So this is what we have in our (root) cron:
#15,30,45 * * * * chronic zfs-auto-snapshot -r --keep=4 --label=frequent zroot
#0 * * * * chronic zfs-auto-snapshot -r --keep=24 --label=hourly zroot
#7 0 * * * chronic zfs-auto-snapshot -r --keep=7 --label=daily zroot
#14 0 * * 7 chronic zfs-auto-snapshot -r --keep=4 --label=weekly zroot
#28 0 1 * * chronic zfs-auto-snapshot -r --keep=12 --label=monthly zroot
But we’re also seeing snapshots at odd times. For instance hourlies show up right on the dot, as per our cron. But then something is making hourlies at 17 after the hour as well. Since, for hourlies, keep is set to 24, it ends up ditching the first half of each day’s hourlies because there ends up being 48 made in a day.
Is there some other separate mystery cron where this is happening? Or does zfs-auto-snapshot have its own config that I never knew about?