Upgrade and Remove
Move a host to a newer binary without losing its address, take the service off, or take the machine off entirely.
Upgrade and Remove Documentation
Which of the three below you want depends on what you are willing to give up. Moving to a newer binary gives up nothing, removing the service keeps the host's address, and removing everything releases it.
Move to a newer binary
The address survives, because the marker it lives in is untouched.
curl -fsSL https://get.whisper.online | sh
sudo -E whisper service install --sensor
whisper version
The second command rewrites the unit for the new binary and restarts the process only if the unit changed, so running it when nothing changed is safe. Confirm the service came back:
journalctl -u whisper-sensor -n 3
whisper: sensor: reporting as 2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478
On Windows, re-run irm https://get.whisper.online/install.ps1 | iex from an elevated PowerShell, then whisper service install --sensor.
Remove the sensor, keep the identity
sudo -E whisper service uninstall --sensor
The unit goes, the host keeps its address, and it stays in your fleet with no on-host visibility. Resolution, egress and the network-layer containment actions all keep working, because none of them runs on the host: that is the state endpoints with no sensor describes. Reinstall later with sudo -E whisper service install --now --sensor and the host resumes reporting under the same address.
Remove everything
curl -fsSL https://get.whisper.online/uninstall | sh
This removes the sensor service and the connection service, revokes the host's identity and removes the binary. Revoking is permanent: the address is withdrawn along with its reverse DNS and its egress credentials, and the same machine will get a different one if you bring it back. Contain an endpoint is the page to read first if what you actually want is a hold you can lift.
There is no confirmation step. Running the uninstaller is the consent, so check the line before you press Return rather than expecting a prompt.
If the uninstaller cannot reach the control plane to revoke, it says so and prints the command to run from anywhere else, so the identity does not stay live on a machine you no longer own.