VMID NAME STATUS MEM(MB) BOOTDISK(GB) PID
100 TrueNAS running 8192 32.00 12445
101 docker-host running 4096 32.00 12891

qm shutdown 100

cat /etc/pve/qemu-server/100.conf # same thing, direct file read

qm destroy 100 --purge # also removes from backups

qm snapshot 100 before-update --description "pre OS update"
qm listsnapshot 100 # list all snapshots
qm rollback 100 before-update # revert to snapshot
qm delsnapshot 100 before-update # delete snapshot

vzdump 100 --storage local --compress zstd --mode snapshot
vzdump 100 101 102 --storage local # backup multiple VMs

qmrestore /var/lib/vz/dump/vzdump-qemu-100-*.vma.zst 100

lsblk -o NAME,SIZE,SERIAL,MODEL # includes serial numbers

ls -la /dev/disk/by-id/ | grep -v part # list drives by serial

qm set 100 --scsi1 /dev/disk/by-id/ata-WDC_WD40_ABCD1234,cache=none

pvesh get /nodes/pve/status --output-format yaml # human readable

# removes the "no subscription" nag on updates
sed -i 's/^deb/#deb/' /etc/apt/sources.list.d/pve-enterprise.list
echo "deb http://download.proxmox.com/debian/pve bookworm pve-no-subscription" > /etc/apt/sources.list.d/pve-no-sub.list

systemctl restart pveproxy # restart the web UI service
systemctl restart pvedaemon # restart the main Proxmox daemon

pct start 200 # start container 200
pct stop 200 # stop container
pct enter 200 # shell INTO the container
pct exec 200 -- bash # alternative shell access

zpool status tank # specific pool named "tank"
zpool status -v # verbose — shows errors per drive

zpool scrub tank # start scrub
zpool status tank # check progress (look for "scrub in progress")
zpool scrub -s tank # stop a running scrub

zfs list -t snapshot # list only snapshots
zfs list -r tank # recursive — shows children

zfs rollback tank/media@snap1 # revert dataset to snapshot
zfs destroy tank/media@snap1 # delete a snapshot
zfs diff tank/media@snap1 # see what changed since snapshot

zfs set compression=lz4 tank/documents # enable compression
zfs get all tank/media | grep compress # check compression settings

smartctl -t short /dev/sda # run a short self-test (2min)
smartctl -t long /dev/sda # run a long self-test (hours)
smartctl -H /dev/sda # just show PASSED/FAILED

zpool replace tank /dev/disk/by-id/old-drive /dev/disk/by-id/new-drive

docker ps -a # all containers including stopped ones
docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}" # cleaner output

docker stop jellyfin # graceful stop (SIGTERM, 10s timeout)
docker kill jellyfin # immediate kill (SIGKILL)
docker restart jellyfin # stop + start in one command

docker logs jellyfin # dump all logs
docker logs -f --tail 100 jellyfin # follow last 100 lines
docker logs jellyfin 2>&1 | grep ERROR # filter for errors

docker exec -it jellyfin bash # shell inside
docker exec -it jellyfin sh # if no bash
docker exec jellyfin ls /config # run one command without interactive

docker rm -f jellyfin # force — stops and removes in one go
docker container prune # remove ALL stopped containers

docker pull jellyfin/jellyfin # download latest image
docker rmi jellyfin/jellyfin # remove an image
docker image prune -a # remove ALL unused images (frees space)

docker compose pull # pull new images for all services in compose file
docker compose up -d # recreate containers with new images
docker image prune # clean up old image layers

docker compose up -d # start everything
docker compose up -d jellyfin # start only one service
docker compose up -d --force-recreate # force recreate even if nothing changed

docker compose down -v # ⚠️ ALSO deletes volumes — use carefully
docker compose stop # stops but doesn't remove containers

docker compose logs -f jellyfin # only one service
docker compose logs --tail 50 # last 50 lines from all services

docker volume inspect jellyfin_config # see where data is stored on disk
docker volume rm jellyfin_config # ⚠️ delete volume — data gone
docker volume prune # remove all unused volumes

docker network create homelab # create a network
docker network inspect homelab # see connected containers + IPs
docker network connect homelab jellyfin # add container to network

docker system prune # safer — only removes "dangling" images
docker system prune -a # ⚠️ removes ALL unused images
docker system prune -a -f # no confirmation prompt

docker stats jellyfin # stats for one container only
docker stats --no-stream # one snapshot, then exit

docker volume create portainer_data

docker run -d \
-p 8000:8000 \
-p 9443:9443 \
--name portainer \
--restart=always \
-v /var/run/docker.sock:/var/run/docker.sock \
-v portainer_data:/data \
portainer/portainer-ce:latest

docker stop portainer
docker rm portainer
docker pull portainer/portainer-ce:latest
# then re-run the install command above

# Stop Portainer
docker stop portainer

# Reset password to "newpassword"
docker run --rm \
-v portainer_data:/data \
portainer/portainer-ce:latest \
--admin-password='$2y$05$yourbcrypthash'

# Easier: just nuke the data volume and start fresh
docker rm portainer
docker volume rm portainer_data
docker volume create portainer_data
# then re-run install command

/opt/stacks/
jellyfin/compose.yml
nextcloud/compose.yml
pihole/compose.yml
nginx-proxy-manager/compose.yml

# Your user (PUID) needs to match who owns the media files
chown -R 1000:1000 /mnt/media
chmod -R 755 /mnt/media

docker exec jellyfin curl -s "http://localhost:8096/Library/Refresh?api_key=YOUR_API_KEY"

services:
jellyfin:
image: lscr.io/linuxserver/jellyfin:latest
environment:
- PUID=1000
- PGID=1000
volumes:
- /opt/appdata/jellyfin:/config
- /mnt/media:/media
ports:
- 8096:8096
restart: unless-stopped

# Full format
docker exec -it --user www-data nextcloud php occ [command]

# Common occ commands
... php occ status # health check
... php occ maintenance:mode --on # enable maintenance mode
... php occ maintenance:mode --off # disable it
... php occ files:scan --all # scan for new files added directly to disk
... php occ user:list # list all users
... php occ upgrade # run after updating the image

docker exec -it pihole pihole status # is it blocking?
docker exec -it pihole pihole restartdns # restart DNS resolver
docker exec -it pihole pihole updateGravity # update block lists
docker exec -it pihole pihole -q google.com # test if domain is blocked
docker exec -it pihole pihole whitelist add google.com # unblock a site
docker exec -it pihole pihole blacklist add annoying.com # block a site

docker restart pihole # most common fix

Email: admin@example.com
Password: changeme

# Port 80 must be open from internet for HTTP challenge
# Or use DNS challenge (works behind NAT)
docker exec -it nginx-proxy-manager certbot renew --dry-run

docker exec -it ollama ollama list # list models
docker exec -it ollama ollama pull llama3 # download a model
docker exec -it ollama ollama rm llama3 # delete a model
docker exec -it ollama ollama run llama3 "say hello" # test a model

# Both must be on same Docker network
# Open WebUI env var should be:
OLLAMA_BASE_URL=http://ollama:11434 # uses container name, not IP

docker exec -it frigate ffprobe -v quiet -print_format json \
-show_streams "rtsp://192.168.x.x:554/stream1"

# Check if CPU/GPU detector is being seen
docker exec -it frigate frigate --help
docker logs frigate | grep -i "detector"

Username: admin
Password: admin123

volumes:
- /opt/appdata/calibre-web:/config
- /mnt/books:/books # point to your books folder

services:
navidrome:
image: deluan/navidrome:latest
volumes:
- /opt/appdata/navidrome:/data
- /mnt/music:/music:ro # ro = read-only, safe for music
ports:
- 4533:4533
environment:
ND_MUSICFOLDER: /music
ND_DATAFOLDER: /data

docker restart navidrome # easiest way to trigger rescan

ls -lah /opt/stacks/ # list stacks folder
ls -lt # sort by modification time (newest first)

cd ~ # go home (/root or /home/user)
cd .. # go up one level
cd - # go back to where you just were
pwd # print where you currently are

cat file.txt # print whole file
head -20 file.txt # print first 20 lines
tail -20 file.txt # print last 20 lines
tail -f /var/log/syslog # follow a log file live

Ctrl+O then Enter # Save
Ctrl+X # Exit
Ctrl+K # Cut a line
Ctrl+U # Paste
Ctrl+W # Search

mkdir -p /opt/stacks/{jellyfin,nextcloud,pihole,npm} # create multiple at once
rm -rf /opt/old-folder/ # ⚠️ delete folder and everything in it
cp -r /source /dest # copy folder recursively
mv /old/path /new/path # move or rename

id # show your current user ID
chown -R 1000:1000 /mnt/media # set owner recursively
chmod -R 755 /mnt/media # rwxr-xr-x permissions
ls -la /mnt/media # check who owns files

apt install htop # install if not present
free -h # quick RAM usage check
df -h # disk space on all mounts
uptime # how long system has been running

systemctl status docker # is Docker running?
systemctl start docker # start it
systemctl stop docker # stop it
systemctl restart docker # restart it
systemctl enable docker # start on boot
systemctl disable docker # don't start on boot

ip addr # all interfaces and IPs
ip route # show routing table (gateway)
ping -c 4 8.8.8.8 # test internet connectivity
ping -c 4 192.168.1.1 # test gateway reachability
nmap -sP 192.168.1.0/24 # scan for all devices on LAN
ss -tulpn # show open ports and what's listening
curl -I http://localhost:8096 # test if a web service is responding

ssh root@192.168.1.100 # as root
ssh -p 2222 user@192.168.1.100 # custom port
ssh-keygen -t ed25519 # generate SSH key pair
ssh-copy-id user@192.168.1.100 # copy public key (no more passwords)

grep -i "error" file.log # case insensitive search
grep -v "debug" file.log # exclude lines with "debug"
docker logs jellyfin | grep -i error # filter Docker logs
cat file.txt | grep -c "warning" # count matches