Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: Recover deleted files EXT4

  1. #1
    Join Date
    Feb 2021
    Beans
    5

    Recover deleted files EXT4

    Hi,
    I made a mistake, and rsynced with --delete.
    How i can recover all the delete files? Please Help. This machine have my phd project and remove my work.

    i use
    Code:
    testdisk /dev/vda1
    , select the disk,-> select NON Partitioned Media -> Advanced Filesystem Utilis

    I show P ext 4.jpg , In Option "LIST" i can see the delete files, but how can restores all delete files?
    Thank you so much



  2. #2
    Join Date
    Feb 2013
    Beans
    Hidden!

    Re: Recover deleted files EXT4

    Is cloudimage-rootfs the partition where deleted files are? Is it the root partition of your system (the one that is mounted at /)?

    I'm asking because if not, you could install and use something like extundelete instead of testdisk.

    Fot TestDisk, see the explanation in their Wiki.
    Last edited by schragge; February 19th, 2021 at 06:07 PM.

  3. #3
    Join Date
    Feb 2021
    Beans
    5

    Re: Recover deleted files EXT4

    Hi, the cloudimage-root is my root partition.
    This machine is a server.


  4. #4
    Join Date
    Feb 2013
    Beans
    Hidden!

    Re: Recover deleted files EXT4

    Do you have a backup of deleted files?

  5. #5
    Join Date
    Feb 2021
    Beans
    5

    Re: Recover deleted files EXT4

    No

  6. #6
    Join Date
    May 2010
    Beans
    1,252

    Re: Recover deleted files EXT4

    Quote Originally Posted by anacorreia View Post
    No
    Why do you not have backups? What if the IDE on your drive fails? Where is your data then?

  7. #7
    Join Date
    Feb 2021
    Beans
    5

    Re: Recover deleted files EXT4

    You are right. was very stupid.
    Can i use extundelete -restore-all ?
    do i need to repair the superblock??

    because he show

    Code:
    uperblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                   260   1  2 83478   4 60   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                   780   3  4 83998   6 62   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                  1300   5  6 84518   9  1   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                  1820   7  8 85038  11  3   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                  2340   9 10 85558  13  5   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
        
    
    superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                  7021  11 28 90239  15 23   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                 12743   1 50 95961   5 45   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
       ext4                 21065   2 19 104283   6 14   83883992 [cloudimg-rootfs]
     superblock 0, blocksize=4096 [cloudimg-rootfs]
    
    
     To repair the filesystem using alternate superblock, run
    >fsck.ext4 -p -b superblock -B blocksize device
    Last edited by ajgreeny; February 19th, 2021 at 07:59 PM. Reason: Font normalised, code tags added

  8. #8
    Join Date
    Jun 2009
    Location
    SW Forida
    Beans
    Hidden!
    Distro
    Ubuntu

    Re: Recover deleted files EXT4

    Never had to use it, but I thought if testdisk showed files, you from that listing could copy to another drive.
    Best practice is to create a backup of the image to another drive, and only work on the image copy, so if you damage it, then you still have original.

    Full image backup
    GNU ddrescue (packaged as gddrescue, though once installed the command is "ddrescue")
    https://help.ubuntu.com/community/DataRecovery
    http://ubuntuforums.org/showthread.p...4#post13401824
    For more info on UEFI boot install & repair - Regularly Updated :
    http://ubuntuforums.org/showthread.php?t=2147295
    Please use Thread Tools above first post to change to [Solved] when/if answered completely.

  9. #9
    Join Date
    Feb 2021
    Beans
    5

    Re: Recover deleted files EXT4

    Thank you so much, i will try do that

  10. #10
    Join Date
    Mar 2011
    Location
    U.K.
    Beans
    Hidden!
    Distro
    Ubuntu 20.04 Focal Fossa

    Re: Recover deleted files EXT4

    A few added points ..

    Data recovery is a very lengthy process and might impact on your PhD project studies.
    Try other methods before resorting to TestDisk.
    Note that installing extra software might overwrite the very files you are trying to recover.
    Hence the advice above to clone your drive first as insurance plan. Stop using your PC.

    If you launch GParted (partition editor) there is an option to try .. Device > Attempt Data Rescue

    If you use testdisk it will list all deleted files including those historical files you chose to delete earlier

    If you use testdisk you will require some device (additional space) where recovered files are placed. Not in the same device you are recovering.

    Conclusion .. use testdisk with care, preferably running testdisk in a Live USB and not the device you are trying to recover.

    [P.S.] There is a data recovery app named R-Linux which I would try installing in a LiveUSB instance and then use that to look for deleted files in your device. I would prepare this LiveUSB on another PC if you have one to avoid using your existing PC.

    R-Linux is a file recover utility for the Ext2/3/4FS file system used in the Linux OS and several Unixes. R-Linux uses unique IntelligentScan technology and flexible parameter settings to give you real control over the fastest data recovery ever seen. It recovers files from existing partitions even when file records are lost. R-Linux is a lite version of more powerful file recover utility R-Studio. R-Studio utilizes the IntelligentScan technology to its full extent, and therefore can recover data from partitions with broken file systems. Also, R-Studio recovers data over network.
    Last edited by dragonfly41; February 19th, 2021 at 09:46 PM. Reason: added R-Linux option

Page 1 of 2 12 LastLast

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •