DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
VGSources
Blog

Essential Linux Commands for Managing Your VPS

A practical Ubuntu/Debian command guide for connecting to a VPS, updating packages, checking resources, managing services, reading logs and hardening SSH.
Length8 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For an Ubuntu or Debian VPS, a compact command set covers nearly every routine task: connect with ssh, update packages with apt, inspect disk, memory, processes and listening ports, control services with systemctl, read logs with journalctl, and harden remote access with ufw, fail2ban and automatic security updates.

The safest workflow is sequential: connect, update, verify health, make one change at a time, inspect the relevant logs, and keep a second session open before changing SSH or firewall rules.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The command set to learn first

These commands are aimed at Ubuntu and Debian-style VPS images. A Red Hat-family distribution normally uses dnf for packages and firewalld rather than apt and ufw, so check the distribution documentation and local man pages before copying a command.

Need Beginner baseline Operator hardening
Remote access and updates ssh, apt update, apt upgrade Separate administrative account, key-based SSH, unattended-upgrades
Health checks df, du, free, top ps and ss snapshots, service-specific logs
Services and logs systemctl status, restart, enable, reload; journalctl Validate configuration and watch logs while changing production services
Network protection ufw with an SSH rule fail2ban and a deliberately limited inbound rule set
Long-running work tmux tmux plus a documented, reviewed cron job

Connect safely over SSH

Open the first session

From your local terminal, connect with:

ssh user@your_vps_ip

Replace user with the account on the server and your_vps_ip with its address. Confirm the host-key prompt only when you have a trustworthy fingerprint or provisioning record. Once connected, verify which account and machine you reached with whoami and hostname; this prevents running maintenance on the wrong host.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

Keep a recovery session

Before editing SSH or firewall settings, open a second SSH window and leave it connected. If a new rule blocks future logins, the existing session may be your only remote route until the provider’s console is used. Do not close both sessions immediately after a security change.

Update a fresh Ubuntu image

Refresh package metadata, then install upgrades

On a new image, run the metadata refresh and upgrade as one deliberate sequence:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo apt update && sudo apt upgrade -y

apt update downloads current repository metadata; it does not install anything. apt upgrade applies available package upgrades, and -y answers yes to the package manager’s confirmation prompt. Read the transaction summary when performing a change on a production machine rather than blindly accepting a large removal or replacement.

Check whether a reboot is needed

Kernel and core-library upgrades can require a reboot. If the package output or your distribution’s update tooling indicates one is required, schedule a maintenance window and notify users before running sudo reboot. A reboot terminates active processes, so use tmux for work that must survive a disconnected terminal and restart your services automatically with their enabled systemd units.

Check disk space and find what is consuming it

Check mounted filesystems

Start with human-readable filesystem totals:

df -h

Pay particular attention to the line mounted at /. A full root filesystem can prevent package upgrades, database writes and even login-related operations. The command reports filesystem-level free space; it does not identify which directory is responsible.

Locate large directories

Use a summary scan when a filesystem is unexpectedly full:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo du -sh /* 2>/dev/null

Then repeat du -sh inside the largest directory to narrow the search. Common causes include application logs, uploaded files, container layers and old backups. Remove data only after identifying its owner and retention requirement. Truncating a live log or deleting a database file can create a more serious outage than the original space problem.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

Check memory, CPU and running processes

Read a memory snapshot

Use:

free -h

Look at available memory as well as used memory. Linux uses otherwise idle RAM for cache, so a high “used” figure alone is not proof of exhaustion. If available memory is falling while swap activity rises, identify the process responsible before adding swap or restarting services.

Watch activity interactively

Run:

top

top updates continuously. Press k, enter a process ID, and confirm the signal only when you understand what that process does; killing a database, SSH daemon or init process can interrupt the entire VPS.

Take a scriptable process snapshot

For a one-time, copyable list use:

ps aux

This is useful in incident notes and support tickets because it captures command lines and resource figures at one moment, unlike the constantly changing top display. Verify options with man ps on your distribution if you need a different sort or output format.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

See which ports are listening

Inspect TCP and UDP listeners, including their owning processes, with:

sudo ss -tulpn

The flags request TCP and UDP sockets, listening endpoints, numeric addresses and process information. Compare the result with the services you intended to expose. An unexpected listener may indicate a forgotten development service, a misconfigured daemon or a compromise; investigate its package, unit file and logs before adding a firewall exception.

Control services with systemd

Check current state

For a concrete example, inspect an Nginx service with:

sudo systemctl status nginx

The status view shows whether the unit is active, recent exit information and a short log tail. Replace nginx with the actual unit name. If you do not know the name, list loaded units with systemctl list-units --type=service and then inspect the likely candidate.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Restart, reload or enable

Use the least disruptive action that matches the change:

sudo systemctl restart nginx
sudo systemctl reload nginx
sudo systemctl enable nginx
  • restart stops and starts the service, interrupting existing connections when the daemon does not support graceful handoff.
  • reload asks a service to reread configuration without a full stop; it works only when that service implements reload behavior.
  • enable makes the service start during boot. It does not necessarily start it immediately; pair it with --now only when you intentionally want both actions.

After editing configuration, validate it with the service’s own test command when available, then reload or restart. If the action fails, do not repeatedly restart: read the unit’s journal first.

Read logs with journalctl

Investigate a failed unit

Show recent system errors and context with:

sudo journalctl -xe

For one service, filter the journal:

sudo journalctl -u nginx -f

The -f option follows new entries, making it useful while reproducing a request or restarting the service. Stop following with Ctrl+C.

Monitor SSH specifically

On Ubuntu, this form follows the SSH service journal:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo journalctl -fu ssh.service

Keep this running in one terminal while testing an SSH configuration change from another device. Distribution package names can differ, so if the unit is not found, discover the installed SSH unit with systemctl list-units | grep -i ssh.

Enable the firewall without locking yourself out

Allow SSH before enabling UFW

Ubuntu ships with UFW disabled by default. Add an SSH rule first:

sudo ufw allow OpenSSH
sudo ufw enable

Enabling UFW without an SSH allowance can cut off a remote administrator. Keep the second SSH session open and verify access from a separate client before closing the original connection.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Review and narrow the rules

After enabling it, inspect the active policy:

sudo ufw status verbose

Permit only ports required by your application, such as HTTP or HTTPS for a public web server. Avoid broad “allow from anywhere” rules for administrative services when your provider, VPN or office network gives you a narrower source range. Remove obsolete rules rather than accumulating exceptions.

Reduce brute-force risk and protect credentials

Use fail2ban as a second layer

fail2ban watches authentication logs and can temporarily block IP addresses after repeated failed logins. It complements, but does not replace, strong SSH keys, timely updates and a firewall. Tune its jail and ban duration for your distribution and confirm that legitimate administrators will not be banned by an overly aggressive threshold.

Protect private keys

A private SSH key should not be readable by other users. A commonly used permission example is:

chmod 600 ~/.ssh/id_ed25519

Apply permissions to the actual key file you use, and check ownership before testing a login. The precise permission model can vary with your SSH setup, so consult man chmod and your distribution’s SSH documentation when troubleshooting “permissions are too open” errors.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Keep security updates automatic

Understand Ubuntu’s defaults

Ubuntu includes unattended-upgrades by default from Ubuntu 18.04 LTS onward and uses it to apply security updates daily. Its main configuration is in /etc/apt/apt.conf.d/50unattended-upgrades, with scheduling controls in /etc/apt/apt.conf.d/20auto-upgrades. Logs are written under /var/log/unattended-upgrades.

Edit a drop-in file rather than changing a distribution-owned main configuration file. To toggle the feature interactively, Ubuntu provides:

sudo dpkg-reconfigure unattended-upgrades

Understand timers and reboots

The apt-daily.timer and apt-daily-upgrade.timer units run on schedules that include a random delay, reducing simultaneous load across many machines. If a timer’s schedule must be changed, use a systemd override instead of editing the vendor unit directly:

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
sudo systemctl edit apt-daily.timer
sudo systemctl edit apt-daily-upgrade.timer

One available timer setting is Persistent=false; change it only when you understand the consequence of missed runs while the machine is powered off. The needrestart package may restart services affected by library upgrades. Review that behavior for stateful applications and plan reboots when a kernel update requires one.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep work alive through disconnects with tmux

A network drop normally terminates a foreground shell and any command tied to it. Start a persistent session with:

tmux new -s maintenance

Run the upgrade, migration or log watch inside that session. Detach with Ctrl+b followed by d; reconnect later and resume with:

tmux attach -t maintenance

List existing sessions with tmux ls. tmux preserves the terminal session, not a failed process, so still monitor exit status and application logs.

Schedule recurring tasks carefully

User-level cron entries are edited with:

crontab -e

List the current entries with:

crontab -l

Before scheduling a backup, cleanup or health check, verify the command’s absolute paths, environment and output handling. Test it interactively as the same user first. Cron syntax and daemon behavior differ in details across systems; read man 5 crontab on the VPS, and direct output to a reviewed log so failures are visible.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A practical troubleshooting sequence

  1. Confirm access and identity: reconnect with SSH and check whoami and hostname.
  2. Check capacity: run df -h, then use du -sh to locate an oversized directory.
  3. Check resources: inspect free -h, top and a ps aux snapshot.
  4. Check exposure: compare sudo ss -tulpn with the services you expect.
  5. Inspect the unit: run sudo systemctl status service-name and read sudo journalctl -u service-name -f.
  6. Apply one corrective change: reload or restart only after validating configuration.
  7. Re-test externally: confirm the application and SSH from a separate client before ending the maintenance session.

Know the limits of these commands

The examples are Ubuntu/Debian-leaning and assume a systemd-based VPS with sudo access. Package names, service unit names, firewall implementations and log locations can differ on other distributions or provider images. The command summaries here are practical starting points, not a substitute for the installed system’s man pages. Run man command-name whenever a flag, configuration directive or recovery action is unfamiliar, and take a provider snapshot before high-risk changes such as firewall policy edits, storage cleanup or database upgrades.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.