Verifying a restore

Restore into a scratch directory, compare checksums against the source, and record the date. Doing it monthly is enough to notice a silent failure before it matters.
mkdir -p /tmp/restore && tar --zstd -xf latest.tar.zst -C /tmp/restore
(cd /srv && find data -type f -print0 | xargs -0 sha256sum) > /tmp/src.sum
(cd /tmp/restore && sha256sum -c /tmp/src.sum)