Checking
Waiting for the first drill
Every few hours the newest backup is downloaded from offsite storage, restored into a throwaway copy, checked, and deleted. A backup only counts once it has been restored.
What every drill does
- Find the newest backup in the bucket and fail if it is older than the limit.
- Restore it into a private temporary directory, away from the live database.
- Prove it: SQLite
integrity_check, the expected tables, row and freshness checks. - Destroy the copy and record the result and the restore time.