# captured_at=2026-07-23T19:58:42+08:00
# command=env RUN_ID=q043-20260723T195817+0800 bash /opt/zhct-deploy/common/scripts/seal-template.sh --role nginx --bundle-root /opt/zhct-deploy --confirm-seal 
2026-07-23T19:58:42+0800 [zhct-deploy] RUN: systemctl disable --now haproxy.service 
2026-07-23T19:58:42+0800 [zhct-deploy] RUN: systemctl disable --now nginx.service 
2026-07-23T19:58:42+0800 [zhct-deploy] RUN: systemctl disable --now orchestrator.service 
2026-07-23T19:58:42+0800 [zhct-deploy] RUN: systemctl disable --now sentinel5.service 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: systemctl disable --now sentinel7.service 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: systemctl disable --now keepalived.service 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -f /etc/zhct/node.env 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -rf /etc/zhct/secrets 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -f /etc/keepalived/keepalived.conf /etc/haproxy/haproxy.cfg /etc/orchestrator.conf.json 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -rf /var/lib/orchestrator/.raft /var/lib/orchestrator/raft /var/lib/orchestrator/orchestrator.db 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: find /var/lib/redis-sentinel5 /var/lib/redis-sentinel7 -mindepth 1 -delete 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: find /var/log/zhct -type f -delete 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -f /etc/machine-id /var/lib/dbus/machine-id 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: truncate -s 0 /etc/machine-id 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -f /etc/ssh/ssh_host_ecdsa_key /etc/ssh/ssh_host_ecdsa_key.pub 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -f /etc/ssh/ssh_host_ed25519_key /etc/ssh/ssh_host_ed25519_key.pub 
2026-07-23T19:58:43+0800 [zhct-deploy] RUN: rm -f /etc/ssh/ssh_host_rsa_key /etc/ssh/ssh_host_rsa_key.pub 
2026-07-23T19:58:43+0800 [zhct-deploy] seal completed for role=nginx dry_run=0 run_id=q043-20260723T195817+0800
