Commands / kosa8 snapshot rm
kosa8 snapshot rm
Delete a snapshot (state file, disk clone, and manifest)
Usage
kosa8 rm SNAPSHOT
Deletes the snapshot. An encrypted snapshot's data key is destroyed first (crypto-shred), which makes every copy of it — here, pushed, exported — unreadable, and the audit log records it.
With --wipe every file is also overwritten, read back to verify, and only then deleted (NIST SP 800-88 Clear), and that is audited too.
A sealed (signed) snapshot is a record someone signed for, and is deleted only with --force, --wipe or not.
Options
| Flag | Type | What it does | Default |
|---|---|---|---|
--force | bool | delete a sealed snapshot too (the deletion is recorded in the audit log) | — |
--wipe | bool | overwrite and verify every file before deleting it, and audit it | — |