Git is a distributed version control system. To install git, type apk add git command on Alpine Linux. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to install git command on Alpine Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/rwGQeim

Patreon users download the PDF version. All Linux and Unix servers are managed manually or by automation tools such as Ansible using ssh. For example, say you have a server at Linode or AWS. Then you copy your public ssh key to a remote cloud server. Once copied, you can now login to those servers without a password as long as ssh keys are matched. It is the best practice. Unfortunately, you are not protecting ssh keys stored on a local desktop or dev machine at $HOME/.ssh/ directory. If your keys are stolen, an attacker can get access to all of your cloud servers, including backup servers. To avoid this mess, we can protect our ssh keys stored on local dev/desktop machines using physical security keys such as YubiKey. In both cases, you need to insert your YubiKey (or any FIDO2 compatible hardware key) into a USB port and complete the authentication. In other words, ssh login will not work when malware or attacker has stolen your passphrase and ssh keys as they can not insert YubiKey and press the button on it to complete OTP for ssh keys. In the corporate environment, we have a bastion host that allows ssh access with Yubikey. It is a special-purpose server on a network specifically designed and configured to withstand attacks. The server generally hosts an sshd process, and all other services are removed. Once logged into bastion host, you can access all other cloud servers easily. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How To Set Up SSH Keys With YubiKey as two-factor authentication (U2F/FIDO2) appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/VNULOiY

{Updated} Keeping your system up-to-date is essential from a security POV, yet many devs or sysadmins forget about it. This page explains the purpose of unattended-upgrades used on a Debian Linux 11/10 to keep the computer current with the latest security updates.The post How to configure automated security updates on Debian automatically appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/1HUtIW7

In this quick tutorial, you will configure a user to use key-based authentication for SSH under a macOS desktop. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post macOS configuring SSH Key-based Authentication appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/dNlTmOp

{Updated} This quick guide explains how to hide or remove the Nginx version on Linux or Unix server without restarting the system.The post How to hide Nginx version on Linux and Unix appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/KPv7fg6

{Updated} The iotop is a Linux command. It is a top-like utility for disk input and output (I/O). Use this command to see I/O usage information output by the Linux kernel. It displays a table of current I/O usage by Linux processes or threads on the Linux system. This post explains how to install and use the iotop command to discover what is stressing (or program names) on your hard drives under Linux operating systems.The post Linux iotop Check What is Stressing and Increasing Load On Hard Disks appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/pIOXZUo

nixCraft Patreon supporters can download the PDF version here. ChatGPT (short for Chat Generative Pre-trained Transformer) is a chatbot by OpenAI. It provides answers to your queries using learning techniques based on AI/ML. Unfortunately, ChatGPT deny access when connected via VPN (Virtual Private Network) such as WireGuard or OpenVPN, and you will be blocked with the following message: Let us see how to skip the ChatGPT domain from WireGuard or OpenVPN access while you can access corporate resources behind VPN. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to skip ChatGPT from WireGuard or OpenVPN on Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/wd1fl5Y

{Updated} Are you getting the message: The following security updates require Ubuntu Pro with esm-apps enabled. Here is how to fix it to get updates on your Ubuntu Linux VM/Server or desktop.The post Fixing - The following security updates require Ubuntu Pro with esm-apps enable on Ubuntu Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/gkRxQFb

Let us see how to configure the Let's Encrypt email notification when a TLS/SSL cert is skipped, renewed, or an error is created by "acme.sh" client so developers or sysadmin can investigate the matter further. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to configure the Let’s Encrypt email notification when a cert is skipped, renewed, or error appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/KpXjHec

IP aliasing is nothing but associating more than one IP address to a network interface such as eth0. For example, using the following methods, you can add an IP alias on Amazon Linux 2. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to add an IP alias on Amazon Linux 2 appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/H2UqbI8

{Updated} How do I can set IFS (internal field separator) while using read command in bash loops?The post Bash/KSH: Define Delimiter (IFS) While Using read Command appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/YgMrRbk

Ubuntu 22.04 LTS comes with LXD pure-container hypervisor to run an unmodified version of Debian, Ubuntu, CentOS, Fedora, Alpine, Arch and many other Linux distro. You can mimic AWS or different cloud instance types with LXD for testing and deployment purposes on your development machine. You can also run a GUI app such as Firefox completely isolated using LXD for security or privacy reasons. Let us see how to set up and use LXD on the Ubuntu Linux 22.04 LTS using APT or snap command. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How To Install LXD on Ubuntu 22.04 LTS using apt/snap appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/MRnK3JB

{Updated} Sometimes you need to verify that certain features are supported on your OpenSSH server and client. For example, not all versions of OpenSSH (SSHD server) and ssh client will support 2FA YubiKey or SFTP chroot jail support. To check the OpenSSH SSHD server and ssh client version, pass the -V option and it will display the version number and exit to the CLI. Unfortunately, I ran into unknown option -- V option. Let us see how to resolve this quickly, especially on an older version of BSD and Linux/Unix systems.The post How to find SSH server and client version on Linux and Unix appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/4wV0WYx

Do you want to refresh and reload the group membership on Linux without rebooting the Linux machine or logging in again? Try the newgrp command to log in to a new group without logging in again or reboot the system. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to refresh and reload group membership on Linux without a reboot or logging in again appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/OkpNdBf

{Updated} For security reasons, it would be best to verify which TCP or UDP ports are listening on the Linux, FreeBSD or Unix server's network interfaces. This quick guide explains how to use the CLI utilities and code written in Bash, Perl, and Python to check for ports in USE or OPEN state.The post How to check if port is in use on Linux or Unix appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/YNMEDbq

Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post nvtop – Awesome Linux task monitor for NVIDIA, AMD & Intel GPUs appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/iru6YFJ

{Updated} Linux is a free and open source operating system. There are many variants of Linux out there. They are typically called Linux distribution. Suse, OpenSUSE, Debian, Ubuntu, CentOS, Arch, Fedora, RHEL all are common Linux distribution names. Knowing your os version and name can be very useful for applying security patches on timeThe post How to find OS version of your Linux device/machine appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/P75LykO

Arch Linux uses pacman command to add or remove packages. It is a package management utility that tracks installed packages on Arch. So when you uninstall or remove packages, some dependencies are left behind, taking up disk space. In this quick tutorial, I will explain how to remove ALL orphaned packages installed as a dependency and no longer required by any package on Arch Linux. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to remove orphaned unused packages in Arch Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/pZW3KMD

nixCraft Patreon supporters can download the PDF version here and support independent content creators. You can install LXD pure-container hypervisor on Debian 11 Linux to run an unmodified version of Debian, Ubuntu, CentOS, Fedora, Alpine, Arch and many other Linux distro. You can mimic AWS or different cloud instance types with LXD for testing and deployment purposes on your development machine. You can also run a GUI app such as Firefox completely isolated using LXD for security or privacy reasons. Let us see how to set up and use LXD on the Debian Linux 11 server or desktop. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How To Install LXD on Debian 11 Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/D9RLpeK

{Updated} In the old days, all Unix and Linux user-encrypted passwords were stored in the world-readable /etc/passwd file. It was reasonably secure then until dictionary attacks on encrypted passwords became typical with modern fast hardware. Hence, the encrypted passwords were moved to a separate /etc/shadow file under Linux which is readable only by the root (admin) user. This new file also allowed password aging and expiration features.The post Understanding /etc/shadow file format on Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/ZOtNTBV

nixCraft Patreon supporters can download the PDF version here and support independent content creators. Debian 11 is an excellent server OS to run the LAMP stack. PHP (Hypertext Preprocessor) is a widely-used open source general-purpose noscripting language especially suited for web development. However, Debian 11 comes with PHP version 7.4. Here is how to install PHP 8.2 with Apache server on Debian 11 using the CLI or over ssh based session. Love this? sudo share_on: Twitter - Facebook - LinkedIn - Whatsapp - Reddit The post How to install PHP 8.2 with Apache on Debian 11 Linux appeared first on nixCraft.

via nixCraft: Linux Tips, Hacks, Tutorials, And Ideas In Blog Format (RSS/FEED) https://ift.tt/p1Be3Tx