• Efficiency: Command-line interfaces (CLI) can be more efficient for many tasks, allowing you to perform complex operations with simple commands.
• Control: Offers greater control over your system, enabling you to customize and automate processes easily.
• Versatility: Linux commands can be used across various distributions (like Ubuntu, CentOS, Debian), making your skills transferable.
• Troubleshooting: CLI skills are essential for troubleshooting and fixing issues that aren’t easily resolved through graphical interfaces.
• Automation: Powerful scripting capabilities (using bash, sh, etc.) allow you to automate repetitive tasks and boost productivity.
• Resource Management: Allows for better management of system resources and performance monitoring.
• Development: Many development environments and tools are native to Linux, providing a robust platform for coding and deployment.
• Servers: Most servers run on Linux, so understanding commands is crucial for managing web servers, databases, and other infrastructure.
• Security: Linux commands provide strong tools for securing systems, monitoring network traffic, and managing user permissions.
• Learning Curve: Mastering Linux commands can make learning other programming languages and tools easier, as many share similar syntax and concepts.

As a cloud engineer, mastering advanced Linux commands is crucial for efficient cloud management. Here’s a list of the top 10 commands you should know:

jq '.name' data.json

jq '.age > 25' data.json

jq -r tostring data.json | yq -

grep "error" log.txt

grep -c "warning" log.txt

grep -v "info" log.txt

sed 's/old/new/g' file.txt

sed '10d' file.txt

sed '/pattern/i\new line' file.txt

awk -F, '{print $1, $3}' data.csv

awk -F, '{sum+=$2} END {print sum}' data.csv

awk '{print $1, $2 | "sort -nk2"}' data.csv

curl https://example.com

curl -X POST -d '{"name": "John"}' https://example.com/api

curl -O https://example.com/file.zip

dig example.com

dig MX example.com

dig +trace example.com

netstat -an

netstat -l

netstat -c

tcpdump -i eth0

tcpdump -i eth0 'tcp port 80'

tcpdump -i eth0 -w traffic.pcap

lsof -p 1234

lsof /path/to/file

lsof -i :1234 -c kill

 ps -ef

ps -aux | grep 1234

 ps -ef | grep 1234 | awk '{print $2}' | xargs kill

Curl – network performance stats

Curl is a tool commonly used with transferring data from or to a client/server. Its portability has allowed it to present in most OS installations by default, and thus making as a standard tool for troubleshooting and debugging network or server connectivity issues.

Here you will see some Curl features to gather network connectivity performance metrics, all exposed with -w flag.

-w, --write-out <format>
Make curl display information on stdout after a completed transfer.

time_namelookup
 The time, in seconds, it took from the start until the name resolving was completed.

time_connect
 The time, in seconds, it took from the start until the TCP connect to the remote host  (or  proxy)  was completed.

time_pretransfer
 The  time, in seconds, it took from the start until the file transfer was just about to begin.

time_starttransfer
  The  time,  in  seconds,  it took from the start until the first byte was just about to be transferred.

time_total
  The total time, in seconds, that the full operation lasted.

With the above 5 options, we can get a decent amount of information on the culprit for network issue. Is it DNS resolution delay? Or delay in TCP 3 way handshake? etc

Examples

On first run –

Second run –

On second run, the dns look up time is lower, as it is coming from cache. Let us flush dns cache –

As expected the look up time is higher posed dns cache clear.

Additional information

You can get additional information by reading the manual pages for curl or even use curl to get information about curl –

The net-tools set of packages had been deprecated years back, although the commands are still being in use. Tools such as netstat and ifconfig are part of the net-tools. The alternatives can be installed from iproute2 package.

Which Ubuntu package provides a file/command

Not all features of netstat can be replace with ss, but ss combined with ip can do the job.

There is lots of similarity between netstat and ss flags or options. Let us see how we can use ss to substitute for one of the most common uses of netstat – viewing TCP connections and their state, including the process name and ID associated with the socket.

Below list is for IPv4 only (-4 ) flag –

The equivalent ss comand is below –

ss has very helpful filtering features, for instance we can filter by source or destination IP address or port and tcp states. In below example, we are looking for TCP connections in TIMEWAIT state to a an http or https port and destined to specific IP CIDR block –

References –

https://www.redhat.com/sysadmin/ss-command

https://man7.org/linux/man-pages/man8/ss.8.html

https://linux.die.net/man/8/netstat

How to generate a sequence of numbers in Bash scripting

• Use Bash 4’s brace expansion

1
2
3
4
5
$ echo {1..10}
1 2 3 4 5 6 7 8 9 10
 
$ echo {1..10..2}
1 3 5 7 9

• Use “seq” command

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
$ seq 1 10
1
2
3
4
5
6
7
8
9
10
 
$ seq 1 2 10
1
3
5
7
9
 
$ echo $(seq 1 10)
1 2 3 4 5 6 7 8 9 10

Show the changelog of package with apt-get

In Ubuntu, the command “dpkg” is a tool to install, build, remove and manage Debian packages. And aptitude(“apt”) is commonly used a frontend for dpkg. For instance, to install a package most users would use “apt-get install package”.

The “changelog” sub-command for apt-get can be used to download and display the changelog for the given package.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
$ apt-get changelog dnsutils
 
bind9 (1:9.16.1-0ubuntu2.7) focal; urgency=medium
 
  * Fix a race between deactivating socket handle and processing
    async callbacks, which can lead to sockets not being closed
    properly, exhausting TCP connection limits. (LP: #1909950) 
    - d/p/lp-1909950-fix-race-between-deactivating-handle-async-callback.patch
 
 -- Matthew Ruffell <matthew.ruffell@canonical.com>  Thu, 18 Feb 2021 16:28:44 +1300
 
bind9 (1:9.16.1-0ubuntu2.6) focal-security; urgency=medium
 
  * SECURITY UPDATE: off-by-one bug in ISC SPNEGO implementation
    - debian/patches/CVE-2020-8625.patch: properly calculate length in
      lib/dns/spnego.c.
    - CVE-2020-8625
  * This update does _not_ contain the changes from 1:9.16.1-0ubuntu2.5 in
    focal-proposed.
 
 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Tue, 16 Feb 2021 15:08:33 -0500
 
....

Note: this will download the changelog for the package to the most recent version of the package, not just the installed version. You can view the installed version and candidate version with below command –

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
$ apt-cache policy dnsutils
dnsutils:
  Installed: 1:9.16.1-0ubuntu2.3
  Candidate: 1:9.16.1-0ubuntu2.7
  Version table:
     1:9.16.1-0ubuntu2.7 500
        500 http://archive.ubuntu.com/ubuntu focal-updates/universe amd64 Packages
        500 http://archive.ubuntu.com/ubuntu focal-updates/universe i386 Packages
     1:9.16.1-0ubuntu2.6 500
        500 http://security.ubuntu.com/ubuntu focal-security/universe amd64 Packages
        500 http://security.ubuntu.com/ubuntu focal-security/universe i386 Packages
 *** 1:9.16.1-0ubuntu2.3 100
        100 /var/lib/dpkg/status
     1:9.16.1-0ubuntu2 500
        500 http://archive.ubuntu.com/ubuntu focal/universe amd64 Packages
        500 http://archive.ubuntu.com/ubuntu focal/universe i386 Packages

References

1. https://linux.die.net/man/8/apt-get
3. https://linux.die.net/man/1/dpkg