Index: unixtoolbox.xhtml
===================================================================
RCS file: /Volumes/private/cvs/cb.vu/unixtoolbox.xhtml,v
retrieving revision 1.33
retrieving revision 1.34
diff -u -r1.33 -r1.34
--- unixtoolbox.xhtml	7 Apr 2010 16:36:27 -0000	1.33
+++ unixtoolbox.xhtml	22 Oct 2012 09:57:01 -0000	1.34
@@ -8,10 +8,10 @@
   <title>Unix Toolbox</title>
   <link rel="icon" href="data:image/x-icon;base64,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" />
   <meta name="author" content="Colin Barschel c@cb.vu" />
-  <meta name="copyright" content="Copyright (c) 2007-2009 Colin Barschel. Some rights reserved under Creative Commons [Attribution - Share Alike]" />
+  <meta name="copyright" content="Copyright (c) 2007-2012 Colin Barschel. Some rights reserved under Creative Commons [Attribution - Share Alike]" />
   <meta name="description" content="A collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users, a compact and practical reference." />
   <meta name="abstract" content="Unix Toolbox a compact and practical reference for sysadmins and advanced users." />
-  <meta name="subject" content="Unix Toolbox revision 14.2" />
+  <meta name="subject" content="Unix Toolbox revision 14.4" />
   <meta name="keywords" content="Unix Toolbox, Unix tools, Unix, FreeBSD, Linux, commands list, sysadmin, practical guide, advanced reference, common Linux tasks, syntax reminder, howtos, ssh tunnels, rsync, ssl certificates" />
   <style type="text/css" >
 /* basic CSS common to all media */
@@ -140,17 +140,20 @@
         text-align: justify;
     }
     h2 {
-        margin-bottom: 0.7em;
+        margin-bottom: 0.5em;
     }
     h3 {
-        margin-bottom: 0.5em;
+        margin-bottom: 0.3em;
+    }
+    h4 {
+        margin-bottom: 0.3em;
     }
     pre {
         font-size: 90%;
         margin: 0.3em 0 0.3em 0;
         padding: 0.2em 0 0.2em 0.4em;
         text-align: left;
-        line-height: 116%;
+        line-height: 115%;
         letter-spacing:-0.03em
     }
     a {
@@ -158,7 +161,7 @@
     }
     p.xrefp {  /* links below h1 headers */
         padding-top: 0;
-        margin: -0.9em 0 1.3em 0;
+        margin: -1em 0 1.3em 0;
         page-break-inside: avoid;
         page-break-after: avoid;
     }
@@ -219,11 +222,21 @@
     .fn {
         display: prince-footnote;
         counter-increment: footnote;
-        font-size: 80%;
+        font: caption;
+        font-stretch: normal;
+        letter-spacing: normal;
+        font-size: xx-small;
+        font-style: normal;
+        font-weight: normal;
+        text-decoration: none;
+        vertical-align: super;
     }
     .fn::footnote-call {
         content: counter(footnote);
         font-size: 80%;
+        font-style: normal;
+        font-weight: normal;
+        text-decoration: none;
         vertical-align: super;
         line-height: none
     }
@@ -403,10 +416,10 @@
 This document is a collection of Unix/Linux/BSD commands and tasks which are useful for IT work or for advanced users. This is a practical guide with concise explanations, however the reader is supposed to know what s/he is doing.<br /><br />
 </div>
 <div class="footerfirst">
-Unix Toolbox revision 14.2<br />
+Unix Toolbox revision 14.4<br />
 The latest version of this document can be found at <a href="http://cb.vu/unixtoolbox.xhtml">http://cb.vu/unixtoolbox.xhtml</a>. Replace .xhtml on the link with <a href="http://cb.vu/unixtoolbox.pdf">.pdf</a> for the PDF version and with <a href="http://cb.vu/unixtoolbox.book.pdf">.book.pdf</a> for the booklet version. On a duplex printer the booklet will create a small book ready to bind. <span class="web">This XHTML page can be converted into a nice PDF document with a CSS3 compliant application (see the <a class="xref" href="#bourneexample">script example</a>).</span> See also the <a href="http://cb.vu/unixtoolbox">about page</a>.<br />
 Error reports and comments are most welcome - <a href="mailto:c\at\cb.vu">c@cb.vu</a> Colin Barschel.
-<p class="copyright">&#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2009. <a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/">Some rights reserved under Creative Commons</a>.
+<p class="copyright">&#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2012. <a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/">Some rights reserved under Creative Commons</a>.
 </p>
 </div> 
 <!-- The table of content is displayed as a fixed vertical right menu
@@ -461,7 +474,7 @@
 <div class="pb" />
  <!-- <div class="main"> Every chapter is inside a div block for easy XML parsing -->
 <div id="sysinfo"><h1><a>System</a></h1>
-<p class="xrefp"><a class="xrefp" href="#hardwareinfo">Hardware</a> | <a class="xrefp" href="#loadstats">Statistics</a> | <a class="xrefp" href="#users">Users</a> | <a class="xrefp" href="#limits">Limits</a> | <a class="xrefp" href="#runlevels">Runlevels</a> | <a class="xrefp" href="#resetpasswd">root password</a> | <a class="xrefp" href="#compilekernel">Compile kernel</a> | <a class="xrefp" href="#grub">Repair grub</a></p>
+<p class="xrefp"><a class="xrefp" href="#hardwareinfo">Hardware</a> | <a class="xrefp" href="#loadstats">Statistics</a> | <a class="xrefp" href="#users">Users</a> | <a class="xrefp" href="#limits">Limits</a> | <a class="xrefp" href="#runlevels">Runlevels</a> | <a class="xrefp" href="#resetpasswd">root password</a> | <a class="xrefp" href="#compilekernel">Compile kernel</a> | <a class="xrefp" href="#grub">Repair grub</a> | <a class="xrefp" href="#sysmisc">Misc</a></p>
 Running kernel and system information
 <pre># uname -a                           <span class="cmt"># Get the kernel version (and BSD version)</span>
 # lsb_release -a                     <span class="cmt"># Full release info of any LSB distribution</span>
@@ -517,6 +530,7 @@
 # systat -netstat 1                  <span class="cmt"># BSD active network connections</span>
 # systat -ifstat 1                   <span class="cmt"># BSD network traffic through active interfaces</span>
 # systat -iostat 1                   <span class="cmt"># BSD CPU and and disk throughput</span>
+# ipcs -a                            <span class="cmt"># information on System V interprocess</span>
 # tail -n 500 /var/log/messages      <span class="cmt"># Last 500 kernel/syslog messages</span>
 # tail /var/log/warn                 <span class="cmt"># System warnings messages see syslog.conf</span>
 </pre>
@@ -589,7 +603,7 @@
 # sysctl net.inet.ip.portrange.last=50000 <span class="cmt"># Default is 1024-5000</span>
 # netstat -m                         <span class="cmt"># network memory buffers statistics</span>
 </pre>
-See The <a href="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-kernel-limits.html">FreeBSD handbook Chapter 11</a><span class="fn">http://www.freebsd.org/handbook/configtuning-kernel-limits.html</span> for details.
+See The <a href="http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/configtuning-kernel-limits.html">FreeBSD handbook Chapter 11</a><span class="fn">http://www.freebsd.org/handbook/configtuning-kernel-limits.html</span> for details. And also <a href="http://serverfault.com/questions/64356/freebsd-performance-tuning-sysctls-loader-conf-kernel">FreeBSD performance tuning</a><span class="fn">http://serverfault.com/questions/64356/freebsd-performance-tuning-sysctls-loader-conf-kernel</span>
 
 <h3>Solaris</h3>
 The following values in <code>/etc/system</code> will increase the maximum file descriptors per proc:
@@ -744,7 +758,13 @@
 # chroot /mnt                        <span class="cmt"># change root to the linux partition</span>
 # grub-install /dev/sda              <span class="cmt"># reinstall grub with your old settings</span>
 </pre>
-
+<h2 id="sysmisc">Misc</h2>
+Disable OSX virtual memory (repeat with <code>load</code> to re-enable). Faster system, but a little risky.
+<pre># sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.dynamic_pager.plist
+# sleep 3600; pmset sleepnow           <span class="cmt"># go to standby in one hour (OSX)</span>
+# defaults write -g com.apple.mouse.scaling -float 8
+                                     <span class="cmt"># OSX mouse acceleration (use -1 to reverse)</span>
+</pre>
 </div>
 
 <div id="processes"><h1><a>Processes</a></h1>
@@ -752,7 +772,7 @@
 <h2 id="ps">Listing and PIDs</h2>
 Each process has a unique number, the PID. A list of all running process is retrieved with <code>ps</code>.
 <pre># ps -auxefw                         <span class="cmt"># Extensive list of all running process</span></pre>
-However more typical usage is with a pipe or with <code>pgrep</code>:
+However more typical usage is with a pipe or with <code>pgrep</code> (for OS X install <code>proctools</code> from <a class="xref" href="#macports">MacPorts</a>):
 <pre># ps axww | grep cron
   586  ??  Is     0:01.48 /usr/sbin/cron -s
 # ps axjf                            <span class="cmt"># All processes in a tree format (Linux)</span>
@@ -789,7 +809,7 @@
 </pre>
 
 <h2 id="bgfg">Background/Foreground</h2>
-When started from a shell, processes can be brought in the background and back to the foreground with [Ctrl]-[Z] (^Z), <code>bg</code> and <code>fg</code>. List the processes with <code>jobs</code>.
+When started from a shell, processes can be brought in the background and back to the foreground with [Ctrl]-[Z] (^Z), <code>bg</code> and <code>fg</code>. List the processes with <code>jobs</code>. When needed detach from the terminal with <code>disown</code>.
 <pre># ping cb.vu > ping.log
 ^Z                                   <span class="cmt"># ping is suspended (stopped) with [Ctrl]-[Z]</span> 
 # bg                                 <span class="cmt"># put in background and continues running</span>
@@ -798,6 +818,12 @@
 [2]  + 36233 Suspended (tty output)        top
 # fg %2                              <span class="cmt"># Bring process 2 back in foreground</span>
 </pre>
+<pre># make                               <span class="cmt"># start a long compile job but need to leave the terminal</span>
+^Z                                   <span class="cmt"># suspended (stopped) with [Ctrl]-[Z]</span> 
+# bg                                 <span class="cmt"># put in background and continues running</span>
+# disown -h %1                       <span class="cmt"># detatch process from terminal, won't be killed at logout</span>
+</pre>
+No straight forward way to re-attach the process to a new terminal, try <a href="https://github.com/nelhage/reptyr">reptyr</a> (Linux).<br />
 Use <code>nohup</code> to start a process which has to keep running when the shell is closed (immune to hangups).
 <pre># nohup ping -i 60 > ping.log &amp;
 </pre>
@@ -961,11 +987,22 @@
 <h3 id="remount">Remount</h3>
 Remount a device without unmounting it. Necessary for fsck for example
 <pre># mount -o remount,ro /              <span class="cmt"># Linux</span>
-# mount -o ro /                      <span class="cmt"># FreeBSD</span>
+# mount -o ro -u /                   <span class="cmt"># FreeBSD</span>
+</pre>
+Copy the raw data from a cdrom into an iso image (default 512 blocksize might cause problems):
+<pre># dd if=/dev/cd0c of=file.iso bs=2048</pre>
+<h3 id="virtualbox">Virtualbox</h3>
+Allow a share on the host:
+<pre># VBoxManage sharedfolder add "GuestName" --name "share" --hostpath "C:\hostshare"</pre>
+Mount share on guest (linux, FreeBSD)
+<pre># sudo mount -t vboxsf share /home/vboxshare <span class="cmt"># -o uid=1000,gid=1000 (as appropriate)</span>
+share /home/colin/share vboxsf defaults,uid=colin 0 0 <span class="cmt"># fstab entry</span>
+</pre>
+<h3 id="osxdisk">OSX</h3>
+<pre># diskutil list                      <span class="cmt"># List the partitions of a disk</span>
+# diskutil unmountDisk /dev/disk1    <span class="cmt"># Unmount an entire disk (all volumes)</span>
+# chflags hidden ~/Documents/folder  <span class="cmt"># Hide folder (reverse with unhidden)</span>
 </pre>
-Copy the raw data from a cdrom into an iso image:
-<pre># dd if=/dev/cd0c of=file.iso</pre>
-
 <h2 id="addswap">Add swap on-the-fly</h2>
 Suppose you need more swap (right now), say a 2GB file /swap2gb (Linux only).
 <pre># dd if=/dev/zero of=/swap2gb bs=1024k count=2000
@@ -977,11 +1014,16 @@
 
 <h2 id="mountsmb">Mount an SMB share</h2>
 Suppose we want to access the SMB share myshare on the computer smbserver, the address as typed on a Windows PC is \\smbserver\myshare\. We mount on /mnt/smbshare. Warning> cifs wants an IP or DNS name, not a Windows name.
-<h3>Linux</h3>
+<h3>Linux/OSX</h3>
 <pre># smbclient -U user -I 192.168.16.229 -L //smbshare/    <span class="cmt"># List the shares</span>
 # mount -t smbfs -o username=winuser //smbserver/myshare /mnt/smbshare
 # mount -t cifs -o username=winuser,password=winpwd //192.168.16.229/myshare /mnt/share
 </pre>
+Mound Samba share through ssh tunnel
+<pre># ssh -C -f -N -p 20022 -L 445:127.0.0.1:445 me@server  <span class="cmt"># connect on 20022, tunnel 445</span>
+# mount -t smbfs //colin@localhost/colin ~/mnt
+# mount_smbfs //colin:mypassword@127.0.0.1/private /Volumes/private <span class="cmt"># I use this on OSX + ssh</span>
+</pre>
 Additionally with the package mount.cifs it is possible to store the credentials in a file, for example <code>/home/user/.smb</code>:
 <pre>username=winuser
 password=winpwd
@@ -996,6 +1038,7 @@
 </pre>
 
 <h2 id="mountimg">Mount an image</h2>
+<pre># hdiutil mount image.iso                               <span class="cmt"># OS X</span></pre>
 <h3>Linux loop-back</h3>
 <pre># mount -t iso9660 -o loop file.iso /mnt                <span class="cmt"># Mount a CD image</span>
 # mount -t ext3 -o loop file.img /mnt                   <span class="cmt"># Mount an image with ext3 fs</span>
@@ -1022,7 +1065,8 @@
 This will copy the cd or DVD sector for sector. Without <code>conv=notrunc</code>, the image will be smaller if there is less content on the cd. See below and the <a class="xref" href="#dd">dd examples</a>.
 <pre># dd if=/dev/hdc of=/tmp/mycd.iso bs=2048 conv=notrunc</pre>
 Use mkisofs to create a CD/DVD image from files in a directory. To overcome the file names restrictions: -r enables the Rock Ridge extensions common to UNIX systems, -J enables Joliet extensions used by Microsoft systems. -L allows ISO9660 filenames to begin with a period.
-<pre># mkisofs -J -L -r -V TITLE -o imagefile.iso /path/to/dir</pre>
+<pre># mkisofs -J -L -r -V TITLE -o imagefile.iso /path/to/dir
+# hdiutil makehybrid -iso -joliet -o dir.iso dir/       <span class="cmt"># OS X</span></pre>
 On FreeBSD, mkisofs is found in the ports in sysutils/cdrtools.
 <h3>Burn a CD/DVD ISO image</h3>
 <h4>FreeBSD</h4>
@@ -1207,9 +1251,15 @@
 # ifconfig eth0 hw ether 00:01:02:03:04:05      <span class="cmt"># Linux</span>
 # ifconfig fxp0 link 00:01:02:03:04:05          <span class="cmt"># FreeBSD</span>
 # ifconfig hme0 ether 00:01:02:03:04:05         <span class="cmt"># Solaris</span>
-# sudo ifconfig en0 ether 00:01:02:03:04:05     <span class="cmt"># Mac OS X Tiger</span>
-# sudo ifconfig en0 lladdr 00:01:02:03:04:05    <span class="cmt"># Mac OS X Leopard</span>
+# sudo ifconfig en0 ether 00:01:02:03:04:05     <span class="cmt"># OS X Tiger, Snow Leopard LAN*</span>
+# sudo ifconfig en0 lladdr 00:01:02:03:04:05    <span class="cmt"># OS X Leopard</span>
 </pre>
+*Typical wireless interface is <code>en1</code> and needs do disassociate from
+any network first (<a href="http://osxdaily.com/2008/01/17/how-to-spoof-your-mac-address-in-mac-os-x/">osxdaily howto</a>).
+<pre># echo "alias airport='/System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport'"\
+>> ~/.bash_profile         <span class="cmt"># or symlink to /usr/sbin</span>
+# airport -z               <span class="cmt"># Disassociate from wireless networks</span>
+# airport -I               <span class="cmt"># Get info from wireless network</span></pre>
 Many tools exist for Windows. For example <a href="http://ntsecurity.nu/toolbox/etherchange/">etherchange</a><span class="fn">http://ntsecurity.nu/toolbox/etherchange</span>. Or look for "Mac Makeup", "smac".
 
 <h2 id="ports">Ports in use</h2>
@@ -1528,6 +1578,7 @@
 
 <div id="ssh"><h1><a>SSH SCP</a></h1>
 <p class="xrefp"><a class="xrefp" href="#publickey">Public key</a> | <a class="xrefp" href="#sshfingerprint">Fingerprint</a> | <a class="xrefp" href="#scp">SCP</a> | <a class="xrefp" href="#sshtunnel">Tunneling</a></p>
+See other tricks <a href="http://blog.urfix.com/25-ssh-commands-tricks/">25 ssh cmd</a><span class="fn">http://blog.urfix.com/25-ssh-commands-tricks/</span>
 <h2 id="publickey">Public key authentication</h2>
 Connect to a host without password using public key authentication. The idea is to append your public key to the authorized_keys2 file on the remote host. For this example let's <b>connect <i>host-client</i> to <i>host-server</i></b>, the key is generated on the client. With cygwin you might have to create your home directoy and the .ssh directory with <code># mkdir -p /home/USER/.ssh</code>
 <ul>
@@ -1755,6 +1806,8 @@
 <pre># rsync -a /home/colin/ /backup/colin/                <span class="cmt"># "archive" mode. e.g keep the same</span>
 # rsync -a /var/ /var_bak/
 # rsync -aR --delete-during /home/user/ /backup/      <span class="cmt"># use relative (see below)</span>
+# /opt/local/bin/rsync -azv --iconv=UTF-8-MAC,UTF-8 ~/Music/flac/ me@server:/dst/
+                           <span class="cmt"># convert filenames OSX UTF8 to Windows UTF8</span>
 </pre>
 Same as before but over the network and with compression. Rsync uses SSH for the transport per default and will use the ssh key if they are set. Use ":" as with SCP. A typical remote copy:
 <pre># rsync -axSRzv /home/user/ user@server:/backup/user/ <span class="cmt"># Copy to remote</span>
@@ -1943,7 +1996,7 @@
 </div>
 
 <div id="cryptpart"><h1><a>Encrypt Partitions</a></h1>
-<p class="xrefp"><a class="xrefp" href="#wluks">Linux with LUKS</a> | <a class="xrefp" href="#woluks">Linux dm-crypt only</a> | <a class="xrefp" href="#bsdgeli">FreeBSD GELI</a> | <a class="xrefp" href="#bsdpwd">FBSD pwd only</a></p>
+<p class="xrefp"><a class="xrefp" href="#wluks">Linux with LUKS</a> | <a class="xrefp" href="#woluks">Linux dm-crypt only</a> | <a class="xrefp" href="#bsdgeli">FreeBSD GELI</a> | <a class="xrefp" href="#bsdpwd">FBSD pwd only</a> | <a class="xrefp" href="#osxcrypt">OS X image</a></p>
 There are (many) other alternative methods to encrypt disks, I only show here the methods I know and use. Keep in mind that the security is only good as long the OS has not been tempered with. An intruder could easily record the password from the keyboard events. Furthermore the data is freely accessible when the partition is <i>attached</i> and will not prevent an intruder to have access to it in this state.
 <h2 id="dm-crypt">Linux</h2>
 Those instructions use the Linux <code>dm-crypt</code> (device-mapper) facility available on the 2.6 kernel. In this example, lets encrypt the partition <code>/dev/sdc1</code>, it could be however any other partition or disk, or USB or a file based partition created with <code>losetup</code>. In this case we would use <code>/dev/loop0</code>. See <a href="#losetup">file image partition</a>. The device mapper uses labels to identify a partition. We use <code>sdc1</code> in this example, but it could be any string.
@@ -2025,6 +2078,8 @@
 # mount /dev/md0.eli /mnt
 </pre>
 </div>
+<h2 id="osxcrypt">OS X Encrypted Disk Image</h2>
+Don't know by command line only. See <a href="https://wiki.thayer.dartmouth.edu/display/computing/Creating+a+Mac+OS+X+Encrypted+Disk+Image">OS X Encrypted Disk Image</a><span class="fn">https://wiki.thayer.dartmouth.edu/display/computing/Creating+a+Mac+OS+X+Encrypted+Disk+Image</span> and <a href="http://support.apple.com/kb/ht1578">Apple support</a><span class="fn">http://support.apple.com/kb/ht1578</span>
 
 <div id="certs"><h1><a>SSL Certificates</a></h1>
 So called SSL/TLS certificates are cryptographic public key certificates and are composed of a public and a private key. The certificates are used to authenticate the endpoints and encrypt the data. They are used for example on a web server (https) or mail server (imaps).
@@ -2328,7 +2383,7 @@
 </div>
 
 <div id="other"><h1><a>Useful Commands</a></h1>
-<p class="xrefp"><a class="xrefp" href="#less">less</a> | <a class="xrefp" href="#vi">vi</a> | <a class="xrefp" href="#mail">mail</a> | <a class="xrefp" href="#tar">tar</a> | <a class="xrefp" href="#dd">dd</a> | <a class="xrefp" href="#screen">screen</a> | <a class="xrefp" href="#find">find</a> | <a class="xrefp" href="#misccmd">Miscellaneous</a></p>
+<p class="xrefp"><a class="xrefp" href="#less">less</a> | <a class="xrefp" href="#vi">vi</a> | <a class="xrefp" href="#mail">mail</a> | <a class="xrefp" href="#tar">tar</a> | <a class="xrefp" href="#zip">zip</a> | <a class="xrefp" href="#dd">dd</a> | <a class="xrefp" href="#screen">screen</a> | <a class="xrefp" href="#find">find</a> | <a class="xrefp" href="#misccmd">Miscellaneous</a></p>
 <h2 id="less">less</h2>
 The <code>less</code> command displays a text document on the console. It is present on most installation.
 <pre># less unixtoolbox.xhtml</pre>
@@ -2413,6 +2468,7 @@
                                 <span class="cmt"># remove leading path gallery2 and extract into gallery</span>
 # tar --strip-components 1 -zxvf gallery2.tgz -C gallery/ 
 # tar -xjf home.tbz home/colin/file.txt    <span class="cmt"># Restore a single file</span>
+# tar -xOf home.tbz home/colin/file.txt    <span class="cmt"># Print file to stdout (no extraction)</span>
 </pre>
 <h3>More advanced</h3>
 <pre># tar c dir/ | gzip | ssh user@remote 'dd of=dir.tgz' <span class="cmt"># arch dir/ and store remotely.</span>
@@ -2421,9 +2477,20 @@
 # tar -cf - -C /etc . | ssh user@remote tar xpf - -C /backup/etc      <span class="cmt"># Remote copy.</span>
 # tar -czf home.tgz --exclude '*.o' --exclude 'tmp/' home/
 </pre>
+<h2 id="zip">zip/unzip</h2>
+Zip files can be easier to share with Windows.
+<pre># zip -r fileName.zip /path/to/dir                    <span class="cmt"># zip dir into file fileName.zip</span>
+# unzip fileName.zip                                  <span class="cmt"># uncompress zip file</span>
+# unzip -l fileName.zip                               <span class="cmt"># list files inside archive</span>
+# unzip -c fileName.zip fileinside.txt                <span class="cmt"># print one file to stdout (no extraction)</span>
+# unzip fileName.zip fileinside.txt                   <span class="cmt"># extract one file only</span>
+</pre>
+
 <h2 id="dd">dd</h2>
 The program <code>dd</code> (disk dump or destroy disk or see <a href="http://roesler-ac.de/wolfram/acro/credits.htm">the meaning of dd</a>) is used to copy partitions and disks and for other copy tricks. Typical usage:
-<pre># dd if=&lt;source&gt; of=&lt;target&gt; bs=&lt;byte size&gt; conv=&lt;conversion&gt;</pre>
+<pre># dd if=&lt;source&gt; of=&lt;target&gt; bs=&lt;byte size&gt; conv=&lt;conversion&gt;
+# kill -INFO PID                                      <span class="cmt"># View dd progress (FreeBSD, OSX)</span>
+</pre>
 Important conv options:
 <ul style="list-style-type: none;">
   <li><code>notrunc</code> &#160; &#160; &#160; do not truncate the output file, all zeros will be written as zeros.</li>
@@ -2441,6 +2508,8 @@
 # gunzip -dc ad4s3e.gz | ssh eedcoba@host 'dd of=/dev/ad0s3e bs=1M'
 # dd if=/dev/ad0 of=/dev/ad2 skip=1 seek=1 bs=4k conv=noerror    <span class="cmt"># Skip MBR</span>
     <span class="cmt"># This is necessary if the destination (ad2) is smaller.</span>
+# dd if=/vm/FreeBSD-8.2-RELEASE-amd64-memstick.img of=/dev/disk1 bs=10240 conv=sync
+    <span class="cmt"># Copy FreeBSD image to USB memory stick</span>
 </pre>
 
 <h3>Recover</h3>
@@ -2499,6 +2568,16 @@
   <li><strong>Ctrl-a a</strong> to clear a missed Ctrl-a</li>
   <li><strong>Ctrl-a Ctrl-d</strong> to disconnect and leave the session running in the background</li>
   <li><strong>Ctrl-a x</strong> lock the screen terminal with a password</li>
+  <li><strong>Ctrl-a [</strong> enter into <strong>scrollback</strong> mode, exit with <strong>esc</strong>.<br />
+  Use <code>echo "defscrollback 5000" > ~/.screenrc</code> to increase buffer (default is 100)</li>
+  <ul>
+    <li><strong>C-u</strong> Scrolls a half page up</li>
+    <li><strong>C-b</strong> Scroll a full page up</li>
+    <li><strong>C-d</strong> Scroll a half page down</li>
+    <li><strong>C-f</strong> Scroll a full page down</li>
+    <li><strong>/</strong> Search forward</li>
+    <li><strong>?</strong> Search backward</li>
+  </ul>
 </ul>
 The screen session is terminated when the program within the running terminal is closed and you logout from the terminal.
 
@@ -2526,13 +2605,17 @@
 # find . -size +10M -size -50M -print
 # find /usr/ports/ -name work -type d -print -exec rm -rf {} \;  <span class="cmt"># Clean the ports</span>
       <span class="cmt"># Find files with SUID; those file are vulnerable and must be kept secure</span>
-# find / -type f -user root -perm -4000 -exec ls -l {} \; 
+# find / -type f -user root -perm -4000 -exec ls -l {} \;
+# find flac/ -iname *.flac -print -size +500k -exec /Applications/Fluke.app/Contents/MacOS/Fluke {} \;
+                                      <span class="cmt"># I use above to add flac files to iTunes on OSX</span>
 </pre>
 Be careful with xarg or exec as it might or might not honor quotings and can return wrong results when files or directories contain spaces. In doubt use "-print0 | xargs -0" instead of "| xargs". The option -print0 must be the last in the find command. See this nice <a href="http://www.hccfl.edu/pollock/Unix/FindCmd.htm">mini tutorial for find</a><span class="fn">http://www.hccfl.edu/pollock/Unix/FindCmd.htm</span>.
 <pre># find . -type f | xargs ls -l       <span class="cmt"># Will not work with spaces in names</span>
 # find . -type f -print0 | xargs -0 ls -l  <span class="cmt"># Will work with spaces in names</span>
 # find . -type f -exec ls -l '{}' \; <span class="cmt"># Or use quotes '{}' with -exec</span>
 </pre>
+Duplicate directory tree:
+<pre># find . -type d -exec mkdir -p /tmp/new_dest/{} \;</pre>
 <h2 id="misccmd">Miscellaneous</h2>
 <pre># which command                      <span class="cmt"># Show full path name of command</span>
 # time command                       <span class="cmt"># See how long a command takes to execute</span>
@@ -2550,12 +2633,15 @@
 # mkdir -p project/{bin,src,obj,doc/{html,man,pdf},debug/some/more/dirs}
 # rmdir /path/to/dir                 <span class="cmt"># Remove directory</span>
 # rm -rf /path/to/dir                <span class="cmt"># Remove directory and its content (force)</span>
+# rm -- -badchar.txt                 <span class="cmt"># Remove file whitch starts with a dash (-)</span>
 # cp -la /dir1 /dir2                 <span class="cmt"># Archive and hard link files instead of copy</span>
 # cp -lpR /dir1 /dir2                <span class="cmt"># Same for FreeBSD</span>
 # cp unixtoolbox.xhtml{,.bak}        <span class="cmt"># Short way to copy the file with a new extension</span>
 # mv /dir1 /dir2                     <span class="cmt"># Rename a directory</span>
 # ls -1                              <span class="cmt"># list one file per line</span>
 # history | tail -50                 <span class="cmt"># Display the last 50 used commands</span>
+# cd -                               <span class="cmt"># cd to previous ($OLDPWD) directory</span>
+# /bin/ls| grep -v .py | xargs rm -r <span class="cmt"># pipe file names to rm with xargs</span>
 </pre>
 Check file hashes with openssl. This is a nice alternative to the commands <code>md5sum</code> or <code>sha1sum</code> (FreeBSD uses <code>md5</code> and <code>sha1</code>) which are not always installed.
 <pre># openssl md5 file.tar.gz            <span class="cmt"># Generate an md5 checksum from file</span>
@@ -2581,7 +2667,7 @@
 <pre># rpm -i pkgname.rpm                 <span class="cmt"># install the package (RH, SuSE, RPM based)</span>
 # rpm -e pkgname                     <span class="cmt"># Remove package</span>
 </pre>
-<h3>SuSE zypper <a href="http://en.opensuse.org/Zypper/Usage">(see doc and cheet sheet)</a><span class="fn">http://en.opensuse.org/Zypper/Usage</span></h3>
+<h3>SuSE zypper <a href="http://en.opensuse.org/SDB:Zypper_usage">(see doc and cheet sheet)</a><span class="fn">http://en.opensuse.org/SDB:Zypper_usage</span></h3>
 <pre># zypper refresh                     <span class="cmt"># Refresh repositorie</span>
 # zypper install vim                 <span class="cmt"># Install the package vim</span>
 # zypper remove vim                  <span class="cmt"># Remove the package vim</span>
@@ -2623,11 +2709,25 @@
 # make install distclean             <span class="cmt"># Install and cleanup (also see man ports)</span>
 # make package                       <span class="cmt"># Make a binary package of this port</span>
 # pkgdb -F                           <span class="cmt"># Fix the package registry database</span>
+# portsclean -C -DD                  <span class="cmt"># Clean workdir and distdir (part of portupgrade)</span>
+</pre>
+<h3 id="macports">OS X <a href="http://guide.macports.org/">MacPorts</a><span class="fn">http://guide.macports.org/</span> (use sudo for all commands)</h3>
+<pre># port selfupdate                    <span class="cmt"># Update the port tree (safe)</span>
+# port installed                     <span class="cmt"># List installed ports</span>
+# port deps apache2                  <span class="cmt"># List dependencies for this port</span>
+# port search pgrep                  <span class="cmt"># Search for string</span>
+# port install proctools             <span class="cmt"># Install this package</span>
+# port variants ghostscript          <span class="cmt"># List variants of this port</span>
+# port -v install ghostscript +no_x11<span class="cmt"># -no_x11 for negative value</span>
+# port clean --all ghostscript       <span class="cmt"># Clean workdir of port</span>
+# port upgrade ghostscript           <span class="cmt"># Upgrade this port</span>
+# port uninstall ghostscript         <span class="cmt"># Uninstall this port</span>
+# port -f uninstall installed        <span class="cmt"># Uninstall everything</span>
 </pre>
-
 <h2 id="librarypath">Library path</h2>
 Due to complex dependencies and runtime linking, programs are difficult to copy to an other system or distribution. However for small programs with little dependencies, the missing libraries can be copied over. The runtime libraries (and the missing one) are checked with <code>ldd</code> and managed with <code>ldconfig</code>.
 <pre># ldd /usr/bin/rsync                 <span class="cmt"># List all needed runtime libraries</span>
+# otool -L /usr/bin/rsync            <span class="cmt"># OS X equivalent to ldd</span>
 # ldconfig -n /path/to/libs/         <span class="cmt"># Add a path to the shared libraries directories</span>
 # ldconfig -m /path/to/libs/         <span class="cmt"># FreeBSD</span>
 # LD_LIBRARY_PATH                    <span class="cmt"># The variable set the link library path</span>
@@ -2645,7 +2745,10 @@
 # iconv -l                           <span class="cmt"># List known coded character sets</span>
 </pre>
 Without the -f option, iconv will use the local char-set, which is usually fine
-if the document displays well.
+if the document displays well.<br />
+Convert filenames from one encoding to another (not file content). Works also if only some files are already utf8
+<pre># convmv -r -f utf8 --nfd -t utf8 --nfc /dir/* --notest</pre>
+
 <h2 id="newlines">Unix - DOS newlines</h2>
 Convert DOS (CR/LF) to Unix (LF) newlines and back <b>within a Unix shell</b>. See also <code>dos2unix</code> and <code>unix2dos</code> if you have them.
 <pre># sed 's/.$//' dosfile.txt > unixfile.txt                  <span class="cmt"># DOS to UNIX</span>
@@ -2656,7 +2759,9 @@
 <pre># sed -n p unixfile.txt > dosfile.txt
 # awk 1 unixfile.txt > dosfile.txt   <span class="cmt"># UNIX to DOS (with a cygwin shell)</span>
 </pre>
-
+Remove <code>^M</code> mac newline and replace with unix new line. To get a <code>^M</code> use CTL-V then CTL-M
+<pre># tr '^M' '\n' &lt; macfile.txt
+</pre>
 <h2>PDF to Jpeg and concatenate PDF files</h2>
 Convert a PDF document with <code>gs</code> (GhostScript) to jpeg (or png) images for each page. Also much shorter with <code>convert</code> and <code>mogrify</code> (from ImageMagick or GraphicsMagick).
 <pre># gs -dBATCH -dNOPAUSE -sDEVICE=jpeg -r150 -dTextAlphaBits=4 -dGraphicsAlphaBits=4 \
@@ -2670,6 +2775,11 @@
 <pre># gs -q -sPAPERSIZE=a4 -dNOPAUSE -dBATCH -sDEVICE=pdfwrite -sOutputFile=all.pdf \
 file1.pdf file2.pdf ...              <span class="cmt"># On Windows use '#' instead of '='</span>
 </pre>
+Extract images from pdf document using <code>pdfimages</code> from poppler or <a href="http://foolabs.com/xpdf/download.html"><code>xpdf</code></a><span class="fn">http://foolabs.com/xpdf/download.html</span>
+<pre># pdfimages document.pdf dst/        <span class="cmt"># extract all images and put in dst</span>
+# yum install poppler-utils          <span class="cmt"># install poppler-utils if needed. or:</span>
+# apt-get install poppler-utils
+</pre>
 <h2>Convert video</h2>
 Compress the Canon digicam video with an mpeg4 codec and repair the crappy sound.
 <pre># mencoder -o videoout.avi -oac mp3lame -ovc lavc -srate 11025 \
@@ -2768,7 +2878,7 @@
 <span class="cmt">mysql></span> FLUSH PRIVILEGES;
 </pre>
 <h3>Grant remote access</h3>
-Remote access is typically permitted for a database, and not all databases. The file <code>/etc/my.cnf</code> contains the IP address to bind to. Typically comment the line <code>bind-address =</code> out.
+Remote access is typically permitted for a database, and not all databases. The file <code>/etc/my.cnf</code> contains the IP address to bind to. (On FreeBSD <code>my.cnf</code> not created per fedault, copy one <code>.cnf</code> file from <code>/usr/local/share/mysql</code> to <code>/usr/local/etc/my.cnf</code>) Typically comment the line <code>bind-address =</code> out.
 <pre># mysql -u root mysql
 <span class="cmt">mysql></span> GRANT ALL ON bobdb.* TO bob@'xxx.xxx.xxx.xxx' IDENTIFIED BY 'PASSWORD';
 <span class="cmt">mysql></span> REVOKE GRANT OPTION ON foo.* FROM bar@'xxx.xxx.xxx.xxx';
@@ -2973,8 +3083,12 @@
 <span class="pp">mypath</span>=${<span class="pp">mypath</span>}/file.txt
 echo ${<span class="pp">mypath</span>##*/}                           <span class="cmt"># Display the filename only</span>
 echo ${<span class="pp">mypath</span>%%.*}                           <span class="cmt"># Full path without extention</span>
+foo=/tmp/my.dir/filename.tar.gz
+path = ${foo%/*}                             <span class="cmt"># Full path without extention</span>
 <span class="pp">var2</span>=${<span class="pp">var</span>:=string}                          <span class="cmt"># Use var if set, otherwise use string
                                              # assign string to var and then to var2.</span>
+size=$(stat -c%s "$file")                    <span class="cmt"># get file size in bourne script</span>
+filesize=${size:=-1}
 </pre>
 
 <h3>Constructs</h3>
@@ -3230,7 +3344,7 @@
 <!-- <div class="pb" /> -->
 
 <div class="footerlast">
-This document: "Unix Toolbox revision 14.2" is licensed under a <a rel="nofollow" href="http://creativecommons.org/licenses/by-sa/3.0/">Creative Commons Licence [Attribution - Share Alike]</a>. &#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2009. Some rights reserved.
+This document: "Unix Toolbox revision 14.4" is licensed under a <a rel="nofollow" href="http://creativecommons.org/licenses/by-sa/3.0/">Creative Commons Licence [Attribution - Share Alike]</a>. &#169; <a href="mailto:c_at_cb.vu">Colin Barschel</a> 2007-2012. Some rights reserved.
 </div>
 
 </body>