Re: recover ext3 deletion
On Dec 30 2005, Karsten M. Self wrote: on Wed, Dec 28, 2005 at 05:43:12PM +0400, Danielyan, Ashot ([EMAIL PROTECTED]) wrote: I've run rm /*/* as root Can I recover all deleted files? Yes. From your regular, updated, comprehensive system backups. Indeed. I've saved my life once in a quite stressful period just because I had taken the time to religiously make backups. I'd recommend using mondo for creating backups (if you are running on ia32---AFAIK, it doesn't support other architectures right now). Hope this helps, Rogério. -- Rogério Brito : [EMAIL PROTECTED] : http://www.ime.usp.br/~rbrito Homepage of the algorithms package : http://algorithms.berlios.de Homepage on freshmeat: http://freshmeat.net/projects/algorithms/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Re: recover ext3 deletion
on Wed, Dec 28, 2005 at 05:43:12PM +0400, Danielyan, Ashot ([EMAIL PROTECTED]) wrote: Hi I've run rm /*/* as root Can I recover all deleted files? Yes. From your regular, updated, comprehensive system backups. Ext3 doesn't have an undeletion feature and by its design breaks several characteristics which allow this at times under ext2. Peace. -- Karsten M. Self kmself@ix.netcom.comhttp://kmself.home.netcom.com/ What Part of Gestalt don't you understand? I thought about it all night. Since I came here I said there were two things that concerned me related to Novell: one Novell partnering with IBM and two Novell coming at us at the desktop. Both fears have now come true. - Jim Allchin, Microsoft Corp., Jul 17, 1991 All that's old is new again. signature.asc Description: Digital signature
Re: Re: recover ext3 deletion
Hi Ive run rm /*/* as root Can I recover all deleted files? Thank you in advance Ashot
Re: recover ext3 deletion
On Wednesday 28 December 2005 08:43, Danielyan, Ashot wrote: Hi I've run rm /*/* as root Can I recover all deleted files? Probably not. There is not that I've heard of, an undelete for ext2/3. Thank you in advance Ashot -- Cheers, Gene People having trouble with vz bouncing email to me should add the word 'online' between the 'verizon', and the dot which bypasses vz's stupid bounce rules. I do use spamassassin too. :-) Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2005 by Maurice Eugene Heskett, all rights reserved. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Gerald Livingston, 2002-Nov-08 22:54 -0600: I went googling and found a utility I had set up when I was first playing with slackware years ago. It's called safedelete and creates a trashcan like wrapper around 'rm'. I don't see it packaged anywhere and the .rpm's I found while goggling seem to have been created sometime in the year 2000 -- the link I provide below indicates a tgz version from 2001. I simply have an alias for rm for my shell: alias rm='mv --backup=numbered --target-directory=/home/jeff/.Trash' This is in my ~/.bashrc I have this for my root account too...after deleting my entire /etc directory once, I learned my lesson. jc -- Jeff CoppockSystems Engineer Diggin' Debian Admin and User -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Harvey == Harvey Kelly [EMAIL PROTECTED] writes: Harvey And I'm back at the prompt, with nothing recovered as I Harvey can tell. Please, where am I going wrong? In addition to Harvey losing everything (no back-ups, I know, I know), a 3,000 Harvey word essay due in Monday has been lost. As many have pointed out to you, you are probably hosed. I do have a recommendation about backups though, it is something I use to get around the \rm -rf * in the wrong place. I use rsync from a cron job run hourly (daily, every 15 minutes, whatever) to backup my home directory to some place else. Do notice that some place else could just be a different directory on the same machine, perhaps on the same disk. Like /var/local/xyz. This will not save you from disk crash, but it will catch most rm -rf type errors in your home directory. Oh yes, I also don't really use 'root' for anything much other than apt-get. This is so I never do rm -rf / ;-) Good luck! Shyamal -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
My file was dated 1996 and I too have no idea where it came from. The following makes it even more obvious: PS1='\u@\h:\w\$ ' Brian Potkin said: On Fri, Nov 08, 2002 at 05:43:21PM -0700, Rick Macdonald wrote: Why doesn't the prompt for root ever include showing the current directory? That would probably have saved this poor fellow as he may have seen that he was not in /floppy as he thought. Surely it is relatively easy to change the prompt to whatever is desired. In root's .bashrc on this machine I have export PS1='\h:\w\$ ' which gives what you suggest. The file dates from 1998 so I really cannot recollect whether it came as the default prompt or it was put there by me. Brian. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] ...RickM... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Pigeon [EMAIL PROTECTED] [2002-11-10 03:22:22 +]: Some weirdness here... My Debian 2.1 single-CD version, using bash, DIDN'T. I remember quite clearly looking in the docs for how to change it, failing to find the 'official' method and ending up using something with `pwd`. The user .profile and other files are installed from templates in /etc/skel/.??* which are the skeleton files. They are the files for which new user's are initialized. Once initialized the user files are never touched again. Since this is only initialization if a system release updates the files you will not see them in existing accounts. Only new user accounts will get the new files when the are created from the new templates. I have not looked at the history but probably back for your Debian 2.1 system the skeleton files did not contain that configuration. But now they do. Unless you were to recreate your user account as a new account your profile will be not be updated. You will continue to operate with the same file forever. If you care to see what the released skeleton files for new user accounts are and how they differ from your current ones you could diff the /etc/skell directory against your own. You might even decide to add features from them to your configuration. However, the skeleton files are very lean and mean. Probably you would want to keep your existing files in most cases. for i in /etc/skel/.??*;do diff $i ~/;done 21 | less Bob msg12083/pgp0.pgp Description: PGP signature
Re: recover ext3 deletion
Harvey Kelly wrote: Oh my. I cannot believe what I did. # rm -rf * Whilst in my /home directory - I thought I was in /floppy. I've been digging around and stumbled across recover, but seem unable (?) to get it to work, though I have ext3, not ext2 on the drive. I don't think recover works on ext3. Last I heard, as of much earlier this year, ext3 behaves a bit differently from ext2 in regard to deleted files, and the usual ext2 file undeletion methods don't work. In addition to losing everything (no back-ups, I know, I know), a 3,000 word essay due in Monday has been lost. You know, you know, but if you know, do something about it for the future. Daily incremental backups don't take much time or space if you only back up the parts of the system that you can't simply reinstall from packages or rebuild from source. Craig -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Hiya, Do you think I should start writing to essay again - or would it be possible to convert the partition to ext2, and use recover? Or am I just being overly hopeful? And yeah, point taken about backing up. Harvey Craig Dickson wrote: Harvey Kelly wrote: Oh my. I cannot believe what I did. # rm -rf * Whilst in my /home directory - I thought I was in /floppy. I've been digging around and stumbled across recover, but seem unable (?) to get it to work, though I have ext3, not ext2 on the drive. I don't think recover works on ext3. Last I heard, as of much earlier this year, ext3 behaves a bit differently from ext2 in regard to deleted files, and the usual ext2 file undeletion methods don't work. In addition to losing everything (no back-ups, I know, I know), a 3,000 word essay due in Monday has been lost. You know, you know, but if you know, do something about it for the future. Daily incremental backups don't take much time or space if you only back up the parts of the system that you can't simply reinstall from packages or rebuild from source. Craig -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
begin Harvey Kelly quote on Fri, Nov 08, 2002 at 10:05:10PM +: Do you think I should start writing to essay again - or would it be possible to convert the partition to ext2, and use recover? Or am I just being overly hopeful? Sorry man, I suspect that you're hozed. Something that you could try (maybe) is going to remount your partition read-only, and then try to search through the raw partition using something like less... this might work if you remember some text strings of your essay, and have a fairly small partition. But I bet that you're better of re-writing your essay. M msg11837/pgp0.pgp Description: PGP signature
Re: recover ext3 deletion
Harvey Kelly wrote: Do you think I should start writing to essay again - or would it be possible to convert the partition to ext2, and use recover? Or am I just being overly hopeful? You're being overly hopeful. If it were that easy, recover would have worked. (Converting from ext3 to ext2 is just a matter of removing the journal.) Craig -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Damn. I'm starting the blasted essay again. Thanks to Craig too. Harvey Mark Ferlatte wrote: begin Harvey Kelly quote on Fri, Nov 08, 2002 at 10:05:10PM +: Do you think I should start writing to essay again - or would it be possible to convert the partition to ext2, and use recover? Or am I just being overly hopeful? Sorry man, I suspect that you're hozed. Something that you could try (maybe) is going to remount your partition read-only, and then try to search through the raw partition using something like less... this might work if you remember some text strings of your essay, and have a fairly small partition. But I bet that you're better of re-writing your essay. M -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Harvey Kelly said: And I'm back at the prompt, with nothing recovered as I can tell. Please, where am I going wrong? In addition to losing everything (no back-ups, I know, I know), a 3,000 word essay due in Monday has been lost. hate it when that happens ..I've tried to do the same after making mistakes like you mentioned. I have even been able to recover a lot of data. but making sense of the data is entirely different. Recovering hundreds or thousands of blocks of data doesn't do me much good if files are split up in different blocks/(inodes), and some inodes may have bits of more then one file. I have no suggestions other then do backups, but I feel your pain. There are methods that can be implimented in linux to help restore files(try searching freshmeat for undelete) but last I looked they required the methods to be implimented at the time of the deletion. reminds me of running the various undelete programs back on DOS or win9x, they did about the same thing, could recover (parts) of the data but rarely was the result anything that I could use. even the more modern stuff, I tried running a recent(1-2 year old) copy of executive software's undelete utility on a NT4 system, just for shits and grins, and it couldn't recover anything, I deleted a file(to test), and tried to recover it a few minutes later and there was no trace of it that the utility could find. I too am very bad at backing up my personal data, I do back it up but its not often(maybe once or twice a year). Now that I have a DAT drive I may start doing it more often though. nate -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
nate wrote: I have no suggestions other then do backups, but I feel your pain. There are methods that can be implimented in linux to help restore files(try searching freshmeat for undelete) but last I looked they required the methods to be implimented at the time of the deletion. You know, it'd be really nice if the installation disks would offer to set up basic backup services for you. It could be as simple as offering to make a crontab entry to tar /etc and /home and dropping an undelete script in /usr/bin. It seems a little odd that most operating system distributions will set up your mail, network, file system, and so on, but don't try to give you even basic backup systems. Windows gets partway there with the trash can, I guess, but it seems like this'd be one place where Debian could really distinguish itself. Experts wouldn't need it, but it might save a lot of home users a lot of grief. - Jeff (backups are still on my to-do list as well) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Why doesn't the prompt for root ever include showing the current directory? That would probably have saved this poor fellow as he may have seen that he was not in /floppy as he thought. On Fri, Nov 08, 2002 at 09:45:40PM +, Harvey Kelly wrote: Dear All, Oh my. I cannot believe what I did. # rm -rf * Whilst in my /home directory - I thought I was in /floppy. I've been digging around and stumbled across recover, but seem unable (?) to get it to work, though I have ext3, not ext2 on the drive. I run as root: recover -a Scanning devices... Ext2 devices: recover: No valid standard devices found; are you a privileged user? If your device is not listed, you can still use it Please enter the partition's device name To which I enter /dev/hda7 Getting inodes (this can take some time)... debugfs 1.27 (8-Mar-2002) Terminated And I'm back at the prompt, with nothing recovered as I can tell. Please, where am I going wrong? In addition to losing everything (no back-ups, I know, I know), a 3,000 word essay due in Monday has been lost. As far as I am aware debugfs can cope with an ext3 filesystem so see if this helps. As root type debugfs /dev/hdb7 at the prompt. You should see something like this. debugfs 1.30-WIP (30-Sep-2002) debugfs: Now enter lsdel for a list of deleted inodes, file sizes and deletion times. The output is piped through a pager. You will have to use file size and deletion time as a guide to which file you want to recover. The final step is debugfs: dump inode number /tmp/foo.txt Note the angle brackets. Ideally you should have unmounted the partition immediately so that nothing has been written to it. Brian. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED] ...RickM... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Harvey Kelly [EMAIL PROTECTED] [2002-11-08 21:45:40 +]: Oh my. I cannot believe what I did. # rm -rf * I've been digging around and stumbled across recover, but seem unable (?) to get it to work, though I have ext3, not ext2 on the drive. http://www.gnu.org/software/fileutils/doc/faq/ Look for I used rm to remove a file. How can I get it back now? I had been pointed to both recover and to The Coroner's Toolkit and added them to the faq. I have not used them. But there are also pointers to other documentation that users have suggested on the lists previously. Something in there might be of help. Generally, I think when you remove a file that it is probably gone. Especially on an active filesystem where blocks will be reused in short order. I am sorry for your loss. Bob msg11867/pgp0.pgp Description: PGP signature
Re: recover ext3 deletion
Jeff Cours said: systems. Windows gets partway there with the trash can, I guess, but it KDE and Gnome have trashcans.. and the windows recycle bin/trash doesn't protect against deltree /y or del from the command prompt(last I checked which I admit was years ago since on every windows box I use the first thing I disable is the recycle bin). nate -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
Rick Macdonald said: Why doesn't the prompt for root ever include showing the current directory? That would probably have saved this poor fellow as he may have seen that he was not in /floppy as he thought. it does, unless you changed the default behavior. on every debian system I have used the root prompt shows the current working directory in bash (not sure about other shells). nate -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: recover ext3 deletion
On Fri, Nov 08, 2002 at 03:58:52PM -0800, nate wrote: I too am very bad at backing up my personal data, I do back it up but its not often(maybe once or twice a year). Now that I have a DAT drive I may start doing it more often though. If you're bad at making backups, or don't have the means to do so, I suggest you have TMPTIME in /etc/default/rcS set to 7, and have tmpreaper installed. Instead of deleting things, move them to /tmp. The files will automatically be deleted in a week assuming nobody touches them. -- .''`. Baloo Ursidae [EMAIL PROTECTED] : :' :proud Debian admin and user `. `'` `- Debian - when you have better things to do than to fix a system msg11876/pgp0.pgp Description: PGP signature
Re: recover ext3 deletion
- Original Message - From: Paul Johnson [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 08, 2002 22:16 Subject: Re: recover ext3 deletion On Fri, Nov 08, 2002 at 03:58:52PM -0800, nate wrote: I too am very bad at backing up my personal data, I do back it up but its not often(maybe once or twice a year). Now that I have a DAT drive I may start doing it more often though. If you're bad at making backups, or don't have the means to do so, I suggest you have TMPTIME in /etc/default/rcS set to 7, and have tmpreaper installed. Instead of deleting things, move them to /tmp. The files will automatically be deleted in a week assuming nobody touches them. I went googling and found a utility I had set up when I was first playing with slackware years ago. It's called safedelete and creates a trashcan like wrapper around 'rm'. I don't see it packaged anywhere and the .rpm's I found while goggling seem to have been created sometime in the year 2000 -- the link I provide below indicates a tgz version from 2001. http://www2.cddc.vt.edu/linux/utils/shell/ http://www2.cddc.vt.edu/linux/utils/shell/safedelete-1.3b.lsm Begin4 Title: SafeDelete - safely delete and undelete files Version: 1.3b Entered-date: 30MAY01 Description: SafeDelete is a set of utilities which is meant to enhance the rm command. Files which are removed with the safedelete command can be recovered with the undelete command. Version 1.3b fixes various bugs and adds a few features. There are also two new commands: 1) undeltk provides a Tcl/Tk interface to the undelete command and 2) undelsh provides a shell interface (runs under bash and ksh only). Also updated the Makefiles for the various platforms. If you are currently using safedelete 1.3a you can upgrade to 1.3b directly (issue safedelete --version to see version). SunOS locking code provided by Alexandar Howard - thanx!! Keywords: shell utility safedelete undelete rm Author: [EMAIL PROTECTED] (Jeff Renicker) Maintained-by: [EMAIL PROTECTED] (Jeff Renicker) Primary-site: www.ibiblio.org/pub/Linux/utils/shell 72K safedelete-1.3b.tar.gz Alternate-site: Original-site: Platforms: Linux, AIX, HP-UX, SunOS, Solaris Copying-policy: Artistic License End -- gvl2 http://www.phorce1.com http://www.buskatiers.org -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
