investigate restore issues following gitlab incident
In #41470 (closed), we investigated the impact of an authentication bypass in GitLab (CVE-2023-7028), during which we had to restore old log files to perform an audit.
Two things became painfully obvious:
- some logs are missing from old backups
- some logs create huge files with garbage on restore
Now, the first bit in there might be deliberate: maybe we're excluding old log files to avoid constantly re-indexing the same content.
But the second bit is deeply concerning. In #41470 (comment 2983750), I found that the log file is actually there, but bacula appends a seemingly endless stream of files after it. Truly bizarre, and concerning.