Linux kernel
The kernel is the core part of the operating system that manages hardware, memory, processes, devices, and system resources.
Operating systems • A+ / IT foundations
Linux is not one single operating system. It is a family of operating systems built around the Linux kernel, with many distributions (“distros”) designed for different users, hardware, support models, and workloads.
Start with the concept
The kernel is the core part of the operating system that manages hardware, memory, processes, devices, and system resources.
A distro combines the Linux kernel with system tools, libraries, package management, installers, applications, configuration, and often a desktop environment.
The graphical desktop experience. Common examples include GNOME, KDE Plasma, Xfce, Cinnamon, and others.
A tool used to install, update, remove, and track software packages. Different Linux families use different package formats and package-management tools.
Linux families
| Family | Examples | Packages / tools | Strengths | Tradeoffs |
|---|---|---|---|---|
| Debian family | Debian, Ubuntu, Linux Mint, Raspberry Pi OS | .deb, apt, dpkg | Large software ecosystem, broad community support, many beginner-friendly options, common on desktops/servers/SBCs. | Package versions may prioritize stability over being newest; behavior varies among Debian-derived distros. |
| Red Hat family | Red Hat Enterprise Linux, Fedora, Rocky Linux, AlmaLinux | .rpm, dnf/yum, rpm | Strong enterprise/server presence, mature administration/security ecosystem, common in professional IT environments. | Enterprise editions/support can involve subscriptions; Fedora moves faster than enterprise-focused relatives. |
| Arch family | Arch Linux, Manjaro | pacman | Flexible, current packages, strong documentation culture, good for learners who want to understand system configuration deeply. | Arch itself expects more manual setup and maintenance; rolling releases can require more attention. |
| SUSE family | openSUSE Leap, Tumbleweed, SUSE Linux Enterprise | .rpm, zypper | Strong system administration tools, enterprise options, stable and rolling-release choices. | Smaller beginner ecosystem than Ubuntu-based distributions in some communities. |
| Alpine Linux | Alpine | apk | Very small and lightweight; widely used in containers and minimal systems. | Uses a different libc/tooling approach than many mainstream desktop distros; can be less beginner-friendly for general desktop use. |
| Cybersecurity distributions | Kali Linux, Parrot Security, BlackArch | Varies by family: APT/DEB for Kali & Parrot; pacman/Arch tooling for BlackArch | Security testing, forensics, network analysis, privacy, research, and training tools prepackaged. | Large toolsets can overwhelm beginners; use only with authorization and learn the underlying Linux/networking concepts first. |
Packages & software
The distro’s package manager downloads software from configured repositories. This is usually the preferred method for system-integrated packages.
Red Hat/Fedora/SUSE families use RPM packages, but the higher-level package manager differs.
Some systems also use formats such as Flatpak, Snap, or AppImage to distribute applications across multiple distributions.
Software can also be compiled from source or installed with scripts, but this requires more care. Always verify the source, instructions, permissions, and security implications.
Common commands
pwdShow the current working directory.
ls / ls -laList files; -la includes hidden files and details.
cdChange directories.
mkdirCreate a directory.
touchCreate an empty file or update a timestamp.
cp / mv / rmCopy, move/rename, and remove files.
cat / lessRead file contents.
grepSearch text for matching patterns.
findSearch the filesystem for files/directories.
chmodChange file permissions.
whoamiShow the current user.
uname -aShow kernel/system information.
cat /etc/os-releaseIdentify the installed distribution/version.
ip addrShow network interfaces and IP addresses.
ip routeShow routing information/default gateway.
pingTest IP reachability and observe response time.
ssInspect sockets/connections/listening services.
ps / topInspect running processes and resource use.
free -hShow memory usage in human-readable units.
lsblkShow block storage devices and partitions.
df -hShow filesystem space usage.
systemctlManage/view systemd services on systems that use systemd.
journalctlView systemd journal logs on systems that use systemd.
manOpen manual pages for commands.
man command, command --help, or trusted documentation when you do not know an option. Do not paste administrative commands from random sources without understanding what they do.Where Linux appears
Linux is widely used for web servers, databases, file services, networking, virtualization hosts, containers, and cloud infrastructure.
Linux images are common choices for cloud VMs because they can be lightweight, automated, remotely administered, and customized for specific workloads.
Raspberry Pi OS is Debian-based. Many single-board computers and maker/embedded systems use Linux because it supports flexible hardware and software development.
Routers, firewalls, NAS devices, monitoring tools, and security appliances often use Linux or Linux-based operating systems internally. Security professionals also use Linux distributions such as Kali Linux and Parrot Security in authorized testing and training environments.
Smart devices, industrial systems, kiosks, media boxes, and appliances may use embedded Linux.
Android uses the Linux kernel, although Android is not a traditional desktop Linux distribution and has a different user-space/application environment.
Linux is common for software development, DevOps, cybersecurity labs, scripting, containers, and programming environments.
Lightweight distributions can sometimes extend the useful life of older computers, although hardware compatibility should still be checked.
Cybersecurity-focused Linux
These distributions package many security, forensics, networking, privacy, and penetration-testing tools together. They are useful in authorized labs and professional environments, but the tools themselves do not replace learning Linux fundamentals, networking, permissions, logs, scripting, and ethical/legal boundaries.
A Debian-based cybersecurity distribution maintained by Offensive Security. Kali is designed for penetration testing, security research, digital forensics, reverse engineering, and training.
Commonly includes or supports tools such as: Nmap, Wireshark, Burp Suite, Metasploit Framework, John the Ripper, Aircrack-ng, Hashcat, and many others.
Good for: cybersecurity labs, network discovery, web testing, packet analysis, digital forensics, and learning security tools in an authorized environment.
Tradeoff: it is not automatically the best everyday beginner desktop just because it has more security tools. Students should first understand what each tool does and use it only where they have permission.
Kali documentationA Debian-based distribution focused on security, privacy, development, and digital forensics. Parrot provides editions aimed at security professionals as well as lighter general-purpose use.
Good for: penetration-testing labs, privacy-focused workflows, development, digital forensics, and security research.
Tradeoff: like Kali, the large security toolkit can overwhelm a new Linux user if the underlying networking and operating-system concepts are not understood first.
Parrot documentationAn Arch-based penetration-testing distribution and repository with a very large collection of security tools.
Good for: experienced Linux users who want an Arch-based environment and a broad security-testing toolkit.
Tradeoff: it assumes more Linux administration comfort than most beginner-focused distributions.
BlackArch guideSome Linux environments are designed around digital forensics, incident response, privacy, or live investigation rather than general desktop use. Examples include forensic-focused distributions and specialized rescue environments.
Technician habit: choose the distribution based on the task. A security lab, a forensic workstation, a Raspberry Pi, a production server, and an everyday laptop may all benefit from different Linux choices.
Why people choose Linux
Ways to access or install Linux
Install a supported Linux image such as Raspberry Pi OS to microSD or other supported storage and boot the device.
Run Linux inside virtualization software on a Windows, macOS, or Linux host. Good for safe practice and snapshots.
Boot many Linux distributions from USB without immediately installing to the internal drive. Good for testing hardware compatibility.
Install Linux alongside another operating system and choose which OS to start at boot. Backups and careful partition planning are essential.
Install Linux as the main operating system on a physical computer. Verify backups, boot mode, storage selection, drivers, and recovery needs first.
Connect to a remote Linux server or cloud VM, often with SSH. Useful for server administration without local installation.
On supported Windows systems, WSL provides a Linux environment integrated with Windows. It is useful for command-line learning and development, but it is not identical to installing Linux directly on bare hardware.
Containers commonly use Linux user-space environments. Containers are useful for applications and labs, but they are not the same as booting a complete Linux desktop/VM.
Notebook
Create four columns: Debian / Red Hat / Arch / SUSE. Add example distros, package format, package manager, and one likely use.
Group commands into: navigation, files, permissions, processes, networking, storage, services/logs, and help. Put the command on the outside and its purpose underneath.
Draw: VM • live USB • dual boot • full install • Pi/SBC • cloud/SSH • WSL. Mark which options change the computer's internal disk and which do not.
Do not only memorize commands. Be ready to choose the command or tool that matches a scenario: check IP address, inspect disk space, identify the OS, review processes, or change permissions.
Official learning resources
kernel.org — official Linux kernel project resources.
External-resource notice: These documentation sites are maintained by their respective projects/organizations. FamilyPD does not own or control their content.