I assume that means DB backup (I’ll ask later about backup running).
That looks like the only database update done in the 2.2 series so far.
v2.2.0.0_stable_2025-10-23 (maybe this was your Oct 28 upgrade?):
Database updates
This version updates the format of the local database to version 17.
This version updates the format of the settings database to v9.
2.2.0.3 uses the same DB versions, although it’s not called out in note.
If you’re quick to update, Oct 28 might have been from Oct 23 2.2.0.0.
What seems odd are the Jan 28 files, looking like a server and job DB.
Are those dates newer now? Maybe the scheduled backup is running?
Your script looks like it gets the linux-x64-gui.deb, so the TrayIcon one.
Duplicati Access Password
Note that the password itself cannot be extracted from the database, it can only be verified.
If you found a command that easily shows the password, that may be an issue.
Regardless, you got in to something, but what’s there was looking overly empty,
which seems to conflict with two databases that look like that backup is running.
Or maybe it was a DB (?) recreate you note. Too many things are mixing in now.
I suppose looking at installation files (e.g. with ls -lc`) might find the exact date.
I’m lost, but suspect you recreated the job DB, but how did you do it without job?
If you can access the destination, can you sort by date and see what uploaded?
State of events is not clear. If you see recent destination files, it suggests backups are working (especially if you have a scheduled one – do you?). Manual run would require the GUI showing the job – but so would its database recreate. Inconsistent.
Even though you did a database search, you can also look at Duplicati processes, making sure there aren’t any extra there. Unlike Duplicati 2.0, they aren’t doubled.
About → System info → UserName should (I hope) say you’re root, or the perms I see won’t work, but this wasn’t a 2.2.0.3 change. Perms were tightened in 2.2.0.0.
You can also try a browser refresh (harder is better), or use Settings to see old UI.
For a brute-force opinion on what’s in the Jan 28 Duplicati-server.sqlite, you could look at it in sqlitebrowser, or more crudely in less, or do strings pipe less. Look for something you recall, e.g. a path used, name of the job. Any signs there?