Section 8: administration and privileged commands
fatlabel – set or get MS-DOS filesystem label or volume ID Synopsis fatlabel [OPTIONS] DEVICE [NEW] Description fatlabel will display or change the volume label or volume ID on the MS-DOS filesystem located on DEVICE. By default it works in label mode. It can be switched to volume ID mode with the option -i or…
fsck.fat – check and repair MS-DOS FAT filesystems Synopsis fsck.fat [OPTIONS] DEVICE Description fsck.fat verifies the consistency of MS-DOS filesystems and optionally tries to repair them. The following filesystem problems can be corrected (in this order): • FAT contains invalid cluster numbers. Cluster is changed to EOF. • File’s cluster chain contains a loop. The…
domain – nnrpd domain resolver Synopsis domain domainname Description This program can be used in readers.conf to grant access based on the subdomain part of the remote hostname. In particular, it only returns success if the remote hostname ends in domainname. (A leading dot on domainname is optional; even without it, the argument must match…
dockerd – Enable daemon mode Synopsis dockerd [–add-runtime[=[]]] [–allow-nondistributable-artifacts[=[]]] [–api-cors-header=[=API-CORS-HEADER]] [–authorization-plugin[=[]]] [-b|–bridge[=BRIDGE]] [–bip[=BIP]] [–cgroup-parent[=[]]] [–cluster-store[=[]]] [–cluster-advertise[=[]]] [–cluster-store-opt[=map[]]] [–config-file[=/etc/docker/daemon.json]] [–containerd[=SOCKET-PATH]] [–data-root[=/var/lib/docker]] [-D|–debug] [–default-cgroupns-mode[=host]] [–default-gateway[=DEFAULT-GATEWAY]] [–default-gateway-v6[=DEFAULT-GATEWAY-V6]] [–default-address-pool[=DEFAULT-ADDRESS-POOL]] [–default-runtime[=runc]] [–default-ipc-mode=MODE] [–default-shm-size[=64MiB]] [–default-ulimit[=[]]] [–dns[=[]]] [–dns-opt[=[]]] [–dns-search[=[]]] [–exec-opt[=[]]] [–exec-root[=/var/run/docker]] [–experimental[=false]] [–fixed-cidr[=FIXED-CIDR]] [–fixed-cidr-v6[=FIXED-CIDR-V6]] [-G|–group[=docker]] [-H|–host[=[]]] [–help] [–icc[=true]] [–init[=false]] [–init-path[=""]] [–insecure-registry[=[]]] [–ip[=0.0.0.0]] [–ip-forward[=true]] [–ip-masq[=true]] [–iptables[=true]] [–ipv6] [–isolation[=default]] [-l|–log-level[=info]] [–label[=[]]] [–live-restore[=false]] [–log-driver[=json-file]] [–log-opt[=map[]]]…
dockerd – Enable daemon mode Synopsis dockerd [–add-runtime[=[]]] [–add-registry[=[]]] [–api-cors-header=[=API-CORS-HEADER]] [–authorization-plugin[=[]]] [-b|–bridge[=BRIDGE]] [–bip[=BIP]] [–block-registry[=[]]] [–cgroup-parent[=[]]] [–cluster-store[=[]]] [–cluster-advertise[=[]]] [–cluster-store-opt[=map[]]] [–config-file[=/etc/docker/daemon.json]] [–containerd[=SOCKET-PATH]] [-D|–debug] [–default-gateway[=DEFAULT-GATEWAY]] [–default-gateway-v6[=DEFAULT-GATEWAY-V6]] [–default-ulimit[=[]]] [–disable-legacy-registry] [–dns[=[]]] [–dns-opt[=[]]] [–dns-search[=[]]] [–enable-secrets[=true]] [–exec-opt[=[]]] [–exec-root[=/var/run/docker]] [–fixed-cidr[=FIXED-CIDR]] [–fixed-cidr-v6[=FIXED-CIDR-V6]] [-G|–group[=docker]] [-g|–graph[=/var/lib/docker]] [-H|–host[=[]]] [–help] [–icc[=true]] [–insecure-registry[=[]]] [–ip[=0.0.0.0]] [–ip-forward[=true]] [–ip-masq[=true]] [–iptables[=true]] [–ipv6] [–isolation[=default]] [-l|–log-level[=info]] [–label[=[]]] [–live-restore[=false]] [–log-driver[=json-file]] [–log-opt[=map[]]] [–mtu[=0]] [–max-concurrent-downloads[=3]] [–max-concurrent-uploads[=5]] [-p|–pidfile[=/var/run/docker.pid]] [–raw-logs]…
docker_selinux – Security Enhanced Linux Policy for the docker processes Description Security-Enhanced Linux secures the docker processes via flexible mandatory access control. The docker processes execute with the docker_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
docker_auth_selinux – Security Enhanced Linux Policy for the docker_auth processes Description Security-Enhanced Linux secures the docker_auth processes via flexible mandatory access control. The docker_auth processes execute with the docker_auth_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
docker-novolume-plugin – Blocks self provisioned volumes Synopsis docker-novolume-plugin [–cert-path=[=""]] [–host=[=unix:///var/run/docker.sock]] [–tls-verify=[=false]] Description When a volume in provisioned via the VOLUME instruction in a Dockerfile or via docker run -v volumename, host’s storage space is used. This could lead to an unexpected out of space issue which could bring down everything. There are situations where this…
docker-lvm-plugin – Docker Volume Driver for lvm volumes Synopsis docker-lvm-plugin [-debug] [-version] Description This plugin can be used to create lvm volumes of specified size, which can then be bind mounted into the container using docker run command. Usage Start the docker daemon before starting the docker-lvm-plugin daemon. You can start docker daemon using command:…
docheckgroups – Process checkgroups and output a list of changes Synopsis docheckgroups [-u] [include-pattern [exclude-pattern]] Description docheckgroups is usually run by controlchan in order to process checkgroups control messages. It reads a list of newsgroups along with their descriptions on its standard input. That list should be formatted like the newsgroups(5) file: each line contains…
do-release-upgrade – upgrade operating system to latest release Synopsis do-release-upgrade [options] Description Upgrade the operating system to the latest release from the command-line. This is the preferred command if the machine has no graphic environment or if the machine is to be upgraded over a remote connection. Options -h, –help show help message and exit…
dnstop – displays various tables of DNS traffic on your network Synopsis [-46apsQR ] [-b expression ] [-i address ] [-f filter ] [-r interval ] [device ] [savefile ] Description is a small tool to listen on device or to parse the file savefile and collect and print statistics on the local network’s DNS…
dnsspoof – forge replies to DNS address / pointer queries Synopsis dnsspoof [-i interface] [-f hostsfile] [expression] Description dnsspoof forges replies to arbitrary DNS address / pointer queries on the LAN. This is useful in bypassing hostname-based access controls, or in implementing a variety of man-in-the-middle attacks. Options -i interface Specify the interface to use….
dnssec_trigger_selinux – Security Enhanced Linux Policy for the dnssec_trigger processes Description Security-Enhanced Linux secures the dnssec_trigger processes via flexible mandatory access control. The dnssec_trigger processes execute with the dnssec_trigger_t SELinux type. You can check if you have these processes running by executing the ps command with the -Z qualifier. For example: ps -eZ | grep…
dnssec_selinux – Security Enhanced Linux Policy for the dnssec processes Description Security-Enhanced Linux secures the dnssec processes via flexible mandatory access control. Nsswitch Domain File Contexts SELinux requires files to have an extended attribute to define the file type. You can see the context of a file using the -Z option to lsP Policy governs…
dnssec-verify – DNSSEC zone verification tool Synopsis dnssec-verify [-c class] [-E engine] [-I input-format] [-o origin] [-v level] [-x] [-z] {zonefile} Description dnssec-verify verifies that a zone is fully signed for each algorithm found in the DNSKEY RRset for the zone, and that the NSEC / NSEC3 chains are complete. Options -c class Specifies the DNS class of the zone….
dnssec-trigger, dnssec-triggerd, dnssec-trigger-panel, dnssec-trigger-control, dnssec-trigger-control-setup, dnssec-trigger.conf – check DNS servers for DNSSEC support and adjust to compensate. Synopsis dnssec-triggerd [-d] [-v] [-u] [-c file] dnssec-trigger-control [-c file] [-s ip[@port] ] command [arguments] dnssec-trigger-panel [-d] [-c file] Description The dnssec-trigger programs steer unbound(8) towards DNSSEC capable DNS servers. A DHCP hook installed on the system calls…
dnssec-signzone – DNSSEC zone signing tool Synopsis dnssec-signzone [-a] [-c class] [-d directory] [-D] [-E engine] [-e end-time] [-f output-file] [-g] [-h] [-K directory] [-k key] [-L serial] [-l domain] [-i interval] [-I input-format] [-j jitter] [-N soa-serial-format] [-o origin] [-O output-format] [-P] [-p] [-R] [-r randomdev] [-S] [-s start-time] [-T ttl] [-t] [-u] [-v level] [-X extended end-time] [-x] [-z] [-3 salt] [-H iterations] [-A] {zonefile} [key…] Description dnssec-signzone signs a zone. It generates NSEC and…
dnssec-settime – Set the key timing metadata for a DNSSEC key Synopsis dnssec-settime [-f] [-K directory] [-L ttl] [-P date/offset] [-A date/offset] [-R date/offset] [-I date/offset] [-D date/offset] [-h] [-v level] [-E engine] {keyfile} Description dnssec-settime reads a DNSSEC private key file and sets the key timing metadata as specified by the -P, -A, -R, -I, and -D options. The metadata can then be…
dnssec-revoke – Set the REVOKED bit on a DNSSEC key Synopsis dnssec-revoke [-hr] [-v level] [-K directory] [-E engine] [-f] [-R] {keyfile} Description dnssec-revoke reads a DNSSEC key file, sets the REVOKED bit on the key as defined in RFC 5011, and creates a new pair of key files containing the now-revoked key. Options -h Emit usage message…