{"id":32807,"date":"2025-10-26T05:41:03","date_gmt":"2025-10-26T02:41:03","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=32807"},"modified":"2025-10-26T05:41:03","modified_gmt":"2025-10-26T02:41:03","slug":"initial-server-setup-with-rocky-linux-8","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/","title":{"rendered":"Initial Server Setup with Rocky Linux 8"},"content":{"rendered":"

<\/p>\n

Initial Server Setup with Rocky Linux 8<\/h2>\n

Giri\u015f<\/h2>\n

Sunucu altyap\u0131s\u0131n\u0131n temelini olu\u015fturan i\u015fletim sisteminin do\u011fru ve g\u00fcvenli bir \u015fekilde kurulmas\u0131, herhangi bir projenin ba\u015far\u0131s\u0131 i\u00e7in kritik \u00f6neme sahiptir. \u00d6zellikle kurumsal ortamlarda istikrar, g\u00fcvenlik ve uzun vadeli destek sunan bir i\u015fletim sistemi se\u00e7imi hayati \u00f6nem ta\u015f\u0131r. CentOS’un “upstream” projesi Fedora’ya daha yak\u0131n bir konuma gelmesiyle, topluluk odakl\u0131, kurumsal s\u0131n\u0131f Linux da\u011f\u0131t\u0131mlar\u0131na olan talep artm\u0131\u015ft\u0131r. Bu bo\u015flu\u011fu dolduran Rocky Linux, Red Hat Enterprise Linux (RHEL) ile ikili uyumlu (bug-for-bug compatible) yap\u0131s\u0131yla, CentOS’un miras\u0131n\u0131 devralan g\u00fc\u00e7l\u00fc bir alternatif olarak \u00f6ne \u00e7\u0131kmaktad\u0131r. Rocky Linux 8, bu ba\u011flamda, sunucu kurulumlar\u0131 i\u00e7in g\u00fcvenilir, sa\u011flam ve topluluk destekli bir platform sunar.<\/p>\n

Bu makale, Rocky Linux 8 tabanl\u0131 bir sunucunun s\u0131f\u0131rdan kurulumunu ve ilk \u00f6ny\u00fckleme sonras\u0131 temel yap\u0131land\u0131rmalar\u0131n\u0131 ad\u0131m ad\u0131m ele almaktad\u0131r. Amac\u0131m\u0131z, okuyuculara g\u00fcvenli, istikrarl\u0131 ve y\u00f6netilebilir bir sunucu ortam\u0131 haz\u0131rlamalar\u0131 i\u00e7in gerekli t\u00fcm bilgileri sunmakt\u0131r. Fiziksel donan\u0131m, sanal makine veya bulut ortam\u0131nda olsun, bu rehberdeki ad\u0131mlar, sunucunuzun temelini sa\u011flam bir \u015fekilde atman\u0131za yard\u0131mc\u0131 olacakt\u0131r. Kurulum medyas\u0131n\u0131n haz\u0131rlanmas\u0131ndan, disk b\u00f6l\u00fcmlendirmeye, a\u011f yap\u0131land\u0131rmas\u0131ndan g\u00fcvenlik ayarlar\u0131na kadar geni\u015f bir yelpazeyi kapsayarak, Rocky Linux 8 ile ba\u015far\u0131l\u0131 bir ba\u015flang\u0131\u00e7 yapman\u0131z i\u00e7in kapsaml\u0131 bir yol haritas\u0131 sunaca\u011f\u0131z.<\/p>\n

\u00d6n Haz\u0131rl\u0131klar<\/h2>\n

Rocky Linux 8 kurulumuna ba\u015flamadan \u00f6nce, sorunsuz bir s\u00fcre\u00e7 ve optimum performans i\u00e7in baz\u0131 \u00f6nemli \u00f6n haz\u0131rl\u0131k ad\u0131mlar\u0131n\u0131n tamamlanmas\u0131 gerekmektedir. Bu ad\u0131mlar, donan\u0131m gereksinimlerinin belirlenmesinden kurulum medyas\u0131n\u0131n haz\u0131rlanmas\u0131na kadar uzan\u0131r.<\/p>\n

Donan\u0131m Gereksinimleri<\/h3>\n

Sunucunuzun kullan\u0131m amac\u0131na ba\u011fl\u0131 olarak donan\u0131m gereksinimleri de\u011fi\u015fiklik g\u00f6sterebilir. Ancak genel bir ba\u015flang\u0131\u00e7 i\u00e7in a\u015fa\u011f\u0131daki minimum ve \u00f6nerilen de\u011ferler dikkate al\u0131nabilir:<\/p>\n

* \u0130\u015flemci (CPU):<\/strong> Minimum 2 \u00e7ekirdekli 64-bit i\u015flemci (Intel Xeon veya AMD EPYC\/Opteron serisi \u00f6nerilir). Daha yo\u011fun i\u015f y\u00fckleri i\u00e7in daha fazla \u00e7ekirdek ve y\u00fcksek saat h\u0131z\u0131 tercih edilmelidir.
\n* Bellek (RAM):<\/strong> Minimum 2 GB RAM. Ancak sunucu uygulamalar\u0131 (veritaban\u0131, web sunucusu, sanalla\u015ft\u0131rma) i\u00e7in 4 GB veya \u00fczeri RAM \u015fiddetle tavsiye edilir. Bellek miktar\u0131, \u00e7al\u0131\u015ft\u0131r\u0131lacak servislerin say\u0131s\u0131na ve yo\u011funlu\u011funa g\u00f6re art\u0131r\u0131lmal\u0131d\u0131r.
\n* Depolama (Disk):<\/strong> Minimum 20 GB disk alan\u0131. Kurulum sonras\u0131 sistemin kendisi ve temel ara\u00e7lar i\u00e7in bu miktar yeterli olabilir. Ancak loglar, veritabanlar\u0131, web i\u00e7eri\u011fi veya di\u011fer uygulamalar i\u00e7in 50 GB veya \u00fczeri, tercihen SSD tabanl\u0131 depolama birimleri \u00f6nerilir. RAID yap\u0131land\u0131rmalar\u0131, veri g\u00fcvenli\u011fi ve performans\u0131 i\u00e7in kritik uygulamalarda d\u00fc\u015f\u00fcn\u00fclmelidir.
\n* A\u011f Aray\u00fcz\u00fc (NIC):<\/strong> Stabil ve h\u0131zl\u0131 bir a\u011f ba\u011flant\u0131s\u0131 i\u00e7in en az bir Gigabit Ethernet kart\u0131. Y\u00fcksek bant geni\u015fli\u011fi gerektiren uygulamalar i\u00e7in birden fazla NIC veya 10 Gigabit Ethernet kartlar\u0131 tercih edilebilir.<\/p>\n

Rocky Linux 8 ISO \u0130ndirme<\/h3>\n

Rocky Linux 8’in resmi ISO dosyas\u0131n\u0131 indirmek i\u00e7in Rocky Linux web sitesini (rockylinux.org) ziyaret etmeniz gerekmektedir. \u0130ndirme sayfas\u0131nda genellikle farkl\u0131 mimariler (x86_64) ve farkl\u0131 boyutlarda ISO se\u00e7enekleri bulunur:<\/p>\n

* Minimal ISO:<\/strong> Sadece temel sistemi i\u00e7eren, en k\u00fc\u00e7\u00fck boyutlu kurulum medyas\u0131d\u0131r. Kurulum sonras\u0131 \u00e7o\u011fu paketin internetten indirilmesini gerektirir.
\n* DVD ISO:<\/strong> \u00c7o\u011fu temel paketi i\u00e7eren daha b\u00fcy\u00fck boyutlu ISO. \u0130nternet ba\u011flant\u0131s\u0131 olmayan veya s\u0131n\u0131rl\u0131 olan ortamlarda tercih edilebilir.
\n* Boot ISO:<\/strong> A\u011f \u00fczerinden kurulum yapmak i\u00e7in kullan\u0131lan \u00e7ok k\u00fc\u00e7\u00fck boyutlu bir ISO.<\/p>\n

Genel kurulumlar i\u00e7in DVD ISO veya Minimal ISO uygun olacakt\u0131r. \u0130ndirme i\u015flemini tamamlad\u0131ktan sonra, indirilen ISO dosyas\u0131n\u0131n b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc SHA256 veya SHA512 sa\u011flama toplam\u0131 ile do\u011frulamak \u00f6nemlidir. Bu, dosyan\u0131n indirme s\u0131ras\u0131nda bozulmad\u0131\u011f\u0131ndan veya manip\u00fcle edilmedi\u011finden emin olman\u0131z\u0131 sa\u011flar.<\/p>\n

Kurulum Medyas\u0131 Olu\u015fturma<\/h3>\n

\u0130ndirilen ISO dosyas\u0131n\u0131 kullanarak bir kurulum medyas\u0131 olu\u015fturman\u0131z gerekmektedir:<\/p>\n

* USB S\u00fcr\u00fcc\u00fc:<\/strong> En yayg\u0131n ve pratik y\u00f6ntemdir. Rufus (Windows), Etcher (Windows, macOS, Linux) veya dd<\/code> komutu (Linux, macOS) gibi ara\u00e7lar kullan\u0131larak ISO dosyas\u0131 bir USB belle\u011fe yaz\u0131labilir.
\n * Linux’ta dd<\/code> komutu \u00f6rne\u011fi: sudo dd if=\/path\/to\/rockylinux.iso of=\/dev\/sdX bs=4M status=progress<\/code> (Burada \/dev\/sdX<\/code> USB belle\u011finizin cihaz yoludur, dikkatli olun!).
\n* DVD:<\/strong> Eski sistemler veya belirli gereksinimler i\u00e7in DVD’ye yaz\u0131labilir.
\n* Sanal Makine:<\/strong> VMware Workstation\/ESXi, VirtualBox, KVM\/QEMU gibi sanalla\u015ft\u0131rma platformlar\u0131nda ISO dosyas\u0131n\u0131 do\u011frudan sanal makinenin CD\/DVD s\u00fcr\u00fcc\u00fcs\u00fcne ba\u011flayarak kurulum yapabilirsiniz.
\n* A\u011f \u00dczerinden Kurulum (PXE):<\/strong> Birden fazla sunucuya ayn\u0131 anda kurulum yap\u0131lmas\u0131 gereken b\u00fcy\u00fck \u00f6l\u00e7ekli ortamlar i\u00e7in PXE (Preboot eXecution Environment) sunucusu kurularak a\u011f \u00fczerinden otomatik kurulum yap\u0131labilir.<\/p>\n

A\u011f Planlamas\u0131<\/h3>\n

Kurulum \u00f6ncesinde sunucunuzun a\u011f yap\u0131land\u0131rmas\u0131n\u0131 planlamak, kurulum sonras\u0131 olas\u0131 aksakl\u0131klar\u0131 \u00f6nler:<\/p>\n

* IP Adresi:<\/strong> Sunucuya statik bir IP adresi atamak genellikle en iyi uygulamad\u0131r. DHCP ile dinamik IP alabilir, ancak sunucular\u0131n IP adreslerinin de\u011fi\u015fmemesi genellikle y\u00f6netim kolayl\u0131\u011f\u0131 sa\u011flar. Statik IP i\u00e7in:
\n * IP adresi (\u00f6rne\u011fin: 192.168.1.100<\/code>)
\n * Alt a\u011f maskesi (\u00f6rne\u011fin: 255.255.255.0<\/code> veya \/24<\/code>)
\n * Varsay\u0131lan a\u011f ge\u00e7idi (gateway) (\u00f6rne\u011fin: 192.168.1.1<\/code>)
\n* DNS Sunucular\u0131:<\/strong> \u0130nternet’e ve yerel a\u011fdaki di\u011fer kaynaklara eri\u015fim i\u00e7in DNS sunucular\u0131n\u0131n IP adresleri gereklidir (\u00f6rne\u011fin: 8.8.8.8<\/code> ve 8.8.4.4<\/code> Google DNS veya yerel DNS sunucunuz).
\n* Ana Bilgisayar Ad\u0131 (Hostname):<\/strong> Sunucunuza anlaml\u0131 ve benzersiz bir ana bilgisayar ad\u0131 verin (\u00f6rne\u011fin: webserver01.example.com<\/code>). Bu, a\u011f \u00fczerindeki di\u011fer cihazlar taraf\u0131ndan tan\u0131nmas\u0131n\u0131 kolayla\u015ft\u0131r\u0131r.<\/p>\n

Bu \u00f6n haz\u0131rl\u0131k ad\u0131mlar\u0131 tamamland\u0131ktan sonra, Rocky Linux 8 kurulumuna ge\u00e7meye haz\u0131rs\u0131n\u0131z demektir.<\/p>\n

Rocky Linux 8 Kurulumu<\/h2>\n

Rocky Linux 8 kurulum s\u00fcreci, Red Hat’in Anaconda y\u00fckleyicisi sayesinde olduk\u00e7a kullan\u0131c\u0131 dostu ve anla\u015f\u0131l\u0131rd\u0131r. Bu b\u00f6l\u00fcmde, kurulumun her ad\u0131m\u0131n\u0131 detayl\u0131 bir \u015fekilde inceleyece\u011fiz.<\/p>\n

Kurulum Ortam\u0131ndan Ba\u015flatma<\/h3>\n

Haz\u0131rlad\u0131\u011f\u0131n\u0131z kurulum medyas\u0131n\u0131 (USB, DVD veya sanal ISO) sunucunuza tak\u0131n ve sunucuyu yeniden ba\u015flat\u0131n.<\/p>\n

* BIOS\/UEFI Ayarlar\u0131:<\/strong> Sunucunuzun BIOS veya UEFI ayarlar\u0131na girerek, \u00f6ny\u00fckleme s\u0131ras\u0131n\u0131 (boot order) kurulum medyas\u0131ndan ba\u015flayacak \u015fekilde ayarlaman\u0131z gerekebilir. Genellikle F2, F10, F12 veya Del tu\u015flar\u0131na basarak bu men\u00fclere eri\u015filir.
\n* Boot Men\u00fcs\u00fc:<\/strong> \u00c7o\u011fu sistemde, a\u00e7\u0131l\u0131\u015f s\u0131ras\u0131nda belirli bir tu\u015fa (\u00f6rn: F12, F11) basarak do\u011frudan \u00f6ny\u00fckleme men\u00fcs\u00fcne ula\u015fabilir ve kurulum medyan\u0131z\u0131 se\u00e7ebilirsiniz.
\n* Kar\u015f\u0131lama Ekran\u0131:<\/strong> Kurulum medyas\u0131ndan ba\u015far\u0131l\u0131 bir \u015fekilde \u00f6ny\u00fcklendi\u011finizde, “Install Rocky Linux 8” se\u00e7ene\u011fini g\u00f6receksiniz. Bu se\u00e7ene\u011fi se\u00e7ip Enter tu\u015funa bas\u0131n.<\/p>\n

Anaconda Kurulum Ekran\u0131<\/h3>\n

Kurulum program\u0131 (Anaconda) y\u00fcklendikten sonra ilk olarak dil se\u00e7imi ekran\u0131 kar\u015f\u0131n\u0131za gelecektir.<\/p>\n

* Dil Se\u00e7imi:<\/strong> Kurulum s\u00fcrecinde ve sonras\u0131nda kullan\u0131lacak dili se\u00e7in. T\u00fcrk\u00e7e veya \u0130ngilizce (\u00f6nerilen) se\u00e7imi yapabilirsiniz. Se\u00e7iminizi yapt\u0131ktan sonra “Devam Et” (Continue) d\u00fc\u011fmesine t\u0131klay\u0131n.
\n* Kurulum \u00d6zeti (Installation Summary) Ekran\u0131:<\/strong> Bu ekran, kurulumun t\u00fcm ana yap\u0131land\u0131rma ba\u015fl\u0131klar\u0131n\u0131 tek bir yerden g\u00f6rmenizi ve y\u00f6netmenizi sa\u011flar. Sol tarafta yerelle\u015ftirme (Localization), yaz\u0131l\u0131m (Software), sistem (System) ve kullan\u0131c\u0131 ayarlar\u0131 (User Settings) gibi kategoriler bulunur. Her bir kategoriye t\u0131klayarak ilgili ayarlar\u0131 yapabilirsiniz.<\/p>\n

Zaman ve Tarih Ayarlar\u0131<\/h3>\n

“Kurulum \u00d6zeti” ekran\u0131ndaki “Zaman ve Tarih” (Time & Date) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* Saat Dilimi:<\/strong> Harita \u00fczerinden veya a\u00e7\u0131l\u0131r men\u00fcden do\u011fru saat diliminizi se\u00e7in (\u00f6rne\u011fin: “\u0130stanbul”).
\n* A\u011f Saati (Network Time):<\/strong> A\u011f saati senkronizasyonunu etkinle\u015ftirmeniz \u015fiddetle tavsiye edilir. Bu, sunucunuzun zaman\u0131n\u0131 NTP (Network Time Protocol) sunucular\u0131 arac\u0131l\u0131\u011f\u0131yla otomatik olarak do\u011fru tutmas\u0131n\u0131 sa\u011flar. Genellikle varsay\u0131lan NTP sunucular\u0131 yeterlidir, ancak dilerseniz kendi sunucular\u0131n\u0131z\u0131 ekleyebilirsiniz. Ayarlar\u0131 onaylamak i\u00e7in “Bitti” (Done) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

Klavye D\u00fczeni<\/h3>\n

“Kurulum \u00d6zeti” ekran\u0131ndaki “Klavye” (Keyboard) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* Klavye D\u00fczeni Ekleme:<\/strong> Varsay\u0131lan olarak \u0130ngilizce klavye d\u00fczeni gelir. T\u00fcrk\u00e7e klavye kullan\u0131yorsan\u0131z, “+” d\u00fc\u011fmesine t\u0131klayarak “T\u00fcrk\u00e7e” klavye d\u00fczenini ekleyin ve varsay\u0131lan olarak ayarlay\u0131n. \u0130stemedi\u011finiz d\u00fczenleri kald\u0131rabilirsiniz. “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

A\u011f ve Ana Bilgisayar Ad\u0131 (Network & Hostname)<\/h3>\n

“Kurulum \u00d6zeti” ekran\u0131ndaki “A\u011f ve Ana Bilgisayar Ad\u0131” se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* Ethernet Adapt\u00f6r\u00fcn\u00fc Etkinle\u015ftirme:<\/strong> Sol tarafta listelenen a\u011f aray\u00fcz\u00fcn\u00fcz\u00fc (\u00f6rne\u011fin: enp0s3<\/code>) se\u00e7in ve sa\u011f \u00fcstteki anahtar\u0131 “A\u00e7\u0131k” (On) konumuna getirin.
\n* Statik IP veya DHCP:<\/strong>
\n * DHCP:<\/strong> E\u011fer a\u011f\u0131n\u0131zda bir DHCP sunucusu varsa, aray\u00fcz otomatik olarak bir IP adresi alacakt\u0131r.
\n * Statik IP:<\/strong> Genellikle sunucular i\u00e7in tercih edilen y\u00f6ntemdir. Aray\u00fcz\u00fc se\u00e7tikten sonra “Yap\u0131land\u0131r” (Configure) d\u00fc\u011fmesine t\u0131klay\u0131n. “IPv4 Ayarlar\u0131” (IPv4 Settings) sekmesine gidin, “Y\u00f6ntem” (Method) a\u00e7\u0131l\u0131r men\u00fcs\u00fcnden “Manuel” (Manual) se\u00e7ene\u011fini se\u00e7in. “Ekle” (Add) d\u00fc\u011fmesine t\u0131klayarak IP adresi, a\u011f maskesi ve a\u011f ge\u00e7idi bilgilerini girin. DNS sunucular\u0131n\u0131 da “DNS sunucular\u0131” alan\u0131na ekleyin (virg\u00fclle ayr\u0131lm\u0131\u015f).
\n* Ana Bilgisayar Ad\u0131:<\/strong> Ekran\u0131n alt k\u0131sm\u0131ndaki “Ana Bilgisayar Ad\u0131” alan\u0131na sunucunuz i\u00e7in belirledi\u011finiz ad\u0131 (\u00f6rne\u011fin: rockyserver.example.com<\/code>) girin ve “Uygula” (Apply) d\u00fc\u011fmesine t\u0131klay\u0131n. Ayarlar\u0131 onaylamak i\u00e7in “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

Disk B\u00f6l\u00fcmlendirme (Disk Partitioning)<\/h3>\n

Bu, kurulumun en kritik ad\u0131mlar\u0131ndan biridir. “Kurulum \u00d6zeti” ekran\u0131ndaki “Kurulum Hedefi” (Installation Destination) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* Disk Se\u00e7imi:<\/strong> Rocky Linux’u kurmak istedi\u011finiz fiziksel veya sanal diski se\u00e7in.
\n* B\u00f6l\u00fcmlendirme Y\u00f6ntemi:<\/strong>
\n * Otomatik B\u00f6l\u00fcmlendirme (Automatic):<\/strong> Yeni ba\u015flayanlar i\u00e7in kolayd\u0131r. Y\u00fckleyici, disk \u00fczerinde uygun bir b\u00f6l\u00fcmlendirme \u015femas\u0131 olu\u015fturur. Genellikle LVM (Logical Volume Management) kullan\u0131r.
\n * Manuel B\u00f6l\u00fcmlendirme (Custom):<\/strong> Deneyimli kullan\u0131c\u0131lar i\u00e7in \u00f6nerilir. Diskiniz \u00fczerinde tam kontrol sa\u011flar. “\u00d6zel” (Custom) se\u00e7ene\u011fini se\u00e7in ve “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n.
\n* Manuel B\u00f6l\u00fcmlendirme Detaylar\u0131:<\/strong>
\n * Yeni bir b\u00f6l\u00fcmlendirme \u015femas\u0131 olu\u015fturmak i\u00e7in “+” d\u00fc\u011fmesine t\u0131klay\u0131n.
\n * LVM:<\/strong> Kurumsal ortamlarda esneklik ve kolay y\u00f6netim i\u00e7in LVM kullan\u0131lmas\u0131 \u015fiddetle tavsiye edilir. Varsay\u0131lan olarak LVM se\u00e7ili gelir.
\n * Gerekli B\u00f6l\u00fcmler:<\/strong>
\n * \/boot<\/code>: \u00d6ny\u00fckleme dosyalar\u0131n\u0131 i\u00e7erir. Genellikle 1 GB yeterlidir. Standart b\u00f6l\u00fcm olarak olu\u015fturulmal\u0131d\u0131r.
\n * \/boot\/efi<\/code>: UEFI sistemler i\u00e7in gereklidir. Yakla\u015f\u0131k 200-600 MB boyutunda, FAT32 dosya sistemine sahip bir EFI Sistem B\u00f6l\u00fcm\u00fc (ESP) olmal\u0131d\u0131r.
\n * swap<\/code>: Sistem belle\u011fi doldu\u011funda kullan\u0131lan takas alan\u0131. RAM miktar\u0131n\u0131n 1-2 kat\u0131 kadar (\u00f6rne\u011fin 4 GB RAM i\u00e7in 4-8 GB) \u00f6nerilir. Sanal bellek kullan\u0131m\u0131 d\u00fc\u015f\u00fcnd\u00fc\u011f\u00fcnde, 4GB veya 8GB yeterli olacakt\u0131r.
\n * \/<\/code>: K\u00f6k (root) dosya sistemi. Kalan t\u00fcm alan\u0131 bu b\u00f6l\u00fcme ay\u0131r\u0131n. Dosya sistemi olarak XFS (\u00f6nerilen) veya EXT4 se\u00e7ebilirsiniz.
\n * B\u00f6l\u00fcmleri olu\u015fturduktan sonra, “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n. Yapt\u0131\u011f\u0131n\u0131z de\u011fi\u015fikliklerin \u00f6zetini g\u00f6receksiniz, onaylamak i\u00e7in “De\u011fi\u015fiklikleri Kabul Et” (Accept Changes) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

Root Parolas\u0131 Belirleme<\/h3>\n

“Kurulum \u00d6zeti” ekran\u0131ndaki “Root Parolas\u0131” (Root Password) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* G\u00fc\u00e7l\u00fc Parola:<\/strong> root<\/code> kullan\u0131c\u0131s\u0131, sistemdeki en yetkili kullan\u0131c\u0131d\u0131r. Bu nedenle, g\u00fc\u00e7l\u00fc, karma\u015f\u0131k ve tahmin edilmesi zor bir parola belirlemeniz \u00e7ok \u00f6nemlidir. Parolan\u0131z\u0131 iki kez girin ve “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n. Parolan\u0131z zay\u0131fsa, iki kez “Bitti”ye t\u0131klaman\u0131z gerekebilir.<\/p>\n

Kullan\u0131c\u0131 Olu\u015fturma<\/h3>\n

“Kurulum \u00d6zeti” ekran\u0131ndaki “Kullan\u0131c\u0131 Olu\u015fturma” (User Creation) se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* Standart Kullan\u0131c\u0131:<\/strong> root<\/code> kullan\u0131c\u0131s\u0131 ile do\u011frudan \u00e7al\u0131\u015fmak g\u00fcvenlik riski ta\u015f\u0131r. Bu nedenle, g\u00fcnl\u00fck y\u00f6netim g\u00f6revleri i\u00e7in standart bir kullan\u0131c\u0131 olu\u015fturmak en iyi uygulamad\u0131r. Kullan\u0131c\u0131 ad\u0131, tam ad ve g\u00fc\u00e7l\u00fc bir parola belirleyin.
\n* Y\u00f6netici Haklar\u0131:<\/strong> Olu\u015fturdu\u011funuz kullan\u0131c\u0131ya “Y\u00f6netici ayr\u0131cal\u0131klar\u0131 ver” (Make this user an administrator) se\u00e7ene\u011fini i\u015faretleyerek sudo<\/code> yetkisi vermeniz \u00f6nerilir. Bu, gerekti\u011finde sudo<\/code> komutu ile y\u00f6netici g\u00f6revlerini yapabilmenizi sa\u011flar. “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

Yaz\u0131l\u0131m Se\u00e7imi (Software Selection)<\/h3>\n

“Kurulum \u00d6zeti” ekran\u0131ndaki “Yaz\u0131l\u0131m Se\u00e7imi” se\u00e7ene\u011fine t\u0131klay\u0131n.<\/p>\n

* Temel Ortam (Base Environment):<\/strong> Sunucunun kullan\u0131m amac\u0131na g\u00f6re bir temel ortam se\u00e7in:
\n * Server:<\/strong> GUI olmadan temel bir sunucu ortam\u0131 kurar. \u00c7o\u011fu sunucu uygulamas\u0131 i\u00e7in yeterlidir.
\n * Server with GUI:<\/strong> Sunucuyu bir grafik aray\u00fcz\u00fc ile kurar. Kaynak t\u00fcketimi daha y\u00fcksek oldu\u011fundan genellikle sunucular i\u00e7in \u00f6nerilmez.
\n * Minimal Install:<\/strong> En temel paketleri kurar. Disk alan\u0131 ve kaynak t\u00fcketimi en d\u00fc\u015f\u00fckt\u00fcr. \u00c7o\u011fu paketin elle kurulmas\u0131n\u0131 gerektirir.
\n* Ek Yaz\u0131l\u0131m Se\u00e7imi:<\/strong> Sa\u011f tarafta “Se\u00e7ili Ortam i\u00e7in Eklentiler” (Add-ons for Selected Environment) listesinden ihtiyac\u0131n\u0131z olabilecek ek yaz\u0131l\u0131m gruplar\u0131n\u0131 se\u00e7ebilirsiniz (\u00f6rne\u011fin: “Development Tools”, “System Tools”, “Container Management” vb.). Gereksiz paketleri kurmaktan ka\u00e7\u0131narak sistemi daha hafif tutmak iyi bir pratiktir. Se\u00e7iminizi yapt\u0131ktan sonra “Bitti” d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

Kurulumun Ba\u015flat\u0131lmas\u0131<\/h3>\n

T\u00fcm ayarlar\u0131 kontrol ettikten sonra “Kurulumu Ba\u015flat” (Begin Installation) d\u00fc\u011fmesine t\u0131klay\u0131n.<\/p>\n

* Kurulum s\u00fcreci ba\u015flayacak ve ilerleme \u00e7ubu\u011fu ile takip edilecektir. Bu s\u00fcre\u00e7, se\u00e7ti\u011finiz yaz\u0131l\u0131m paketlerinin say\u0131s\u0131na ve sisteminizin h\u0131z\u0131na ba\u011fl\u0131 olarak biraz zaman alabilir.
\n* Kurulum tamamland\u0131\u011f\u0131nda, “Sistemi Yeniden Ba\u015flat” (Reboot System) d\u00fc\u011fmesi aktif hale gelecektir. Bu d\u00fc\u011fmeye t\u0131klayarak sunucunuzu yeniden ba\u015flat\u0131n. Kurulum medyas\u0131n\u0131 \u00e7\u0131karmay\u0131 unutmay\u0131n.<\/p>\n

Sunucunuz yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda, Rocky Linux 8 komut sat\u0131r\u0131 aray\u00fcz\u00fc (CLI) sizi kar\u015f\u0131layacakt\u0131r. Art\u0131k ilk \u00f6ny\u00fckleme sonras\u0131 yap\u0131land\u0131rmalara ge\u00e7meye haz\u0131rs\u0131n\u0131z.<\/p>\n

\u0130lk \u00d6ny\u00fckleme Sonras\u0131 Yap\u0131land\u0131rmalar<\/h2>\n

Rocky Linux 8’i ba\u015far\u0131yla kurduktan sonra, sunucunuzu g\u00fcvenli, g\u00fcncel ve verimli hale getirmek i\u00e7in baz\u0131 temel yap\u0131land\u0131rmalar\u0131n yap\u0131lmas\u0131 gerekmektedir. Bu ad\u0131mlar, sunucunun uzun \u00f6m\u00fcrl\u00fc ve sorunsuz \u00e7al\u0131\u015fmas\u0131n\u0131 sa\u011flamak i\u00e7in kritik \u00f6neme sahiptir.<\/p>\n

G\u00fcncelleme ve Y\u00fckseltme<\/h3>\n

Sisteminizin g\u00fcncel olmas\u0131, g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131n kapat\u0131lmas\u0131 ve performans iyile\u015ftirmeleri i\u00e7in hayati \u00f6neme sahiptir. \u0130lk i\u015f olarak sisteminizi g\u00fcncelleyin:<\/p>\n

* Sisteme Giri\u015f:<\/strong> Kurulum s\u0131ras\u0131nda olu\u015fturdu\u011funuz kullan\u0131c\u0131 ad\u0131 ve parolas\u0131yla veya root<\/code> kullan\u0131c\u0131s\u0131yla giri\u015f yap\u0131n.
\n* G\u00fcncelleme Komutu:<\/strong> dnf<\/code> paket y\u00f6neticisini kullanarak sistemi g\u00fcncelleyin:<\/p>\n

sudo dnf update -y<\/code><\/pre>\n
    Bu komut, mevcut t\u00fcm paketleri en son s\u00fcr\u00fcmlerine y\u00fckseltir. -y<\/code> bayra\u011f\u0131, t\u00fcm sorulara otomatik olarak “evet” yan\u0131t\u0131 verir. \u00c7ekirdek (kernel) g\u00fcncellemeleri varsa, yeni \u00e7ekirde\u011fin aktif olmas\u0131 i\u00e7in sunucuyu yeniden ba\u015flatman\u0131z gerekebilir:<\/p>\n
sudo reboot<\/code><\/pre>\n
SSH Sunucusu Kurulumu ve G\u00fcvenli\u011fi<\/h3>\n
Sunucular genellikle uzaktan SSH (Secure Shell) arac\u0131l\u0131\u011f\u0131yla y\u00f6netilir. openssh-server<\/code> paketi genellikle varsay\u0131lan olarak y\u00fckl\u00fc gelir, ancak kontrol etmek ve g\u00fcvenli\u011fini sa\u011flamak \u00f6nemlidir.<\/p>\n
*   SSH Servisini Kontrol Etme:<\/strong><\/p>\n
sudo systemctl status sshd<\/code><\/pre>\n
    E\u011fer \u00e7al\u0131\u015fm\u0131yorsa veya y\u00fckl\u00fc de\u011filse:<\/p>\n
sudo dnf install openssh-server -y\n    sudo systemctl enable sshd --now<\/code><\/pre>\n
*   SSH G\u00fcvenlik Ayarlar\u0131 (\/etc\/ssh\/sshd_config<\/code>):<\/strong>
\n    *   Port De\u011fi\u015ftirme:<\/strong> Varsay\u0131lan SSH portu 22’dir. Bunu bilinen bir sald\u0131r\u0131 vekt\u00f6r\u00fc olmaktan \u00e7\u0131karmak i\u00e7in farkl\u0131 bir porta (\u00f6rne\u011fin 2222) de\u011fi\u015ftirebilirsiniz:<\/p>\n
Port 2222<\/code><\/pre>\n
    *   Root Giri\u015fini Devre D\u0131\u015f\u0131 B\u0131rakma:<\/strong> G\u00fcvenlik i\u00e7in root<\/code> kullan\u0131c\u0131s\u0131n\u0131n do\u011frudan SSH ile giri\u015f yapmas\u0131n\u0131 engelleyin:<\/p>\n
PermitRootLogin no<\/code><\/pre>\n
    *   Parola Kimlik Do\u011frulamas\u0131n\u0131 Devre D\u0131\u015f\u0131 B\u0131rakma (Anahtar Tabanl\u0131 Kimlik Do\u011frulama \u0130\u00e7in):<\/strong> E\u011fer anahtar tabanl\u0131 kimlik do\u011frulama kullanacaksan\u0131z, parola ile giri\u015fi devre d\u0131\u015f\u0131 b\u0131rak\u0131n:<\/p>\n
PasswordAuthentication no<\/code><\/pre>\n
    *   Anahtar Tabanl\u0131 Kimlik Do\u011frulama:<\/strong> En g\u00fcvenli y\u00f6ntemdir. Kendi makinenizde bir SSH anahtar \u00e7ifti olu\u015fturun (ssh-keygen<\/code>) ve genel anahtar\u0131n\u0131z\u0131 sunucudaki kullan\u0131c\u0131n\u0131z\u0131n ~\/.ssh\/authorized_keys<\/code> dosyas\u0131na kopyalay\u0131n.
\n    *   De\u011fi\u015fikliklerden sonra SSH servisini yeniden ba\u015flat\u0131n:<\/p>\n
sudo systemctl restart sshd<\/code><\/pre>\n
*   Firewall Ayarlar\u0131:<\/strong> E\u011fer SSH portunu de\u011fi\u015ftirdiyseniz, firewalld<\/code> \u00fczerinde yeni portu a\u00e7man\u0131z gerekir (a\u015fa\u011f\u0131daki “Firewall Yap\u0131land\u0131rmas\u0131” b\u00f6l\u00fcm\u00fcne bak\u0131n).<\/p>\n
Firewall Yap\u0131land\u0131rmas\u0131<\/h3>\n
Rocky Linux, varsay\u0131lan olarak firewalld<\/code> adl\u0131 dinamik bir g\u00fcvenlik duvar\u0131 servisi kullan\u0131r. Sunucunuzu d\u0131\u015f tehditlerden korumak i\u00e7in firewalld<\/code>‘\u0131 do\u011fru yap\u0131land\u0131rmak \u00f6nemlidir.<\/p>\n
*   Firewalld Durumunu Kontrol Etme:<\/strong><\/p>\n
sudo systemctl status firewalld<\/code><\/pre>\n
*   SSH Portunu A\u00e7ma (E\u011fer De\u011fi\u015ftirildiyseniz):<\/strong><\/p>\n
sudo firewall-cmd --permanent --add-port=2222\/tcp\n    sudo firewall-cmd --reload<\/code><\/pre>\n
    (Varsay\u0131lan 22 portu i\u00e7in sudo firewall-cmd --permanent --add-service=ssh<\/code> kullanabilirsiniz.)
\n*   Di\u011fer Gerekli Servisleri Ekleme:<\/strong> Sunucunuzda \u00e7al\u0131\u015facak di\u011fer servisler i\u00e7in (HTTP, HTTPS, FTP vb.) portlar\u0131 veya servisleri ekleyin:<\/p>\n
sudo firewall-cmd --permanent --add-service=http\n    sudo firewall-cmd --permanent --add-service=https\n    sudo firewall-cmd --reload<\/code><\/pre>\n
*   A\u00e7\u0131k Portlar\u0131 Listeleme:<\/strong><\/p>\n
sudo firewall-cmd --list-all<\/code><\/pre>\n
SELinux Ayarlar\u0131<\/h3>\n
SELinux (Security-Enhanced Linux), ek bir g\u00fcvenlik katman\u0131 sa\u011flayarak sistem \u00fczerindeki yetkisiz eri\u015fimi engeller. Varsay\u0131lan olarak “enforcing” modunda gelir.<\/p>\n
*   SELinux Durumunu Kontrol Etme:<\/strong><\/p>\n
getenforce<\/code><\/pre>\n
*   SELinux Modlar\u0131:<\/strong>
\n    *   Enforcing<\/code>: Politika kurallar\u0131n\u0131 uygular ve eri\u015fimi engeller.
\n    *   Permissive<\/code>: Politika kurallar\u0131n\u0131 uygular ancak eri\u015fimi engellemez, sadece uyar\u0131 kayd\u0131 tutar. Sorun giderme i\u00e7in kullan\u0131\u015fl\u0131d\u0131r.
\n    *   Disabled<\/code>: SELinux tamamen devre d\u0131\u015f\u0131d\u0131r (\u00f6nerilmez).
\n*   Ge\u00e7ici Olarak Permissive Moda Ge\u00e7me:<\/strong><\/p>\n
sudo setenforce Permissive<\/code><\/pre>\n
*   Kal\u0131c\u0131 Olarak De\u011fi\u015ftirme:<\/strong> \/etc\/selinux\/config<\/code> dosyas\u0131n\u0131 d\u00fczenleyin:<\/p>\n
SELINUX=enforcing  # enforcing, permissive veya disabled olabilir<\/code><\/pre>\n
    De\u011fi\u015fiklikler i\u00e7in sistemi yeniden ba\u015flatman\u0131z gerekir.
\n*   SELinux Ba\u011flamlar\u0131n\u0131 Y\u00f6netme:<\/strong> Bazen \u00f6zel uygulamalar i\u00e7in SELinux ba\u011flamlar\u0131n\u0131 d\u00fczenlemek gerekebilir. semanage fcontext<\/code> ve restorecon<\/code> komutlar\u0131 kullan\u0131l\u0131r.<\/p>\n
Zaman Senkronizasyonu<\/h3>\n
Do\u011fru zaman, log analizi, g\u00fcvenlik ve a\u011fdaki di\u011fer servislerle uyumluluk i\u00e7in \u00e7ok \u00f6nemlidir. chronyd<\/code> servisi, NTP sunucular\u0131 arac\u0131l\u0131\u011f\u0131yla zaman senkronizasyonunu sa\u011flar.<\/p>\n
*   Chronyd Durumunu Kontrol Etme:<\/strong><\/p>\n
sudo systemctl status chronyd<\/code><\/pre>\n
*   NTP Sunucular\u0131n\u0131 Yap\u0131land\u0131rma:<\/strong> \/etc\/chrony.conf<\/code> dosyas\u0131n\u0131 d\u00fczenleyin. Genellikle varsay\u0131lan sunucular yeterlidir, ancak dilerseniz kendi sunucular\u0131n\u0131z\u0131 ekleyebilirsiniz:<\/p>\n
# pool 2.rocky.pool.ntp.org iburst\n    pool 0.pool.ntp.org iburst\n    pool 1.pool.ntp.org iburst\n    pool 2.pool.ntp.org iburst\n    pool 3.pool.ntp.org iburst<\/code><\/pre>\n
    De\u011fi\u015fikliklerden sonra chronyd<\/code> servisini yeniden ba\u015flat\u0131n:<\/p>\n
sudo systemctl restart chronyd<\/code><\/pre>\n
*   Senkronizasyon Durumunu Kontrol Etme:<\/strong><\/p>\n
chronyc sources -v<\/code><\/pre>\n
Ek Depolar\u0131n Eklenmesi<\/h3>\n
Rocky Linux’un resmi depolar\u0131 bir\u00e7ok paketi i\u00e7erir, ancak baz\u0131 pop\u00fcler veya \u00f6zel paketler i\u00e7in ek depolara ihtiya\u00e7 duyulabilir.<\/p>\n
*   EPEL (Extra Packages for Enterprise Linux):<\/strong> RHEL tabanl\u0131 sistemler i\u00e7in topluluk taraf\u0131ndan desteklenen ek paketlerin en pop\u00fcler deposudur.<\/p>\n
sudo dnf install epel-release -y\n    sudo dnf update -y<\/code><\/pre>\n
*   RPM Fusion:<\/strong> Multimedya kodekleri, oyunlar ve baz\u0131 \u00f6zel s\u00fcr\u00fcc\u00fcler gibi ek yaz\u0131l\u0131mlar i\u00e7in bir ba\u015fka pop\u00fcler depodur. Genellikle iki ana b\u00f6l\u00fcm\u00fc vard\u0131r: free ve nonfree.<\/p>\n
sudo dnf install --nogpgcheck https:\/\/download1.rpmfusion.org\/free\/el\/rpmfusion-free-release-8.noarch.rpm https:\/\/download1.rpmfusion.org\/nonfree\/el\/rpmfusion-nonfree-release-8.noarch.rpm -y\n    sudo dnf update -y<\/code><\/pre>\n
Sistem Loglar\u0131n\u0131 Kontrol Etme<\/h3>\n
Sistem loglar\u0131, sunucunuzdaki sorunlar\u0131 gidermek, g\u00fcvenlik olaylar\u0131n\u0131 izlemek ve performans sorunlar\u0131n\u0131 anlamak i\u00e7in paha bi\u00e7ilmez bir kaynakt\u0131r. Rocky Linux, systemd-journald<\/code> ile loglar\u0131 y\u00f6netir ve journalctl<\/code> komutuyla eri\u015filir.<\/p>\n
*   T\u00fcm Loglar\u0131 G\u00f6r\u00fcnt\u00fcleme:<\/strong><\/p>\n
sudo journalctl<\/code><\/pre>\n
*   Son Loglar\u0131 G\u00f6r\u00fcnt\u00fcleme:<\/strong><\/p>\n
sudo journalctl -f  # Ger\u00e7ek zamanl\u0131 olarak loglar\u0131 takip eder<\/code><\/pre>\n
*   Belirli Bir Servisin Loglar\u0131n\u0131 G\u00f6r\u00fcnt\u00fcleme:<\/strong><\/p>\n
sudo journalctl -u sshd.service<\/code><\/pre>\n
*   Belirli Bir Zaman Aral\u0131\u011f\u0131ndaki Loglar\u0131 G\u00f6r\u00fcnt\u00fcleme:<\/strong><\/p>\n
sudo journalctl --since \"2023-01-01 10:00:00\" --until \"2023-01-01 11:00:00\"<\/code><\/pre>\n
Sistem Kaynaklar\u0131n\u0131 \u0130zleme<\/h3>\n
Sunucunuzun performans\u0131n\u0131 ve kaynak kullan\u0131m\u0131n\u0131 d\u00fczenli olarak izlemek, potansiyel sorunlar\u0131 erkenden tespit etmenizi sa\u011flar.<\/p>\n
*   CPU, Bellek ve S\u00fcre\u00e7ler:<\/strong>
\n    *   top<\/code>: Ger\u00e7ek zamanl\u0131 s\u00fcre\u00e7 izleyici.
\n    *   htop<\/code>: top<\/code>‘\u0131n daha geli\u015fmi\u015f ve kullan\u0131c\u0131 dostu versiyonu. Y\u00fcklemek i\u00e7in: sudo dnf install htop -y<\/code>.
\n*   Bellek Kullan\u0131m\u0131:<\/strong><\/p>\n
free -h<\/code><\/pre>\n
*   Disk Alan\u0131 Kullan\u0131m\u0131:<\/strong><\/p>\n
df -h<\/code><\/pre>\n
*   Disk I\/O \u0130statistikleri:<\/strong><\/p>\n
iostat -y 1 5  # Her 1 saniyede 5 rapor g\u00f6sterir<\/code><\/pre>\n
    Y\u00fcklemek i\u00e7in: sudo dnf install sysstat -y<\/code>.
\n*   A\u011f \u0130statistikleri:<\/strong><\/p>\n
ip -s link<\/code><\/pre>\n
*   Geli\u015fmi\u015f \u0130zleme Arac\u0131 (Glances):<\/strong> Bir\u00e7ok sistem bilgisini tek bir ekranda g\u00f6steren kapsaml\u0131 bir ara\u00e7t\u0131r.<\/p>\n
sudo dnf install glances -y\n    glances<\/code><\/pre>\n
Yedekleme Stratejisi<\/h3>\n
Veri kayb\u0131, her sunucu y\u00f6neticisinin kabusudur. D\u00fczenli ve g\u00fcvenilir bir yedekleme stratejisi olu\u015fturmak, bu riski en aza indirir.<\/p>\n
*   Yedekleme Hedefi:<\/strong> Yedeklemelerinizi sunucunun kendisinden ayr\u0131 bir yere (a\u011f depolama, bulut depolama, harici disk) kaydetmeyi planlay\u0131n.
\n*   Yedeklenecek Veriler:<\/strong>
\n    *   Kritik yap\u0131land\u0131rma dosyalar\u0131 (\/etc<\/code> dizini).
\n    *   Web i\u00e7eri\u011fi (\/var\/www\/html<\/code>).
\n    *   Veritaban\u0131 yedekleri.
\n    *   Kullan\u0131c\u0131 verileri (\/home<\/code>).
\n*   Yedekleme Ara\u00e7lar\u0131:<\/strong>
\n    *   rsync<\/code>: Dosyalar\u0131 ve dizinleri senkronize etmek i\u00e7in g\u00fc\u00e7l\u00fc ve esnek bir ara\u00e7t\u0131r.
\n    *   tar<\/code>: Ar\u015fiv dosyalar\u0131 olu\u015fturmak i\u00e7in kullan\u0131l\u0131r.
\n    *   duplicity<\/code> veya BorgBackup<\/code>: \u015eifreli ve art\u0131ml\u0131 yedeklemeler i\u00e7in.
\n*   Otomatik Yedeklemeler:<\/strong> cron<\/code> zamanlay\u0131c\u0131s\u0131n\u0131 kullanarak yedekleme komutlar\u0131n\u0131 otomatik olarak belirli aral\u0131klarla \u00e7al\u0131\u015ft\u0131rmay\u0131 planlay\u0131n.
\n*   Yedekleme Testleri:<\/strong> Yedeklemelerinizin ger\u00e7ekten \u00e7al\u0131\u015f\u0131r durumda oldu\u011fundan emin olmak i\u00e7in periyodik olarak geri y\u00fckleme testleri yap\u0131n.<\/p>\n
G\u00fcvenlik \u0130pu\u00e7lar\u0131 ve En \u0130yi Uygulamalar<\/h3>\n
Sunucunuzun g\u00fcvenli\u011fini sa\u011flamak s\u00fcrekli bir \u00e7abad\u0131r. \u0130\u015fte baz\u0131 temel ipu\u00e7lar\u0131:<\/p>\n
*   D\u00fczenli G\u00fcncellemeler:<\/strong> Sistem ve uygulama paketlerini d\u00fczenli olarak g\u00fcncel tutun.
\n*   G\u00fc\u00e7l\u00fc Parolalar:<\/strong> T\u00fcm kullan\u0131c\u0131lar ve servisler i\u00e7in g\u00fc\u00e7l\u00fc, karma\u015f\u0131k parolalar kullan\u0131n.
\n*   Kullan\u0131c\u0131 Yetkilendirmesi:<\/strong> Her zaman en az ayr\u0131cal\u0131k prensibini uygulay\u0131n. Kullan\u0131c\u0131lara yaln\u0131zca i\u015flerini yapmak i\u00e7in ihtiya\u00e7 duyduklar\u0131 minimum yetkileri verin.
\n*   sudo<\/code> Kullan\u0131m\u0131:<\/strong> root<\/code> kullan\u0131c\u0131s\u0131 yerine sudo<\/code> ile y\u00f6netici komutlar\u0131n\u0131 \u00e7al\u0131\u015ft\u0131rmay\u0131 tercih edin.
\n*   Fail2ban:<\/strong> Brute-force sald\u0131r\u0131lar\u0131na kar\u015f\u0131 koruma sa\u011flamak i\u00e7in Fail2ban<\/code> kurun ve yap\u0131land\u0131r\u0131n. Yanl\u0131\u015f parola denemelerinden sonra IP adreslerini otomatik olarak engeller.<\/p>\n
sudo dnf install fail2ban -y\n    sudo systemctl enable fail2ban --now<\/code><\/pre>\n
*   Auditd:<\/strong> Sistemdeki g\u00fcvenlik ile ilgili olaylar\u0131 izlemek ve kaydetmek i\u00e7in auditd<\/code> servisini kullan\u0131n.<\/p>\n
sudo dnf install audit -y\n    sudo systemctl enable auditd --now<\/code><\/pre>\n
*   Fiziksel G\u00fcvenlik:<\/strong> Sunucunuzun fiziksel eri\u015fimini k\u0131s\u0131tlay\u0131n.
\n*   Sistem Loglar\u0131n\u0131 \u0130zleme:<\/strong> Loglar\u0131 d\u00fczenli olarak kontrol edin ve \u015f\u00fcpheli etkinlikleri ara\u015ft\u0131r\u0131n.
\n*   G\u00fcvenlik Denetimi Ara\u00e7lar\u0131:<\/strong> OpenSCAP gibi ara\u00e7lar\u0131 kullanarak sisteminizi g\u00fcvenlik politikalar\u0131na g\u00f6re denetleyin.<\/p>\n
Bu ilk \u00f6ny\u00fckleme sonras\u0131 yap\u0131land\u0131rmalar, Rocky Linux 8 sunucunuz i\u00e7in sa\u011flam ve g\u00fcvenli bir temel olu\u015fturacakt\u0131r. Kurulum amac\u0131n\u0131za g\u00f6re ek servisler ve uygulamalar kurmadan \u00f6nce bu ad\u0131mlar\u0131n tamamland\u0131\u011f\u0131ndan emin olun.<\/p>\n
Sonu\u00e7<\/h2>\n
Bu kapsaml\u0131 makale boyunca, Rocky Linux 8 tabanl\u0131 bir sunucunun ilk kurulumundan, ilk \u00f6ny\u00fckleme sonras\u0131 temel yap\u0131land\u0131rmalar\u0131na kadar olan s\u00fcreci ad\u0131m ad\u0131m inceledik. Rocky Linux 8’in CentOS’un miras\u0131n\u0131 nas\u0131l devrald\u0131\u011f\u0131n\u0131, kurumsal ortamlarda neden tercih edilmesi gerekti\u011fini ve stabil, g\u00fcvenli bir i\u015fletim sistemi olarak sundu\u011fu avantajlar\u0131 ele ald\u0131k.<\/p>\n
Kurulum \u00f6ncesi donan\u0131m gereksinimlerinden a\u011f planlamas\u0131na kadar yap\u0131lan \u00f6n haz\u0131rl\u0131klar, sorunsuz bir ba\u015flang\u0131\u00e7 i\u00e7in ne kadar kritik oldu\u011funu g\u00f6sterdi. Anaconda y\u00fckleyicisinin sundu\u011fu kullan\u0131c\u0131 dostu aray\u00fczle dil, saat dilimi, klavye, a\u011f ve disk b\u00f6l\u00fcmlendirme gibi temel ayarlar\u0131 nas\u0131l yapaca\u011f\u0131m\u0131z\u0131 detayland\u0131rd\u0131k. \u00d6zellikle disk b\u00f6l\u00fcmlendirme ve LVM kullan\u0131m\u0131 gibi konularda en iyi uygulamalara de\u011findik. Root parolas\u0131 belirleme ve standart kullan\u0131c\u0131 olu\u015fturma ad\u0131mlar\u0131, sistem g\u00fcvenli\u011finin ilk ad\u0131mlar\u0131n\u0131 olu\u015fturdu.<\/p>\n
Kurulumun tamamlanmas\u0131n\u0131n ard\u0131ndan, sunucunuzu g\u00fcncel tutman\u0131n, SSH g\u00fcvenli\u011fini sa\u011flaman\u0131n, firewalld<\/code> ile a\u011f trafi\u011fini y\u00f6netmenin ve SELinux ile ek bir g\u00fcvenlik katman\u0131 olu\u015fturman\u0131n \u00f6nemini vurgulad\u0131k. Zaman senkronizasyonu, ek depolar\u0131n eklenmesi ve sistem kaynaklar\u0131n\u0131 izleme gibi ad\u0131mlar, sunucunun verimli ve y\u00f6netilebilir olmas\u0131n\u0131 sa\u011flayan temel yap\u0131land\u0131rmalard\u0131r. Son olarak, yedekleme stratejileri ve genel g\u00fcvenlik ipu\u00e7lar\u0131 ile sunucunuzun uzun vadeli g\u00fcvenli\u011fini ve veri b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc nas\u0131l sa\u011flayaca\u011f\u0131n\u0131z\u0131 ele ald\u0131k.<\/p>\n
Rocky Linux 8, sa\u011flam temelleri, topluluk deste\u011fi ve RHEL ile ikili uyumlulu\u011fu sayesinde, kritik i\u015f y\u00fckleri i\u00e7in m\u00fckemmel bir platform sunmaktad\u0131r. Bu rehberdeki ad\u0131mlar\u0131 takip ederek, ister fiziksel, ister sanal, ister bulut ortam\u0131nda olsun, g\u00fcvenli, istikrarl\u0131 ve y\u00f6netilebilir bir Rocky Linux 8 sunucu ortam\u0131 olu\u015fturabilirsiniz. Bu temel kurulumun ard\u0131ndan, sunucunuzun \u00f6zel amac\u0131na y\u00f6nelik (web sunucusu, veritaban\u0131 sunucusu, dosya sunucusu vb.) ek servisleri ve uygulamalar\u0131 kurmaya ba\u015flayabilirsiniz. Unutmay\u0131n, sunucu y\u00f6netimi s\u00fcrekli bir \u00f6\u011frenme ve uygulama s\u00fcrecidir; d\u00fczenli bak\u0131m, izleme ve g\u00fcvenlik denetimleri, sunucunuzun performans\u0131n\u0131 ve g\u00fcvenli\u011fini her zaman en \u00fcst d\u00fczeyde tutacakt\u0131r. Rocky Linux toplulu\u011fu ve geni\u015f d\u00f6k\u00fcmantasyon kaynaklar\u0131, bu yolculukta her zaman yan\u0131n\u0131zda olacakt\u0131r.<\/body><\/p>\n","protected":false},"excerpt":{"rendered":"Initial Server Setup with Rocky Linux 8\nGiri\u015f\nSunucu altyap\u0131s\u0131n\u0131n temelini olu\u015fturan i\u015fletim sisteminin do\u011fru ve g\u00fcvenli bir \u015fekilde kurulma","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-32807","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"\nInitial Server Setup with Rocky Linux 8 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Initial Server Setup with Rocky Linux 8\" \/>\n<meta property=\"og:description\" content=\"Initial Server Setup with Rocky Linux 8 Giri\u015f Sunucu altyap\u0131s\u0131n\u0131n temelini olu\u015fturan i\u015fletim sisteminin do\u011fru ve g\u00fcvenli bir \u015fekilde kurulma\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-26T02:41:03+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"21 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Initial Server Setup with Rocky Linux 8\",\"datePublished\":\"2025-10-26T02:41:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\"},\"wordCount\":3992,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\",\"name\":\"Initial Server Setup with Rocky Linux 8 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-10-26T02:41:03+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Initial Server Setup with Rocky Linux 8\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Initial Server Setup with Rocky Linux 8 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/","og_locale":"tr_TR","og_type":"article","og_title":"Initial Server Setup with Rocky Linux 8","og_description":"Initial Server Setup with Rocky Linux 8 Giri\u015f Sunucu altyap\u0131s\u0131n\u0131n temelini olu\u015fturan i\u015fletim sisteminin do\u011fru ve g\u00fcvenli bir \u015fekilde kurulma","og_url":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-10-26T02:41:03+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"21 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Initial Server Setup with Rocky Linux 8","datePublished":"2025-10-26T02:41:03+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/"},"wordCount":3992,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/","url":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/","name":"Initial Server Setup with Rocky Linux 8 - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-10-26T02:41:03+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/initial-server-setup-with-rocky-linux-8\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Initial Server Setup with Rocky Linux 8"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=32807"}],"version-history":[{"count":1,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32807\/revisions"}],"predecessor-version":[{"id":32808,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/32807\/revisions\/32808"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=32807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=32807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=32807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}