ONEScripts

Independent, reviewed Bash modules for occasional Linux, VPS, cPanel, and system checks, plus an optional master CLI for selecting and running the installed catalog.

Every module remains standalone: download only the check you need, verify its checksum, and run it with one copyable command. Users who keep the complete catalog can use onescript as a non-interactive CLI or interactive terminal menu. The master executes modules; it does not duplicate their diagnostic logic.

Safety contract

Active scripts are read-only checks. They do not install packages, restart services, delete mail, modify firewall rules, or rewrite configuration.
Default script output does not intentionally display credentials, message contents, machine identifiers, or unredacted public network addresses. Explicit --show-mounts, --show-units, --show-names, and --show-paths options reveal only the selected local metadata.
The master uses the checked-in catalog.tsv allowlist. It never sources modules, evaluates argument strings, downloads code, installs packages, or performs remediation.
Catalog paths are constrained to regular executable files under a real, non-linked scripts/ directory; linked catalogs, module directories, and module files are rejected.
Remote commands download a version-tagged file, verify SHA-256, and execute only after verification succeeds.
Never use curl -k, --insecure, or an unverified curl | bash pipeline.
Run with root privileges only when a check needs complete service, process, or mail-queue visibility.

Master `onescript` CLI

The v2.1.0 release provides the complete verified catalog: onescript, catalog.tsv, SHA256SUMS, and all 14 standalone modules under scripts/. The four original v2.0.0 modules remain unchanged while the launcher and ten Linux server diagnostics are added in v2.1.0.

Version-pinned verified checkout:

git clone --depth 1 --branch v2.1.0 https://github.com/RomeoRaven/ONEScripts.git &&
cd ONEScripts &&
sha256sum -c --strict SHA256SUMS &&
./onescript doctor

Verify the installed catalog:

./onescript doctor

List or inspect modules without opening a menu:

./onescript list

./onescript info exim-queue-health

Run one module. Module arguments must follow -- and are passed without shell evaluation:

./onescript run directory-sizes -- --all /var

Run several modules with their allowlisted safe defaults:

./onescript batch exim-queue-health cpanel-followup-triage

Open the interactive menu:

./onescript menu

Running ./onescript without arguments also opens the menu when both input and output are terminals. Non-interactive automation must use an explicit command.

run returns the selected module's status. batch preflights every selection, runs them in order, continues after module failures, and returns the first nonzero module status. Launcher usage errors return 2; catalog, installation, and lookup failures return 1.

Module catalog

`vps-profile.sh`

Collects a privacy-reduced profile covering OS, resources, filesystems, cPanel, Exim, PHP, database, DNS, services, listeners, security tooling, and available administrative commands. Results are written to a local file for review before sharing.

One-line invocation:

(tmp_dir="$(mktemp -d)" && chmod 700 "$tmp_dir" && trap 'rm -rf "$tmp_dir"' EXIT && curl -fsSLo "$tmp_dir/vps-profile.sh" 'https://raw.githubusercontent.com/RomeoRaven/ONEScripts/v2.1.0/scripts/vps-profile.sh' && printf '%s  %s\n' 'd260a50a2fb3fa0af09edf310da8006246924cf4319a05ad2935c19fd91911ed' "$tmp_dir/vps-profile.sh" | sha256sum -c - && chmod 700 "$tmp_dir/vps-profile.sh" && "$tmp_dir/vps-profile.sh" ./vps-profile.txt)

`cpanel-followup-triage.sh`

Reports failed systemd units, privacy-safe Exim queue counts, and bind scope for selected sensitive listeners on a cPanel VPS.

One-line invocation:

(tmp_dir="$(mktemp -d)" && chmod 700 "$tmp_dir" && trap 'rm -rf "$tmp_dir"' EXIT && curl -fsSLo "$tmp_dir/cpanel-followup-triage.sh" 'https://raw.githubusercontent.com/RomeoRaven/ONEScripts/v2.1.0/scripts/cpanel-followup-triage.sh' && printf '%s  %s\n' '5bb1e14491437c42cf6d5169186a2545176dcbbf5ba4367d84aabf0e851f0a23' "$tmp_dir/cpanel-followup-triage.sh" | sha256sum -c - && chmod 700 "$tmp_dir/cpanel-followup-triage.sh" && "$tmp_dir/cpanel-followup-triage.sh")

`directory-sizes.sh`

Lists immediate subdirectories by allocated disk usage, largest first. Hidden directories are excluded unless --all is supplied.

One-line invocation for the current directory:

(tmp_dir="$(mktemp -d)" && chmod 700 "$tmp_dir" && trap 'rm -rf "$tmp_dir"' EXIT && curl -fsSLo "$tmp_dir/directory-sizes.sh" 'https://raw.githubusercontent.com/RomeoRaven/ONEScripts/v2.1.0/scripts/directory-sizes.sh' && printf '%s  %s\n' '156ea405829ec5c27ed7a462a23e2fe9752704467c93fbc652aef205d24ca65d' "$tmp_dir/directory-sizes.sh" | sha256sum -c - && chmod 700 "$tmp_dir/directory-sizes.sh" && "$tmp_dir/directory-sizes.sh" .)

`exim-queue-health.sh`

Prints only total, frozen, older-than-one-hour, and older-than-one-day Exim queue counts. It does not display sender, recipient, headers, or message bodies.

One-line invocation:

(tmp_dir="$(mktemp -d)" && chmod 700 "$tmp_dir" && trap 'rm -rf "$tmp_dir"' EXIT && curl -fsSLo "$tmp_dir/exim-queue-health.sh" 'https://raw.githubusercontent.com/RomeoRaven/ONEScripts/v2.1.0/scripts/exim-queue-health.sh' && printf '%s  %s\n' 'cf4606e3cd496dd9d8ca9db1281488507e3abeb2f45f460f1af070297a3fec22' "$tmp_dir/exim-queue-health.sh" | sha256sum -c - && chmod 700 "$tmp_dir/exim-queue-health.sh" && "$tmp_dir/exim-queue-health.sh")

Linux server diagnostics wave (v2.1.0)

These modules are published in v2.1.0. Findings use concise key=value output. A successful collection returns 0 even when status=warning|critical|stale; usage errors return 2, and collection failures return 1.

`filesystem-health.sh`

Reports mounted-filesystem capacity and inode pressure by index, without device or mount names by default. Default warning and critical thresholds are 85% and 95%; use --show-mounts for local diagnosis.

./scripts/filesystem-health.sh