Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #206292 > unrolled thread

Recover deleted files on LVM volume

Started byBen Finney <bignose@debian.org>
First post2019-03-18 02:00 +0100
Last post2019-03-18 04:40 +0100
Articles 7 — 5 participants

Back to article view | Back to linux.debian.user


Contents

  Recover deleted files on LVM volume Ben Finney <bignose@debian.org> - 2019-03-18 02:00 +0100
    Re: Recover deleted files on LVM volume Reco <recoverym4n@enotuniq.net> - 2019-03-18 04:20 +0100
      Re: Recover deleted files on LVM volume Hans <hans.ullrich@loop.de> - 2019-03-18 13:40 +0100
        Re: Recover deleted files on LVM volume Ben Finney <bignose@debian.org> - 2019-03-18 22:50 +0100
      Re: Recover deleted files on LVM volume Ben Finney <bignose@debian.org> - 2019-03-18 22:40 +0100
        Re: Recover deleted files on LVM volume <tomas@tuxteam.de> - 2019-03-18 23:10 +0100
    Re: Recover deleted files on LVM volume mick crane <mick.crane@gmail.com> - 2019-03-18 04:40 +0100

#206292 — Recover deleted files on LVM volume

FromBen Finney <bignose@debian.org>
Date2019-03-18 02:00 +0100
SubjectRecover deleted files on LVM volume
Message-ID<xCONb-2Vq-3@gated-at.bofh.it>
Howdy all,

How can I recover files deleted on a ext4 volume, in a logical (LVM)
volume?

I accidentally deleted a tree of directories and files, after completing
a move of those files from elsewhere :-(

In the past I have successfully used ‘testdisk’ to discover and recover
deleted files. However when I try now, the tool apparently gets confused
that there's no partition table.

The “Advanced” menu item normally leads to a filesystem browser of
deleted files. On this (still quite happily working) LVM volume though,
‘testdisk’ complains that it can't find any partitions.

Should I be using ‘testdisk’ in a different way because this is an LVM
logical volume? Should I be using some other tool to recover a tree of
deleted files?

-- 
 \        “The right to search for truth implies also a duty; one must |
  `\      not conceal any part of what one has recognized to be true.” |
_o__)                                                 —Albert Einstein |
Ben Finney

[toc] | [next] | [standalone]


#206293

FromReco <recoverym4n@enotuniq.net>
Date2019-03-18 04:20 +0100
Message-ID<xCQYF-4vv-5@gated-at.bofh.it>
In reply to#206292
	Hi.

On Mon, Mar 18, 2019 at 11:58:36AM +1100, Ben Finney wrote:
> Howdy all,
> 
> How can I recover files deleted on a ext4 volume, in a logical (LVM)
> volume?

Snapshot a volume. Run "photorec" on a shapshot.


> In the past I have successfully used ‘testdisk’ to discover and recover
> deleted files. However when I try now, the tool apparently gets confused
> that there's no partition table.

Because there is not any. But you don't need "testdisk", you need
"photorec".

Reco

[toc] | [prev] | [next] | [standalone]


#206301

FromHans <hans.ullrich@loop.de>
Date2019-03-18 13:40 +0100
Message-ID<xCZIC-1tg-5@gated-at.bofh.it>
In reply to#206293

[Multipart message — attachments visible in raw view] — view raw

Maybe "scalpel" or "foremost" may help.
You should dd the whole disk to a file, if possible.

Good luck

Hans

> Because there is not any. But you don't need "testdisk", you need
> "photorec".
> 
> Reco

[toc] | [prev] | [next] | [standalone]


#206339

FromBen Finney <bignose@debian.org>
Date2019-03-18 22:50 +0100
Message-ID<xD8iR-6Qk-5@gated-at.bofh.it>
In reply to#206301
Hans <hans.ullrich@loop.de> writes:

> Maybe "scalpel" or "foremost" may help.

I will try ‘scalpel’ soon.

The ‘foremost’ documentation leads me to believe it wants to dump a
whole lot of stuff somewhere. I don't want that (the files should be
restorable in-place, if at all; that's what ‘testdisk’ did the last time
I used it successfully).

-- 
 \       “Try to learn something about everything and everything about |
  `\                                  something.” —Thomas Henry Huxley |
_o__)                                                                  |
Ben Finney

[toc] | [prev] | [next] | [standalone]


#206338

FromBen Finney <bignose@debian.org>
Date2019-03-18 22:40 +0100
Message-ID<xD89c-6MD-19@gated-at.bofh.it>
In reply to#206293
Reco <recoverym4n@enotuniq.net> writes:

> But you don't need "testdisk", you need "photorec".

Which Debian package do I install for that?

    $ aptitude search photorec
    $ echo $?
    1

-- 
 \       “I have a map of the United States; it's actual size. It says |
  `\        ‘1 mile equals 1 mile’. Last summer, I folded it.” —Steven |
_o__)                                                           Wright |
Ben Finney

[toc] | [prev] | [next] | [standalone]


#206340

From<tomas@tuxteam.de>
Date2019-03-18 23:10 +0100
Message-ID<xD8Ce-7dc-3@gated-at.bofh.it>
In reply to#206338

[Multipart message — attachments visible in raw view] — view raw

On Tue, Mar 19, 2019 at 08:38:26AM +1100, Ben Finney wrote:
> Reco <recoverym4n@enotuniq.net> writes:
> 
> > But you don't need "testdisk", you need "photorec".
> 
> Which Debian package do I install for that?
> 
>     $ aptitude search photorec
>     $ echo $?
>     1

 | tomas@trotzki:~$ apt-file search photorec
 | testdisk: /usr/bin/photorec
 | testdisk: /usr/share/man/man8/photorec.8.gz
 | testdisk-dbg: /usr/lib/debug/usr/bin/photorec

So the package is called "testdisk".

Cheers
-- t

[toc] | [prev] | [next] | [standalone]


#206294

Frommick crane <mick.crane@gmail.com>
Date2019-03-18 04:40 +0100
Message-ID<xCRi1-4D2-7@gated-at.bofh.it>
In reply to#206292
On 2019-03-18 00:58, Ben Finney wrote:
> Howdy all,
> 
> How can I recover files deleted on a ext4 volume, in a logical (LVM)
> volume?
> 
I've never done that but seen people have copied the disk then looked 
through it for anything looks like the deleted files.
Think the important thing whatever you use is not to use the disk until 
you've sorted it so you don't overwrite the "deleted" files.
good luck
mick

-- 
Key ID    4BFEBB31

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.user


csiph-web