rs — scripts for your Linux server
One command: what is on the server, why it is slow, a security check and hardening, Docker cleanup. A report with ready commands to fix things.
Ubuntu
DebianOne command puts rs on your server — a set of scripts for everyday questions about a Linux server: what runs on it, why it is slow, whether it is secure, how to harden it and where the disk space went.
Every script ends with a summary: what to fix first and with which command.
What is included
| Command | What it does |
|---|---|
rs info | What is on the server: open ports and who can reach them, Docker containers with paths to configs and data, sites and certificates, services, cron. Handy for a server you inherited. More |
rs slow | Why it is slow: a CPU sample (including steal — when the host gives your CPU to neighbours), memory and swap, disk load, OOM, top processes and containers. More |
rs security | Security check: SSH password and root login, brute force, the firewall, databases and the Docker API open to the internet, updates, extra accounts. More |
rs harden | Step-by-step hardening: automatic updates, fail2ban, key-only SSH, a firewall, swap. SSH and firewall changes roll back unless you confirm the login. More |
rs clean | Docker cleanup: what takes space, logs without a limit, unused images and build cache — deleted only after your "yes". More |
What it looks like
$ sudo rs security
==> SSH
✗ root can log in with a password — the first target of brute force
→ add your key, then PermitRootLogin prohibit-password
==> Firewall and open ports
✗ Port 6379 (Redis) listens on 0.0.0.0:6379 and is most likely reachable from the internet
→ bind it to 127.0.0.1 or allow only your IPs
==> Summary: problems 2, worth a look 1
What it means and how to fix: https://runstack.pro/docs/scripts-security
A plain copy of the report is saved to /tmp/rs-<script>.txt — handy to attach to a ticket.
How to run
- Copy the command from the Download block — it appears after you sign in. It contains your personal token, valid for 12 hours.
- Run it on the server. The scripts download, the checksum is verified and you see the list of commands.
- After that — just
sudo rs <command>, no new download. Help for any of them —rs <command> --help.
Is it safe
rs info, rs slow and rs security only read: they install nothing, change no settings and restart no services. rs clean and rs harden change the server only after your "yes" for each step; --plan and --report show what would change without touching anything. The source is readable in /opt/runstack/automations/tools/. Remove: sudo rs remove.
Requirements
- Linux with bash and curl, root access (
sudo). Tested on Ubuntu 22.04 / 24.04 and Debian 12+; the checks work on other distributions too, skipping what is not there.rs harden— Debian and Ubuntu only. - Docker is optional: without it the container parts are skipped.
FAQ
How much is it? Free for now.
Why one page, not five? rs is one tool: one command installs every script, and together they weigh less than a megabyte.
Does it replace monitoring or an audit? No. It is a quick look at the server here and now. For metrics history there is Grafana + Prometheus, for uptime checks — Uptime Kuma.
Are the scripts updated? Yes, with RunStack: rs checks for a new release once a day and tells you how to update.