); compare the System and Hardware Clocks; and +predict future Hardware Clock values based on its drift rate. +option --update-drift was added. See their respective descriptions below. +FUNCTIONS +The following functions are mutually exclusive, only one can be given at a time. If none is given, the +% +xfs_rtcp - XFS realtime copy command +xfs_rtcp [ -e extsize ] [ -p ] source ... target +xfs_rtcp -V +xfs_rtcp copies a file to the realtime partition on an XFS filesystem. If there is more than one source +and target, the final argument (the target) must be a directory which already exists. +-e extsize +Sets the extent size of the destination realtime file. +-p Use if the size of the source file is not an even multiple of the block size of the destination +filesystem. When -p is specified xfs_rtcp will pad the destination file to a size which is an even +% +iptables [-t table] {-A|-C|-D} chain rule-specification +ip6tables [-t table] {-A|-C|-D} chain rule-specification +iptables [-t table] -I chain [rulenum] rule-specification +iptables [-t table] -R chain rulenum rule-specification +iptables [-t table] -D chain rulenum +iptables [-t table] -S [chain [rulenum]] +iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] +% +texindex - sort Texinfo index files +texindex [OPTION]... FILE... +Generate a sorted index for each TeX output FILE. Usually FILE... is specified as `foo.??' for a docu‐ +ment `foo.texi'. +-h, --help +display this help and exit +--version +display version information and exit +-- end option processing +% +xfs_mkfile - create an XFS file +xfs_mkfile [ -v ] [ -n ] [ -p ] size[k|b|m|g] filename ... +xfs_mkfile -V +xfs_mkfile creates one or more files. The file is padded with zeroes by default. The default size is in +bytes, but it can be flagged as kilobytes, blocks, megabytes, or gigabytes with the k, b, m, or g suf‐ +fixes, respectively. +-v Verbose. Report the names and sizes of created files. +-n No bytes. Create a holey file - that is, do not write out any data, just seek to end of file and +write a block. +% +autopoint - copies standard gettext infrastructure +autopoint [OPTION]... +Copies standard gettext infrastructure files into a source package. +--help print this help and exit +--version +print version information and exit +-f, --force +force overwriting of files that already exist +% +kbd_mode - report or set the keyboard mode +kbd_mode [ -a | -u | -k | -s ] [ -C CONSOLE ] +Without argument, kbd_mode prints the current keyboard mode (RAW, MEDIUMRAW or XLATE). With argument, it +sets the keyboard mode as indicated: +-s: scancode mode (RAW), +-k: keycode mode (MEDIUMRAW), +-a: ASCII mode (XLATE), +% +pam_timestamp_check - Check to see if the default timestamp is valid +pam_timestamp_check [-k] [-d] [target_user] +With no arguments pam_timestamp_check will check to see if the default timestamp is valid, or optionally +remove it. +-k +-d +Instead of returning validity using an exit status, loop indefinitely, polling regularly and printing +the status on standard output. +% +chroot - run command or interactive shell with special root directory +chroot OPTION +--groups=G_LIST +--userspec=USER:GROUP +specify user and group (ID or name) to use +--skip-chdir +do not change working directory to '/' +% +lsns - list namespaces +lsns [options] [namespace] +lsns lists information about all the currently accessible namespaces or about the given namespace. The +namespace identifier is an inode number. +The default output is subject to change. So whenever possible, you should avoid using default outputs in +your scripts. Always explicitly define expected columns by using the --output option together with a +columns list in environments where a stable output is required. +(see unshare --mount-proc for more details). lsns is not able to see persistent namespaces without pro‐ +% +lvmsadc — LVM system activity data collector +lvmsadc +% +lzmainfo - show information stored in the .lzma file header +lzmainfo [--help] [--version] [file...] +fied file, decodes the header, and prints it to standard output in human readable format. If no files +are given or file is -, standard input is read. +Usually the most interesting information is the uncompressed size and the dictionary size. Uncompressed +size can be shown only if the file is in the non-streamed .lzma format variant. The amount of memory +required to decompress the file is a few dozen kilobytes plus the dictionary size. +lzmainfo is included in XZ Utils primarily for backward compatibility with LZMA Utils. +% +lnstat - unified linux network statistics +lnstat [options] +lnstat is a generalized and more feature-complete replacement for the old rtstat program. It is commonly +used to periodically print a selection of statistical values exported by the kernel. In addition to +routing cache statistics, it supports any kind of statistics the linux kernel exports via a file in +/proc/net/stat/. +Each file in /proc/net/stat/ contains a header line listing the column names. These names are used by +lnstat as keys for selecting which statistics to print. For every CPU present in the system, a line fol‐ +lows which lists the actual values for each column of the file. lnstat sums these values up (which in +fact are counters) before printing them. After each interval, only the difference to the last value is +% +envsubst - substitutes environment variables in shell format strings +envsubst [OPTION] [SHELL-FORMAT] +Substitutes the values of environment variables. +Operation mode: +-v, --variables +output the variables occurring in SHELL-FORMAT +Informative output: +-h, --help +display this help and exit +-V, --version +% +iconv - convert text from one character encoding to another +iconv [options] [-f from-encoding] [-t to-encoding] [inputfile]... +The iconv program reads in text in one encoding and outputs the text in another encoding. If no input +files are given, or if it is given as a dash (-), iconv reads from standard input. If no output file is +given, iconv writes to standard output. +If no from-encoding is given, the default is derived from the current locale's character encoding. If no +to-encoding is given, the default is derived from the current locale's character encoding. +-f from-encoding, --from-code=from-encoding +Use from-encoding for input characters. +% +kpropd [-r realm] [-A admin_server] [-a acl_file] [-f slave_dumpfile] [-F principal_database] [-p +program. If incremental propagation is enabled, it periodically requests incremental updates from the +master KDC. +When the slave receives a kprop request from the master, kpropd accepts the dumped KDC database and +database to the slave servers. Upon a successful download of the KDC database file, the slave Kerberos +server will have an up-to-date KDC database. +% +pgrep, pkill - look up or signal processes based on name and other attributes +pgrep [options] pattern +pkill [options] pattern +pgrep looks through the currently running processes and lists the process IDs which match the selection +criteria to stdout. All the criteria have to match. For example, +$ pgrep -u root sshd +will only list the processes called sshd AND owned by root. On the other hand, +$ pgrep -u root,daemon +will list the processes owned by root OR daemon. +% +fold - wrap each input line to fit in specified width +fold [OPTION]... [FILE]... +Wrap input lines in each FILE, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --bytes +count bytes rather than columns +-s, --spaces +break at spaces +% +chrt - manipulate the real-time attributes of a process +chrt [options] priority command [argument...] +chrt [options] -p [priority] pid +chrt sets or retrieves the real-time scheduling attributes of an existing pid, or runs command with the +given attributes. +POLICIES +-o, --other +-f, --fifo +Set scheduling policy to SCHED_FIFO. +% +sync - Synchronize cached writes to persistent storage +sync [OPTION] [FILE]... +Synchronize cached writes to persistent storage +If one or more files are specified, sync only them, or their containing file systems. +-d, --data +sync only file data, no unneeded metadata +-f, --file-system +sync the file systems that contain the files +--help display this help and exit +% +lvconvert — change LV type and other utilities +lvconvert [OPTION]... VolumeGroup/LogicalVolume +-b, --background +--cachepolicy Policy +--cachesettings Key=Value +-c, --chunksize ChunkSize[b|B|s|S|k|K|m|M|g|G] +--corelog +--discards {ignore|nopassdown|passdown} +-i, --interval Seconds +--merge +--mirrorlog {disk|core|mirrored} +-m, --mirrors Number +% +dpa - DNS Packet Analyzer. Analyze DNS packets in ip trace files +dpa [ OPTION ] TRACEFILE +uniques (i.e. count all different occurences). +-c expressionlist +Count occurrences of matching expressions +-f expression +Filter: only process packets that match the expression +-h Show usage +% +unlink - call the unlink function to remove the specified file +unlink FILE +unlink OPTION +Call the unlink function to remove the specified FILE. +--help display this help and exit +--version +output version information and exit +Written by Michael Stone. +% +ss - another utility to investigate sockets +ss [options] [ FILTER ] +ss is used to dump socket statistics. It allows showing information similar to netstat. It can display +more TCP and state informations than other tools. +established connection. +-h, --help +Show summary of options. +-V, --version +% +split - split a file into pieces +split [OPTION]... [FILE [PREFIX]] +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-a, --suffix-length=N +--additional-suffix=SUFFIX +append an additional SUFFIX to file names +% +dconf - Simple tool for manipulating a dconf database +dconf read KEY +dconf list DIR +dconf write KEY VALUE +dconf reset [-f] PATH +dconf compile OUTPUT KEYFILEDIR +dconf update +dconf watch PATH +% +iptables-restore — Restore IP Tables +ip6tables-restore — Restore IPv6 Tables +iptables-restore [-chntv] [-M modprobe] [-T name] [file] +ip6tables-restore [-chntv] [-M modprobe] [-T name] [file] +iptables-restore and ip6tables-restore are used to restore IP and IPv6 Tables from data specified on +STDIN or in file. Use I/O redirection provided by your shell to read from a file or specify file as an +argument. +-c, --counters +restore the values of all packet and byte counters +% +tset, reset - terminal initialization +tset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +reset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +mination is done as follows, using the first terminal type found. +ting TERM according to the type passed to it by /etc/inittab.) +% +getent [option]... database key... +are configured in /etc/nsswitch.conf. If one or more key arguments are provided, then only the entries +that match the supplied keys will be displayed. Otherwise, if no key is provided, all entries will be +displayed (unless the database does not support enumeration). +enumerating each socket address structure returned. +% +rndc - name server control utility +rndc [-b source-address] [-c config-file] [-k key-file] [-s server] [-p port] [-q] [-r] [-V] [-y key_id] +{command} +rndc controls the operation of a name server. It supersedes the ndc utility that was provided in old BIND +releases. If rndc is invoked with no command line options or arguments, it prints a short summary of the +supported commands and the available options and their arguments. +rndc communicates with the name server over a TCP connection, sending commands authenticated with digital +signatures. In the current versions of rndc and named, the only supported authentication algorithms are +command request and the name server's response. All commands sent over the channel must be signed by a +key_id known to the server. +% +arping - send ARP REQUEST to a neighbour host +arping [-AbDfhqUV] [-c count] [-w deadline] [-s source] {-I interface} {destination} +Ping destination on device interface by ARP packets, using source address source. +-A The same as -U, but ARP REPLY packets used instead of ARP REQUEST. +-b Send only MAC level broadcasts. Normally arping starts from sending broadcast, and switch to uni‐ +cast after reply received. +Stop after sending count ARP REQUEST +timeout expires. +% +gobject-query - display a tree of types +gobject-query froots [OPTION...] +gobject-query tree [OPTION...] +gobject-query is a small utility that draws a tree of types. +gobject-query takes a mandatory argument that specifies whether it should iterate over the fundamental +types or print a type tree. +froots +iterate over fundamental roots +% +dbus-cleanup-sockets - clean up leftover sockets in a directory +dbus-cleanup-sockets [DIRECTORY] +The dbus-cleanup-sockets command cleans up unused D-Bus connection sockets. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +If given no arguments, dbus-cleanup-sockets cleans up sockets in the standard default socket directory +for the per-user-login-session message bus; this is usually /tmp. Optionally, you can pass a different +directory on the command line. +On Linux, this program is essentially useless, because D-Bus defaults to using "abstract sockets" that +exist only in memory and don't have a corresponding file in /tmp. +% +lvrename — rename a logical volume +[-v|--verbose] [--version] [-f|--force] [--noudevsync] [--reportformat {basic|json}] {OldLogicalVol‐ +lvrename renames an existing logical volume or an existing historical logical volume from OldLogicalVol‐ +--noudevsync +Disable udev synchronisation. The process will not wait for notification from udev. It will con‐ +tinue irrespective of any possible udev processing in the background. You should only use this if +% +msgattrib - attribute matching and manipulation on message catalog +msgattrib [OPTION] [INPUTFILE] +Filters the messages of a translation catalog according to their attributes, and manipulates the +attributes. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +isc-hmac-fixup - fixes HMAC keys generated by older versions of BIND +isc-hmac-fixup {algorithm} {secret} +Versions of BIND 9 up to and including BIND 9.6 had a bug causing HMAC-SHA* TSIG keys which were longer +incompatible with other DNS implementations. +versions of BIND, when using long keys. isc-hmac-fixup modifies those keys to restore compatibility. +To modify a key, run isc-hmac-fixup and specify the key's algorithm and secret on the command line. If +% +rcp - Remote copy +rcp [OPTION...] SOURCE DEST +rcp [OPTION...] SOURCE... DIRECTORY +rcp [OPTION...] --target-directory=DIRECTORY SOURCE... +Remote copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY. +-6, --ipv6 +use only IPv6 +-d, --target-directory[=DIRECTORY] +% +sed - stream editor for filtering and transforming text +sed [OPTION]... {script-only-if-no-other-script} [input-file]... +Sed is a stream editor. A stream editor is used to perform basic text transformations on an input stream +(a file or input from a pipeline). While in some ways similar to an editor which permits scripted edits +(such as ed), sed works by making only one pass over the input(s), and is consequently more efficient. +But it is sed's ability to filter text in a pipeline which particularly distinguishes it from other types +of editors. +-n, --quiet, --silent +suppress automatic printing of pattern space +-e script, --expression=script +% +run-parts - run scripts or programs in a directory +run-parts [--test] [--verbose] [--report] [--lsbsysinit] [--regex=RE] [--umask=umask] [--arg=argument] +[--exit-on-error] [--help] [--version] [--list] [--reverse] [--] DIRECTORY +run-parts -V +run-parts runs all the executable files named within constraints described below, found in directory +directory. Other files and directories are silently ignored. +If neither the --lsbsysinit option nor the --regex option is given then the names must consist entirely +If the --lsbsysinit option is given, then the names must not end in .dpkg-old or .dpkg-dist or .dpkg-new +or .dpkg-tmp, and must belong to one or more of the following namespaces: the LANANA-assigned namespace +% +ssh — OpenSSH SSH client (remote login program) +[-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address] +[-S ctl_path] [-W host:port] [-w local_tun[:remote_tun]] [user@]hostname [command] +ssh (SSH client) is a program for logging into a remote machine and for executing commands on a remote +machine. It is intended to provide secure encrypted communications between two untrusted hosts over an +the secure channel. +ssh connects and logs into the specified hostname (with optional user name). The user must prove his/her +identity to the remote machine using one of several methods (see below). +% +flex - the fast lexical analyser generator +Generates programs that perform pattern-matching on text. +Table Compression: +-Ca, --align +trade off larger tables for better memory alignment +-Ce, --ecs +construct equivalence classes +-Cf do not compress tables; use -f representation +% +trust - Tool for operating on the trust policy store +trust list +trust extract --filter=<what> --format=<type> /path/to/destination +trust anchor /path/to/certificate.crt +trust is a command line tool to examine and modify the shared trust policy store. +See the various sub commands below. The following global options can be used: +-v, --verbose +Run in verbose mode with debug output. +% +preconv - convert encoding of input files to something GNU troff understands +preconv [-dr] [-e encoding] [files ...] +preconv -h | --help +preconv -v | --version +It is possible to have whitespace between the -e command line option and its parameter. +standard output. Currently, this means ASCII characters and ‘\[uXXXX]’ entities, where ‘XXXX’ is a hexa‐ +decimal number with four to six digits, representing a Unicode input code. Normally, preconv should be +invoked with the -k and -K options of groff. +-d Emit debugging messages to standard error (mainly the used encoding). +% +dircolors - color setup for ls +dircolors [OPTION]... [FILE] +Output commands to set the LS_COLORS environment variable. +Determine format of output: +-b, --sh, --bourne-shell +output Bourne shell code to set LS_COLORS +-c, --csh, --c-shell +output C shell code to set LS_COLORS +-p, --print-database +output defaults +% +thin_dump - dump thin provisioning metadata from device or file to standard output +thin_dump [options] {device|file} +thin_dump dumps binary thin provisioning metadata (optionally from alternate block; see option --meta‐ +data-snap) created by the device-mapper thin provisioning target on a device or file to standard output +for analysis or postprocessing in either XML or human readable format. XML formated metadata can be fed +device-mapper target) or file. +-f, --format {xml|human_readable} +Print output in XML or human readable format. +% +iptables-save — dump iptables rules to stdout +ip6tables-save — dump iptables rules to stdout +iptables-save [-M modprobe] [-c] [-t table] +ip6tables-save [-M modprobe] [-c] [-t table] +iptables-save and ip6tables-save are used to dump the contents of IP or IPv6 Table in easily parseable +format to STDOUT. Use I/O-redirection provided by your shell to write to a file. +-M, --modprobe modprobe_program +Specify the path to the modprobe program. By default, iptables-save will inspect /proc/sys/ker‐ +nel/modprobe to determine the executable's path. +% +thin_repair - repair thin provisioning binary metadata from device/file to device/file +thin_repair [options] -i {device|file} -o {device|file} +thin_repair reads binary thin provisioning metadata created by the respective device-mapper target from +one device or file , repairs it and writes it to another device or file. If written to a metadata device +, the metadata can be processed by the device-mapper target. +-i, --input {device|file} +Input file or device with binary metadata. +-o, --output {device|file} +Output file or device for repaired binary metadata. If a file is used then it must be preallo‐ +% +msgcat - combines several message catalogs +msgcat [OPTION] [INPUTFILE]... +Concatenates and merges the specified PO files. Find messages which are common to two or more of the +extracted comments, and file positions will be cumulated, except that if --use-first is specified, they +will be taken from the first PO file to define them. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE ... +% +whatis - display one-line manual page descriptions +whatis [-dlv?V] [-r|-w] [-s list] [-m system[,...]] [-M path] [-L locale] [-C file] name ... +Each manual page has a short description available within it. whatis searches the manual page names and +displays the manual page descriptions of any name matched. +sary to quote the name or escape (\) the special characters to stop the shell from interpreting them. +index databases are used during the search, and are updated by the mandb program. Depending on your +pages have been installed. To produce an old style text whatis database from the relative index data‐ +base, issue the command: +% +dnssec-importkey - import DNSKEY records from external systems so they can be managed +dnssec-importkey [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] [-D date/offset] +[-D sync date/offset] [-h] [-v level] [-V] {keyfile} +dnssec-importkey {-f filename} [-K directory] [-L ttl] [-P date/offset] [-P sync date/offset] +[-D date/offset] [-D sync date/offset] [-h] [-v level] [-V] [dnsname] +dnssec-importkey reads a public DNSKEY record and generates a pair of .key/.private files. The DNSKEY +.private files will be generated. +The newly-created .private file does not contain private key data, and cannot be used for signing. +However, having a .private file makes it possible to set publication (-P) and deletion (-D) times for the +% +logname - print user's login name +logname [OPTION] +Print the name of the current user. +--help display this help and exit +--version +output version information and exit +Written by FIXME: unknown. +REPORTING BUGS +% +cat - concatenate files and print on the standard output +cat [OPTION]... [FILE]... +Concatenate FILE(s) to standard output. +With no FILE, or when FILE is -, read standard input. +-A, --show-all +equivalent to -vET +-b, --number-nonblank +number nonempty output lines, overrides -n +-e equivalent to -vE +% +openvt - start a program on a new virtual terminal (VT). +openvt will find the first available VT, and run on it the given command with the given command options, +standard input, output and error are directed to that terminal. The current search path ($PATH) is used +to find the requested command. If no command is specified then the environment variable $SHELL is used. +-c, --console=VTNUMBER +plied VT for this to work; +-f, --force +Force opening a VT without checking whether it is already in use; +% +msgmerge - merge message catalog and template +msgmerge [OPTION] def.po ref.pot +Merges two Uniforum style .po files together. The def.po file is an existing PO file with translations +which will be taken over to the newly created file as long as they still match; comments will be pre‐ +served, but extracted comments and file positions will be discarded. The ref.pot file is the last cre‐ +ated PO file with up-to-date source references but old translations, or a PO Template file (generally +created by xgettext); any translations or comments in the file will be discarded, however dot comments +and file positions will be preserved. Where an exact match cannot be found, fuzzy matching is used to +produce better results. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +tc - show / manipulate traffic control settings +dle qdisc-id ] qdisc [ qdisc specific parameters ] +qdisc [ qdisc specific parameters ] +protocol prio priority filtertype [ filtertype specific parameters ] flowid flow-id +% +systemd-inhibit - Execute a program with an inhibition lock taken +lock will be acquired before the specified command line is executed and released afterwards. +being recorded, or similar operations that should not be interrupted. +% +thin_trim - Issue discard requests for free pool space (offline tool). +thin_trim [options] {device|file} +thin_trim sends discard requests to the pool device for unprovisioned areas. +--pool-inactive +Indicates you are aware the pool should be inactive. Suppresses a warning message and prompt. +-h, --help +Print help and exit. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +users - print the user names of users currently logged in to the current host +users [OPTION]... [FILE] +Output who is currently logged in according to FILE. If FILE is not specified, use /var/run/utmp. +/var/log/wtmp as FILE is common. +--help display this help and exit +--version +output version information and exit +Written by Joseph Arceneaux and David MacKenzie. +% +nsenter - run program with namespaces of other processes +nsenter [options] [program [arguments]] +Enters the namespaces of one or more other processes and then executes the specified program. Enterable +namespaces are: +mount namespace +Mounting and unmounting filesystems will not affect the rest of the system (CLONE_NEWNS flag), +except for filesystems which are explicitly marked as shared (with mount --make-shared; see /proc +/self/mountinfo for the shared flag). +UTS namespace +Setting hostname or domainname will not affect the rest of the system. (CLONE_NEWUTS flag) +% +tion to check how many free blocks are present as contiguous and aligned free space. The percentage of +contiguous free blocks of size and of alignment chunk_kb is reported. It also displays the minimum/maxi‐ +tion can be used to gauge the level of free space fragmentation in the filesystem. +-c chunk_kb +available in units of kilobytes (Kb). The chunk size must be a power of two and be larger than +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +cache_repair - repair cache binary metadata from device/file to device/file +cache_repair [options] -i {device|file} -o {device|file} +cache_repair reads binary cache metadata created by the respective device-mapper target from one device +or file , repairs it and writes it to another device or file. If written to a metadata device , the +metadata can be processed by the device-mapper target. +-i, --input {device|file} +Input file or device with binary metadata. +-o, --output {device|file} +Output file or device for repaired binary metadata. If a file is used then it must be preallo‐ +% +GNU Parted - a partition manipulation program +parted [options] [device [command [options...]...]] +parted is a program to manipulate disk partitions. It supports multiple partition table formats, includ‐ +ing MS-DOS and GPT. It is useful for creating space for new operating systems, reorganising disk usage, +and copying data to new hard disks. +Info format. +-h, --help +displays a help message +% +dig - DNS lookup utility +dig [@server] [-b address] [-c class] [-f filename] [-k filename] [-m] [-p port#] [-q name] [-t type] +dig [-h] +dig [global-queryopt...] [query...] +dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS +lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS +administrators use dig to troubleshoot DNS problems because of its flexibility, ease of use and clarity +of output. Other lookup tools tend to have less functionality than dig. +Although dig is normally used with command-line arguments, it also has a batch mode of operation for +% +dmsetup — low level logical volume management +dmsetup clear device_name +dmsetup create device_name [-u|--uuid uuid] [--addnodeoncreate|--addnodeonresume] [-n|--notable|--table +{table|table_file}] [--readahead {[+]sectors|auto|none}] +dmsetup deps [-o options] [device_name] +dmsetup help [-c|-C|--columns] +dmsetup info [device_name] +dmsetup info -c|-C|--columns [--count count] [--interval seconds] [--nameprefixes] [--noheadings] [-o +fields] [-O|--sort sort_fields] [--separator separator] [device_name] +dmsetup load device_name [--table {table|table_file}] +dmsetup ls [--target target_type] [--exec command] [--tree] [-o options] +dmsetup mangle [device_name] +dmsetup message device_name sector message +dmsetup mknodes [device_name] +dmsetup reload device_name [--table {table|table_file}] +% +mv - move (rename) files +mv [OPTION]... [-T] SOURCE DEST +mv [OPTION]... SOURCE... DIRECTORY +mv [OPTION]... -t DIRECTORY SOURCE... +Rename SOURCE to DEST, or move SOURCE(s) to DIRECTORY. +Mandatory arguments to long options are mandatory for short options too. +--backup[=CONTROL] +make a backup of each existing destination file +-b like --backup but does not accept an argument +% +grub-reboot - set the default boot entry for GRUB, for the next boot only +grub-reboot [OPTION] MENU_ENTRY +Set the default boot menu entry for GRUB, for the next boot only. +-h, --help +print this message and exit +-V, --version +print the version information and exit +--boot-directory=DIR +expect GRUB images under the directory DIR/grub instead of the /boot/grub directory +% +pldd - display dynamic shared objects linked into a process +pldd pid +pldd option +The pldd command displays a list of the dynamic shared objects that are linked into the process with the +-?, --help +Display program help message. +--usage +Display a short usage message. +% +ldns-zsplit - split up a zone file +-n NUMBER +Split after NUMBER RRs, ldns-zsplit will not split in the middle of an RRs. +Each part is saved with a numerical suffix, starting with .000. The largest suffix is thus .999. +-o ORIGIN +use ORIGIN as origin when reading the zonefile. +-z Sort the zone before splitting. +% +gsettings - GSettings configuration tool +gsettings get SCHEMA [:PATH] KEY +gsettings monitor SCHEMA [:PATH] [KEY] +gsettings writable SCHEMA [:PATH] KEY +gsettings range SCHEMA [:PATH] KEY +gsettings describe SCHEMA [:PATH] KEY +gsettings set SCHEMA [:PATH] KEY VALUE +gsettings reset SCHEMA [:PATH] KEY +% +lsipc - show information on IPC facilities currently employed in the system +lsipc [options] +lsipc shows information on the inter-process communication facilities for which the calling process has +read access. +-i, --id id +bined with one of the three resource options: -m, -q or -s. It is possible to override the +default output format for this option with the --list, --raw, --json or --export option. +-g, --global +% +resize_reiserfs - resizer tool for the ReiserFS filesystem +resize_reiserfs [ -s [+|-]size[K|M|G] ] [ -j dev ] [ -fqv ] device +The resize_reiserfs tool resizes an unmounted reiserfs file system. It enlarges or shrinks an reiserfs +file system located on a device so that it will have size bytes or size=old_size +(-) size bytes if the + +or - prefix is used. If the -s option is not specified, the filesystem will be resized to fill the given +ter is given in kilo-, mega-, gigabytes respectively. +The resize_reiserfs program does not manipulate the size of the device. If you wish to enlarge a filesys‐ +titions, by deleting the partition and recreating it with a larger size (assuming there is free space +after the partition in question). Make sure you re-create it with the same starting disk cylinder as +% +ldns-keygen - generate a DNSSEC key pair +ldns-keygen [ OPTION ] DOMAIN +with the public DNSKEY, a .private file with the private keydata and a .ds with the DS record of the +DNSKEY record. +ldns-keygen can also be used to create symmetric keys (for TSIG) by selecting the appropriate algorithm: +file. +ldns-keygen prints the basename for the key files: K<name>+<alg>+<id> +% +-c, --iteration-count=NUM +-l, --buflen=NUM +Length of generated hash +-s, --salt=NUM +Length of salt +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +nameif - name network interfaces based on MAC addresses +nameif [-c configfile] [-s] +nameif [-c configfile] [-s] {interface macaddress} +nameif renames network interfaces based on mac addresses. When no arguments are given /etc/mactab is +read. Each line of it contains an interface name and a Ethernet MAC address. Comments are allowed start‐ +ing with #. Otherwise the interfaces specified on the command line are processed. nameif looks for the +interface with the given MAC address and renames it to the name given. +When the -s argument is given all error messages go to the syslog. +When the -c argument is given with a file name that file is read instead of /etc/mactab. +% +ranlib - generate index to archive. +ranlib [--plugin name] [-DhHvVt] archive +ranlib generates an index to the contents of an archive and stores it in the archive. The index lists +each symbol defined by a member of an archive that is a relocatable object file. +An archive with such an index speeds up linking to the library and allows routines in the library to call +each other without regard to their placement in the archive. +The GNU ranlib program is another form of GNU ar; running ranlib is completely equivalent to executing ar +-s. +% +jfs_fscklog - extract a JFS fsck service log into a file and/or format and display the extracted file +jfs_fscklog [ -d ] [ -e device ] [ -f output.file ] [ -p ] [ -V ] +jfs_fscklog with option -e device extracts the contents of either the most recent or immediately prior +(specified with option -p) JFS fsck service log from the specified device, and writes the output to a +If the -p option is used, the default file name is <pwd>fscklog.old. +jfs_fscklog with option -d formats and displays the contents of the extracted file. +jfs_fscklog with options -d and -e device extracts and displays the JFS fsck service log. +-d Format and display a previously extracted JFS fsck service log. +% +makeinfo [OPTION]... TEXINFO-FILE... +Translate Texinfo source documentation to various other formats, by default Info files suitable for read‐ +ing online with Emacs or standalone GNU Info. +not depend on the installed name. +General options: +--document-language=STR locale to use in translating Texinfo keywords +for the output document (default C). +--error-limit=NUM +% +psfgettable - extract the embedded Unicode character table from a console font +psfgettable fontfile [outfile] +psfgettable extracts the embedded Unicode character table from a .psf format console font into a human +the font is read from standard input. +% +iptables-xml — Convert iptables-save format to XML +iptables-xml [-c] [-v] +iptables-xml is used to convert the output of iptables-save into an easily manipulatable XML format to +STDOUT. Use I/O-redirection provided by your shell to write to a file. +-c, --combine +combine consecutive rules with the same matches but different targets. iptables does not currently +support more than one target per match, so this simulates that by collecting the targets from con‐ +secutive iptables rules into one action tag, but only when the rule matches are identical. Termi‐ +nating actions like RETURN, DROP, ACCEPT and QUEUE are not combined with subsequent targets. +-v, --verbose +Output xml comments containing the iptables line from which the XML is derived +% +fgconsole - print the number of the active VT. +fgconsole [--help|--version|--next-available] +If the active Virtual Terminal is /dev/ttyN, then prints N on standard output. +If the console is a serial console, then "serial" is printed instead. +--next-available +Will show the next unallocated virtual terminal. Normally 6 virtual terminals are allocated, with +% +whoami - print effective userid +whoami [OPTION]... +Print the user name associated with the current effective user ID. Same as id -un. +--help display this help and exit +--version +output version information and exit +Written by Richard Mlynarik. +REPORTING BUGS +% +firewall-offline-cmd - firewalld offline command line client +firewall-offline-cmd is an offline command line client of the firewalld daemon. It should be used only if +the firewalld service is not running. For example to migrate from system-config-firewall/lokkit or in the +install environment to configure firewall settings with kickstart. +Some lokkit options can not be automatically converted for firewalld, they will result in an error or +with custom rules, modules and masquerading. +Check the firewall configuration after using this tool. +% +pcretest - a program for testing Perl-compatible regular expressions. +pcretest [options] [input file [output file]] +pcretest was written as a test program for the PCRE regular expression library itself, but it can also be +gram; for details of the regular expressions themselves, see the pcrepattern documentation. For details +The input for pcretest is a sequence of regular expression patterns and strings to be matched, as +described below. The output shows the result of each match. Options on the command line and the patterns +control PCRE options and exactly what is output. +As PCRE has evolved, it has acquired many different features, and as a result, pcretest now has rather a +lot of obscure options for testing every possible feature. Some of these options are specifically +% +btrfs-select-super - overwrite primary superblock with a backup copy +btrfs-select-super -s number <device> +for example when write barriers were disabled during a power failure and not all superblocks were +written, or if the primary superblock is damaged, eg. accidentally overwritten. +The filesystem specified by device must not be mounted. +Prior to overwriting the primary superblock, please make sure that the backup copies are valid! +To dump a superblock use the btrfs inspect-internal dump-super command, or the obsolete command +btrfs-show-super. +% +localedef - compile locale definition files +localedef [options] outputpath +localedef --list-archive [options] +localedef --delete-from-archive [options] localename ... +localedef --add-to-archive [options] compiledpath +localedef --version +localedef --help +localedef --usage +The localedef program reads the indicated charmap and input files, compiles them to a binary form quickly +put in outputpath. +The outputpath argument is interpreted as follows: +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +raw - bind a Linux raw character device +raw /dev/raw/raw<N> <major> <minor> +raw /dev/raw/raw<N> /dev/<blockdev> +raw -q /dev/raw/raw<N> +raw -qa +kernel module later). +raw is used in two modes: it either sets raw device bindings, or it queries existing bindings. When set‐ +% +grolbp [ -l ] [ --landscape ] [ -v ] [ --version ] [ -cn ] [ --copies=numcopies ] [ -ppaper_size ] +[ --papersize=paper_size ] [ -oorientation ] [ --orientation=orientation ] [ -wwidth ] +[ --linewidth=width ] [ -Fdir ] [ --fontdir=dir ] [ -h ] [ --help ] [ files... ] +\D'R dh dv' +Draw a rule (i.e. a solid black rectangle), with one corner at the current position, and the diag‐ +onally opposite corner at the current position +(dh,dv). +% +vipw, vigr - edit the password or group file +vipw [options] +vigr [options] +vipw edits the password file after setting the appropriate locks, and does any necessary processing after +the password file is unlocked. If the password file is already locked for editing by another user, vipw +file in the same manner as vipw does the passwd file. +ENVIRONMENT +If the following environment variable exists, it will be utilized by vipw and vigr: +% +captest - a program to demonstrate capabilities +captest [ --drop-all | --drop-caps | --id ] [ --init-grp ] [ --lock ] [ --text ] +captest is a program that demonstrates and prints out the current process capabilities. Each option +prints the same report. It will output current capabilities. then it will try to access /etc/shadow +directly to show if that can be done. Then it creates a child process that attempts to read /etc/shadow +and outputs the results of that. Then it outputs the capabilities that a child process would have. +You can also apply file system capabilities to this program to study how they work. For example, filecap +/usr/bin/captest chown. Then run captest as a normal user. Another interesting test is to make captest +suid root so that you can see what the interaction is between root's credentials and capabilities. For +lation is possible. But do not leave this app setuid root after you are don testing so that an attacker +cannot take advantage of it. +% +rmmod - Simple program to remove a module from the Linux Kernel +rmmod [-f] [-s] [-v] [modulename] +rmmod is a trivial program to remove a module (when module unloading support is provided) from the +-v, --verbose +Print messages about what the program is doing. Usually rmmod prints messages only if something goes +wrong. +-f, --force +when the kernel was compiled. With this option, you can remove modules which are being used, or which +% +ipcs - show information on IPC facilities +ipcs [options] +ipcs shows information on the inter-process communication facilities for which the calling process has +read access. By default it shows information about all three resources: shared memory segments, message +queues, and semaphore arrays. +-i, --id id +bined with one of the three resource options: -m, -q or -s. +-h, --help +Display help text and exit. +% +routel - list routes with pretty output format +routef - flush routes +routel [tablenr [raw ip args...]] +routef +The routel script will list routes in a format that some might consider easier to interpret then the ip +route list equivalent. +The routef script does not take any arguments and will simply flush the routing table down the drain. +FILES +/usr/bin/routef +/usr/bin/routel +% +Mandatory arguments to long options are mandatory for short options too. +-c, --check +checks the syntax only +-o, --output=FILE +output file +-h, --help +% +uptime - Tell how long the system has been running. +uptime [options] +uptime gives a one line display of the following information. The current time, how long the system has +System load averages is the average number of processes that are either in a runnable or uninterruptable +state. A process in a runnable state is either using the CPU or waiting to use the CPU. A process in +uninterruptable state is waiting for some I/O access, eg waiting for disk. The averages are taken over +the three time intervals. Load averages are not normalized for the number of CPUs in a system, so a load +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +msguniq - unify duplicate translations in message catalog +msguniq [OPTION] [INPUTFILE] +Unifies duplicate translations in a translation catalog. Finds duplicate translations of the same mes‐ +sage ID. Such duplicates are invalid input for other programs like msgfmt, msgmerge or msgcat. By +default, duplicates are merged together. When using the --repeated option, only duplicates are output, +and all other messages are discarded. Comments and extracted comments will be cumulated, except that if +--use-first is specified, they will be taken from the first translation. File positions will be cumu‐ +lated. When using the --unique option, duplicates are discarded. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +% +newgrp - log in to a new group +newgrp [group] +logged in, and the current directory is unchanged, but calculations of access permissions to files are +performed with respect to the new group ID. +If no group is specified, the GID is changed to the login GID. +FILES +/etc/group +/etc/passwd +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +gnutls-cli - GnuTLS client +gnutls-cli [-flags] [-flag [value]] [--option-name[[=| ]value]] [hostname] +Simple client program to set up a TLS connection to some other computer. It sets up a TLS connection and +forwards data from the standard input to the secured socket and vice versa. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +% +xfs_repair - repair an XFS filesystem +xfs_repair [ -dfLnPv ] [ -m maxmem ] [ -c subopt=value ] [ -o subopt[=value] ] [ -t interval ] [ -l +logdev ] [ -r rtdev ] device +xfs_repair -V +the device argument which should be the device name of the disk partition or volume containing the +filesystem. If given the name of a block device, xfs_repair will attempt to find the raw device associ‐ +ated with the specified block device and will use the raw device instead. +inconsistent or corrupt. +% +addgnupghome - Create .gnupg home directories +If GnuPG is installed on a system with existing user accounts, it is sometimes required to populate the +GnuPG home directory with existing files. Especially a ‘trustlist.txt’ and a keybox with some initial +‘/etc/skel/.gnupg’ to the home directories of the accounts given on the command line. It takes care not +to overwrite existing GnuPG home directories. +addgnupghome is invoked by root as: +% +realpath - print the resolved path +realpath [OPTION]... FILE... +Print the resolved absolute file name; all but the last component must exist +-e, --canonicalize-existing +all components of the path must exist +-m, --canonicalize-missing +no path components need exist or be a directory +-L, --logical +resolve '..' components before symlinks +% +pvcreate — initialize a disk or partition for use by LVM +[-f[f]|--force [--force]] [-y|--yes] [--labelsector] [--bootloaderareasize size] [-M|--metadatatype type] +[--[pv]metadatacopies NumberOfCopies] [--metadatasize size] [--metadataignore {y|n}] [--dataalignment +alignment] [--dataalignmentoffset alignment_offset] [--restorefile file] [--norestorefile] [--reportfor‐ +mat {basic|json}] [--setphysicalvolumesize size] [-u|--uuid uuid] [-Z|--zero {y|n}] PhysicalVolume [Phys‐ +icalVolume...] +pvcreate initializes PhysicalVolume for later use by the Logical Volume Manager (LVM). Each PhysicalVol‐ +ume can be a disk partition, whole disk, meta device, or loopback file. For DOS disk partitions, the +first sector with: +% +stat - display file or file system status +stat [OPTION]... FILE... +Display file or file system status. +Mandatory arguments to long options are mandatory for short options too. +-L, --dereference +follow links +-f, --file-system +display file system status instead of file status +-c --format=FORMAT +% +lvmsar — LVM system activity reporter +lvmsar +% +nsupdate - Dynamic DNS update utility +nsupdate [-d] [-D] [-L level] [[-g] | [-o] | [-l] | [-y [hmac:]keyname:secret] | [-k keyfile]] +[-t timeout] [-u udptimeout] [-r udpretries] [-R randomdev] [-v] [-T] [-P] [-V] [filename] +allows resource records to be added or removed from a zone without manually editing the zone file. A +single update request can contain requests to add or remove more than one resource record. +Zones that are under dynamic control via nsupdate or a DHCP server should not be edited by hand. Manual +edits could conflict with dynamic updates and cause data to be lost. +The resource records that are dynamically added or removed with nsupdate have to be in the same zone. +record. +% +grub-mkimage - make a bootable image of GRUB +grub-mkimage [OPTION...] [OPTION]... [MODULES] +Make a bootable image of GRUB. +-c, --config=FILE +embed FILE as an early config +-C, --compression=(xz|none|auto) +choose the compression to use for core image +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +% +getcap - examine file capabilities +getcap [-v] [-r] [-h] filename [ ... ] +getcap displays the name and capabilities of each specified +-r enables recursive search. +-v enables to display all searched entries, even if it has no file-capabilities. +-h prints quick usage. +filename +One file per line. +% +firewall-config - firewalld GUI configuration tool +firewall-config is a GUI configuration tool for firewalld. +firewall-config does not support any special options. The only options that can be used are the general +options that Gtk uses for Gtk application initialization. For more information on these options, please +have a look at the runtime documentation for Gtk. +The following options are supported: +-h, --help +Prints a short help text and exists. +% +rtmon - listens to and monitors RTnetlink +rtmon [ options ] file FILE [ all | LISTofOBJECTS ] +rtmon listens on netlink socket and monitors routing table changes. +rtmon can be started before the first network configuration command is issued. For example if you +insert: +rtmon file /var/log/rtmon.log +in a startup script, you will be able to view the full history later. Certainly, it is possible to start +rtmon at any time. It prepends the history with the state snapshot dumped at the moment of starting. +% +mkfs.cramfs - make compressed ROM file system +mkfs.cramfs [options] directory file +Files on cramfs file systems are zlib-compressed one page at a time to allow random read access. The +metadata is not compressed, but is expressed in a terse representation that is more space-efficient than +conventional file systems. +The file system is intentionally read-only to simplify its design; random write access for compressed +files is difficult to implement. cramfs ships with a utility (mkcramfs) to pack files into new cramfs +images. +% +named-rrchecker - syntax checker for individual DNS resource records +named-rrchecker [-h] [-o origin] [-p] [-u] [-C] [-T] [-P] +named-rrchecker read a individual DNS resource record from standard input and checks if it is +syntactically correct. +The -h prints out the help menu. +The -o origin option specifies a origin to be used when interpreting the record. +The -p prints out the resulting record in canonical form. If there is no canonical form defined then the +record will be printed in unknown record format. +The -u prints out the resulting record in unknown record form. +% +ing, otherwise the expansion of the FILES. +together with all the previous files. +Operation modes: +% +pvchange — change attributes of a physical volume +[--deltag Tag] [--metadataignore {y|n}] [-h|-?|--help] [--reportformat {basic|json}] [-S|--select Selec‐ +tion] [-t|--test] [-v|--verbose] [-a|--all] [-x|--allocatable {y|n}] [-u|--uuid] [PhysicalVolumePath...] +pvchange allows you to change the allocation permissions of one or more physical volumes. +-a, --all +If PhysicalVolumePath is not specified on the command line all physical volumes are searched for +and used. +% +Generate Makefile.in for configure from Makefile.am. +Operation modes: +--help print this help, then exit +--version +print version number, then exit +-v, --verbose +verbosely list files processed +% +ctrlaltdel - set the function of the Ctrl-Alt-Del combination +ctrlaltdel hard|soft +Based on examination of the linux/kernel/reboot.c code, it is clear that there are two supported func‐ +tions that the Ctrl-Alt-Del sequence can perform. +is the default. +soft Make the kernel send the SIGINT (interrupt) signal to the init process (this is always the process +version that you are currently using. +% +file — determine file type +file [-bcdEhiklLNnprsvzZ0] [--apple] [--extension] [--mime-encoding] [--mime-type] [-e testname] +[-F separator] [-f namefile] [-m magicfiles] [-P name=value] file ... +file -C [-m magicfiles] +file [--help] +file tests each argument in an attempt to classify it. There are three sets of tests, performed in this +order: filesystem tests, magic tests, and language tests. The first test that succeeds causes the file +type to be printed. +The type printed will usually contain one of the words text (the file contains only printing characters and +a few common control characters and is probably safe to read on an ASCII terminal), executable (the file +% +firewall-cmd - firewalld command line client +firewall-cmd is the command line client of the firewalld daemon. It provides interface to manage runtime +and permanent configuration. +things can get changed in the runtime or permanent configuration. +The following options are supported: +General Options +-h, --help +% +Reads a PIC program as input; produces an image file (by default in Portable Network Graphics format) +images of mathematical formulae. +PIC is a rather expressive graphics minilanguage suitable for producing box-and-arrow diagrams of the +kind frequently used in technical papers and textbooks. The language is sufficiently flexible to be +quite useful for state charts, Petri-net diagrams, flow charts, simple circuit schematics, jumper lay‐ +outs, and other kinds of illustration involving repetitive uses of simple geometric forms and splines. +Because PIC descriptions are procedural and object-based, they are both compact and easy to modify. +The PIC language is fully documented in Making Pictures With GNU PIC, a document which is part of the +% +gpasswd - administer /etc/group and /etc/gshadow +gpasswd [option] group +The gpasswd command is used to administer /etc/group, and /etc/gshadow. Every group can have +administrators, members and a password. +System administrators can use the -A option to define group administrator(s) and the -M option to define +members. They have all rights of group administrators and members. +gpasswd called by a group administrator with a group name only prompts for the new password of the group. +the password. +% +fmt - simple optimal text formatter +fmt [-WIDTH] [OPTION]... [FILE]... +Reformat each paragraph in the FILE(s), writing to standard output. The option -WIDTH is an abbreviated +form of --width=DIGITS. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-c, --crown-margin +preserve indentation of first two lines +-p, --prefix=STRING +% +lvmdump [-a] [-c] [-d directory] [-h] [-l] [-m] [-p] [-s] [-u] +for submission along with a problem report. +The content of the tarball is as follows: +- dmsetup info +- table of currently running processes +- recent entries from /var/log/messages (containing system messages) +- complete lvm configuration and cache (content of /etc/lvm) +- list of device nodes present under /dev +- list of files present /sys/block +- list of files present /sys/devices/virtual/block +% +ldns-notify - notify DNS servers that updates are available +ldns-notify [options] -z zone servers +the master servers. It can perform TSIG signatures and it can add a SOA serial number of the updated +zone. If a server already has that serial number it will disregard the message. +-z zone +The zone that is updated. +-h Show usage and exit +-v Show the version and exit +% +mmroff - cross reference preprocessor +mmroff [ -x ] groff_arguments +mmroff is a simple preprocessor for groff, it is used for expanding cross references in mm, see +to do the real processing when the cross reference file is up to date. +isn't always needed to have accurate cross references and by using this option groff will only be +run once. +FILES +% +readelf - Displays information about ELF files. +readelf [-a|--all] +[-h|--file-header] +[-l|--program-headers|--segments] +[-S|--section-headers|--sections] +[-g|--section-groups] +[-t|--section-details] +[-e|--headers] +[-s|--syms|--symbols] +[--dyn-syms] +[-n|--notes] +[-r|--relocs] +[-u|--unwind] +[-d|--dynamic] +[-V|--version-info] +% +dumpkeys - dump keyboard translation tables +dumpkeys [ -hilfn -ccharset --help --short-info --long-info --numeric --full-table --funcs-only +--keys-only --compose-only --charset=charset ] +dumpkeys writes, to the standard output, the current contents of the keyboard driver's translation +Using the various options, the format of the output can be controlled and also other information from the +-h --help +Prints the program's version number and a short usage message to the program's standard error out‐ +put and exits. +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +numastat +numastat - Show per-NUMA-node memory statistics for processes and the operating system +numastat +numastat [-V] +numastat [<PID>|<pattern>...] +numastat [-c] [-m] [-n] [-p <PID>|<pattern>] [-s[<node>]] [-v] [-z] [<PID>|<pattern>...] +numastat with no command options or arguments at all, displays per-node NUMA hit and miss system statis‐ +previous long-standing numastat perl script, written by Andi Kleen. The default numastat statistics +shows per-node numbers (in units of pages of memory) in these categories: +% +jfs_logdump - dump a JFS formatted device's journal log +jfs_logdump [ -a ] device +jfs_logdump dumps the contents of the journal log from the specified JFS formatted device into output +file ./jfslog.dmp. +device is the special file name corresponding to the actual device from which the journal log will be +jfs_logdump must be run as root. +-a Dump the entire contents of the journal log instead of just the committed transactions since the +last synch point. +% +man - an interface to the on-line reference manuals +man [-C file] [-d] [-D] [--warnings[=warnings]] [-R encoding] [-L locale] [-m system[,...]] [-M path] [-S +list] [-e extension] [-i|-I] [--regex|--wildcard] [--names-only] [-a] [-u] [--no-subpages] [-P pager] [-r +prompt] [-7] [-E encoding] [--no-hyphenation] [--no-justification] [-p string] [-t] [-T[device]] +[-H[browser]] [-X[dpi]] [-Z] [[section] page ...] ... +man -k [apropos options] regexp ... +man -K [-w|-W] [-S list] [-i|-I] [--regex] [section] term ... +man -f [whatis options] page ... +man -l [-C file] [-d] [-D] [--warnings[=warnings]] [-R encoding] [-L locale] [-P pager] [-r prompt] [-7] +[-E encoding] [-p string] [-t] [-T[device]] [-H[browser]] [-X[dpi]] [-Z] file ... +man -w|-W [-C file] [-d] [-D] page ... +man -c [-C file] [-d] [-D] page ... +man [-?V] +% +scp — secure copy (remote file copy program) +needed for authentication. +file names containing ‘:’ as host specifiers. Copies between two remote hosts are also permitted. +The options are as follows: +% +xfs_quota - manage use of quota on XFS filesystems +xfs_quota [ -x ] [ -p prog ] [ -c cmd ] ... [ -d project ] ... [ -D projects_file ] [ -P projid_file ] [ +path ... ] +xfs_quota -V +xfs_quota is a utility for reporting and editing various aspects of filesystem quota. +The options to xfs_quota are: +gram exits. +-p prog Set the program name for prompts and some error messages, the default value is xfs_quota. +% +talk - Talk client +talk [OPTION...] person [ttyname] +Talk to another user. +-?, --help +give this help list +--usage +give a short usage message +-V, --version +print program version +% +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --decode +decode data +-i, --ignore-garbage +when decoding, ignore non-alphabet characters +% +addpart - tell the kernel about the existence of a partition +addpart device partition start length +addpart tells the Linux kernel about the existence of the specified partition. The command is a simple +wrapper around the "add partition" ioctl. +PARAMETERS +device The disk device. +partition +The partition number. +% +pvremove — remove a physical volume +[-f[f]|--force [--force]] [--reportformat {basic|json}] [-y|--yes] PhysicalVolume [PhysicalVolume...] +pvremove wipes the label on a device so that LVM will no longer recognise it as a physical volume. +-ff, --force --force +Force the removal of a physical volume belonging to an existing volume group. Normally vgre‐ +by some active logical volume. +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +sleep - delay for a specified amount of time +sleep NUMBER[SUFFIX]... +sleep OPTION +trary floating point number. Given two or more arguments, pause for the amount of time specified by the +sum of their values. +--help display this help and exit +--version +output version information and exit +% +vgcfgrestore — restore volume group descriptor area +vgcfgbackup. You can specify a backup file with --file. If no backup file is specified, the most recent +-l, --list +% +rtpr - replace backslashes with newlines. +rtpr is a trivial bash script which converts backslashes in standard input to newlines. It's sole purpose +is to be fed with input from ip when executed with it's --oneline flag. +ip --oneline address show | rtpr +Undo oneline converted ip-address output. +Stephen Hemminger <shemming@brocade.com> +% +useradd - create a new user or update default new user information +useradd [options] LOGIN +useradd -D +useradd -D [options] +When invoked without the -D option, the useradd command creates a new user account using the values +specified on the command line plus the default values from the system. Depending on command line options, +initial files. +By default, a group will also be created for the new user (see -g, -N, -U, and USERGROUPS_ENAB). +% +dnssec-keyfromlabel - DNSSEC key generation tool +[-D sync date/offset] [-E engine] [-f flag] [-G] [-I date/offset] [-i interval] [-k] +[-K directory] [-L ttl] [-n nametype] [-P date/offset] [-P sync date/offset] +[-p protocol] [-R date/offset] [-S key] [-t type] [-v level] [-V] [-y] {name} +dnssec-keyfromlabel generates a key pair of files that referencing a key object stored in a cryptographic +hardware service module (HSM). The private key file can be used for DNSSEC signing of zone data as if it +were a conventional signing key created by dnssec-keygen, but the key material is stored within the HSM, +and the actual signing takes place there. +key is being generated. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +chcpu - configure CPUs +chcpu -c|-d|-e|-g cpu-list +chcpu -p mode +chcpu -r|-h|-V +chcpu can modify the state of CPUs. It can enable or disable CPUs, scan for new CPUs, change the CPU +dispatching mode of the underlying hypervisor, and request CPUs from the hypervisor (configure) or return +CPUs to the hypervisor (deconfigure). +Some options have a cpu-list argument. Use this argument to specify a comma-separated list of CPUs. The +% +nologin - politely refuse a login +nologin [-V] [-h] +nologin displays a message that an account is not available and exits non-zero. It is intended as a +replacement shell field to deny login access to an account. +If the file /etc/nologin.txt exists, nologin displays its contents to the user instead of the default +message. +-h, --help +Display help text and exit. +% +pvs — report information about physical volumes +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--namepre‐ +fixes] [--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--rows] [--segments] +[--separator Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] [--unquoted] [-v|--verbose] [--ver‐ +sion] [PhysicalVolume [PhysicalVolume...]] +pvs produces formatted output about physical volumes. +% +agetty - alternative Linux getty +agetty [options] port [baud_rate...] [term] +agetty opens a tty port, prompts for a login name and invokes the /bin/login command. It is normally +agetty has several non-standard features that are useful for hardwired and for dial-in lines: +when it reads a login name. The program can handle 7-bit characters with even, odd, none or space +Control-U (kill); DEL and backspace (erase); carriage return and line feed (end of line). See +also the --erase-chars and --kill-chars options. +% +ldns-revoke - sets the revoke bit of a DNSKEY +ldns-revoke file +ldns-revoke is used to revoke a public DNSKEY RR. When run it will read file with a DNSKEY RR in it, +sets the revoke bit and write back the output to file . +-n Write the result to stdout instead of a file +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +ebtables [-t table ] -[ACDI] chain rule specification [match extensions] [watcher extensions] target +ebtables [-t table ] -P chain ACCEPT | DROP | RETURN +ebtables [-t table ] -F [chain] +ebtables [-t table ] -Z [chain] +ebtables [-t table ] -N chain [-P ACCEPT | DROP | RETURN] +ebtables [-t table ] -X [chain] +ebtables [-t table ] -E old-chain-name new-chain-name +ebtables [-t table ] --init-table +ebtables [-t table ] [--atomic-file file] --atomic-commit +ebtables [-t table ] [--atomic-file file] --atomic-init +ebtables [-t table ] [--atomic-file file] --atomic-save +% +yacc - GNU Project parser generator +yacc [OPTION]... FILE +information. +Written by Paul Eggert. +REPORTING BUGS +Report bugs to <bug-bison@gnu.org>. +% +systemd-analyze - Analyze system boot-up performance +% +dnssec-revoke - set the REVOKED bit on a DNSSEC key +dnssec-revoke [-hr] [-v level] [-V] [-K directory] [-E engine] [-f] [-R] {keyfile} +creates a new pair of key files containing the now-revoked key. +-h +Emit usage message and exit. +-K directory +Sets the directory in which the key files are to reside. +-r +% +lspci - list all PCI devices +lspci [options] +lspci is a utility for displaying information about PCI buses in the system and devices connected to +them. +By default, it shows a brief list of devices. Use the options described below to request either a more +verbose output or output intended for parsing by other programs. +If you are going to report bugs in PCI device drivers or in lspci itself, please include output of "lspci +-vvx" or even better "lspci -vvxxx" (however, see below for possible caveats). +Some parts of the output, especially in the highly verbose modes, are probably intelligible only to expe‐ +rienced PCI hackers. For exact definitions of the fields, please consult either the PCI specifications or +% +screen [ -options ] [ cmd [ args ] ] +screen -r [[pid.]tty[.host]] +screen -r sessionowner/[[pid.]tty[.host]] +Screen is a full-screen window manager that multiplexes a physical terminal between several processes +dards (e.g. insert/delete line and support for multiple character sets). There is a scrollback history +buffer for each virtual terminal and a copy-and-paste mechanism that allows moving text regions between +windows. +When screen is called, it creates a single window with a shell in it (or the specified command) and then +gets out of your way so that you can use the program as you normally would. Then, at any time, you can +% +kernel-install - Add and remove kernel and initramfs images to and from /boot +kernel-install is used to install and remove kernel and initramfs images to and from /boot. +kernel-install will execute the files located in the directory /usr/lib/kernel/install.d/ and the local +administration directory /etc/kernel/install.d/. All files are collectively sorted and executed in +lexical order, regardless of the directory in which they live. However, files with identical filenames +replace each other. Files in /etc/kernel/install.d/ take precedence over files with the same name in +if needed; a symbolic link in /etc/kernel/install.d/ with the same name as an executable in +/usr/lib/kernel/install.d/, pointing to /dev/null, disables the executable entirely. Executables must +have the extension ".install"; other extensions are ignored. +% +setterm - set terminal attributes +setterm [options] +setterm writes to standard output a character string that will invoke the specified terminal capabili‐ +ties. Where possible terminfo is consulted to find the string to use. Some options however (marked +minal type is "con" or "linux" the string that invokes the specified capabilities on the PC Minix virtual +console driver is output. Options that are not implemented by the terminal are ignored. +For boolean options (on or off), the default is on. +% +mapscrn - load screen output mapping table +mapscrn [-v] [-o map.orig] mapfile +The mapscrn command is obsolete - its function is now built-in into setfont. However, for backwards com‐ +patibility it is still available as a separate command. +The mapscrn command loads a user defined output character mapping table into the console driver. The con‐ +character set. When the -o option is given, the old map is saved in map.orig. +USE +There are two kinds of mapping tables: direct-to-font tables, that give a font position for each user +byte value, and user-to-unicode tables that give a unicode value for each user byte. The corresponding +% +lvcreate - create a logical volume in an existing volume group +lvcreate [-a|--activate [a][e|l|s]{y|n}] [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup +{y|n}] [-H|--cache] [--cachemode {passthrough|writeback|writethrough}] [--cachepolicy Policy] +[--cachepool CachePoolLogicalVolume] [--cachesettings Key=Value] [-c|--chunksize ChunkSize] [--command‐ +[--errorwhenfull {y|n}] [{-l|--extents LogicalExtentsNumber[%{FREE|PVS|VG}] | -L|--size LogicalVolume‐ +Size} [-i|--stripes Stripes [-I|--stripesize StripeSize]]] [-h|-?|--help] [-K|--ignoreactivationskip] +Mirrors [--corelog|--mirrorlog {disk|core|mirrored}] [--nosync] [-R|--regionsize MirrorLogRegionSize]] +[--monitor {y|n}] [-n|--name LogicalVolume] [--noudevsync] [-p|--permission {r|rw}] [-M|--persistent +{y|n}] [--poolmetadatasize MetadataVolumeSize] [--poolmetadataspare {y|n}] [--[raid]maxrecoveryrate Rate] +[--[raid]minrecoveryrate Rate] [-r|--readahead {ReadAheadSectors|auto|none}] [--reportformat +{basic|json}] [-k|--setactivationskip {y|n}] [-s|--snapshot] [-V|--virtualsize VirtualSize] [-t|--test] +[-T|--thin] [--thinpool ThinPoolLogicalVolume] [--type SegmentType] [-v|--verbose] [-W|--wipesignatures +{y|n}] [-Z|--zero {y|n}] [VolumeGroup | {ExternalOrigin|Origin|Pool}LogicalVolume +% +renice - alter priority of running processes +renice [-n] priority [-g|-p|-u] identifier... +renice alters the scheduling priority of one or more running processes. The first argument is the prior‐ +ity value to be used. The other arguments are interpreted as process IDs (by default), process group +IDs, user IDs, or user names. renice'ing a process group causes all processes in the process group to +have their scheduling priority altered. renice'ing a user causes all processes owned by the user to have +their scheduling priority altered. +-n, --priority priority +Specify the scheduling priority to be used for the process, process group, or user. Use of the +option -n or --priority is optional, but when used it must be the first argument. +% +eqn - format equations for troff or MathML +eqn [-rvCNR] [-d xy] [-T name] [-M dir] [-f F] [-s n] [-p n] [-m n] [files...] +eqn compiles descriptions of equations embedded within troff input files into commands that are under‐ +stood by troff. Normally, it should be invoked using the -e option of groff. The syntax is quite com‐ +patible with Unix eqn. The output of GNU eqn cannot be processed with Unix troff; it must be processed +with GNU troff. If no files are given on the command line, the standard input is read. A filename of - +causes the standard input to be read. +eqn searches for the file eqnrc in the directories given with the -M option first, then in +/usr/lib/groff/site-tmac, /usr/share/groff/site-tmac, and finally in the standard macro directory +option prevents this. +% +who - show who is logged on +Print information about users who are currently logged in. +-a, --all +same as -b -d --login -p -r -t -T -u +-b, --boot +time of last system boot +-d, --dead +print dead processes +% +vgconvert - convert volume group metadata format +tor] [--bootloaderareasize size] [-M|--metadatatype type] [--pvmetadatacopies NumberOfCopies] [--meta‐ +into the same space. +Examples +% +zgrep - search possibly compressed files for a regular expression +zgrep [ grep_options ] [ -e ] pattern filename... +Zgrep invokes grep on compressed or gzipped files. All options specified are passed directly to grep. +If no file is specified, then the standard input is decompressed if necessary and fed to grep. Otherwise +the given files are uncompressed if necessary and fed to grep. +If the GREP environment variable is set, zgrep uses it as the grep program to be invoked. +BUGS +The following grep options are not supported: --dereference-recursive (-R), --directories (-d), +% +fdisk - manipulate disk partition table +fdisk [options] device +fdisk -l [device...] +fdisk is a dialog-driven program for creation and manipulation of partition tables. It understands GPT, +MBR, Sun, SGI and BSD partition tables. +in the partition table, usually found in sector 0 of the disk. (In the BSD world one talks about `disk +slices' and a `disklabel'.) +All partitioning is driven by device I/O limits (the topology) by default. fdisk is able to optimize the +% +truncate - shrink or extend the size of a file to the specified size +truncate OPTION... FILE... +Shrink or extend the size of each FILE to the specified size +A FILE argument that does not exist is created. +If a FILE is larger than the specified size, the extra data is lost. If a FILE is shorter, it is +extended and the extended part (hole) reads as zero bytes. +Mandatory arguments to long options are mandatory for short options too. +-c, --no-create +do not create any files +% +gpinyin - Chinese European-like writing within groff +gpinyin [-] [--] [ filespec ....] +gpinyin -h|--help +gpinyin -v|--version +groff(7) files. +Breaking Options +An option is breaking, when the program just writes the information that was asked for and then stops. +All other arguments will be ignored by that. The breaking options are here +-h | --help +% +neqn - format equations for ascii output +neqn [eqn options] +device. +for very simple input). +% +rndc-confgen - rndc key generation tool +rndc-confgen [-a] [-A algorithm] [-b keysize] [-c keyfile] [-h] [-k keyname] [-p port] [-r randomfile] +[-s address] [-t chrootdir] [-u user] +rndc-confgen generates configuration files for rndc. It can be used as a convenient alternative to +writing the rndc.conf file and the corresponding controls and key statements in named.conf by hand. +Alternatively, it can be run with the -a option to set up a rndc.key file and avoid the need for a +rndc.conf file and a controls statement altogether. +-a +specified as when BIND was built) that is read by both rndc and named on startup. The rndc.key file +defines a default command channel and authentication key allowing rndc to communicate with named on +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +pathchk - check whether file names are valid or portable +Diagnose invalid or unportable file names. +-p check for most POSIX systems +-P check for empty names and leading "-" +--portability +check for all POSIX systems (equivalent to -p -P) +--help display this help and exit +% +-b print the blocks which are reserved as bad in the filesystem. +-o superblock=superblock +by a filesystem wizard who is examining the remains of a very badly corrupted filesystem. +% +arp - manipulate the system ARP cache +arp [-vn] [-H type] [-i if] [-ae] [hostname] +arp [-v] [-i if] -d hostname [pub] +arp [-v] [-H type] [-i if] -s hostname hw_addr [temp] +arp [-v] [-H type] [-i if] -s hostname hw_addr [netmask nm] pub +arp [-v] [-H type] [-i if] -Ds hostname ifname [netmask nm] pub +arp [-vnD] [-H type] [-i if] -f [filename] +% +nl-qdisc-{add|list|delete} - Manage queueing disciplines +The nl-qdisc tools allow to manage and configure queueing disciplines (qdiscs) in the kernel. +-h or --help +Print help text to console and exit. +-v or --version +% +iptables [-t table] {-A|-C|-D} chain rule-specification +ip6tables [-t table] {-A|-C|-D} chain rule-specification +iptables [-t table] -I chain [rulenum] rule-specification +iptables [-t table] -R chain rulenum rule-specification +iptables [-t table] -D chain rulenum +iptables [-t table] -S [chain [rulenum]] +iptables [-t table] {-F|-L|-Z} [chain [rulenum]] [options...] +% +false - do nothing, unsuccessfully +false [ignored command line arguments] +false OPTION +Exit with a status code indicating failure. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +objcopy - copy and translate object files +objcopy [-F bfdname|--target=bfdname] +[-I bfdname|--input-target=bfdname] +[-O bfdname|--output-target=bfdname] +[-B bfdarch|--binary-architecture=bfdarch] +[-S|--strip-all] +[-g|--strip-debug] +[-K symbolname|--keep-symbol=symbolname] +[-N symbolname|--strip-symbol=symbolname] +[--strip-unneeded-symbol=symbolname] +[-G symbolname|--keep-global-symbol=symbolname] +[--localize-hidden] +[-L symbolname|--localize-symbol=symbolname] +[--globalize-symbol=symbolname] +[-W symbolname|--weaken-symbol=symbolname] +% +Set up images to boot from DEVICE. +You should not normally run this program directly. Use grub-install instead. +-a, --allow-floppy +make the drive also bootable as floppy (default for fdX devices). May break on some BIOSes. +-b, --boot-image=FILE +use FILE as the boot image [default=boot.img] +-c, --core-image=FILE +% +xtotroff - convert X font metrics into GNU troff font metrics +xtotroff [ -rresolution ] [ -spoint-size ] [ -v ] FontMap +fonts listed. Each line in FontMap consists of GNU troff font name and an X font name (XLFD) pattern, +separated by whitespace. Example: +The wildcards in the patterns are filled with the arguments to the -r and -s switches. If a font name is +still ambiguous, xtotroff aborts. +It is possible to have whitespace between a command line option and its parameter. +% +lvm [command|file] +If lvm is invoked with no arguments it presents a readline prompt (assuming it was compiled with readline +If lvm is invoked with argv[0] set to the name of a specific LVM command (for example by using a hard or +soft link) it acts as that command. +On invocation, lvm requires that only the standard file descriptors stdin, stdout and stderr are avail‐ +% +sulogin - single-user login +sulogin [options] [tty] +sulogin is invoked by init when the system goes into single-user mode. +The user is prompted: +Give root password for system maintenance +(or type Control-D for normal startup): +If the root account is locked and --force is specified, no password is required. +sulogin will be connected to the current terminal, or to the optional tty device that can be specified on +the command line (typically /dev/console). +% +mail -h | --help +mail [-BDdEFintv~] [-A account] [-a attachment] [-b bcc-addr] [-c cc-addr] [-q quote-file] [-r from-addr] +[-S variable[=value]] [-s subject] [-X cmd] [-.] to-addr ... [-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-X cmd] -f [file] +[-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-u user] [-X cmd] +[-- mta-option ...] +% +curl-config - Get information about a libcurl installation +curl-config [options] +curl-config displays information about the curl and libcurl installation. +--ca Displays the built-in path to the CA cert bundle this libcurl uses. +--cc Displays the compiler used to build libcurl. +--cflags +Set of compiler options (CFLAGS) to use when compiling files that use libcurl. Currently that is +only the include path to the curl include files. +% +grn - groff preprocessor for gremlin files +grn [ -Cv ] [ -Tdev ] [ -Mdir ] [ -Fdir ] [ file... ] +grn is a preprocessor for including gremlin pictures in groff input. grn writes to standard output, pro‐ +cessing only input lines between two that start with .GS and .GE. Those lines must contain grn commands +(see below). These commands request a gremlin file, and the picture in that file is converted and placed +justify the whole gremlin picture (default justification is center). If no file is mentioned, the stan‐ +dard input is read. At the end of the picture, the position on the page is the bottom of the gremlin +picture. If the grn entry is ended with .GF instead of .GE, the position is left at the top of the pic‐ +ture. +Please note that currently only the -me macro package has support for .GS, .GE, and .GF. +% +lvreduce — reduce the size of a logical volume +[-v|--verbose] [--version] [-f|--force] [--noudevsync] {-l|--extents [-]LogicalExtentsNum‐ +ber[%{VG|LV|FREE|ORIGIN}] | -L|--size [-]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [-n|--nofsck] [--reportfor‐ +lvreduce allows you to reduce the size of a logical volume. Be careful when reducing a logical volume's +size, because data in the reduced part is lost!!! +You should therefore ensure that any filesystem on the volume is resized before running lvreduce so that +the extents that are to be removed are not in use. +Sizes will be rounded if necessary - for example, the volume size must be an exact number of extents and +the size of a striped segment must be a multiple of the number of stripes. +% +grub-glue-efi - generate a fat binary for EFI +-o, --output=FILE +% +lkbib - search bibliographic databases +lkbib [ -v ] [ -ifields ] [ -pfilename ] [ -tn ] key... +lkbib searches bibliographic databases for references that contain the keys key... and prints any refer‐ +ences found on the standard output. lkbib will search any databases given by -p options, and then a +default database. The default database is taken from the REFER environment variable if it is set, other‐ +wise it is /usr/dict/papers/Ind. For each database filename to be searched, if an index filename.i cre‐ +It is possible to have whitespace between a command line option and its parameter. +-v Print the version number. +% +should give you access to the complete manual. +% +delpart - tell the kernel to forget about a partition +delpart device partition +delpart asks the Linux kernel to forget about the specified partition (a number) on the specified device. +The command is a simple wrapper around the "del partition" ioctl. +AVAILABILITY +The delpart command is part of the util-linux package and is available from ftp://ftp.ker‐ +nel.org/pub/linux/utils/util-linux/. +% +zramctl - set up and control zram devices +Get info: +zramctl [options] +Reset zram: +zramctl -r zramdev... +Print name of first unused zram device: +zramctl -f +Set up a zram device: +% +gpg-connect-agent - Communicate with a running agent +gpg-connect-agent [options][commands] +The gpg-connect-agent is a utility to communicate with a running gpg-agent. It is useful to check out +the commands gpg-agent provides using the Assuan interface. It might also be useful for scripting simple +applications. Input is expected at stdin and out put gets printed to stdout. +It is very similar to running gpg-agent in server mode; but here we connect to a running instance. +-v +--verbose +Output additional information while running. +% +gxditview - display groff intermediate output files +gxditview [-toolkitoption ...] [-option ...] [filename] +several ways to use gxditview. +gxditview filename. If filename is -, gxditview will read the standard input; filename cannot be omit‐ +ted. The groff intermediate output is different for all devices. gxditview can view it for all devices, +but the quality is device dependent. +The best results are achieved with the X* devices for groff's option -T. There are four X* devices: +% +wdctl - show hardware watchdog status +wdctl [options] [device...] +Show hardware watchdog status. The default device is /dev/watchdog. If more than one device is speci‐ +fied then the output is separated by one blank line. +-f, --flags list +Print only the specified flags. +-F, --noflags +Do not print information about flags. +% +grub-mkstandalone - make a memdisk-based GRUB image +grub-mkstandalone [OPTION...] [OPTION] SOURCE... +Generate a standalone image (containing all modules) in the selected format +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +nslookup - query Internet name servers interactively +nslookup [-option] [name | -] [server] +Nslookup is a program to query Internet domain name servers. Nslookup has two modes: interactive and +non-interactive. Interactive mode allows the user to query name servers for information about various +hosts and domains or to print a list of hosts in a domain. Non-interactive mode is used to print just the +name and requested information for a host or domain. +% +grub-render-label - generate a .disk_label for Apple Macs. +Render Apple .disk_label. +-b, --bgcolor=COLOR +use COLOR for background +-c, --color=COLOR +use COLOR for text +-f, --font=FILE +% +ar - create, modify, and extract from archives +The GNU ar program creates, modifies, and extracts from archives. An archive is a single file holding a +collection of other files in a structure that makes it possible to retrieve the original individual files +(called members of the archive). +The original files' contents, mode (permissions), timestamp, owner, and group are preserved in the +archive, and can be restored on extraction. +GNU ar can maintain archives whose members have names of any length; however, depending on how ar is +% +btrfs-image - create/restore an image of the filesystem +btrfs-image [options] <source> <target> +btrfs-image is used to create an image of a btrfs filesystem. All data will be zeroed, but metadata and +the like is preserved. Mainly used for debugging purposes. +In the dump mode, source is the btrfs device/file and target is the output file (use - for stdout). +In the restore mode (option -r), source is the dumped image and target is the btrfs device/file. +-r +primary device, so that file system can be restored by running tree log reply if possible. To restore +% +jfs_mkfs - create a JFS formatted partition +jfs_mkfs [options] device [ blocks ] +jfs_mkfs is used to create (format) a JFS partition. jfs_mkfs must be run as root. +system and/or JFS journal will be created. blocks is the number of blocks to be used for the file sys‐ +tem. If omitted, jfs_mkfs automatically figures the file system size. +WARNING +jfs_mkfs will destroy all data on the specified device! +% +vim - Vi IMproved, a programmers text editor +vim [options] [file ..] +vim [options] - +vim [options] -t tag +vim [options] -q [errorfile] +ex +view +gvim gview evim eview +rvim rview rgvim rgview +Vim is a text editor that is upwards compatible to Vi. It can be used to edit all kinds of plain text. +It is especially useful for editing programs. +% +btrfs-inspect-internal - query various internal information +btrfs inspect-internal <subcommand> <args> +simple UI to an ioctl or a more complex query that assembles the result from several internal structures. +The latter usually requires calls to privileged ioctls. +dump-super [options] <device> [device...] +(replaces the standalone tool btrfs-show-super) +Show btrfs superblock information stored on given devices in textual form. By default the first +superblock is printed, more details about all copies or additional backup data can be printed. +% +vdir - list directory contents +vdir [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +ul - do underlining +ul [options] [file...] +ul reads the named files (or standard input if none are given) and translates occurrences of underscores +to the sequence which indicates underlining for the terminal in use, as specified by the environment +variable TERM. The terminfo database is read to determine the appropriate sequences for underlining. If +the terminal is incapable of underlining but is capable of a standout mode, then that is used instead. +terminal cannot underline, underlining is ignored. +-i, --indicated +Underlining is indicated by a separate line containing appropriate dashes `-'; this is useful when +you want to look at the underlining which is present in an nroff output stream on a crt-terminal. +% +systool - view system device information by bus, class, and topology +systool [options [device]] +Calling systool without parameters will present all available bus types, device classes, and root +devices. +When device is supplied, the information reqested by options is shown only for the specified device, oth‐ +erwise all present devices are displayed. +systool uses APIs provided by libsysfs to gather information. systool runs only on Linux systems running +-a Show attributes of the requested resource +% +udevadm - udev management tool +udevadm [--debug] [--version] [--help] +udevadm info options +udevadm trigger [options] +udevadm settle [options] +udevadm control command +udevadm monitor [options] +udevadm test [options] devpath +% +true - do nothing, successfully +true [ignored command line arguments] +true OPTION +Exit with a status code indicating success. +--help display this help and exit +--version +output version information and exit +Please refer to your shell's documentation for details about the options it supports. +% +loadunimap - load the kernel unicode-to-font mapping table +loadunimap [ -C console ] [ -o oldmap ] [ map ] +The loadunimap command is obsolete - its function is now built-in into setfont. However, for backwards +compatibility it is still available as a separate command. +The program loadunimap loads the specified map in the kernel unicode-to-font mapping table. If no map is +given def is assumed. The default extension (that can be omitted) is .uni. +If the -o oldmap option is given, the old map is saved in the file specified. +Usually one does not call loadunimap directly - its function is also built into setfont. +% +keytab. +operation must be one of the following: +list Lists the keys in a keytab showing version number and principal name. +change Uses the kadmin protocol to update the keys in the Kerberos database to new randomly-generated +keys, and updates the keys in the keytab to match. If a key's version number doesn't match the +version number stored in the Kerberos server's database, then the operation will fail. Old keys +are retained in the keytab so that existing tickets continue to work. If the -i flag is given, +% +hostid - print the numeric identifier for the current host +hostid [OPTION] +Print the numeric identifier (in hexadecimal) for the current host. +--help display this help and exit +--version +output version information and exit +Written by Jim Meyering. +REPORTING BUGS +% +kdestroy - destroy Kerberos tickets +kdestroy [-A] [-q] [-c cache_name] +The kdestroy utility destroys the user's active Kerberos authorization tickets by overwriting and delet‐ +ing the credentials cache that contains them. If the credentials cache is not specified, the default +credentials cache is destroyed. +-A Destroys all caches in the collection, if a cache collection is available. +-q Run quietly. Normally kdestroy beeps if it fails to destroy the user's tickets. The -q flag sup‐ +presses this behavior. +-c cache_name +% +sysctl - configure kernel parameters at runtime +sysctl [options] [variable[=value]] [...] +sysctl -p [file or regexp] [...] +sysctl is used to modify kernel parameters at runtime. The parameters available are those listed under +/proc/sys/. Procfs is required for sysctl support in Linux. You can use sysctl to both read and write +sysctl data. +PARAMETERS +variable +The name of a key to read from. An example is kernel.ostype. The '/' separator is also accepted +in place of a '.'. +variable=value +% +ldns-testns - simple fake nameserver tool +ldns-testns [ OPTION ] datafile +ldns-testns can be used to provide answers to DNS queries for testing. The answers are premade, and can +be tailored to testing needs. The answers can be wildly invalid or unparseable. +ldns-testns is not meant for production use. +% +ipcrm - remove certain IPC resources +ipcrm [options] +ipcrm {shm|msg|sem} id... +ipcrm removes System V interprocess communication (IPC) objects and associated data structures from the +system. In order to delete such objects, you must be superuser, or the creator or owner of the object. +System V IPC objects are of three types: shared memory, message queues, and semaphores. Deletion of a +message queue or semaphore object is immediate (regardless of whether any process still holds an IPC +identifier for the object). A shared memory object is only removed after all currently attached pro‐ +Two syntax styles are supported. The old Linux historical syntax specifies a three-letter keyword indi‐ +% +ptx - produce a permuted index of file contents +ptx [OPTION]... [INPUT]... (without -G) +ptx -G [OPTION]... [INPUT [OUTPUT]] +Output a permuted index, including context, of the words in the input files. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-A, --auto-reference +output automatically generated references +-G, --traditional +% +awk — pattern scanning and processing language +awk [−F sepstring] [−v assignment]... program [argument...] +awk [−F sepstring] −f progfile [−f progfile]... [−v assignment]... +[argument...] +The awk utility shall execute programs written in the awk programming language, which is specialized for +textual data manipulation. An awk program is a sequence of patterns and corresponding actions. When input +is read that matches a pattern, the action associated with that pattern is carried out. +% +ln - make links between files +ate hard links by default, symbolic links with --symbolic. By default, each destination (name of new +link) should not already exist. When creating hard links, each TARGET must exist. Symbolic links can +hold arbitrary text; if later resolved, a relative link is interpreted in relation to its parent direc‐ +tory. +Mandatory arguments to long options are mandatory for short options too. +% +dbus-test-tool - D-Bus traffic generator and test tool +--empty] [--payload=S | --stdin | --message-stdin | --random-size] +dbus-test-tool is a multi-purpose tool for debugging and profiling D-Bus. +dbus-test-tool black-hole connects to D-Bus, optionally requests a name, then does not reply to messages. +It normally reads and discards messages from its D-Bus socket, but can be configured to sleep forever +without reading. +% +switch_root - switch to another filesystem as the root of the mount tree +switch_root [-hV] +switch_root newroot init [arg...] +switch_root moves already mounted /proc, /dev, /sys and /run to newroot and makes newroot the new root +filesystem and starts init process. +WARNING: switch_root removes recursively all files and directories on the current root filesystem. +-h, --help +Display help text and exit. +% +isc-config.sh - Get information about the installed version of ISC BIND +isc-config.sh [--cflags] [--exec-prefix] [--libs] [--prefix] [--version] [libraries...] +isc-config.sh prints information related to the installed version of ISC BIND, such as the compiler and +linker flags required to compile and link programs that use ISC BIND libraries. +The optional libraries are used to report specific details for compiling and linking for the listed +listed on the command line. (Some libraries require other libraries, so are implied.) +--cflags +Prints the compiler command line options required to compile files that use ISC BIND. Use the +libraries command line argument(s) to print additional specific flags to pass to the C compiler. +% +xfs_bmap - print block mapping for an XFS file +xfs_bmap [ -adlpv ] [ -n num_extents ] file +xfs_bmap -V +xfs_bmap prints the map of disk blocks used by files in an XFS filesystem. The map lists each extent +used by the file, as well as regions in the file that do not have any corresponding blocks (holes). Each +line of the listings takes the following form: +extent: [startoffset..endoffset]: startblock..endblock +Holes are marked by replacing the startblock..endblock with hole. All the file offsets and disk blocks +% +c99 — compile standard C programs +c99 [options...] pathname [[pathname] [−I directory] +[−L directory] [−l library]]... +The c99 utility is an interface to the standard C compilation system; it shall accept source code con‐ +forming to the ISO C standard. The system conceptually consists of a compiler and link editor. The input +files referenced by pathname operands and −l option-arguments shall be compiled and linked to produce an +executable file. (It is unspecified whether the linking occurs entirely within the operation of c99; some +% +lvmconfig, lvm dumpconfig, lvm config — Display LVM configuration +lvmconfig [-f|--file Filename] [--type {current|default|diff|full|list|missing|new|profilable|profilable- +command|profilable-metadata}] [--atversion Version] [--sinceversion Version] [--ignoreadvanced] +[--ignoreunsupported] [--ignorelocal] [-l|--list] [--config ConfigurationString] [--commandprofile Pro‐ +[--showunsupported] [--validate] [--withsummary] [--withcomments] [--withspaces] [--withversions] [Con‐ +figurationNode...] +lvmconfig produces formatted output from the LVM configuration tree. The command was added in release +-f, --file Filename +Send output to a file named 'filename'. +% +ntp-wait - Wait for ntpd to stabilize the system clock +ntp-wait [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +the boot sequence until after ntpd -g has set the time. +-n number, --tries=number +% +mtr - a network diagnostic tool +[--raw] [--csv] [--json] [--split] [--no-dns] [--show-ips] [-o FIELDS] [-y IPINFO] [--aslookup] +[-i INTERVAL] [-c COUNT] [-s PACKETSIZE] [-B BITPATTERN] [-G GRACEPERIOD] [-Q TOS] [--mpls] [-a ADDRESS] +[-f FIRST-TTL] [-m MAX-TTL] [-U MAX-UNKNOWN] [--udp] [--tcp] [-P PORT] [-L LOCALPORT] [-Z TIMEOUT] +mtr combines the functionality of the traceroute and ping programs in a single network diagnostic tool. +ing packets with purposely low TTLs. It continues to send packets with low TTL, noting the response time +a bad (or simply overloaded) link. +% +runcon - run command with specified security context +by one or more of LEVEL, ROLE, TYPE, and USER. +If none of -c, -t, -u, -r, or -l, is specified, the first argument is used as the complete context. Any +rent security context. +% +reiserfstune - The tunning tool for the ReiserFS filesystem. +reiserfstune [ -f ] [ -h | --help ] [ -j | --journal-device FILE ] [ --no-journal-available ] [ --jour‐ +nal-new-device FILE ] [ --make-journal-standard ] [ -s | --journal-new-size N ] [ -o | --journal-new-off‐ +set N ] [ -t | --max-transaction-size N ] [ -b | --add-badblocks file ] [ -B | --badblocks file ] [ -u | +--uuid UUID ] [ -l | --label LABEL ] [ -c | --check-interval interval-in-days ] [ -C | --time-last- +checked timestamp ] [ -m | --max-mnt-count count ] [ -M | --mnt-count count ] device +reiserfstune is used for tuning the ReiserFS. It can change two journal parameters (the journal size and +the maximum transaction size), and it can move the journal's location to a new specified block device. +the relocated journal was implemented for a special release of ReiserFS, and was not expected to be put +you must apply a special patch. Without this patch the kernel will refuse to mount the newly modified +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +psfstriptable - remove the embedded Unicode character table from a console font +psfstriptable fontfile outfile +psfstriptable reads a .psf format console font from fontfile, removes the embedded Unicode font table if +there is one, and writes the result to outfile. An input file name of "-" denotes standard input, and an +output file name of "-" denotes standard output. +% +btrfs-convert [options] <device> +Warning +The conversion utilizes free space of the original filesystem. The exact estimate of the required space +cannot be foretold. The final btrfs metadata might occupy several gigabytes on a hundreds-gigabyte +filesystem. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +kvno - print key version numbers of Kerberos principals +kvno acquires a service ticket for the specified Kerberos principals and prints out the key version num‐ +bers of each. +-c ccache +Specifies the name of a credentials cache to use (if not the default) +-e etype +Specifies the enctype which will be requested for the session key of all the services named on the +% +strfile - create a random access file for storing strings +unstr - dump strings in pointer order +strfile [-iorsx] [-c char] sourcefile [outputfile] +unstr [-c char] datafile[.ext] [outputfile] +strfile reads a file containing groups of lines separated by a line containing a single percent `%' sign +(or other specified delimiter character) and creates a data file which contains a header structure and a +The output file, if not specified on the command line, is named sourcefile.dat. +The purpose of unstr is to undo the work of strfile. It prints out the strings contained in the source‐ +file, which is datafile.ext without its extension, or datafile if no extension is specified (in this +% +msgcmp - compare message catalog and template +msgcmp [OPTION] def.po ref.pot +Compare two Uniforum style .po files to check that both contain the same set of msgid strings. The +def.po file is an existing PO file with the translations. The ref.pot file is the last created PO file, +lated each and every message in your program. Where an exact match cannot be found, fuzzy matching is +used to produce better diagnostics. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +def.po translations +% +anacron - runs commands periodically +anacron [-s] [-f] [-n] [-d] [-q] [-t anacrontab] [-S spooldir] [job] +anacron [-S spooldir] -u [-t anacrontab] [job] +anacron [-V|-h] +anacron -T [-t anacrontab] +does not assume that the machine is running continuously. Hence, it can be used on machines that are not +contains the list of jobs that Anacron controls. Each job entry specifies a period in days, a delay in +minutes, a unique job identifier, and a shell command. +% +cut - remove sections from each line of files +cut OPTION... [FILE]... +Print selected parts of lines from each FILE to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --bytes=LIST +select only these bytes +-c, --characters=LIST +select only these characters +% +pactree - package dependency tree viewer +pactree [options] package +Pactree produces a dependency tree for a package. +By default, a tree-like output is generated, but with the --graph option, a Graphviz description is +generated. +-a, --ascii +Use ASCII characters for tree formatting. By default, pactree will use Unicode line drawing +characters if it is able to detect that the locale supports them. +-b, --dbpath +% +zic - timezone compiler +zic [ -v ] [ -d directory ] [ -l localtime ] [ -p posixrules ] [ -L leapsecondfilename ] [ -s ] [ -y com‐ +mand ] [ filename ... ] +Zic reads text from the file(s) named on the command line and creates the time conversion information +files specified in this input. If a filename is -, the standard input is read. +These options are available: +-d directory +Create time conversion information files in the named directory rather than in the standard direc‐ +tory named below. +-l timezone +% +sfdisk - display or manipulate a disk partition table +sfdisk [options] device [-N partition-number] +sfdisk [options] command +sfdisk is a script-oriented tool for partitioning any block device. +functionality for CHS (Cylinder-Head-Sector) addressing. CHS has never been important for Linux, and +this addressing concept does not make any sense for new devices. +tive sizes are specified, or when the default values are used. +% +groupmod - modify a group definition on the system +groupmod [options] GROUP +The groupmod command modifies the definition of the specified GROUP by modifying the appropriate entry in +the group database. +The options which apply to the groupmod command are: +-g, --gid GID +The group ID of the given GROUP will be changed to GID. +option is used. +% +lessecho - expand metacharacters +lessecho [-ox] [-cx] [-pn] [-dn] [-mx] [-nn] [-ex] [-a] file ... +lessecho is a program that simply echos its arguments on standard output. But any metacharacter in the +output is preceded by an "escape" character, which by default is a backslash. +A summary of options is included below. +-ex Specifies "x", rather than backslash, to be the escape char for metachars. If x is "-", no escape +char is used and arguments containing metachars are surrounded by quotes instead. +-ox Specifies "x", rather than double-quote, to be the open quote character, which is used if the -e- +option is specified. +% +mcookie - generate magic cookies for xauth +mcookie [options] +usage: +xauth add :0 . `mcookie` +the sources /dev/urandom, /dev/random, or the libc pseudo-random functions, in this preference order. +-f, --file file +Use this file as an additional source of randomness. When file is '-', characters are read from +% +haveged - Generate random numbers and feed linux random device. +haveged [options] +haveged generates an unpredictable stream of random numbers harvested from the indirect effects of hard‐ +ware events on hidden processor state (caches, branch predictors, memory translation tables, etc) using +the HAVEGE (HArdware Volatile Entropy Gathering and Expansion) algorithm. The algorithm operates in user +space, no special privilege is required for file system access to the output stream. +Linux pools randomness for distribution by the /dev/random and /dev/urandom device interfaces. The stan‐ +fill the /dev/random pool whenever the supply of random bits in /dev/random falls below the low water +mark of the device. +% +pluginviewer - list loadable SASL plugins and their properties +pluginviewer [-a] [-s] [-c] [-b min=N,max=N] [-e ssf=N,id=ID] [-m MECHS] [-x AUXPROP_MECH] [-f FLAGS] +[-p PATH] +pluginviewer can be used by a server administrator to troubleshoot SASL installations. The utility can +list loadable (properly configured) client and server side plugins, as well as auxprop plugins. +-a List auxprop plugins. +-s List server authentication (SASL) plugins. +-c List client authentication (SASL) plugins. +% +date - print or set the system date and time +date [OPTION]... [+FORMAT] +date [-u|--utc|--universal] [MMDDhhmm[[CC]YY][.ss]] +Display the current time in the given FORMAT, or set the system date. +Mandatory arguments to long options are mandatory for short options too. +-d, --date=STRING +display time described by STRING, not 'now' +-f, --file=DATEFILE +like --date; once for each line of DATEFILE +% +uuidgen - create a new UUID value +uuidgen [options] +library. The new UUID can reasonably be considered unique among all UUIDs created on the local system, +and among UUIDs created on other systems in the past and in the future. +There are two types of UUIDs which uuidgen can generate: time-based UUIDs and random-based UUIDs. By +default uuidgen will generate a random-based UUID if a high-quality random number generator is present. +Otherwise, it will choose a time-based UUID. It is possible to force the generation of one of these two +UUID types by using the -r or -t options. +-r, --random +% +glib-mkenums - C language enum description generation utility +glib-mkenums [OPTION...] [FILE...] +glib-mkenums is a small perl-script utility that parses C code to extract enum definitions and produces +enum descriptions based on text templates specified by the user. Most frequently this script is used to +produce C code that contains enum values as strings so programs can provide value name strings for +introspection. +glib-mkenums takes a list of valid C code files as input. The options specified control the text that is +output, certain substitutions are performed on the text templates for keywords enclosed in @ characters. +Production text substitutions +Certain keywords enclosed in @ characters will be substituted in the emitted text. For the substitution +examples of the keywords below, the following example enum definition is assumed: +% +deallocvt - deallocate unused virtual consoles +deallocvt [N ...] +The command deallocvt deallocates kernel memory and data structures for all unused virtual consoles. If +one or more arguments N ... are given, only the corresponding consoles /dev/ttyN are deallocated. +A virtual console is unused if it is not the foreground console, and no process has it open for reading +or writing, and no text has been selected on its screen. +% +ssh-agent — authentication agent +ssh-agent [-c | -s] [-Dd] [-a bind_address] [-E fingerprint_hash] [-t life] [command [arg ...]] +ssh-agent [-c | -s] -k +ssh-agent is usually started in the beginning of an X-session or a login session, and all other windows or +programs are started as clients to the ssh-agent program. Through use of environment variables the agent +to query the keys that are held in one. +% +sum - checksum and count the blocks in a file +sum [OPTION]... [FILE]... +Print checksum and block counts for each FILE. +With no FILE, or when FILE is -, read standard input. +-s, --sysv +--help display this help and exit +% +cryptsetup-reencrypt - tool for offline LUKS device re-encryption +cryptsetup-reencrypt <options> <device> +Cryptsetup-reencrypt can be used to change reencryption parameters which otherwise require full on-disk +data change (re-encryption). +You can regenerate volume key (the real key used in on-disk encryption unclocked by passphrase), cipher, +cipher mode. +Cryptsetup-reencrypt reencrypts data on LUKS device in-place. During reencryption process the LUKS device +is marked unavailable. +WARNING: The cryptsetup-reencrypt program is not resistant to hardware or kernel failures during reen‐ +% +msgconv - character set conversion for message catalog +msgconv [OPTION] [INPUTFILE] +Converts a translation catalog to a different character encoding. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +partprobe - inform the OS of partition table changes +partprobe [-d] [-s] [devices...] +partprobe is a program that informs the operating system kernel of partition table changes. +-d, --dry-run +Don't update the kernel. +-s, --summary +% +loginctl - Control the systemd login manager +The following options are understood: +--no-ask-password +Do not query the user for authentication for privileged operations. +-p, --property= +When showing session/user/seat properties, limit display to certain properties as specified as +% +halt, poweroff, reboot - Halt, power-off or reboot the machine +The following options are understood: +--help +Print a short help text and exit. +% +sntp - standard Simple Network Time Protocol client program +sntp [-flags] [-flag [value]] [--option-name[[=| ]value]] [ hostname-or-IP ...] +sntp can be used as an SNTP client to query a NTP or SNTP server and either display the time or set the +local system's time (given suitable privilege). It can be run as an interactive command or from a cron +job. NTP (the Network Time Protocol) and SNTP (the Simple Network Time Protocol) are defined and +The default is to write the estimated correct local date and time (i.e. not UTC) to the standard output +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +ngettext - translate message and choose plural form +ngettext [OPTION] [TEXTDOMAIN] MSGID MSGID-PLURAL COUNT +The ngettext program translates a natural language message into the user's language, by looking up the +translation in a message catalog, and chooses the appropriate plural form, which depends on the number +COUNT and the language of the message catalog where the translation was found. +Display native language translation of a textual message whose grammatical form depends on a number. +-d, --domain=TEXTDOMAIN +retrieve translated message from TEXTDOMAIN +-e enable expansion of some escape sequences +% +lastlog - reports the most recent login of all users or of a given user +lastlog [options] +lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, +port, and last login time will be printed. The default (no flags) causes lastlog entries to be printed, +sorted by their order in /etc/passwd. +The options which apply to the lastlog command are: +-b, --before DAYS +Print only lastlog records older than DAYS. +-C, --clear +% +lvresize — resize a logical volume +[-I|--stripesize StripeSize]] {-l|--extents [+|-]LogicalExtentsNumber[%{VG|LV|PVS|FREE|ORIGIN}] | +-L|--size [+|-]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [--poolmetadatasize [+]MetadataVolumeSize[bBsSkKm‐ +[PhysicalVolumePath[:PE[-PE]]...] +lvresize allows you to resize a logical volume. Be careful when reducing a logical volume's size, +because data in the reduced part is lost!!! You should therefore ensure that any filesystem on the vol‐ +ume is shrunk first so that the extents that are to be removed are not in use. Resizing snapshot logical +% +keyctl - Key management facility control +keyctl --version +keyctl show [-x] [<keyring>] +keyctl add <type> <desc> <data> <keyring> +keyctl padd <type> <desc> <keyring> +keyctl request <type> <desc> [<dest_keyring>] +keyctl update <key> <data> +keyctl pupdate <key> +keyctl newring <name> <keyring> +keyctl revoke <key> +keyctl clear <keyring> +keyctl link <key> <keyring> +keyctl unlink <key> [<keyring>] +% +capsh - capability shell wrapper +capsh [OPTION]... +handy wrapper for certain types of capability testing and environment creation. It also provides some +debugging features useful for summarizing capability state. +The tool takes a number of optional arguments, acting on them in the order they are provided. They are as +follows: +--print Display prevailing capability and related state. +% +systemd-firstboot, systemd-firstboot.service - Initialize basic system settings on or before the first +boot-up of a system +systemd-firstboot.service +systemd-firstboot initializes the most basic system settings interactively on the first boot, or +· The system locale, more specifically the two locale variables LANG= and LC_MESSAGES +· The system time zone +· The system host name +% +gettextize - install or upgrade gettext infrastructure +gettextize [OPTION]... [package-dir] +Prepares a source package to use gettext. +--help print this help and exit +--version +print version information and exit +-f, --force +force writing of new files even if old exist +% +lt-recode [OPTION]... [ [CHARSET] | REQUEST [FILE]... ] +Free `recode' converts files between various character sets and surfaces. +If a long option shows an argument as mandatory, then it is mandatory for the equivalent short option +also. Similarly for optional arguments. +Listings: +-l, --list[=FORMAT] +list one or all known charsets and aliases +-k, --known=PAIRS +restrict charsets according to known PAIRS list +% +elfedit - Update the ELF header of ELF files. +elfedit [--input-mach=machine] +[--input-type=type] +[--input-osabi=osabi] +--output-mach=machine +--output-type=type +--output-osabi=osabi +[-v|--version] +[-h|--help] +elffile... +elfedit updates the ELF header of ELF files which have the matching ELF machine and file types. The +options control how and which fields in the ELF header should be updated. +% +grub-fstest - debug tool for GRUB filesystem drivers +Debug tool for filesystem driver. +Commands: +blocklist FILE +Display blocklist of FILE. +cat FILE +Copy FILE to standard output. +cmp FILE LOCAL +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +ldns-config - show compiler and linker flags for ldns usage. +When writing programs using ldns, you have to tell the compiler where to look for include files and what +libraries from which location to link to. ldns-config can be used to find out what flags to use with the +C compiler and the linker. +--cflags +Show the C compiler flags needed to compile with ldns +--libs Show the flags to be used to link with ldns +--version +% +pmap - report memory map of a process +pmap [options] pid [...] +The pmap command reports the memory map of a process or processes. +-x, --extended +Show the extended format. +-d, --device +Show the device format. +-q, --quiet +Do not display some header or footer lines. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +dnssec-keymgr - Ensures correct DNSKEY coverage for a zone based on a defined policy +dnssec-keymgr [-K directory] [-c file] [-f] [-k] [-q] [-v] [-z] [-g path] [-r path] [-s path] [zone...] +dnssec-keymgr is a high level Python wrapper to facilitate the key rollover process for zones handled by +BIND. It uses the BIND commands for manipulating DNSSEC key metadata: dnssec-keygen and dnssec-settime. +DNSSEC policy can be read from a configuration file (default /etc/dnssec-policy.conf), from which the key +parameters, publication and rollover schedule, and desired coverage duration for any given zone can be +default policy used for all zones. +When dnssec-keymgr runs, it examines the DNSSEC keys for one or more zones, comparing their timing +metadata against the policies for those zones. If key settings do not conform to the DNSSEC policy (for +example, because the policy has been changed), they are automatically corrected. +% +apropos - search the manual page names and descriptions +apropos [-dalv?V] [-e|-w|-r] [-s list] [-m system[,...]] [-M path] [-L locale] [-C file] keyword ... +Each manual page has a short description available within it. apropos searches the descriptions for +instances of keyword. +cial characters to stop the shell from interpreting them. +The standard matching rules allow matches to be made against the page name and word boundaries in the +description. +The database searched by apropos is updated by the mandb program. Depending on your installation, this +% +dbus-binding-tool - C language GLib bindings generation utility. +dbus-binding-tool [--force] [--help] [--ignore-unsupported] [--mode=pretty|glib-client|glib-server] +[--output=file] [--prefix=symbol-prefix] [--version] [file...] +dbus-binding-tool is used to expose a GObject via D-Bus. As input, dbus-binding-tool uses a D-Bus Intro‐ +header file which eases the use of a remote D-Bus object. Output is sent to standard out or to the file‐ +name specified with the --output argument. +The following is a sample D-Bus Introspection XML file which describes an object that exposes one method, +named ManyArgs: +% +readprofile - read kernel profiling information +readprofile [options] +The readprofile command uses the /proc/profile information to print ascii data on standard output. The +output is organized in three columns: the first is the number of clock ticks, the second is the name of +the C function in the kernel where those many ticks occurred, and the third is the normalized `load' of +the procedure, calculated as a ratio between the number of ticks and the length of the procedure. The +output is filled with blanks to ease readability. +-a, --all +% +rsync - a fast, versatile, remote (and local) file-copying tool +Access via remote shell: +Pull: rsync [OPTION...] [USER@]HOST:SRC... [DEST] +Push: rsync [OPTION...] SRC... [USER@]HOST:DEST +Access via rsync daemon: +Pull: rsync [OPTION...] [USER@]HOST::SRC... [DEST] +rsync [OPTION...] rsync://[USER@]HOST[:PORT]/SRC... [DEST] +Push: rsync [OPTION...] SRC... [USER@]HOST::DEST +rsync [OPTION...] SRC... rsync://[USER@]HOST[:PORT]/DEST +% +clockdiff - measure clock difference between hosts +-o Use IP TIMESTAMP with ICMP ECHO instead of ICMP TIMESTAMP messages. It is useful with some desti‐ +dresses instead of four term one. What flavor works better depends on target host. Particularly, +-o is better for Linux. +% +vgscan — scan all disks for volume groups and rebuild caches +[--notifydbus] [-P|--partial] [--reportformat {basic|json}] [-v|--verbose] +vgscan scans all SCSI, (E)IDE disks, multiple devices and a bunch of other disk devices in the system +to avoid a CD ROM, for example. +hardware. +% +delv - DNS lookup and validation utility +[-q name] [-t type] [-x addr] [name] [type] [class] [queryopt...] +delv [-h] +delv [-v] +delv [queryopt...] [query...] +delv (Domain Entity Lookup & Validation) is a tool for sending DNS queries and validating the results, +using the same internal resolver and validator logic as named. +delv will send to a specified name server all queries needed to fetch and validate the requested data; +% +pscap - a program to see capabilities +pscap [ -a ] +pscap is a program that prints out a report of process capabilities. If the application has any capabili‐ +ties, it will be in the report with the exception of init. By giving the -a command line option, init +will be included, too. If a process is not in the report, it has dropped all capabilities. If the process +has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is +found to be true, a '+' symbol is added. +Steve Grubb +% +dirname - strip last component from file name +output '.' (meaning the current directory). +-z, --zero +end each output line with NUL, not newline +--help display this help and exit +--version +output version information and exit +% +zcmp, zdiff - compare compressed files +Zcmp and zdiff are used to invoke the cmp or the diff program on files compressed via gzip. All options +fed to cmp or diff. The input files are not modified. The exit status from cmp or diff is preserved. +BUGS +% +named-journalprint - print zone journal in human-readable form +named-journalprint {journal} +named-journalprint prints the contents of a zone journal file in a human-readable form. +Journal files are automatically created by named when changes are made to dynamic zones (e.g., by +nsupdate). They record each addition or deletion of a resource record, in binary format, allowing the +changes to be re-applied to the zone when the server is restarted after a shutdown or crash. By default, +the name of the journal file is formed by appending the extension .jnl to the name of the corresponding +zone file. +named-journalprint converts the contents of a given journal file into a human-readable text format. Each +line begins with "add" or "del", to indicate whether the record was added or deleted, and continues with +the resource record in master-file format. +% +debugreiserfs - The debugging tool for the ReiserFS filesystem. +device +debugreiserfs sometimes helps to solve problems with reiserfs filesystems. When run without options it +prints the super block of the ReiserFS filesystem found on the device. +device is the special file corresponding to the device (e.g /dev/hdXX for an IDE disk partition or +/dev/sdXX for a SCSI disk partition). +-j device +prints the contents of the journal. The option -p allows it to pack the journal with other meta‐ +% +thin_metadata_size - thin provisioning metadata device/file size calculator. +thin_metadata_size [options] +thin_metadata_size calculates the size of the thin provisioning metadata based on the block size of the +thin provisioned devices, the size of the thin provisioning pool and the maximum number of all thin pri‐ +sioned devices and snapshots. Because thin provisioning pools are holding widely variable contents, this +tool is needed to provide sensible initial default size. +-b, --block-size BLOCKSIZE[bskKmMgGtTpPeEzZyY] +Block size of thin provisioned devices in units of bytes, sectors, kibibytes, kilobytes, ... +respectively. Default is in sectors without a block size unit specifier. Size/number option +% +findmnt - find a filesystem +findmnt [options] +findmnt [options] device|mountpoint +findmnt [options] [--source] device [--target|--mountpoint] mountpoint +findmnt will list all mounted filesytems or search for a filesystem. The findmnt command is able to +search in /etc/fstab, /etc/mtab or /proc/self/mountinfo. If device or mountpoint is not given, all +filesystems are shown. +mountpoint (and vice versa) if the --target, --mountpoint or --source options are not specified. +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +last, lastb - show a listing of last logged in users +last [options] [username...] [tty...] +lastb [options] [username...] [tty...] +last searches back through the /var/log/wtmp file (or the file designated by the -f option) and displays +a list of all users logged in (and out) since that file was created. One or more usernames and/or ttys +be abbreviated, thus last 0 is the same as last tty0. +When catching a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal, +terminate. +The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all +% +ethtool - query or control network driver and hardware settings +ethtool devname +ethtool -h|--help +ethtool --version +ethtool -a|--show-pause devname +ethtool -A|--pause devname [autoneg on|off] [rx on|off] [tx on|off] +ethtool -c|--show-coalesce devname +ethtool -C|--coalesce devname [adaptive-rx on|off] [adaptive-tx on|off] [rx-usecs N] [rx-frames N] +[rx-usecs-irq N] [rx-frames-irq N] [tx-usecs N] [tx-frames N] [tx-usecs-irq N] [tx-frames-irq N] +% +groupmems - administer members of a user's primary group +groupmems -a user_name | -d user_name | [-g group_name] | -l | -p +The groupmems command allows a user to administer his/her own group membership list without the +requirement of superuser privileges. The groupmems utility is for systems that configure its users to be +in their own name sake primary group (i.e., guest / guest). +Only the superuser, as administrator, can use groupmems to alter the memberships of other groups. +The options which apply to the groupmems command are: +-a, --add user_name +Add a user to the group membership list. +% +decoded structures. +-b, --benchmark +perform a benchmark on decoding +-s, --strict +use strict DER decoding +-h, --help +display this help and exit +% +mkfs.xfs - construct an XFS filesystem +mkfs.xfs [ -b block_size ] [ -m global_metadata_options ] [ -d data_section_options ] [ -f ] [ -i +inode_options ] [ -l log_section_options ] [ -n naming_options ] [ -p protofile ] [ -q ] [ -r real‐ +time_section_options ] [ -s sector_size ] [ -L label ] [ -N ] [ -K ] device +mkfs.xfs -V +mkfs.xfs constructs an XFS filesystem by writing on a special file using the values found in the argu‐ +In its simplest (and most commonly used form), the size of the filesystem is determined from the disk +driver. As an example, to make a filesystem with an internal log on the first partition on the first +SCSI disk, use: +% +new_inode_size ] [ -j ] [ -J journal-options ] [ -m reserved-blocks-percentage ] [ -o [^]mount- +options[,...] ] [ -p mmp_update_interval ] [ -r reserved-blocks-count ] [ -s sparse-super-flag ] [ -u +user ] [ -g group ] [ -C mount-count ] [ -E extended-options ] [ -L volume-name ] [ -M last-mounted- +directory ] [ -O [^]feature[,...] ] [ -Q quota-options ] [ -T time-last-checked ] [ -U UUID ] [ -z +undo_file ] device +% +lsusb - list USB devices +lsusb [ options ] +lsusb is a utility for displaying information about USB buses in the system and the devices connected to +them. +-v, --verbose +configuration descriptors for the device's current speed. Class descriptors will be shown, when +available, for USB device classes including hub, audio, HID, communications, and chipcard. +-s [[bus]:][devnum] +% +cpio — copy files to and from archives +cpio -i [options] [pattern ...] [< archive] +cpio -o [options] < name-list [> archive] +cpio -p [options] dest-dir < name-list +zip, jar, ar, and ISO 9660 cdrom images and can create tar, pax, cpio, ar, and shar archives. +The first option to cpio is a mode indicator from the following list: +-i Input. Read an archive from standard input (unless overridden) and extract the contents to disk or +(if the -t option is specified) list the contents to standard output. If one or more file patterns +are specified, only files matching one of the patterns will be extracted. +-o Output. Read a list of filenames from standard input and produce a new archive on standard output +(unless overridden) containing the specified items. +% +systemd, init - systemd system and service manager +systemd is a system and service manager for Linux operating systems. When run as first process on boot +telinit and pass all command line arguments unmodified. That means init and telinit are mostly equivalent +When run as a system instance, systemd interprets the configuration file system.conf and the files in +system.conf.d directories; when run as a user instance, systemd interprets the configuration file +% +nstat, rtacct - network statistics tools. +nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics. +-h, --help Print help +-V, --version +Print version +-z, --zero +Dump zero counters too. By default they are not shown. +% +autoscan - Generate a preliminary configure.in +autoscan [OPTION]... [SRCDIR] +Examine source files in the directory tree rooted at SRCDIR, or the current directory if none is given. +Search the source files for common portability problems, check for incompleteness of `configure.ac', and +create a file `configure.scan' which is a preliminary `configure.ac' for that package. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +vgchange — change attributes of a volume group +vgchange [--addtag Tag] [--alloc AllocationPolicy] [-A|--autobackup {y|n}] [-a|--activate [a|e|s|l] +{y|n}] [--activationmode {complete|degraded|partial}] [-K|--ignoreactivationskip] [--monitor {y|n}] +Tag] [--detachprofile] [-h|--help] [--ignorelockingfailure] [--ignoremonitoring] [--ignoreskippedcluster] +[--sysinit] [--noudevsync] [--lock-start] [--lock-stop] [--lock-type LockType] [-l|--logicalvolume Max‐ +datacopies NumberOfCopies|unmanaged|all] [-P|--partial] [-s|--physicalextentsize PhysicalExtent‐ +Size[bBsSkKmMgGtTpPeE]] [--reportformat {basic|json}] [-S|--select Selection] [--systemid SystemID] +vgchange allows you to change the attributes of one or more volume groups. Its main purpose is to acti‐ +groups are subject to changes and allow access to their logical volumes. [Not yet implemented: During +% +systemd-run - Run programs in transient scope or service or timer units +If a command is run as transient service unit, it will be started and managed by the service manager like +any other service, and thus shows up in the output of systemctl list-units like any other unit. It will +run in a clean and detached execution environment, with the service manager as its parent process. In +this mode, systemd-run will start the service asynchronously in the background and return after the +command has begun execution. +% +netcat - GNU Netcat Manual +netcat [options] hostname port [port] ... +netcat -l -p port [options] [hostname] [port] ... +netcat -L hostname:port -p port [options] ... +Netcat is a simple Unix utility which reads and writes data across network connections, using TCP or UDP +protocol. It is designed to be a reliable "back-end" tool that can be used directly or easily driven by +other programs and scripts. At the same time, it is a feature-rich network debugging and exploration +tool, since it can create almost any kind of connection you would need and has several interesting built- +in capabilities. Netcat, or "nc" as the original program was named, should have been supplied long ago +as another one of those cryptic but standard Unix tools. +% +telnet - User interface to TELNET +telnet [OPTION...] [HOST [PORT]] +Login to remote system HOST (optionally, on service port PORT) +General options: +-6, --ipv6 +use only IPv6 +% +If the output filename is present, the output is written there. If it is - or absent the output is writ‐ +ten to the standard output. +the BUGS section below. +% +grub-mkconfig - generate a GRUB configuration file +grub-mkconfig [OPTION] +Generate a grub config file +-o, --output=FILE +output generated config to FILE [default=stdout] +-h, --help +print this message and exit +-v, --version +print the version information and exit +% +arpd - userspace arp daemon. +rate ] [ <INTERFACES> ] +The arpd daemon collects gratuitous ARP information, saving it on local disk and feeding it to the kernel +on demand to avoid redundant broadcasting due to limited size of the kernel ARP cache. +-h -? Print help +-l Dump the arpd database to stdout and exit. The output consists of three columns: the interface +index, the IP address of the interface, and the MAC address of the interface. Negative entries for +a colon and the most recent time when the fact that the host is dead was proven. +% +soelim - interpret .so requests in groff input +soelim [-Crtv] [-I dir] [files ...] +It is possible to have whitespace between the -I command line option and its parameter. +soelim reads files and replaces lines of the form +.so file +by the contents of file. It is useful if files included with .so need to be preprocessed. Normally, +soelim should be invoked with the -s option of groff. +To embed ‘\’ in the file name, write ‘\\’ or ‘\e’. To embed a space, write ‘\ ’. Any other escape +sequence in file makes soelim ignore the whole line. +% +gpg-error-config - Script to get information about the installed version of libgpg-error +gpg-error-config [options] +gpg-error-config is a tool that is used to configure to determine the compiler and linker flags that +macros for GNU autoconf that are included with Libgpg-error. +gpg-error-config accepts the following options: +--mt Provide output appropriate for multithreaded programs. --mt is only useful when combined with +other options, and must be the first option if present. +--version +% +autoupdate - Update a configure.in to a newer Autoconf +autoupdate [OPTION]... [TEMPLATE-FILE]... +Update each TEMPLATE-FILE if given, or `configure.ac' if present, or else `configure.in', to the syntax +of the current version of Autoconf. The original files are backed up. +Operation modes: +-h, --help +print this help, then exit +-V, --version +print version number, then exit +-v, --verbose +% +ldns-verify-zone - read a DNSSEC signed zone and verify it. +ldns-verify-zone ZONEFILE +ldns-verify-zone reads a DNS zone file and verifies it. +RRSIG resource records are checked against the DNSKEY set at the zone apex. +-h Show usage and exit +-a Apex only, check only the zone apex +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +info - read Info documents +info [OPTION]... [MENU-ITEM...] +Read documentation in Info format. +-a, --all +use all matching manuals. +-k, --apropos=STRING +look up STRING in all indices of all manuals. +-d, --directory=DIR +add DIR to INFOPATH. +% +netstat - Print network connections, routing tables, interface statistics, masquerade connections, and +multicast memberships +[--rfcomm|-f] [--listening|-l] [--all|-a] [--numeric|-n] [--numeric-hosts] [--numeric-ports] +[--numeric-users] [--symbolic|-N] [--extend|-e[--extend|-e]] [--timers|-o] [--program|-p] [--verbose|-v] +[--continuous|-c] [--wide|-W] +netstat {--route|-r} [address_family_options] [--extend|-e[--extend|-e]] [--verbose|-v] [--numeric|-n] +[--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] +netstat {--interfaces|-i} [--all|-a] [--extend|-e[--extend|-e]] [--verbose|-v] [--program|-p] +[--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continuous|-c] +netstat {--groups|-g} [--numeric|-n] [--numeric-hosts] [--numeric-ports] [--numeric-users] [--continu‐ +ous|-c] +% +ldns-zcat - reunite (z)split up a zone files +ldns-zcat zonefiles +ldns-zcat will read in a bunch of (z)split up zonefiles and creates a new larger zone file. The SOA +record in the first part is used as the SOA record in the generated zone. +The resulted zone file is printed to standard output. +-o ORIGIN +use ORIGIN when reading in the zone +-v show the version number and exit +% +chem - groff preprocessor for producing chemical structure diagrams +chem [option ....] [--] [filespec ....] +chem -h | --help +chem -v | --version +There are no other options than -h, --help, -v, and --version; these options provoke the printing of a +version or usage information, respectively, and all filespec arguments are ignored. A filespec argument +is either a file name of an existing file or a minus character -, meaning standard input. If no argument +is specified then standard input is taken automatically. +chem produces chemical structure diagrams. Today's version is best suited for organic chemistry (bonds, +% +seq - print a sequence of numbers +seq [OPTION]... LAST +seq [OPTION]... FIRST LAST +seq [OPTION]... FIRST INCREMENT LAST +Print numbers from FIRST to LAST, in steps of INCREMENT. +Mandatory arguments to long options are mandatory for short options too. +-f, --format=FORMAT +use printf style floating-point FORMAT +-s, --separator=STRING +use STRING to separate numbers (default: \n) +% +groups - display current group names +groups [user] +The groups command displays the current group names or ID values. If the value does not have a +corresponding entry in /etc/group, the value will be displayed as the numerical group value. The optional +user parameter will display the groups for the named user. +Systems which do not support concurrent group sets will have the information from /etc/group reported. +The user must use newgrp or sg to change his current real and effective group ID. +FILES +/etc/group +Group account information. +% +ifconfig - configure a network interface +ifconfig [-v] [-a] [-s] [interface] +ifconfig [-v] interface [aftype] options | address ... +Ifconfig is used to configure the kernel-resident network interfaces. It is used at boot time to set up +interfaces as necessary. After that, it is usually only needed when debugging or when system tuning is +needed. +If no arguments are given, ifconfig displays the status of the currently active interfaces. If a single +interface argument is given, it displays the status of the given interface only; if a single -a argument +is given, it displays the status of all interfaces, even those that are down. Otherwise, it configures +an interface. +Address Families +% +vgdisplay — display attributes of volume groups +{basic|json}] [-s|--short] [-S|--select Selection] [-v|--verbose] [-d|--debug] [-h|--help] [--ignorelock‐ +ingfailure] [--ignoreskippedcluster] [--nosuffix] [-P|--partial] [--units hHbBsSkKmMgGtTpPeE] [--version] +[-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] [--noheadings] +[--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--separator Separator] [--unbuffered] [--units +with it's physical and logical volumes and their sizes etc. +% +dnssec-dsfromkey - DNSSEC DS RR generation tool +[-A] [-v level] {dnsname} +dnssec-dsfromkey [-h] [-V] +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +ftpd - File Transfer Protocol server. +ftpd [OPTION...] +File Transfer Protocol daemon. +-6, --ipv6 +restrict daemon to IPv6 +-a, --auth=AUTH +use AUTH for authentication +% +col - filter reverse line feeds from input +col [options] +col filters out reverse (and half-reverse) line feeds so the output is in the correct order, with only +forward and half-forward line feeds. It also replaces any whitespace characters with tabs where possi‐ +col reads from standard input and writes to standard output. +-b, --no-backspaces +Do not output any backspaces, printing only the last character written to each column position. +-f, --fine +% +unhide — forensic tool to find hidden processes +unhide-posix proc | sys +unhide is a forensic tool to find processes hidden by rootkits, Linux kernel modules or by other tech‐ +niques. It detects hidden processes using six techniques. +Options are only available for unhide-linux not for unhide-posix. +-d Do a double check in brute test to avoid false positive. +-f Write a log file (unhide-linux.log) in the current directory. +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +route - show / manipulate the IP routing table +[irtt I] [reject] [mod] [dyn] [reinstate] [[dev] If] +route [-V] [--version] [-h] [--help] +Route manipulates the kernel's IP routing tables. Its primary use is to set up static routes to specific +When the add or del options are used, route modifies the routing tables. Without these options, route +% +setfont - load EGA/VGA console screen font +setfont [-O font+umap.orig] [-o font.orig] [-om cmap.orig] [-ou umap.orig] [-N] [font.new ...] [-m cmap] +[-u umap] [-C console] [-hH] [-v] [-V] +The setfont command reads a font from the file font.new and loads it into the EGA/VGA character genera‐ +tor, and optionally outputs the previous font. It can also load various mapping tables and output the +previous versions. +and load the union. Typical use: +setfont +Load a default font. +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +flock - manage locks from shell scripts +flock [options] file|directory command [arguments] +flock [options] file|directory -c command +flock [options] number +The first and second of the above forms wrap the lock around the execution of a command, in a manner sim‐ +priate permissions) if it does not already exist. By default, if the lock cannot be immediately +acquired, flock waits until the lock is available. +The third form uses an open file by its file descriptor number. See the examples below for how that can +be used. +% +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-d, --decode +decode data +-i, --ignore-garbage +when decoding, ignore non-alphabet characters +% +Mandatory arguments to long options are mandatory for short options too. +-c, --check +checks the syntax only +-o, --output=FILE +output file +% +infotocap - convert a terminfo description into a termcap description +infotocap looks in each given text file for terminfo descriptions. For each terminfo description found, +an equivalent termcap description is written to standard output. Terminfo use capabilities are trans‐ +lated directly to termcap tc capabilities. +-v print out tracing information on standard error as the program runs. +-V print out the version of the program in use on standard error and exit. +line to a maximum width of 60 characters. +% +setfattr - set extended attributes of filesystem objects +setfattr [-h] -n name [-v value] pathname... +setfattr [-h] -x name pathname... +setfattr [-h] --restore=file +The setfattr command associates a new value with an extended attribute name for each specified file. +-n name, --name=name +Specifies the name of the extended attribute to set. +-v value, --value=value +Specifies the new value of the extended attribute. There are three methods available for encoding the +value. If the given string is enclosed in double quotes, the inner string is treated as text. In +% +kadmind [-x db_args] [-r realm] [-m] [-nofork] [-proponly] [-port port-number] [-P pid_file] [-p +kadmind starts the Kerberos administration server. kadmind typically runs on the master Kerberos server, +which stores the KDC database. If the KDC database uses the LDAP module, the administration server and +the KDC server need not run on the same machine. kadmind accepts remote requests from programs such as +kadmind requires a number of configuration files to be set up in order for it to work: +The KDC configuration file contains configuration information for the KDC and admin servers. kad‐ +mind uses settings in this file to locate the Kerberos database, and is also affected by the +% +btrfs-check - check or repair an unmounted btrfs filesystem +btrfs check [options] <device> +The filesystem checker is used to verify structural integrity of a filesystem and attempt to repair it if +requested. The filesystem must be unmounted. +By default, btrfs check will not modify the device but you can reaffirm that by the option --readonly. +btrfsck is an alias of btrfs check command and is now deprecated. +Warning +Do not use --repair unless you are advised to by a developer, an experienced user or accept the fact +that fsck cannot possibly fix all sorts of damage that could happen to a filesystem because of +software and hardware bugs. +% +lsinitcpio - Examine an initramfs +lsinitcpio [action] [options] image +Examines the contents of an initcpio image. Without any options, lsinitcpio simply lists the contents of +an image. +ACTIONS +-a, --analyze +Analyze the contents of the specified image and print output in human readable form. +-c, --config +Show the configuration file the given image was built with. +-l, --list +% +eject - eject removable media +eject [options] device|mountpoint +eject allows removable media (typically a CD-ROM, floppy disk, tape, JAZ, ZIP or USB disk) to be ejected +under software control. The command can also control some multi-disc CD-ROM changers, the auto-eject +feature supported by some devices, and close the disc tray of some CD-ROM drives. +The device corresponding to device or mountpoint is ejected. If no name is specified, the default name +'/dev/sda'), UUID=uuid or LABEL=label tags. +There are four different methods of ejecting, depending on whether the device is a CD-ROM, SCSI device, +removable floppy, or tape. By default eject tries all four methods in order until it succeeds. +% +clear - clear the terminal screen +clear +bility is defined). clear looks in the environment for the terminal type and then in the terminfo data‐ +base to determine how to clear the screen. +% +rsh - Remote shell client +remote shell +-6, --ipv6 +use only IPv6 +allows an eight-bit input data path at all times +% +crontab - maintains crontab files for individual users +crontab [-u user] file +crontab [-u user] [-l | -r | -e] [-i] [-s] +crontab -n [ hostname ] +crontab -c +Crontab is the program used to install a crontab table file, remove or list the existing tables used to +/var/spool/, they are not intended to be edited directly. For SELinux in MLS mode, you can define more +In this version of Cron it is possible to use a network-mounted shared /var/spool/cron across a cluster +of hosts and specify that only one of the hosts should run the crontab jobs in the particular directory +% +netctl-auto - Control automatic selection of wireless netctl profiles +netctl-auto [--help | --version] +netctl-auto@.service file. See netctl.special(7) for details about the service file. +The following commands are understood: +list +List all profiles which are currently available for automatic selection. Active profiles will be +marked with a ‘*’, disabled profiles will be marked with a ‘!’. +% +setfacl - set file access control lists +setfacl [-bkndRLPvh] [{-m|-x} acl_spec] [{-M|-X} acl_file] file ... +setfacl --restore=file +of commands is followed by a sequence of files (which in turn can be followed by another sequence of com‐ +mands, ...). +The options -m, and -x expect an ACL on the command line. Multiple ACL entries are separated by comma +characters (`,'). The options -M, and -X read an ACL from a file or from standard input. The ACL entry +format is described in Section ACL ENTRIES. +The --set and --set-file options set the ACL of a file or a directory. The previous ACL is replaced. ACL +% +mkreiserfs - The create tool for the Linux ReiserFS filesystem. +mkreiserfs [ -dfV ] [ -b | --block-size N ] [ -h | --hash HASH ] [ -u | --uuid UUID ] [ -l | --label +LABEL ] [ --format FORMAT ] [ -q | --quiet ] [ -j | --journal-device FILE ] [ -s | --journal-size N ] [ +-o | --journal-offset N ] [ -t | --transaction-max-size N ] [ -B | --badblocks file ] device [ filesys‐ +tem-size ] +mkreiserfs creates a Linux ReiserFS filesystem on a device (usually a disk partition). +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +filesystem-size +is the size in blocks of the filesystem. If omitted, mkreiserfs will automatically set it. +% +jfs_debugfs - shell-type JFS file system editor +jfs_debugfs device +jfs_debugfs is a program which can be used to perform various low-level actions on a JFS formatted +device. +jfs_debugfs must be run as root. +a[lter] <block> <offset> <hex_string> +replaces the data located at the <offset> of <block> with <hex_string> +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +gnutls-cli-debug - GnuTLS debug client +gnutls-cli-debug [-flags] [-flag [value]] [--option-name[[=| ]value]] +TLS debug client. It sets up multiple TLS connections to a server and queries its capabilities. It was +created to assist in debugging GnuTLS, but it might be useful to extract a TLS server's capabilities. It +connects to a TLS server, performs tests and print the server's capabilities. If called with the `-v' +parameter more checks will be performed. Can be used to check for servers with special needs or bugs. +-d number, --debug=number +constrained to being: +% +tty - print the file name of the terminal connected to standard input +tty [OPTION]... +Print the file name of the terminal connected to standard input. +-s, --silent, --quiet +print nothing, only return an exit status +--help display this help and exit +--version +output version information and exit +% +csplit - split a file into sections determined by context lines +csplit [OPTION]... FILE PATTERN... +each piece to standard output. +Read standard input if FILE is - +Mandatory arguments to long options are mandatory for short options too. +-b, --suffix-format=FORMAT +-f, --prefix=PREFIX +% +systemd-cgtop - Show top control groups by their resource usage +systemd-cgtop shows the top control groups of the local Linux control group hierarchy, ordered by their +specified control group. +If systemd-cgtop is not connected to a tty, no column headers are printed and the default is to only run +Resource usage is only accounted for control groups in the relevant hierarchy, i.e. CPU usage is only +accounted for control groups in the "cpuacct" hierarchy, memory usage only for those in "memory" and disk +I/O usage for those in "blkio". If resource monitoring for these resources is required, it is recommended +% +tload - graphic representation of system load average +tload [options] [tty] +tload prints a graph of the current system load average to the specified tty (or the tty of the tload +process if none is specified). +-s, --scale number +The scale option allows a vertical scale to be specified for the display (in characters between +graph ticks); thus, a smaller value represents a larger scale, and vice versa. +-d, --delay seconds +The delay sets the delay between graph updates in seconds. +% +firewallctl - firewalld command line client +firewallctl is an alternate command line client of the firewalld daemon. It provides interface to manage +runtime and permanent configuration. +things can get changed in the runtime or permanent configuration. +The following options are supported: +General Options +-h, --help +% +jfs_fsck - initiate replay of the JFS transaction log, and check and repair a JFS formatted device +jfs_fsck [ -afnpvV ] [ -j journal_device ] [ --omit_journal_replay ] [ --replay_journal_only ] device +jfs_fsck is used to replay the JFS transaction log, check a JFS formatted device for errors, and fix any +errors found. +jfs_fsck must be run as root. +WARNING +jfs_fsck should only be used to check an unmounted file system or a file system that is mounted READ +ONLY. Using jfs_fsck to check a file system mounted other than READ ONLY could seriously damage the file +system! +% +pidof -- find the process ID of a running program. +pidof [-s] [-c] [-x] [-o omitpid[,omitpid..]] [-o omitpid[,omitpid..]..] program [program..] +Pidof finds the process id's (pids) of the named programs. It prints those id's on the standard output. +-s Single shot - this instructs the program to only return one pid. +non-root users, as they will be unable to check the current root directory of processes they do +not own. +-x Scripts too - this causes the program to also return process id's of shells running the named +scripts. +% +fdformat - low-level format a floppy disk +fdformat [options] device +fdformat does a low-level format on a floppy disk. device is usually one of the following (for floppy +% +tipc - a TIPC configuration and management tool +The Transparent Inter-Process Communication (TIPC) protocol offers total address transparency between +processes which allows applications in a clustered computer environment to communicate quickly and reli‐ +ably with each other, regardless of their location within the cluster. +TIPC originated at the telecommunications manufacturer Ericsson. The first open source version of TIPC +% +install-info - update info/dir entries +install-info [OPTION]... [INFO-FILE [DIR-FILE]] +Add or remove entries in INFO-FILE from the Info directory DIR-FILE. INFO-FILE and DIR-FILE are required +unless the --info-file or --dir-file (or --info-dir) options are given, respectively. +--add-once +add only to first matching section, not all. +--align=COL +start description of new entries at column COL. +--calign=COL +% +busctl - Introspect the bus +The following options are understood: +--address=ADDRESS +Connect to the bus specified by ADDRESS instead of using suitable defaults for either the system or +user bus (see --system and --user options). +--show-machine +When showing the list of peers, show a column containing the names of containers they belong to. See +% +make - GNU make utility to maintain groups of programs +make [OPTION]... [TARGET]... +The make utility will determine automatically which pieces of a large program need to be recompiled, and +issue the commands to recompile them. The manual describes the GNU implementation of make, which was +written by Richard Stallman and Roland McGrath, and is currently maintained by Paul Smith. Our examples +show C programs, since they are very common, but you can use make with any programming language whose +compiler can be run with a shell command. In fact, make is not limited to programs. You can use it to +describe any task where some files must be updated automatically from others whenever the others change. +To prepare to use make, you must write a file called the makefile that describes the relationships among +files in your program, and the states the commands for updating each file. In a program, typically the +executable file is updated from object files, which are in turn made by compiling source files. +% +mknod - make block or character special files +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file permission bits to MODE, not a=rw - umask +-Z set the SELinux security context to default type +--context[=CTX] +like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX +% +lsmod - Show the status of modules in the Linux Kernel +lsmod +lsmod is a trivial program which nicely formats the contents of the /proc/modules, showing what kernel +modules are currently loaded. +others. +% +fsfreeze --freeze|--unfreeze mountpoint +fsfreeze suspends or resumes access to a filesystem. +fsfreeze halts any new access to the filesystem and creates a stable image on disk. fsfreeze is intended +to be used with hardware RAID devices that support the creation of snapshots. +fsfreeze is unnecessary for device-mapper devices. The device-mapper (and LVM) automatically freezes a +page. +The mountpoint argument is the pathname of the directory where the filesystem is mounted. The filesystem +% +klist - list cached Kerberos tickets +klist [-e] [[-c] [-l] [-A] [-f] [-s] [-a [-n]]] [-C] [-k [-t] [-K]] [-V] [cache_name|keytab_name] +klist lists the Kerberos principal and Kerberos tickets held in a credentials cache, or the keys held in +a keytab file. +-e Displays the encryption types of the session key and the ticket for each credential in the creden‐ +tial cache, or each key in the keytab file. +-l If a cache collection is available, displays a table summarizing the caches present in the collec‐ +tion. +-A If a cache collection is available, displays the contents of all of the caches in the collection. +% +pdfmom - Produce PDF documents using the mom macro set +pdfmom [-Tps [pdfroff options]] [groff options] files ... +pdfmom [-Tpdf] [groff options] files ... +pdfmom is a wrapper around groff that facilitates the production of PDF documents from files formatted +with the mom macros. +pdfmom prints to stdout, so output must be redirected to a destination file. The size of the final PDF +If called with the -Tpdf option (which is the default), pdfmom processes files using groff's native PDF +driver, gropdf. If -Tps is given, processing is passed over to pdfroff, which uses groff's PostScript +% +uname - print system information +uname [OPTION]... +Print certain system information. With no OPTION, same as -s. +-a, --all +print all information, in the following order, except omit -p and -i if unknown: +-s, --kernel-name +print the kernel name +-n, --nodename +print the network node hostname +% +printenv - print all or part of environment +printenv [OPTION]... [VARIABLE]... +Print the values of the specified environment VARIABLE(s). If no VARIABLE is specified, print name and +value pairs for them all. +-0, --null +end each output line with NUL, not newline +--help display this help and exit +--version +output version information and exit +% +ipcmk - make various IPC resources +ipcmk [options] +ipcmk allows you to create shared memory segments, message queues, and semaphore arrays. +Resources can be specified with these options: +-M, --shmem size +for GB, etc. +% +mkdir - make directories +mkdir [OPTION]... DIRECTORY... +Create the DIRECTORY(ies), if they do not already exist. +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file mode (as in chmod), not a=rwx - umask +-p, --parents +no error if existing, make parent directories as needed +-v, --verbose +% +mkfifo - make FIFOs (named pipes) +Mandatory arguments to long options are mandatory for short options too. +-m, --mode=MODE +set file permission bits to MODE, not a=rw - umask +-Z set the SELinux security context to default type +--context[=CTX] +like -Z, or if CTX is specified then set the SELinux or SMACK security context to CTX +% +genrandom - generate a file containing random data +genrandom [-n number] {size} {filename} +genrandom generates a file or a set of files containing a specified quantity of pseudo-random data, which +can be used as a source of entropy for other commands on systems with no random device. +-n number +size +The size of the file, in kilobytes, to generate. +filename +% +mount - mount a filesystem +mount [-l|-h|-V] +mount -a [-fFnrsvw] [-t fstype] [-O optlist] +mount [-fnrsvw] [-o options] device|dir +mount [-fnrsvw] [-t fstype] [-o options] device dir +All files accessible in a Unix system are arranged in one big tree, the file hierarchy, rooted at /. +These files can be spread out over several devices. The mount command serves to attach the filesystem +The standard form of the mount command is: +% +gpg-agent - Secret key management for GnuPG +gpg-agent [--homedir dir] [--options file] [options] +gpg-agent [--homedir dir] [--options file] [options] --server +gpg-agent [--homedir dir] [--options file] [options] --daemon [command_line] +gpg-agent is a daemon to manage secret (private) keys independently from any protocol. It is used as a +backend for gpg and gpgsm as well as for a couple of other utilities. +The agent is automatically started on demand by gpg, gpgsm, gpgconf, or gpg-connect-agent. Thus there is +the agent using: +gpg-connect-agent /bye +% +xfs_admin - change parameters of an XFS filesystem +xfs_admin -V +Devices that are mounted cannot be modified. Administrators must unmount filesystems before xfs_admin or +-e Enables unwritten extent support on a filesystem that does not already have this enabled (for +legacy filesystems, it can't be disabled anymore at mkfs time). +% +uncompress — expand compressed data +uncompress [−cfv] [file...] +The uncompress utility shall restore files to their original state after they have been compressed using +the compress utility. If no files are specified, the standard input shall be uncompressed to the standard +output. If the invoking process has appropriate privileges, the ownership, modes, access time, and modi‐ +fication time of the original file shall be preserved. +% +gdbus - Tool for working with D-Bus objects +gdbus introspect [--system | --session | --address address] --dest bus_name --object-path /path/to/object +[--xml] [--recurse] [--only-properties] +gdbus monitor [--system | --session | --address address] --dest bus_name [--object-path /path/to/object] +gdbus call [--system | --session | --address address] --dest bus_name --object-path /path/to/object +gdbus emit [--system | --session | --address address] --object-path /path/to/object +gdbus help +% +systemd-tmpfiles, systemd-tmpfiles-setup.service, systemd-tmpfiles-setup-dev.service, systemd-tmpfiles- +clean.service, systemd-tmpfiles-clean.timer - Creates, deletes and cleans up volatile and temporary files +and directories +systemd-tmpfiles-setup.service +systemd-tmpfiles-setup-dev.service +systemd-tmpfiles-clean.service +systemd-tmpfiles-clean.timer +systemd-tmpfiles creates, deletes, and cleans up volatile and temporary files and directories, based on +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +telinit - Change SysV runlevel +the runlevel requests will be transparently translated into systemd unit activation requests. +The following options are understood: +--help +Print a short help text and exit. +--no-wall +Do not send wall message before reboot/halt/power-off. +% +bootctl - Control the firmware and boot manager settings +bootctl checks, updates, installs or removes the boot loader from the current system. +bootctl status checks and prints the currently installed versions of the boot loader binaries and all +current EFI boot variables. +% +devlink - Devlink tool +OBJECT := { dev | port | monitor } +-V, -Version +Print the version of the devlink utility and exit. +-n, -no-nice-names +Turn off printing out nice names, for example netdevice ifnames instead of devlink port identifi‐ +cation. +% +mountpoint - see if a directory or file is a mountpoint +mountpoint [-d|-q] directory | file +mountpoint -x device +mountpoint checks whether the given directory or file is mentioned in the /proc/self/mountinfo file. +-d, --fs-devno +Show the major/minor numbers of the device that is mounted on the given directory. +-q, --quiet +Be quiet - don't print anything. +% +migratepages - Migrate the physical location a processes pages +migratepages pid from-nodes to-nodes +migratepages moves the physical location of a processes pages without any changes of the virtual address +space of the process. Moving the pages allows one to change the distances of a process to its memory. +If multiple nodes are specified for from-nodes or to-nodes then an attempt is made to preserve the rela‐ +tive location of each page in each nodeset. +Valid node specifiers +% +ssh-keygen — authentication key generation, management and conversion +[-f output_keyfile] +ssh-keygen -p [-P old_passphrase] [-N new_passphrase] [-f keyfile] +ssh-keygen -i [-m key_format] [-f input_keyfile] +ssh-keygen -e [-m key_format] [-f input_keyfile] +ssh-keygen -y [-f input_keyfile] +ssh-keygen -c [-P passphrase] [-C comment] [-f keyfile] +ssh-keygen -l [-v] [-E fingerprint_hash] [-f input_keyfile] +ssh-keygen -B [-f input_keyfile] +ssh-keygen -F hostname [-f known_hosts_file] [-l] +ssh-keygen -H [-f known_hosts_file] +ssh-keygen -R hostname [-f known_hosts_file] +ssh-keygen -r hostname [-f input_keyfile] [-g] +% +accessdb - dumps the content of a man-db database in a human readable format +/usr/sbin/accessdb [-d?V] [<index-file>] +accessdb will output the data contained within a man-db database in a human readable form. By default, +it will dump the data from /var/cache/man/index.<db-type>, where <db-type> is dependent on the database +library in use. +Supplying an argument to accessdb will override this default. +-d, --debug +Print debugging information. +-?, --help +% +sdiff - side-by-side merge of file differences +Mandatory arguments to long options are mandatory for short options too. +-o, --output=FILE +operate interactively, sending output to FILE +-E, --ignore-tab-expansion +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +dirmngr-client - Tool to access the Dirmngr services +dirmngr-client [options] [certfile|pattern] +The dirmngr-client is a simple tool to contact a running dirmngr and test whether a certificate has been +revoked --- either by being listed in the corresponding CRL or by running the OCSP protocol. If no dirm‐ +ngr is running, a new instances will be started but this is in general not a good idea due to the huge +performance overhead. +The usual way to run this tool is either: +dirmngr-client acert +or +% +whereis - locate the binary, source, and manual page files for a command +whereis [options] [-BMS directory... -f] name... +whereis locates the binary, source and manual files for the specified command names. The supplied names +are first stripped of leading pathname components and any (single) trailing extension of the form .ext +(for example: .c) Prefixes of s. resulting from use of source code control are also dealt with. whereis +then attempts to locate the desired program in the standard Linux places, and in the places specified by +$PATH and $MANPATH. +The search restrictions (options -b, -m and -s) are cumulative and apply to the subsequent name patterns +on the command line. Any new search restriction resets the search mask. For example, +whereis -bm ls tr -m gcc +% +geoiplookup - look up country using IP Address or hostname +geoiplookup [-d directory] [-f filename] [-v] <ipaddress|hostname> +geoiplookup uses the GeoIP library and database to find the Country that an IP address or hostname origi‐ +nates from. +For example +NL, Netherlands +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +ldns-version - print out the version of the ldns-library and tools on this system +ldns-version +ldns-version is used to print out version information of the ldns library and tools +ldns-version has no options. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +Transform syslinux config into GRUB one. +-c, --cwd=DIR +current directory of syslinux [default is parent directory of input file]. +-i, --isolinux +assume input is an isolinux configuration file. +-o, --output=FILE +write output to FILE [default=stdout]. +% +pwconv, pwunconv, grpconv, grpunconv - convert to and from shadow passwords and groups +pwconv [options] +pwunconv [options] +grpconv [options] +grpunconv [options] +The pwconv command creates shadow from passwd and an optionally existing shadow. +The pwunconv command creates passwd from passwd and shadow and then removes shadow. +The grpconv command creates gshadow from group and an optionally existing gshadow. +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +isosize - output the length of an iso9660 filesystem +isosize [options] iso9660_image_file +-x, --sectors +Show the block count and block size in human-readable form. The output uses the term "sectors" +for "blocks". +-d, --divisor number +% +toe - table of (terminfo) entries +toe [-v[n]] [-ahsuUV] file... +With no options, toe lists all available terminal types by primary name with descriptions. File argu‐ +ments specify the directories to be scanned; if no such arguments are given, your default terminfo direc‐ +tory is scanned. If you also specify the -h option, a directory header will be issued as each directory +is entered. +There are other options intended for use by terminfo file maintainers: +-a report on all of the terminal databases which ncurses would search, rather than only the first one +that it finds. +% +gcc - GNU project C and C++ compiler +gcc [-c|-S|-E] [-std=standard] +[-g] [-pg] [-Olevel] +[-Wwarn...] [-Wpedantic] +[-Idir...] [-Ldir...] +[-Dmacro[=defn]...] [-Umacro] +[-foption...] [-mmachine-option...] +[-o outfile] [@file] infile... +Only the most useful options are listed here; see below for the remainder. g++ accepts mostly the same +options as gcc. +When you invoke GCC, it normally does preprocessing, compilation, assembly and linking. The "overall +options" allow you to stop this process at an intermediate stage. For example, the -c option says not to +% +debugfs [ -DVwcin ] [ -b blocksize ] [ -s superblock ] [ -f cmd_file ] [ -R request ] [ -d +data_source_device ] [ -z undo_file ] [ device ] +The debugfs program is an interactive file system debugger. It can be used to examine and change the +device is a block device (e.g., /dev/sdXX) or a file containing the file system. +-w Specifies that the file system should be opened in read-write mode. Without this option, the file +system is opened in read-only mode. +% +badblocks - search a device for bad blocks +badblocks [ -svwnfBX ] [ -b block_size ] [ -c blocks_at_once ] [ -d read_delay_factor ] [ -e +max_bad_blocks ] [ -i input_file ] [ -o output_file ] [ -p num_passes ] [ -t test_pattern ] device [ +last_block ] [ first_block ] +badblocks is used to search for bad blocks on a device (usually a disk partition). device is the special +not specified, the last block on the device is used as a default. first_block is an optional parameter +specifying the starting block number for the test, which allows the testing to start in the middle of the +disk. If it is not specified the first block on the disk is used as a default. +important that the block size is properly specified, since the block numbers which are generated are very +dependent on the block size in use by the filesystem. For this reason, it is strongly recommended that +% +userdel - delete a user account and related files +userdel [options] LOGIN +The userdel command modifies the system account files, deleting all entries that refer to the user name +LOGIN. The named user must exist. +The options which apply to the userdel command are: +-f, --force +forces userdel to remove the user's home directory and mail spool, even if another user uses the same +home directory or if the mail spool is not owned by the specified user. If USERGROUPS_ENAB is defined +to yes in /etc/login.defs and if a group exists with the same name as the deleted user, then this +% +symcryptrun - Call a simple symmetric encryption tool +symcryptrun --class class --program program --keyfile keyfile [--decrypt|--encrypt] [inputfile] +Sometimes simple encryption tools are already in use for a long time and there might be a desire to inte‐ +grate them into the GnuPG framework. The protocols and encryption methods might be non-standard or not +even properly documented, so that a full-fledged encryption tool with an interface like gpg is not +doable. symcryptrun provides a solution: It operates by calling the external encryption/decryption mod‐ +ule and provides a passphrase for a key using the standard pinentry based mechanism through gpg-agent. +build time. +For encryption, the plain text must be provided on STDIN or as the argument inputfile, and the ciphertext +will be output to STDOUT. For decryption vice versa. +% +ownership - Compaq ownership tag retriever +ownership retrieves and prints the "ownership tag" that can be set on Compaq computers. Contrary to all +other programs of the dmidecode package, ownership doesn't print any version information, nor labels, but +-d, --dev-mem FILE +Read memory from device FILE (default: /dev/mem) +-h, --help +Display usage information and exit +% +sln - create symbolic links +sln source dest +sln filelist +that if for some reason the dynamic linker is not working, sln can be used to make symbolic links to +dynamic libraries. +The command line has two forms. In the first form, it creates dest as a new symbolic link to source. +In the second form, filelist is a list of space-separated pathname pairs, and the effect is as if sln was +executed once for each line of the file, with the two pathnames as the arguments. +The sln program supports no command-line options. +% +gdbus-codegen - D-Bus code and documentation generator +gdbus-codegen [-h, --help] [--interface-prefix org.project.Prefix] [--generate-c-code OUTFILES] +[--c-namespace YourProject] [--c-generate-object-manager] +[--c-generate-autocleanup none|objects|all] [--generate-docbook OUTFILES] +[--xml-files FILE] [--annotate ELEMENT KEY VALUE]... FILE [FILE...] +gdbus-codegen is used to generate code and/or documentation for one or more D-Bus interfaces. The tool +C code (via --generate-c-code) and Docbook XML (via --generate-docbook). +GENERATING C CODE +When generating C code, a #GInterface -derived type is generated for each D-Bus interface. Additionally, +for every generated type, FooBar, two concrete instantiable types, FooBarProxy and FooBarSkeleton, +implementing said interface are also generated. The former is derived from #GDBusProxy and intended for +% +talkd - Talk server +talkd [OPTION...] +Talk daemon, using service `ntalk'. +-a, --acl=FILE +read site-wide ACLs from FILE +-d, --debug +enable debugging +-i, --idle-timeout=SECONDS set idle timeout value to SECONDS +-l, --logging +% +dbus-run-session - start a process as a new D-Bus session +dbus-run-session --help +dbus-run-session --version +dbus-run-session is used to start a session bus instance of dbus-daemon from a shell script, and start a +specified program in that session. The dbus-daemon will run for as long as the program does, after which +it will terminate. +One use is to run a shell with its own dbus-daemon in a text‐mode or SSH session, and have the +dbus-daemon terminate automatically on leaving the sub‐shell, like this: +% +ldns-read-zone - read a zonefile and print it +ldns-read-zone ZONEFILE +pretty-printing makeup. +-c Canonicalize all resource records in the zone before printing +-b Include Bubble Babble encoding of DS's. +% +tracepath, tracepath6 - traces path to a network host discovering MTU along this path +tracepath [-n] [-b] [-l pktlen] [-m max_hops] [-p port] {destination} +It traces path to destination discovering MTU along this path. It uses UDP port port or some random +port. It is similar to traceroute, only does not require superuser privileges and has no fancy options. +tracepath6 is good replacement for traceroute6 and classic example of application of Linux error queues. +error messages. Probably, it will change, when they will be updated. For now it uses Van Jacobson's +trick, sweeping a range of UDP ports to maintain trace history. +-n Print primarily IP addresses numerically. +% +msgfilter - edit translations of message catalog +msgfilter [OPTION] FILTER [FILTER-OPTION] +Applies a filter to all translations of a translation catalog. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +-i, --input=INPUTFILE +input PO file +-D, --directory=DIRECTORY +add DIRECTORY to list for input files search +% +arpaname - translate IP addresses to the corresponding ARPA names +arpaname {ipaddress ...} +BIND 9 Administrator Reference Manual. +Internet Systems Consortium, Inc. +% +ntp-keygen - Create a NTP host key +ntp-keygen [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +software library has been installed, it generates keys, certificate and identity files used in public key +cryptography. These files are used for cookie encryption, digital signature and challenge/response iden‐ +tification algorithms compatible with the Internet standard security infrastructure. +All files are in PEM-encoded printable ASCII format, so they can be embedded as MIME attachments in mail +to other sites and certificate authorities. By default, files are not encrypted. +% +dnsdomainname - show DNS domain name +dnsdomainname [OPTION...] +Show domain part of the system's fully qualified host name. +The tool uses gethostname to get the host name of the system and getaddrinfo to resolve it into a canoni‐ +cal name. The part after the first period ('.') of the canonical name is shown. +-?, --help +give this help list +--usage +give a short usage message +% +ntpd - NTP daemon program +The ntpd utility is an operating system daemon which sets and maintains the system time of day in syn‐ +chronism with Internet standard time servers. It is a complete implementation of the Network Time Proto‐ +onds. While the ultimate precision is not achievable with ordinary workstations and networks of today, +% +indxbib - make inverted index for bibliographic databases +indxbib [ -vw ] [ -cfile ] [ -ddir ] [ -ffile ] [ -hn ] [ -istring ] [ -kn ] [ -ln ] [ -nn ] [ -ofile ] +[ -tn ] [ filename... ] +which is then renamed to this. If no filenames are given on the command line because the -f option has +been used, and no -o option is given, the index will be named Ind.i. +Bibliographic databases are divided into records by blank lines. Within a record, each fields starts +with a % character at the beginning of a line. Fields have a one letter name which follows the % charac‐ +ter. +The values set by the -c, -n, -l and -t options are stored in the index; when the index is searched, keys +% +gencat — generate a formatted message catalog +gencat catfile msgfile... +The gencat utility shall merge the message text source file msgfile into a formatted message catalog cat‐ +file. The file catfile shall be created if it does not already exist. If catfile does exist, its mes‐ +sages shall be included in the new catfile. If set and message numbers collide, the new message text +defined in msgfile shall replace the old message text currently contained in catfile. +% +grub-mkrescue - make a GRUB rescue image +grub-mkrescue [OPTION...] [OPTION] SOURCE... +Make GRUB CD-ROM, disk, pendrive and floppy bootable image. +--compress=no|xz|gz|lzo +compress GRUB files [optional] +-d, --directory=DIR +use images and modules under DIR [default=/usr/lib/grub/<platform>] +--fonts=FONTS +install FONTS [default=unicode] +% +xfs_fsr - filesystem reorganizer for XFS +xfs_fsr [-vdg] [-t seconds] [-p passes] [-f leftoff] [-m mtab] +xfs_fsr [-vdg] [xfsdev | file] ... +xfs_fsr -V +xfs_fsr is applicable only to XFS filesystems. +xfs_fsr improves the organization of mounted filesystems. The reorganization algorithm operates on one +file at a time, compacting or otherwise improving the layout of the file extents (contiguous blocks of +file data). +The following options are accepted by xfs_fsr. The -m, -t, and -f options have no meaning if any +filesystems or files are specified on the command line. +% +touch - change file timestamps +touch [OPTION]... FILE... +Update the access and modification times of each FILE to the current time. +A FILE argument that does not exist is created empty, unless -c or -h is supplied. +A FILE argument string of - is handled specially and causes touch to change the times of the file associ‐ +ated with standard output. +Mandatory arguments to long options are mandatory for short options too. +-a change only the access time +% +chacl - change the access control list of a file or directory +chacl acl pathname... +chacl -b acl dacl pathname... +chacl -d dacl pathname... +chacl -R pathname... +chacl -D pathname... +chacl -B pathname... +chacl -l pathname... +chacl -r pathname... +chacl is an IRIX-compatibility command, and is maintained for those users who are familiar with its use +% +secret-tool - Store and retrieve passwords +secret-tool store --label='Label' {attribute} {value} ... +secret-tool lookup {attribute} {value} ... +secret-tool clear {attribute} {value} ... +secret-tool search [--all]{attribute} {value} ... +secret-tool is a command line tool that can be used to store and retrieve passwords. +Each password is stored in an item. Items are uniquely identified by a set of attribute keys and values. +When storing a password you must specify unique pairs of attributes names and values, and when looking up +a password you provide the same attribute name and value pairs. +% +cations to provide batch processing features. +database file. If the database file does not exist, it will be created. If the database file does +exist, it will be opened. +For example, to create a new database file named "mydata.db", create a table named "memos" and insert a +couple of records into that table: +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +glib-gettextize - gettext internationalization utility +glib-gettextize [OPTION...] [DIRECTORY] +glib-gettextize helps to prepare a source package for being internationalized through gettext. It is a +variant of the gettextize that ships with gettext. +glib-gettextize differs from gettextize in that it doesn't create an intl/ subdirectory and doesn't +modify po/ChangeLog (note that newer versions of gettextize behave like this when called with the +--no-changelog option). +--help +print help and exit +% +ldns-compare-zones - read and compare two zonefiles and print differences +ldns-compare-zones reads two DNS zone files and prints number of differences. +Output is formated to: ++NUM_INS -NUM_DEL ~NUM_CHG +are considered inserted, and counted as NUM_INS. If an owner name is present in both, but there is a dif‐ +ference in the amount or content of the records, these are considered changed, and counted as NUM_CHG. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +fsck.cramfs - fsck compressed ROM file system +fsck.cramfs [options] file +fsck.cramfs is used to check the cramfs file system. +-v, --verbose +Enable verbose messaging. +-b, --blocksize blocksize +Use this blocksize, defaults to page size. Must be equal to what was set at creation time. Only +used for --extract. +--extract[=directory] +% +xmlcatalog - Command line tool to parse and manipulate XML or SGML catalog files. +--noout | --no-super-update | [-v | --verbose]] {CATALOGFILE} {ENTITIES...} +xmlcatalog is a command line application allowing users to monitor and manipulate XML and SGML catalogs. +Its functions can be invoked from a single command from the command line, or it can perform multiple +functions in interactive mode. It can operate on both XML and SGML files. +xmlcatalog accepts the following options (in alphabetical order): +--add TYPE ORIG REPLACE +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +irqbalance - distribute hardware interrupts across processors on a multiprocessor system +irqbalance +The purpose of irqbalance is to distribute hardware interrupts across processors on a multiprocessor sys‐ +tem in order to increase performance. +-o, --oneshot +Causes irqbalance to be run once, after which the daemon exits. +-d, --debug +Causes irqbalance to print extra debug information. Implies --foreground. +-f, --foreground +% +xfs_ncheck - generate pathnames from i-numbers for XFS +xfs_ncheck [ -i ino ] ... [ -f ] [ -s ] [ -l logdev ] device +xfs_ncheck -V +xfs_ncheck with no -i arguments generates an inode number and pathname list of all files on the given +order. The filesystem to be examined is specified by the device argument, which should be the disk or +volume device for the filesystem. Filesystems stored in files can also be checked, using the -f flag. +-f Specifies that the filesystem image to be processed is stored in a regular file at device (see +into an ordinary file. +% +bzcat - decompresses files to stdout +bzcat [ -s ] [ filenames ... ] +coding. Compression is generally considerably better than that achieved by more conventional +The command-line options are deliberately very similar to those of GNU gzip, but they are not identical. +% +btrfs-rescue - Recover a damaged btrfs filesystem +btrfs rescue <subcommand> <args> +btrfs rescue is used to try to recover a damaged btrfs filesystem. +chunk-recover [options] <device> +Recover the chunk tree by scanning the devices +Options +-y +assume an answer of yes to all questions. +% +tracepath, tracepath6 - traces path to a network host discovering MTU along this path +tracepath [-n] [-b] [-l pktlen] [-m max_hops] [-p port] {destination} +It traces path to destination discovering MTU along this path. It uses UDP port port or some random +port. It is similar to traceroute, only does not require superuser privileges and has no fancy options. +tracepath6 is good replacement for traceroute6 and classic example of application of Linux error queues. +error messages. Probably, it will change, when they will be updated. For now it uses Van Jacobson's +trick, sweeping a range of UDP ports to maintain trace history. +-n Print primarily IP addresses numerically. +% +coredumpctl - Retrieve and process saved core dumps and metadata +coredumpctl is a tool that can be used to retrieve and process core dumps and metadata which were saved +The following options are understood: +-h, --help +Print a short help text and exit. +--version +Print a short version string and exit. +% +-D user_dn +tion on the LDAP server. +-w passwd +-H ldapuri +% +xfs_growfs, xfs_info - expand an XFS filesystem +xfs_growfs [ -dilnrx ] [ -D size ] [ -e rtextsize ] [ -L size ] [ -m maxpct ] [ -t mtab ] [ -R size ] +mount-point +xfs_growfs -V +xfs_info [ -t mtab ] mount-point +xfs_info -V +The existing contents of the filesystem are undisturbed, and the added space becomes available for addi‐ +tional file storage. +% +tr - translate or delete characters +Translate, squeeze, and/or delete characters from standard input, writing to standard output. +-c, -C, --complement +-d, --delete +-s, --squeeze-repeats +replace each sequence of a repeated character that is listed in the last specified SET, with a +single occurrence of that character +% +rarp - manipulate the system RARP table +rarp [-V] [--version] [-h] [--help] +rarp -a +rarp [-v] -d hostname ... +rarp [-v] [-t type] -s hostname hw_addr +replacement RARP daemon, see ftp://ftp.dementia.org/pub/net-tools +Rarp manipulates the kernel's RARP table in various ways. The primary options are clearing an address +mapping entry and manually setting up one. For debugging purposes, the rarp program also allows a com‐ +plete dump of the RARP table. +% +kadmin [-O|-N] [-r realm] [-p principal] [-q query] [[-c cache_name]|[-k [-t keytab]]|-n] [-w password] +[-s admin_server[:port]] +kadmin.local [-r realm] [-p principal] [-q query] [-d dbname] [-e enc:salt ...] [-m] [-x db_args] +vide nearly identical functionalities; the difference is that kadmin.local directly accesses the KDC +man page will use "kadmin" to refer to both versions. kadmin provides for the maintenance of Kerberos +principals, password policies, and service key tables (keytabs). +The remote kadmin client uses Kerberos to authenticate to kadmind using the service principal kad‐ +min/ADMINHOST (where ADMINHOST is the fully-qualified hostname of the admin server) or kadmin/admin. If +% +machinectl - Control the systemd machine manager +considered running instances of: +· Virtual Machines (VMs) that virtualize hardware to run full operating system (OS) instances +(including their kernels) in a virtualized environment on top of the host OS. +· Containers that share the hardware and OS kernel with the host OS, in order to run OS userspace +instances on top the host OS. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +less - opposite of more +less -? +less --help +less -V +less --version +less [-[+]aABcCdeEfFgGiIJKLmMnNqQrRsSuUVwWX~] +[-b space] [-h lines] [-j line] [-k keyfile] +[-{oO} logfile] [-p pattern] [-P prompt] [-t tag] +[-T tagsfile] [-x tab,...] [-y lines] [-[z] lines] +[-# shift] [+[+]cmd] [--] [filename]... +movement. Also, less does not have to read the entire input file before starting, so with large input +% +nproc - print the number of processing units available +nproc [OPTION]... +of online processors +--all print the number of installed processors +--ignore=N +if possible, exclude N processing units +--help display this help and exit +--version +% +unicode_start - put keyboard and console in unicode mode +unicode_start [font [umap]] +put accordingly. +The parameter font is a font that is loaded. It should have a built-in Unicode map, or, if it hasn't, +such a map can be given explicitly as second parameter. When no font was specified, the current font is +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +ldns-rrsig - print out the inception and expiration dates in human readable form +ldns-rrsig domain [ type ] +ldns-rrsig is used to print the expiration and inception date of a RRSIG. The first argument is a domain +name. ldns-rrsig will query the authoritative servers for that domain to get a list of RRSIGs. It will +then print out the inception and experiration dates for the RRSIG covering the SOA record. +If the second argument type is given the RRSIG covering that type will be shown. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +blkdiscard - discard sectors on a device +blkdiscard [options] [-o offset] [-l length] device +ior based on range or size, as explained below. +The device argument is the pathname of the block device. +WARNING: All data in the discarded region on the device will be lost! +% +lvdisplay — display attributes of a logical volume +lockingfailure] [--ignoreskippedcluster] [--maps] [--nosuffix] [-P|--partial] [--reportformat +{basic|json}] [-S|--select Selection] [--units hHbBsSkKmMgGtTpPeE] [-v|--verbose] [--version] [Vol‐ +tion] ...] [-d|--debug] [-h|-?|--help] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] +[--noheadings] [--nosuffix] [-P|--partial] [--reportformat {basic|json}] [--segments] [--separator Sepa‐ +lvdisplay allows you to see the attributes of a logical volume like size, read/write status, snapshot +% +xmllint - command line XML tool +xmllint [--version | --debug | --shell | --xpath "XPath_expression" | --debugent | --copy | --recover | +--noent | --noout | --nonet | --path "PATH(S)" | --load-trace | --htmlout | --nowrap | --valid | +--postvalid | --dtdvalid URL | --dtdvalidfpi FPI | --timing | --output FILE | --repeat | --insert +| --compress | --html | --xmlout | --push | --memory | --maxmem NBBYTES | --nowarning | +--noblanks | --nocdata | --format | --encode ENCODING | --dropdtd | --nsclean | --testIO | +--catalogs | --nocatalogs | --auto | --xinclude | --noxincludenode | --loaddtd | --dtdattr | +--stream | --walker | --pattern PATTERNVALUE | --chkregister | --relaxng SCHEMA | --schema SCHEMA +xmllint --help +The xmllint program parses one or more XML files, specified on the command line as XML-FILE (or the +standard input if the filename provided is - ). It prints various types of output, depending upon the +% +gcc - GNU project C and C++ compiler +gcc [-c|-S|-E] [-std=standard] +[-g] [-pg] [-Olevel] +[-Wwarn...] [-Wpedantic] +[-Idir...] [-Ldir...] +[-Dmacro[=defn]...] [-Umacro] +[-foption...] [-mmachine-option...] +[-o outfile] [@file] infile... +Only the most useful options are listed here; see below for the remainder. g++ accepts mostly the same +options as gcc. +When you invoke GCC, it normally does preprocessing, compilation, assembly and linking. The "overall +options" allow you to stop this process at an intermediate stage. For example, the -c option says not to +% +gcov - coverage testing tool +gcov [-v|--version] [-h|--help] +[-a|--all-blocks] +[-b|--branch-probabilities] +[-c|--branch-counts] +[-d|--display-progress] +[-f|--function-summaries] +[-i|--intermediate-format] +[-l|--long-file-names] +[-m|--demangled-names] +[-n|--no-output] +[-o|--object-directory directory|file] +[-p|--preserve-paths] +[-r|--relative-only] +[-s|--source-prefix directory] +% +libtoolize [OPTION]... +Prepare a package to use libtool. +-c, --copy +copy files rather than symlinking them +--debug +enable verbose shell tracing +-n, --dry-run +print commands rather than running them +% +cpp - The C Preprocessor +cpp [-Dmacro[=defn]...] [-Umacro] +[-Idir...] [-iquotedir...] +[-Wwarn...] +[-M|-MM] [-MG] [-MF filename] +[-MP] [-MQ target...] +[-MT target...] +[-P] [-fno-working-directory] +[-x language] [-std=standard] +infile outfile +Only the most useful options are listed here; see below for the remainder. +The C preprocessor, often known as cpp, is a macro processor that is used automatically by the C compiler +% +wall - write a message to all users +wall [-n] [-t timeout] [message | file] +wall displays a message, or the contents of a file, or otherwise its standard input, on the terminals of +all currently logged in users. The command will wrap lines that are longer than 79 characters. Short +lines are whitespace padded to have 79 characters. The command will always put a carriage return and new +line at the end of each line. +Only the superuser can write on the terminals of users who have chosen to deny messages or are using a +program which automatically denies messages. +Reading from a file is refused when the invoker is not superuser and the program is suid or sgid. +% +sftp — secure file transfer program +[-i identity_file] [-l limit] [-o ssh_option] [-P port] [-R num_requests] [-S program] +[-s subsystem | sftp_server] host +sftp [user@]host[:file ...] +sftp [user@]host[:dir[/]] +sftp -b batchfile [user@]host +compression. sftp connects and logs into the specified host, then enters an interactive command mode. +The second usage format will retrieve files automatically if a non-interactive authentication method is +used; otherwise it will do so after successful interactive authentication. +% +systemd-cat - Connect a pipeline or program's output with the journal +filter tool in a shell pipeline to pass the output the previous pipeline element generates to the +journal. +If no parameter is passed, systemd-cat will write everything it reads from standard input (stdin) to the +journal. +If parameters are passed, they are executed as command line with standard output (stdout) and standard +error output (stderr) connected to the journal, so that all it writes is stored in the journal. +% +glilypond — integrate lilypond parts into groff +glilypond [ options] [-] [--] [ filespec ....] +glilypond transforms sheet music written in the lilypond language into the groff(7) language using the +Files in groff language and standard input can be provided as arguments. +Breaking Options +-?|-h|--help|--usage +Print help or usage information, then leave the program. +--version +% +hostname - show or set system host name +Show or set the system's host name. +-a, --aliases +alias names +-d, --domain +DNS domain name +-f, --fqdn, --long +DNS host name or FQDN +% +systemd-sysusers, systemd-sysusers.service - Allocate system users and groups +systemd-sysusers.service +systemd-sysusers creates system users and groups, based on the file format and location specified in +If invoked with no arguments, it applies all directives from all files found. If one or more filenames +are passed on the command line, only the directives in these files are applied. If only the basename of a +string - is specified as filename, entries from the standard input of the process are read. +% +dnssec-keygen - DNSSEC key generation tool +[-D date/offset] [-D sync date/offset] [-E engine] [-f flag] [-G] [-g generator] [-h] +[-I date/offset] [-i interval] [-K directory] [-k] [-L ttl] [-P date/offset] +[-P sync date/offset] [-p protocol] [-q] [-R date/offset] [-r randomdev] [-S key] +[-s strength] [-t type] [-V] [-v level] [-z] {name} +The name of the key is specified on the command line. For DNSSEC keys, this must match the name of the +zone for which the key is being generated. +% +msgen - create English message catalog +msgen [OPTION] INPUTFILE +Creates an English translation catalog. The input file is the last created English PO file, or a PO Tem‐ +plate file (generally created by xgettext). Untranslated entries are assigned a translation that is +identical to the msgid. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE +input PO or POT file +-D, --directory=DIRECTORY +% +srptool - GnuTLS SRP tool +srptool [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Simple program that emulates the programs in the Stanford SRP (Secure Remote Password) libraries using +GnuTLS. It is intended for use in places where you don't expect SRP authentication to be the used for +system users. +In brief, to use SRP you need to create two files. These are the password file that holds the users and +the verifiers associated with them and the configuration file to hold the group parameters (called +tpasswd.conf). +% +install - copy files and set attributes +install [OPTION]... [-T] SOURCE DEST +install [OPTION]... SOURCE... DIRECTORY +install [OPTION]... -t DIRECTORY SOURCE... +install [OPTION]... -d DIRECTORY... +want to download and install a ready-to-use package on a GNU/Linux system, you should instead be using a +In the first three forms, copy SOURCE to DEST or multiple SOURCE(s) to the existing DIRECTORY, while set‐ +TORY(ies). +% +modinfo - Show information about a Linux Kernel module +modinfo [-0] [-F field] [-k kernel] [modulename|filename...] +modinfo -V +modinfo -h +modinfo extracts information from the Linux Kernel modules given on the command line. If the module name +when loading kernel modules. +modinfo by default lists each attribute of the module in form fieldname : value, for easy reading. The +filename is listed the same way (although it's not really an attribute). +% +scriptreplay - play back typescripts, using timing information +scriptreplay [options] [-t] timingfile [typescript [divisor]] +rhythm as it originally appeared when the script was recorded. +The replay simply displays the information again; the programs that were run when the typescript was +being recorded are not run again. Since the same information is simply being displayed, scriptreplay is +only guaranteed to work properly if run on the same type of terminal the typescript was recorded on. +which scriptreplay is sending its output. +% +routel - list routes with pretty output format +routef - flush routes +routel [tablenr [raw ip args...]] +routef +The routel script will list routes in a format that some might consider easier to interpret then the ip +route list equivalent. +The routef script does not take any arguments and will simply flush the routing table down the drain. +FILES +/usr/bin/routef +/usr/bin/routel +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +ldnsd - simple daemon example code +ldnsd port zone zonefile +server! +ldnsd takes a port, zone and zonefile as arguments. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +Report bugs to <ldns-team@nlnetlabs.nl>. +% +ncursesw6-config - helper script for ncurses libraries +ncursesw6-config [options] +libraries. +--prefix +echos the package-prefix of ncurses +--exec-prefix +echos the executable-prefix of ncurses +--cflags +% +bsdcat — expand files to standard output +bsdcat [options] [files] +bsdcat expands files to standard output. +decompressed data it written to standard output. +To decompress a file: +bsdcat example.txt.gz > example.txt +% +mesg - display (or do not display) messages from other users +mesg [option] [n|y] +The mesg utility is invoked by a user to control write access others have to the terminal device associ‐ +Traditionally, write access is allowed by default. However, as users become more conscious of various +security risks, there is a trend to remove write access by default, at least for the primary login shell. +To make sure your ttys are set the way you want them to be set, mesg should be executed in your login +scripts. +n Disallow messages. +% +pvmove — move physical extents +[-d|--debug] [-h|--help] [-i|--interval Seconds] [--noudevsync] [--reportformat {basic|json}] [-v|--ver‐ +bose] [-n|--name LogicalVolume] [SourcePhysicalVolume[:PE[-PE]...] [DestinationPhysicalVol‐ +ume[:PE[-PE]...]...]] +pvmove allows you to move the allocated physical extents (PEs) on SourcePhysicalVolume to one or more +extents used by that LV will be moved to free (or specified) extents on DestinationPhysicalVolume(s). If +no DestinationPhysicalVolume is specified, the normal allocation rules for the Volume Group are used. +If pvmove gets interrupted for any reason (e.g. the machine crashes) then run pvmove again without any +PhysicalVolume arguments to restart any moves that were in progress from the last checkpoint. Alterna‐ +tively use pvmove --abort at any time to abort. The resulting location of logical volumes after an abort +% +makeinfo [OPTION]... TEXINFO-FILE... +Translate Texinfo source documentation to various other formats, by default Info files suitable for read‐ +ing online with Emacs or standalone GNU Info. +not depend on the installed name. +General options: +--document-language=STR locale to use in translating Texinfo keywords +for the output document (default C). +--error-limit=NUM +% +lsof - list open files +lsof [ -?abChKlnNOPRtUvVX ] [ -A A ] [ -c c ] [ +c c ] [ +|-d d ] [ +|-D D ] [ +|-e s ] [ +|-E ] [ +|-f +[cfgGn] ] [ -F [f] ] [ -g [s] ] [ -i [i] ] [ -k k ] [ +|-L [l] ] [ +|-m m ] [ +|-M ] [ -o [o] ] [ -p s ] +[ +|-r [t[m<fmt>]] ] [ -s [p:s] ] [ -S [t] ] [ -T [t] ] [ -u s ] [ +|-w ] [ -x [fl] ] [ -z [z] ] [ -Z [Z] +] [ -- ] [names] +% +setcap - set file capabilities +setcap [-q] [-v] (capabilities|-|-r) filename [ ... capabilitiesN fileN ] +In the absence of the -v (verify) option setcap sets the capabilities of each specified filename to the +capabilities specified. The -v option is used to verify that the specified capabilities are currently +associated with the file. +The special capability string, '-', can be used to indicate that capabilities are read from the standard +The special capability string, '-r', is used to remove a capability set from a file. +% +jfs_tune - adjust tunable file system parameters on JFS +jfs_tune [options] device +jfs_tune adjusts tunable parameters on a Linux JFS file system or external journal. jfs_tune must be run +as root. +system or JFS external journal has been created. +-J device=external-journal +Attach the JFS external journal located on external-journal to the JFS file system on device. +The external journal must already have been created using the command. More than one file system +% +resizecons - change kernel idea of the console size +resizecons COLSxROWS +resizecons -lines ROWS +The resizecons command tries to change the videomode of the console. There are several aspects to this: +(a) the kernel must know about it, (b) the hardware must know about it, (c) user programs must know about +console screen memory for all virtual consoles, and might fail if there is not enough memory. (In that +The most difficult part of this is (b), since it requires detailed knowledge of the video card hardware, +% +firewalld - Dynamic Firewall Manager +firewalld provides a dynamically managed firewall with support for network/firewall zones to define the +ethernet bridges and has a separation of runtime and permanent configuration options. It also supports an +interface for services or applications to add firewall rules directly. +These are the command line options of firewalld: +-h, --help +Prints a short help text and exists. +% +mkinitcpio - Create an initial ramdisk environment +mkinitcpio [options] +Creates an initial ramdisk environment for booting the linux kernel. The initial ramdisk is in essence a +very small environment (early userspace) which loads various kernel modules and sets up necessary things +filesystems and root filesystems on a software RAID array. mkinitcpio allows for easy extension with +custom hooks, has autodetection at runtime, and many other features. +-A, --addhooks hooks +Add the additional hooks to the image. These will be processed in order after all other hooks from +times. +% +chage - change user password expiry information +chage [options] LOGIN +The chage command changes the number of days between password changes and the date of the last password +The options which apply to the chage command are: +-d, --lastday LAST_DAY +be expressed in the format YYYY-MM-DD (or the format more commonly used in your area). +-E, --expiredate EXPIRE_DATE +% +groupadd - create a new group +groupadd [options] group +The groupadd command creates a new group account using the values specified on the command line plus the +default values from the system. The new group will be entered into the system files as needed. +The options which apply to the groupadd command are: +-f, --force +exists. When used with -g, and the specified GID already exists, another (unique) GID is chosen (i.e. +-g is turned off). +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +workers] [-P pid_file] [-T time_offset] +The -r realm option specifies the realm for which the server should provide service. +does not apply to the LDAP database. +The -k keytype option specifies the key type of the master key to be entered manually as a password when +-m is given; the default is des-cbc-crc. +% +env - run a program in a modified environment +Mandatory arguments to long options are mandatory for short options too. +-i, --ignore-environment +start with an empty environment +-0, --null +end each output line with NUL, not newline +% +mdadm - manage MD devices aka Linux Software RAID +mdadm [mode] <raiddevice> [options] <component-devices> +devices (typically disk drives or partitions thereof) to be combined into a single device to hold (for +example) a single filesystem. Some RAID levels include redundancy and so can survive some degree of +device failure. +Linux Software RAID devices are implemented through the md (Multiple Devices) device driver. +MULTIPATH is not a Software RAID mechanism, but does involve multiple devices: each device is a path to +% +features an extremely fast decoder, with speed in multiple GB/s per core, typically reaching RAM speed +% +bc - An arbitrary precision calculator language +bc [ -hlwsqv ] [long-options] [ file ... ] +bc is a language that supports arbitrary precision numbers with interactive execution of statements. +There are some similarities in the syntax to the C programming language. A standard math library is +available by command line option. If requested, the math library is defined before processing any files. +bc starts by processing code from all the files listed on the command line in the order listed. After +all files have been processed, bc reads from the standard input. All code is executed as it is read. +(If a file contains a command to halt the processor, bc will never read from the standard input.) +document describes the language accepted by this processor. Extensions will be identified as such. +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +taskset - set or retrieve a process's CPU affinity +taskset [options] mask command [argument...] +taskset [options] -p [mask] pid +taskset is used to set or retrieve the CPU affinity of a running process given its pid, or to launch a +new command with a given CPU affinity. CPU affinity is a scheduler property that "bonds" a process to a +given set of CPUs on the system. The Linux scheduler will honor the given CPU affinity and the process +scheduler attempts to keep processes on the same CPU as long as practical for performance reasons. +Therefore, forcing a specific CPU affinity is useful only in certain applications. +The CPU affinity is represented as a bitmask, with the lowest order bit corresponding to the first logi‐ +% +nm - list symbols from object files +nm [-A|-o|--print-file-name] [-a|--debug-syms] +[-B|--format=bsd] [-C|--demangle[=style]] +[-D|--dynamic] [-fformat|--format=format] +[-g|--extern-only] [-h|--help] +[-l|--line-numbers] [-n|-v|--numeric-sort] +[-P|--portability] [-p|--no-sort] +[-r|--reverse-sort] [-S|--print-size] +[-s|--print-armap] [-t radix|--radix=radix] +[-u|--undefined-only] [-V|--version] +[--plugin name] [--size-sort] [--special-syms] +[--synthetic] [--target=bfdname] +[objfile...] +% +gropdf - PDF driver for groff +gropdf [-delvs] [-F dir] [-p papersize] [-y foundry] [-u [cmapfile]] [files ...] +It is possible to have whitespace between a command line option and its parameter. +gropdf translates the output of GNU troff to PDF. Normally gropdf should be invoked by using the groff +command with a -Tpdf option. If no files are given, gropdf reads the standard input. A filename of - +also causes gropdf to read the standard input. PDF output is written to the standard output. When +gropdf is run by groff options can be passed to gropdf using groff's -P option. +See section FONT INSTALLATION below for a guide how to install fonts for gropdf. +-d Include debug information as comments within the PDF. Also produces an uncompressed PDF. +% +ksu - Kerberized super-user +ksu [ target_user ] [ -n target_principal_name ] [ -c source_cache_name ] [ -k ] [ -r time ] [ -pf ] [ -l +lifetime ] [ -z | Z ] [ -q ] [ -e command [ args ... ] ] [ -a [ args ... ] ] +REQUIREMENTS +use ksu. +ksu is a Kerberized version of the su program that has two missions: one is to securely change the real +and effective user ID to that of the target user, and the other is to create a new security context. +For the sake of clarity, all references to and attributes of the user invoking the program will start +with "source" (e.g., "source user", "source cache", etc.). +% +msgcomm - match two message catalogs +msgcomm [OPTION] [INPUTFILE]... +Find messages which are common to two or more of the specified PO files. By using the --more-than +print the unique messages). Translations, comments and extracted comments will be preserved, but only +from the first PO file to define them. File positions from all PO files will be cumulated. +Mandatory arguments to long options are mandatory for short options too. +Input file location: +INPUTFILE ... +input files +% +reiserfsck - The checking tool for the ReiserFS filesystem. +reiserfsck [ -aprVy ] [ --rebuild-sb | --check | --fix-fixable | --rebuild-tree | --clean-attributes ] [ +-j | --journal device ] [ -z | --adjust-size ] [ -n | --nolog ] [ -B | --badblocks file ] [ -l | --log‐ +file file ] [ -q | --quiet ] [ -y | --yes ] [ -f | --force ] [ -S | --scan-whole-partition ] [ --no-jour‐ +nal-available ] device +Reiserfsck searches for a Reiserfs filesystem on a device, replays any necessary transactions, and either +checks or repairs the file system. +device is the special file corresponding to a device or to a partition (e.g /dev/hdXX for an IDE disk +partition or /dev/sdXX for a SCSI disk partition). +--rebuild-sb +% +xfs_metadump - copy XFS filesystem metadata to a file +xfs_metadump [ -aefFgow ] [ -m max_extents ] ] [ -l logdev ] source target +xfs_metadump -V +xfs_metadump is a debugging tool that copies the metadata from an XFS filesystem to a file. The source +argument must be the pathname of the device or file containing the XFS filesystem and the target argument +output to be redirected to another program such as a compression application. +xfs_metadump does not alter the source filesystem in any way. The target image is a contiguous (non- +sparse) file containing all the filesystem's metadata and indexes to where the blocks were copied from. +% +ldd - print shared object dependencies +ldd [option]... file... +ldd prints the shared objects (shared libraries) required by each program or shared object specified on +the command line. An example of its use and output is the following: +$ ldd /bin/ls +% +expand - convert tabs to spaces +expand [OPTION]... [FILE]... +Convert tabs in each FILE to spaces, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-i, --initial +do not convert tabs after non blanks +-t, --tabs=NUMBER +% +basename - strip directory and suffix from filenames +Mandatory arguments to long options are mandatory for short options too. +-a, --multiple +-s, --suffix=SUFFIX +remove a trailing SUFFIX; implies -a +% +safety mechanism. The -f option disables this safety mechanism. +-h Display a usage message. +-n Dry-run; do not actually write blocks back to the filesystem. +% +mkfs.btrfs - create a btrfs filesystem +mkfs.btrfs [-A|--alloc-start <alloc-start>] [-b|--byte-count <byte-count>] [-d|--data <data-profile>] +[-m|--metadata <metadata profile>] [-M|--mixed] [-l|--leafsize <leafsize>] [-n|--nodesize <nodesize>] +[-s|--sectorsize <sectorsize>] [-L|--label <label>] [-K|--nodiscard] [-r|--rootdir <rootdir>] +[-V|--version] <device> [<device>...] +mkfs.btrfs is used to create the btrfs filesystem on a single or multiple devices. <device> is typically +a block device but can be a file-backed image as well. Multiple devices are grouped by UUID of the +filesystem. +Before mounting such filesystem, the kernel module must know all the devices either via preceding +execution of btrfs device scan or using the device mount option. See section MULTIPLE DEVICES for more +details. +% +runlevel - Print previous and current SysV runlevel +runlevel [options...] +"Runlevels" are an obsolete way to start and stop groups of services used in SysV init. systemd provides +a compatibility layer that maps runlevels to targets, and associated binaries like runlevel. +Nevertheless, only one runlevel can be "active" at a given time, while systemd can activate multiple +targets concurrently, so the mapping to runlevels is confusing and only approximate. Runlevels should not +be used in new code, and are mostly useful as a shorthand way to refer the matching systemd targets in +kernel boot parameters. +┌─────────┬───────────────────┐ +│Runlevel │ Target │ +├─────────┼───────────────────┤ +% +pdfroff - create PDF documents using groff +pdfroff [-abcegilpstzCEGNRSUVXZ] [-d cs] [-f fam] [-F dir] [-I dir] [-L arg] [-m name] [-M dir] [-n num] +[-o list] [-P arg] [-r cn] [-T dev] [-w name] [-W name] [--emit-ps] [--no-toc-relocation] [--no- +kill-null-pages] [--stylesheet=name] [--no-pdf-output] [--pdf-output=name] +[--no-reference-dictionary] [--reference-dictionary=name] [--report-progress] +[--keep-temporary-files] file ... +pdfroff -h | --help +pdfroff -v | --version [option ...] +pdfroff is a wrapper program for the GNU text processing system, groff. It transparently handles the +mechanics of multiple pass groff processing, when applied to suitably marked up groff source files, such +that tables of contents and body text are formatted separately, and are subsequently combined in the cor‐ +rect order, for final publication as a single PDF document. A further optional “style sheet” capability +is provided; this allows for the definition of content which is required to precede the table of con‐ +% +update-smart-drivedb - update smartmontools drive database +other platforms.] +update-smart-drivedb updates /usr/share/smartmontools/drivedb.h or DESTFILE from smartmontools SVN repos‐ +itory. +It tries to download first from the current branch and then from trunk. The tools used for downloading +The old file is kept if the downloaded file is identical (ignoring the differences in Id string) other‐ +wise it is moved to drivedb.h.old. +% +sg - execute command as different group ID +sg [-] [group [-c ] command] +The sg command works similar to newgrp but accepts a command. The command will be executed with the +Another difference between newgrp and sg is that some shells treat newgrp specially, replacing themselves +command you are returned to your previous group ID. +CONFIGURATION +The following configuration variables in /etc/login.defs change the behavior of this tool: +SYSLOG_SG_ENAB (boolean) +Enable "syslog" logging of sg activity. +% +slabtop - display kernel slab cache information in real time +slabtop [options] +slabtop displays detailed kernel slab cache information in real time. It displays a listing of the top +caches sorted by one of the listed sort criteria. It also displays a statistics header filled with slab +layer information. +Normal invocation of slabtop does not require any options. The behavior, however, can be fine-tuned by +specifying one or more of the following flags: +-d, --delay=N +Refresh the display every n in seconds. By default, slabtop refreshes the display every three +seconds. To exit the program, hit q. +% +journalctl - Query the systemd journal +If called without parameters, it will show the full contents of the journal, starting with the oldest +entry collected. +If one or more match arguments are passed, the output is filtered accordingly. A match is in the format +"FIELD=VALUE", e.g. "_SYSTEMD_UNIT=httpd.service", referring to the components of a structured journal +entry. See systemd.journal-fields(7) for a list of well-known fields. If multiple matches are specified +matching different fields, the log entries are filtered by both, i.e. the resulting output will show only +entries matching all the specified matches of this kind. If two matches apply to the same field, then +% +setmetamode - define the keyboard meta key handling +setmetamode [ {meta|bit|metabit | esc|prefix|escprefix} ] +Without argument, setmetamode prints the current Meta key mode. With argument, it sets the Meta key mode +as indicated. The setting before and after the change are reported. +The Meta key mode is specific for each VT (and the VT corresponding to stdin is used). One might use +setmetamode in /etc/rc to define the initial state of the Meta key mode, e.g. by +for tty in $INITTY; do +setmetamode escprefix < $tty +done +% +gpgconf - Modify .gnupg home directories +gpgconf [options] --list-components +gpgconf [options] --list-options component +gpgconf [options] --change-options component +The gpgconf is a utility to automatically and reasonable safely query and modify configuration files in +the ‘.gnupg’ home directory. It is designed not to be invoked manually by the user, but automatically by +graphical user interfaces (GUI). ([Please note that currently no locking is done, so concurrent access +guarantees.]) +gpgconf provides access to the configuration of one or more components of the GnuPG system. These compo‐ +nents correspond more or less to the programs that exist in the GnuPG framework, like GnuPG, GPGSM, DirM‐ +% +grub-set-default - set the saved default boot entry for GRUB +grub-set-default [OPTION] MENU_ENTRY +-h, --help +print this message and exit +-V, --version +print the version information and exit +--boot-directory=DIR +expect GRUB images under the directory DIR/grub instead of the /boot/grub directory +% +vgimport — make exported volume groups known to the system +vgimport [-a|--all] [-d|--debug] [-h|-?|--help] [--reportformat {basic|json}] [-S|--select Selection] +system again, perhaps after moving its Physical Volumes from a different machine. vgexport clears the VG +system ID, and vgimport sets the VG system ID to match the host running vgimport (if the host has a sys‐ +tem ID). +-a, --all +Import all exported Volume Groups. +% +chsh - change your login shell +chsh [-s shell] [-l] [-u] [-v] [username] +chsh is used to change your login shell. If a shell is not given on the command line, chsh prompts for +one. +chsh supports non-local entries (kerberos, LDAP, etc.) if linked with libuser, otherwise use ypchsh, +lchsh or any other implementation for non-local entries. +-s, --shell shell +Specify your login shell. +-l, --list-shells +% +localectl - Control the system locale and keyboard layout settings +The system locale controls the language settings of system services and of the UI before the user logs +in, such as the display manager, as well as the default for users after login. +The keyboard settings control the keyboard layout used on the text console and of the graphical UI before +the user logs in, such as the display manager, as well as the default for users after login. +during early system boot. The initramfs is not rebuilt automatically by localectl. +% +whistles you can expect from a decent OpenPGP implementation. +as it requires several other modules to be installed. +RETURN VALUE +for fatal errors. +% +biosdecode - BIOS information decoder +biosdecode parses the BIOS memory and prints information about all structures (or entry points) it knows +of. Currently known entry point types are: +· SMBIOS (System Management BIOS) +Use dmidecode for a more detailed output. +· DMI (Desktop Management Interface, a legacy version of SMBIOS) +Use dmidecode for a more detailed output. +· SYSID +% +whistles you can expect from a decent OpenPGP implementation. +as it requires several other modules to be installed. +RETURN VALUE +for fatal errors. +% +manpath - determine search path for manual pages +manpath [-qgdc?V] [-m system[,...]] [-C file] +If $MANPATH is set, manpath will simply display its contents and issue a warning. If not, manpath will +determine a suitable manual page hierarchy search path and display the results. +The colon-delimited path is determined using information gained from the man-db configuration file - +(/etc/man_db.conf) and the user's environment. +-q, --quiet +Do not issue warnings. +-d, --debug +% +guile - The GNU Project Extension Language +guile [-L DIRECTORY] [-l FILE] [-e FUNCTION] [\] [-c EXPR] [-s SCRIPT] [--] [SCRIPT [ARGs for SCRIPT]] +Only the most useful options are listed here; see below for the remainder. +standards, providing additional features necessary for real-world use. +Guile works well for interactive use, basic scripting, and extension of larger applications, as well as +for stand-alone Scheme application development. +The guile executable itself provides a stand-alone interactive compiler and run-time for Scheme programs, +both for interactive use and for executing Scheme scripts or programs. +% +namei - follow a pathname until a terminal point is found +namei [options] pathname... +namei interprets its arguments as pathnames to any type of Unix file (symlinks, files, directories, and +so forth). namei then follows each pathname until an endpoint is found (a file, a directory, a device +node, etc). If it finds a symbolic link, it shows the link, and starts following it, indenting the out‐ +put to show the context. +For each line of output, namei uses the following characters to identify the file type found: +f: = the pathname currently being resolved +d = directory +% +emacs - GNU project Emacs +emacs [ command-line switches ] [ files ... ] +The user functionality of GNU Emacs encompasses everything other editors do, and it is easily extensible +since its editing commands are written in Lisp. +The primary documentation of GNU Emacs is in the GNU Emacs Manual, which you can read using Info, either +from Emacs or as a standalone program. Please look there for complete and up-to-date documentation. +Emacs has an extensive interactive help facility, but the facility assumes that you know how to manipu‐ +% +swapon, swapoff - enable/disable devices and files for paging and swapping +swapon [options] [specialfile...] +swapoff [-va] [specialfile...] +swapon is used to specify devices on which paging and swapping are to take place. +to indicate a device by label or uuid. +Calls to swapon normally occur in the system boot scripts making all swap devices available, so that the +paging and swapping activity is interleaved across several devices and files. +swapoff disables swapping on the specified devices and files. When the -a flag is given, swapping is +disabled on all known swap devices and files (as found in /proc/swaps or /etc/fstab). +% +perl [ -sTtuUWX ] [ -hv ] [ -V[:configvar] ] [ -cw ] [ -d[t][:debugger] ] [ -D[number/list] ] +[ -pna ] [ -Fpattern ] [ -l[octal] ] [ -0[octal/hexadecimal] ] +[ -Idir ] [ -m[-]module ] [ -M[-]'module...' ] [ -f ] [ -C [number/list] ] [ -S ] +[ -x[dir] ] [ -i[extension] ] [ [-e|-E] 'command' ] [ -- ] [ programfile ] [ argument ]... +For more information on these options, you can run "perldoc perlrun". +GETTING HELP +The perldoc program gives you access to all the documentation that comes with Perl. You can get more +documentation, tutorials and community support online at <http://www.perl.org/>. +If you're new to Perl, you should start by running "perldoc perlintro", which is a general intro for +beginners and provides some background to help you navigate the rest of Perl's extensive documentation. +Run "perldoc perldoc" to learn more things you can do with perldoc. +% +usbhid-dump - dump USB HID device report descriptors and streams +usbhid-dump [OPTION]... +usbhid-dump uses libusb to dump report descriptors and streams from HID (human interface device) inter‐ +faces of USB devices. By default, it dumps HID interfaces of all connected USB devices, but could be +limited to a subset of them, or to a single interface, using options. +other program receives the input in the meantime. The report descriptor dumping is instantaneous, but +the stream dumping continues until terminated with SIGINT (^C from the terminal) or a timeout expires. +If you accidentally start dumping a stream from the USB keyboard you use to control the terminal, the +system will stop receiving the input and you won't be able to terminate usbhid-dump. Just stop your input +and wait until the timeout expires. The stream dumping will stop, the keyboard will be reattached to the +% +grep, egrep, fgrep - print lines matching a pattern +grep searches the named input FILEs for lines containing a match to the given PATTERN. If no files are +specified, or if the file “-” is given, grep searches standard input. By default, grep prints the +matching lines. +In addition, the variant programs egrep and fgrep are the same as grep -E and grep -F, respectively. +These variants are deprecated, but are provided for backward compatibility. +Generic Program Information +--help Output a usage message and exit. +% +chvt - change foreground virtual terminal +chvt N +The command chvt N makes /dev/ttyN the foreground terminal. (The corresponding screen is created if it +% +dmidecode - DMI table decoder +dmidecode is a tool for dumping a computer's DMI (some say SMBIOS) table contents in a human-readable +pieces of information such as serial numbers and BIOS revision. Thanks to this table, you can retrieve +this information without having to probe for the actual hardware. While this is a good point in terms of +report speed and safeness, this also makes the presented information possibly unreliable. +The DMI table doesn't only describe what the system is currently made of, it also can report the possible +evolutions (such as the fastest supported CPU or the maximal amount of memory supported). +SMBIOS stands for System Management BIOS, while DMI stands for Desktop Management Interface. Both stan‐ +dards are tightly related and developed by the DMTF (Desktop Management Task Force). +% +ld - The GNU linker +ld [options] objfile ... +ld combines a number of object and archive files, relocates their data and ties up symbol references. +Usually the last step in compiling a program is to run ld. +ld accepts Linker Command Language files written in a superset of AT&T's Link Editor Command Language +syntax, to provide explicit and total control over the linking process. +command language and on other aspects of the GNU linker. +read, combine, and write object files in many different formats---for example, COFF or "a.out". +% +vgmerge — merge two volume groups +-l, --list +% +reiserfstune - The tunning tool for the ReiserFS filesystem. +reiserfstune [ -f ] [ -h | --help ] [ -j | --journal-device FILE ] [ --no-journal-available ] [ --jour‐ +nal-new-device FILE ] [ --make-journal-standard ] [ -s | --journal-new-size N ] [ -o | --journal-new-off‐ +set N ] [ -t | --max-transaction-size N ] [ -b | --add-badblocks file ] [ -B | --badblocks file ] [ -u | +--uuid UUID ] [ -l | --label LABEL ] [ -c | --check-interval interval-in-days ] [ -C | --time-last- +checked timestamp ] [ -m | --max-mnt-count count ] [ -M | --mnt-count count ] device +reiserfstune is used for tuning the ReiserFS. It can change two journal parameters (the journal size and +the maximum transaction size), and it can move the journal's location to a new specified block device. +the relocated journal was implemented for a special release of ReiserFS, and was not expected to be put +you must apply a special patch. Without this patch the kernel will refuse to mount the newly modified +% +fuser - identify processes using files or sockets +fuser -l +fuser -V +fuser displays the PIDs of processes using the specified files or file systems. In the default display +mode, each file name is followed by a letter denoting the type of access: +c current directory. +e executable being run. +f open file. f is omitted in default display mode. +F open file for writing. F is omitted in default display mode. +r root directory. +m mmap'ed file or shared library. +% +pstree - display a tree of processes +pstree [-a, --arguments] [-c, --compact] [-h, --highlight-all, -Hpid, --highlight-pid pid] +[-g] --show-pgids] [-l, --long] [-n, --numeric-sort] [-N, --ns-sortns [-p, --show-pids] [-s, --show-par‐ +ents] [-S, --ns-changes] [-u, --uid-changes] [-Z, --security-context] +pstree -V, --version +pstree shows running processes as a tree. The tree is rooted at either pid or init if pid is omitted. +If a user name is specified, all process trees rooted at processes owned by that user are shown. +pstree visually merges identical branches by putting them in square brackets and prefixing them with the +repetition count, e.g. +init-+-getty +% +emacsclient - tells a running Emacs to visit a file +emacsclient [options] files ... +but is not specific to that system. +emacsclient works in conjunction with the built-in Emacs server. +You can either call emacsclient directly or let other programs run it for you when necessary. On GNU and +Unix systems many programs consult the environment variable EDITOR (sometimes also VISUAL) to obtain the +command used for editing. Thus, setting this environment variable to 'emacsclient' will allow these pro‐ +grams to use an already running Emacs for editing. Other operating systems might have their own methods +for defining the default editor. +% +vgcfgbackup — backup volume group descriptor area +vgcfgbackup allows you to backup the metadata of your volume groups. If you don't name any volume groups +on the command line, all of them will be backed up. +In a default installation, each volume group gets backed up into a separate file bearing the name of the +volume group in the directory /etc/lvm/backup. You can write the backup to an alternative file using -f. +%s gets replaced by the volume group name. +% +mouse-test - a tool for determining mouse type and device it's attached to. +mouse-test [ device ... ] +speak. It is able to detect MouseMan devices, and to choose between -t ms (three-buttons aware) and -t +bare old two-buttons-only serial mice. +BUGS +I know the application is buggy, but I only own one mouse device. If you are interested in this applica‐ +tion, just call me and awake me from my laziness. +device [ device ... ] +% +grub-mount - export GRUB filesystem with FUSE +Debug tool for filesystem driver. +-C, --crypto +Mount crypto devices. +-d, --debug=STRING +Set debug environment variable. +-K, --zfs-key=FILE|prompt +Load zfs crypto key. +% +gnutls-serv - GnuTLS server +gnutls-serv [-flags] [-flag [value]] [--option-name[[=| ]value]] +All arguments must be options. +Server program that listens to incoming TLS connections. +-d number, --debug=number +constrained to being: +in the range 0 through 9999 +Specifies the debug level. +% +faked - daemon that remembers fake ownership/permissions of files manipulated by fakeroot processes. +faked [--debug] [--foreground] [--cleanup] [--key msg-key] [--load] [--save-file save-file] [--port TCP- +port] +If a fakeroot process wants to change the ownership of a file, then faked is the process that remembers +that new owner. If later the same fakeroot process does a stat() for that filename, then the libfakeroot +wrapped stat() call will first ask faked for the fake ownership etc of that file, and then report it. +--debug +Print debugging information on stderr. +--foreground +Don't fork into the background. +% +era_invalidate - Provide a list of blocks that have changed since a particular era. +era_invalidate [options] {device|file} +-h, --help +Print help and exit. +-V, --version +Output version information and exit. +% +vmstat - Report virtual memory statistics +vmstat [options] [delay [count]] +vmstat reports information about processes, memory, paging, block IO, traps, disks and cpu activity. +The first report produced gives averages since the last reboot. Additional reports give information on a +delay The delay between updates in seconds. If no delay is specified, only one report is printed with +the average values since boot. +count Number of updates. In absence of count, when delay is defined, default is infinite. +% +vgreduce — reduce a volume group +umePath...] +vgreduce allows you to remove one or more unused physical volumes from a volume group. +-a, --all +Removes all empty physical volumes if none are given on command line. +--removemissing +% +serve as a pager for text files named as arguments or passed on standard input, and as a general purpose +directory browser. +capabilities do not meet your needs, the target URL can be handed over to a graphical browser with a sin‐ +gle command. +% +Mandatory arguments to long options are mandatory for short options too. +-i, --input=MODE +adjust standard input stream buffering +-o, --output=MODE +adjust standard output stream buffering +-e, --error=MODE +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +usermod - modify a user account +usermod [options] LOGIN +The usermod command modifies the system account files to reflect the changes that are specified on the +command line. +The options which apply to the usermod command are: +-a, --append +Add the user to the supplementary group(s). Use only with the -G option. +-c, --comment COMMENT +% +zless - file perusal filter for crt viewing of compressed text +zless [ name ... ] +Zless is a filter which allows examination of compressed or plain text files one screenful at a time on a +soft-copy terminal. It is the equivalent of setting the environment variable LESSOPEN to '|gzip -cdfq -- +%s', and the environment variable LESSMETACHARS to '<space><tab><newline>;*?"()<>[|&^`#\$%=~', and then +running less. However, enough people seem to think that having the command zless available is important +to be worth providing it. +BUGS +Zless does not work with compressed data that is piped to it via standard input; it requires that input +% +timeout - run a command with a time limit +timeout [OPTION] +Mandatory arguments to long options are mandatory for short options too. +--preserve-status +command times out +% +openssl - OpenSSL command line tool +openssl command [ command_opts ] [ command_args ] +openssl [ list-standard-commands | list-message-digest-commands | list-cipher-commands | list-cipher- +algorithms | list-message-digest-algorithms | list-public-key-algorithms] +openssl no-XXX [ arbitrary options ] +The openssl program is a command line tool for using the various cryptography functions of OpenSSL's +crypto library from the shell. It can be used for +% +dnssec-checkds - DNSSEC delegation consistency checking tool +dnssec-checkds [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} +dnssec-dsfromkey [-l domain] [-f file] [-d dig path] [-D dsfromkey path] {zone} +dnssec-checkds verifies the correctness of Delegation Signer (DS) or DNSSEC Lookaside Validation (DLV) +resource records for keys in a specified zone. +-f file +If a file is specified, then the zone is read from that file to find the DNSKEY records. If not, then +the DNSKEY records for the zone are looked up in the DNS. +-l domain +% +column - columnate lists +column [options] [file...] +The column utility formats its input into multiple columns. By default, rows are filled before columns. +Input is taken from file, or otherwise from standard input. Empty lines are ignored. +-c, --columns width +Output is formatted to a width specified as number of characters. +-o, --output-separator string +Specify the columns delimiter for table output (default is two spaces). +-s, --separator separators +% +cal - display a calendar +cal [options] [[[day] month] year] +cal displays a simple calendar. If no arguments are specified, the current month is displayed. +Display three months spanning the date. +-n , --months number +Display number of months, starting from the month containing the date. +% +echo - display a line of text +echo [SHORT-OPTION]... [STRING]... +echo LONG-OPTION +Echo the STRING(s) to standard output. +-n do not output the trailing newline +-e enable interpretation of backslash escapes +-E disable interpretation of backslash escapes (default) +--help display this help and exit +% +chmod - change file mode bits +chmod [OPTION]... MODE[,MODE]... FILE... +chmod [OPTION]... OCTAL-MODE FILE... +chmod [OPTION]... --reference=RFILE FILE... +according to mode, which can be either a symbolic representation of changes to make, or an octal number +representing the bit pattern for the new mode bits. +The format of a symbolic mode is [ugoa...][[-+=][perms...]...], where perms is either zero or more let‐ +ters from the set rwxXst, or a single letter from the set ugo. Multiple symbolic modes can be given, +separated by commas. +A combination of the letters ugoa controls which users' access to the file will be changed: the user who +% +sshd — OpenSSH SSH daemon +[-g login_grace_time] [-h host_key_file] [-k key_gen_time] [-o option] [-p port] [-u len] +and provide secure encrypted communications between two untrusted hosts over an insecure network. +sshd listens for connections from clients. It is normally started at boot from /etc/rc. It forks a new +daemon for each incoming connection. The forked daemons handle key exchange, encryption, authentication, +command execution, and data exchange. +mand-line options override values specified in the configuration file. sshd rereads its configuration file +when it receives a hangup signal, SIGHUP, by executing itself with the name and options it was started +% +sort - sort lines of text files +sort [OPTION]... [FILE]... +sort [OPTION]... --files0-from=F +Write sorted concatenation of all FILE(s) to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. Ordering options: +-b, --ignore-leading-blanks +ignore leading blanks +-d, --dictionary-order +% +mdmon - monitor MD external metadata arrays +mdmon [--all] [--takeover] [--foreground] CONTAINER +user space handles all updates to the metadata. The kernel's responsibility is to notify user space when +a "metadata event" occurs, like disk failures and clean-to-dirty transitions. The kernel, in important +Metadata updates: +To service metadata update requests a daemon, mdmon, is introduced. Mdmon is tasked with polling the +sysfs namespace looking for changes in array_state, sync_action, and per disk state attributes. When a +change is detected it calls a per metadata type handler to make modifications to the metadata. The fol‐ +lowing actions are taken: +% +somewhat smaller than the fully-blown gpg and uses a different (and simpler) way to check that the public +keys used to make the signature are valid. There are no configuration files and only a few options are +implemented. +for expired or revoked keys. +By default a keyring named ‘trustedkeys.kbx’ is used; if that does not exist a keyring named ‘trusted‐ +% +grub-ofpathname - find OpenBOOT path for a device +grub-ofpathname DEVICE +The full documentation for grub-ofpathname is maintained as a Texinfo manual. If the info and grub- +ofpathname programs are properly installed at your site, the command +info grub-ofpathname +should give you access to the complete manual. +% +firewall-applet - firewalld applet +firewall-applet is a tray applet for firewalld. +firewall-applet does not support any special options. +The following options are supported: +-h, --help +Prints a short help text and exists. +QSETTINGS +% +mail -h | --help +mail [-BDdEFintv~] [-A account] [-a attachment] [-b bcc-addr] [-c cc-addr] [-q quote-file] [-r from-addr] +[-S variable[=value]] [-s subject] [-X cmd] [-.] to-addr ... [-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-X cmd] -f [file] +[-- mta-option ...] +mail [-BDdEeHiNnRv~#] [-A account] [-L spec-list] [-r from-addr] [-S variable[=value]] [-u user] [-X cmd] +[-- mta-option ...] +% +nohup - run a command immune to hangups, with output to a non-tty +nohup OPTION +--help display this help and exit +--version +output version information and exit +If standard input is a terminal, redirect it from an unreadable file. If standard output is a terminal, +append output to 'nohup.out' if possible, '$HOME/nohup.out' otherwise. If standard error is a terminal, +% +mkswap - set up a Linux swap area +mkswap [options] device [size] +mkswap sets up a Linux swap area on a device or in a file. +The device argument will usually be a disk partition (something like /dev/sdb7) but can also be a file. +The Linux kernel does not look at partition IDs, but many installation scripts will assume that parti‐ +type. Be careful not to kill your Solaris partitions.) +The size parameter is superfluous but retained for backwards compatibility. (It specifies the desired +% +systemd-delta - Find overridden configuration files +files. Files in /etc have highest priority, files in /run have the second highest priority, ..., files in +/lib have lowest priority. Files in a directory with higher priority override files with the same name in +directories of lower priority. In addition, certain configuration files can have ".d" directories which +contain "drop-in" files with configuration snippets which augment the main configuration file. "Drop-in" +files can be overridden in the same way by placing files with the same name in a directory of higher +containing directory, which corresponds to the name of the main configuration file, must match). For a +The command line argument will be split into a prefix and a suffix. Either is optional. The prefix must +% +xgettext - extract gettext strings from source +xgettext [OPTION] [INPUTFILE]... +Extract translatable strings from given input files. +Mandatory arguments to long options are mandatory for short options too. Similarly for optional argu‐ +ments. +Input file location: +INPUTFILE ... +input files +-f, --files-from=FILE +get list of input files from FILE +% +era_check - validate era metadata on device or file +era_check [options] {device|file} +era_check checks era metadata created by the device-mapper era target on a device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +xfs_db - debug an XFS filesystem +xfs_db [ -c cmd ] ... [ -i|r|x|F ] [ -f ] [ -l logdev ] [ -p progname ] device +xfs_db -V +xfs_db is used to examine an XFS filesystem. Under rare circumstances it can also be used to modify an +run xfs_db. +-f Specifies that the filesystem image to be processed is stored in a regular file at device (see the +% +chown - change file owner and group +chown [OPTION]... [OWNER][:[GROUP]] FILE... +chown [OPTION]... --reference=RFILE FILE... +each given file. If only an owner (a user name or numeric user ID) is given, that user is made the owner +of each given file, and the files' group is not changed. If the owner is followed by a colon and a group +name (or numeric group ID), with no spaces between them, the group ownership of the files is changed as +well. If a colon but no group name follows the user name, that user is made the owner of the files and +the group of the files is changed to that user's login group. If the colon and group are given, but the +as chgrp. If only a colon is given, or if the entire operand is empty, neither the owner nor the group +is changed. +% +blocks-per-group ] [ -G number-of-groups ] [ -i bytes-per-inode ] [ -I inode-size ] [ -j ] [ -J journal- +options ] [ -N number-of-inodes ] [ -n ] [ -m reserved-blocks-percentage ] [ -o creator-os ] [ -O [^]fea‐ +ture[,...] ] [ -q ] [ -r fs-revision-level ] [ -E extended-options ] [ -v ] [ -F ] [ -L volume-label ] [ +-M last-mounted-directory ] [ -S ] [ -t fs-type ] [ -T usage-type ] [ -U UUID ] [ -V ] [ -e errors-behav‐ +ior ] [ -z undo_file ] device [ fs-size ] +size ] +by device. +% +kinit - obtain and cache Kerberos ticket-granting ticket +kinit [-V] [-l lifetime] [-s start_time] [-r renewable_life] [-p | -P] [-f | -F] [-a] [-A] [-C] [-E] [-v] +[-R] [-k [-t keytab_file]] [-c cache_name] [-n] [-S service_name] [-I input_ccache] [-T armor_ccache] [-X +attribute[=value]] [principal] +kinit obtains and caches an initial ticket-granting ticket for principal. +-V display verbose output. +-l lifetime +(duration string.) Requests a ticket with the lifetime lifetime. +% +tset, reset - terminal initialization +tset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +reset [-IQVcqrsw] [-] [-e ch] [-i ch] [-k ch] [-m mapping] [terminal] +mination is done as follows, using the first terminal type found. +ting TERM according to the type passed to it by /etc/inittab.) +% +vgimportclone — import and rename duplicated volume group (e.g. a hardware snapshot) +vgimportclone is used to import a duplicated VG (e.g. hardware snapshot). Duplicate VG(s) and PV(s) are +not able to be used until they are made to coexist with the origin VG(s) and PV(s). vgimportclone +renames the VG associated with the specified PV(s) and changes the associated VG and PV UUIDs. +By default the snapshot VG will be renamed to the original name plus a numeric suffix to avoid +base VG name that is used for all VG renames. If a VG already exists with the specified name a +% +newuidmap - set the uid mapping of a user namespace +newuidmap pid uid loweruid count [uid loweruid count [ ... ]] +The newuidmap sets /proc/[pid]/uid_map based on its command line arguments and the uids allowed in +uid +Beginning of the range of UIDs inside the user namespace. +loweruid +Beginning of the range of UIDs outside the user namespace. +% +getconf — get configuration values +getconf [−v specification] system_var +getconf [−v specification] path_var pathname +In the first synopsis form, the getconf utility shall write to the standard output the value of the vari‐ +able specified by the system_var operand. +In the second synopsis form, the getconf utility shall write to the standard output the value of the +% +setvtrgb - set the virtual terminal RGB colors +setvtrgb vga|FILE|- +The setvtrgb command takes a single argument, either the string vga , or a path to a file containing the +red, green, and blue colors to be used by the Linux virtual terminals. +RED, GREEN, and BLUE. +To seed a valid FILE : +cat /sys/module/vt/parameters/default_{red,grn,blu} > FILE +And then edit the values in FILE +% +nstat, rtacct - network statistics tools. +nstat and rtacct are simple tools to monitor kernel snmp counters and network interface statistics. +-h, --help Print help +-V, --version +Print version +-z, --zero +Dump zero counters too. By default they are not shown. +% +pwck - verify integrity of password files +pwck [options] [passwd [ shadow ]] +The pwck command verifies the integrity of the users and authentication information. It checks that all +entries in /etc/passwd and /etc/shadow have the proper format and contain valid data. The user is +prompted to delete entries that are improperly formatted or which have other uncorrectable errors. +Checks are made to verify that each entry has: +· the correct number of fields +· a unique and valid user name +· a valid user and group identifier +% +pic - compile pictures for troff or TeX +pic [ -nvCSU ] [ filename ... ] +pic -t [ -cvzCSU ] [ filename ... ] +pic compiles descriptions of pictures embedded within troff or TeX input files into commands that are +understood by TeX or troff. Each picture starts with a line beginning with .PS and ends with a line +beginning with .PE. Anything outside of .PS and .PE is passed through without change. +It is the user's responsibility to provide appropriate definitions of the PS and PE macros. When the +macro package being used does not supply such definitions (for example, old versions of -ms), appropriate +definitions can be obtained with -mpic: These will center each picture. +% +salt +The salt provided to the hash algorithm. +algorithm +argument. +% +rlogin - Remote login +rlogin [OPTION...] HOST +Starts a terminal session on a remote host. +-6, --ipv6 +use only IPv6 +allows an eight-bit input data path at all times +% +ssh-copy-id — use locally available keys to authorise logins on a remote machine +ssh-copy-id [-f] [-n] [-i [identity_file]] [-p port] [-o ssh_option] [user@]hostname +ssh-copy-id -h | -? +so password authentication should be enabled, unless you've done some clever use of multiple identities). +It assembles a list of one or more fingerprints (as described below) and tries to log in with each key, to +you being repeatedly prompted for pass-phrases). It then assembles a list of those that failed to log in, +and using ssh, enables logins with those keys on the remote server. By default it adds the keys by append‐ +ing them to the remote user's ~/.ssh/authorized_keys (creating the file, and directory, if necessary). It +is also capable of detecting if the remote system is a NetScreen, and using its ‘set ssh pka-dsa key ...’ +command instead. +% +mktemp - create a temporary file or directory +mktemp [OPTION]... [TEMPLATE] +secutive 'X's in last component. If TEMPLATE is not specified, use tmp.XXXXXXXXXX, and --tmpdir is +implied. Files are created u+rw, and directories u+rwx, minus umask restrictions. +-d, --directory +create a directory, not a file +-u, --dry-run +do not create anything; merely print a name (unsafe) +-q, --quiet +% +tabs - set tabs on a terminal +tabs [options]] [tabstop-list] +set_tab capabilities. If either is absent, tabs is unable to clear/set tab-stops. The terminal should +be configured to use hard tabs, e.g., +stty tab0 +General Options +-Tname +Tell tabs which terminal type to use. If this option is not given, tabs will use the $TERM environ‐ +ment variable. If that is not set, it will use the ansi+tabs entry. +% +libtool [OPTION]... [MODE-ARG]... +Provide generalized library-building support services. +--config +show all configuration variables +--debug +enable verbose shell tracing +-n, --dry-run +display commands without modifying any files +% +The options -v and --version print the version information of the program to standard output and exit. +The options -h and --help print a usage information of the program to standard output and stop the pro‐ +gram instantly. +All other options are assumed to be groffer options. They are internally passed to groffer. They over‐ +ride the behavior of the program. The options are optional, they can be omitted. +The filespec arguments correspond to the filespec arguments of groffer. So they are either the names of +% +cache_check - repair cache metadata on device or file +cache_check [options] {device|file} +cache_check checks cache metadata created by the device-mapper cache target on a device or file. +-q, --quiet +Suppress output messages, return only exit code. +-h, --help +Print help and exit. +% +xz, unxz, xzcat, lzma, unlzma, lzcat - Compress or decompress .xz and .lzma files +xz [option...] [file...] +unxz is equivalent to xz --decompress. +xzcat is equivalent to xz --decompress --stdout. +lzma is equivalent to xz --format=lzma. +unlzma is equivalent to xz --format=lzma --decompress. +lzcat is equivalent to xz --format=lzma --decompress --stdout. +When writing scripts that need to decompress files, it is recommended to always use the name xz with +appropriate arguments (xz -d or xz -dc) instead of the names unxz and xzcat. +% +ssh-add — adds private key identities to the authentication agent +ssh-add [-cDdkLlXx] [-E fingerprint_hash] [-t life] [file ...] +After loading a private key, ssh-add will try to load corresponding certificate information from the file‐ +name obtained by appending -cert.pub to the name of the private key file. Alternative file names can be +given on the command line. +If any file requires a passphrase, ssh-add asks for the passphrase from the user. The passphrase is read +from the user's tty. ssh-add retries the last passphrase if multiple identity files are given. +% +ktutil - Kerberos keytab file maintenance utility +ktutil +The ktutil command invokes a command interface from which an administrator can read, write, or edit +list +list +Displays the current keylist. +Alias: l +% +filefrag - report on file fragmentation +filefrag [ -bblocksize ] [ -BeksvxX ] [ files... ] +filefrag reports on how badly fragmented a particular file might be. It makes allowances for indirect +The filefrag program initially attempts to get the extent information using FIEMAP ioctl which is more +efficient and faster. If FIEMAP is not supported then filefrag will fall back to using FIBMAP. +-B Force the use of the older FIBMAP ioctl instead of the FIEMAP ioctl for testing purposes. +-bblocksize +Use blocksize in bytes for output instead of the filesystem blocksize. For compatibility with +% +prtstat - print statistics of a process +prtstat [-r|--raw] pid +prtstat -V|--version +file. +-r, --raw +Print the information in raw format. +-V, --version +Show the version information for prtstat. +% +kill - terminate a process +kill [-signal|-s signal|-p] [-q value] [-a] [--] pid|name... +kill -l [number] | -L +The command kill sends the specified signal to the specified processes or process groups. If no signal +caught. +Most modern shells have a builtin kill function, with a usage rather similar to that of the command +described here. The --all, --pid, and --queue options, and the possibility to specify processes by com‐ +mand name, are local extensions. +If signal is 0, then no actual signal is sent, but error checking is still performed. +% +Run each Texinfo or (La)TeX FILE through TeX in turn until all cross-references are resolved, building +all indices. The directory containing each FILE is searched for included files. The suffix of FILE is +used to determine its language ((La)TeX or Texinfo). To process (e)plain TeX files, set the environment +variable LATEX=tex. +General options: +-b, --batch +% +lvs — report information about logical volumes +[-d|--debug] [-h|-?|--help] [-H|--history] [--ignorelockingfailure] [--ignoreskippedcluster] [--logonly] +{basic|json}] [--rows] [--separator Separator] [--segments] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] +lvs produces formatted output about logical volumes. +% +pkaction - Get details about a registered action +pkaction [--version] [--help] +pkaction [--verbose] +pkaction --action-id action [--verbose] +pkaction is used to obtain information about registered polkit actions. If called without --action-id +then all actions are displayed. Otherwise the action action. If called without the --verbose option only +the name of the action is shown. Otherwise details about the actions are shown. +RETURN VALUE +On success pkaction returns 0. Otherwise a non-zero value is returned and a diagnostic message is printed +on standard error. +% +printf - format and print data +printf FORMAT [ARGUMENT]... +printf OPTION +Print ARGUMENT(s) according to FORMAT, or execute according to OPTION: +--help display this help and exit +--version +output version information and exit +FORMAT controls the output as in C printf. Interpreted sequences are: +\" double quote +% +gpm - a cut and paste utility and mouse server for virtual consoles +gpm [ options ] +intended as a replacement for "selection" as a cut-and-paste mechanism; it also provides additional +facilities. The "selection" package offered the first cut-and-paste implementation for Linux using two +mouse buttons, and the cut buffer is still called "selection buffer" or just "selection" throughout this +document. The information below is extracted from the texinfo file, which is the preferred source of +information. +is meant to describe the command-line options for gpm, while its internals are outlined in the next sec‐ +tion. +% +ldconfig - configure dynamic linker run-time bindings +/sbin/ldconfig [ -nNvXV ] [ -f conf ] [ -C cache ] [ -r root ] directory ... +/sbin/ldconfig -l [ -v ] library ... +/sbin/ldconfig -p +ldconfig creates the necessary links and cache to the most recent shared libraries found in the directo‐ +ries specified on the command line, in the file /etc/ld.so.conf, and in the trusted directories, /lib and +The cache is used by the run-time linker, ld.so or ld-linux.so. ldconfig checks the header and filenames +of the libraries it encounters when determining which versions should have their links updated. +% +gdbm_dump - dump a GDBM database to a file +gdbm_dump [-H FMT] [--format=FMT] DB_FILE [FILE] +gdbm_dump [-Vh] [--help] [--usage] [--version] +dump file is supplied by the second argument (FILE). If not specified, the output goes to the standard +error. +of the DB_FILE. +-H, --format=FMT +% +chgpasswd - update group passwords in batch mode +chgpasswd [options] +The chgpasswd command reads a list of group name and password pairs from standard input and uses this +information to update a set of existing groups. Each line is of the format: +group_name:password +By default the supplied password must be in clear-text, and is encrypted by chgpasswd. +The default encryption algorithm can be defined for the system with the ENCRYPT_METHOD variable of +/etc/login.defs, and can be overwritten with the -e, -m, or -c options. +% +dbus-send - Send a message to a message bus +[--reply-timeout=MSEC] [--type=TYPE] OBJECT_PATH INTERFACE.MEMBER [CONTENTS...] +The dbus-send command is used to send a message to a D-Bus message bus. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +There are two well-known message buses: the systemwide message bus (installed on many systems as the +"messagebus" service) and the per-user-login-session message bus (started each time a user logs in). The +--system and --session options direct dbus-send to send messages to the system or session buses +respectively. If neither is specified, dbus-send sends to the session bus. +Nearly all uses of dbus-send must provide the --dest argument which is the name of a connection on the +bus to send the message to. If --dest is omitted, no destination is set. +% +named-checkzone, named-compilezone - zone file validity checking or converting tool +named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] +[-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] +[-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} +{filename} +named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] +[-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] +[-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} +{filename} +named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does +into a name server. +% +dbus-monitor - debug probe to print message bus messages +dbus-monitor [--system | --session | --address ADDRESS] [--profile | --monitor | --pcap | --binary] +[watch expressions] +The dbus-monitor command is used to monitor messages going through a D-Bus message bus. See +http://www.freedesktop.org/software/dbus/ for more information about the big picture. +There are two well-known message buses: the systemwide message bus (installed on many systems as the +"messagebus" service) and the per-user-login-session message bus (started each time a user logs in). The +--system and --session options direct dbus-monitor to monitor the system or session buses respectively. +If neither is specified, dbus-monitor monitors the session bus. +dbus-monitor has two different text output modes: the 'classic'-style monitoring mode, and profiling +mode. The profiling format is a compact format with a single line per message and microsecond-resolution +% +rlogind - Remote login server +rlogind [OPTION...] +Remote login server +-6, --ipv6 +only IPv6 in daemon mode +-a, --verify-hostname +ask hostname for verification +% +ldns-signzone - sign a zonefile with DNSSEC data +ldns-signzone is used to generate a DNSSEC signed zone. When run it will create a new zonefile that con‐ +Keys must be specified by their base name (i.e. without .private). If the DNSKEY that belongs to the key +in the .private file is not present in the zone, it will be read from the file <base name>.key. If that +file does not exist, the DNSKEY value will be generated from the private key. +Multiple keys can be specified, Key Signing Keys are used as such when they are either already present in +the zone, or specified in a .key file, and have the KSK bit set. +% +grub-file - check file type +Check if FILE is of specified type. +% +lesskey - specify key bindings for less +lesskey [-o output] [--] [input] +lesskey [--output=output] [--] [input] +lesskey -V +lesskey --version +Lesskey is used to specify a set of key bindings to be used by less. The input file is a text file which +describes the key bindings. If the input file is "-", standard input is read. If no input file is spec‐ +ified, a standard filename is used as the name of the input file, which depends on the system being used: +$HOME/lesskey.ini is used, or $INIT/lesskey.ini if $HOME is undefined. The output file is a binary file +which is used by less. If no output file is specified, and the environment variable LESSKEY is set, the +value of LESSKEY is used as the name of the output file. Otherwise, a standard filename is used as the +name of the output file, which depends on the system being used: On Unix and OS-9 systems, $HOME/.less is +% +pg - browse pagewise through text files +pg [-amount] [-p prompt] [-cefnrs] [+line] [+/pattern/] [file...] +pg displays a text file on a CRT one screenful at once. After each page, a prompt is displayed. The +If no filename is given on the command line, pg reads from standard input. If standard output is not a +If input comes from a pipe, pg stores the data in a buffer file while reading, to make navigation possi‐ +ble. +pg accepts the following options: +% +debugreiserfs - The debugging tool for the ReiserFS filesystem. +device +debugreiserfs sometimes helps to solve problems with reiserfs filesystems. When run without options it +prints the super block of the ReiserFS filesystem found on the device. +device is the special file corresponding to the device (e.g /dev/hdXX for an IDE disk partition or +/dev/sdXX for a SCSI disk partition). +-j device +prints the contents of the journal. The option -p allows it to pack the journal with other meta‐ +% +unexpand - convert spaces to tabs +unexpand [OPTION]... [FILE]... +Convert blanks in each FILE to tabs, writing to standard output. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +convert all blanks, instead of just initial blanks +--first-only +convert only leading sequences of blanks (overrides -a) +% +loadkeys - load keyboard translation tables +loadkeys [ -b --bkeymap ] [ -c --clearcompose ] [ -C '<FILE>' | --console=<FILE> ] [ -d --default ] [ -h +--help ] [ -m --mktable ] [ -q --quiet ] [ -s --clearstrings ] [ -u --unicode ] [ -v --verbose ] [ file‐ +name... ] +The program loadkeys reads the file or files specified by filename.... Its main purpose is to load the +kernel keymap for the console. You can specify console device by the -C (or --console ) option. +RESET TO DEFAULT +If the -d (or --default ) option is given, loadkeys loads a default keymap, probably the file +defkeymap.map either in /usr/share/kbd/keymaps or in /usr/src/linux/drivers/char. (Probably the former +times, with a strange keymap loaded (with the minus on some obscure unknown modifier combination) it is +easier to type `loadkeys defkeymap'. +% +dbus-uuidgen - Utility to generate UUIDs +The dbus-uuidgen command generates or reads a universally unique ID. +spec. Many systems have a separate command for that (often called "uuidgen"). +See http://www.freedesktop.org/software/dbus/ for more information about D-Bus. +The primary usage of dbus-uuidgen is to run in the post-install script of a D-Bus package like this: +dbus-uuidgen --ensure +% +ldns-resolver - tries to create a resolver from a resolv.conf file. +ldns-resolver file +library for robusteness with input data. +ldns-resolver takes a filename of the resolv.conf file as input. For example ldns-resolver +/etc/resolv.conf will show if the file can be parsed successfully. +Written by the ldns team as an example for ldns usage. +REPORTING BUGS +% +vpddecode - VPD structure decoder +vpddecode prints the "vital product data" information that can be found in almost all IBM and Lenovo com‐ +puters. Available items are: +· BIOS Build ID +· Box Serial Number +· Motherboard Serial Number +· Machine Type/Model +% +git-upload-archive - Send archive back to git-archive +git upload-archive <directory> +Invoked by git archive --remote and sends a generated archive to the other end over the Git protocol. +archive side, and the program pair is meant to be used to get an archive from a remote repository. +SECURITY +pruned, git-upload-archive avoids serving archives for commits and trees that are not reachable from the +repository’s refs. However, because calculating object reachability is computationally expensive, +git-upload-archive implements a stricter but easier-to-check set of rules: +% +cmp - compare two files byte by byte +Compare two files byte by byte. +default). +Mandatory arguments to long options are mandatory for short options too. +-b, --print-bytes +print differing bytes +-i, --ignore-initial=SKIP +% +plipconfig - fine tune PLIP device parameters +plipconfig interface [nibble NN] [trigger NN] +plipconfig [-V] [--version] [-h] [--help] +Plipconfig is used to (hopefully) improve PLIP performance by changing the default timing parameters used +by the PLIP protocol. Results are dependent on the parallel port hardware, cable, and the CPU speed of +each machine on each end of the PLIP link. +If the single interface argument is given, plipconfig displays the status of the given interface only. +Otherwise, it will try to set the options. +nibble NN +% +uuidd - UUID generation daemon +uuidd [options] +The uuidd daemon is used by the UUID library to generate universally unique identifiers (UUIDs), espe‐ +cially time-based UUIDs, in a secure and guaranteed-unique fashion, even in the face of large numbers of +threads running on different CPUs trying to grab UUIDs. +-d, --debug +-F, --no-fork +Do not daemonize using a double-fork. +% +dbus-update-activation-environment - update environment used for D-Bus session services +dbus-update-activation-environment [--systemd] [--verbose] --all | VAR... | VAR=VAL... +dbus-update-activation-environment updates the list of environment variables used by dbus-daemon +--session when it activates session services without using systemd. +With the --systemd option, if an instance of systemd --user is available on D-Bus, it also updates the +list of environment variables used by systemd --user when it activates user services, including D-Bus +a service is started. For instance, it is not useful to add DBUS_SESSION_BUS_ADDRESS to dbus-daemon's +activation environment, although it might still be useful to add it to systemd's activation environment. +% +shred - overwrite a file to hide its contents, and optionally delete it +shred [OPTION]... FILE... +Overwrite the specified FILE(s) repeatedly, in order to make it harder for even very expensive hardware +probing to recover the data. +If FILE is -, shred standard output. +Mandatory arguments to long options are mandatory for short options too. +-f, --force +change permissions to allow writing if necessary +-n, --iterations=N +% +cryptsetup - manage plain dm-crypt and LUKS encrypted volumes +cryptsetup <options> <action> <action args> +cryptsetup is used to conveniently setup dm-crypt managed device-mapper mappings. These include plain dm- +crypt volumes and LUKS volumes. The difference is that LUKS uses a metadata header and can hence offer +more features than plain dm-crypt. On the other hand, the header is visible and vulnerable to damage. +In addition, cryptsetup provides limited support for the use of historic loopaes volumes and for True‐ +Crypt compatible volumes. +PLAIN DM-CRYPT OR LUKS? +Unless you understand the cryptographic background well, use LUKS. With plain dm-crypt there are a num‐ +ber of possible user errors that massively decrease security. While LUKS cannot fix them all, it can +lessen the impact for many of them. +% +getkeycodes - print kernel scancode-to-keycode mapping table +getkeycodes +The getkeycodes command prints the kernel scancode-to-keycode mapping table. +None. +% +locale - get locale-specific information +locale [option] +locale [option] -a +locale [option] -m +locale [option] name... +The locale command displays information about the current locale, or all locales, on standard output. +When invoked without arguments, locale displays the current locale settings for each locale category (see +Values for variables set in the environment are printed without double quotes, implied values are printed +with double quotes. +If either the -a or the -m option (or one of their long-format equivalents) is specified, the behavior is +% +runuser - run a command with substitute user and group ID +runuser [options] -u user command [argument...] +runuser [options] [-] [user [argument...]] +runuser allows to run commands with a substitute user and group ID. If the option -u is not given, it +falls back to su-compatible semantics and a shell is executed. The difference between the commands +only) and it uses a different PAM configuration. The command runuser does not have to be installed with +suid permissions. +When called without arguments, runuser defaults to running an interactive shell as root. +For backward compatibility, runuser defaults to not change the current directory and to only set the +% +groffer - display groff files and man pages on X and tty +groffer [--] [filespec ....] +groffer [mode-option ....] [groff-options ....] [man-options ....] [X-options ....] [--] [‐ +filespec ....] +groffer -h | --help +groffer -v | --version +the groff language, see groff(7), or other roff languages, see roff(7), that are compatible to the origi‐ +nal troff language. It finds and runs all necessary groff preprocessors, such as chem. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +pwdx - report current working directory of a process +pwdx [options] pid [...] +-V, --version +Output version information and exit. +-h, --help +Output help screen and exit. +STANDARDS +No standards apply, but pwdx looks an awful lot like a SunOS command. +% +newgidmap - set the gid mapping of a user namespace +newgidmap pid gid lowergid count [gid lowergid count [ ... ]] +The newgidmap sets /proc/[pid]/gid_map based on its command line arguments and the gids allowed in +gid +Beginning of the range of GIDs inside the user namespace. +lowergid +Beginning of the range of GIDs outside the user namespace. +% +ntpq - standard NTP query program +ntpq [-flags] [-flag [value]] [--option-name[[=| ]value]] [ host ...] +The ntpq utility program is used to query NTP servers which implement the standard NTP mode 6 control +read and write arbitrary variables can be assembled, with raw and pretty-printed output options being +available. The ntpq utility can also obtain and print a list of peers in a common format by sending mul‐ +tiple queries to the server. If one or more request options is included on the command line when ntpq is +executed, each of the requests will be sent to the NTP servers running on each of the hosts given as com‐ +mand line arguments, or on localhost by default. If no request options are given, ntpq will attempt to +read commands from the standard input and execute these on the NTP server running on the first host given +% +ps - report a snapshot of the current processes. +ps [options] +ps displays information about a selection of the active processes. If you want a repetitive update of +options, which are functionally identical, due to the many standards and ps implementations that this ps +% +drill - get (debug) information out of DNS(SEC) +drill is a tool to designed to get all sorts of information out of the DNS. It is specificly designed to +be used with DNSSEC. +The name drill is a pun on dig. With drill you should be able get even more information than with dig. +If no arguments are given class defaults to 'IN' and type to 'A'. The server(s) specified in +/etc/resolv.conf are used to query against. +name Ask for this name. +@server Send to query to this server. If not specified use the nameservers from /etc/resolv.conf. +% +kbdrate - reset the keyboard repeat rate and delay time +kbdrate [ -s ] [ -r rate ] [ -d delay ] +kbdrate is used to change the keyboard repeat rate and delay time. The delay is the amount of time that +a key must be depressed before it will start to repeat. +-s Silent. No messages are printed. +-r rate +% +grpck - verify integrity of group files +grpck [options] [group [ shadow ]] +The grpck command verifies the integrity of the groups information. It checks that all entries in +/etc/group and /etc/gshadow have the proper format and contain valid data. The user is prompted to delete +entries that are improperly formatted or which have other uncorrectable errors. +Checks are made to verify that each entry has: +· the correct number of fields +· a unique and valid group name +· a valid group identifier (/etc/group only) +% +tac - concatenate and print files in reverse +tac [OPTION]... [FILE]... +Write each FILE to standard output, last line first. +With no FILE, or when FILE is -, read standard input. +Mandatory arguments to long options are mandatory for short options too. +-b, --before +attach the separator before instead of after +-r, --regex +interpret the separator as a regular expression +% +gzip, gunzip, zcat - compress or expand files +gunzip [ -acfhklLnNrtvV ] [-S suffix] [ name ... ] +zcat [ -fhLV ] [ name ... ] +Gzip reduces the size of the named files using Lempel-Ziv coding (LZ77). Whenever possible, each file is +replaced by one with the extension .gz, while keeping the same ownership modes, access and modification +files are specified, or if a file name is "-", the standard input is compressed to the standard output. +Gzip will only attempt to compress regular files. In particular, it will ignore symbolic links. +If the compressed file name is too long for its file system, gzip truncates it. Gzip attempts to trun‐ +name consists of small parts only, the longest parts are truncated. For example, if file names are lim‐ +% +vgck — check volume group metadata +vgck checks LVM metadata for each named volume group for consistency. +% +lvextend — extend the size of a logical volume +[-h|-?|--help] [-f|--force] [-i|--stripes Stripes [-I|--stripesize StripeSize]] {-l|--extents [+]Logi‐ +calExtentsNumber[%{VG|LV|PVS|FREE|ORIGIN}] | -L|--size [+]LogicalVolumeSize[bBsSkKmMgGtTpPeE]} [-n|--nof‐ +sck] [--noudevsync] [-r|--resizefs] [--reportformat {basic|json}] [--use-policies] [-t|--test] [-v|--ver‐ +bose] LogicalVolumePath [PhysicalVolumePath[:PE[-PE]]...] +lvextend allows you to extend the size of a logical volume. Extension of snapshot logical volumes (see +% +grub-bios-setup - set up a device to boot using GRUB +grub-bios-setup [OPTION...] DEVICE +Set up images to boot from DEVICE. +You should not normally run this program directly. Use grub-install instead. +-a, --allow-floppy +make the drive also bootable as floppy (default for fdX devices). May break on some BIOSes. +-b, --boot-image=FILE +use FILE as the boot image [default=boot.img] +-c, --core-image=FILE +% +catman - create or update the pre-formatted manual pages +catman [-d?V] [-M path] [-C file] [section] ... +catman is used to create an up to date set of pre-formatted manual pages known as cat pages. Cat pages +are generally much faster to display than the original manual pages, but require extra storage space. +The decision to support cat pages is that of the local administrator, who must provide suitable directo‐ +ries to contain them. +The options available to catman are the manual page hierarchies and sections to pre-format. The default +hierarchies are those specified as system hierarchies in the man-db configuration file, and the default +sections are either the colon-delimited contents of the environment variable $MANSECT or the standard set +compiled into man if $MANSECT is undefined. Supplying catman with a set of whitespace-delimited section +names will override both of the above. +% +xzcmp, xzdiff, lzcmp, lzdiff - compare compressed files +from which the compression format suffix has been stripped. If two files are specified, then they are +served. +The names lzcmp and lzdiff are provided for backward compatibility with LZMA Utils. +% +sprof - read and display shared object profiling data +sprof [option]... shared-object-path [profile-data-path] +The sprof command displays a profiling summary for the shared object (shared library) specified as its +first command-line argument. The profiling summary is created using previously generated profiling data +in the (optional) second command-line argument. If the profiling data pathname is omitted, then sprof +will attempt to deduce it using the soname of the shared object, looking for a file with the name <son‐ +ame>.profile in the current directory. +The following command-line options specify the profile output to be produced: +-c, --call-pairs +Print a list of pairs of call paths for the interfaces exported by the shared object, along with +% +external-journal ] [ -E extended_options ] [ -z undo_file ] device +use a journal, if the system has been shut down uncleanly without any errors, normally, after replaying +the committed transactions in the journal, the file system should be marked as clean. Hence, for +indicates that further checking is required. +-n option is specified, and -c, -l, or -L options are not specified. However, even if it is safe to do +% +dnssec-coverage - checks future DNSKEY coverage for a zone +dnssec-coverage [-K directory] [-l length] [-f file] [-d DNSKEY TTL] [-m max TTL] [-r interval] +[-c compilezone path] [-k] [-z] [zone...] +dnssec-coverage verifies that the DNSSEC keys for a given zone or a set of zones have timing metadata set +properly to ensure no future lapses in DNSSEC coverage. +If zone is specified, then keys found in the key repository matching that zone are scanned, and an +ordered list is generated of the events scheduled for that key (i.e., publication, activation, +inactivation, deletion). The list of events is walked in order of occurrence. Warnings are generated if +any event is scheduled which could cause the zone to enter a state in which validation failures might +occur: for example, if the number of published or active keys for a given algorithm drops to zero, or if +a key is deleted from the zone too soon after a new key is rolled, and cached data signed by the prior +key has not had time to expire from resolver caches. +% +mkhomedir_helper {user} [umask [ path-to-skel ]] +mkhomedir_helper is a helper program for the pam_mkhomedir module that creates home directories and +populates them with contents of the specified skel directory. +The helper is separated from the module to not require direct access from login SELinux domains to the +contents of user home directories. The SELinux domain transition happens when the module is executing the +mkhomedir_helper. +The helper never touches home directories if they already exist. +% +patch - apply a diff file to an original +patch [options] [originalfile [patchfile]] +but usually just +patch -pnum <patchfile +patch takes a patch file patchfile containing a difference listing produced by the diff program and +applies those differences to one or more original files, producing patched versions. Normally the +patched versions are put in place of the originals. Backups can be made; see the -b or --backup option. +The names of the files to be patched are usually taken from the patch file, but if there's just one file +to be patched it can be specified on the command line as originalfile. +Upon startup, patch attempts to determine the type of the diff listing, unless overruled by a -c (--con‐ +% +vgremove — remove a volume group +vgremove allows you to remove one or more volume groups. If one or more physical volumes in the volume +group are lost, consider vgreduce --removemissing to make the volume group metadata consistent again. +If there are logical volumes that exist in the volume group, a prompt will be given to confirm removal. +You can override the prompt with -f. +-f, --force +% +afmtodit - create font files for use with groff -Tps and -Tpdf +afmtodit [ -ckmnsvx ] [ -a n ] [ -d desc_file ] [ -e enc_file ] [ -f internal_name ] [ -i n ] +[ -o out_file ] afm_file map_file font +The whitespace between a command line option and its argument is optional. +afmtodit creates a font file for use with groff, grops, and gropdf. afmtodit is written in perl; you +afm_file is the AFM (Adobe Font Metric) file for the font. +map_file is a file that says which groff character names map onto each PostScript character name; this +file should contain a sequence of lines of the form +% +an unmounted file system located on device. If the filesystem is mounted, it can be used to expand the +size of the mounted filesystem, assuming the kernel and the file system supports on-line resizing. (Mod‐ +systems will require the use of file systems with the resize_inode feature enabled.) +The size parameter specifies the requested new size of the filesystem. If no units are specified, the +units of the size parameter shall be the filesystem blocksize of the filesystem. Optionally, the size +larger than the size of the partition. If size parameter is not specified, it will default to the size +% +systemd-escape - Escape strings for usage in system unit names +to escape and to undo escaping of strings. +The command takes any number of strings on the command line, and will process them individually, one +after another. It will output them separated by spaces to stdout. +By default, this command will escape the strings passed, unless --unescape is passed which results in the +inverse operation being applied. If --mangle is given, a special mode of escaping is applied instead, +which assumes the string is already escaped but will escape everything that appears obviously +non-escaped. +% +gprof - display call graph profile data +gprof [ -[abcDhilLrsTvwxyz] ] [ -[ACeEfFJnNOpPqQZ][name] ] +[ -I dirs ] [ -d[num] ] [ -k from/to ] +[ -m min-count ] [ -R map_file ] [ -t table-length ] +[ --[no-]annotated-source[=name] ] +[ --[no-]exec-counts[=name] ] +[ --[no-]flat-profile[=name] ] [ --[no-]graph[=name] ] +[ --[no-]time=name] [ --all-lines ] [ --brief ] +[ --debug[=level] ] [ --function-ordering ] +[ --file-ordering map_file ] [ --directory-path=dirs ] +[ --display-unused-functions ] [ --file-format=name ] +[ --file-info ] [ --help ] [ --line ] [ --inline-file-names ] +[ --min-count=n ] [ --no-static ] [ --print-path ] +[ --separate-files ] [ --static-call-graph ] [ --sum ] +[ --table-length=len ] [ --traditional ] [ --version ] +% +lvremove — remove a logical volume +[--reportformat {basic|json}] [-S|--select Selection] [-t|--test] [-v|--verbose] [--version] [-f|--force] +lvremove removes one or more logical volumes. Confirmation will be requested before deactivating any +active logical volume prior to removal. Logical volumes cannot be deactivated or removed while they are +open (e.g. if they contain a mounted filesystem). Removing an origin logical volume will also remove all +dependent snapshots. +If the logical volume is clustered then it must be deactivated on all nodes in the cluster before it can +be removed. A single lvchange command issued from one node can do this. +If the configuration setting metadata/record_lvs_history is enabled and the logical volume being removed +% +blkid - locate/print block device attributes +blkid -L label | -U uuid +blkid [-dghlv] [-c file] [-o format] [-s tag] +blkid -p [-O offset] [-o format] [-S size] [-s tag] +[-n list] [-u list] device ... +blkid -i [-o format] [-s tag] device ... +mine the type of content (e.g. filesystem or swap) that a block device holds, and also the attributes +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +Generate Makefile.in for configure from Makefile.am. +Operation modes: +--help print this help, then exit +--version +print version number, then exit +-v, --verbose +verbosely list files processed +% +sh — shell, the standard command language interpreter +sh [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +[command_file [argument...]] +sh −c [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +command_string [command_name [argument...]] +sh −s [−abCefhimnuvx] [−o option]... [+abCefhimnuvx] [+o option]... +[argument...] +% +dd - convert and copy a file +dd [OPERAND]... +dd OPTION +Copy a file, converting and formatting according to the operands. +bs=BYTES +read and write up to BYTES bytes at a time +cbs=BYTES +convert BYTES bytes at a time +conv=CONVS +convert the file as per the comma separated symbol list +% +gio-querymodules - GIO module cache creation +gio-querymodules {DIRECTORY...} +implemented extension points for each module that has been found. It is used by GIO at runtime to avoid +opening all modules just to find out which extension points they are implementing. +GIO modules are usually installed in the gio/modules subdirectory of libdir. +% +mkfs - build a Linux filesystem +mkfs [options] [-t type] [fs-options] device [size] +mkfs is used to build a Linux filesystem on a device, usually a hard disk partition. The device argument +tem. The size argument is the number of blocks to be used for the filesystem. +In actuality, mkfs is simply a front-end for the various filesystem builders (mkfs.fstype) available +under Linux. The filesystem-specific builder is searched for via your PATH environment setting only. +Please see the filesystem-specific builder manual pages for further details. +% +[ Certificate-usage [ Selector [ Matching-type ] ] ] +ldns-dane -h +ldns-dane -v +In the first form: A TLS connection to name:port is established. The TLSA resource record(s) for name +are used to authenticate the connection. +In the second form: The TLSA record(s) are read from tlsafile and used to authenticate the TLS service +% +gpm-root - a default handler for gpm, used to draw menus on the root window +gpm-root [ options ] +The program gpm-root is designed to handle Control-Mouse events to draw menus on the background of the +current tty. The actual menus are described by a configuration file in the user's home directory. +screen handling capabilities required by the program. +The program uses the files /dev/vcs* to draw to the console screen. These are available only from kernel +dump/restore capability. +% +mtrace - interpret the malloc trace log +mtrace [option]... [binary] mtracedata +mtrace is a Perl script used to interpret and provide human readable output of the trace log contained in +mtrace also contains the source file name with line number information for problem locations (assuming +that binary was compiled with debugging information). +--help Print help and exit. +--version +% +lslocks - list local system locks +lslocks [options] +lslocks lists information about all the currently held file locks in a Linux system. +-J, --json +Use JSON output format. +-n, --noheadings +Do not print a header line. +-o, --output list +% +xzmore, lzmore - view xz or lzma compressed (text) files +xzmore [file...] +lzmore [file...] +time on a soft-copy terminal. +To use a pager other than the default more, set environment variable PAGER to the name of the desired +program. The name lzmore is provided for backward compatibility with LZMA Utils. +e or q When the prompt --More--(Next file: file) is printed, this command causes xzmore to exit. +s When the prompt --More--(Next file: file) is printed, this command causes xzmore to skip the next +file and continue. +% +Prompts the user for a passphrase and inserts it into the specified keyring. If no keyring is +does not. +% +hpftodit [ -adqsv ] [ -in ] tfm_file map_file font +It is possible to have whitespace between the -i option and its parameter. +for the font; Intellifont and TrueType TFM files are supported, but symbol set TFM files are not. +map_file is a file giving the groff names for characters in the font; this file should consist of a +sequence of lines of the form: +where m is a decimal integer giving the MSL number of the character, u is a hexadecimal integer giving +% +dirmngr - CRL and OCSP daemon +dirmngr [options] command [args] +versions it is also used as a server for managing and downloading certificate revocation lists (CRLs) for +invoked internally by gpg, gpgsm, or via the gpg-connect-agent tool. +Commands are not distinguished from options except for the fact that only one command is allowed. +--version +mand. +% +grub-mklayout - generate a GRUB keyboard layout file +by GRUB's keymap command. +Generate GRUB keyboard layout from Linux console one. +-i, --input=FILE +set input filename. Default is STDIN +-o, --output=FILE +set output filename. Default is STDOUT +% +mdig - DNS pipelined lookup utility +[-x addr] [plusopt...] +mdig {-h} +mdig [@server] {global-opt...} {{local-opt...} {query}...} +mdig is a multiple/pipelined query version of dig: instead of waiting for a response after sending each +query, it begins by sending all queries. Responses are displayed in the order in which they are received, +not in the order the corresponding queries were sent. +mdig options are a subset of the dig options, and are divided into "anywhere options" which can occur +anywhere, "global options" which must occur before the query name (or they are ignored with a warning), +% +grub-script-check - check grub.cfg for syntax errors +grub-script-check [OPTION...] [PATH] +Checks GRUB script configuration file for syntax errors. +-v, --verbose +print verbose messages. +-?, --help +give this help list +--usage +give a short usage message +% +captoinfo - convert a termcap description into a terminfo description +captoinfo looks in each given text file for termcap descriptions. For each one found, an equivalent ter‐ +minfo description is written to standard output. Termcap tc capabilities are translated directly to ter‐ +minfo use capabilities. +If no file is given, then the environment variable TERMCAP is used for the filename or entry. If TERMCAP +is a full pathname to a file, only the terminal whose name is specified in the environment variable TERM +is extracted from that file. If the environment variable TERMCAP is not set, then the file +/usr/share/terminfo is read. +-v print out tracing information on standard error as the program runs. +% +tee - read from standard input and write to standard output and files +tee [OPTION]... [FILE]... +Copy standard input to each FILE, and also to standard output. +-a, --append +append to the given FILEs, do not overwrite +-i, --ignore-interrupts +ignore interrupt signals +-p diagnose errors writing to non pipes +--output-error[=MODE] +% +netcap - a program to see capabilities +netcap +netcap is a program that prints out a report of process capabilities. If the application is using tcp, +udp, raw, or packet family of sockets AND has any capabilities, it will be in the report. If the process +has partial capabilities, it is further examined to see if it has an open-ended bounding set. If this is +found to be true, a '+' symbol is added. +Some directories in the /proc file system are readonly by root. The program will try to access and report +what it can. But if nothing comes out, try changing to the root user and re-run this program. +% +thin_restore - restore thin provisioning metadata file to device or file +thin_restore [options] -i {device|file} -o {device|file} +thin_restore restores thin provisioning metadata created by the respective device-mapper target dumped +to another device or file. If restored to a metadata device , the metadata can be processed by the +device-mapper target. +-q, --quiet +Suppress output messages, return only exit code. +-i, --input {device|file} +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +dbus-launch - Utility to start a message bus from a shell script +dbus-launch [--version] [--help] [--sh-syntax] [--csh-syntax] [--auto-syntax] [--binary-syntax] +[PROGRAM] [ARGS...] +The dbus-launch command is used to start a session bus instance of dbus-daemon from a shell script. It +would normally be called from a user's login scripts. Unlike the daemon itself, dbus-launch exits, so +backticks or the $() construct can be used to read information from dbus-launch. +With no arguments, dbus-launch will launch a session bus instance and print the address and PID of that +instance to standard output. +the appropriate environment variables so the specified program can find the bus, and then execute the +% +telnetd - Telnet server +telnetd [OPTION...] +DARPA telnet protocol server +-D, --debug[=LEVEL] +set debugging level +-E, --exec-login=STRING +set program to be executed instead of /usr/bin/login +-h, --no-hostinfo +do not print host information before login has been completed +% +ionice - set or get process I/O scheduling class and priority +ionice [-c class] [-n level] [-t] -p PID... +ionice [-c class] [-n level] [-t] -P PGID... +ionice [-c class] [-n level] [-t] -u UID... +ionice [-c class] [-n level] [-t] command [argument...] +-p is given, ionice will query the current I/O scheduling class and priority for that process. +When command is given, ionice will run this command with the given arguments. If no class is specified, +As of this writing, a process can be in one of three scheduling classes: +% +tcpdump - dump traffic on a network +tcpdump [ -AbdDefhHIJKlLnNOpqRStuUvxX# ] [ -B buffer_size ] +[ -c count ] +[ -C file_size ] [ -G rotate_seconds ] [ -F file ] +[ -i interface ] [ -j tstamp_type ] [ -m module ] [ -M secret ] +[ --number ] [ -Q in|out|inout ] +[ -r file ] [ -V file ] [ -s snaplen ] [ -T type ] [ -w file ] +[ -W filecount ] +[ -E spi@ipaddr algo:secret,... ] +[ -y datalinktype ] [ -z postrotate-command ] [ -Z user ] +[ --time-stamp-precision=tstamp_precision ] +[ --immediate-mode ] [ --version ] +[ expression ] +% +lex — generate programs for lexical tasks (DEVELOPMENT) +lex [−t] [−n|−v] [file...] +The lex utility shall generate C programs to be used in lexical processing of character input, and that +can be used as an interface to yacc. The C programs shall be generated from lex source code and conform +to the ISO C standard, without depending on any undefined, unspecified, or implementation-defined behav‐ +documented by the implementation. Usually, the lex utility shall write the program it generates to the +file lex.yy.c; the state of this file is unspecified if lex exits with a non-zero exit status. See the +% +chgrp - change group ownership +chgrp [OPTION]... GROUP FILE... +chgrp [OPTION]... --reference=RFILE FILE... +Change the group of each FILE to GROUP. With --reference, change the group of each FILE to that of +RFILE. +-c, --changes +like verbose but report only when a change is made +-f, --silent, --quiet +suppress most error messages +-v, --verbose +% +named-checkzone, named-compilezone - zone file validity checking or converting tool +named-checkzone [-d] [-h] [-j] [-q] [-v] [-c class] [-f format] [-F format] [-J filename] [-i mode] +[-k mode] [-m mode] [-M mode] [-n mode] [-l ttl] [-L serial] [-o filename] [-r mode] +[-s style] [-S mode] [-t directory] [-T mode] [-w directory] [-D] [-W mode] {zonename} +{filename} +named-compilezone [-d] [-j] [-q] [-v] [-c class] [-C mode] [-f format] [-F format] [-J filename] +[-i mode] [-k mode] [-m mode] [-n mode] [-l ttl] [-L serial] [-r mode] [-s style] +[-t directory] [-T mode] [-w directory] [-D] [-W mode] {-o filename} {zonename} +{filename} +named-checkzone checks the syntax and integrity of a zone file. It performs the same checks as named does +into a name server. +% +grub-mkfont - make GRUB font files +-a, --force-autohint +force autohint +-b, --bold +convert to bold font +-c, --asce=NUM +set font ascent +% +key.dns_resolver - Upcall for request-key to handle dns_resolver keys +/sbin/key.dns_resolver <key> +/sbin/key.dns_resolver -D [-v] [-v] <keydesc> <calloutinfo> +and AFS) want to perform a hostname lookup and the kernel does not have the key cached. It is not ordi‐ +narily intended to be called directly. +It can be called in debugging mode to test its functionality by passing a -D flag on the command line. +For this to work, the key description and the callout information must be supplied. Verbosity can be +increased by supplying one or more -v flags. +ERRORS +All errors will be logged to the syslog. +% +newusers - update and create new users in batch +newusers [options] [file] +The newusers command reads a file (or the standard input by default) and uses this information to update +a set of existing users or to create new users. Each line is in the same format as the standard password +pw_name:pw_passwd:pw_uid:pw_gid:pw_gecos:pw_dir:pw_shell +pw_name +It can be the name of a new user or the name of an existing user (or a user created before by +% +swaplabel - print or change the label or UUID of a swap area +swaplabel [-L label] [-U UUID] device +swaplabel will display or change the label or UUID of a swap partition located on device (or regular +file). +If the optional arguments -L and -U are not given, swaplabel will simply display the current swap-area +label and UUID of device. +If an optional argument is present, then swaplabel will change the appropriate value on device. These +label or UUID on an actively used swap device. +% +find - search for files in a directory hierarchy +find [-H] [-L] [-P] [-D debugopts] [-Olevel] [starting-point...] [expression] +given starting-point by evaluating the given expression from left to right, according to the rules of +precedence (see section OPERATORS), until the outcome is known (the left hand side is false for and oper‐ +ations, true for or), at which point find moves on to the next file name. If no starting-point is speci‐ +fied, `.' is assumed. +If you are using find in an environment where security is important (for example if you are using it to +search directories that are writable by other users), you should read the "Security Considerations" chap‐ +ter of the findutils documentation, which is called Finding Files and comes with findutils. That docu‐ +ful source of information. +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +etags, ctags - generate tag file for Emacs, vi +etags [-aCDGIQRVh] [-i file] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--no-defines] [--globals] [--no-globals] [--no-line-directive] [--include=file] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--output=tagfile] +[--class-qualify] [--regex=regexp] [--no-regex] [--help] [--version] file ... +ctags [-aCdgIQRVh] [-BtTuvwx] [-l language] +[-o tagfile] [-r regexp] [--parse-stdin=file] +[--append] [--backward-search] [--cxref] [--no-defines] [--globals] [--no-globals] [--no-line-directive] +[--ignore-indentation] [--language=language] [--members] [--no-members] [--class-qualify] +[--output=tagfile] [--regex=regexp] [--update] [--help] [--version] file ... +% +pcregrep - a grep with Perl-compatible regular expressions. +pcregrep searches files for character patterns, in the same way as other grep commands do, but it uses +the PCRE regular expression library to support patterns that are compatible with the regular expressions +full description of the syntax and semantics of the regular expressions that PCRE supports. +Patterns, whether supplied on the command line or in a separate file, are given without delimiters. For +example: +pcregrep Thursday /etc/motd +% +xzless, lzless - view xz or lzma compressed (text) files +xzless [file...] +lzless [file...] +xzless is a filter that displays text from compressed files to a terminal. It works on files compressed +The command named lzless is provided for backward compatibility with LZMA Utils. +ENVIRONMENT +% +pvscan — scan all disks for physical volumes +ingfailure] [-e|--exported] [-n|--novolumegroup] [--reportformat {basic|json}] [-s|--short] [-u|--uuid] +pvscan [-d|--debug] [-h|--help] --cache [-a|--activate ay] [-b|--background] [--reportformat +{basic|json}] [--major major --minor minor | DevicePath | major:minor]... +pvscan scans all supported LVM block devices in the system for physical volumes. +Scanning with lvmetad +Scanning disks is required to read LVM metadata and identify LVM PVs. Once read, lvmetad caches the +% +[--reportformat {basic|json}] [--setphysicalvolumesize size] PhysicalVolume [PhysicalVolume...] +allocated on it. +--setphysicalvolumesize size +Overrides the automatically-detected size of the PV. Use with care, or prior to reducing the +physical size of the device. +% +ntptrace - Trace peers of an NTP server +ntptrace [-flags] [-flag [value]] [--option-name[[=| ]value]] [host] +ntptrace is a perl script that uses the ntpq utility program to follow the chain of NTP servers from a +given host back to the primary time source. For ntptrace to work properly, each of these servers must +If given no arguments, ntptrace starts with localhost. Here is an example of the output from ntptrace: +On each line, the fields are (left to right): the host name, the host stratum, the time offset between +% +findfs - find a filesystem by label or UUID +findfs will search the block devices in the system looking for a filesystem or partition with specified +tag. The currently supported tags are: +LABEL=<label> +Specifies filesystem label. +UUID=<uuid> +Specifies filesystem UUID. +PARTUUID=<uuid> +% +kpasswd - change a user's Kerberos password +kpasswd [principal] +The kpasswd command is used to change a Kerberos principal's password. kpasswd first prompts for the +current Kerberos password, then prompts the user twice for the new password, and the password is changed. +If the principal is governed by a policy that specifies the length and/or number of character classes +required in the new password, the new password must conform to the policy. (The five character classes +principal +Change the password for the Kerberos principal principal. Otherwise, kpasswd uses the principal +name from an existing ccache if there is one; if not, the principal is derived from the identity +% +pvdisplay - display attributes of a physical volume +ure] [--ignoreskippedcluster] [--maps] [--nosuffix] [--reportformat {basic|json}] [-s|--short] +[-S|--select Selection] [--units hsbkmgtHKMGT] [-v[v]|--verbose [--verbose]] [--version] [PhysicalVol‐ +umePath...] +[--reportformat {basic|json}] [--separator Separator] [--unbuffered] [--units hHbBsSkKmMgGtTpPeE] +[-v[v]|--verbose [--verbose]] [--version] [PhysicalVolumePath...] +pvdisplay allows you to see the attributes of one or more physical volumes like size, physical extent +size, space used for the volume group descriptor area and so on. +% +nroff - emulate nroff command with groff +nroff [-CchipStUvwW] [-dcs] [-Mdir] [-mname] [-nnum] [-olist] [-rcn] [-Tname] [file ...] +nroff --help +nroff -v | --version +devices accepted by nroff to select the output encoding emitted by grotty, groff's TTY output device. If +neither the GROFF_TYPESETTER environment variable nor the -T command line option (which overrides the +environment variable) specifies a (valid) device, nroff checks the current locale to select a default +output device. It first tries the locale program, then the environment variables LC_ALL, LC_CTYPE, and +LANG, and finally the LESSCHARSET environment variable. +The -h and -c options are equivalent to grotty's options -h (using tabs in the output) and -c (using the +old output scheme instead of SGR escape sequences). The -d, -C, -i, -M, -m, -n, -o, -r, -w, and -W +% +With no FILE, or when FILE is -, read standard input. +-b, --binary +read in binary mode +-c, --check +--tag create a BSD-style checksum +% +sudoreplay — replay sudo session logs +sudoreplay [-h] [-d dir] [-f filter] [-m num] [-s num] ID +sudoreplay [-h] [-d dir] -l [search expression] +sudoreplay plays back or lists the output logs created by sudo. When replaying, sudoreplay can play the +line options. +tern matching the iolog_file option in the sudoers file. When a command is run via sudo with log_output +also be determined using sudoreplay's list mode. +% +grub-probe - probe device information for GRUB +grub-probe [OPTION...] [OPTION]... [PATH|DEVICE] +Probe device information for a given path (or device, if the -d option is given). +-0 separate items in output using ASCII NUL characters +-d, --device +given argument is a system device, not a path +-m, --device-map=FILE +use FILE as the device map [default=//boot/grub/device.map] +-t, --target=TARGET +% +numactl - Control NUMA policy for processes or shared memory +numactl [ --all ] [ --interleave nodes ] [ --preferred node ] [ --membind nodes ] [ --cpunodebind nodes ] +[ --physcpubind cpus ] [ --localalloc ] [--] command {arguments ...} +numactl --show +numactl --hardware +numactl [ --huge ] [ --offset offset ] [ --shmmode shmmode ] [ --length length ] [ --strict ] +[ --shmid id ] --shm shmkeyfile | --file tmpfsfile +[ --touch ] [ --dump ] [ --dump-nodes ] memory policy +numactl runs processes with a specific NUMA scheduling or memory placement policy. The policy is set for +command and inherited by all of its children. In addition it can set persistent policy for shared memory +segments or files. +Use -- before command if using command options that could be confused with numactl options. +% +logger - enter messages into the system log +logger [options] [message] +logger makes entries in the system log. +When the optional message argument is present, it is written to the log. If it is not present, and the +-f option is not given either, then standard input is logged. +-d, --udp +Use datagrams (UDP) only. By default the connection is tried to the syslog port defined in +-e, --skip-empty +% +sclient remotehost +sclient is a sample application, primarily useful for testing purposes. It contacts a sample server +MIT +% +cache_dump - dump cache metadata from device or file to standard output +cache_dump [options] {device|file} +cache_dump dumps binary cache metadata created by the device-mapper cache target on a device or file to +standard output for analysis or postprocessing in XML format. XML formated metadata can be fed into +device-mapper target) or file. +-r, --repair +Repair the metadata whilst dumping it. +-h, --help +% +python - an interpreted, interactive, object-oriented programming language +python [ -B ] [ -b ] [ -d ] [ -E ] [ -h ] [ -i ] [ -I ] +[ -m module-name ] [ -q ] [ -O ] [ -OO ] [ -s ] [ -S ] [ -u ] +[ -v ] [ -V ] [ -W argument ] [ -x ] [ [ -X option ] -? ] +[ -c command | script | - ] [ arguments ] +Python is an interpreted, interactive, object-oriented programming language that combines remarkable +power with very clear syntax. For an introduction to programming in Python, see the Python Tutorial. +The Python Library Reference documents built-in and standard types, constants, functions and modules. +Finally, the Python Reference Manual describes the syntax and semantics of the core language in (perhaps +installed on your system as well.) +Python's basic power can be extended with your own modules written in C or C++. On most systems such +% +glib-compile-resources - GLib resource compiler +glib-compile-resources [OPTION...] {FILE} +glib-compile-resources reads the resource description from FILE and the files that it references and +creates a binary resource bundle that is suitable for use with the GResource API. The resulting bundle is +then written out as-is, or as C source for linking into an application. +The XML resource files normally have the filename extension .gresource.xml. For a detailed description of +the XML file format, see the GResource documentation. +-h, --help +Print help and exit +% +tar - an archiving utility +Traditional usage +tar {A|c|d|r|t|u|x}[GnSkUWOmpsMBiajJzZhPlRvwo] [ARG...] +% +grub-kbdcomp - generate a GRUB keyboard layout file +used by GRUB's keymap command. +Make GRUB keyboard layout file. +-h, --help +print this message and exit +-V, --version +print the version information and exit +% +vgextend — add physical volumes to a volume group +ume group to extend it in size. Moreover, it allows you to re-add a physical volume that has gone missing +previously, due to a transient device failure, without re-initialising it. Use vgextend --restoremissing +to that effect. +% +look - display lines beginning with a given string +look [options] string [file] +The look utility displays any lines in file which contain string. As look performs a binary search, the +with). +If file is not specified, the file /usr/share/dict/words is used, only alphanumeric characters are com‐ +-a, --alternative +Use the alternative dictionary file. +% +repo-add - package database maintenance utility +repo-add [options] <path-to-db> <package|delta> [<package|delta> ...] +repo-remove [options] <path-to-db> <packagename|delta> [<packagename|delta> ...] +repo-add and repo-remove are two scripts to help build a package database for packages built with +repo-add will update a package database by reading a built package or package delta file. Multiple +packages and/or deltas to add can be specified on the command line. +If a matching “.sig” file is found alongside a package file, the signature will automatically be embedded +into the database. +% +Translate Pod file(s) to Texinfo. There are two basic modes of operation. First, by default, each pod +is translated to a standalone Texinfo manual. +Second, if "--base-level" is set higher than 0, each pod is translated to a file suitable for @include, +and one more file with all the @includes is generated, intended to be @included in turn within a hand- +written top-level file. +--appendix-sections +Use appendix sectioning commands (@appendix, ...) instead of the default numbered sectioning Texinfo +@-commands (@chapter, @section, ...). +% +bison - GNU Project parser generator (yacc replacement) +bison [OPTION]... FILE +designed for yacc. +Input files should follow the yacc convention of ending in .y. Unlike yacc, the generated files do not +have fixed names, but instead use the prefix of the input file. Moreover, if you need to put C++ code in +the input file, you can end his name by a C++-like extension (.ypp or .y++), then bison will follow your +extension to name the output file (.cpp or .c++). For instance, a grammar description file named +parse.yxx would produce the generated parser in a file named parse.tab.cxx, instead of yacc's y.tab.c or +old Bison version's parse.tab.c. +% +aclocal [OPTION]... +--automake-acdir=DIR +--system-acdir=DIR +directory holding third-party system-wide files +% +dir - list directory contents +dir [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +xfs_growfs, xfs_info - expand an XFS filesystem +xfs_growfs [ -dilnrx ] [ -D size ] [ -e rtextsize ] [ -L size ] [ -m maxpct ] [ -t mtab ] [ -R size ] +mount-point +xfs_growfs -V +xfs_info [ -t mtab ] mount-point +xfs_info -V +The existing contents of the filesystem are undisturbed, and the added space becomes available for addi‐ +tional file storage. +% +Reads a grap program as input; produces an image file (by default in Portable Network Graphics format) +The output image will be a black-on-white graphic clipped to the smallest possible bounding box that con‐ +it a border, set the background transparent, set the image's pixel density, or perform other useful +transformations. +% +blockdev - call block device ioctls from the command line +blockdev [-q] [-v] command [command...] device [device...] +blockdev --report [device...] +The utility blockdev allows one to call block device ioctls from the command line. +-V Print version and exit. +-q Be quiet. +-v Be verbose. +--report +% +dmeventd — Device-mapper event daemon +dmeventd [-d [-d [-d]]] [-f] [-h] [-l] [-R] [-V] [-?] +dmeventd is the event monitoring daemon for device-mapper devices. Library plugins can register and +carry out actions triggered when particular events occur. +LVM PLUGINS +Mirror +Raid +Snapshot +% +zdump - timezone dumper +zdump [ --version ] [ --help ] [ -v ] [ -c [loyear,]hiyear ] [ zonename ... ] +Zdump prints the current time in each zonename named on the command line. +These options are available: +--version +Output version information and exit. +--help Output short usage and exit. +-v For each zonename on the command line, print the time at the lowest possible time value, the time +one day after the lowest possible time value, the times both one second before and exactly at each +% +mand [command_options] +key stash file or perform live rollover of the master key. +% +setarch - change reported architecture in new program environment and set personality flags +setarch arch [options] [program [argument...]] +arch [options] [program [argument...]] +setarch --list|-h|-V +various personality options. The default program is /bin/sh. +--list List the architectures that setarch knows about. Whether setarch can actually set each of these +architectures depends on the running kernel. +% +filecap - a program to see capabilities +filecap is a program that prints out a report of programs with file based capabilities. If a file is not +in the report or there is no report at all, no capabilities were found. For expedience, the default is to +check only the directories in the PATH environmental variable. If the -a command line option is given, +then all directories will be checked. If a directory is passed, it will recursively check that directory. +If a path to a file is given, it will only check that file. If the path to the file includes capabili‐ +ties, then they are written to the file. +environmental variable is used to show you capabilities on files you are likely to execute. +% +su - run a command with substitute user and group ID +su [options] [-] [user [argument...]] +su allows to run commands with a substitute user and group ID. +When called without arguments, su defaults to running an interactive shell as root. +For backward compatibility, su defaults to not change the current directory and to only set the environ‐ +to always use the --login option (instead of its shortcut -) to avoid side effects caused by mixing envi‐ +ronments. +options found in other su implementations, such as support for a wheel group, have to be configured via +% +fakeroot - run a command in an environment faking root privileges for file manipulation +fakeroot [-l|--lib library] [--faked faked-binary] [-i load-file] [-s save-file] [-u|--unknown-is-real ] +[-b|--fd-base ] [-h|--help ] [-v|--version ] [--] [command] +fakeroot runs a command in an environment wherein it appears to have root privileges for file manipula‐ +root permissions/ownership. Without fakeroot one would need to have root privileges to create the con‐ +stituent files of the archives with the correct permissions and ownership, and then pack them up, or one +would have to construct the archives directly, without using the archiver. +simulate the effect the real library functions would have had, had the user really been root. These wrap‐ +per functions are in a shared library /usr/lib/*/libfakeroot-*.so or similar location on your platform. +% +lvmchange — change attributes of the logical volume manager +lvmchange +% +cp - copy files and directories +cp [OPTION]... [-T] SOURCE DEST +cp [OPTION]... SOURCE... DIRECTORY +cp [OPTION]... -t DIRECTORY SOURCE... +Copy SOURCE to DEST, or multiple SOURCE(s) to DIRECTORY. +Mandatory arguments to long options are mandatory for short options too. +-a, --archive +same as -dR --preserve=all +--attributes-only +don't copy the file data, just the attributes +% +setpci - configure PCI devices +setpci [options] devices operations... +setpci is a utility for querying and configuring PCI devices. +All numbers are entered in hexadecimal notation. +Root privileges are necessary for almost all operations, excluding reads of the standard header of the +General options +-v Tells setpci to be verbose and display detailed information about configuration space accesses. +% +A summary of options is included below. +-M path +Specify path as MANPATH. +-k keyword +% +fsck.btrfs - do nothing, successfully +fsck.btrfs [-aApy] [<device>...] +fsck.btrfs is a type of utility that should exist for any filesystem and is called during system setup +set fs_passno to 0. +If you wish to check the consistency of a BTRFS filesystem or repair a damaged filesystem, see +option (use with care!). +% +migspeed - Test the speed of page migration +migspeed -p pages from-nodes to-nodes +migspeed attempts to move a sample of pages from the indicated node to the target node and measures the +time it takes to perform the move. +-p pages +% +era_dump - dump era metadata from device or file to standard output +era_dump [options] {device|file} +era_dump dumps binary era metadata created by the device-mapper era target on a device or file to stan‐ +dard output for analysis or postprocessing in XML format. XML formated metadata can be fed into +device-mapper target) or file. +-r, --repair +Repair the metadata whilst dumping it. +-h, --help +% +xzgrep - search compressed files for a regular expression +xzgrep [grep_options] [-e] pattern file... +xzegrep ... +xzfgrep ... +lzgrep ... +lzegrep ... +lzfgrep ... +% +ftp - File Transfer Protocol client. +ftp [OPTION...] [HOST [PORT]] +Remote file transfer. +-6, --ipv6 +contact IPv6 hosts +-A, --active +enable active mode transfer +% +strings - print the strings of printable characters in files. +strings [-afovV] [-min-len] +[-n min-len] [--bytes=min-len] +[-t radix] [--radix=radix] +[-e encoding] [--encoding=encoding] +[-] [--all] [--print-file-name] +[-T bfdname] [--target=bfdname] +[-w] [--include-all-whitespace] +[-s] [--output-separatorsep_string] +[--help] [--version] file... +long (or the number given with the options below) and are followed by an unprintable character. +% +pcre-config - program to return PCRE configuration +pcre-config [--prefix] [--exec-prefix] [--version] [--libs] +[--cflags] [--cflags-posix] +pcre-config returns the configuration of the installed PCRE libraries and the options required to compile +respectively, and are not available if only one of those libraries has been built. If an unavailable +option is encountered, the "usage" information is output. +% +glib-genmarshal - C code marshaller generation utility for GLib closures +glib-genmarshal [OPTION...] [FILE...] +glib-genmarshal is a small utility that generates C code marshallers for callback functions of the +GClosure mechanism in the GObject sublibrary of GLib. The marshaller functions have a standard signature, +they get passed in the invoking closure, an array of value structures holding the callback function +parameters and a value structure for the return value of the callback. The marshaller is then responsible +to call the respective C code function of the closure with all the parameters on the stack and to collect +its return value. +glib-genmarshal takes a list of marshallers to generate as input. The marshaller list is either read from +standard input or from files passed as additional arguments on the command line. +Marshaller list format +% +smartctl - Control and Monitor Utility for SMART Disks +smartctl [options] device +other platforms.] +smartctl controls the Self-Monitoring, Analysis and Reporting Technology (SMART) system built into most +ATA/SATA and SCSI/SAS hard drives and solid-state drives. The purpose of SMART is to monitor the relia‐ +bility of the hard drive and predict drive failures, and to carry out different types of drive self- +smartctl also provides support for polling TapeAlert messages from SCSI tape drives and changers. +% +kproplog - display the contents of the Kerberos principal update log +kproplog [-h] [-e num] [-v] kproplog [-R] +The kproplog command displays the contents of the KDC database update log to standard output. It can be +used to keep track of incremental updates to the principal database. The update log file contains the +slave KDC servers. When updates occur, they are logged to this file. Subsequently any KDC slave config‐ +ured for incremental updates will request the current data from the master KDC and update their log file +with any updates returned. +The kproplog command requires read access to the update log file. It will display update entries only +for the KDC it runs on. +If no options are specified, kproplog displays a summary of the update log. If invoked on the master, +% +xml-config - script to get information about the installed version of GNOME-XML +xml-config [--prefix[=DIR]] [--libs] [--cflags] [--version] [--help] +xml-config is a tool that is used to determine the compile and linker flags that should be used to com‐ +pile and link programs that use GNOME-XML. +xml-config accepts the following options: +--version +Print the currently installed version of GNOME-XML on the standard output. +--libs Print the linker flags that are necessary to link a GNOME-XML program. +% +rdisc - network router discovery daemon +rdisc [-abdfrstvV] [-p preference] [-T max_interval] [send_address] [receive_address] +rdisc implements client side of the ICMP router discover protocol. rdisc is invoked at boot time to pop‐ +ulate the network routing tables with default routes. +for ROUTER_ADVERTISE messages from routers. The received messages are handled by first ignoring those +listed router addresses with which the host does not share a network. Among the remaining addresses the +ones with the highest preference are selected as default routers and a default route is entered in the +kernel routing table for each one of them. +Optionally, rdisc can avoid waiting for routers to announce themselves by sending out a few ROUTER_SOLIC‐ +% +ifnames - Extract CPP conditionals from a set of files +ifnames [OPTION]... [FILE]... +Scan all of the C source FILES (or the standard input, if none are given) and write to the standard out‐ +put a sorted list of all the identifiers that appear in those files in `#if', `#elif', `#ifdef', or +`#ifndef' directives. Print each identifier on a line, followed by a space-separated list of the files +in which that identifier occurs. +-h, --help +print this help, then exit +-V, --version +print version number, then exit +% +showkey - examine the codes sent by the keyboard +showkey [-h|--help] [-a|--ascii] [-s|--scancodes] [-k|--keycodes] +showkey prints to standard output either the scan codes or the keycode or the `ascii' code of each key +or release event, or until it receives a suitable signal, like SIGTERM, from another process. In `ascii' +mode the program terminates when the user types ^D. +When in scancode dump mode, showkey prints in hexadecimal format each byte received from the keyboard to +sequences the keyboard sends at once on a given key press. The scan code dumping mode is primarily +intended for debugging the keyboard driver or other low level interfaces. As such it shouldn't be of much +interest to the regular end-user. However, some modern keyboards have keys or buttons that produce scan‐ +% +systemd-detect-virt - Detect execution in a virtualized environment +systemd-detect-virt detects execution in a virtualized environment. It identifies the virtualization +technology and can distinguish full machine virtualization from container virtualization. +systemd-detect-virt exits with a return value of 0 (success) if a virtualization technology is detected, +and non-zero (error) otherwise. By default, any type of virtualization is detected, and the options +--container and --vm can be used to limit what types of virtualization are detected. +When executed without --quiet will print a short identifier for the detected virtualization technology. +The following technologies are currently identified: +i.e. shared kernel virtualization) +% +ls - list directory contents +ls [OPTION]... [FILE]... +List information about the FILEs (the current directory by default). Sort entries alphabetically if none +of -cftuvSUX nor --sort is specified. +Mandatory arguments to long options are mandatory for short options too. +-a, --all +do not ignore entries starting with . +-A, --almost-all +do not list implied . and .. +% +gpgparsemail - Parse a mail message into an annotated format +gpgparsemail [options] [file] +The gpgparsemail is a utility currently only useful for debugging. Run it with --help for usage informa‐ +tion. +% +unix_update [...] +unix_update is a helper program for the pam_unix module that updates the password of a given user. It is +not intended to be run directly from the command line and logs a security violation if done so. +The purpose of the helper is to enable tighter confinement of login and password changing services. The +helper is thus called only when SELinux is enabled on the system. +The interface of the helper - command line options, and input/output data format are internal to the +pam_unix module and it should not be called directly from applications. +% +applygnupgdefaults - Run gpgconf --apply-defaults for all users. +applygnupgdefaults +with an existing GnuPG home directory. Admins might want to use this script to update he GnuPG configu‐ +applygnupgdefaults is invoked by root as: +applygnupgdefaults +% +libnetcfg - configure libnet +standard Perl distribution, but the libnetcfg can be used for any libnet installation. +Without arguments libnetcfg displays the current configuration. +$ libnetcfg +# old config ./libnet.cfg +ftp_int_passive 0 +ftp_testhost ftp.funet.fi +inet_domain none.such +nntp_hosts nntp.none.such +ph_hosts +% +--infile=<name> --outfile=<name> +--podpath=<name>:...:<name> --podroot=<name> +--cachedir=<name> --flush --recurse --norecurse +--quiet --noquiet --verbose --noverbose +--index --noindex --backlink --nobacklink +--header --noheader --poderrors --nopoderrors +--css=<URL> --title=<name> +Converts files from pod format (see perlpod) to HTML format. +% +podchecker - check the syntax of POD format documentation files +podchecker [-help] [-man] [-(no)warnings] [file ...] +-help Print a brief help message and exit. +-man Print the manual page and exit. +-warnings -nowarnings +Turn on/off printing of warnings. Repeating -warnings increases the warning level, i.e. more +warnings are printed. Currently increasing to level two causes flagging of unescaped "<,>" +characters. +file The pathname of a POD file to syntax-check (defaults to standard input). +% +piconv [-f from_encoding] [-t to_encoding] +[-p|--perlqq|--htmlcref|--xmlcref] [-C N|-c] [-D] [-S scheme] +[-s string|file...] +piconv -l +piconv -r encoding_alias +piconv -h +piconv is perl version of iconv, a character encoding converter widely available for various Unixen +piconv converts the character encoding of either STDIN or files specified in the argument and prints out +to STDOUT. +% +encguess - guess character encodings of files +encguess [switches] filename... +SWITCHES +-h +show this message and exit. +-s +specify a list of "suspect encoding types" to test, seperated by either ":" or "," +-S +output a list of all acceptable encoding types that can be used with the -s param +% +[--fixed=font] [--fixedbold=font] [--fixeditalic=font] +[--fixedbolditalic=font] [--name=name] [--nourls] +[--official] [--quotes=quotes] [--release=version] +[input [output] ...] +% +ptardiff - program that diffs an extracted archive against an unextracted one +ptardiff is a small program that diffs an extracted archive +against an unextracted one, using the perl module Archive::Tar. +Provide the progam with an ARCHIVE_FILE and it will look up all +the files with in the archive, scan the current working directory +for a file with the name and diff it against the contents of the +archive. +ptardiff ARCHIVE_FILE +ptardiff -h +% +perlbug - how to submit bug reports on Perl +perlbug +perlbug [ -v ] [ -a address ] [ -s subject ] [ -b body | -f inputfile ] [ -F outputfile ] +[ -r returnaddress ] [ -e editor ] [ -c adminaddress | -C ] [ -S ] [ -t ] [ -d ] [ -A ] [ -h ] [ -T ] +perlbug [ -v ] [ -r returnaddress ] +[ -A ] [ -ok | -okay | -nok | -nokay ] +perlthanks +the modules which ship with it. +% +Tcl Encoding Files (.enc). Besides being used internally during the build process of the Encode module, +Quick Guide +If you want to know as little about Perl as possible but need to add a new encoding, just read this +chapter and forget the rest. +0. Have a .ucm file ready. You can get it from somewhere or you can write your own from scratch or you +% +cpan - easily interact with CPAN from the command line +# with arguments and no switches, installs specified modules +cpan module_name [ module_name ... ] +# with switches, installs modules with extra behavior +cpan [-cfgimtTw] module_name [ module_name ... ] +# with just the dot, install from the distribution in the +# current directory +cpan . +# without arguments, starts CPAN.pm shell +cpan +# force install modules (usually those that fail tests) +% +[-q quotes] [--nourls] [--stderr] [-w width] +[input [output ...]] +from POD source. It can optionally use either termcap sequences or ANSI color escape sequences to format +the text. +input is the file to read for POD source (the POD can be embedded in code). If input isn't given, it +defaults to "STDIN". output, if given, is the file to which to write the formatted output. If output +isn't given, the formatted output is written to "STDOUT". Several POD files can be processed in the same +% +-help Print a brief help message and exit. +-man Print this command's manual page and exit. +-exit exitval +The exit status value to return. +-output outfile +% +prove - Run tests through a TAP harness. +prove [options] [files or directories] +Boolean options: +-v, --verbose Print all test lines. +-l, --lib Add 'lib' to the path for your tests (-Ilib). +-b, --blib Add 'blib/lib' and 'blib/arch' to the path for +your tests +-s, --shuffle Run the tests in random order. +-c, --color Colored test output (default). +--nocolor Do not color test output. +--count Show the X/Y test count when not verbose +(default) +% +easily run while in /usr/include: +or +or +% +diagnostics, splain - produce verbose warning diagnostics +Using the "diagnostics" pragma: +use diagnostics; +use diagnostics -verbose; +enable diagnostics; +disable diagnostics; +Using the "splain" standalone filter program: +splain [-v] [-p] diag.out +Using diagnostics to get stack traces from a misbehaving script: +% +ptar - a tar-like program written in perl +ptar is a small, tar look-alike program that uses the perl module +Archive::Tar to extract, create and list tar archives. +ptar -c [-v] [-z] [-C] [-f ARCHIVE_FILE | -] FILE FILE ... +ptar -c [-v] [-z] [-C] [-T index | -] [-f ARCHIVE_FILE | -] +ptar -x [-v] [-z] [-f ARCHIVE_FILE | -] +ptar -t [-z] [-f ARCHIVE_FILE | -] +ptar -h +c Create ARCHIVE_FILE or STDOUT (-) from FILE +x Extract from ARCHIVE_FILE or STDIN (-) +t List the contents of ARCHIVE_FILE or STDIN (-) +% +podselect - print selected sections of pod documentation on standard output +podselect [-help] [-man] [-section section-spec] [file ...] +-help Print a brief help message and exit. +-man Print the manual page and exit. +-section section-spec +Specify a section to include in the output. See "SECTION SPECIFICATIONS" in Pod::Parser for the +file The pathname of a file from which to select sections of pod documentation (defaults to standard +input). +% +shasum - Print or Check SHA Checksums +Print or check SHA checksums. +With no FILE, or when FILE is -, read standard input. +-b, --binary read in binary mode +-c, --check read SHA sums from the FILEs and check them +-t, --text read in text mode (default) +-U, --UNIVERSAL read in Universal Newlines mode +produces same digest on Windows/Unix/Mac +ASCII '0' interpreted as 0-bit, +all other characters ignored +% +json_pp - JSON::PP command utility +json_pp [-v] [-f from_format] [-t to_format] [-json_opt options_to_json] +from json_xs and modified. +The default input format is json and the default output format is json with pretty option. +-f +-f from_format +Reads a data in the given format from STDIN. +% +perlbug - how to submit bug reports on Perl +perlbug +perlbug [ -v ] [ -a address ] [ -s subject ] [ -b body | -f inputfile ] [ -F outputfile ] +[ -r returnaddress ] [ -e editor ] [ -c adminaddress | -C ] [ -S ] [ -t ] [ -d ] [ -A ] [ -h ] [ -T ] +perlbug [ -v ] [ -r returnaddress ] +[ -A ] [ -ok | -okay | -nok | -nokay ] +perlthanks +the modules which ship with it. +% +Usually, your old .pl file will still work fine and you should only use this tool if you plan to update +LIMITATIONS +It's just a first step, but it's usually a good first step. +Larry Wall <larry@wall.org> +% +perldoc - Look up Perl documentation in Pod format. +perldoc [-h] [-D] [-t] [-u] [-m] [-l] [-F] +[-i] [-V] [-T] [-r] +[-d destination_file] +[-o formatname] +[-w formatteroption:value] +[-n nroff-replacement] +[-X] +[-L language_code] +Examples: +perldoc -f BuiltinFunction +% +corelist - a commandline frontend to Module::CoreList +See Module::CoreList for one. +corelist -v +corelist [-r <PerlVersion>] ... +corelist --diff PerlVersion PerlVersion +the perls Module::CoreList knows about. +% +ptargrep - Apply pattern matching to the contents of files in a tar archive +ptargrep [options] <pattern> <tar file> ... +Options: +--basename|-b ignore directory paths from archive +--list-only|-l list matching filenames rather than extracting matches +--verbose|-v write debugging message to STDERR +--help|-? detailed help message +You might use this to identify all files in an archive which contain lines matching the specified pattern +and either print out the pathnames or extract the files. +% +xsubpp - compiler to convert Perl XS code into C code +xsubpp [-v] [-except] [-s pattern] [-prototypes] [-noversioncheck] [-nolinenumbers] [-nooptimize] +[-typemap typemap] [-output filename]... file.xs +other Perl module build tools. +xsubpp will compile XS code into C code by embedding the constructs necessary to let C functions +manipulate Perl values and creates the glue necessary to let Perl access those functions. The compiler +uses typemaps to determine how to map C function parameters and variables to Perl values. +The compiler will search for typemap files called typemap. It will use the following search path to find +default typemaps, with the rightmost typemap taking precedence. +% +Options: +-n do not generate perl code (default when invoked as pstruct) +-v generate perl code, with C decls as comments +-i do NOT recompute sizes for intrinsic datatypes +% +to retrieve the value of any #define statement which was in the C header files. +The module_name will be used for the name of the extension. If module_name is not supplied then the name +of the first header file will be used, with the first character capitalized. +If the extension might need extra libraries, they should be included here. The extension Makefile.PL +will take care of checking whether the libraries actually exist and how they should be loaded. The extra +libraries should be specified in the form -lm -lposix, etc, just as on the cc command line. By default, +% +perlivp - Perl Installation Verification Procedure +perlivp [-p] [-v] [-h] +The perlivp program is set up at Perl source code build time to test the Perl version it was built under. +It can be used after running: +make install +(or your platform's equivalent procedure) to verify that perl and its libraries have been installed +correctly. A correct installation is verified by output that looks like: +% +Options: +-n do not generate perl code (default when invoked as pstruct) +-v generate perl code, with C decls as comments +-i do NOT recompute sizes for intrinsic datatypes +% +instmodsh - A shell to examine installed modules +instmodsh +A little interface to ExtUtils::Installed to examine installed modules, validate your packlists and even +create a tarball from an installed module. +ExtUtils::Installed +% +zipdetails - display the internal structure of zip files +zipdetaile [-v] zipfile.zip +zipdetails -h +Zipdetails displays information about the internal record structure of the zip file. It is not concerned +with displaying any details of the compressed data stored in the zip file. +The program assumes prior understanding of the internal structure of a Zip file. You should have a copy +-v Enable Verbose mode +-h Display help +% diff --git a/src/rtfm.dat b/src/rtfm.dat Binary files differnew file mode 100644 index 0000000..2102dc6 --- /dev/null +++ b/src/rtfm.dat @@ -0,0 +1,44 @@ +1 +2 +3 +4 +5 +8 +ABRT +ABSTRACT +ARGUMENTS +AUTHOR +CHECK +COMMAND +COPYING +COPYRIGHT +DESCRIPTION +DOCUMENTS +Description +EXAMPLE +FORTUNE +Help +INTRODUCTION +Introduction +Local +may +NAME +NOTE +Name +Note +OPTIONS +OVERVIEW +PROLOG +QUERYING +SEE +STATUS +SUMMARY +SYNOPSIS +SYNOPSYS +SYNTAX +This +UNIX +USAGE +Usage +VERSION +case |