1. La partición /dev/sdc1 esta montada en /backup
/dev/sdc1 on /backup type ext4
(ro,relatime,user_xattr,acl,barrier=1,data=ordered)
2. Creamos el directorio gnutools dentro de /backup
[root@gibson backup]# mkdir -p gnutools
[root@gibson backup]# cd gnutools/
3. Creamos unos archivos para recuperar después.
[root@gibson gnutools]# man man > test1.txt
[root@gibson gnutools]# man man > test2.txt
[root@gibson gnutools]# man man > test3.txt
[root@gibson gnutools]# du -sh *
36K test1.txt
36K test2.txt
36K test3.txt
4. Borramos los archivos y el directorio.
[root@gibson ~]# rm -rf /backup/gnutools/
5. Comprobamos que no hay nada en el directorio
[root@gibson ~]# ls /backup/
[root@gibson ~]#
6. Montamos la partición /backup en modo readonly
[root@gibson ~]# mount -o remount,ro /backup
[root@gibson ~]# mount
/dev/sdc1 on /backup type ext4 (ro,relatime,user_xattr,acl,barrier=1,data=ordered)
7. Ejecutamos el extundelete
[root@gibson ~]# extundelete /dev/sdc1 --restore-all
WARNING: Extended attributes are not restored.
Loading filesystem metadata ... 16 groups loaded.
Loading journal descriptors ... 697 descriptors loaded.
Searching for recoverable inodes in directory / ...
5 recoverable inodes found.
Looking through the directory structure for deleted files ...
Restored inode 12 to file RECOVERED_FILES/gnutools/test1.txt
Restored inode 13 to file RECOVERED_FILES/gnutools/test2.txt
Restored inode 14 to file RECOVERED_FILES/gnutools/test3.txt
0 recoverable inodes still lost.
8. Podemos comprobar que en el directorio RECOVERED_FILES se encuentran los archivos borrados
[root@gibson ~]# cd RECOVERED_FILES/
[root@gibson RECOVERED_FILES]# ls
gnutools
[root@gibson RECOVERED_FILES]# cd gnutools/
[root@gibson gnutools]# ls
test1.txt test2.txt test3.txt
[root@gibson gnutools]# du -hs *
36K test1.txt
36K test2.txt
36K test3.txt
[root@gibson gnutools]# head -n 3 test1.txt
MAN(1) Manual pager utils MAN(1)
9. Volvemos a montar la partición /backup en read and write, rw.
[root@gibson ~]# mount -o remount,rw /backup
10. Finalmente restauramos los archivos
[root@gibson ~]# rsync -av RECOVERED_FILES/gnutools /backup/
sending incremental file list
gnutools/
gnutools/test1.txt
gnutools/test2.txt
gnutools/test3.txt
sent 106931 bytes received 73 bytes 214008.00 bytes/sec
total size is 106704 speedup is 1.00
[root@gibson ~]# cd /backup/gnutools/
[root@gibson gnutools]# ls
test1.txt test2.txt test3.txt\
[root@gibson gnutools]# du -sh *
36K test1.txt
36K test2.txt
36K test3.txt
1 comment:
Excelente metodo para la recuperacion de información. Muy buen tutorial.
saludos
Post a Comment