Secure a new Rocky Linux server
The first hour on a Rocky Linux or AlmaLinux VPS: dnf updates, a wheel user, key only SSH, firewalld, dnf-automatic, and SELinux left enforcing.
#firewalld
Filtering by topic #firewalld · clear
Change the SSH port with SELinux and firewalld
Moving sshd to a new port on Rocky Linux or AlmaLinux needs firewalld, an SELinux port label and sshd_config. Do it in the order that keeps you logged in.
Install Docker on Rocky Linux or AlmaLinux
Install Docker Engine on Rocky Linux or AlmaLinux with dnf, then fix what Ubuntu guides skip: podman owning the docker command and SELinux on bind mounts.
firewalld basics for a Rocky or AlmaLinux VPS
Open SSH, allow a web port, close one, and survive a reboot with firewalld on Rocky or AlmaLinux. Zones explained, plus the --permanent trap.