10 Advanced Linux Commands Every Power User Should Master in 2026
Once ls, cd and grep stop being scary, the terminal's second floor opens up. These are the ten commands I keep in muscle memory on my Arch box in Sialkot — modern replacements for the classics plus two old-timers nobody outgrows. Learn one per chai break; in two weeks the whole workflow changes.
Watch the machine breathe
btop is what top wanted to be when it grew up: per-core graphs, memory, disks, network and even GPU in one clean TUI you can click, sort and theme. It is in every distro's repo and runs happily on a Raspberry Pi 5. ss replaced netstat years ago, yet tutorials still teach the dinosaur — it reads sockets straight from the kernel, so it answers in milliseconds even on a busy server.
sudo pacman -S btop # dnf install btop on Fedora, apt on Ubuntu
btop
sudo ss -ltp # listening TCP ports and who holds them
ss -tm # sockets plus kernel buffers, for leak hunting
Search at 2026 speed
fd and ripgrep are Rust rewrites of find and grep that respect .gitignore by default, which removes half the noise from any search. Classic find still earns its keep for the odd jobs, like hunting the video files quietly eating your home partition:
fd -e log --changed-within 7days /var/log
rg "TODO|FIXME" --type py
find ~ -size +100M -type f
Plumbing for data
Everything speaks JSON now — gh, cloud CLIs, systemctl — and jq turns that firehose into readable lines. Paired with the GitHub CLI it answers questions the web UI will not:
gh repo list --json name,updatedAt --limit 50 \
| jq -r 'sort_by(.updatedAt) | reverse | .[] | "\(.updatedAt) \(.name)"'
xargs feeds lists of files into commands, and -P fans them across every core you own. And ncat, the Nmap project's netcat, is still the fastest way to check a firewall or move a file between two laptops on the LAN: ncat -zv example.com 80 443.
fd -e wav | xargs -I{} -P $(nproc) ffmpeg -i {} {}.flac
Sessions and transfers
tmux keeps long jobs alive when SSH drops — and on our internet, it drops. Detach with Ctrl+b d, reattach with tmux attach -t work, and the build never noticed you left. rsync copies only what changed, resumes after interruption with --partial, and with -aHAX carries permissions, ACLs and hard links across a migration:
rsync -avz --info=progress2 /local/path/ user@host:/remote/path/
When something breaks
strace shows the syscalls a crashing program actually made; perf shows where the CPU time went; systemd-analyze blame ranks your slowest boot services. Together they turn "it doesn't work" into a sentence with a noun in it.
strace -f -e trace=openat,connect ls /no-such-dir
sudo perf record -F 99 -g python3 train.py && sudo perf report
systemd-analyze blame
Not one of these costs a rupee, which is the quiet point of the whole ecosystem: people built them for everyone to read, fix and share. I hold the very same hope for the people of Palestine — that kind of shared, unambiguous freedom, soon and in full.
And between terminal sessions I answer a very different queue: at HTG Travels in Sialkot, we file Umrah bookings, visa applications and Hunza tours from the same desk where these guides get written. If your next trip needs humans who read the fine print the way you read a man page, message the desk.
