Is there any way to undelete file on ZFS.
I overwrote JPG file with the scanned image.
Unfortunately, I didn't take snapshot.
But ZFS uses the CoW mechanism, overwritten data may still alive, I think.
Does anyone know the way to undelete file on ZFS?
Asked
Active
Viewed 1,974 times
3
kou
- 31
- 2
-
1Stop using the disk. Try a tool like `photorec`. – Bodo Sep 25 '20 at 08:14
-
Thank you for your advice. I followed your advice nad tried `photorec`. As a result, I recovered some JPG files. However, my target file was not there. Strangely, `photorec` couldn't recover well almost JPG files which is not deleted. And I remembered that unfortunately my pool had a setting for lz4 compression. – kou Sep 27 '20 at 14:11
-
Sorry, I don't know how well data recovery tools can work when the data on the disk is compressed. AFAIK the CoW mechanism is only meant to prevent data loss during the process of overwriting a file. When the file is closed, the directory structure will be switched to point to the new data instead of the old data. The area where the old data was stored can then be overwritten by other write operations. – Bodo Sep 29 '20 at 09:47
1 Answers
0
UFS Explorer RAID Recovery declares recovery from ZFS but I did not use it myself:
CeDeROM
- 287
- 2
- 6