Uninstall

Remove the installation, keep your data

sandcastle uninstall

It stops sandcastle.target, then removes the units, the sandcastle-* images and the two networks, and says each step. It keeps the configuration, the secrets, the jobs’ records, the binary and your drop-ins, so sandcastle install puts everything back as it was. Files and folders says what stays and what goes, path by path.

An image still in use stays, and uninstall names it and ends with a failure. Stop what uses it and run uninstall again.

Remove everything

After uninstall:

rm -r ~/.config/sandcastle ~/.local/share/sandcastle ~/.local/bin/sandcastle
rm -r ~/.config/containers/systemd/sandcastle-*.container.d

uninstall leaves lingering on. Turn it off only if no other service of yours runs without a session:

loginctl disable-linger

The secrets go with their folder, but a backup or a copy of the disk may still hold them. Revoke each key and token where it was made: the Claude key in the Claude Console, each source’s token at the source.