Linux 命令速查表 — 按任务分类的 200 多条命令

pwd

pwd -P

cd /var/log

cd ..

cd

cd -

ls -lah

ls -ltr

ls -lS | head

ls -ld */

tree -L 2 -I 'node_modules|.git'

mkdir -p project/src/components

mkdir -p app/{src,tests,docs}

rmdir old-folder

touch notes.txt

touch -t 202601011200 file

cp report.pdf ~/backup/

cp -a site/ /srv/site-backup

cp -i *.conf /etc/myapp/

mv draft.txt final.txt

mv *.jpg photos/

mv -n new.conf /etc/app/app.conf

rm old.log

rm -i *.bak

rm -- -weird-name.txt

rm -rf build/

rm -rf -- "${BUILD_DIR:?}/"

ln -s /opt/app/bin/app /usr/local/bin/app

ln -sfn releases/v2 current

realpath ../config.yml

readlink -f /usr/bin/python3

file download.bin

file -i notes.txt

stat file.txt

stat -c '%a %U %s %n' *

basename /srv/app/report.csv .csv

dirname /srv/app/report.csv

tmp=$(mktemp -d) && trap 'rm -rf "$tmp"' EXIT

cat /etc/os-release

cat part1.txt part2.txt > whole.txt

cat -A script.sh | head

tac access.log | head

less /var/log/syslog

journalctl -u nginx | less -S

head -n 20 data.csv

head -c 512 file.bin | xxd

tail -n 50 app.log

tail -F /var/log/nginx/access.log

tail -n +2 data.csv

sudo nano /etc/hosts

vim +42 app.py

diff -u old.conf new.conf

diff -rq dir1/ dir2/

diff <(sort a.txt) <(sort b.txt)

make 2>&1 | tee build.log

echo 'vm.swappiness=10' | sudo tee -a /etc/sysctl.conf

printf '%s\n' "$var"

printf '%-12s %6.2f\n' disk 93.5

column -t -s, data.csv | less -S

mount | column -t

xxd image.png | head

hexdump -C file.bin | head

strings -n 8 firmware.bin | less

ls -l deploy.sh

chmod 644 index.html

chmod 755 deploy.sh

chmod 600 ~/.ssh/id_ed25519

chmod +x script.sh

chmod go-w file

chmod -R u=rwX,go=rX site/

find site/ -type d -exec chmod 755 {} +

find site/ -type f -exec chmod 644 {} +

sudo chown -R www-data:www-data /var/www/site

sudo chown "$USER": file.txt

chgrp -R developers /srv/shared

umask

umask 077

sudo systemctl restart nginx

sudo !!

sudo -u postgres psql

su - deploy

sudo su -

setfacl -m u:alice:rw report.xlsx

getfacl report.xlsx

setfacl -R -m g:devs:rwX /srv/app

sudo chattr +i /etc/resolv.conf

lsattr /etc/resolv.conf

ps aux | grep [n]ginx

ps aux --sort=-%mem | head

ps -o pid,ppid,etime,cmd -p 1234

pstree -p

pstree -p 1234

top -b -n 1 | head -20

htop -u www-data

pgrep -a nginx

pgrep -f 'python manage.py runserver'

pkill -f "node server.js"

pkill -HUP nginx

pgrep -af node

kill 1234

kill -9 1234

kill %1

killall firefox

jobs

bg %1

fg %1

./long-export.sh > export.log 2>&1 &

wait

nohup ./server > server.log 2>&1 &

disown -h %1

tmux new -s deploy

tmux attach -t deploy

nice -n 19 tar -czf backup.tgz /data

sudo renice -n -5 -p 1234

timeout 30s curl -s https://example.com/health

timeout -s KILL 5m ./job.sh

watch -n 2 df -h

watch -d 'ss -s'

sudo lsof -i :8080

sudo lsof +L1

lsof -p 1234

sudo fuser -vm /mnt/usb

sudo fuser -v 8080/tcp

time ./build.sh

strace -f -e trace=openat ./app 2>&1 | grep -v ENOENT

sudo strace -p 1234

uname -r

uname -m

cat /etc/os-release

lsb_release -a

hostnamectl

sudo hostnamectl set-hostname web01

uptime

free -h

lscpu

make -j"$(nproc)"

lspci -k | grep -A3 -i vga

lsusb

sudo dmidecode -t memory | grep -i size

sudo lshw -short

sudo dmesg -T | tail -30

sudo dmesg -T | grep -i 'out of memory'

grep MemAvailable /proc/meminfo

grep -c ^processor /proc/cpuinfo

cat /proc/1234/status

vmstat 1 5

iostat -xz 1

date '+%Y-%m-%d %H:%M:%S'

date +%s

date -d @1700000000

date -d '2 days ago' +%F

timedatectl

timedatectl list-timezones | grep America

sudo timedatectl set-timezone America/Toronto

df -h

df -h .

df -i

du -sh /var/log

du -h -d 1 | sort -h

sudo du -xh -d 1 / | sort -h | tail

sudo ncdu -x /

lsblk

lsblk -f

sudo blkid /dev/sdb1

findmnt

findmnt -T /var/lib/docker

sudo findmnt --verify

sudo mount /dev/sdb1 /mnt/usb

sudo mount -o remount,rw /

sudo mount -t nfs nas:/export /mnt/nas

sudo umount /mnt/usb

sudo umount -l /mnt/nas

UUID=3f6c...  /data  ext4  defaults,nofail  0  2

sudo mount -a

sudo fdisk -l

sudo parted /dev/sdb print

sudo mkfs.ext4 -L data /dev/sdb1

sudo mkfs.vfat -F 32 /dev/sdc1

sudo fsck -f /dev/sdb1

sudo dd if=ubuntu.iso of=/dev/sdX bs=4M status=progress conv=fsync

dd if=/dev/zero of=test.img bs=1M count=100

sync && sudo umount /mnt/usb

swapon --show

sudo fallocate -l 2G /swapfile && sudo chmod 600 /swapfile && sudo mkswap /swapfile && sudo swapon /swapfile

shred -u -n 3 secrets.txt

ip -br a

ip a show eth0

hostname -I

ip r

ip route get 1.1.1.1

sudo ip route add 10.20.0.0/16 via 192.168.1.1

ip link

sudo ip link set eth0 down && sudo ip link set eth0 up

sudo ss -tulpn

ss -tn state established '( dport = :443 )'

ss -s

curl -I https://example.com

curl -LO https://example.com/file.tar.gz

curl -s -o /dev/null -w '%{http_code}\n' https://example.com

curl -fsSL https://example.com/install.sh -o install.sh

curl -H 'Content-Type: application/json' -d '{"name":"Ada"}' https://api.example.com/users

curl -H "Authorization: Bearer $TOKEN" https://api.example.com/me

curl -X DELETE https://api.example.com/users/42

wget -c https://example.com/big.iso

wget -qO- https://example.com/data.json | jq .

dig +short example.com

dig MX example.com

dig @1.1.1.1 example.com

dig -x 8.8.8.8

dig +trace example.com

host example.com

nslookup example.com 8.8.8.8

resolvectl status

sudo resolvectl flush-caches

ping -c 4 example.com

traceroute -n example.com

tracepath example.com

mtr -rw -c 100 example.com

ssh alice@203.0.113.10

ssh -p 2222 alice@host

ssh alice@host 'df -h'

ssh -J bastion.example.com alice@10.0.0.5

ssh -N -L 5432:localhost:5432 alice@db-host

ssh -N -D 1080 alice@host

ssh-keygen -t ed25519 -C "you@example.com"

ssh-copy-id alice@host

ssh-keygen -R host

Host web
  HostName 203.0.113.10
  User deploy
  Port 2222
  IdentityFile ~/.ssh/id_ed25519

scp report.pdf alice@host:/tmp/

scp alice@host:/var/log/app.log .

scp -r -P 2222 site/ alice@host:~/

rsync -avzP site/ deploy@host:/srv/site/

rsync -av --exclude 'node_modules' ./ /backup/app/

rsync -avn --delete site/ /srv/site/

rsync -av --delete site/ /srv/site/

nc -zv db.internal 5432

nc -l 9000

sudo ufw status verbose

sudo ufw allow 22/tcp

sudo ufw allow from 10.0.0.0/8 to any port 5432

sudo firewall-cmd --list-all

sudo firewall-cmd --permanent --add-service=https && sudo firewall-cmd --reload

sudo firewall-cmd --permanent --add-port=8080/tcp

nmcli device status

nmcli device wifi list

nmcli device wifi connect 'MyWiFi' password 'secret'

id

id alice

w

last -n 10

sudo lastb -n 10

sudo useradd -m -s /bin/bash alice && sudo passwd alice

sudo usermod -aG docker alice

sudo usermod -aG sudo alice

sudo userdel -r olduser

passwd

sudo passwd alice

sudo passwd -l alice

sudo groupadd developers

sudo gpasswd -d alice developers

groups alice

getent group sudo

getent passwd alice

sudo visudo -f /etc/sudoers.d/deploy

deploy ALL=(ALL) NOPASSWD: /usr/bin/systemctl restart myapp

sudo chage -l alice

sudo chage -M 90 alice

tar -czf site-2026-10-18.tar.gz site/

tar -cJf logs.tar.xz --exclude='*.tmp' logs/

tar -xf archive.tar.gz

tar -xzf app.tar.gz -C /opt/app --strip-components=1

tar -tf backup.tar.gz | less

tar -xf backup.tar.gz etc/nginx/nginx.conf

tar --zstd -cf data.tar.zst data/

zstd -d file.zst

gzip -k access.log

zcat access.log.gz | grep 404

zgrep 500 access.log.*.gz

xz -T0 -k big.sql

unxz big.sql.xz

zip -r site.zip site/

zip -r site.zip site/ -x '*.git*' '*/node_modules/*'

unzip files.zip -d files/

unzip -l files.zip

unzip -o files.zip

7z x archive.7z

7z a -p backup.7z docs/

7z l archive.rar

sha256sum ubuntu.iso

sha256sum -c SHA256SUMS --ignore-missing

split -b 100M backup.tar.gz backup.part.

cat backup.part.* > backup.tar.gz

find . -name '*.log'

find / -iname 'nginx.conf' 2>/dev/null

find . -maxdepth 1 -type d

find . -type l -xtype l

find . -type f -empty

find /var/log -type f -mtime +30

find . -type f -mmin -15

sudo find / -xdev -type f -size +500M -exec ls -lh {} + 2>/dev/null

find . -name '*.sh' -exec chmod +x {} +

find . -name '*.py' -exec grep -l 'TODO' {} +

find . -name '*.jpg' -print0 | xargs -0 -P4 -n 20 jpegoptim

find /tmp/app -name '*.tmp' -mtime +7 -print

find /tmp/app -name '*.tmp' -mtime +7 -delete

find /srv -type f -perm -o+w

sudo find / -xdev -perm -4000 -type f 2>/dev/null

locate -i nginx.conf

sudo updatedb

grep -n 'ERROR' app.log

grep -v '^#' nginx.conf | grep -v '^$'

grep -c 'Failed password' /var/log/auth.log

grep -rn 'TODO' src/

grep -rl --include='*.php' 'mysql_connect' .

grep -rn --exclude-dir={.git,node_modules} 'apiKey' .

grep -C 3 'Traceback' app.log

grep -A 20 'Exception' app.log

grep -E 'error|warn' app.log

grep -Eo '[0-9]{1,3}(\.[0-9]{1,3}){3}' access.log | sort | uniq -c | sort -rn | head

grep -P '\d{4}-\d{2}-\d{2}' file

type ll

command -v docker >/dev/null || echo "docker missing"

which -a python3

sed 's/http:/https:/g' links.txt

sed 's|/usr/local|/opt|g' paths.txt

sed -E 's/([0-9]+)px/\1rem/g' style.css

sed -i 's/^#Port 22/Port 2222/' /etc/ssh/sshd_config

sed -i.bak 's/foo/bar/g' config.ini

sed -n '100,120p' big.log

sed '/^\s*#/d; /^$/d' app.conf

sed -n '/BEGIN CERT/,/END CERT/p' bundle.pem

awk '{print $1}' access.log

awk -F: '{print $1, $7}' /etc/passwd

awk -F, 'NR>1 {print $2}' data.csv

awk '$9 >= 500' access.log

awk '{s += $2} END {print s}' sales.txt

awk '{c[$1]++} END {for (k in c) print c[k], k}' access.log | sort -rn | head

cut -d, -f1,3 data.csv

cut -d: -f1 /etc/passwd

cut -c1-10 file

du -sh * | sort -h

sort -t, -k3,3nr data.csv

sort -u emails.txt > unique.txt

sort ips.txt | uniq -c | sort -rn | head

wc -l access.log

ls | wc -l

grep -c '' file

tr 'a-z' 'A-Z' < in.txt

tr -d '\r' < windows.txt > unix.txt

tr -s ' ' < file

tr '\n' ',' < list.txt

find . -name '*.log' -print0 | xargs -0 rm -f

cat urls.txt | xargs -n 1 -P 4 curl -sO

ls *.png | xargs -I {} cp {} /backup/{}

jq . response.json

jq -r '.items[].name' data.json

jq -r '.[] | select(.active) | .email' users.json

curl -s https://api.github.com/repos/jqlang/jq | jq '.stargazers_count'

paste -sd, ids.txt

paste names.txt emails.txt

comm -12 <(sort a.txt) <(sort b.txt)

comm -23 <(sort a.txt) <(sort b.txt)

seq 1 5

seq -w 1 10

for i in $(seq 1 3); do echo "run $i"; done

printf '%s' 'user:pass' | base64

echo dXNlcjpwYXNz | base64 -d

base64 -w 0 image.png > image.b64

iconv -f WINDOWS-1252 -t UTF-8 old.csv > new.csv

iconv -l

shuf -n 1 names.txt

shuf -i 1-100 -n 5

systemctl status nginx

systemctl is-active --quiet nginx && echo up

sudo systemctl restart nginx

sudo systemctl reload nginx

sudo systemctl enable --now docker

sudo systemctl disable --now cups

sudo systemctl mask bluetooth

systemctl --failed

systemctl list-units --type=service --state=running

systemctl list-unit-files --state=enabled

sudo systemctl edit nginx

systemctl cat nginx

sudo systemctl daemon-reload

[Unit]
Description=My app
After=network.target

[Service]
User=app
WorkingDirectory=/srv/app
ExecStart=/srv/app/bin/server
Restart=on-failure

[Install]
WantedBy=multi-user.target

journalctl -u nginx -f

journalctl -u myapp --since '10 min ago'

journalctl -b -1 -p err

journalctl --disk-usage

sudo journalctl --vacuum-size=500M

sudo journalctl --vacuum-time=14d

sudo tail -f /var/log/syslog

sudo tail -f /var/log/auth.log

sudo reboot

sudo shutdown -r +10 'Kernel update'

sudo shutdown -c

sudo shutdown -h now

crontab -e

crontab -l

crontab -l > crontab.bak

30 2 * * * /usr/local/bin/backup.sh >> /var/log/backup.log 2>&1

*/15 * * * * /usr/local/bin/check.sh

0 9 * * 1-5 /usr/local/bin/report.sh

@reboot /usr/local/bin/startup.sh

crontab -l > ~/crontab.bak && crontab -r

crontab ~/crontab.bak

0 3 * * * root /usr/local/bin/cleanup.sh

ls /etc/cron.daily/

echo 'systemctl restart myapp' | sudo at 02:00

echo './report.sh' | at now + 30 minutes

atq

atrm 3

systemctl list-timers

[Timer]
OnCalendar=*-*-* 02:30:00
Persistent=true

[Install]
WantedBy=timers.target

systemd-analyze calendar 'Mon..Fri 09:00'

sleep 5 && curl -s localhost:8080/health

sleep 2m

ps aux | grep nginx

history | grep 'docker run'

set -o pipefail

ls -l > listing.txt

echo 'done' >> progress.log

set -o noclobber

find / -name x 2>/dev/null

./build.sh > build.log 2>&1

./build.sh &> build.log

mysql mydb < dump.sql

cat > config.yml <<'EOF'
port: 8080
host: $HOST stays literal
EOF

grep -c a <<< "banana"

make && sudo make install

cd /srv/app || exit 1

(cd frontend && npm run build)

echo "Today is $(date +%A)"

echo $(( 1024 * 4 ))

diff <(ls dir1) <(ls dir2)

ls *.jpg

rm photo-??.png

cp config.{yml,yml.bak}

shopt -s globstar; ls **/*.md

echo 'Cost: $5'

echo "Home is $HOME"

cp "$file" "$dest/"

name="Ada"; echo "Hi $name"

echo "${PORT:-8080}"

file=report.tar.gz; echo "${file%%.*}" "${file##*/}"

echo "${#name}"

export NODE_ENV=production

DEBUG=1 ./app

printenv | sort

unset DEBUG

echo "$PATH" | tr : '\n'

export PATH="$HOME/.local/bin:$PATH"

hash -r

alias ll='ls -alF'

source ~/.bashrc

\ls

grep -q root /etc/passwd; echo $?

set -euo pipefail

sudo !!

cd !$

!42

^foo^bar

bind -P | less

man rsync

man 5 crontab

help cd

apropos partition

#!/usr/bin/env bash
set -euo pipefail
name="${1:-world}"
if [[ -f "$name.txt" ]]; then
  echo "found $name.txt"
fi
for f in *.log; do
  echo "$f"
done

chmod +x script.sh && ./script.sh Ada

bash -x script.sh

reset