What appears to be happening is that the
repository.data file?the file with
all the important data?is taking up more physical (allocated) space than it actually contains.
In the case of Archiv 1, the
repository.data file contained 40GB of data, but occupied 79GB of disk space. Stunningly, Archiv 2 contained only 0.4GB of data, but occupied 151GB of disk space.
While adding sparse file support to QRecall 3.0, I've noticed that APFS can sometime over allocate space for a file and that is what seems to be happening here.
My working theory is that APFS is not correctly handing pre-allocation requests. As the
repository.data file grows during a capture, QRecall periodically makes pre-allocation requests at the end of the file so if the disk suddenly runs out of space, QRecall has enough "head room" to write its wrap-up metadata and session records.
To test this theory, I've built a pre-release version of
QRecall 2.1.16(1) that you can download and install. This hacked version doesn't perform any preallocation of the
repository.data file. It won't fix the over-allocated space you have now, but if you compact the archive and perform new captures, those new captures won't cause it to over-allocate the file?assuming my theory is correct.
Give this version and try and please keep me posted.