Embedded Files
Concept
Concept
Job has only existed within the terminal window that started it.
Job can consist of multiple processes linked together (e.g., a pipeline).
A Linux service (like sshd for remote access, nginx for web serving, or systemd itself) is a process, but it is never a job.
Because these processes don't have controlling terminal.
29.1 Monitoring
29.1 Monitoring
Monitor all process
ps aux
Monitor specific process
ps aux | grep [Name of process]
Example: ps aux | grep httpd
Monitor "zombie" processes
defunct means tasks that have finished execution but haven't been properly cleared by their parent process.
ps aux | grep defunct
Check logged-in users and current activity
w or who
List of all logged-in users
loginctl list-users
Lists every active user session
loginctl list-sessions
Result
student@localhost:~$ ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.1 0.9 44616 36372 ? Ss 10:16 0:06 /usr/lib/systemd/systemd --switched-root --system --deserialize=43 rhgb
root 2 0.0 0.0 0 0 ? S 10:16 0:00 [kthreadd]
root 3 0.0 0.0 0 0 ? S 10:16 0:00 [pool_workqueue_release]
root 4 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-rcu_gp]
root 5 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-sync_wq]
root 6 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kvfree_rcu_reclaim]
root 7 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-slub_flushwq]
root 8 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-netns]
root 12 0.0 0.0 0 0 ? I 10:16 0:00 [kworker/u8:0-ipv6_addrconf]
root 13 0.0 0.0 0 0 ? I 10:16 0:00 [kworker/u8:1]
root 14 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-mm_percpu_wq]
root 15 0.0 0.0 0 0 ? S 10:16 0:02 [ksoftirqd/0]
root 16 0.0 0.0 0 0 ? I 10:16 0:02 [rcu_preempt]
root 17 0.0 0.0 0 0 ? S 10:16 0:00 [rcu_exp_par_gp_kthread_worker/0]
root 18 0.0 0.0 0 0 ? S 10:16 0:00 [rcu_exp_gp_kthread_worker]
root 19 0.0 0.0 0 0 ? S 10:16 0:00 [migration/0]
root 20 0.0 0.0 0 0 ? S 10:16 0:00 [idle_inject/0]
root 21 0.0 0.0 0 0 ? S 10:16 0:00 [cpuhp/0]
root 22 0.0 0.0 0 0 ? S 10:16 0:00 [cpuhp/1]
root 23 0.0 0.0 0 0 ? S 10:16 0:00 [idle_inject/1]
root 24 0.0 0.0 0 0 ? S 10:16 0:00 [migration/1]
root 25 0.0 0.0 0 0 ? S 10:16 0:00 [ksoftirqd/1]
root 27 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/1:0H-kblockd]
root 31 0.0 0.0 0 0 ? I 10:16 0:00 [kworker/u10:1-events_unbound]
root 32 0.0 0.0 0 0 ? S 10:16 0:00 [kdevtmpfs]
root 33 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-inet_frag_wq]
root 34 0.0 0.0 0 0 ? I 10:16 0:00 [rcu_tasks_kthread]
root 35 0.0 0.0 0 0 ? I 10:16 0:00 [rcu_tasks_rude_kthread]
root 36 0.0 0.0 0 0 ? I 10:16 0:00 [rcu_tasks_trace_kthread]
root 37 0.0 0.0 0 0 ? S 10:16 0:00 [kauditd]
root 38 0.0 0.0 0 0 ? S 10:16 0:00 [khungtaskd]
root 39 0.0 0.0 0 0 ? S 10:16 0:00 [oom_reaper]
root 40 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-writeback]
root 41 0.0 0.0 0 0 ? S 10:16 0:00 [kcompactd0]
root 42 0.0 0.0 0 0 ? SN 10:16 0:00 [ksmd]
root 43 0.0 0.0 0 0 ? SN 10:16 0:03 [khugepaged]
root 44 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-cryptd]
root 45 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kblockd]
root 46 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-blkcg_punt_bio]
root 47 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kintegrityd]
root 48 0.0 0.0 0 0 ? S 10:16 0:00 [irq/9-acpi]
root 51 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-tpm_dev_wq]
root 52 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-md]
root 53 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-md_bitmap]
root 54 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-edac-poller]
root 55 0.0 0.0 0 0 ? S 10:16 0:00 [watchdogd]
root 58 0.0 0.0 0 0 ? S 10:16 0:00 [kswapd0]
root 75 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kthrotld]
root 81 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-acpi_thermal_pm]
root 82 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kmpath_rdacd]
root 83 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kaluad]
root 85 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-mld]
root 86 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/0:1H-kblockd]
root 87 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-ipv6_addrconf]
root 92 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kstrp]
root 98 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/u11:0]
root 99 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/u12:0-ttm]
root 100 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/u13:0-ttm]
root 122 0.0 0.0 0 0 ? I 10:16 0:00 [kworker/u10:2-events_unbound]
root 148 0.0 0.0 0 0 ? I 10:16 0:00 [kworker/u9:5-events_unbound]
root 279 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kmpathd]
root 280 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kmpath_handlerd]
root 413 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-iscsi_conn_cleanup]
root 607 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-ata_sff]
root 614 0.0 0.0 0 0 ? S 10:16 0:00 [scsi_eh_0]
root 615 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-scsi_tmf_0]
root 616 0.0 0.0 0 0 ? S 10:16 0:00 [scsi_eh_1]
root 617 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-scsi_tmf_1]
root 630 0.0 0.0 0 0 ? S 10:16 0:00 [irq/18-vmwgfx]
root 632 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-ttm]
root 641 0.0 0.0 0 0 ? S 10:16 0:00 [scsi_eh_2]
root 642 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-scsi_tmf_2]
root 715 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kdmflush/253:0]
root 721 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-kdmflush/253:1]
root 753 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfsalloc]
root 754 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs_mru_cache]
root 755 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-buf/dm-0]
root 756 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-conv/dm-0]
root 757 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-reclaim/dm-0]
root 758 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-blockgc/dm-0]
root 759 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-inodegc/dm-0]
root 760 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-log/dm-0]
root 761 0.0 0.0 0 0 ? I< 10:16 0:00 [kworker/R-xfs-cil/dm-0]
root 762 0.0 0.0 0 0 ? S 10:16 0:00 [xfsaild/dm-0]
root 853 0.0 0.2 24972 9504 ? Ss 10:17 0:00 /usr/lib/systemd/systemd-journald
root 869 0.0 0.1 15920 5992 ? Ss 10:17 0:00 /usr/lib/systemd/systemd-userdbd
root 900 0.0 0.3 36828 12124 ? Ss 10:17 0:00 /usr/lib/systemd/systemd-udevd
root 969 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-buf/sda2]
root 970 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-conv/sda2]
root 971 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-reclaim/sda2]
root 972 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-blockgc/sda2]
root 973 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-inodegc/sda2]
root 974 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-log/sda2]
root 975 0.0 0.0 0 0 ? I< 10:17 0:00 [kworker/R-xfs-cil/sda2]
root 976 0.0 0.0 0 0 ? S 10:17 0:00 [xfsaild/sda2]
root 997 0.0 0.0 94412 3292 ? S<sl 10:17 0:00 /usr/sbin/auditd
root 999 0.0 0.0 6180 2876 ? S< 10:17 0:00 /usr/sbin/sedispatch
dbus 1021 0.0 0.1 9072 4284 ? Ss 10:17 0:00 /usr/bin/dbus-broker-launch --scope system --audit
dbus 1044 0.0 0.1 7688 5632 ? S 10:17 0:02 dbus-broker --log 4 --controller 9 --machine-id a6bc2c1625c94353ba65ae990fba8767 --max-byt
avahi 1045 0.0 0.1 6176 4140 ? Ss 10:17 0:00 avahi-daemon: running [linux.local]
chrony 1046 0.0 0.1 84804 5208 ? Ss 10:17 0:00 /usr/sbin/chronyd -n -F 2
gnome-r+ 1049 0.0 0.5 523140 21328 ? Ssl 10:17 0:00 /usr/libexec/gnome-remote-desktop-daemon --system
root 1050 0.0 0.0 80428 3364 ? Ssl 10:17 0:00 /usr/sbin/irqbalance
libstor+ 1051 0.0 0.0 2520 1856 ? Ss 10:17 0:00 /usr/bin/lsmd -d
root 1052 0.0 0.0 3112 1880 ? Ss 10:17 0:00 /usr/sbin/mcelog --daemon --foreground
polkitd 1053 0.0 0.2 382684 10800 ? Ssl 10:17 0:03 /usr/lib/polkit-1/polkitd --no-debug --log-level=err
rtkit 1054 0.0 0.0 86868 3140 ? SNsl 10:17 0:00 /usr/libexec/rtkit-daemon
root 1055 0.0 0.2 530496 7736 ? Ssl 10:17 0:00 /usr/libexec/accounts-daemon
root 1056 0.0 0.1 527760 6408 ? Ssl 10:17 0:00 /usr/libexec/switcheroo-control
root 1058 0.0 0.2 19128 10112 ? Ss 10:17 0:00 /usr/lib/systemd/systemd-logind
root 1059 0.0 0.3 541968 13028 ? Ssl 10:17 0:00 /usr/libexec/udisks2/udisksd
root 1061 0.0 0.2 530596 7596 ? Ssl 10:17 0:00 /usr/libexec/upowerd
avahi 1065 0.0 0.0 6176 1580 ? S 10:17 0:00 avahi-daemon: chroot helper
root 1082 0.0 0.0 4368 2812 ? SNs 10:17 0:00 /usr/sbin/alsactl -s -n 19 -c -E ALSA_CONFIG_PATH=/etc/alsa/alsactl.conf --initfile=/lib/a
root 1120 0.0 0.3 390084 11664 ? Ssl 10:17 0:00 /usr/sbin/ModemManager
root 1121 0.0 1.1 360960 44620 ? Ssl 10:17 0:00 /usr/bin/python3 -sP /usr/sbin/firewalld --nofork --nopid
root 1176 0.0 0.5 554520 19448 ? Ssl 10:17 0:00 /usr/sbin/NetworkManager --no-daemon
root 1186 0.0 0.2 253072 9996 ? Ss 10:17 0:00 /usr/sbin/cupsd -l
root 1188 0.0 0.1 9160 6636 ? Ss 10:17 0:00 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
root 1190 0.0 0.8 489296 30588 ? Ssl 10:17 0:01 /usr/bin/python3 -Es /usr/sbin/tuned -l -P
root 1196 0.0 0.0 302548 2236 ? Ssl 10:17 0:00 /usr/bin/rhsmcertd
root 1206 0.0 0.0 4676 2576 ? Ss 10:17 0:00 /usr/sbin/atd -f
root 1207 0.0 0.0 229732 3544 ? Ss 10:17 0:00 /usr/sbin/crond -n
root 1208 0.0 0.2 531436 8736 ? Ssl 10:17 0:00 /usr/sbin/gdm
root 1250 0.0 0.2 162340 8264 ? Ssl 10:17 0:01 /usr/sbin/rsyslogd -n
root 1353 0.0 0.7 487688 28428 ? Ssl 10:17 0:00 /usr/bin/python3 -Es /usr/sbin/tuned-ppd -l
colord 2056 0.0 0.2 533884 11120 ? Ssl 10:17 0:00 /usr/libexec/colord
root 2697 0.0 0.1 15324 5384 ? Ss 10:17 0:00 /usr/sbin/wpa_supplicant -c /etc/wpa_supplicant/wpa_supplicant.conf -u -s
root 2828 0.0 0.2 606440 10652 ? Sl 10:37 0:00 gdm-session-worker [pam/gdm-password]
student 2842 0.0 0.4 23884 15016 ? Ss 10:37 0:02 /usr/lib/systemd/systemd --user
student 2844 0.0 0.0 14148 2900 ? S 10:37 0:00 (sd-pam)
student 2861 0.0 0.2 534332 7612 ? Sl 10:37 0:00 /usr/bin/gnome-keyring-daemon --daemonize --login
student 2872 0.0 0.1 453616 5752 tty2 Ssl+ 10:37 0:00 /usr/libexec/gdm-wayland-session /usr/bin/gnome-session
student 2877 0.0 0.1 8680 3892 ? Ss 10:37 0:00 /usr/bin/dbus-broker-launch --scope user
student 2879 0.0 0.1 6648 4568 ? S 10:37 0:01 dbus-broker --log 4 --controller 9 --machine-id a6bc2c1625c94353ba65ae990fba8767 --max-byt
student 2885 0.0 0.3 555400 13784 tty2 Sl+ 10:37 0:00 /usr/libexec/gnome-session-binary
student 2943 0.0 2.3 974872 87968 ? SLsl 10:37 0:01 /usr/libexec/gnome-remote-desktop-daemon
student 2944 0.0 0.1 307916 5092 ? Ssl 10:37 0:00 /usr/libexec/gnome-session-ctl --monitor
student 2946 0.0 0.4 851116 15120 ? Ssl 10:37 0:00 /usr/libexec/gnome-session-binary --systemd-service --session=gnome
student 2956 0.0 0.2 534176 7780 ? Ssl 10:37 0:00 /usr/bin/gnome-keyring-daemon --start --foreground --components=secrets
student 2984 0.8 9.6 4145168 362636 ? Ssl 10:37 0:38 /usr/bin/gnome-shell
student 2993 0.0 0.2 535596 8920 ? Ssl 10:37 0:00 /usr/libexec/gvfsd
student 2999 0.0 0.1 677644 6760 ? Sl 10:37 0:00 /usr/libexec/gvfsd-fuse /run/user/1000/gvfs -f
student 3025 0.0 0.1 380372 7220 ? Ssl 10:37 0:00 /usr/libexec/at-spi-bus-launcher
student 3031 0.0 0.1 8552 3756 ? S 10:37 0:00 /usr/bin/dbus-broker-launch --config-file=/usr/share/defaults/at-spi2/accessibility.conf -
student 3032 0.0 0.0 4780 2692 ? S 10:37 0:00 dbus-broker --log 4 --controller 9 --machine-id a6bc2c1625c94353ba65ae990fba8767 --max-byt
student 3033 0.0 0.1 233548 6792 ? Ssl 10:37 0:00 /usr/libexec/at-spi2-registryd --use-gnome-session
student 3044 0.0 0.5 662884 19676 ? Ssl 10:37 0:00 /usr/libexec/gnome-shell-calendar-server
student 3045 0.0 0.1 527248 5980 ? Ssl 10:37 0:00 /usr/libexec/xdg-permission-store
student 3067 0.0 0.7 1239172 26604 ? Ssl 10:37 0:00 /usr/libexec/evolution-source-registry
student 3083 0.0 0.3 606744 11940 ? Ssl 10:37 0:01 /usr/bin/ibus-daemon --panel disable
student 3084 0.0 0.1 601472 6632 ? Ssl 10:37 0:00 /usr/libexec/gsd-a11y-settings
student 3105 0.0 0.5 706440 22436 ? Ssl 10:37 0:00 /usr/libexec/gsd-color
student 3119 0.0 0.2 618272 10408 ? Ssl 10:37 0:00 /usr/libexec/gsd-datetime
student 3120 0.0 0.2 603948 8092 ? Ssl 10:37 0:00 /usr/libexec/gsd-housekeeping
student 3121 0.0 0.5 705140 21796 ? Ssl 10:37 0:00 /usr/libexec/gsd-keyboard
student 3124 0.0 0.6 776912 24732 ? Ssl 10:37 0:00 /usr/libexec/gsd-media-keys
student 3125 0.0 0.6 706252 22980 ? Ssl 10:37 0:00 /usr/libexec/gsd-power
student 3127 0.0 0.3 545564 11744 ? Ssl 10:37 0:00 /usr/libexec/gsd-print-notifications
student 3140 0.0 0.1 749160 6572 ? Ssl 10:37 0:00 /usr/libexec/gsd-rfkill
student 3154 0.0 0.1 527528 6116 ? Ssl 10:37 0:00 /usr/libexec/gsd-screensaver-proxy
student 3162 0.0 0.2 685908 11024 ? Ssl 10:37 0:00 /usr/libexec/gsd-sharing
student 3168 0.0 1.1 915816 41528 ? Sl 10:37 0:01 /usr/libexec/evolution-data-server/evolution-alarm-notify
student 3169 0.0 0.2 677396 7932 ? Ssl 10:37 0:00 /usr/libexec/gsd-smartcard
student 3181 0.0 0.1 305328 6920 ? Sl 10:37 0:00 /usr/libexec/gsd-disk-utility-notify
student 3182 0.0 0.2 608376 8640 ? Ssl 10:37 0:00 /usr/libexec/gsd-sound
student 3184 0.0 0.5 705344 21984 ? Ssl 10:37 0:00 /usr/libexec/gsd-subman
student 3189 0.0 0.1 750832 6940 ? Ssl 10:37 0:00 /usr/libexec/gsd-usb-protection
student 3192 0.2 2.9 1224928 111240 ? Sl 10:37 0:11 /usr/bin/gnome-software --gapplication-service
student 3199 0.0 0.6 706712 23292 ? Ssl 10:37 0:00 /usr/libexec/gsd-wacom
student 3272 0.0 0.1 528424 7060 ? Sl 10:37 0:00 /usr/libexec/ibus-dconf
student 3273 0.6 0.8 715764 33220 ? Sl 10:37 0:26 /usr/libexec/ibus-extension-gtk3
student 3317 0.0 0.4 641732 15252 ? Sl 10:37 0:00 /usr/libexec/gsd-printer
student 3318 0.0 0.1 528380 6936 ? Ssl 10:37 0:00 /usr/libexec/ibus-portal
student 3321 0.0 0.5 732404 21552 ? Ssl 10:37 0:00 /usr/libexec/goa-daemon
student 3323 0.0 0.7 2758200 27980 ? Ssl 10:37 0:00 /usr/bin/gjs -m /usr/share/gnome-shell/org.gnome.ScreenSaver
student 3326 0.0 0.7 2758212 27388 ? Ssl 10:37 0:00 /usr/bin/gjs -m /usr/share/gnome-shell/org.gnome.Shell.Notifications
student 3328 0.0 0.6 1111176 23188 ? Ssl 10:37 0:00 /usr/libexec/evolution-calendar-factory
student 3331 0.0 0.3 612448 11712 ? Ssl 10:37 0:00 /usr/libexec/gvfs-udisks2-volume-monitor
student 3380 0.0 0.1 529424 6724 ? Ssl 10:38 0:00 /usr/libexec/gvfs-gphoto2-volume-monitor
student 3407 0.0 0.2 541844 10516 ? Ssl 10:38 0:01 /usr/libexec/goa-identity-service
student 3415 0.0 0.1 527824 6316 ? Ssl 10:38 0:00 /usr/libexec/gvfs-mtp-volume-monitor
student 3421 0.0 0.1 527520 6200 ? Ssl 10:38 0:00 /usr/libexec/gvfs-goa-volume-monitor
student 3435 0.0 0.6 963816 25960 ? Ssl 10:38 0:00 /usr/libexec/evolution-addressbook-factory
sssd 3473 0.0 0.2 243912 8004 ? Ss 10:38 0:01 /usr/libexec/sssd/sssd_kcm --logger=files
student 3483 0.0 0.1 454724 7136 ? Sl 10:38 0:00 /usr/libexec/ibus-engine-simple
root 3494 0.0 0.0 0 0 ? I< 10:38 0:00 [kworker/0:2H-kblockd]
root 3495 0.0 0.0 0 0 ? I< 10:38 0:00 [kworker/1:2H-kblockd]
root 3510 0.1 2.0 486324 76856 ? Ssl 10:38 0:08 /usr/bin/python3 /usr/libexec/rhsm-service
student 3536 0.0 0.3 322936 12736 ? Ssl 10:38 0:00 /usr/bin/pipewire
student 3539 0.0 0.6 709136 24088 ? Ssl 10:38 0:01 /usr/bin/wireplumber
student 3541 0.0 0.2 390140 9340 ? Ssl 10:38 0:00 /usr/bin/pipewire-pulse
student 3545 0.0 0.4 1187424 15860 ? Ssl 10:38 0:00 /usr/libexec/xdg-desktop-portal
student 3571 0.0 0.1 826892 6724 ? Ssl 10:38 0:00 /usr/libexec/xdg-document-portal
root 3599 0.0 0.0 2472 1808 ? Ss 10:38 0:00 fusermount3 -o rw,nosuid,nodev,fsname=portal,auto_unmount,subtype=portal -- /run/user/1000
student 3631 0.0 0.9 817364 37092 ? Ssl 10:38 0:03 /usr/libexec/xdg-desktop-portal-gnome
root 3706 0.0 0.6 566116 25568 ? Ssl 10:38 0:01 /usr/libexec/fwupd/fwupd
student 3728 0.0 0.6 715232 24116 ? Ssl 10:38 0:00 /usr/libexec/xdg-desktop-portal-gtk
student 3729 0.0 0.1 454324 6412 ? Ssl 10:38 0:00 /usr/libexec/gvfsd-metadata
student 3758 0.1 8.5 1874376 321660 ? Ssl 10:38 0:05 /usr/bin/ptyxis --gapplication-service
student 3766 0.0 0.1 377784 6932 ? Ssl 10:38 0:00 /usr/libexec/ptyxis-agent --socket-fd=3 --rlimit-nofile=1024
student 3783 0.0 0.0 984 576 ? S 10:39 0:00 catatonit -P
student 3809 0.0 1.0 202672 39748 ? S 10:39 0:00 /usr/bin/Xwayland :0 -rootless -noreset -accessx -core -auth /run/user/1000/.mutter-Xwayla
student 3819 0.0 1.3 889844 51136 ? Ssl 10:39 0:00 /usr/libexec/gsd-xsettings
student 3832 0.0 0.3 243984 12296 ? Sl 10:39 0:00 /usr/libexec/ibus-x11
student 3853 0.0 2.6 1237600 99484 ? Sl 10:39 0:00 /usr/libexec/mutter-x11-frames
student 3884 0.0 0.1 230180 5732 pts/0 Ss 10:39 0:00 /usr/bin/bash
student 3978 0.0 0.1 229400 5556 ? Ssl 10:42 0:00 /usr/libexec/dconf-service
root 4054 0.0 0.0 0 0 ? I 10:49 0:01 [kworker/0:0-events]
root 4097 0.0 0.0 0 0 ? I 11:01 0:00 [kworker/u10:0-kvfree_rcu_reclaim]
root 4171 0.0 0.0 0 0 ? I 11:18 0:00 [kworker/u9:1-events_unbound]
root 4177 0.0 0.0 0 0 ? I< 11:21 0:00 [kworker/u13:2]
root 4196 0.0 0.0 0 0 ? I 11:23 0:00 [kworker/1:0-ata_sff]
root 4197 0.0 0.0 0 0 ? I< 11:24 0:00 [kworker/u12:2]
root 4212 0.0 0.0 0 0 ? I 11:32 0:00 [kworker/u9:0-events_unbound]
root 4234 0.0 0.0 0 0 ? I 11:40 0:00 [kworker/1:1-ata_sff]
root 4235 0.0 0.0 0 0 ? I 11:43 0:00 [kworker/0:2-ata_sff]
root 4239 0.0 0.0 0 0 ? I 11:45 0:00 [kworker/1:2-mm_percpu_wq]
root 4249 0.0 0.0 0 0 ? I 11:46 0:00 [kworker/u10:3]
root 4251 0.0 0.0 0 0 ? I 11:49 0:00 [kworker/0:1-events_freezable_pwr_efficient]
root 4252 0.0 0.1 16512 6800 ? S 11:49 0:00 systemd-userwork: waiting...
root 4253 0.0 0.1 16512 6792 ? S 11:49 0:00 systemd-userwork: waiting...
root 4254 0.0 0.1 16512 6912 ? S 11:49 0:00 systemd-userwork: waiting...
root 4300 0.0 0.0 0 0 ? I< 11:50 0:00 [kworker/0:0H-kblockd]
student 4307 100 0.1 230720 4136 pts/0 R+ 11:50 0:00 ps aux
student@localhost:~$ ps aux | grep httpd
student 4311 0.0 0.0 227704 2168 pts/0 S+ 11:50 0:00 grep --color=auto httpd
student@localhost:~$ ps aux | grep defunct
student 4331 0.0 0.0 227704 2188 pts/0 S+ 11:51 0:00 grep --color=auto defunct
student@localhost:~$ w
11:44:18 up 41 min, 1 user, load average: 0.15, 0.10, 0.11
USER TTY LOGIN@ IDLE JCPU PCPU WHAT
student tty2 11:04 40:46 0.08s 0.07s /usr/libexec/gnome-session-binary
student@localhost:~$ loginctl list-users
UID USER LINGER STATE
1000 student no active
1 users listed.
student@localhost:~$ loginctl list-sessions
SESSION UID USER SEAT LEADER CLASS TTY IDLE SINCE
2 1000 student seat0 2805 user tty2 no -
3 1000 student - 2816 manager - no -
2 sessions listed.
29.2 Kill zombie process
29.2 Kill zombie process
In thia article, zombie from rhcsa/zombie at master · sandervanvugt/rhcsa will be used for demo.
Install git to download the zombie process
sudo dnf install -y git
Clone git
git clone https://github.com/sandervanvugt/rhcsa
Run zombie process in background
cd rhcsa
ls
./zombie &
Find zombie process PID
PID locate at second column.
ps aux | grep defunct
Example: PID is 4745
student 4745 0.0 0.0 0 0 pts/0 Z 11:49 0:00 [zombie] <defunct>
5. Find the zombie process parent PID
ps -o ppid= -p [Zombie process PID]
Example: ps -o ppid= -p 4745
6. Kill the zombie parent process
-SIGTERM means signal terminate in proper way, not forcing.
kill -SIGTERM [Zombie parent process PID]
Example: kill -SIGTERM 4743
7. Verify
ps aux | grep defunct
8. Cleanup
sudo dnf remove -y git
sudo dnf autoremove -y
cd ~
rm -rf rhcsa
Result
student@localhost:~$ sudo dnf install -y git;
[sudo] password for student:
Updating Subscription Management repositories.
Waiting for process with pid 4305 to finish.
Last metadata expiration check: 0:00:02 ago on Tue 14 Jul 2026 11:22:23 AM +08.
Dependencies resolved.
=============================================================================================================================================================
Package Architecture Version Repository Size
=============================================================================================================================================================
Installing:
git x86_64 2.52.0-1.el10 rhel-10-for-x86_64-appstream-rpms 46 k
Installing dependencies:
git-core x86_64 2.52.0-1.el10 rhel-10-for-x86_64-appstream-rpms 5.2 M
git-core-doc noarch 2.52.0-1.el10 rhel-10-for-x86_64-appstream-rpms 3.2 M
perl-Error noarch 1:0.17029-18.el10 rhel-10-for-x86_64-appstream-rpms 46 k
perl-Git noarch 2.52.0-1.el10 rhel-10-for-x86_64-appstream-rpms 43 k
perl-TermReadKey x86_64 2.38-24.el10 rhel-10-for-x86_64-appstream-rpms 40 k
perl-lib x86_64 0.65-512.2.el10_0 rhel-10-for-x86_64-appstream-rpms 16 k
Transaction Summary
=============================================================================================================================================================
Install 7 Packages
Total download size: 8.6 M
Installed size: 40 M
Downloading Packages:
(1/7): perl-lib-0.65-512.2.el10_0.x86_64.rpm 28 kB/s | 16 kB 00:00
(2/7): perl-TermReadKey-2.38-24.el10.x86_64.rpm 60 kB/s | 40 kB 00:00
(3/7): git-2.52.0-1.el10.x86_64.rpm 84 kB/s | 46 kB 00:00
(4/7): perl-Git-2.52.0-1.el10.noarch.rpm 62 kB/s | 43 kB 00:00
(5/7): perl-Error-0.17029-18.el10.noarch.rpm 34 kB/s | 46 kB 00:01
(6/7): git-core-doc-2.52.0-1.el10.noarch.rpm 87 kB/s | 3.2 MB 00:37
(7/7): git-core-2.52.0-1.el10.x86_64.rpm 114 kB/s | 5.2 MB 00:46
-------------------------------------------------------------------------------------------------------------------------------------------------------------
Total 185 kB/s | 8.6 MB 00:47
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Installing : git-core-2.52.0-1.el10.x86_64 1/7
Installing : git-core-doc-2.52.0-1.el10.noarch 2/7
Installing : perl-lib-0.65-512.2.el10_0.x86_64 3/7
Installing : perl-TermReadKey-2.38-24.el10.x86_64 4/7
Installing : perl-Error-1:0.17029-18.el10.noarch 5/7
Installing : git-2.52.0-1.el10.x86_64 6/7
Installing : perl-Git-2.52.0-1.el10.noarch 7/7
Running scriptlet: perl-Git-2.52.0-1.el10.noarch 7/7
Installed products updated.
Installed:
git-2.52.0-1.el10.x86_64 git-core-2.52.0-1.el10.x86_64 git-core-doc-2.52.0-1.el10.noarch perl-Error-1:0.17029-18.el10.noarch
perl-Git-2.52.0-1.el10.noarch perl-TermReadKey-2.38-24.el10.x86_64 perl-lib-0.65-512.2.el10_0.x86_64
Complete!
student@localhost:~$ git clone https://github.com/sandervanvugt/rhcsa
Cloning into 'rhcsa'...
remote: Enumerating objects: 51, done.
remote: Counting objects: 100% (43/43), done.
remote: Compressing objects: 100% (33/33), done.
Receiving objects: 100% (51/51), 20.15 KiB | 147.00 KiB/s, done.
remote: Total 51 (delta 17), reused 36 (delta 10), pack-reused 8 (from 1)
Resolving deltas: 100% (18/18), done.
student@localhost:~$ cd rhcsa
student@localhost:~/rhcsa$ ls
argument.sh countdown countdown.sh lab31.txt nov2024history.txt README.md stress1.service zombie
Containerfile 'countdown 3' lab23.sh mini-exam-30min.txt nov2024.txt resources.txt stress2.service
student@localhost:~/rhcsa$ ./zombie &
[1] 4743
student@localhost:~/rhcsa$ PID = 4743 - Parent
PID = 4745 - Child
ps aux | grep defunct
student 4745 0.0 0.0 0 0 pts/0 Z 11:49 0:00 [zombie] <defunct>
student 4747 0.0 0.0 227704 2216 pts/0 S+ 11:49 0:00 grep --color=auto defunct
student@localhost:~/rhcsa$ ps -o ppid= -p 4745
4743
student@localhost:~/rhcsa$ kill -SIGTERM 4743
[1]+ Terminated ./zombie
student@localhost:~/rhcsa$ ps aux | grep defunct
student 5323 0.0 0.0 227704 2152 pts/0 S+ 11:56 0:00 grep --color=auto defunct
student@localhost:~/rhcsa$ sudo dnf remove -y git
[sudo] password for student:
Updating Subscription Management repositories.
Dependencies resolved.
=============================================================================================================================================================
Package Architecture Version Repository Size
=============================================================================================================================================================
Removing:
git x86_64 2.52.0-1.el10 @rhel-10-for-x86_64-appstream-rpms 56 k
Removing unused dependencies:
git-core x86_64 2.52.0-1.el10 @rhel-10-for-x86_64-appstream-rpms 24 M
git-core-doc noarch 2.52.0-1.el10 @rhel-10-for-x86_64-appstream-rpms 15 M
perl-Error noarch 1:0.17029-18.el10 @rhel-10-for-x86_64-appstream-rpms 77 k
perl-Git noarch 2.52.0-1.el10 @rhel-10-for-x86_64-appstream-rpms 64 k
perl-TermReadKey x86_64 2.38-24.el10 @rhel-10-for-x86_64-appstream-rpms 64 k
perl-lib x86_64 0.65-512.2.el10_0 @rhel-10-for-x86_64-appstream-rpms 8.5 k
Transaction Summary
=============================================================================================================================================================
Remove 7 Packages
Freed space: 40 M
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Erasing : git-2.52.0-1.el10.x86_64 1/7
Erasing : git-core-doc-2.52.0-1.el10.noarch 2/7
Erasing : perl-Git-2.52.0-1.el10.noarch 3/7
Erasing : perl-Error-1:0.17029-18.el10.noarch 4/7
Erasing : perl-lib-0.65-512.2.el10_0.x86_64 5/7
Erasing : git-core-2.52.0-1.el10.x86_64 6/7
Erasing : perl-TermReadKey-2.38-24.el10.x86_64 7/7
Running scriptlet: perl-TermReadKey-2.38-24.el10.x86_64 7/7
Installed products updated.
Removed:
git-2.52.0-1.el10.x86_64 git-core-2.52.0-1.el10.x86_64 git-core-doc-2.52.0-1.el10.noarch perl-Error-1:0.17029-18.el10.noarch
perl-Git-2.52.0-1.el10.noarch perl-TermReadKey-2.38-24.el10.x86_64 perl-lib-0.65-512.2.el10_0.x86_64
Complete!
student@localhost:~/rhcsa$ sudo dnf autoremove -y
Updating Subscription Management repositories.
Last metadata expiration check: 0:35:15 ago on Tue 14 Jul 2026 11:22:23 AM +08.
Dependencies resolved.
=============================================================================================================================================================
Package Architecture Version Repository Size
=============================================================================================================================================================
Removing:
gnupg2-smime x86_64 2.4.5-4.el10_1 @rhel-10-for-x86_64-appstream-rpms 582 k
kernel-modules-extra-matched x86_64 6.12.0-211.26.1.el10_2 @rhel-10-for-x86_64-baseos-rpms 0
p11-kit-client x86_64 0.26.2-1.el10 @rhel-10-for-x86_64-baseos-rpms 1.3 M
pcsc-lite x86_64 2.2.3-2.el10 @rhel-10-for-x86_64-baseos-rpms 215 k
pcsc-lite-ccid x86_64 1.6.0-2.el10 @rhel-10-for-x86_64-baseos-rpms 404 k
pcsc-lite-libs x86_64 2.2.3-2.el10 @rhel-10-for-x86_64-baseos-rpms 64 k
systemd-rpm-macros noarch 257-23.el10_2.2 @rhel-10-for-x86_64-baseos-rpms 11 k
Transaction Summary
=============================================================================================================================================================
Remove 7 Packages
Freed space: 2.5 M
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
Preparing : 1/1
Erasing : systemd-rpm-macros-257-23.el10_2.2.noarch 1/7
Erasing : kernel-modules-extra-matched-6.12.0-211.26.1.el10_2.x86_64 2/7
Running scriptlet: pcsc-lite-2.2.3-2.el10.x86_64 3/7
Removed '/etc/systemd/system/sockets.target.wants/pcscd.socket'.
Erasing : pcsc-lite-2.2.3-2.el10.x86_64 3/7
Running scriptlet: pcsc-lite-2.2.3-2.el10.x86_64 3/7
Erasing : pcsc-lite-ccid-1.6.0-2.el10.x86_64 4/7
Running scriptlet: pcsc-lite-ccid-1.6.0-2.el10.x86_64 4/7
Erasing : pcsc-lite-libs-2.2.3-2.el10.x86_64 5/7
Erasing : p11-kit-client-0.26.2-1.el10.x86_64 6/7
Erasing : gnupg2-smime-2.4.5-4.el10_1.x86_64 7/7
Running scriptlet: gnupg2-smime-2.4.5-4.el10_1.x86_64 7/7
Installed products updated.
Removed:
gnupg2-smime-2.4.5-4.el10_1.x86_64 kernel-modules-extra-matched-6.12.0-211.26.1.el10_2.x86_64 p11-kit-client-0.26.2-1.el10.x86_64
pcsc-lite-2.2.3-2.el10.x86_64 pcsc-lite-ccid-1.6.0-2.el10.x86_64 pcsc-lite-libs-2.2.3-2.el10.x86_64
systemd-rpm-macros-257-23.el10_2.2.noarch
Complete!
student@localhost:~/rhcsa$ cd ~
student@localhost:~$ ls
Desktop Documents Downloads Music Pictures Public rhcsa Templates Videos
student@localhost:~$ rm -rf rhcsa
student@localhost:~$ ls
Desktop Documents Downloads Music Pictures Public Templates Videos
student@localhost:~$
29.3 Kill User's Specific Process
29.3 Kill User's Specific Process
User Creation
Create user
sudo useradd [User]
Example: sudo useradd anil
Change password
sudo passwd [User]
Example: sudo passwd anil
Run Background Process
Switch user
su - [User]
Example: su - anil
Run dummy background process
sleep 600 &
Logout
exit
Gently Kill User Process
Find processes owned by a specific user
ps -u [User]
Example: ps -u anil
Gently terminate specific processes
pkill -u [User] "[Process]"
Example: pkill -u anil "sleep"
[Optional] Gently terminate all processes
pkill -u [User]
Example: pkill -u anil
Verify
ps -u [User]
Example: ps -u anil
Run Background Process
Switch user
su - [User]
Example: su - anil
Run dummy background process
sleep 600 &
Logout
exit
Force Kill User Process
Find processes owned by a specific user
ps -u [User]
Example: ps -u anil
Force terminate specific processes
kill -9 [PID] or pkill -9 -u [User] "[Process]"
Example: kill -9 or pkill -9 -u anil "sleep"
Verify
ps -u [User]
Example: ps -u anil
Cleanup
Delete user
sudo userdel -r [User]
Example: sudo userdel -r anil
Result
student@localhost:~$ sudo useradd anil
student@localhost:~$ sudo passwd anil
New password:
BAD PASSWORD: The password fails the dictionary check - it is based on a dictionary word
Retype new password:
passwd: password updated successfully
student@localhost:~$ su - anil
Password:
anil@localhost:~$ sleep 600 &
[1] 6577
anil@localhost:~$ exit
logout
student@localhost:~$ ps -u anil
PID TTY TIME CMD
6523 ? 00:00:00 systemd
6525 ? 00:00:00 (sd-pam)
6577 pts/0 00:00:00 sleep
student@localhost:~$ sudo pkill -u anil "sleep"
student@localhost:~$ ps -u anil
PID TTY TIME CMD
6523 ? 00:00:00 systemd
6525 ? 00:00:00 (sd-pam)
student@localhost:~$ su - anil
Password:
Last login: Thu Jul 30 13:49:34 +08 2026 on pts/0
anil@localhost:~$ sleep 600 &
[1] 6703
anil@localhost:~$ exit
logout
student@localhost:~$ ps -u anil
PID TTY TIME CMD
6647 ? 00:00:00 systemd
6649 ? 00:00:00 (sd-pam)
6703 pts/0 00:00:00 sleep
student@localhost:~$ sudo kill -9 6703
student@localhost:~$ ps -u anil
PID TTY TIME CMD
6647 ? 00:00:00 systemd
6649 ? 00:00:00 (sd-pam)
student@localhost:~$ sudo userdel -r anil
29.4 Process Priority
29.4 Process Priority
nice -n [Priority Number] [Command]
Priority Number When number is smaller, priority is higher.
Range: -20 to 19
Tutorial
Start a low-priority task with user access
taskset -c 0 bound strictly to CPU Core 0
taskset -c 0 nice -n 10 dd if=/dev/zero of=/dev/null &
Start a high-priority task with root access
sudo taskset -c 0 nice -n -10 dd if=/dev/zero of=/dev/null &
Check system activity dashboard
top
Press the key 1 to show CPU core status.
Notice the %CPU
root have higher CPU usage (54.2%) than user (41.1%) due to high priority.
Verify
ps -o pid,psr,ni,cmd -p [PID]
Example: ps -o pid,psr,ni,cmd -p 6382
Cleanup
jobs
fg %[Job Index], Example: fg %1
Ctrl+C
Result
student@localhost:~$ taskset -c 0 nice -n 10 dd if=/dev/zero of=/dev/null &
[1] 6382
student@localhost:~$ sudo taskset -c 0 nice -n -10 dd if=/dev/zero of=/dev/null &
[2] 6394
student@localhost:~$ top
top - 15:04:07 up 4:07, 2 users, load average: 1.91, 0.86, 0.53
Tasks: 243 total, 3 running, 240 sleeping, 0 stopped, 0 zombie
%Cpu0 : 21.3 us, 30.6 sy, 6.5 ni, 0.0 id, 0.0 wa, 37.0 hi, 4.6 si, 0.0 st
%Cpu1 : 3.8 us, 12.4 sy, 0.0 ni, 58.1 id, 0.0 wa, 20.4 hi, 5.4 si, 0.0 st
MiB Mem : 3653.2 total, 773.6 free, 1977.8 used, 1161.3 buff/cache
MiB Swap: 2560.0 total, 2560.0 free, 0.0 used. 1675.5 avail Mem
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
6417 root 10 -10 226864 1884 1764 R 57.4 0.1 0:08.52 dd
6382 student 30 10 226864 1884 1764 R 28.1 0.1 0:09.93 dd
3005 student 20 0 4194864 400716 142244 S 20.1 10.7 2:06.42 gnome-shell
5942 student 20 0 1922812 370032 99248 S 17.8 9.9 0:19.65 ptyxis
5932 root 20 0 0 0 0 I 4.6 0.0 0:01.12 kworker/u10:2-events_unbound
31 root 20 0 0 0 0 I 3.6 0.0 0:02.77 kworker/u10:1-events_unbound
6425 student 20 0 231624 5532 3356 R 0.7 0.1 0:00.06 top
15 root 20 0 0 0 0 S 0.3 0.0 0:06.24 ksoftirqd/0
16 root 20 0 0 0 0 I 0.3 0.0 0:05.46 rcu_preempt
635 root -51 0 0 0 0 S 0.3 0.0 0:00.04 irq/18-vmwgfx
5434 root 20 0 0 0 0 I 0.3 0.0 0:00.63 kworker/u9:2-events_unbound
5772 root 0 -20 0 0 0 I 0.3 0.0 0:00.32 kworker/1:1H-kblockd
5951 student 20 0 377784 7056 6248 S 0.3 0.2 0:00.23 ptyxis-agent
6326 root 20 0 0 0 0 I 0.3 0.0 0:00.52 kworker/u9:1-events_unbound
1 root 20 0 44616 36472 10512 S 0.0 1.0 0:07.83 systemd
2 root 20 0 0 0 0 S 0.0 0.0 0:00.08 kthreadd
3 root 20 0 0 0 0 S 0.0 0.0 0:00.00 pool_workqueue_release
4 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/R-rcu_gp
5 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/R-sync_wq
6 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/R-kvfree_rcu_reclaim
7 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/R-slub_flushwq
8 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/R-netns
12 root 20 0 0 0 0 I 0.0 0.0 0:00.00 kworker/u8:0-events_unbound
13 root 20 0 0 0 0 I 0.0 0.0 0:00.03 kworker/u8:1-ipv6_addrconf
14 root 0 -20 0 0 0 I 0.0 0.0 0:00.00 kworker/R-mm_percpu_wq
17 root 20 0 0 0 0 S 0.0 0.0 0:00.00 rcu_exp_par_gp_kthread_worker/0
18 root 20 0 0 0 0 S 0.0 0.0 0:00.11 rcu_exp_gp_kthread_worker
19 root rt 0 0 0 0 S 0.0 0.0 0:00.41 migration/0
20 root -51 0 0 0 0 S 0.0 0.0 0:00.00 idle_inject/0
student@localhost:~$ ps -o pid,psr,ni,cmd -p 6382
PID PSR NI CMD
6382 0 10 dd if=/dev/zero of=/dev/null
student@localhost:~$ ps -o pid,psr,ni,cmd -p 6394
PID PSR NI CMD
6394 1 0 sudo taskset -c 0 nice -n -10 dd if=/dev/zero of=/dev/null
student@localhost:~$ jobs
[1]- Running taskset -c 0 nice -n 10 dd if=/dev/zero of=/dev/null &
[2]+ Running sudo taskset -c 0 nice -n -10 dd if=/dev/zero of=/dev/null &
student@localhost:~$ fg %1
taskset -c 0 nice -n 10 dd if=/dev/zero of=/dev/null
^C23141431+0 records in
23141431+0 records out
11848412672 bytes (12 GB, 11 GiB) copied, 91.0294 s, 130 MB/s
student@localhost:~$ jobs
[2]+ Running sudo taskset -c 0 nice -n -10 dd if=/dev/zero of=/dev/null &
student@localhost:~$ fg %2
sudo taskset -c 0 nice -n -10 dd if=/dev/zero of=/dev/null
^C40734176+0 records in
40734176+0 records out
20855898112 bytes (21 GB, 19 GiB) copied, 97.6555 s, 214 MB/s
Page updated
Google Sites
Report abuse