[logs] Debian: Add Journal support and stop full tarball of /var/log

These changes are only on the Debian/Ubuntu bit of logs

Persistent systemd journaling (/var/log/journal exists)
 use that instead of collecting any kern/syslog/auth from /var/log.
 We also implement a log_days similar to the RH bit, but we default
 to 7 days instead of 3.
 --all-logs removes the day limit and gets it all

Rsyslog style (assumed if /var/log/journal doesn't exist
 default run: collect all 4 of syslog[.1] and kern.log[.1]
 (Same as previous behavior plus auth.log).
 --all-logs: collect syslog*, kern.log*, and auth.log*

The notable change for --all-logs is it used to just collect all of
/var/log which causes MANY issues.

Before this change using --all-logs on systems with persistent journal
we would collect duplicate log files as such:
 * Collect all of syslog*/kern*/auth*
 * Collect the entire journal via /var/log/journal
 * Collect the last two boots of journal via running journalctl command

Even with this change we still collect the journal last/current boot
with whatever is copied by journal since log_days.

Resolves: #1519

Signed-off-by: Bryan Quigley <bryan.quigley@canonical.com>
Signed-off-by: Bryn M. Reeves <bmr@redhat.com>

0 files changed, 0 insertions, 0 deletions