Uninstalling¶

Remove the plugin¶

# as the librenms user
./lnms plugin:remove adaptivedatanetworks/librenms-webterm

This deregisters it so daily.sh stops reinstating it on the next LibreNMS update.

Remove the gateway¶

# as root
systemctl disable --now librenms-webterm-gw
apt remove librenms-webterm-gw        # or dnf remove, or rm /usr/bin/librenms-webterm-gw

Package removal deliberately leaves /etc/librenms-webterm/ and the librenms-webterm user in place: removing them would silently break a reinstall. Delete them yourself if you mean it:

# as root
rm -rf /etc/librenms-webterm
userdel librenms-webterm

Data left in LibreNMS¶

The plugin's tables are not dropped on removal, so a reinstall keeps your grants, host key pins and audit history. To remove them:

# as the librenms user, BEFORE removing the plugin
./lnms webterm:migrate --rollback

This drops every webterm_* table, including the plugin's own migration repository, so nothing of ours is left in the database.

Not ./lnms migrate:rollback

The plugin keeps its migrations in its own repository table rather than in core's, so core's rollback command does not know about them. See validate.php warnings for why.

This destroys the audit trail

webterm_audit records who opened a shell on what. Export it before rolling back if you are subject to any retention obligation — and note that the off-box syslog copy, if you configured one, is unaffected and may be the record that actually matters.

Devices¶

Nothing is changed on your devices, with one exception: if you used Vault's SSH signer, they still trust the CA public key in TrustedUserCAKeys. Remove it if you are decommissioning that CA.