Investigate Last Crash

Run a systematic post-mortem on the most recent unexpected shutdown, kernel panic, or hard freeze.

Step 1: Identify the crash window

Enumerate recent boots and spot abrupt endings:

journalctl --list-boots --no-pager | tail -10

A boot that ends with a "last entry" timestamp close to the next boot's "first entry" with no clean shutdown messages in between is a crash candidate. Clean shutdowns log systemd-shutdown / Reached target Shutdown; crashes do not.

For each suspicious boot, confirm:

journalctl -b <boot-id> --no-pager | tail -30