CentOS7下如何彻底卸载Wallarm？已执行yum remove仍有日志残留

API 探路者

2026-5-19

Hey there, let's get this sorted out for you! The yum remove wallarm command only targets the main package, but leftover dependencies, running services, and residual config files are likely still generating those repetitive logs. Here's a step-by-step guide to completely wipe all Wallarm-related components from your CentOS 7 system:

Step 1: Stop and disable any active Wallarm services

If Wallarm services are still running, they'll keep producing logs even after the main package is gone. Let's shut them down first:

Check for active Wallarm services:

systemctl list-units --type=service | grep -i wallarm

Stop any services you find (replace wallarm-node with the actual service name from the output):
```
systemctl stop wallarm-node
```
Disable them to prevent auto-start on boot:
```
systemctl disable wallarm-node
```

Step 2: Remove all remaining Wallarm packages

yum remove might leave behind dependent packages. Let's hunt down and delete every Wallarm-related package:

List all installed Wallarm packages:
```
yum list installed | grep -i wallarm
```

Remove all of them in one command:

yum remove $(yum list installed | grep -i wallarm | awk '{print $1}')

Clean up unused dependencies that were pulled in for Wallarm:
```
yum autoremove
```

Step 3: Delete residual configs and log directories

Packages often leave configuration files behind. Let's erase those to eliminate any lingering triggers:

Delete Wallarm's main config directory:
```
rm -rf /etc/wallarm/
```
Remove dedicated Wallarm log directories (and double-check your mail-log path if needed):
```
rm -rf /var/log/wallarm/
```
If Wallarm was integrated with Nginx, scan for leftover config snippets in /etc/nginx/conf.d/ or /etc/nginx/sites-available/ and delete any files with "wallarm" in their name.

Step 4: Kill any lingering Wallarm processes

Occasionally, processes might keep running even after their packages are removed. Let's terminate them:

Find any active Wallarm processes:
```
ps aux | grep -i wallarm
```
Kill each process using its PID (replace <PID> with the process ID from the output):
```
kill -9 <PID>
```
Re-run the ps aux command to confirm no Wallarm processes are left.

Step 5: Verify the cleanup

Wait 1-2 minutes, then check your mail-log again to see if the Wallarm entries have stopped. You can also run these checks to confirm full removal:

yum list installed | grep -i wallarm (should return no results)
systemctl list-units --type=service | grep -i wallarm (should return no results)
ls /etc/wallarm/ (should return "No such file or directory")

内容的提问来源于stack exchange，提问作者Eric