It’s dangerous to go alone!! Take This.

\

It’s dangerous to go alone!! Take This.

COMMAND LINE BASICS EMBRACE THE TEXT INTERFACE

WHAT CAN I DO WITH IT?

▸Automate

▸Execute

▸Improve efficiency

▸Great for pranking! (Don't actually do this)

IT’S DANGEROUS TO GO ALONE, TAKE THIS: A TREASURE-FILLED WORKSHOP FOR NEW MAC ADMINS

GOT ANY SPECIFICS?

▸ Check uptime

▸ Change permissions

▸ Batch rename files

▸ Change preference settings

▸ Install software

▸ Look at logs

▸ Check running processes

▸ Format drives

▸ Configure Filevault

▸ Locate large files

▸ Run software updates

▸ Restart/shut down computer

▸ Check hardware specifications

▸ All of the above remotely via ssh


HOW DO I GET STARTED?

▸ Man pages

▸ man <command> (also try <command> --help)

▸ which

▸ w - shows uptime and what users have logged in (remotely or locally)

▸ Some commands can be destructive or limit access: Use caution

▸ rm <POSIX file path>


NAVIGATING AT THE COMMANDLINE

▸ ctrl+a - return the cursor to the beginning of the line

▸ ctrl+e - move the cursor to the end of the line

▸ ctrl+c - cancel the running command

▸ Tab completion - less flaky autocorrect for the terminal

▸ Up and down arrows - scroll through previously entered commands.

▸ Clear - clears terminal window

▸ * - Wildcard: *.pdf *resume*, picture*,etc


GLOBBING, AN INTERLUDE

The glob command, short for global, originates in the earliest versions of Bell Labs' Unix[1]. The command interpreters of the early versions of Unix (1st through 6th Editions, 1969–75) relied on a separate program to expand wildcard characters in unquoted arguments to a command: /etc/glob. That program performed the expansion and supplied the expanded list of file paths to the command for execution.

Later, this functionality was provided as a library function, glob(), used by programs such as the shell. - Wikipedia: Glob_(programming)


GLOBBING, AN INTERLUDE


The common syntax, in order of usefulness (IMHO)

*

[abc] [012]

[a-z]/[0-9]

[!234]

[!e-j]

?

NAVIGATION RESUMED

▸ pwd - where am i? (print working directory)

▸ cd - change directory, can use full path or relative path

▸ ~/ - start with the current user's home directory

▸ ls - list, switches allow for different info or recursive directory traversal

▸ .. - go up a level

▸ mkdir - make directory

▸ rm - remove file or directory

▸ open - open specified path in finder (or launch applications)


\

NAVIGATION EXERCISE

▸ Navigate to your Documents folder or a folder inside your Documents folder

▸ ls (-a/-l/-O/-e/-R) or all of the above

▸ open ../

▸ cd /Applications/<pick one>/Contents/

▸ ls


w osascript -e "set Volume 5" say -v Fred "I am groot"EXTRA CREDIT

READING TEXT

▸ cat - display text from file to shell can also conCATenate files

▸ head - display lines from the beginning of a file

▸ tail - display lines from the end of a file

▸ more / less - pagers. Allow reading of large files a page at a time

▸ | - Pipe the output of one command to another command

▸ <, <<, >, >> - read in files or direct input and write out files (replacing or append)


SEARCHING, BROWSING AND MANIPULATING TEXT AND FILES

▸ grep - searches for patterns in input and prints lines that match

▸ wc - counts words, characters and bytes

▸ sed - stream editor

▸ awk - pattern directed scanning and processing language

▸ nano - simple command line based text editor (launch with -w)

▸ emacs/vim - complex command line based text editors that also have graphical editors available. Extensive use of key commands.


SEARCHING TEXT EXERCISE


cat /usr/share/dict/words | grep kitten



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | grep kittenkittenkittendomkittenheartedkittenhoodkittenishkittenishlykittenishnesskittenlesskittenship



cat /usr/share/dict/words | grep Kitten



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | grep Kittenjpiperbe@jpiperbe-retina:~ :(



cat /usr/share/dict/words | grep -i Kitten



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | grep -i Kittenkittenkittendomkittenheartedkittenhoodkittenishkittenishlykittenishnesskittenlesskittenship



cat /usr/share/dict/words | grep -c kitten



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | grep -c kitten9



cat /usr/share/dict/words | grep -c kit



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | grep -c kit167



cat /usr/share/dict/words | grep kit | more





grep -c kitten < /usr/share/dict/words



jpiperbe@jpiperbe-retina:~ :) grep -c kitten < /usr/share/dict/words 9



cat /usr/share/dict/words | grep -A2 -B2 kitten



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | grep -A2 -B2 kittenKittatinnykittelkittenkittendomkittenheartedkittenhoodkittenishkittenishlykittenishnesskittenlesskittenshipkitterkittereen



cat /usr/share/dict/words | wc -w



jpiperbe@jpiperbe-retina:~ :) cat /usr/share/dict/words | wc -w235886

SEARCHING FILES


ls ~/

SEARCHING FILES


ls -a ~/

SEARCHING FILES


ls -R ~/Documents/*.pdf

SEARCHING FILES


SEARCHING FILES


ls -R ~/Documents | grep -c .pdf

SEARCHING FILES


SEARCHING FILES


??????????

SEARCHING FILES


find ~/Documents -name '*.pdf'

SEARCHING FILES


find ~/Documents -name '*.pdf' | grep -c .pdf

SEARCHING FILES


SEARCHING FILES


??????????

SEARCHING FILES


FIND/DU

▸find / -name .DS_Store -delete ▸find ~/ -size +500M ▸find ~/-size +1G▸du -sh ~ /*▸du -sh ~/


NOW THAT WE CAN FIND FILES...

Permissions/Modes, ownership and size


PERMISSIONS


drwxr-xr-x@ 22 jpiperbe staff hidden 704B Oct 21 2014 A+

u

g

o7

5

5

chmod

PERMISSIONS



xattr

PERMISSIONS



chown

PERMISSIONS



chgrp

PERMISSIONS



chflags

ONE MORE THING (AND LET'S TRY THIS)

▸ACLs

▸ls -ale




cd ~/



mkdir cmdLine



cd cm[tab]



pwd



touch testing



ls



nano -w t[tab]





more t[tab]



chmod 700 t[tab]



sudo chown root t[tab]



more t[tab]



sudo chown [username] testing



chmod u-r t[tab]



ls -l



open t[tab]



chmod 650 ../cmd[tab]



cd ..



ls -l





chmod -R 755 cmd[tab]

CUSTOMIZING YOUR EXPERIENCE

▸Aliases

▸Prompts

▸Paths

▸Font/Display/Colors


COLORS


COLORS


COLORS


COLORS




https://bit.ly/2NmjRvk



bash_profilezshrc



mv ~/.bash_profile ~/.bash_profile.old



mv ~/Downloads bash_profile ~/.bash_profile



cp ~/.zshrc ~/.zshrc.old



cat ~/Downloads/zshrc > ~/.zshrc



cat ~/.bash_profile



nano -w ~/.zshrc



nano -w ~/.bash_profile

OTHER USEFUL CUSTOMIZATIONS

▸ change window size

▸ alias top20="top -o cpu -n 20"

▸ add to your .bash_profile or .zshrc

▸ echo "alias top20=\"top -o cpu -n 20\"" >> .bash_profile


ADMIN STUFF▸ sudo profiles renew -type enrollment

▸ softwareupdate

▸ system_profiler

▸ installer


EXERCISE WITH SOFTWARE UPDATE AND SYSTEM PROFILER

▸softwareupdate -l

▸system_profiler -detaillevel mini

▸system_profiler -listDataTypes

▸system_profiler SPHardwareDataType


SO MANY COMMANDS

▸ sysadminctl

▸ scutil

▸ fdesetup

▸ profiles

▸ jamf/munki

▸ diskutil

▸ systemsetup

▸ networksetup

▸ ifconfig

▸ ping

▸ traceroute

▸ nslookup / whois

▸ defaults

▸ plutil/PlistBuddy


LET'S TRY SOME OF THIS

▸profiles list

▸diskutil list

▸diskutil info disk1s1

▸ fdesetup list

▸sudo fdesetup list


PROFILES AND PLISTS


▸defaults

▸plutil

▸PListBuddy (/usr/libexec/PlistBuddy)

PROFILES AND PLISTS


STANDARDS

The plutil command obeys no one's rules but its own.

TEXT

PLISTS AND PROFILES

▸ profiles install -path <pathtofile>

▸ MDM

▸ defaults write NSGlobalDomain com.apple.swipescrolldirection -bool true

▸ https://fgimian.github.io/blog/2015/06/27/a-simple-plistbuddy-tutorial/


SCRIPTING

▸Commandline, now with persistence and variables!

▸Repeat commands

▸ install software

▸update settings

▸And so much more!


SCRIPTING EXERCISE


▸https://bit.ly/2NmjRvk

▸Download PSUMac2019*.sh files

▸ls -lO ~/Downloads | grep PSUMac

▸chmod u+x

https://bit.ly/2NmjRvk

SCRIPTING EXERCISE CONTINUED

▸~/Downloads/PSUMac2019SystemReport.sh▸open ~/Desktop/PSUMac2019SystemReport.txt▸cd ~/Downloads; ./PSUMac2019Colortable.sh▸./PSUMac2019colortablenumber.sh▸ feel free to open in your text editor of choice and take a

look at the commands and ask questions


USERS

▸login - login as another user (goes to their home)

▸su - substitute user (keeps location the same)

▸sudo (-s) - super user do runs following command as admin. Requires password

▸exit - logout

▸dscl - read/edit users and groups on the system

▸sysadminctl - secureToken / add/remove users / settings

▸last - shows sessions in reverse time order (auditing public macs)


USERS EXERCISE


USERS EXERCISE


sudo sysadminctl -addUser test ⮐-fullName "Test User"-shell /bin/zsh ⮐-password password -hint "bad choice" ⮐-home /Users/test -admin

USERS EXERCISE


USERS EXERCISE


jpiperbe@jpiperbe-retina:~ :) sudo sysadminctl -addUser test -fullName "Test User" -shell /bin/zsh -password password -hint "bad choice" -home /Users/test -admin Password:2019-07-02 13:58:44.064 sysadminctl[23070:2870546] ----------------------------2019-07-02 13:58:44.064 sysadminctl[23070:2870546] No clear text password or interactive option was specified (adduser, change/reset password will not allow user to use FDE) !2019-07-02 13:58:44.064 sysadminctl[23070:2870546] ----------------------------2019-07-02 13:58:44.277 sysadminctl[23070:2870546] Creating user record…2019-07-02 13:58:45.879 sysadminctl[23070:2870546] Assigning UID: 5042019-07-02 13:58:56.127 sysadminctl[23070:2870546] Home directory is assigned (not created!) at /Users/test

USERS EXERCISE


USERS EXERCISE


jpiperbe@jpiperbe-retina:~ :) login testPassword:Last login: Sun Jun 30 21:26:23 on ttys000No home directory: /Users/testjpiperbe-retina%

USERS EXERCISE


jpiperbe-retina% pwd/jpiperbe-retina% exitjpiperbe@jpiperbe-retina:~ :)

USERS EXERCISE


jpiperbe@jpiperbe-retina:~ :) mkdir /Users/testmkdir: /Users/test: Permission deniedjpiperbe@jpiperbe-retina:~ ಠ_ಠ sudo mkdir /Users/testPassword:jpiperbe@jpiperbe-retina:~ :) sudo chown -R test /Users/test/jpiperbe@jpiperbe-retina:~ :) login testPassword:Last login: Tue Jul 2 14:02:09 on ttys005jpiperbe-retina% pwd/Users/testjpiperbe-retina% sudo cp /Users/jpiperbe/.zshrc .Password:jpiperbe-retina%

USERS EXERCISE


jpiperbe@jpiperbe-retina:~ :) login testPassword:Last login: Tue Jul 2 14:16:23 on ttys005test@jpiperbe-retina:~ ! exitjpiperbe@jpiperbe-retina:~ :)

USERS EXERCISE


dscl . -list /Users UniqueIDdscl . -list /Users UniqueID | grep -v _sudo sysadminctl -deleteUser testdscl . -list /Users UniqueID | grep -v

USERS EXERCISE


CONFIGURING AND TESTING NETWORK AND OTHER SETTINGS


NETWORK AND CONFIGURATION EXERCISE

▸nslookup <ipreportedfromping>▸whois <insertwebsite.com>▸ifconfig en0▸scutil --get ComputerName▸sudo systemsetup -getcomputername


http://insertwebsite.com

MORE ADMIN THINGS (FOR JAMF USERS)

▸sudo jamf enroll -prompt

▸sudo jamf manage

▸sudo jamf policy -id <policy id>

▸sudo jamf policy -trigger enrollmentComplete


SETUP ASSISTANT

▸ctrl+opt+cmd+t =

▸rm /var/db/.AppleSetupDone - re-runs setup assistant at next reboot,


DOING ALL THIS REMOTELY

▸Almost anything you did here can be done remotely (environment dependent)

▸SSH Keys

▸Admin accounts

▸pushing scripts with management software


LOGGING

▸ Console

▸ /Library/Logs/

▸ /var/log

▸ log show

▸ log stream

▸ --predicate is critical


LOGGING EXERCISE


LOGGING EXERCISE

▸ more /var/log/system.log

▸ cat /var/log/system.log | tail -100 | more

▸ ls /Library/Logs/

▸ log show --predicate 'eventMessage CONTAINS "en0"' --last 15m

▸ log show --predicate 'eventMessage CONTAINS "en0"' ⮐ --last 15m | more


CATALINA (MACOS 10.15)

▸ZSH replacing BASH - NBD

▸https://scriptingosx.com/2019/06/moving-to-zsh/

▸Python/Ruby/Perl will not be included by default


??? " ???

RESOURCES (NOT BY ANY MEANS EXHAUSTIVE)

▸ http://www.nparikh.org/unix/prompt.php

▸ https://www.cgl.ucsf.edu/chimerax/docs/user/commands/colornames.html

▸ http://bitmote.com/index.php?post/2012/11/19/Using-ANSI-Color-Codes-to-Colorize-Your-Bash-Prompt-on-Linux

▸ https://www.modtitan.com/2017/04/finding-shutdown-causes-in-macos.html

▸ https://eclecticlight.co/2018/03/19/macos-unified-log-1-why-what-and-how/

▸ https://scriptingosx.com/

▸ https://www.php.net/manual/en/reference.pcre.pattern.syntax.php

▸ https://derflounder.wordpress.com

▸ https://fgimian.github.io/blog/2015/06/27/a-simple-plistbuddy-tutorial/


https://scriptingosx.com/

https://www.php.net/manual/en/reference.pcre.pattern.syntax.php

https://derflounder.wordpress.com