Intermediate Linux Flashcards
(149 cards)
1
Q
Where are device files generally stored?
A
/dev
2
Q
Device files are denoted with what characters in the first bit of the ls command?
A
c - character
b - block
p - pipe
s - socket
3
Q
Devices are characterized using what two numbers?
A
major device number and minor device number
4
Q
How can you interact with device drivers?
A
Through special files that look like regular files called device files or device nodes
5
Q
A device takes all of our input and just discards it, so nothing gets returned
A
/dev/null
6
Q
What are character devices?
A
These devices transfer data, but one a character at a time. These are pseudo devices (e.g. /dev/null) that aren’t really physically connected to the machine, but they allow the operating system greater functionality.
7
Q
What is a block device?
A
These devices transfer data in large fixed-sized blocks. Most commonly devices such as harddrives, filesystems, etc.
8
Q
What is a Pipe Device?
A
They allow two or more processes to communicate with each other, these are similar to character devices, but instead of having output sent to a device, it’s sent to another process.
9
Q
Similar to pipe devices but they can communicate with many processes at once
A
Socket device
10
Q
What does the major device number represent?
A
The device driver that is used
11
Q
What does the minor device number represent?
A
The minor number tells the kernel which unique device it is in this driver class
12
Q
A protocol used for allow communication between disks, printers, scanners and other peripherals to your system
A
SCSI (pronounced “scuzzy”) protocol.
SCSI stands for Small Computer System Interface
13
Q
What does Linux identify with a prefix of sd?
A
sd (SCSI disk)
Linux systems correspond SCSI disks with hard disk drives in /dev
14
Q
What is the name of the first and second hard disks in Linux?
A
First hard disk: /dev/sda
Second hard disk: /dev/sdb
e.g. /dev/sda3 - Third partition on the first hard disk
15
Q
What are some of the most common pseudo devices?
A
The most common pseudo devices are character devices:
/dev/zero - accepts and discards all input, produces a continuous stream of NULL (zero value) bytes
/dev/null - accepts and discards all input, produces no output
/dev/random - produces random numbers
16
Q
Sometimes in older systems you may see hard drives being referred to with what prefix?
A
hd
/dev/hda - First hard disk
/dev/hdd2 - Second partition on 4th hard disk
17
Q
What was created to better manage devices on our system than the /dev directory?
A
A virtual filesystem, Sysfs, most often mounted to the /sys directory
18
Q
What is the difference between /sys and /dev?
A
/sys gives us more detailed information than what we would be able to see in the /dev directory
The /dev directory is simple, and it allows other programs to access devices and interact with them
The /sys filesystem is used to view detailed information about the devices, and to manage the devices
19
Q
$ mknod /dev/sdb1 b 8 3
A
This is the old way of creating a device node.
This command will make a device node /dev/sdb1 and it will make it a block device (b) with a major number of 8 and a minor number of 3.
20
Q
How would you remove a device node using old methods?
A
To remove a device, you would simply rm the device file in the /dev directory
21
Q
Dynamically creates and removes device files for us depending on whether or not they are connected
A
The udev system
22
Q
What does the udevd daemon do?
A
It’s a daemon that is running on the system and it listens for messages from the kernel about devices connected to the system
23
Q
What does udevd do when it finds a new device?
A
Udevd will parse the information and it will match the data with the rules that are specified in /etc/udev/rules.d.
Depending on those rules it will most likely create device nodes and symbolic links for the devices
24
Q
How can you view the udev database and sysfs?
A
By using the udevadm command
25
Name the tools that list information about devices like the 'ls' command lists files and directories.
Listing USB Devices: lsusb
Listing PCI Devices: lspci
Listing SCSI Devices: lsscsi
26
A tool which reads input from a file or data stream and writes it to a file or data stream
dd
e.g. $ dd if=/home/pete/backup.img of=/dev/sdb bs=1024
if - input file
of - output file
bs - bytes
27
What tool can be used to make backups of anything, including whole disk drives?
dd
28
Linux filesystems structure should conform to what?
Filesystem Hierarchy Standard
29
The character for the root directory of the entire filesystem hierarchy
/
Everything is nestled under this directory
30
Essential ready-to-run programs (binaries) including the most basic commands such as ls and cp
/bin
31
Contains kernel boot loader files
/boot
32
Device files directory
/dev
33
Core system configuration directory that should hold only configuration files and not any binaries
/etc
34
Personal directories for users, holds your documents, files, settings, etc.
/home
35
Holds library files that binaries can use
/lib
36
Used as an attachment point for removable media like USB drives
/media
37
Temporarily mounted filesystems
/mnt
38
Optional application software packages
/opt
39
Information about currently running processes
/proc
40
The root user's home directory
/root
41
Information about the running system since the last boot
/run
42
Contains essential system binaries which usually can only be ran by root
/sbin
43
Site-specific data which are served by the system
/srv
44
Storage for temporary files
/tmp
45
User installed software and utilities
/usr
Inside this directory are sub-directories for /usr/bin, /usr/local, etc.
46
Used for anything that is subject to change all the time like system logging, user tracking, caches, etc.
/var
47
A layer between applications and the different filesystem types, so no matter what filesystem you have, your applications will be able to work with it
Virtual File System (VFS) abstraction layer
48
What is a journaled system?
The system keeps a log file (journal) in order to keep track of tasks. The filesystem is always in a consistent state because of this, so it will know exactly where you left off if your machine shutdown suddenly.
This also decreases the boot time because instead of checking the entire filesystem it just looks at your journal.
49
The most current version of the native Linux filesystems
ext4
Compatible with the older ext2 and ext3 versions
50
A new filesystem for Linux that comes with snapshots, incremental backups, performance increase and much more
Btrfs - "Better or Butter FS"
51
High performance journaling file system, great for a system with large files such as a media server
XFS
52
Windows filesystems
NTFS or FAT
53
Macintosh filesystem
HFS+
54
This command reports file system disk space usage and other details about your disk
df
55
Hard disks can be subdivided into what?
Partitions
This is essentially making multiple block devices
56
What is a partition table?
This table tells the system how the disk is partitioned
57
The two main partition table schemes used
1. ) Master Boot Record (MBR)
| 2. ) GUID Partition Table (GPT)
58
Space on a disk that is not allocated to a partition
Free space
59
Can partitions overlap?
No
You can have multiple partitions on a disk and they can't overlap each other
60
What is becoming the new standard for disk partitioning?
GUID Partition Table (GPT)
61
What is a filesystem?
An organized collection of files and directories
It is comprised of a database to manage files and the actual files themselves
62
This is located in the first few sectors of the filesystem
Boot block
This is not really used the by the filesystem. Rather, it contains information used to boot the operating system.
63
This is a single block that comes after the boot block, and it contains information about the filesystem
Super block
It contains information such as the size of the inode table, size of the logical blocks and the size of the filesystem
64
The database that manages our files
Inode (index node) table
Each file or directory has a unique entry in the inode table and it has various information about the file
65
This is the actual data for the files and directories
Data blocks
66
The parts of a Filesystem Structure
1. Boot block
2. Super block
3. Inode table
4. Data blocks
67
Common disk partitioning tools
fdisk - No GPT support
parted - Supports both MBR and GPT
gparted - The GUI version of parted
gdisk - fdisk, but only supports GPT
68
What is the parted command to make a partition?
mkpart
69
This tool allows us to create a filesystem, specify the type of filesystem we want, and where we want it
The mkfs (make filesystem) tool
e.g. $ sudo mkfs -t ext4 /dev/sdb2
70
What happens if you try to create a filesystem on top of an existing one?
You'll most likely leave your filesystem in a corrupted state
You only want to create a filesystem on a newly partitioned disk or if you are repartitioning an old one
71
A directory on the system where the filesystem is going to be attached
The mount point
72
How to create a mount point?
With the mount command
e.g. $ sudo mount -t ext4 /dev/sdb2 /mydrive
Or to unmount
e. g. $ sudo umount /mydrive
e. g. $ sudo umount /dev/sdb2
73
How do you view the UUIDS on your system for block devices?
With the blkid (block identification) command
74
How can we automatically mount filesystems at startup?
We can add them to a file called /etc/fstab
(pronounced "eff es tab" not "eff stab")
short for filesystem table
75
What is a swap partition?
Swap is used to allocate virtual memory to our system.
The system uses this partition to "swap" pieces of memory of idle processes to the disk, so you're not bogged for memory on systems with low memory
76
What commands are used to create a swap partition?
mkswap to initialize swap areas
swapon to enable the swap device
swapoff to remove swap
If you want the swap partition to persist on bootup, you need to add an entry to the /etc/fstab file
77
How much swap space should you allocate compared to memory?
You should generally allocate about twice as much swap space as you have memory
78
Why is swap space not as important on modern systems?
Modern systems have enough RAM and low memory is usually not an issue
79
What command shows you the utilization of your currently mounted filesystems?
disk free: df -h
(h flag gives you a human readable format)
This shows the device, and how much capacity is used and available
80
This command shows you the disk usage of the current directory you are in
disk usage: du -h
| h flag gives you a human readable format
81
What is the difference between du and df commands?
To see how much of your disk is free use df
To check disk usage use du
82
What command is used to check the consistency of a filesystem and can even try to repair it for us?
fsck (filesystem check)
Usually when you boot up a disk, fsck will run before your disk is mounted to make sure everything is ok
83
A filesystem is comprised of all our actual files and a database that manages these files? The database is known as what?
The inode table
84
What is an inode?
An inode (index node) is an entry in this table and there is one for every file. It describes everything about the file
inodes store everything about the file, except the filename and the file itself
85
When are inodes created?
When a filesystem is created, space for inodes is allocated as well
86
How can you see how many inodes are left on your system?
df -i
87
How can you view the inode number of a file?
ls -li
88
This command is used to see detailed information about a file
stat
89
How do inodes locate files?
Inodes point to the actual data blocks of your files using 15 pointers. 12 direct pointers and pointers to pointers.
90
In the Windows operating system, there are aliases to files known as shortcuts. What is the Linux equivalent?
symbolic links (or soft links or symlinks)
91
What are Linux hardlinks?
A file with a link to an inode
92
Symbolic links are denoted by what?
myfilelink -> myfile
93
When you modify a symlink what happens to the file it points to?
The file also gets modified
94
What is the link count in the ls command?
The link count is the number of hardlinks that an inode has
95
What is the difference between symlinks and hardlinks?
symlinks are just files that point to filenames so they can be referenced across different filesystems
hardlinks create another file with a link to the same inode. hardlinks do not span filesystems because inodes are unique to the filesystem
96
How do you create a symlink?
With the ln command with -s for symbolic and you specific a target file and then a link name
e.g. $ ln -s myfile mylink
97
How to create a hardlink?
With the ln command, but without the -s flag
e.g. $ ln somefile somelink
98
What are the 4 stages of the Linux boot process?
1. ) BIOS
2. ) Bootloader
3. ) Kernel
4. ) Init
99
What does BIOS stand for?
BIOS stands for "Basic Input/Output System"
100
What happens during the BIOS phase of the boot process?
BIOS is a firmware that comes most common in IBM PC compatible computers
BIOS performs system integrity checks with power-on self test (POST)
BIOS's main goal is to find the system bootloader. Once the BIOS boots up the hard drive, it searches for the boot block to figure out how to boot up the system. It will look to the master boot record (MBR) or GPT
The MBR contains the code to load another program somewhere on the disk, this program in turn actually loads up our bootloader
101
What does POST stand for?
Power-on self test (POST) which checks that all the hardware is good to go for system startup
102
What does the bootloader do?
Boots into an operating system
Selects a kernel to use
Specifies kernel parameters
103
What is the kernel doing during the boot process?
When the kernel is loaded, it immediately initializes devices and memory using initramfs to get the necessary drivers.
Then it creates a root device and mount the root partition in read-only mode first so that fsck can run safely and check for system integrity. Afterwards it remounts the root filesystem in read-write mode.
Then the kernel locates the init program and executes it
104
What is init?
The init process is the first process that gets started, init starts and stops essential service process on the system
105
The successor to BIOS
UEFI (stands for "Unified extensible firmware interface")
The GPT format was intended for use with EFI
The first sector of a GPT disk is reserved for a "protective MBR" to make it possible to boot a BIOS-based machine
UEFI stores all the information about startup in an .efi file stored on a special partition called EFI system partition
This partition contains the bootloader
106
The most common bootloader for Linux?
GRUB
107
The kernel manages our systems hardware, however not all drivers are available to the kernel during bootup. How is this resolved?
There is a temporary root filesystem that contains just the essential modules that the kernel needs to get to the rest of the hardware
108
Initrd vs Initramfs
initrd (initial ram disk) has been replaced by initramfs
In older versions of Linux the kernel would mount the initrd, a temporary root filesystem, get the necessary bootup drivers, then when it was done loading everything it needed, it would replace the initrd with the actual root filesystem.
Now we use initramfs, a temporary root filesystem that is built into the kernel itself to load all the necessary drivers for the real root filesystem
109
What are the three major implementations of init in Linux?
1. ) System V init (sysv)
2. ) Upstart
3. ) Systemd
110
System V init (sysv)
pronounced as 'System Five'
The traditional init system. It sequentially starts and stops processes, based on startup scripts. The state of the machine is denoted by runlevels, each runlevel starts or stops a machine in a different way.
111
Upstart
This is the init you'll find on older Ubuntu installations. Upstart uses the idea of jobs and events and works by starting jobs that performs certain actions in response to events.
112
Systemd
This is the new standard for init, it is goal oriented. Basically you have a goal that you want to achieve and systemd tries to satisfy the goal's dependencies to complete the goal.
113
The core of the operating system
The kernel
114
The Linux operating system can be organized into what three different levels of abstraction
1. ) Hardware. The physical layer. CPU, memory, hard disks, networking ports, etc
2. ) Kernel. It handles process and memory management, device communication, system calls, sets up our filesystem, etc. It's the software / hardware interface.
3. ) User space. This includes the shell, the programs that you run, the graphics, etc.
115
What are the privilege levels (protection rings)?
Ring #0 - Ring #3
1. ) Kernel Mode - the kernel has complete access to the hardware, it controls everything
2. ) User Mode - there is a very small amount of safe memory and CPU that you are allowed to access
116
What allows us to perform a privileged instruction in kernel mode and then switch back to user mode?
System calls (syscall)
Systems calls provide user space processes a way to request the kernel to do something
117
The kernel makes certain services available to user space processes through what?
The system call API
These services allow us to read or write to a file, modify memory usage, modify our network, etc.
118
You can view the system calls that a process makes with this command
strace
e.g. $ strace ls
119
Can you install multiple kernels on your system?
Yes
During the boot process in our GRUB menu we can choose which kernel to boot to
120
This command show what kernel version you have on your system
uname
- r command will print out all of the kernel release version
e. g. $ uname -r
121
How can you install the Linux kernel?
1. ) Download the source package and compile from source
2. ) Install it using package management tools
3. ) Upgrade kernel version with $ sudo apt dist-upgrade
You'll need to also install some other linux packages
122
What is the actual linux kernel file named?
vmlinuz
123
Where are kernel related files usually stored?
Usually the /boot directory
124
Pieces of code that can be loaded and unloaded into the kernel on demand
Kernel modules
Modules allow us to extend the functionality of the kernel without actually adding to the core kernel code
125
How can you view a list of currently loaded modules?
lsmod
126
How to load a kernel module?
modprobe
e.g. $ sudo modprobe bluetooth
127
How to remove a kernel module?
modprobe with the -r flag
e.g. $ sudo modprobe -r bluetooth
128
How to load a kernel module on bootup?
Modify the /etc/modprobe.d directory and add a configuration file
129
How to ensure that a kernel module does not load on bootup?
Modify the /etc/modprobe.d directory and add a configuration file to blacklist the module
130
Under this version of init the state of the machine is denoted by runlevels, each runlevel starts or stops a machine in a different way.
System V
131
This is the init that uses jobs and events and works by starting jobs that performs certain actions in response to events. Found on older Ubuntu installations
Upstart
132
The new, goal oriented, standard for init
Systemd
133
The main purpose of init?
To start and stop essential processes on the system
134
The most traditional version of init
System V
135
How to find out if you are using the Sys V init implementation?
If you have an /etc/inittab file you are most likely running System V
136
Why is performance bad with System V?
Usually only one thing is starting or stopping at a time
137
When using this version of init, the state of the machine is defined by runlevels which are set from 0 to 6
System V
138
What scripts are located at /etc/rc.d/rc[runlevel number].d/ or /etc/init.d?
Scripts that are run based on the runlevel of the system (Sys v)
Scripts that start with S(start) or K(kill) will run on startup and shutdown, respectively. The numbers next to these characters are the sequence they run in.
139
How can you see the default runlevel?
In the /etc/inittab file
140
$ service --status-all
List the status of Sys V services
141
$ sudo service networking start
Start the networking service
This could also be stop or restart
142
Who developed Upstart?
Canonical, and it was used in Unbuntu
143
How can you tell if your system is using Upstart?
If you have a /usr/share/upstart directory
144
With Upstart, what's the difference between jobs and events?
Jobs are the actions that Upstart performs and events are messages that are received from other processes to trigger jobs
145
How can you view a list of jobs (Upstart) and their configurations?
$ ls /etc/init
146
What does this do: initctl list
Lists Upstart jobs
147
initctl status networking
View the Upstart status of the networking job
148
How to manually start a job?
$ sudo initctl start networking
You can also stop, restart, or emit an event
149
How can you tell if your system is using Systemd?
You have a /usr/lib/systemd directory
