| title | pg hardstorage hold purge-expired | ||
|---|---|---|---|
| description | CLI reference for the pg hardstorage hold purge-expired command. | ||
| tags |
|
Remove every hold marker whose ExpiresAt is in the past
purge-expired sweeps expired hold markers. Indefinite holds (no ExpiresAt) are NEVER touched — they're the legal-hold default. Active bounded holds (future ExpiresAt) are also untouched. Only past-expiry markers are reaped.
Pairs with the hold.expired_present doctor signal: doctor
flags expired markers as an operational hygiene issue; this
command cleans them up in one operation.
pg_hardstorage hold purge-expired # fleet-wide pg_hardstorage hold purge-expired db1 # scoped to db1 pg_hardstorage hold purge-expired --dry-run # preview, no mutations pg_hardstorage hold purge-expired --yes # actually remove
Each removal is audit-emitted (hold.purge_expired action) so
the chain has a per-marker record. --dry-run emits nothing —
preview is a read-only operation.
pg_hardstorage hold purge-expired [<deployment>] [flags]
--dry-run preview the markers that would be removed (no mutations, no audit emits)
-h, --help help for purge-expired
--repo string repository URL — must already exist (required)
--yes confirm bulk removal — required unless --dry-run is set
--airgapped airgapped: strict refuse outbound endpoints (LLM providers, sinks, OTLP collectors) outside loopback / RFC1918 / explicit airgap.allowlist. Also enabled by PG_HARDSTORAGE_AIRGAPPED=1 or airgapped: strict in the config file.
-c, --config string path to config file (default: XDG/FHS lookup)
--cpu-profile go tool pprof <path> write a pprof CPU profile to this path for the duration of the command (go tool pprof <path> to analyse). Off when empty.
--mem-profile string write a pprof heap profile to this path at command exit. Off when empty.
--no-color disable ANSI color in text output
--on-error-llm on a structured-error failure, drop into the matching LLM helper skill (auto_on_error trigger). Also enabled by PG_HARDSTORAGE_ON_ERROR_LLM=1.
--otel-endpoint string OpenTelemetry OTLP/HTTP endpoint (e.g. http://otel-collector:4318); empty disables tracing
--otel-stdout also export OpenTelemetry traces to stderr (useful for dev)
-o, --output string output format: text|json|ndjson|yaml|template|csv|markdown|html|tap|junit|pdf (default: text on TTY, json off-TTY)
--profile-port go tool pprof http://127.0.0.1:6060/debug/pprof/profile?seconds=30 if non-zero, expose net/http/pprof on 127.0.0.1:<port> for live profiling of long-running commands (e.g. go tool pprof http://127.0.0.1:6060/debug/pprof/profile?seconds=30). Off when zero.
-q, --quiet suppress non-essential output
--template string Go text/template applied when --output template (or implied if --template is set without --output)
- pg_hardstorage hold - Legal hold — pin backups against retention sweeps