From owner-freebsd-questions@FreeBSD.ORG Sat Apr 28 02:59:50 2012 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id D213D1065673 for ; Sat, 28 Apr 2012 02:59:50 +0000 (UTC) (envelope-from erich@alogreentechnologies.com) Received: from alogreentechnologies.com (alogreentechnologies.com [67.212.226.44]) by mx1.freebsd.org (Postfix) with ESMTP id 9E5D48FC14 for ; Sat, 28 Apr 2012 02:59:50 +0000 (UTC) Received: from amd620.ovitrap.com ([49.128.188.2]) (authenticated bits=0) by alogreentechnologies.com (8.13.1/8.13.1) with ESMTP id q3S2xk5M004794; Fri, 27 Apr 2012 20:59:49 -0600 From: Erich Dollansky Organization: ALO Green Technologies Pte Ltd To: freebsd-questions@freebsd.org Date: Sat, 28 Apr 2012 10:00:05 +0700 User-Agent: KMail/1.13.7 (FreeBSD/8.3-STABLE; KDE/4.7.4; amd64; ; ) References: In-Reply-To: MIME-Version: 1.0 Content-Type: Text/Plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-Id: <201204281000.05551.erich@alogreentechnologies.com> X-Mailman-Approved-At: Sat, 28 Apr 2012 03:06:54 +0000 Cc: Alejandro Imass Subject: Re: UFS Crash and directories now missing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 28 Apr 2012 02:59:50 -0000 Hi, On Saturday 28 April 2012 09:33:47 Alejandro Imass wrote: > On Fri, Apr 27, 2012 at 7:52 PM, Alejandro Imass wrote: > > > > We had a server crash and required a hard reboot. The system is on one > > disk and another disc mounts /usr/jails and everything runs in jails, > > pristine base system, and the base system is working perfectly. > > > > The second volume, the one with the jails mounted but every jail > > directory disappeared except one. df still shows the data being used > > so I'm guessing it's a logical error in the directory structure or > > something. I unmounted the drive and ran fsck and reported no > > problems. df shows the data being use so where is the data?? > > what is du saying? > > OK, so here is an update, maybe someone has some clue here.... > > All the jails wound up in the /usr/local/etc/apache22 of the only > surviving jail which is the http proxy to all the other jails. You want to say that all the data you were looking for have been moved to this directory? > > Right before the server crashed I noticed MySQL at 100% o several CPUs > and the server was on it's knees, so I'm wondering.... was this an > attack? is it possible that Apache or MySQL moved the files?? > > I mean the jails are there, I'm even backing them up right now.... but > how did these directories move here????? > > Anybody has ANY logical explanation??? Journaling is new to me. Could this be the cause? Erich