七台异常 VPS 处理收尾报告
结论：已按推荐顺序完成处理。先在 TK 试点，再扩展到 HK/KR/KRB/US，清理了 IP-Sentinel 残留 systemd 单元；US 额外清理了已退役的 site_total.service。AR/HKA 本轮只做复核观察，未改动。
5
IP-Sentinel 残留已处理
1
US site_total 已收口
2
AR/HKA 观察复核
0
最终 failed 单元
生成时间：2026-05-18 02:39:30；本轮未重启主机，未改动 nginx/xray/docker/Hermes gateway 配置。
逐台结果
| 节点 | 状态 | 动作 | 核心服务 | 说明 |
|---|---|---|---|---|
| TK 103.232.213.10 | 完成 | 清理 IP-Sentinel 残留 systemd 单元 | nginx=active xray=active docker=inactive containerd=inactive hermes-gateway=inactive | IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录 |
| HK 82.158.88.91 | 完成 | 清理 IP-Sentinel 残留 systemd 单元 | nginx=active xray=active docker=inactive containerd=inactive hermes-gateway=inactive | IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录 |
| KR 131.186.27.212 | 完成 | 清理 IP-Sentinel 残留 systemd 单元 | nginx=active xray=active docker=inactive containerd=inactive hermes-gateway=inactive | IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录 |
| KRB 161.118.130.5 | 完成 | 清理 IP-Sentinel 残留 systemd 单元 | nginx=active xray=inactive docker=inactive containerd=inactive hermes-gateway=inactive | IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录 |
| US 186.244.244.52 | 完成 | 清理 IP-Sentinel 残留 systemd 单元；清理 site_total 残留单元 | nginx=active xray=inactive docker=active containerd=active hermes-gateway=inactive | IP-Sentinel 与 site_total 单元均已移除；site_total 近 30 秒无新日志 |
| AR 129.146.59.53 | 完成 | 观察复核 | nginx=active xray=inactive docker=active containerd=active hermes-gateway=active | 无 IP-Sentinel 新刷屏；保持观察 |
| HKA 38.76.188.244 | 完成 | 观察复核 | nginx=active xray=inactive docker=active containerd=active hermes-gateway=inactive | 无 IP-Sentinel 新刷屏；保持观察 |
影响说明
- 解决的问题：停止旧 IP-Sentinel 服务每几秒失败一次导致的日志刷屏，减少误报和 journal 增长。
- 业务影响：未重启 VPS，核心 nginx/xray/docker/Hermes gateway 未被重启或改配置；验证时核心服务保持原状态。
- 保留回滚：每台变更前都把匹配的 unit/timer 文件备份到远端
/root/backups/hermes/...。 - 残余观察：HK/KR 上 systemd 仍显示一个
ip-sentinel-agent.service not-found inactive dead的历史引用，不是正在运行的服务，也不是 failed 单元；若后续还想完全清掉引用，可再做一次更深层依赖清理。
逐台证据
TK 103.232.213.10 完成
执行动作
清理 IP-Sentinel 残留 systemd 单元
备份位置
/root/backups/hermes/ip-sentinel-cleanup-20260517T183722Z
核心服务
nginx=active
xray=active
docker=inactive
containerd=inactive
hermes-gateway=inactive
xray=active
docker=inactive
containerd=inactive
hermes-gateway=inactive
验证说明
IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录
最近错误计数
79
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE VENDOR PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE VENDOR PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --
HK 82.158.88.91 完成
执行动作
清理 IP-Sentinel 残留 systemd 单元
备份位置
/root/backups/hermes/ip-sentinel-cleanup-20260517T183737Z
核心服务
nginx=active
xray=active
docker=inactive
containerd=inactive
hermes-gateway=inactive
xray=active
docker=inactive
containerd=inactive
hermes-gateway=inactive
验证说明
IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录
最近错误计数
81
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
* ip-sentinel-agent.service not-found inactive dead ip-sentinel-agent.service
Legend: LOAD -> Reflects whether the unit definition was properly loaded.
ACTIVE -> The high-level unit activation state, i.e. generalization of SUB.
SUB -> The low-level unit activation state, values depend on unit type.
1 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --
KR 131.186.27.212 完成
执行动作
清理 IP-Sentinel 残留 systemd 单元
备份位置
/root/backups/hermes/ip-sentinel-cleanup-20260517T183738Z
核心服务
nginx=active
xray=active
docker=inactive
containerd=inactive
hermes-gateway=inactive
xray=active
docker=inactive
containerd=inactive
hermes-gateway=inactive
验证说明
IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录
最近错误计数
81
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
* ip-sentinel-agent.service not-found inactive dead ip-sentinel-agent.service
Legend: LOAD -> Reflects whether the unit definition was properly loaded.
ACTIVE -> The high-level unit activation state, i.e. generalization of SUB.
SUB -> The low-level unit activation state, values depend on unit type.
1 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --
KRB 161.118.130.5 完成
执行动作
清理 IP-Sentinel 残留 systemd 单元
备份位置
/root/backups/hermes/ip-sentinel-cleanup-20260517T183739Z
核心服务
nginx=active
xray=inactive
docker=inactive
containerd=inactive
hermes-gateway=inactive
xray=inactive
docker=inactive
containerd=inactive
hermes-gateway=inactive
验证说明
IP-Sentinel 单元已移除；近期日志中只剩处理前最后几条旧记录
最近错误计数
81
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --
US 186.244.244.52 完成
执行动作
清理 IP-Sentinel 残留 systemd 单元；清理 site_total 残留单元
备份位置
/root/backups/hermes/ip-sentinel-cleanup-20260517T183736Z
/root/backups/hermes/site-total-cleanup-20260517T183804Z
/root/backups/hermes/site-total-cleanup-20260517T183804Z
核心服务
nginx=active
xray=inactive
docker=active
containerd=active
hermes-gateway=inactive
xray=inactive
docker=active
containerd=active
hermes-gateway=inactive
验证说明
IP-Sentinel 与 site_total 单元均已移除；site_total 近 30 秒无新日志
最近错误计数
81
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --
AR 129.146.59.53 完成
执行动作
观察复核
备份位置
无
核心服务
nginx=active
xray=inactive
docker=active
containerd=active
hermes-gateway=active
xray=inactive
docker=active
containerd=active
hermes-gateway=active
验证说明
无 IP-Sentinel 新刷屏；保持观察
最近错误计数
0
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --
HKA 38.76.188.244 完成
执行动作
观察复核
备份位置
无
核心服务
nginx=active
xray=inactive
docker=active
containerd=active
hermes-gateway=inactive
xray=inactive
docker=active
containerd=active
hermes-gateway=inactive
验证说明
无 IP-Sentinel 新刷屏；保持观察
最近错误计数
0
展开 systemd 验证证据
FAILED:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
IP_SENTINEL_FILES:
UNIT FILE STATE PRESET
0 unit files listed.
IP_SENTINEL_UNITS:
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
SITE_TOTAL:
UNIT FILE STATE PRESET
0 unit files listed.
UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.
To show all installed unit files use 'systemctl list-unit-files'.
-- No entries --