Bash Index : S - The 'S' Bash commands : description, flags and examples

1. check subscription status (not subscribed so far) :
   subscription-manager status

   +-------------------------------------------+
       System Status Details
   +-------------------------------------------+
   Overall Status: Unknown

2. subscription-manager config --server.proxy_hostname=10.27.26.37 --server.proxy_port=3128
3. Depending on context :
   • subscription-manager register --username kevin --password 'P@ssw0rd' --auto-attach
   • subscription-manager register --username kevin --password 'P@ssw0rd' --org=1234567

   	Registering to: subscription.rhsm.redhat.com:443/subscription
   	The system has been registered with ID: aaaaaaa8-bbb4-ccc4-ddd4-eeeeeeeeee12
   	The registered system name is: myNewRedHatMachine

4. check :
   subscription-manager status

   +-------------------------------------------+
      System Status Details
   +-------------------------------------------+
   Overall Status: Current
   
   System Purpose Status: Not Specified		not relevant
   
   

   subscription-manager list

   +-------------------------------------------+
       Installed Product Status
   +-------------------------------------------+
   Product Name:   Red Hat Enterprise Linux for x86_64
   Product ID:     479
   Version:        9.1
   Arch:           x86_64
   Status:         Subscribed
   Status Details:
   Starts:         01/01/2023
   Ends:           01/01/2024

Successfully attached a subscription for: Red Hat Enterprise Linux for Virtual Datacenters, Standard

Detailed procedure :

● smbd.service - Samba SMB Daemon
	Loaded: loaded (/lib/systemd/system/smbd.service; enabled; vendor preset: enabled)
	Active: active (running) since Thu 2018-11-29 08:36:29 CET; 1 weeks 0 days ago
	

dev-mapper-hostname\x2d\x2dvg\x2dswap_1.swap: Unit is bound to inactive unit dev-mapper-hostname\x2d\x2dvg\x2dswap_1.device. Stopping, too.
var.mount: Unit is bound to inactive unit dev-mapper-hostname\x2d\x2dvg\x2dvar.device. Stopping, too.
tmp.mount: Unit is bound to inactive unit dev-mapper-hostname\x2d\x2dvg\x2dtmp.device. Stopping, too.

halt

display a stop screen like System halted. At that step, it is safe to press the physical Power off button.

power-off

send an ACPI command to signal the PSU to disconnect main power.

• L : the corresponding stream will be line buffered. This option is invalid with standard input.
• 0 : the corresponding stream will be unbuffered

tail -f access.log | stdbuf -oL cut -d ' ' -f1 | uniq

journalctl -u ssh | cut -d ' ' -f6- | uniq
journalctl -u ssh | stdbuf -oL cut -d ' ' -f6- | uniq

	==> both _seem_ to behave the same. Maybe "journalctl" is not a good candidate to experiment on this ;-)

1. script /path/to/typescript/file
2. the commands you type and their output is recorded into /path/to/typescript/file but not recorded in real time, unless -f is used
3. stop recording :
   • exit
   • CTRL-d
4. You can now view the typescript :
   • cat /path/to/typescript/file
   • less -R /path/to/typescript/file

While debugging, it may be useful to prefix systemctl invocation with date :

systemctl status mysql

	● mysql.service - MySQL Community Server
	   Loaded: loaded (/lib/systemd/system/mysql.service; enabled; vendor preset: enabled)
	   Active: active (running) since Fri 2019-11-29 15:10:38 UTC; 2 days ago
	  Process: 1111 ExecStartPost=/usr/share/mysql/mysql-systemd-start post (code=exited, status=0/SUCCESS)
	  Process: 1050 ExecStartPre=/usr/share/mysql/mysql-systemd-start pre (code=exited, status=0/SUCCESS)
	 Main PID: 1110 (mysqld)

ps -o etime= 1110
	 2-17:50:46

==========================================
systemctl show mysql --property=MainPID | cut -d '=' -f 2
ps -o etime= $(systemctl show mysql --property=MainPID | cut -d '=' -f 2)
	 2-18:44:12

==========================================
systemctl show mysql --property=ActiveEnterTimestamp
	ActiveEnterTimestamp=Fri 2019-11-29 15:10:38 UTC

==========================================
ps -o lstart= $(systemctl show mysql --property=MainPID | cut -d '=' -f 2)
	Fri Nov 29 15:10:36 2019

echo $(($(date -d"now" +%s) - $(date -d"Fri Nov 29 15:10:36 2019" +%s)))

echo $(($(date -d"now" +%s) - $(date -d"$(ps -o lstart= $(systemctl show mysql --property=MainPID | cut -d '=' -f 2))" +%s)))
	==> uptime in seconds

• Read more about this
• Workaround :
  sudo su -s /bin/bash

as a member of the root group + su + right password

logged as root, as expected

as a member of the root group + su + wrong password

su: Authentication failure

not as a member of the root group + su + any password (right or wrong makes no difference)

su: Permission denied

This behavior is caused by this uncommented line of /etc/pam.d/su which forces users to be a member of group root before they can use su :

auth	required	pam_wheel.so	group=root

su bob -c whoami
bob					as expected 

su bob -c whoami; echo $HOME
bob					as above
/root					the echo came once the su was over, then this is no surprise

su bob -c "whoami; echo $HOME"
bob					this is still part of the su -c , so no surprise
/root					thanks to the ", $HOME is substituted with its current value, then the whole string is passed to su -c  (details)

su bob -c 'whoami; echo $HOME'
bob					no change 
/home/bob				thanks to the ', the whole expression is sent as-is to su -c  (no substitution), then executed as bob

value=42; su bob -c "echo $HOME [$value]"; su bob -c 'echo $HOME [$value]'
/root [42]				this is just to emphasize 
/home/bob []				on the example above
			

• it's not an error when a test (any if condition) evaluates to false. Dealing with its true/false status is what if/then and the likes are for. Treating a false as an error and exiting is over-reacting; this doesn't bring much to the safety / reliability of scripts
• exceptions have been added to -e to workaround the false positives, but these exceptions
  • are not consistent across Bash versions
  • vary whether the process is/is not a subshell
  which actually adds complexity without still adding security

This doesn't work on :

• commands within if, until, while block
• compound commands (list using && or ||)
• commands with return value being inverted via !

set -e; echo -n 'hello'; true; echo ' world'

Outputs : hello world

echo "set -e; echo -n 'hello'; false; echo ' world'" | bash

Outputs : hello (the echo | bash hack is just to be able to see the result, since because of the false, an exit is executed, forcing to leave the current shell)

set -e; dir='/tmp'; if [ -d "$dir" ] ; then echo "$dir exists"; else echo "$dir does not exist"; fi

Outputs : /tmp exists

No non-success exit code met, -e keeps sleeping.

set -e; dir='/aDirThatDoesNotExist'; if [ -d "$dir" ] ; then echo "$dir exists"; else echo "$dir does not exist"; fi

Outputs : /aDirThatDoesNotExist does not exist

A non-success exit code is met, but -e is muzzled by if.

set -e; dir='/tmp'; [ -d "$dir" ] && echo "$dir exists" || echo "$dir does not exist"

Outputs : /tmp exists

No non-success exit code met, -e keeps sleeping.

set -e; dir='/aDirThatDoesNotExist'; [ -d "$dir" ] && echo "$dir exists" || echo "$dir does not exist"

Outputs : /aDirThatDoesNotExist does not exist

A non-success exit code is met, but -e is muzzled by ????.

#!/usr/bin/env bash
set -e
echo -n 'hello'
true
echo ' world'

Outputs : hello world

#!/usr/bin/env bash
set -e
echo -n 'hello'
false
echo ' world'

Outputs : hello, and returns the exit code 1

#!/usr/bin/env bash
set -e
echo -n 'hello'
if true; then
	echo -n ' wonderful'
fi
echo ' world'

Outputs : hello wonderful world

#!/usr/bin/env bash
set -e
echo -n 'hello'
if false; then
	echo -n ' wonderful'
fi
echo ' world'

Outputs : hello world, and returns the exit code 0.

A non-success exit code is met, but -e is muzzled by if.

If you run set -e in a terminal, this will affect the current shell and any further command your "victim" will type. At the 1^st non-success return code met (which is VERY easy : try TAB-completing like cd TAB), an exit will be fired, closing the terminal

If you _unintentionally_ run that joke on yourself (), you can disable the -e flag with : set +e

1. set -- whatever
   This construct actually turns whatever into positional parameters. whatever can be :
   • a list of files : file1 file2 file3
   • a shell expansion corresponding to a list of files : /path/to/*jpg
   • the result of a command : $(ls -1)
2. You can then "read" these as if they were previously sent as parameters :

   set -- $(ls -1); echo $1 $2 $3

   file1 file2 file3		3 files of the current directory

   set -- $(ls -1); echo $@

   ... ... ... ...		all of them

State filters :

Address filters :

strerror
%s: I/O error
error setting limit (%s)
Syntax error: %s

  File: myFile
  Size: 2923            Blocks: 6          IO Block: 1024   regular file
Device: fd03h/64771d    Inode: 25          Links: 1
Access: (0600/-rw-------)  Uid: ( 1000/   bob)   Gid: ( 1000/   admin)
Access: 2021-07-05 15:21:18.000000000 +0200
Modify: 2021-07-07 12:03:22.000000000 +0200
Change: 2021-07-07 12:03:22.000000000 +0200
 Birth: -

-rw------- 1 bob users 3413 Dec  9 12:05 chunk_00
-rw------- 1 bob users 3413 Dec  9 12:05 chunk_01
-rw------- 1 bob users 3414 Dec  9 12:05 chunk_02
9e5dfea5493c78eaee1e1e7158d063ad  ./tmp.4iNzQxgGae			checksums match 
9e5dfea5493c78eaee1e1e7158d063ad  ./tmp.4iNzQxgGae_REASSEMBLED	meaning we've successfully re-assembled the chunks into an exact copy of the original file

• someFile is executed even though its execution bit is not set
• someFile is executed within the current shell context, which allows :
  • loading variables into the current interactive shell session :
    1. source myConfigFile
    2. other commands using variables
  • using someFile as a configuration file for a script, without leaving variables in the shell environment once the script is over :
    sourcedFile=$(mktemp sourcedFile.XXXXXXXX); echo 'value=42' > "$sourcedFile"; chmod -x "$sourcedFile"; scriptFile=$(mktemp scriptFile.XXXXXXXX); echo "source $sourcedFile; echo 'sourced'; echo \"during the script : \\\$value='\$value'\"" > "$scriptFile"; chmod +x "$scriptFile"; ls -l "$sourcedFile" "$scriptFile"; cat "$sourcedFile" "$scriptFile"; ./"$scriptFile"; echo "after the script : \$value='$value'"; rm "$sourcedFile" "$scriptFile"

    value=42	cat "$sourcedFile"
    source sourcedFile.akr6paIl; echo 'sourced'; echo "during the script : \$value='$value'"	cat "$scriptFile"
    sourced		started running the script
    during the script : $value='42'	the variable exists in the script context
    after the script : $value=''	no value anymore

    Since a dedicated subshell (having its own context) is spawned when executing a script, if you want variables to survive for future scripts or commands after the script ends, you'll have to :

    • export variables within the script (details)
    • or source the script
• The return status is the exit status of the last command executed from someFile, or zero if no commands are executed.

Trying to source a file having DOS line endings led the shell to complain for syntax errors on EVERY line. Consider converting line endings into DOS format.

configFile='./script.conf'; scriptFile='./script.sh'; echo -e '#!/usr/bin/env bash\nvar1=value1\nexport var2=value2' > "$configFile"; echo -e '#!/usr/bin/env bash\necho "\tvar1 = $var1"\necho "\tvar2 = $var2"' > "$scriptFile"; echo -e "\n'source'd config file :"; cat "$configFile"; source "$configFile"; echo -e "\nCommand line (current shell context) :\n\tvar1 = $var1\n\tvar2 = $var2\n\nScript (subshell context) :"; bash "./$scriptFile"; rm "$configFile" "$scriptFile"

'source'd config file :
#!/usr/bin/env bash
var1=value1			not exported
export var2=value2

Command line (current shell context) :
	var1 = value1		exists 
	var2 = value2

Script (subshell context) :
	var1 =			unset 
	var2 = value2

• script.conf :

  variable='value'

• script.sh :

  #!/usr/bin/env bash
  
  source script.conf
  
  ... do something with "$variable" ...

Then no shebang is required in the configuration file script.conf. It may also be a safe practice to remove its execution permissions.

grep ' 500 ' 2012-07-03-apache-access.log | cut -d ' ' -f 11 | sort | uniq -c | sort -nr | less

All the magic is in the uniq -c prior to sorting.

• prefix :
  • u: to change user rights
  • g: to change group rights
  • o: to change other rights. No need to specify userOrGroup
  • d:u: to declare default user rights
  • d:g: to declare default group rights
  • d:o: to declare default other rights
• permissions : specified either numerically or with symbols (like in chmod) :
  • r : read permission
  • w : write permission
  • x : execute permission
  • X : execute permission, if the file is a directory or already has execute permission for some user (details)
  • - : ignored, rx is equivalent to r-x

setfacl: Option -m: Invalid argument near character 6

1. Which is the 6^th character ? It's the 6^th of the value passed to -m :

   user:httpd:rwx
   123456

   Something's wrong with the username
2. Does this username exist ?
   • grep -E '^httpd' /etc/passwd
   • or : getent passwd httpd
   None of the commands above return a result : there is no such httpd user.

• [ + ] : service is running
• [ - ] : service is stopped
• [ ? ] : unknown / doesn't reply to the "service status" command