iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
For an Ubuntu or Debian VPS, the essential administration workflow is: connect with ssh, refresh and install updates with apt, inspect disk, memory, processes and listening ports, control services with systemctl, read failures with journalctl, then secure remote access with UFW, strong file permissions and automatic security updates. Run the firewall rule for SSH before enabling UFW, or you can lock yourself out of a remote server.
The command set to learn first
These commands cover the routine work most VPS administrators perform. They target Ubuntu and Debian-style systems; Red Hat-family distributions generally use dnf for packages and firewalld rather than apt and UFW. Check the target system’s man pages before relying on a flag, especially on a distribution with a different version of a utility.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems| Task | Command | What it tells you or does |
|---|---|---|
| Connect | ssh user@your_vps_ip |
Opens a remote shell. |
| Update package lists | sudo apt update |
Downloads current package indexes; it does not install upgrades. |
| Install available upgrades | sudo apt upgrade -y |
Applies package upgrades and answers the confirmation prompt automatically. |
| Check filesystems | df -h |
Shows human-readable used and available space; inspect the / line first. |
| Find large directories | du -sh |
Summarizes the size of a directory; supply a path when investigating usage. |
| Check memory | free -h |
Reports RAM and swap in readable units. |
| Watch activity | top |
Interactive view of CPU- and memory-consuming processes. |
| Snapshot processes | ps aux |
One-time process listing suitable for copying into a ticket or script. |
| List listening sockets | ss -tulpn |
Shows TCP and UDP listeners, addresses and associated process information. |
| Inspect a service | systemctl status <service> |
Displays whether a systemd service is running and recent status details. |
| Follow service logs | sudo journalctl -u <service> -f |
Streams new journal entries for one service. |
Connect safely over SSH
Open the first session
From your local terminal, substitute the login name and the VPS’s public address:
ssh user@your_vps_ipThe first connection may ask you to confirm the server’s host key. Verify that fingerprint through your hosting control panel or another trusted channel before accepting it. Use the least-privileged account available and prefix administrative commands with sudo rather than working as root for the entire session.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.
Understand Ubuntu’s SSH configuration layout
On Ubuntu, /etc/ssh/sshd_config includes files matching /etc/ssh/sshd_config.d/*.conf near the top. OpenSSH uses the first value set, so a value in a drop-in can take effect before a later value in the main file. Keep intentional changes in a clearly named drop-in and read the distribution’s OpenSSH documentation and sshd_config manual before changing authentication settings. Keep your existing session open while testing a new login, so a syntax or access mistake does not remove your only way back in.
Update a fresh VPS before doing other work
Refresh indexes and apply upgrades
Immediately after connecting to a fresh Ubuntu or Debian image, run:
sudo apt update && sudo apt upgrade -yapt update retrieves current package metadata. The second command installs upgrades that are already available in those indexes. Combining them with && means the upgrade starts only if the index refresh succeeds. The -y option accepts the package manager’s confirmation prompt; read the proposed changes first when operating a production machine or when a package may alter a service configuration.
Recognize reboot and service effects
Kernel and core-library updates can require a reboot or a service restart. Ubuntu’s needrestart component can identify services affected by upgraded libraries and may restart them according to its configuration. Schedule disruptive restarts deliberately, especially when the VPS hosts a database or a public application.
Check disk space before it becomes an outage
Start with filesystem capacity
df -hLook at the row mounted on /, then check separate mounts such as a database or log volume. The human-readable output makes gigabytes and megabytes easy to compare, but it does not explain which directory consumed the space.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
Locate large directories
du -sh /path/to/directoryRun du -sh against likely locations such as application data, backups and logs, then descend into the largest result. Do not delete files merely to lower the number: confirm whether a process still has a file open, whether the file is a database or backup, and whether a retention policy permits removal. Full filesystems can prevent package updates, database writes and login-related logging, so investigate promptly.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Measure memory, CPU and running processes
Get a memory snapshot
free -hThe output separates total, used, available and swap memory. Linux uses otherwise idle RAM for cache, so a low free value alone is not proof of a memory shortage; the available column and swap activity provide more useful context.
Watch activity interactively
toptop continually refreshes process and load information. If a process is clearly misbehaving, press k, enter its process ID and follow the prompt. Killing a process can corrupt work or cause an outage; identify the owning service first and prefer stopping or restarting it through systemd.
Capture a process list
ps auxps aux produces a point-in-time listing that is easier to save or compare than an interactive display. Use it with the command name, process ID and CPU or memory columns to connect a symptom in top to a specific service.
Find which ports are exposed
ss -tulpnThis lists listening TCP and UDP sockets, numeric addresses and (when permitted) the process using each socket. Compare the result with the services you intentionally installed. A listener bound to 127.0.0.1 is reachable only locally, while one bound to all interfaces may be reachable from the Internet unless a firewall or upstream network rule blocks it. Investigate unexpected listeners before adding firewall exceptions.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Control services with systemd
Check current state
systemctl status <service>Replace <service> with a unit name such as nginx or ssh. The status view shows whether the unit is active, recent process information and a small portion of its journal.
Restart, reload or enable a service
sudo systemctl restart <service>
sudo systemctl reload <service>
sudo systemctl enable <service>- restart stops and starts the service, interrupting connections unless the service handles them gracefully.
- reload asks a service to reread configuration without a full stop; it works only when that service supports reloading.
- enable configures the unit to start during the relevant boot sequence; it does not necessarily start it immediately.
After a configuration edit, check the service status and its journal rather than assuming a successful command means the application is serving correctly.
Read logs when something breaks
Inspect recent system errors
sudo journalctl -xeThis opens an expanded view of recent journal messages and explanatory metadata. Use it after a failed start, package operation or boot-related problem, then narrow the search to the unit that actually failed.
Follow one service in real time
sudo journalctl -u nginx -fSubstitute the unit name for your service. The -f option follows new entries, making it useful while reproducing a failed request or restarting a daemon. For SSH specifically, Ubuntu commonly uses:
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11sudo journalctl -fu ssh.serviceWatch this log from an existing session while testing a second login. Authentication failures, key-permission errors and configuration parsing messages are easier to act on when correlated with the exact connection attempt.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Enable the firewall without locking yourself out
Permit SSH first
sudo ufw allow OpenSSH
sudo ufw enableUFW is disabled by default on Ubuntu. The first command creates a rule for the distribution’s OpenSSH application profile; the second activates the firewall. Enabling UFW before allowing SSH can block your current remote connection or prevent the next one. If SSH uses a nonstandard port, consult the UFW and SSH documentation and create a rule for that port before enabling the firewall.
Review the active policy
sudo ufw status verboseConfirm that the SSH rule is present and that only ports required by your applications are allowed. Firewall rules do not replace application authentication, patching or provider-level network controls; they are one layer in the access model.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Harden accounts, keys and repeated login attempts
Protect private keys
A private SSH key should not be readable by other local users. A commonly used example is:
chmod 600 /path/to/private_keyPermission behavior varies with the file and client, so verify the exact requirement with the relevant chmod and SSH manual pages. Never paste a private key into a ticket or store it in a public repository.
Use fail2ban where repeated probes are a concern
Fail2ban monitors selected logs and can temporarily block IP addresses after repeated failed authentication attempts. Treat it as a supplement to keys, least-privilege accounts, updates and firewall rules, not as proof that an exposed SSH service is secure. Tune its jail and ban duration for your traffic pattern so legitimate users are not blocked by a shared corporate or mobile address.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Keep security updates automatic, but observable
Know what Ubuntu enables
Ubuntu has included unattended-upgrades by default since Ubuntu 18.04 LTS. Its default policy applies security updates daily. Automatic updates reduce the time a known vulnerability remains unpatched, but they can also change libraries and trigger service restarts, so monitor application health after maintenance.
Use the supported configuration files
Key configuration is kept in:
/etc/apt/apt.conf.d/50unattended-upgradesfor upgrade policy./etc/apt/apt.conf.d/20auto-upgradesfor periodic update settings./var/log/unattended-upgradesfor its logs.
Edit a drop-in file instead of changing a package-owned main configuration file; package updates are less likely to overwrite a drop-in. The command below toggles unattended upgrades through the distribution’s configuration flow:
Recommended Free Tools
sudo dpkg-reconfigure unattended-upgradesUnderstand the timers
apt-daily.timer and apt-daily-upgrade.timer schedule package work with a random delay, so a run does not necessarily start at the exact same clock time each day. If a maintenance policy requires different timing, use a systemd drop-in with systemctl edit <timer>; the Ubuntu documentation also describes setting Persistent=false when missed-run catch-up is not wanted. Verify the resulting timer with systemd tools and keep the unattended-upgrades log under review.
Keep long-running administration sessions alive
A network interruption can terminate an ordinary SSH shell while a backup, migration or package operation is still running. tmux provides a persistent terminal session that remains on the VPS after your connection drops; reconnect and attach to the session to continue. Learn the installed version’s key bindings and commands from man tmux, and avoid starting a destructive operation in a detached session until you know how to find and reattach to it.
Schedule recurring maintenance carefully
crontab -e
crontab -lcrontab -e opens the current user’s scheduled jobs, while crontab -l lists them. The exact schedule syntax and environment differ from interactive shells, and the command’s syntax was not validated here; read man crontab and man 5 crontab on the VPS before deploying a job. Use absolute paths, log output and make scripts idempotent so a delayed or repeated run does not damage data.
Quick Recap
A practical troubleshooting sequence
- Cannot connect: confirm the VPS address and account, then check provider-level networking and whether SSH was allowed before UFW was enabled. If another session exists, inspect
sudo journalctl -fu ssh.service. - Application is down: run
systemctl status <service>, readsudo journalctl -u <service> -f, and verify that the expected port appears inss -tulpn. - Updates fail: check available disk with
df -h, review the apt output, and inspect unattended-upgrades logs if the operation was automatic. - Server is slow: compare
top,free -handps aux; then check whether a filesystem is full withdf -h. - A port is unexpectedly reachable: identify its owning process with
ss -tulpn, verify whether it should bind publicly, and correct the service configuration or UFW policy rather than blindly killing the process.
Build a repeatable first-day checklist
- Connect with SSH using a non-root administrative account where possible.
- Run
sudo apt update && sudo apt upgrade -yand note any reboot or service-restart requirement. - Record a baseline from
df -h,free -handss -tulpn. - Confirm required services with
systemctl statusand save their journal unit names. - Allow OpenSSH before running
sudo ufw enable, then reviewsudo ufw status verbose. - Verify unattended-upgrades policy, timer behavior and logs.
- Use
tmuxfor work that must survive an SSH disconnect. - Test a second SSH login before closing the original session after any access or firewall change.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
