Linux Cheat Sheet

Linux and Unix terms explained

152 terms

Alpine Linux: A lightweight Linux distribution known for small container images, musl, and a security-conscious minimal design.
APT Package: A software package installed and managed through Debian-style package management tools such as APT. In open-source culture, APT packages are part of the everyday experience of using Debian and Ubuntu-based Linux systems.
Arch Linux: A lightweight and highly customizable Linux distribution known for its rolling releases, manual control, and strong documentation culture. In open-source communities, Arch Linux is associated with users who value transparency and fine-grained system control.
Arch User Repository: A community-maintained repository of package build scripts for Arch Linux, usually abbreviated as AUR. In open-source culture it is admired for breadth and convenience, while also requiring users to exercise trust and caution.
AUR: The common abbreviation for the Arch User Repository, a community source of package build scripts for Arch Linux. In open-source culture AUR is often spoken of with affection, caution, and a little dependency-induced chaos.
Awk: A classic Unix text-processing language and command-line tool used for filtering, transforming, and reporting on structured text streams. In slang usage, saying 'just awk it' often implies solving a problem quickly with compact shell-friendly text manipulation.
Bash: The Bourne Again Shell, the default command-line interpreter on most Linux distributions and macOS. Bash scripts are the glue of Unix system administration, automating everything from deployment pipelines to log rotation, though its quirky syntax and error handling make complex scripts notoriously f
Bubblewrap: A Linux sandboxing tool used to create restricted environments with limited filesystem and process access.
CentOS: A Linux distribution historically popular for servers and enterprise-like stability, especially before major project changes altered its role.
Cgroups: Control Groups — a Linux kernel feature that limits, accounts for, and isolates the resource usage (CPU, memory, disk I/O, network) of process groups. One of the two pillars of container technology (alongside namespaces). Docker and Kubernetes use cgroups to enforce container resource limits.
Chmod: To change file or directory permissions on Unix-like systems using the `chmod` command. In casual engineering speech, people often use the command name as a verb, especially when troubleshooting access problems quickly.
chmod 777: A Unix command that makes a file or directory readable, writable, and executable by everyone, often used as a notorious example of a quick but unsafe permissions fix. In tech culture it is shorthand for solving a problem by disabling guardrails instead of understanding them.
Chroot Jail: A Unix isolation technique that changes a process's apparent root directory, restricting how it can access parts of the filesystem. Chroot jails provide limited containment, but they are not a complete sandbox on their own.
Copr: A build and repository service used in the Fedora ecosystem to create and distribute packages outside the main official repositories. In Linux packaging culture, Copr offers a lighter path for sharing builds without full distro inclusion.
Coreutils: The collection of fundamental GNU command-line utilities such as `ls`, `cp`, and `sort` that underpin many Unix-like workflows.
Cron Job: A scheduled task on Unix-like systems, configured via the crontab. The name comes from Chronos (Greek god of time). If you've ever wondered why something runs at 2am every night, there's a cron job behind it.
Crontab: The configuration file and command for managing cron jobs on Unix systems. The format uses five fields (minute, hour, day-of-month, month, day-of-week) followed by the command to execute. Despite its cryptic syntax, crontab remains the most widely used job scheduler on Linux servers.
Cut: In Prolog, the cut (!) operator commits to the current choice point, preventing backtracking past it. In Unix, the cut command extracts sections from each line of input. Both uses involve selecting and discarding alternatives.
Daemon: Daemon is a background process that runs continuously on a computer system without direct user interaction, performing system-level tasks or waiting to handle requests. The term originates from Greek mythology (a supernatural being working behind the scenes) and was first used in computing at MIT in
Debian: A major community-governed Linux distribution known for its package ecosystem, stability, free software principles, and broad influence across downstream systems such as Ubuntu. Debian is also a key example of large-scale open source governance in practice.
Debian Package: A software package built for Debian-based systems, typically in `.deb` format and installable through package-management tooling such as `dpkg` or `apt`. Debian packaging includes metadata, dependency declarations, installation scripts, and policy expectations.
Deb Package: A software package in the Debian package format used by Debian, Ubuntu, and related systems. In Linux culture Deb packages are a familiar unit of installation, updates, and repository management.
Dev Null: A reference to `/dev/null`, the Unix special file that discards anything written to it, often used figuratively for ignored messages, disappearing work, or black-hole processes.
Distro: Short for distribution, usually referring to a packaged operating system built around a shared software base, especially in the Linux world. A distro bundles a kernel, package manager, defaults, release policy, and community conventions into a coherent system.
Dotfile: A configuration file whose name starts with a dot (.), making it hidden in Unix directory listings. Examples include .gitignore, .bashrc, .env, and .eslintrc. Developers often version-control their dotfiles in a GitHub repo for consistent setup across machines.
Embedded Linux: An Embedded Linux is a development concept used to shape how software is built, executed, or maintained in real systems. Developers rely on it to make code easier to reason about, integrate, and operate as projects grow. It usually matters most when teams need predictable behavior, clearer abstracti
Enterprise Linux: Linux distributions and ecosystems aimed at business, production, and long-term support use rather than pure hobbyist experimentation. In infrastructure culture the phrase often implies stability, supportability, and conservative release expectations.
Epoll: A Linux I/O event notification mechanism that efficiently monitors thousands of file descriptors for readiness events. Unlike poll/select (which scan all descriptors every time), epoll only reports descriptors with events, scaling O(1) with the number of watched descriptors. The foundation of high-p
Exit Code: A numeric value returned by a process to its parent when it terminates. By convention, 0 means success and any non-zero value indicates an error. Shell scripts and CI pipelines rely on exit codes to determine pass/fail.
Export: To make a function, variable, or class available for import by other modules. In JavaScript/TypeScript, 'export' controls the public API of a module. In shell scripting, 'export' makes a variable available to child processes.
Failban: Shorthand for automated banning based on repeated failed actions, often associated with tools like Fail2ban that watch logs and temporarily block abusive IPs. It is commonly used to slow password guessing and noisy scanning against services such as SSH.
Fedora: A community-driven Linux distribution sponsored by Red Hat, known for shipping relatively current packages and serving as an upstream source for enterprise-focused distributions. Fedora is often associated with a balance between openness, polish, and modern tooling.
Field Separator: A character or string used to delimit fields in a record. In Unix tools like AWK and cut, the field separator (FS or -d) determines how lines are split into columns. Common separators include commas (CSV), tabs (TSV), and pipes.
Flatpak: A Linux application distribution and sandboxing system designed to make desktop apps easier to package and run across distributions. In desktop Linux culture, Flatpak is part of the ongoing effort to simplify software distribution and isolation.
Fork Bomb: A denial-of-service pattern where processes recursively spawn more processes until the system exhausts its resources. The term is especially associated with Unix shell examples that demonstrate how quickly uncontrolled process creation can overwhelm a machine.
Gentoo: A source-based Linux distribution known for customization, compile-time control, and user involvement in system configuration. In Linux culture, Gentoo is often associated with users who enjoy deep system tuning and are willing to trade convenience for control.
GNOME: A major open-source desktop environment and application ecosystem for Linux and related systems.
GNU Coreutils: The GNU collection of essential command-line utilities such as `ls`, `cp`, `mv`, `cat`, and many others used across Unix-like systems. In open-source culture, GNU Coreutils are foundational everyday tools people rely on almost invisibly until portability differences appear.
GNU/Linux: A term used by some in the free software community to emphasize that many so-called Linux systems combine the Linux kernel with core GNU userland tools and libraries. The phrase reflects both technical composition and a political argument about recognition.
GTK: The GIMP Toolkit — a cross-platform widget toolkit for creating graphical user interfaces, originally developed for GIMP and now the foundation of the GNOME desktop environment. Written in C with bindings for many languages.
Here Document: A type of string literal in shell scripting and several programming languages that preserves line breaks and allows embedding of multi-line text inline, delimited by a user-chosen marker (typically <<EOF...EOF).
io_uring: A Linux asynchronous I/O interface (since kernel 5.1) that uses shared ring buffers between user space and kernel to submit and complete I/O operations without system call overhead per operation. Dramatically faster than traditional read/write syscalls for high-throughput workloads. Used by modern d
Kali Linux: A Linux distribution maintained for penetration testing, digital forensics, and security research, shipping with a large collection of offensive and diagnostic tools preinstalled. Kali Linux is widely used by red teams, researchers, students, and sometimes attackers because it reduces setup friction
KDE Plasma: A feature-rich open-source desktop environment for Linux and related systems, known for extensive customization.
Kernel Hacker: A programmer who works on operating system kernels or similarly low-level systems code involving schedulers, memory management, drivers, filesystems, or core interfaces. The term carries strong credibility in systems-oriented tech culture because of the difficulty and risk of the work.
Kernel Module: A piece of code that can be dynamically loaded into or unloaded from a running operating system kernel, extending its functionality without requiring a reboot — commonly used for device drivers and filesystems.
Kernel Space: The protected memory and execution domain where the operating system kernel runs with full access to hardware and system resources. Code executing in kernel space can perform privileged operations that user-space applications cannot, which is why bugs there are especially dangerous.
Kill Dash Nine: A spoken version of `kill -9`, usually said with a tone that mixes practicality and violence. In engineering slang, it stands for the bluntest process termination option when graceful shutdown has failed or been abandoned.
Linus Torvalds: The creator of the Linux kernel and Git, and one of the most influential figures in open source software history. In tech culture his name is associated with large-scale distributed development, blunt communication, and the long arc of Linux governance.
Linux: Linux is an open-source, Unix-like operating system kernel created by Linus Torvalds in 1991. Combined with the GNU userland and other software, it forms complete operating systems known as Linux distributions (distros), including Ubuntu, Fedora, Debian, Arch, CentOS, and Alpine. Linux runs most of
Linux Distribution: A packaged operating system built around the Linux kernel plus a curated set of userland tools, repositories, defaults, and maintenance policies. Different distributions optimize for different tradeoffs such as stability, bleeding-edge packages, or minimalism.
Linux Distro: Short for Linux distribution, meaning a packaged operating system built around the Linux kernel plus a selected set of tools, package management, defaults, and release policies. Distro choice is a cultural marker in Linux communities as much as a technical one.
Linux Foundation: A nonprofit consortium that supports Linux and many related open source projects through governance, events, legal infrastructure, and ecosystem coordination. It became one of the central institutions in enterprise-backed open source development.
Linux Kernel: The core of the Linux operating system — a monolithic, open-source kernel written primarily in C that manages hardware resources, process scheduling, memory, file systems, networking, and device drivers. It is the layer between user-space applications and physical hardware, and it powers everything
Linux Kernel Community: The global community of maintainers, contributors, reviewers, companies, and users involved in the Linux kernel. In open-source culture, the Linux kernel community is one of the most influential and technically demanding collaborative ecosystems in software history.
Linux Kernel Module: A loadable piece of code that can extend Linux kernel functionality without requiring a full kernel rebuild for every change. In systems culture, kernel modules are powerful but demand caution because mistakes happen in privileged low-level space.
Linux Package: A software package prepared for installation on Linux systems, usually through a distribution-specific or cross-distro packaging format. In developer culture, Linux packages are central to making software feel native and maintainable on users' systems.
Linux User Group: A local or online community of Linux users who share knowledge, troubleshoot systems, and promote free or open source software. Often abbreviated LUG, these groups were especially important in the growth of Linux before today’s platform-centric communities.
LXC: Linux Containers, a set of userspace tools for running multiple isolated Linux systems on one host.
Lynis: A security auditing and hardening tool for Unix-like systems that checks system configuration against common best practices.
Make: A build automation tool (originally from 1976) that reads dependency rules from a Makefile and executes only the commands needed to bring targets up to date, based on file modification timestamps. GNU Make is the most widespread variant.
Makefile: A file containing rules, targets, dependencies, and shell commands read by the `make` utility to build a project. Each rule declares a target, its prerequisite files, and the recipe (tab-indented shell commands) to produce it. Widely used even outside C/C++ as a simple task runner.
Manpage: A manual page — the built-in documentation system on Unix-like systems, accessed via the 'man' command. The first and last resort for Unix questions, if you can decipher the format.
Man Page: Short for manual page, a command-line help document on Unix-like systems that describes a program, API, or system interface, usually accessed with the `man` command. Reading man pages is a classic Unix literacy habit.
Mesa: An open-source implementation of graphics APIs such as OpenGL and Vulkan used widely in Linux and related systems. In graphics and Linux culture, Mesa is foundational infrastructure even if many users never notice it directly.
Minicomputer: A mid-range computer class popular from the 1960s-1980s, smaller and cheaper than mainframes but more powerful than microcomputers. The PDP-11 and VAX were iconic examples. Unix was developed on a PDP-7 minicomputer, and C was created to port Unix to the PDP-11.
Mint: Short for Linux Mint, a Linux distribution known for a user-friendly desktop experience and approachability. In Linux culture, Mint is often recommended to users who want a smoother transition from mainstream consumer operating systems.
Mount Point: A directory in a file system hierarchy at which a separate file system, disk partition, or volume is attached and made accessible — for example, mounting an NFS share at `/mnt/data` or a Docker volume at `/app/uploads`.
Multics: Multiplexed Information and Computing Service — an ambitious time-sharing operating system begun in 1964 that introduced hierarchical file systems, dynamic linking, and ring-based security. Though considered a commercial failure, Multics directly inspired Unix (whose name is a pun on it) and thus mo
Named Pipe: A special file (FIFO) in the file system that enables unidirectional or bidirectional inter-process communication between unrelated processes on the same machine — unlike anonymous pipes, named pipes persist as file system entries and can be opened by any process with the appropriate permissions.
Namespace: A Linux kernel feature that isolates and virtualizes system resources for a group of processes. Types include PID (process IDs), network (network stack), mount (filesystems), user (user/group IDs), UTS (hostname), and IPC (inter-process communication). The isolation foundation of containers — each c
Neckbeard: A stereotype (sometimes self-applied with pride) of the deeply technical, socially awkward programmer — typically associated with Unix mastery, opinions about text editors, and resistance to shaving. Used both affectionately and pejoratively.
Neckbeard: A (self-deprecating) stereotype of an extremely knowledgeable but socially awkward programmer who uses Arch Linux, configures everything in the terminal, knows obscure Unix trivia, and has strong opinions about text editors. The term can be endearing (celebrating deep technical knowledge) or pejorat
Network Interface: A hardware or virtual endpoint through which a host connects to a network, identified by a name (e.g., `eth0`, `wlan0`, `lo`) and configured with IP addresses, MTU, and routing rules — each container in Docker typically gets its own virtual network interface via a veth pair.
NixOS: A Linux distribution built around the Nix package manager and a declarative configuration model that makes system state reproducible and rollbacks easier. It is popular with users who value precise environment control and infrastructure-as-code-like operating system management.
Nix Package Manager: A package manager built around functional, reproducible software installation with isolated dependency trees.
One Liner: A command or piece of code compressed into a single line, usually for speed, cleverness, or convenience. Some one-liners are elegant; others become unreadable party tricks.
OOM Killer: Out-of-Memory Killer — a Linux kernel mechanism that selects and terminates processes when the system runs critically low on memory, preventing a complete system hang. Scores processes based on memory usage, nice value, and whether they're root-owned. Notorious for killing important processes seemin
Open Invention Network: A patent non-aggression consortium formed to help protect the Linux ecosystem and related open source technologies from patent litigation among its members. It is an example of legal infrastructure built to support open source at industry scale.
OS Kernel: The core component of an operating system that runs in privileged (ring 0) mode and manages hardware resources — CPU scheduling, memory management, device drivers, and system calls — providing the interface between user-space applications and the physical machine.
Pacman: The package manager used by Arch Linux for installing, upgrading, and managing packages. In Linux culture, pacman is closely tied to Arch workflows and the expectation of a relatively direct relationship with the system's package state.
Parrot OS: A security-focused Linux distribution used for penetration testing, digital forensics, privacy tooling, and general secure research work. Parrot OS is often compared with Kali Linux but is positioned with a mix of offensive tooling, defensive utilities, and privacy-oriented defaults.
Pattern Action: A programming paradigm, most associated with AWK, where rules consist of a pattern (condition) paired with an action (code block). When input matches the pattern, the corresponding action executes. Simple, powerful, and the reason AWK one-liners can replace 50-line scripts.
Perf Tool: The Linux kernel's built-in performance analysis tool (perf) that uses hardware performance counters and software tracepoints to profile CPU cycles, cache misses, branch mispredictions, and other low-level events with minimal overhead. Commonly invoked as perf stat, perf record, and perf report.
Pipe: A mechanism for inter-process communication that connects the standard output of one process to the standard input of another, represented by the | character in Unix shells. The foundational Unix philosophy of small, composable tools depends on pipes.
PipeWire: A multimedia server for Linux intended to handle audio and video routing in a modern unified way.
Podman: An open-source container engine designed as an alternative to Docker, often emphasizing daemonless operation and close integration with Linux container tooling. In infrastructure culture, Podman is popular with teams that want container workflows without depending on a long-running central daemon.
Portage: The package management system used by Gentoo Linux, known for source-based builds, USE flags, and fine-grained configuration of package features. Portage is central to Gentoo’s highly customizable distribution model.
POSIX: Portable Operating System Interface — a family of IEEE standards (IEEE 1003) that define a common API, shell, and utility interface for Unix-like operating systems, ensuring that programs written to the POSIX spec can run on any compliant system (Linux, macOS, BSDs, Solaris) with minimal modificatio
PowerShell: Microsoft's task automation framework and command-line shell, built on .NET and designed around the concept of passing objects (not text) between commands. PowerShell replaced the ancient cmd.exe for Windows administration and is now cross-platform, though it remains most powerful in Windows and Azu
Preseed: A Debian installation automation mechanism that supplies answers in advance so systems can be installed unattended.
Process Group: A collection of one or more processes in a Unix-like OS that share a process group ID (PGID), allowing signals to be sent to the entire group at once. Process groups are used for job control — when you Ctrl+C a shell pipeline, the SIGINT is delivered to every process in the foreground process group.
Red Hat: The enterprise software company best known for building commercial products and support businesses around open source, especially Linux through Red Hat Enterprise Linux. In open source history, Red Hat is a major example of open source commercialization at scale.
Redirection: The mechanism of sending a command's input or output to a file or another command instead of the default terminal. In Unix shells, > redirects stdout to a file, >> appends, 2> redirects stderr, and < reads from a file. Also used in HTTP (301/302 status codes) to send browsers to a different URL.
Rocky Linux: A community-driven enterprise Linux distribution created to provide a downstream-compatible replacement after CentOS changes.
Rolling Release: A release model where software is updated continuously rather than through large, infrequent version jumps. Rolling releases give users faster access to current packages but can increase operational churn and breakage risk.
Root: The superuser account on Unix-like systems (UID 0) that has unrestricted access to all files, processes, and system calls. Also refers to the top-level node of a tree data structure or the base directory (/) of a filesystem hierarchy.
Root Access: Administrative access with full control over a Unix-like system, allowing unrestricted changes to files, processes, and configuration. In practice it implies both power and risk.
Root Access Security: The controls and practices used to protect root-level administrative access on Unix-like systems, including MFA, bastions, logging, least privilege, and careful handling of direct root use. Because root can bypass most local controls, weak root access security often turns small incidents into full c
RPM: Originally standing for Red Hat Package Manager, RPM refers both to the package format and the tooling used by many Linux distributions such as Red Hat, Fedora, and SUSE. It is a core part of software installation and distribution workflows in those ecosystems.
Shebang: The #! character sequence at the beginning of a script file that tells the operating system which interpreter to use to execute it (e.g., #!/bin/bash, #!/usr/bin/env python3). The name comes from combining 'hash' (#) and 'bang' (!).
Shell: A command-line interpreter that reads user input (or scripts), parses it into commands, expands variables and globs, and executes programs — with common implementations including Bash, Zsh, Fish, and PowerShell.
Shell Builtin: A command implemented directly inside the shell process rather than as a separate executable, either because it must modify the shell's own state (like `cd`, `export`, `source`) or for performance (like `echo`, `test`) — visible via `type` or `builtin` in Bash.
Shell Expansion: The series of transformations the shell applies to a command line before execution — including brace expansion (`{a,b}`), tilde expansion (`~`), parameter/variable expansion (`$VAR`), command substitution (`$(cmd)`), arithmetic expansion, word splitting, and pathname (glob) expansion (`*.txt`).
Shell Script: A text file containing a sequence of shell commands (typically Bash) that are executed in order by the shell interpreter, used to automate system administration, deployment, and build tasks.
Shell Variable: A named value stored within the shell session, local to that shell process unless explicitly exported (at which point it becomes an environment variable inherited by child processes), set with `NAME=value` and accessed with `$NAME`.
SIGKILL: Unix signal 9 — the unblockable, uncatchable signal that immediately terminates a process. When SIGTERM (the polite request to stop) is ignored, SIGKILL is the nuclear option. The process gets no chance to clean up.
Signal Handler: A user-defined function registered with the operating system to execute when a process receives a specific signal (e.g., SIGTERM, SIGINT, SIGHUP). Because handlers run asynchronously and interrupt normal execution, they must be async-signal-safe — only calling a restricted set of reentrant functions
Snap: A packaged application format and distribution system developed by Canonical for Linux, designed to bundle applications with many of their dependencies and update them atomically. Snaps are often discussed in terms of portability, sandboxing, and ecosystem tradeoffs.
Snap Package: A self-contained Linux application bundle developed by Canonical that packages the binary along with all its dependencies into a single squashfs archive, runs in a sandboxed environment with AppArmor confinement, and auto-updates from the Snap Store.
Socket: A software endpoint for bidirectional communication between two processes, identified by an IP address and port number for network sockets (TCP/UDP) or a filesystem path for Unix domain sockets. The POSIX socket API (socket, bind, listen, accept, connect) is the foundational interface for virtually
Standard Error: The default output stream (file descriptor 2, or stderr) used by programs to emit error messages, warnings, and diagnostic information, separate from standard output (stdout). This separation allows users to redirect normal output to a file or pipe while still seeing errors in the terminal, or to ca
Standard Input: The default input stream (file descriptor 0, or stdin) from which a program reads data — typically the keyboard in an interactive terminal, or the output of another program when connected via a pipe. It is a foundational concept in the Unix philosophy of composable, pipeable commands.
Standard Output: The default output stream (file descriptor 1) to which a process writes its normal program output. In Unix-like systems, stdout is typically connected to the terminal but can be redirected to a file or piped to another process.
Stderr: Standard error (file descriptor 2) — the output stream reserved for error messages and diagnostic information. It is unbuffered by default and remains connected to the terminal even when stdout is redirected, ensuring error messages are always visible.
Stdin: Standard input (file descriptor 0) — the default input stream from which a process reads data, typically connected to the keyboard in an interactive session or to a pipe or file when used in a pipeline.
Stdin/Stdout/Stderr: The three standard I/O streams in Unix: stdin (fd 0, input), stdout (fd 1, normal output), and stderr (fd 2, error output). The Unix philosophy of composing small programs relies on piping stdout of one program into stdin of another. Separating stdout and stderr allows redirecting errors independent
Stdout: Standard output (file descriptor 1) — the default output stream where a process writes its normal results. It is line-buffered when connected to a terminal and fully buffered when piped to another process or redirected to a file.
Subshell: A child shell process spawned by the current shell to execute commands in an isolated environment, where variable changes and directory changes do not affect the parent shell.
Sudo: Superuser Do — a Unix command that executes a command with elevated (root) privileges. In tech culture, used metaphorically: 'I sudo asked my boss for a raise.' The xkcd 'sudo make me a sandwich' strip is canon.
Sudo Culture: The norms and attitudes around privileged access in Unix-like environments, including who gets it, how casually it is used, and whether escalation is treated as a routine shortcut or a controlled exception. The phrase often surfaces in discussions of security discipline and trust.
Sudo Make Me a Sandwich: A classic xkcd-derived joke about privilege escalation, based on the idea that `sudo` can make almost any command permissible if you have the right rights. It is part shell humor, part admin-culture meme.
SUSE: A long-running Linux company and ecosystem known for enterprise distributions such as SUSE Linux Enterprise and its history in European open source infrastructure. In operations and enterprise circles, SUSE is one of the major Linux vendor families alongside Red Hat-derived systems.
Swappiness: A Linux kernel parameter (vm.swappiness) ranging from 0 to 200 that controls how aggressively the kernel moves inactive memory pages from RAM to swap space on disk. Lower values favor keeping data in RAM; higher values swap more readily to free physical memory.
Symbolic Link: A filesystem entry that contains a path reference to another file or directory rather than actual data. The OS transparently follows the link when accessed, allowing one path to act as an alias for another — unlike a hard link, a symlink can span filesystems and point at directories.
Symlink: A symbolic link — a special file that acts as a pointer to another file or directory. Unlike hard links, symlinks can cross filesystems and point to directories. Commonly used for managing multiple versions (e.g., /usr/bin/python → python3.11), and in deployment strategies.
Sysadmin Culture: The shared norms, humor, habits, and expectations of system administrators and infrastructure operators, including shell fluency, automation, incident readiness, and healthy skepticism toward fragile abstractions. It is strongly shaped by real operational consequences.
Systemd: The init system and service manager that is PID 1 on most modern Linux distributions, responsible for bootstrapping user space, managing service lifecycles through unit files, handling dependencies and parallelized startup, and providing logging via journald.
Tab Completion: A shell and editor feature that automatically completes partially typed commands, file paths, or variable names when the user presses the Tab key, using context-aware matching against available options — pressing Tab twice typically shows all possible completions.
Terminal Emulator: A graphical application — such as iTerm2, Windows Terminal, Alacritty, or GNOME Terminal — that emulates a traditional hardware terminal by hosting a shell process, interpreting ANSI escape codes for colors and cursor movement, and rendering the text-based interface in a window.
TTY: Short for teletypewriter, a TTY is a terminal device interface in Unix-like systems that provides line-buffered, character-oriented I/O between a user and the kernel. In modern usage, it refers to pseudo-terminal devices (/dev/pts/*) that terminal emulators and SSH sessions use, and programs check `
Tux: The penguin mascot associated with Linux, recognized as a long-standing symbol of the Linux community.
Ubuntu: A widely used Linux distribution known for its broad package ecosystem, long-term support releases, and strong presence on desktops, servers, and cloud systems. In practical software work, Ubuntu is often the default target environment people test against first.
Ubuntu Community: The global network of users, contributors, maintainers, and advocates around the Ubuntu Linux distribution and its ecosystem. It is known for emphasizing accessibility, support, and broad Linux adoption.
Udev: The Linux userspace device manager that dynamically creates and removes device nodes in `/dev` in response to kernel events (uevents) when hardware is plugged in or removed. Udev rules — written in `/etc/udev/rules.d/` — allow administrators to set permissions, create symlinks, and trigger scripts b
UNIX: The family of operating system ideas, standards, and implementations originating from the original Unix systems at Bell Labs, known for process composition, text-oriented tooling, and multiuser design. In modern usage it can refer to certified UNIX systems or more broadly to Unix-like traditions.
Unix Beard: A humorous stereotype of the long-time Unix expert, often imagined as bearded, terminal-focused, and deeply knowledgeable about low-level systems. The phrase plays on the mythology surrounding veteran sysadmins and old-school hackers.
Unix Domain Socket: An inter-process communication mechanism on Unix-like systems that uses the socket API but communicates via a file path in the filesystem (e.g., `/var/run/docker.sock`) instead of a network address. Since data never traverses the network stack, Unix domain sockets have lower latency and higher throu
Unix Philosophy: A set of design principles originating from Ken Thompson and Dennis Ritchie's work at Bell Labs, emphasizing: write programs that do one thing well, write programs that work together via text streams, and write programs to handle text (the universal interface). Summarized by Doug McIlroy as 'do one
Unix Socket: A colloquial shorthand for Unix domain socket — an IPC endpoint identified by a filesystem path rather than an IP address and port. The socket file (e.g., `/tmp/app.sock`) acts as a rendezvous point; the kernel routes data directly between processes without network protocol overhead. Commonly used f
User Space: The memory region and execution privilege level where normal application processes run, isolated from the kernel by the CPU's protection rings. User-space code cannot directly access hardware or kernel memory and must request privileged operations through system calls.
Variable Expansion: The shell mechanism that replaces a variable reference ($VAR or ${VAR}) with its value before executing a command. Supports default values (${VAR:-default}), substring operations, and pattern substitution.
Vim: Vi IMproved — a highly configurable, modal text editor that's been a standard Unix tool since 1991. Famous for its steep learning curve and the enduring joke that nobody knows how to exit it (:q! for the uninitiated). Its users are fiercely loyal; its detractors are confused.
Vim vs Emacs: The long-running cultural rivalry between the text editors Vim and Emacs, often treated as a playful proxy for deeper preferences about tooling, extensibility, modal editing, and workflow philosophy. It is one of the classic recurring debates in developer culture.
Virtual File System: An abstraction layer in the operating system kernel that provides a uniform file-operation interface (open, read, write, close) regardless of the underlying filesystem type. Linux's VFS allows ext4, NFS, procfs, and FUSE filesystems to coexist transparently behind the same POSIX API.
Wayland: A display server protocol and ecosystem used on Linux systems as a modern alternative to older display architectures such as X11. In desktop Linux culture, Wayland is associated with cleaner graphics architecture, ongoing transitions, and occasional compatibility friction.
Window Manager: An X11 or Wayland client that controls the placement, sizing, stacking, and decoration of application windows on a desktop. Ranges from full desktop environments (GNOME's Mutter, KDE's KWin) to minimalist tiling managers (i3, Sway, Hyprland) that arrange windows in non-overlapping tiles.
Worse Is Better: A software-design idea arguing that simpler, more pragmatic systems often win adoption over theoretically cleaner but more complex alternatives.
X11: The X Window System version 11, a network-transparent display protocol and server architecture that has provided the foundational graphical infrastructure for Unix and Linux desktops since 1987, now being succeeded by Wayland on many distributions.
Yum: A package manager historically used in RPM-based Linux distributions for installing, updating, and removing software. In Linux operations culture, yum remains familiar shorthand even where newer tooling has replaced or wrapped parts of its workflow.
Zombie Process: Zombie Process is a process in a Unix-like operating system that has finished executing but still has an entry in the process table because its parent process has not yet read its exit status. When a process terminates, the kernel keeps a minimal record (process ID, exit status, resource usage stati
Zsh: The Z Shell — an extended Bourne-compatible shell that became the default login shell on macOS starting with Catalina. It offers powerful features over bash including better tab completion, shared history, spelling correction, and a rich plugin ecosystem via frameworks like Oh My Zsh.