Scripting & Automation

# 1. Stage the activation code where the agent looks for it on first start
$dir = Join-Path $env:ProgramData 'BackupEngine'
New-Item -ItemType Directory -Force -Path $dir | Out-Null
@{ code = $env:BE_ACTIVATION_CODE } | ConvertTo-Json -Compress | Set-Content -Path (Join-Path $dir 'pending_enrollment.json')
icacls $dir /grant '*S-1-5-32-545:(OI)(CI)M' | Out-Null

# 2. Download the installer and run it silently
$exe = Join-Path $env:TEMP 'BackupEngineSetup.exe'
Invoke-WebRequest -Uri 'https://downloads.backupengine.com/latest/windows/backup-engine-windows.exe' -OutFile $exe
Start-Process -FilePath $exe -ArgumentList '/VERYSILENT','/SUPPRESSMSGBOXES','/NORESTART' -Wait

# 3. Check that the computer enrolled. A shell opened before the install does not have the
#    new PATH entry yet, so call the shim by its full path.
$be = Join-Path $env:ProgramFiles 'Backup Engine\backupengine.cmd'
$status = & $be status --json | ConvertFrom-Json
if ($status.device_id) {
    Write-Host "Enrolled as $($status.email), device $($status.device_id)"
} else {
    Write-Host 'Not enrolled yet: check the activation code and run again.'
    exit 1
}

# .github/workflows/backup.yml
name: Back up before deploy
on:
  workflow_dispatch:
  push:
    branches: [main]

jobs:
  backup:
    # A Windows computer that has Backup Engine installed and signed in
    runs-on: [self-hosted, windows]
    steps:
      - name: Back up the release folder
        shell: powershell
        run: |
          backupengine backup start "Release Artifacts"
          if ($LASTEXITCODE -ne 0) { throw "Backup failed (exit code $LASTEXITCODE)" }

      - name: Show the result
        shell: powershell
        run: |
          $sets = (backupengine sets list --json | ConvertFrom-Json).sets
          $set = $sets | Where-Object { $_.name -eq "Release Artifacts" }
          Write-Host "Last run: $($set.last_run) ($($set.last_run_status))"

      - name: Deploy application
        run: |
          echo "Deploying after a successful backup..."

# Mail an alert for every enabled set whose last run failed or that has not run for 26 hours
$sets = (backupengine sets list --json | ConvertFrom-Json).sets

foreach ($set in $sets | Where-Object { $_.enabled -eq 1 }) {
    $stale = (-not $set.last_run) -or (([datetime]$set.last_run) -lt (Get-Date).AddHours(-26))

    if ($set.last_run_status -eq "failed" -or $stale) {
        $subject = "BackupEngine alert: $($set.name) on $env:COMPUTERNAME"
        $body = "Backup set '$($set.name)': last run $($set.last_run), status $($set.last_run_status)."
        Send-MailMessage -To "admin@company.com" -From "backup@company.com" `
            -Subject $subject -Body $body -SmtpServer "smtp.company.com"
    }
}

# What is each set scheduled to do? (read-only)
(backupengine schedule list --json | ConvertFrom-Json).schedules |
    Select-Object name, enabled, summary, last_run

# Can this computer reach BackupEngine Cloud? Exit code 0 = yes
backupengine connectivity test
if ($LASTEXITCODE -ne 0) { Write-Host "Connectivity test failed" }

#!/bin/bash
set -euo pipefail

SET_NAME="Server Data"

# Dump the database into a folder that the backup set covers
echo "Dumping PostgreSQL database..."
pg_dump -h localhost -U app_user -d production > /backup/staging/db_dump.sql

# Run the backup set. This blocks until the backup is finished; the exit code is the result.
echo "Starting backup..."
if backupengine backup start "$SET_NAME"; then
    echo "Backup completed successfully"
    backupengine sets list --json | jq -r --arg n "$SET_NAME" \
        '.sets[] | select(.name == $n) | "Last run: \(.last_run) (\(.last_run_status))"'
else
    echo "Backup failed!" >&2
    # Show the end of the newest diagnostic log of this set
    SET_ID=$(backupengine sets list --json | jq -r --arg n "$SET_NAME" '.sets[] | select(.name == $n) | .id')
    LOG=$(backupengine logs list "$SET_ID" --json | jq -r '.logs[0].path')
    backupengine logs show "$LOG" | tail -n 20
    exit 1
fi