FreeBSD default comes with a drill command to see information about DNS. The userspace tools for FreeBSD come from the latest version of the BIND-TOOLs package. It includes delv, dig, host, nslookup, and nsupdate. Let us see how to search and install dig, delv, and host commands on FreeBSD using the pkg command. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to install dig, delv, host commands on FreeBSD appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/qmoyUgC

I have a tutorial that explains the basics of the SSH client configuration file and some of the most common configuration options for Linux and Unix developers or sysadmin. In this quick tip, I will explain how and why you sometimes need to ignore or exclude the ssh client config file under Linux, Unix, *BSD and macOS. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to tell ssh client to ignore ssh config file appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/it8gIyO

Are you running out of disk space on your Debian or Ubuntu Linux? Do you want to know which installed Debian or Ubuntu packages occupy the most disk space? There are many ways to find out this info. In this quick tip, you will learn about listing apt or apt-get installed packages that occupy the most space using the command-line options. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post Find APT packages occupy the most space on Debian/Ubuntu appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/LVszT1Y

In this quick Linux tip, I will explain how to convert a VIDEO file such as .mp4 into a gif file using the ffmpeg -i input.mp4 output.gif command syntax under Linux and Unix-like operating systems such as macOS. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to convert video to GIF in Linux using ffmpeg CLI appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/t8ZLhFI

Here is a quick tip that explains how to add a Mastodon verification link for the Discourse forum. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to add Mastodon verification for the Discourse forum appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/3quF5en

Git is a distributed version control system. To install git, type apk add git command on Alpine Linux. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to install git command on Alpine Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/rwGQeim

Patreon users download the PDF version. All Linux and Unix servers are managed manually or by automation tools such as Ansible using ssh. For example, say you have a server at Linode or AWS. Then you copy your public ssh key to a remote cloud server. Once copied, you can now login to those servers without a password as long as ssh keys are matched. It is the best practice. Unfortunately, you are not protecting ssh keys stored on a local desktop or dev machine at $HOME/.ssh/ directory. If your keys are stolen, an attacker can get access to all of your cloud servers, including backup servers. To avoid this mess, we can protect our ssh keys stored on local dev/desktop machines using physical security keys such as YubiKey. In both cases, you need to insert your YubiKey (or any FIDO2 compatible hardware key) into a USB port and complete the authentication. In other words, ssh login will not work when malware or attacker has stolen your passphrase and ssh keys as they can not insert YubiKey and press the button on it to complete OTP for ssh keys. In the corporate environment, we have a bastion host that allows ssh access with Yubikey. It is a special-purpose server on a network specifically designed and configured to withstand attacks. The server generally hosts an sshd process, and all other services are removed. Once logged into bastion host, you can access all other cloud servers easily. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How To Set Up SSH Keys With YubiKey as two-factor authentication (U2F/FIDO2) appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/VNULOiY

{Updated} Keeping your system up-to-date is essential from a security POV, yet many devs or sysadmins forget about it. This page explains the purpose of unattended-upgrades used on a Debian Linux 11/10 to keep the computer current with the latest security updates.The post How to configure automated security updates on Debian automatically appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/1HUtIW7

In this quick tutorial, you will configure a user to use key-based authentication for SSH under a macOS desktop. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post macOS configuring SSH Key-based Authentication appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/dNlTmOp

{Updated} This quick guide explains how to hide or remove the Nginx version on Linux or Unix server without restarting the system.The post How to hide Nginx version on Linux and Unix appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/KPv7fg6

{Updated} The iotop is a Linux command. It is a top-like utility for disk input and output (I/O). Use this command to see I/O usage information output by the Linux kernel. It displays a table of current I/O usage by Linux processes or threads on the Linux system. This post explains how to install and use the iotop command to discover what is stressing (or program names) on your hard drives under Linux operating systems.The post Linux iotop Check What is Stressing and Increasing Load On Hard Disks appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/pIOXZUo

nixCraft Patreon supporters can download the PDF version here. ChatGPT (short for Chat Generative Pre-trained Transformer) is a chatbot by OpenAI. It provides answers to your queries using learning techniques based on AI/ML. Unfortunately, ChatGPT deny access when connected via VPN (Virtual Private Network) such as WireGuard or OpenVPN, and you will be blocked with the following message: Let us see how to skip the ChatGPT domain from WireGuard or OpenVPN access while you can access corporate resources behind VPN. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to skip ChatGPT from WireGuard or OpenVPN on Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/wd1fl5Y

{Updated} Are you getting the message: The following security updates require Ubuntu Pro with esm-apps enabled. Here is how to fix it to get updates on your Ubuntu Linux VM/Server or desktop.The post Fixing - The following security updates require Ubuntu Pro with esm-apps enable on Ubuntu Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/gkRxQFb

Let us see how to configure the Let's Encrypt email notification when a TLS/SSL cert is skipped, renewed, or an error is created by "acme.sh" client so developers or sysadmin can investigate the matter further. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to configure the Let’s Encrypt email notification when a cert is skipped, renewed, or error appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/KpXjHec

IP aliasing is nothing but associating more than one IP address to a network interface such as eth0. For example, using the following methods, you can add an IP alias on Amazon Linux 2. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to add an IP alias on Amazon Linux 2 appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/H2UqbI8

{Updated} How do I can set IFS (internal field separator) while using read command in bash loops?The post Bash/KSH: Define Delimiter (IFS) While Using read Command appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/YgMrRbk

Ubuntu 22.04 LTS comes with LXD pure-container hypervisor to run an unmodified version of Debian, Ubuntu, CentOS, Fedora, Alpine, Arch and many other Linux distro. You can mimic AWS or different cloud instance types with LXD for testing and deployment purposes on your development machine. You can also run a GUI app such as Firefox completely isolated using LXD for security or privacy reasons. Let us see how to set up and use LXD on the Ubuntu Linux 22.04 LTS using APT or snap command. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How To Install LXD on Ubuntu 22.04 LTS using apt/snap appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/MRnK3JB

{Updated} Sometimes you need to verify that certain features are supported on your OpenSSH server and client. For example, not all versions of OpenSSH (SSHD server) and ssh client will support 2FA YubiKey or SFTP chroot jail support. To check the OpenSSH SSHD server and ssh client version, pass the -V option and it will display the version number and exit to the CLI. Unfortunately, I ran into unknown option -- V option. Let us see how to resolve this quickly, especially on an older version of BSD and Linux/Unix systems.The post How to find SSH server and client version on Linux and Unix appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/4wV0WYx

Do you want to refresh and reload the group membership on Linux without rebooting the Linux machine or logging in again? Try the newgrp command to log in to a new group without logging in again or reboot the system. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to refresh and reload group membership on Linux without a reboot or logging in again appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/OkpNdBf

{Updated} For security reasons, it would be best to verify which TCP or UDP ports are listening on the Linux, FreeBSD or Unix server's network interfaces. This quick guide explains how to use the CLI utilities and code written in Bash, Perl, and Python to check for ports in USE or OPEN state.The post How to check if port is in use on Linux or Unix appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/YNMEDbq

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post nvtop – Awesome Linux task monitor for NVIDIA, AMD & Intel GPUs appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/iru6YFJ