Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [extundelete]

extundelete is a tool that can recover deleted files from an ext3 or ext4 partition using the partition's journal.

17 questions
68
votes
4 answers

undelete a just deleted file on ext4 with extundelete

Is there a simple option on extundelete how I can try to undelete a file called /var/tmp/test.iso that I just deleted? (it is not so important that I would start to remount the drive read-only or such things. I can also just re-download that file…
rubo77
  • 27,777
  • 43
  • 130
  • 199
5
votes
1 answer

Exundelete can't restore the file

I'm trying to restore 2 important tar.gz files I know their directory but extundelete not restoring them although it's giving me the inode number. Loading filesystem metadata ... 2127 groups loaded. Loading journal descriptors ... 26473 descriptors…
Zaher
  • 129
  • 1
  • 10
2
votes
0 answers

ext4magic segfault

I am trying to restore a directory I accidentally deleted which contained many files. Ironically this was a fat finger error while trying to set up a backup! I am following the instructions here: The ext4magic command to generate a histogram is…
crobar
  • 203
  • 2
  • 13
2
votes
0 answers

undelete 1 file from ext4 on LVM on LUKS

summary How to (relatively painlessly and reliably) {restore, undelete} a file from an ext4 filesystem inside a LVM volume inside a LUKS container, given one knows the fully-qualified path to the file before it was deleted? (Apologies in advance if…
TomRoche
  • 1,275
  • 3
  • 15
  • 29
2
votes
0 answers

What to do with extundelete recovered files

So, i accidentally delete my files. I attempt to recover files using extundelete with --restore-all options. Inside the RECOVERED_FILES directory i got files.xxxxx which i think is inode file. My question is what to do with file.xxxxx file ?
Roseffendi
  • 21
  • 2
2
votes
1 answer

Failed to restore file with extundelete

I accidentally deleted the file .vimrc in my $HOME directory. I rebooted the system and accessed it as root. Then: $ sudo mount -o remount,ro /dev/sda5 $ sudo extundelete /dev/sda5 --restore-file /home/xralf/.vimrc The output of the command…
xralf
  • 16,149
  • 29
  • 101
  • 149
1
vote
0 answers

how to undelete files without umounting the filesystem and directly into that filesystem?

ext4, extundelete needs fs umounted right? and would restore to another fs, that wont work for me. The deleted are big files, if umounting and restoring on another filesystem I would have to copy back to the original fs. So, I wonder if there is…
Aquarius Power
  • 4,099
  • 5
  • 38
  • 56
1
vote
1 answer

Restoring via inode that's no longer in the journal?

I had a folder deleted from a SMB share from a windows machine. Thanks to zero confirmation a whole folder was deleted. First ran photorec that pulled most of the files except 1, the very last file copied. Further testing with extundelete was able…
Ryan Mills
  • 113
  • 1
  • 5
1
vote
1 answer

Recover files from a luks partition with extundelete

I have a luks encrypted SD Card and I want to recover all deleted files from it. I have been truing with extundelete using the following commands: extundelete --restore-directory RecoverDir/ /media/user/Cardname/ extundelete: "/media/user/Cardname/"…
nath
  • 5,430
  • 9
  • 45
  • 87
1
vote
1 answer

extundelete - How to solve 'Block bitmap checksum does not match bitmap when trying to examine filesystem'?

The OS is Ubuntu 17.10 and I've been trying to recover(undelete) with extundelete. (The File System is ext4.) This didn't work. So, I tried with extundelete /dev/mapper/ubuntu--vg-root --restore-file /home/chan/origol/routes/user.js And It…
Chanjung Kim
  • 111
  • 1
  • 4
1
vote
1 answer

What methods for overwrite protection and accidental removing are there?

Apart of unix perms are there other protection for don't remove or overwrite files? By example: Restringing dirs than rm can delete. Overwrite protection when I made cat >file instead of cat >>file Overwrite protection option for default for all…
Wallebot
  • 111
  • 2
1
vote
1 answer

Undelete directory on openvz server

Around 1.5 hours ago I deleted a very important directory on my openVZ vps. I have tried root@server:/home extundelete /dev/simfs --restore-directory ./ --output-dir /home/restore/ extundelete: failed to read-only open device "/dev/simfs": Error…
Naxid
  • 11
  • 1
0
votes
1 answer

rescue image with ext4magic or extundelete

Some rescue operations and similar need to be done with the the drive or volume unmounted. Previously I have downloaded an .iso of GParted which I put on a USB stick and booted up from it into a basic gui from which it was possible to rearrange the…
cardamom
  • 528
  • 1
  • 5
  • 22
0
votes
0 answers

Odd error messages when trying to restore deleted files

A folder with backup files was accidentally deleted from the /home partition on a Ubuntu 20.04 machine. All files in the folder were backups (zip) of the same thing (a Minecraft world) but from different dates. As it would be enough to get back only…
turboraketti
  • 1
0
votes
2 answers

Restore files removed with rm (even from a LUKS-encrypted disk)

The problem I erroneously removed several files from my /home/username with rm. I realized the mistake as soon as I hit enter, but the damage was done. I immediately created a full disk image with sudo dd if=/dev/sda…
Ntakwetet
  • 101
  • 6
1
2