# who
# last
# eval getent passwd "{$(awk '/^UID_MIN/ {print $2}' /etc/login.defs)..$(awk '/^UID_MAX/ {print $2}' /etc/login.defs)}" | cut -d: -f1
# getent group | grep 'x:0:' /etc/passwd | cut -d: -f1
# getent group root wheel adm admin | cut -d: -f4
# getent passwd | awk -F/ '$NF != "nologin" && $NF != "false" && $NF != "sync" && $NF != "!"' | cut -d: -f1 |sort |uniq
# systemctl list-units --all --type=service --no-pager
# find / -name coredns.service 2> /dev/null