xyz.sh adds no telemetry and performs no hidden actions. Read the full source on the page or download it with curl -fsSL xyz.sh/ .sh first; every script has a / .sh.sha256 checksum. Piping a remote script to bash is still a risk — review the source first. Sharing is opt-in: only --share, or answering y on a terminal, uploads anything; -y never implies it. IPv4 is masked to a.b.x.x and IPv6 and the hostname are hidden before upload; results are kept in xyz.sh's Cloudflare KV for 30 days on noindex pages.

Which operating systems are supported?

Declared support: Debian, Ubuntu, CentOS, Rocky Linux, and AlmaLinux. The script detects the distribution and warns on an unknown one. It was tested in Docker containers of these systems (syntax, --dry-run, and whatever can run in a container; see tests/RESULTS.md); parts that need systemd, kernel modules, or the public internet still need a real VPS.

No. It runs as a normal user; as root some tools can be installed system-wide.

How long does it take and how much traffic?

Usually 5–15 minutes. Overseas speed tests and the disk test take longest; speed tests use a few hundred MB to a few GB. Skip parts with --skip-speed, --skip-bench and so on.

One-Shot VPS Test Tutorial (with Shareable Results)

This tutorial shows how to run the usual checks on a new VPS in one go with xyz.sh/all and share the summary with others.

Prerequisites

A VPS running Debian, Ubuntu, CentOS, Rocky or AlmaLinux; root is optional.

Prefer a fresh machine: the disk test writes a 256 MiB temporary file.

Steps

Optional: read the source with curl -fsSL xyz.sh/all.sh and compare xyz.sh/all.sh.sha256.

Preview the steps: curl -fsSL xyz.sh/all | bash -s -- --dry-run

Full run: curl -fsSL xyz.sh/all | bash -s -- -y

Run and share: curl -fsSL xyz.sh/all | bash -s -- -y --share prints https://xyz.sh/r/<id> and a delete command.

Skip steps: --skip-sysinfo, --skip-bench, --skip-speed, --skip-route, --skip-unlock.

How to verify

A visual summary is printed at the end: system, disk and CPU results, the overseas speed table, back-route lines, unlock results, and each step's exit code (0 means success).

How to undo or uninstall

all installs nothing itself; sub-steps may install the Speedtest CLI or NextTrace (each asks first). After sharing, delete the result immediately with the printed curl -X DELETE command, or it expires after 30 days.