What the command covers
Copy a STOPPED store, its node and its keys into `<DIR>/<utc-stamp>/`.
cambium backup [OPTIONS] --to <DIR>-
--to <DIR> - Directory the stamped snapshot is created under.
The documented backup includes the store, mailbox node and mailbox keys. The directory and copied files are private. The manifest lists the copied files and their hashes.
Preconditions
The service must release its process lock through a clean shutdown. Do not remove the lock or copy an actively changing store to force a backup past its refusal. Keep the configuration and the private files referenced by it under the operator’s recovery procedure.
Identity material outside the copy
The OIDC client secret and registry signing seed are separate from the copied directories. Recreating the registry seed would invalidate passes signed by the original registry. Restore the existing seed and protect it as private material.
Prove the restored installation
A manifest check proves the copied bytes against that manifest. A restore still needs a configuration check, a successful boot, identity admission and representative record reads. Treat each as separate evidence before using the restored service.