Upgrade & uninstall.

One command each: a quick install for a lab, the routine upgrade, and — should you need it — a clean removal. The full verified install lives on the deploy page; the guided walkthrough is the Setup Guide.

The quick path

The same installer — image signatures are still verified — but the bootstrap itself runs unchecked. It prompts for your install token (so it stays out of your shell history). Fine for a lab; for production, spend the extra four commands.

Upgrades

$ curl -fsSL https://get.octotor.com/upgrade | sudo bash

One command. The upgrade takes a database backup first — mandatory and automatic — then pulls the new images and Cosign-verifies each one exactly like the install (the verification tooling ships in the bundle, no extra downloads), restarts the stack, and applies any schema migrations automatically on startup. The bundle it downloads is checked against the publisher key the install planted locally before a byte of it runs. Rolling back means restoring the pre-upgrade backup it just took.

Uninstall

Export your backups first if you want to keep them — they live inside /opt/octopus, and the commands below delete it.

$ cd /opt/octopus && docker compose down -v   # stop the stack, remove its volumes
$ sudo rm -rf /opt/octopus                  # remove configs and data directories

Docker, its Compose plugin and the Cosign binary the installer added stay on the host, along with a registry line in /etc/docker/daemon.json — remove those separately if you want a fully clean machine.