drills

Practice Linux troubleshooting with focused drills.

Work through 12 scenario-driven drills for unofficial Linux certification practice. Each drill starts with inspection, expected output, and the mistake to avoid before changing a live system.

Independent study support only. No affiliation, endorsement, exam dumps, or guaranteed exam results.

12 drills

Drill library

drill 3 commands LPIC-1 style filesystem practice

Disk Is Full: Prove Which Filesystem Is Out

A VPS starts returning write errors and an app cannot create new uploads. You need to decide whether the root filesystem, a mounted data volume, or inode exhaustion is the real problem before deleting anything.

3 related command replays available.

df -h && df -i
drill 4 commands LPIC-1 style GNU/Unix command practice

Find the Largest Files Under /var

The root filesystem is nearly full and /var looks suspicious. You need a read-only way to find the biggest files without crossing into other mounted filesystems.

2 related command replays available.

find /var -xdev -type f -printf '%s %p\n' | sort -nr | head -20
drill 3 commands LPIC-1 style essential services practice

Read Recent Logs for One Service

A service restarted during deploy and is now unhealthy. You need the recent unit logs, not every log line on the machine.

2 related command replays available.

journalctl -u nginx --since '30 minutes ago' --no-pager
drill 3 commands LFCS-style service troubleshooting drill

Check Whether Nginx Config Is Valid

A teammate changed a server block and wants to reload nginx. You need to prove the configuration parses before touching the running service.

2 related command replays available.

sudo nginx -t
drill 3 commands LPIC-1 style networking practice

Find Which Process Owns a Port

Port 8080 is already in use and a new service will not start. You need to identify the listener before killing or reconfiguring anything.

2 related command replays available.

sudo ss -ltnp 'sport = :8080'
drill 3 commands LPIC-1 style networking practice

Separate DNS Failure From Server Failure

Users say a site is down, but the server may still be answering. You need to compare public DNS with a forced request to the expected IP.

2 related command replays available.

dig +short example.com && curl -I https://example.com/
drill 3 commands LPIC-1 style permissions practice

Inspect Permissions Before chmod

An app cannot read a file and someone suggests chmod 777. You need to inspect the path, owner, group, and mode before changing permissions.

2 related command replays available.

namei -l /srv/app/current/.env
drill 3 commands LPIC-1 style file management practice

Preview What rsync --delete Would Remove

You need to mirror a release directory to a backup target, but stale files on the target should be removed. Before running the real sync, you must preview deletions.

2 related command replays available.

rsync -ani --delete /srv/app/releases/current/ /backup/app/current/
drill 3 commands LPIC-1 style essential services practice

List Failed systemd Units

After a reboot, a host is reachable but something feels broken. You need a quick inventory of failed units before digging into individual logs.

2 related command replays available.

systemctl --failed --no-pager
drill 3 commands LPIC-1 style package management practice

Check Pending Package Updates

A Debian or Ubuntu server may be missing important updates. You need to list pending upgrades without installing anything.

2 related command replays available.

apt list --upgradable
drill 3 commands LPIC-1 style process inspection practice

Check Memory Pressure Before Restarting

A server is slow and someone wants to restart the app. You need to see whether RAM, swap, or a specific process is the likely cause.

2 related command replays available.

free -h && ps aux --sort=-%mem | head
drill 3 commands LPIC-1 style security practice

Review Failed SSH Logins

A public VPS has SSH exposed and you need to see whether failed login attempts are normal background noise or focused guessing against real usernames.

2 related command replays available.

journalctl -u ssh --since today --no-pager | grep 'Failed password'