{"id":37087,"date":"2025-12-27T07:30:42","date_gmt":"2025-12-27T04:30:42","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/"},"modified":"2025-12-27T07:30:42","modified_gmt":"2025-12-27T04:30:42","slug":"arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/","title":{"rendered":"Arch Linux&#8217;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi"},"content":{"rendered":"<h2>Arch Linux&#8217;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi<\/h2>\n<p>G\u00fcn\u00fcm\u00fcz dijital d\u00fcnyas\u0131nda veri g\u00fcvenli\u011fi ve sistem b\u00fct\u00fcnl\u00fc\u011f\u00fc her zamankinden daha \u00f6nemli hale gelmi\u015ftir. Arch Linux, kullan\u0131c\u0131s\u0131na sundu\u011fu esneklik ve kontrol ile bu ihtiya\u00e7lar\u0131 kar\u015f\u0131lamak i\u00e7in m\u00fckemmel bir temel sa\u011flar. Bu rehberde, Arch Linux&#8217;u BTRFS dosya sistemi, LUKS tam disk \u015fifrelemesi ve TPM2 (Trusted Platform Module 2.0) kullanarak otomatik kilit a\u00e7ma \u00f6zelli\u011fi ile nas\u0131l kuraca\u011f\u0131n\u0131z\u0131 ad\u0131m ad\u0131m a\u00e7\u0131klayaca\u011f\u0131z. Bu kombinasyon, verilerinizi g\u00fc\u00e7l\u00fc bir \u015fekilde \u015fifrelerken, her \u00f6ny\u00fcklemede manuel \u015fifre giri\u015fi zahmetinden sizi kurtararak g\u00fcvenlik ve kullan\u0131m kolayl\u0131\u011f\u0131n\u0131 bir araya getirir.<\/p>\n<h3>1. Giri\u015f ve \u00d6n Haz\u0131rl\u0131klar<\/h3>\n<p>Arch Linux&#8217;un BTRFS, LUKS ve TPM2 ile kurulumu, hem g\u00fcvenlik hem de modern dosya sistemi \u00f6zelliklerini bir araya getiren g\u00fc\u00e7l\u00fc bir kombinasyondur. Bu kurulum sayesinde verileriniz \u015fifreli kal\u0131rken, TPM2 \u00e7ipi sistem b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc do\u011frulayarak otomatik olarak LUKS b\u00f6l\u00fcm\u00fcn\u00fcz\u00fcn kilidini a\u00e7ar. Bu b\u00f6l\u00fcm, kurulum i\u00e7in gerekli \u00f6n haz\u0131rl\u0131klar\u0131 ve temel gereksinimleri ele alacakt\u0131r.<\/p>\n<h4>Neden BTRFS, LUKS ve TPM2?<\/h4>\n<p><strong>BTRFS<\/strong>, anl\u0131k g\u00f6r\u00fcnt\u00fcler (snapshots), veri b\u00fct\u00fcnl\u00fc\u011f\u00fc sa\u011flama (checksums), s\u0131k\u0131\u015ft\u0131rma ve kolay disk y\u00f6netimi gibi modern \u00f6zellikler sunan bir dosya sistemidir. Bu \u00f6zellikler sayesinde sisteminizi kolayca \u00f6nceki bir duruma d\u00f6nd\u00fcrebilir, disk alan\u0131ndan tasarruf edebilir ve veri bozulmalar\u0131na kar\u015f\u0131 korunabilirsiniz. <strong>LUKS (Linux Unified Key Setup)<\/strong>, disk b\u00f6l\u00fcmlerini \u015fifrelemek i\u00e7in end\u00fcstri standard\u0131 bir y\u00f6ntemdir. Tam disk \u015fifrelemesi sayesinde, cihaz\u0131n\u0131z fiziksel olarak ele ge\u00e7irilse bile verileriniz yetkisiz eri\u015fime kar\u015f\u0131 korunur. <strong>TPM2 (Trusted Platform Module 2.0)<\/strong>, anakart \u00fczerinde bulunan bir donan\u0131m g\u00fcvenlik \u00e7ipidir. Sistem \u00f6ny\u00fckleme zincirini \u00f6l\u00e7erek (PCR&#8217;ler &#8211; Platform Configuration Registers) sistem b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc do\u011frular ve bu \u00f6l\u00e7\u00fcmleri kullanarak LUKS b\u00f6l\u00fcm\u00fcn\u00fcz\u00fcn kilidini otomatik olarak a\u00e7abilir. Bu sayede, sisteminiz g\u00fcvenli bir \u015fekilde ba\u015flat\u0131ld\u0131\u011f\u0131 s\u00fcrece manuel \u015fifre giri\u015fi yapman\u0131za gerek kalmaz.<\/p>\n<h4>Gereksinimler ve Ba\u015flang\u0131\u00e7<\/h4>\n<ul>\n<li>UEFI destekli bir sistem ve BIOS\/UEFI ayarlar\u0131nda TPM2&#8217;nin etkinle\u015ftirilmi\u015f olmas\u0131.<\/li>\n<li>Arch Linux ISO&#8217;sunu i\u00e7eren \u00f6ny\u00fcklenebilir bir USB s\u00fcr\u00fcc\u00fc.<\/li>\n<li>Stabil bir internet ba\u011flant\u0131s\u0131.<\/li>\n<li>Temel Linux komut sat\u0131r\u0131 bilgisi.<\/li>\n<li>En az 50 GB bo\u015f disk alan\u0131 (\u00f6nerilen 100 GB+).<\/li>\n<\/ul>\n<p>Kuruluma ba\u015flamadan \u00f6nce, BIOS\/UEFI ayarlar\u0131n\u0131zda TPM2&#8217;nin etkinle\u015ftirildi\u011finden ve sisteminizin UEFI modunda \u00f6ny\u00fcklendi\u011finden emin olun. Genellikle &#8220;Security&#8221; veya &#8220;Trusted Computing&#8221; ba\u015fl\u0131\u011f\u0131 alt\u0131nda TPM ayarlar\u0131n\u0131 bulabilirsiniz.<\/p>\n<h4>Canl\u0131 Ortama \u00d6ny\u00fckleme<\/h4>\n<p>Haz\u0131rlad\u0131\u011f\u0131n\u0131z Arch Linux \u00f6ny\u00fcklenebilir USB s\u00fcr\u00fcc\u00fcs\u00fc ile sisteminizi ba\u015flat\u0131n. \u00d6ny\u00fckleme i\u015flemi tamamland\u0131\u011f\u0131nda bir komut istemi ile kar\u015f\u0131la\u015facaks\u0131n\u0131z. \u0130lk olarak, internet ba\u011flant\u0131n\u0131z\u0131 kontrol edin. Kablolu ba\u011flant\u0131 genellikle otomatik olarak kurulur. Kablosuz ba\u011flant\u0131 i\u00e7in <code>iwctl<\/code> komutunu kullanabilirsiniz:<\/p>\n<pre><code>iwctl\ndevice list\nstation <device> scan\nstation <device> get-networks\nstation <device> connect <SSID>\nexit<\/pre>\n<p><\/code><\/p>\n<p>Ard\u0131ndan, sistem saatini senkronize edin:<\/p>\n<pre><code>timedatectl set-ntp true<\/pre>\n<p><\/code><\/p>\n<p>Diskinizin ad\u0131n\u0131 belirlemek i\u00e7in <code>lsblk<\/code> komutunu kullan\u0131n. Genellikle <code>\/dev\/nvme0n1<\/code> veya <code>\/dev\/sda<\/code> gibi bir \u00e7\u0131kt\u0131 al\u0131rs\u0131n\u0131z. Bu rehberde <code>\/dev\/nvme0n1<\/code> kullanaca\u011f\u0131z.<\/p>\n<h3>2. Disk B\u00f6l\u00fcmlendirme ve LUKS \u015eifreleme<\/h3>\n<p>Bu ad\u0131mda, diskimizi UEFI, \u00f6ny\u00fckleme ve \u015fifrelenecek k\u00f6k b\u00f6l\u00fcm\u00fc i\u00e7in b\u00f6l\u00fcmlendirecek ve LUKS ile \u015fifreleme i\u015flemini ger\u00e7ekle\u015ftirece\u011fiz.<\/p>\n<h4>Disk Yap\u0131s\u0131n\u0131n Belirlenmesi<\/h4>\n<p><code>fdisk<\/code> veya <code>gdisk<\/code> gibi bir ara\u00e7 kullanarak diskimizi b\u00f6l\u00fcmlendirece\u011fiz. GPT (GUID Partition Table) kullanmak, modern UEFI sistemler i\u00e7in standartt\u0131r.<\/p>\n<pre><code>gdisk \/dev\/nvme0n1<\/pre>\n<p><\/code><\/p>\n<p>Komutu \u00e7al\u0131\u015ft\u0131rd\u0131ktan sonra a\u015fa\u011f\u0131daki b\u00f6l\u00fcmleri olu\u015fturun:<\/p>\n<ul>\n<li><strong>EFI Sistem B\u00f6l\u00fcm\u00fc (ESP):<\/strong> <code>\/dev\/nvme0n1p1<\/code> - 512MB, tip kodu <code>EF00<\/code> (EFI System).<\/li>\n<li><strong>Boot B\u00f6l\u00fcm\u00fc:<\/strong> <code>\/dev\/nvme0n1p2<\/code> - 1GB, tip kodu <code>8300<\/code> (Linux filesystem). Bu b\u00f6l\u00fcm \u015fifresiz kalacak ve \u00e7ekirdek ile initramfs'i i\u00e7erecektir.<\/li>\n<li><strong>K\u00f6k B\u00f6l\u00fcm\u00fc:<\/strong> <code>\/dev\/nvme0n1p3<\/code> - Geri kalan t\u00fcm alan, tip kodu <code>8300<\/code> (Linux filesystem). Bu b\u00f6l\u00fcm LUKS ile \u015fifrelenecektir.<\/li>\n<\/ul>\n<p>De\u011fi\u015fiklikleri kaydetmek i\u00e7in <code>w<\/code> komutunu kullan\u0131n.<\/p>\n<h4>EFI ve Boot B\u00f6l\u00fcmlerini Bi\u00e7imlendirme<\/h4>\n<p>EFI sistem b\u00f6l\u00fcm\u00fcn\u00fc FAT32 olarak bi\u00e7imlendirin:<\/p>\n<pre><code>mkfs.fat -F 32 \/dev\/nvme0n1p1<\/pre>\n<p><\/code><\/p>\n<p>Boot b\u00f6l\u00fcm\u00fcn\u00fc EXT4 olarak bi\u00e7imlendirin:<\/p>\n<pre><code>mkfs.ext4 \/dev\/nvme0n1p2<\/pre>\n<p><\/code><\/p>\n<h4>LUKS ile K\u00f6k B\u00f6l\u00fcm\u00fc \u015eifreleme<\/h4>\n<p>K\u00f6k b\u00f6l\u00fcm\u00fcn\u00fc (<code>\/dev\/nvme0n1p3<\/code>) LUKS ile \u015fifreleyece\u011fiz. G\u00fc\u00e7l\u00fc bir \u015fifre belirledi\u011finizden emin olun ve bu \u015fifreyi unutmay\u0131n; TPM2 kilit a\u00e7ma ba\u015far\u0131s\u0131z olursa manuel olarak girmeniz gerekecektir.<\/p>\n<pre><code>cryptsetup luksFormat \/dev\/nvme0n1p3<\/pre>\n<p><\/code><\/p>\n<p>\u015eifreleme tamamland\u0131ktan sonra, LUKS b\u00f6l\u00fcm\u00fcn\u00fc a\u00e7\u0131n ve <code>cryptroot<\/code> ad\u0131n\u0131 verin:<\/p>\n<pre><code>cryptsetup open \/dev\/nvme0n1p3 cryptroot<\/pre>\n<p><\/code><\/p>\n<p>Art\u0131k \u015fifrelenmi\u015f b\u00f6l\u00fcm <code>\/dev\/mapper\/cryptroot<\/code> olarak eri\u015filebilir durumda.<\/p>\n<h3>3. BTRFS Dosya Sistemi Kurulumu<\/h3>\n<p>\u015eifrelenmi\u015f LUKS b\u00f6l\u00fcm\u00fcm\u00fcz\u00fc BTRFS olarak bi\u00e7imlendirecek ve gerekli alt birimleri (subvolumes) olu\u015fturaca\u011f\u0131z. BTRFS'nin esnekli\u011fi sayesinde, farkl\u0131 dizinler i\u00e7in ayr\u0131 alt birimler olu\u015fturarak anl\u0131k g\u00f6r\u00fcnt\u00fc y\u00f6netimini kolayla\u015ft\u0131rabiliriz.<\/p>\n<h4>\u015eifrelenmi\u015f B\u00f6l\u00fcm\u00fc Bi\u00e7imlendirme<\/h4>\n<p><code>\/dev\/mapper\/cryptroot<\/code> b\u00f6l\u00fcm\u00fcn\u00fc BTRFS olarak bi\u00e7imlendirin:<\/p>\n<pre><code>mkfs.btrfs -L ArchRoot \/dev\/mapper\/cryptroot<\/pre>\n<p><\/code><\/p>\n<p>Ard\u0131ndan, bu b\u00f6l\u00fcm\u00fc ge\u00e7ici olarak ba\u011flay\u0131n:<\/p>\n<pre><code>mount \/dev\/mapper\/cryptroot \/mnt<\/pre>\n<p><\/code><\/p>\n<h4>BTRFS Alt Birimlerinin Olu\u015fturulmas\u0131<\/h4>\n<p>BTRFS'nin en g\u00fc\u00e7l\u00fc \u00f6zelliklerinden biri alt birimlerdir. Sistemimizin farkl\u0131 b\u00f6l\u00fcmlerini ayr\u0131 alt birimlerde tutarak anl\u0131k g\u00f6r\u00fcnt\u00fc almay\u0131 ve y\u00f6netmeyi kolayla\u015ft\u0131r\u0131r\u0131z. A\u015fa\u011f\u0131daki alt birimleri olu\u015ftural\u0131m:<\/p>\n<ul>\n<li><code>@<\/code>: K\u00f6k dosya sistemi (<code>\/<\/code>) i\u00e7in.<\/li>\n<li><code>@home<\/code>: Kullan\u0131c\u0131 ev dizinleri (<code>\/home<\/code>) i\u00e7in.<\/li>\n<li><code>@snapshots<\/code>: Anl\u0131k g\u00f6r\u00fcnt\u00fcler i\u00e7in.<\/li>\n<li><code>@var_log<\/code>: Log dosyalar\u0131 (<code>\/var\/log<\/code>) i\u00e7in (iste\u011fe ba\u011fl\u0131, ancak s\u0131k s\u0131k de\u011fi\u015fen veriler i\u00e7in faydal\u0131).<\/li>\n<li><code>@tmp<\/code>: Ge\u00e7ici dosyalar (<code>\/tmp<\/code>) i\u00e7in (iste\u011fe ba\u011fl\u0131).<\/li>\n<\/ul>\n<pre><code>btrfs subvolume create \/mnt\/@\nbtrfs subvolume create \/mnt\/@home\nbtrfs subvolume create \/mnt\/@snapshots\nbtrfs subvolume create \/mnt\/@var_log\nbtrfs subvolume create \/mnt\/@tmp<\/pre>\n<p><\/code><\/p>\n<h4>Alt Birimleri Ba\u011flama<\/h4>\n<p>Ge\u00e7ici olarak ba\u011flad\u0131\u011f\u0131m\u0131z <code>\/mnt<\/code> dizinini ay\u0131r\u0131n ve alt birimleri do\u011fru \u015fekilde ba\u011flay\u0131n. <code>noatime<\/code> ve <code>compress=zstd<\/code> (veya <code>compress=lzo<\/code>) gibi ba\u011flama se\u00e7enekleri performans\u0131 art\u0131rabilir.<\/p>\n<pre><code>umount \/mnt\nmount -o noatime,compress=zstd,subvol=@ \/dev\/mapper\/cryptroot \/mnt\nmkdir -p \/mnt\/{boot,home,.snapshots,var\/log,tmp}\nmount -o noatime,compress=zstd,subvol=@home \/dev\/mapper\/cryptroot \/mnt\/home\nmount -o noatime,compress=zstd,subvol=@snapshots \/dev\/mapper\/cryptroot \/mnt\/.snapshots\nmount -o noatime,compress=zstd,subvol=@var_log \/dev\/mapper\/cryptroot \/mnt\/var\/log\nmount -o noatime,compress=zstd,subvol=@tmp \/dev\/mapper\/cryptroot \/mnt\/tmp\nmount \/dev\/nvme0n1p2 \/mnt\/boot\nmount \/dev\/nvme0n1p1 \/mnt\/boot\/efi<\/pre>\n<p><\/code><\/p>\n<p>T\u00fcm ba\u011flama i\u015flemlerinin do\u011fru yap\u0131ld\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in <code>lsblk<\/code> veya <code>findmnt<\/code> komutunu kullanabilirsiniz.<\/p>\n<h3>4. Temel Arch Linux Kurulumu<\/h3>\n<p>Art\u0131k disklerimiz haz\u0131r oldu\u011funa g\u00f6re, Arch Linux'un temel sistemini kurabiliriz. Bu ad\u0131mda gerekli paketleri kuracak, fstab dosyas\u0131n\u0131 olu\u015fturacak ve chroot ortam\u0131na ge\u00e7i\u015f yapaca\u011f\u0131z.<\/p>\n<h4>Sistem Paketlerinin Kurulumu (pacstrap)<\/h4>\n<p><code>pacstrap<\/code> komutunu kullanarak temel sistem paketlerini kurun. LUKS ve BTRFS i\u00e7in gerekli ara\u00e7lar\u0131 ve TPM2 deste\u011fi i\u00e7in <code>tpm2-tools<\/code> ile <code>tpm2-tss<\/code> paketlerini eklemeyi unutmay\u0131n.<\/p>\n<pre><code>pacstrap \/mnt base linux linux-firmware btrfs-progs cryptsetup tpm2-tools tpm2-tss vim grub efibootmgr networkmanager<\/pre>\n<p><\/code><\/p>\n<p><code>vim<\/code>, <code>grub<\/code>, <code>efibootmgr<\/code> ve <code>networkmanager<\/code> gibi paketler de genellikle ihtiya\u00e7 duyulan ara\u00e7lard\u0131r.<\/p>\n<h4>Fstab Dosyas\u0131n\u0131n Olu\u015fturulmas\u0131<\/h4>\n<p><code>genfstab<\/code> komutu ile ba\u011flad\u0131\u011f\u0131n\u0131z t\u00fcm b\u00f6l\u00fcmler i\u00e7in <code>\/etc\/fstab<\/code> dosyas\u0131n\u0131 otomatik olarak olu\u015fturun. <code>-U<\/code> se\u00e7ene\u011fi UUID'leri kullan\u0131r, bu da daha sa\u011flam bir yap\u0131 sa\u011flar.<\/p>\n<pre><code>genfstab -U \/mnt >> \/mnt\/etc\/fstab<\/pre>\n<p><\/code><\/p>\n<p>Olu\u015fturulan <code>fstab<\/code> dosyas\u0131n\u0131 kontrol edin ve gerekirse d\u00fczenleyin. BTRFS alt birimleri i\u00e7in <code>subvolid<\/code> yerine <code>subvol<\/code> parametresi kullan\u0131ld\u0131\u011f\u0131ndan emin olun.<\/p>\n<h4>Chroot Ortam\u0131na Ge\u00e7i\u015f<\/h4>\n<p>Yeni kurulan sisteme chroot ile ge\u00e7i\u015f yap\u0131n. Bu, art\u0131k canl\u0131 ortam yerine kurulu sistem \u00fczerinden i\u015flem yapaca\u011f\u0131n\u0131z anlam\u0131na gelir.<\/p>\n<pre><code>arch-chroot \/mnt<\/pre>\n<p><\/code><\/p>\n<p>Chroot ortam\u0131na girdikten sonra, sistem saatini ayarlay\u0131n, yerel ayarlar\u0131 yap\u0131land\u0131r\u0131n ve root \u015fifresini belirleyin.<\/p>\n<pre><code>ln -sf \/usr\/share\/zoneinfo\/Europe\/Istanbul \/etc\/localtime\nhwclock --systohc\necho \"en_US.UTF-8 UTF-8\" >> \/etc\/locale.gen\necho \"tr_TR.UTF-8 UTF-8\" >> \/etc\/locale.gen\nlocale-gen\necho \"LANG=en_US.UTF-8\" > \/etc\/locale.conf\necho \"HOSTNAME\" > \/etc\/hostname # HOSTNAME yerine istedi\u011finiz ana bilgisayar ad\u0131n\u0131 yaz\u0131n\npasswd # Root \u015fifresini belirleyin<\/pre>\n<p><\/code><\/p>\n<h3>5. TPM2 ile Otomatik Kilit A\u00e7ma Yap\u0131land\u0131rmas\u0131<\/h3>\n<p>Bu b\u00f6l\u00fcm, kurulumun en kritik ve benzersiz k\u0131sm\u0131d\u0131r: TPM2 \u00e7ipini kullanarak LUKS b\u00f6l\u00fcm\u00fcn\u00fcz\u00fcn otomatik olarak kilidini a\u00e7mas\u0131n\u0131 sa\u011flamak. <code>systemd-cryptenroll<\/code> arac\u0131 ve initramfs yap\u0131land\u0131rmas\u0131 bu s\u00fcre\u00e7te anahtar rol oynar.<\/p>\n<h4>TPM2 Mod\u00fcl\u00fcn\u00fcn Kontrol\u00fc ve Haz\u0131rl\u0131\u011f\u0131<\/h4>\n<p>\u0130lk olarak, TPM2 \u00e7ipinizin do\u011fru \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan ve eri\u015filebilir oldu\u011fundan emin olun. <code>tpm2-tools<\/code> paketini kurdu\u011funuz i\u00e7in bu ara\u00e7lar\u0131 kullanabiliriz.<\/p>\n<pre><code>tpm2_pcrread # PCR de\u011ferlerini kontrol edin\ntpm2_clear # TPM'yi temizleyin (iste\u011fe ba\u011fl\u0131, ancak tavsiye edilir)<\/pre>\n<p><\/code><\/p>\n<p>TPM'yi temizlemek, eski anahtarlar\u0131 veya yap\u0131land\u0131rmalar\u0131 siler ve yeni bir ba\u015flang\u0131\u00e7 yapman\u0131z\u0131 sa\u011flar. Bu i\u015flem geri al\u0131namaz, bu y\u00fczden dikkatli olun.<\/p>\n<h4>systemd-cryptenroll Kullan\u0131m\u0131<\/h4>\n<p><code>systemd-cryptenroll<\/code>, LUKS b\u00f6l\u00fcm\u00fcne TPM2 anahtar\u0131n\u0131 kaydetmek i\u00e7in kullan\u0131lan ara\u00e7t\u0131r. Bu komut, belirtilen PCR'lerin (Platform Configuration Registers) mevcut de\u011ferlerini kullanarak bir anahtar olu\u015fturur ve LUKS ba\u015fl\u0131\u011f\u0131na ekler. PCR'ler, sistem \u00f6ny\u00fckleme s\u0131ras\u0131nda \u00e7e\u015fitli bile\u015fenlerin (BIOS\/UEFI, MBR\/GPT, \u00e7ekirdek vb.) \u00f6l\u00e7\u00fcmlerini tutar. E\u011fer bu \u00f6l\u00e7\u00fcmler de\u011fi\u015firse (\u00f6rne\u011fin, k\u00f6t\u00fc ama\u00e7l\u0131 bir yaz\u0131l\u0131m BIOS'u de\u011fi\u015ftirirse), TPM2 anahtar\u0131 ge\u00e7ersiz olur ve sistem otomatik olarak kilitlenmez, bu da g\u00fcvenli\u011fi art\u0131r\u0131r.<\/p>\n<p>LUKS b\u00f6l\u00fcm\u00fcn\u00fcze TPM2 anahtar\u0131n\u0131 kaydedin:<\/p>\n<pre><code>systemd-cryptenroll --tpm2-device=auto --tpm2-pcrs=0+2+4+7 \/dev\/nvme0n1p3<\/pre>\n<p><\/code><\/p>\n<p>Burada <code>--tpm2-device=auto<\/code>, sistemdeki ilk TPM2 cihaz\u0131n\u0131 kullan\u0131r. <code>--tpm2-pcrs=0+2+4+7<\/code> ise 0, 2, 4 ve 7 numaral\u0131 PCR'lerin \u00f6l\u00e7\u00fcmlerini kullan\u0131r. Bu PCR'ler genellikle BIOS\/UEFI, bootloader ve \u00e7ekirdek ile ilgili \u00f6nemli bile\u015fenleri kapsar. Kendi sisteminiz i\u00e7in hangi PCR'lerin uygun oldu\u011funu kontrol etmek isteyebilirsiniz, ancak bu de\u011ferler \u00e7o\u011fu sistem i\u00e7in iyi bir ba\u015flang\u0131\u00e7 noktas\u0131d\u0131r.<\/p>\n<p>Ba\u015far\u0131l\u0131 olursa, komut bir \u00e7\u0131kt\u0131 vermeli ve LUKS b\u00f6l\u00fcm\u00fcne yeni bir anahtar yuvas\u0131 eklemelidir.<\/p>\n<h4>Initramfs Olu\u015fturma ve mkinitcpio Ayarlar\u0131<\/h4>\n<p>TPM2 ile otomatik kilit a\u00e7man\u0131n \u00e7al\u0131\u015fmas\u0131 i\u00e7in, initramfs'in LUKS b\u00f6l\u00fcm\u00fcn\u00fc a\u00e7mak i\u00e7in gerekli mod\u00fclleri ve komut dosyalar\u0131n\u0131 i\u00e7ermesi gerekir. Arch Linux'ta varsay\u0131lan olarak <code>mkinitcpio<\/code> kullan\u0131l\u0131r. <code>\/etc\/mkinitcpio.conf<\/code> dosyas\u0131n\u0131 d\u00fczenlememiz gerekiyor.<\/p>\n<pre><code>vim \/etc\/mkinitcpio.conf<\/pre>\n<p><\/code><\/p>\n<p><code>HOOKS<\/code> dizisine <code>systemd<\/code> ve <code>sd-encrypt<\/code> hook'lar\u0131n\u0131 ekleyin. Bu hook'lar, <code>systemd-cryptenroll<\/code> taraf\u0131ndan olu\u015fturulan anahtar\u0131 kullanarak LUKS b\u00f6l\u00fcm\u00fcn\u00fc a\u00e7mak i\u00e7in gerekli mant\u0131\u011f\u0131 sa\u011flar. <code>udev<\/code>'den sonra ve <code>autodetect<\/code>'ten \u00f6nce yerle\u015ftirilmesi \u00f6nemlidir.<\/p>\n<p>\u00d6rnek <code>HOOKS<\/code> sat\u0131r\u0131:<\/p>\n<pre><code>HOOKS=(base udev systemd autodetect keyboard keymap consolefont modconf block sd-encrypt filesystems fsck)<\/pre>\n<p><\/code><\/p>\n<p>De\u011fi\u015fiklikleri kaydettikten sonra, yeni initramfs g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fc olu\u015fturun:<\/p>\n<pre><code>mkinitcpio -P<\/pre>\n<p><\/code><\/p>\n<p>Bu komut, t\u00fcm kurulu \u00e7ekirdekler i\u00e7in yeni initramfs g\u00f6r\u00fcnt\u00fclerini olu\u015fturacakt\u0131r.<\/p>\n<h3>6. \u00d6ny\u00fckleyici Kurulumu ve Son Ayarlar<\/h3>\n<p>Sistemimizin \u00f6ny\u00fcklenebilir hale gelmesi i\u00e7in GRUB \u00f6ny\u00fckleyicisini kurmal\u0131 ve gerekli yap\u0131land\u0131rmalar\u0131 yapmal\u0131y\u0131z. Ayr\u0131ca, temel sistem ayarlar\u0131n\u0131 tamamlayaca\u011f\u0131z.<\/p>\n<h4>GRUB Kurulumu ve Yap\u0131land\u0131rmas\u0131<\/h4>\n<p>GRUB'u EFI sistem b\u00f6l\u00fcm\u00fcne kurun:<\/p>\n<pre><code>grub-install --target=x86_64-efi --efi-directory=\/boot\/efi --bootloader-id=ArchLinux --recheck<\/pre>\n<p><\/code><\/p>\n<p>\u015eimdi GRUB yap\u0131land\u0131rma dosyas\u0131n\u0131 olu\u015fturun:<\/p>\n<pre><code>grub-mkconfig -o \/boot\/grub\/grub.cfg<\/pre>\n<p><\/code><\/p>\n<h4>GRUB Kernel Parametreleri<\/h4>\n<p>GRUB'un LUKS b\u00f6l\u00fcm\u00fcn\u00fc do\u011fru \u015fekilde tan\u0131mas\u0131 ve otomatik kilit a\u00e7ma i\u015flemini ba\u015flatmas\u0131 i\u00e7in \u00e7ekirdek parametrelerini d\u00fczenlememiz gerekir. <code>\/etc\/default\/grub<\/code> dosyas\u0131n\u0131 a\u00e7\u0131n:<\/p>\n<pre><code>vim \/etc\/default\/grub<\/pre>\n<p><\/code><\/p>\n<p><code>GRUB_CMDLINE_LINUX_DEFAULT<\/code> sat\u0131r\u0131n\u0131 bulun ve a\u015fa\u011f\u0131daki parametreleri ekleyin. <code>\/dev\/nvme0n1p3<\/code> b\u00f6l\u00fcm\u00fcn\u00fcn UUID'sini <code>lsblk -f<\/code> komutuyla \u00f6\u011frenip yerine yaz\u0131n.<\/p>\n<pre><code>GRUB_CMDLINE_LINUX_DEFAULT=\"loglevel=3 quiet cryptdevice=UUID=<LUKS_B\u00f6l\u00fcm\u00fcn\u00fcn_UUID'si>:cryptroot root=\/dev\/mapper\/cryptroot rw\"<\/pre>\n<p><\/code><\/p>\n<p>\u00d6rnek:<\/p>\n<pre><code>GRUB_CMDLINE_LINUX_DEFAULT=\"loglevel=3 quiet cryptdevice=UUID=a1b2c3d4-e5f6-7890-1234-567890abcdef:cryptroot root=\/dev\/mapper\/cryptroot rw\"<\/pre>\n<p><\/code><\/p>\n<p>De\u011fi\u015fiklikleri kaydettikten sonra, GRUB yap\u0131land\u0131rmas\u0131n\u0131 tekrar olu\u015fturun:<\/p>\n<pre><code>grub-mkconfig -o \/boot\/grub\/grub.cfg<\/pre>\n<p><\/code><\/p>\n<h4>Kullan\u0131c\u0131 Olu\u015fturma ve Temel Sistem Ayarlar\u0131<\/h4>\n<p>Root kullan\u0131c\u0131s\u0131 d\u0131\u015f\u0131nda normal bir kullan\u0131c\u0131 olu\u015fturun ve ona sudo yetkileri verin:<\/p>\n<pre><code>useradd -m -g users -G wheel,storage,power -s \/bin\/bash <kullan\u0131c\u0131_ad\u0131>\npasswd <kullan\u0131c\u0131_ad\u0131><\/pre>\n<p><\/code><\/p>\n<p><code>wheel<\/code> grubuna sudo yetkisi vermek i\u00e7in <code>\/etc\/sudoers<\/code> dosyas\u0131n\u0131 d\u00fczenleyin (<code>visudo<\/code> komutunu kullan\u0131n):<\/p>\n<pre><code>visudo<\/pre>\n<p><\/code><\/p>\n<p><code># %wheel ALL=(ALL:ALL) ALL<\/code> sat\u0131r\u0131n\u0131n ba\u015f\u0131ndaki <code>#<\/code> i\u015faretini kald\u0131r\u0131n.<\/p>\n<p>NetworkManager servisini etkinle\u015ftirin:<\/p>\n<pre><code>systemctl enable NetworkManager<\/pre>\n<p><\/code><\/p>\n<p>Sisteminizin otomatik olarak TRIM yapmas\u0131n\u0131 sa\u011flamak i\u00e7in <code>fstrim.timer<\/code>'\u0131 etkinle\u015ftirin (BTRFS i\u00e7in faydal\u0131d\u0131r):<\/p>\n<pre><code>systemctl enable fstrim.timer<\/pre>\n<p><\/code><\/p>\n<h3>7. Sonu\u00e7 ve Ek \u0130pu\u00e7lar\u0131<\/h3>\n<p>Kurulumun sonuna geldik. T\u00fcm ad\u0131mlar\u0131 do\u011fru bir \u015fekilde takip ettiyseniz, sisteminiz art\u0131k g\u00fcvenli bir \u015fekilde \u015fifrelenmi\u015f ve TPM2 sayesinde otomatik olarak a\u00e7\u0131lmaya haz\u0131r olmal\u0131d\u0131r.<\/p>\n<h4>Kurulumun Tamamlanmas\u0131<\/h4>\n<p>Chroot ortam\u0131ndan \u00e7\u0131k\u0131n, t\u00fcm b\u00f6l\u00fcmleri ay\u0131r\u0131n ve sistemi yeniden ba\u015flat\u0131n:<\/p>\n<pre><code>exit\numount -R \/mnt\nreboot<\/pre>\n<p><\/code><\/p>\n<p>Sistem yeniden ba\u015flat\u0131ld\u0131\u011f\u0131nda, GRUB men\u00fcs\u00fc g\u00f6r\u00fcnecek ve ard\u0131ndan Arch Linux otomatik olarak LUKS b\u00f6l\u00fcm\u00fcn\u00fcn kilidini TPM2 kullanarak a\u00e7mal\u0131d\u0131r. Herhangi bir \u015fifre girmeden giri\u015f ekran\u0131na ula\u015fman\u0131z beklenir.<\/p>\n<h4>Ek G\u00fcvenlik ve Performans \u0130pu\u00e7lar\u0131<\/h4>\n<ul>\n<li><strong>BTRFS Anl\u0131k G\u00f6r\u00fcnt\u00fcleri:<\/strong> <code>snapper<\/code> veya <code>timeshift<\/code> gibi ara\u00e7lar kullanarak BTRFS anl\u0131k g\u00f6r\u00fcnt\u00fclerini y\u00f6netebilir ve sisteminizi kolayca \u00f6nceki bir duruma d\u00f6nd\u00fcrebilirsiniz.<\/li>\n<li><strong>Yedekleme:<\/strong> LUKS ba\u015fl\u0131\u011f\u0131n\u0131 yedeklemek her zaman iyi bir fikirdir: <code>cryptsetup luksHeaderBackup \/dev\/nvme0n1p3 --header-backup-file \/path\/to\/backup.img<\/code><\/li>\n<li><strong>G\u00fcvenli \u00d6ny\u00fckleme (Secure Boot):<\/strong> TPM2 ile birlikte Secure Boot'u etkinle\u015ftirmek, \u00f6ny\u00fckleme zincirinin daha da g\u00fcvenli olmas\u0131n\u0131 sa\u011flar. Ancak, Arch Linux'ta Secure Boot'u yap\u0131land\u0131rmak ek \u00e7aba gerektirebilir.<\/li>\n<\/ul>\n<h4>Sorun Giderme<\/h4>\n<ul>\n<li><strong>TPM2 kilit a\u00e7ma ba\u015far\u0131s\u0131z olursa:<\/strong> Sistem sizden LUKS \u015fifresini isteyecektir. \u015eifreyi girerek manuel olarak a\u00e7abilirsiniz. Bu durumda, <code>journalctl -b<\/code> komutuyla \u00f6ny\u00fckleme g\u00fcnl\u00fcklerini kontrol ederek sorunun nedenini ara\u015ft\u0131r\u0131n. Genellikle PCR'lerin de\u011fi\u015fmesi veya initramfs'in eksik yap\u0131land\u0131r\u0131lmas\u0131 neden olur.<\/li>\n<li><strong>GRUB \u00f6ny\u00fckleme hatas\u0131:<\/strong> Arch Linux ISO'su ile canl\u0131 ortama \u00f6ny\u00fckleyerek chroot yap\u0131n ve GRUB kurulum ad\u0131mlar\u0131n\u0131 tekrarlay\u0131n.<\/li>\n<li><strong>A\u011f ba\u011flant\u0131s\u0131 yok:<\/strong> <code>NetworkManager<\/code> servisinin etkin oldu\u011fundan ve do\u011fru yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131ndan emin olun.<\/li>\n<\/ul>\n<h3>8. S\u0131k\u00e7a Sorulan Sorular (SSS)<\/h3>\n<p>Bu b\u00f6l\u00fcmde, Arch Linux'u BTRFS, LUKS ve TPM2 ile kurarken s\u0131k\u00e7a kar\u015f\u0131la\u015f\u0131lan sorulara yan\u0131tlar bulacaks\u0131n\u0131z.<\/p>\n<h4>Neden TPM2 kullanmal\u0131y\u0131m?<\/h4>\n<p>TPM2, sisteminizin \u00f6ny\u00fckleme b\u00fct\u00fcnl\u00fc\u011f\u00fcn\u00fc donan\u0131m d\u00fczeyinde do\u011frular. Bu sayede, k\u00f6t\u00fc ama\u00e7l\u0131 bir yaz\u0131l\u0131m\u0131n veya yetkisiz bir ki\u015finin \u00f6ny\u00fckleme zincirini de\u011fi\u015ftirmesi durumunda LUKS b\u00f6l\u00fcm\u00fcn\u00fcz otomatik olarak a\u00e7\u0131lmaz, ek bir g\u00fcvenlik katman\u0131 sa\u011flar. Ayr\u0131ca, her \u00f6ny\u00fcklemede manuel \u015fifre girmek zorunda kalmaman\u0131z b\u00fcy\u00fck bir kullan\u0131m kolayl\u0131\u011f\u0131 sunar.<\/p>\n<h4>LUKS \u015fifresini kaybetsem ne olur?<\/h4>\n<p>LUKS \u015fifrenizi kaybetmeniz durumunda, e\u011fer TPM2 kilit a\u00e7ma mekanizmas\u0131 da \u00e7al\u0131\u015fmazsa (\u00f6rne\u011fin TPM2 temizlenmi\u015fse veya PCR'ler \u00e7ok fazla de\u011fi\u015fmi\u015fse), verilerinize eri\u015fiminiz imkans\u0131z hale gelebilir. Bu nedenle, LUKS \u015fifrenizi g\u00fcvenli bir yerde saklamak veya yedek bir anahtar olu\u015fturmak son derece \u00f6nemlidir.<\/p>\n<h4>BTRFS anl\u0131k g\u00f6r\u00fcnt\u00fcleri nas\u0131l al\u0131n\u0131r?<\/h4>\n<p>BTRFS'nin yerle\u015fik <code>btrfs subvolume snapshot<\/code> komutu ile anl\u0131k g\u00f6r\u00fcnt\u00fcler alabilirsiniz. \u00d6rne\u011fin, <code>btrfs subvolume snapshot \/mnt\/@ \/mnt\/.snapshots\/root_<tarih><\/code> komutuyla k\u00f6k b\u00f6l\u00fcm\u00fcn\u00fcz\u00fcn bir anl\u0131k g\u00f6r\u00fcnt\u00fcs\u00fcn\u00fc alabilirsiniz. Daha kolay y\u00f6netim i\u00e7in <code>snapper<\/code> veya <code>timeshift<\/code> gibi ara\u00e7lar\u0131 kullanman\u0131z \u00f6nerilir.<\/p>\n<h4>TPM2 kilit a\u00e7ma ba\u015far\u0131s\u0131z olursa ne yapmal\u0131y\u0131m?<\/h4>\n<p>TPM2 kilit a\u00e7ma ba\u015far\u0131s\u0131z oldu\u011funda sistem sizden manuel olarak LUKS \u015fifresini girmenizi isteyecektir. \u015eifreyi girerek sistemi ba\u015flatabilirsiniz. Ard\u0131ndan, sorunun nedenini ara\u015ft\u0131rmak i\u00e7in <code>journalctl -b<\/code> komutuyla \u00f6ny\u00fckleme g\u00fcnl\u00fcklerini kontrol edin. PCR de\u011ferlerinin de\u011fi\u015fmesi (\u00f6rne\u011fin bir BIOS g\u00fcncellemesi sonras\u0131) veya initramfs'in yanl\u0131\u015f yap\u0131land\u0131r\u0131lmas\u0131 yayg\u0131n nedenlerdir. Gerekirse <code>systemd-cryptenroll<\/code> komutunu tekrar \u00e7al\u0131\u015ft\u0131rarak yeni PCR de\u011ferleriyle anahtar\u0131 g\u00fcncelleyebilirsiniz.<\/p>\n<h4>BTRFS i\u00e7in hangi s\u0131k\u0131\u015ft\u0131rma algoritmas\u0131n\u0131 kullanmal\u0131y\u0131m?<\/h4>\n<p><code>zstd<\/code> (Zstandard) genellikle iyi bir denge sunar: hem iyi s\u0131k\u0131\u015ft\u0131rma oranlar\u0131 hem de h\u0131zl\u0131 performans. <code>lzo<\/code> daha h\u0131zl\u0131d\u0131r ancak daha d\u00fc\u015f\u00fck s\u0131k\u0131\u015ft\u0131rma oran\u0131na sahiptir. <code>zlib<\/code> ise daha yava\u015ft\u0131r ancak daha iyi s\u0131k\u0131\u015ft\u0131rma sa\u011flar. \u00c7o\u011fu kullan\u0131c\u0131 i\u00e7in <code>compress=zstd<\/code> iyi bir se\u00e7imdir.<\/p>\n","protected":false},"excerpt":{"rendered":"BTRFS, anl\u0131k g\u00f6r\u00fcnt\u00fcler (snapshots), veri b\u00fct\u00fcnl\u00fc\u011f\u00fc sa\u011flama (checksums), s\u0131k\u0131\u015ft\u0131rma ve kolay disk y\u00f6netimi gibi modern \u00f6zellikler sunan bir d&#8230;","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-37087","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Arch Linux&#039;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Arch Linux&#039;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi\" \/>\n<meta property=\"og:description\" content=\"BTRFS, anl\u0131k g\u00f6r\u00fcnt\u00fcler (snapshots), veri b\u00fct\u00fcnl\u00fc\u011f\u00fc sa\u011flama (checksums), s\u0131k\u0131\u015ft\u0131rma ve kolay disk y\u00f6netimi gibi modern \u00f6zellikler sunan bir d...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-27T04:30:42+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"Arch Linux&#8217;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi\",\"datePublished\":\"2025-12-27T04:30:42+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\"},\"wordCount\":2475,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\",\"name\":\"Arch Linux'u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2025-12-27T04:30:42+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Arch Linux&#8217;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Arch Linux'u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"Arch Linux'u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi","og_description":"BTRFS, anl\u0131k g\u00f6r\u00fcnt\u00fcler (snapshots), veri b\u00fct\u00fcnl\u00fc\u011f\u00fc sa\u011flama (checksums), s\u0131k\u0131\u015ft\u0131rma ve kolay disk y\u00f6netimi gibi modern \u00f6zellikler sunan bir d...","og_url":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2025-12-27T04:30:42+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"11 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"Arch Linux&#8217;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi","datePublished":"2025-12-27T04:30:42+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/"},"wordCount":2475,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/","url":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/","name":"Arch Linux'u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2025-12-27T04:30:42+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/arch-linuxu-btrfs-luks-ve-otomatik-tpm2-kilit-acma-ile-kurulum-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Arch Linux&#8217;u BTRFS, LUKS ve Otomatik TPM2 Kilit A\u00e7ma ile Kurulum Rehberi"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=37087"}],"version-history":[{"count":0,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/37087\/revisions"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=37087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=37087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=37087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}