Date: Sat, 16 Apr 2022 18:01:54 +0300 From: Sami Halabi <sodynet1@gmail.com> To: "Julian H. Stacey" <jhs@berklix.com> Cc: FreeBSD Current <freebsd-current@freebsd.org> Subject: Re: recover deleted file Message-ID: <CAEW%2Bogbc3DQV=jY-EG6T44tLe1iGZFM%2B1pX2jm3Yy1EROGHygQ@mail.gmail.com> In-Reply-To: <202204161423.23GENCra046094@fire.js.berklix.net> References: <202204161248.23GCmlIP044778@fire.js.berklix.net> <202204161423.23GENCra046094@fire.js.berklix.net>
next in thread | previous in thread | raw e-mail | index | archive | help
--0000000000006eafca05dcc6cf36 Content-Type: text/plain; charset="UTF-8" okay... all seems very time consuming operations!! There should be an os "undelete" as happens in NTFS for example.. which is very fast and can be done also with extra tools without a hassle. for now I got backup from last day .. caused me a lot of troubles, not say legal ones, but I passed the point to hold the machine down. any advice? Maybe UFS developer would do a rework so latest deleted inodes would put in a "recycle bin" (maybe with a sysctl or whatever) for say one day (or any other configurable sysctl) and allow to recover quickly or "force delete / empty recycle bin" , rather than delete and give back space immediately for use and destroy possibility to restore. my 2 cents. Sami On Sat, Apr 16, 2022 at 5:23 PM Julian H. Stacey <jhs@berklix.com> wrote: > > Then I would reboot single user, > > fsck & mount only the partitions the data was Not on., > > dd the partition to recover, > > then fsck the partition & mount it, & go multi user, > > then I'd make a 2nd copy of the partition with data to recover > > Oops. I meant: > > ...... I'd make a 2nd copy (with cp) from the 1st image file, > not of course Not a copy of raw decice partition after fsck > has discarded blocks. > > The spare 2nd. copy because I've zapped data too often, trying to rescue > it, while fumbling with unfamiliar resue tools: its easier to > have a play image one can experimentaly try to recover from, & > periodicaly while one learns, & that gets in a mess, one can refresh > copy from master to experimental copy. > > If any recovery tools want to run on devices, & refuse images in files, use > mdconfig -a -t vnode -f imagefile > > I recall FS has journals etc, > Specalists on list fs@ > > Cheers, > -- > Julian Stacey http://berklix.com/jhs/ http://StolenVotes.UK > Kill / remove Putin to stop him killing & provoking world war. > -- Sami Halabi Information Systems Engineer NMS Projects Expert, FreeBSD SysAdmin Expert Asterisk Expert --0000000000006eafca05dcc6cf36 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>okay...</div><div>all seems very time consuming opera= tions!!</div><div><br></div><div>There should be an os "undelete"= as happens in NTFS for example.. which=C2=A0is very fast and can be done a= lso with extra tools without a hassle.</div><div><br></div><div>for now I g= ot backup from last day .. caused me a lot of troubles, not say legal ones,= but I passed the point to hold the machine down.</div><div><br></div><div>= any advice?</div><div><br></div><div>Maybe UFS developer would do a rework = so latest deleted inodes would put in a "recycle bin" (maybe with= a sysctl or whatever) for say one day (or any other configurable sysctl) a= nd allow to recover quickly or "force delete / empty recycle bin"= , rather=C2=A0than delete and give back space immediately=C2=A0for use and= destroy possibility to restore.</div><div><br></div><div>my 2 cents.</div>= <div><br></div><div>Sami</div><div><br></div><div><br></div></div><br><div = class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Sat, Apr 16,= 2022 at 5:23 PM Julian H. Stacey <<a href=3D"mailto:jhs@berklix.com">jh= s@berklix.com</a>> wrote:<br></div><blockquote class=3D"gmail_quote" sty= le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi= ng-left:1ex">> Then I would reboot single user, <br> > fsck & mount only the partitions the data was Not on.,<br> > dd the partition to recover,<br> > then fsck the partition & mount it, & go multi user,<br> > then I'd make a 2nd copy of the partition with data to recover<br> <br> Oops. I meant:<br> <br> ...... I'd make a 2nd copy (with cp) from the 1st image file,<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0not of course Not a copy of raw decice partition= after fsck<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0has discarded blocks.<br> <br> The spare 2nd. copy because I've zapped data too often, trying to rescu= e<br> it, while fumbling with unfamiliar resue tools: its easier to<br> have a play image one can experimentaly try to recover from, &<br> periodicaly while one learns, & that gets in a mess,=C2=A0 one can refr= esh<br> copy from master to experimental copy.<br> <br> If any recovery tools want to run on devices, & refuse images in files,= use<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 mdconfig -a -t vnode -f imagefile<br> <br> I recall FS has journals etc, <br> Specalists on list fs@<br> <br> Cheers,<br> -- <br> Julian Stacey=C2=A0 <a href=3D"http://berklix.com/jhs/" rel=3D"noreferrer" = target=3D"_blank">http://berklix.com/jhs/</a>; <a href=3D"http://StolenVotes= .UK" rel=3D"noreferrer" target=3D"_blank">http://StolenVotes.UK</a>=C2=A0 <= br> Kill / remove Putin to stop him killing & provoking world war.<br> </blockquote></div><br clear=3D"all"><div><br></div>-- <br><div dir=3D"ltr"= class=3D"gmail_signature"><div dir=3D"ltr"><div><div dir=3D"ltr">Sami Hala= bi<div>Information Systems Engineer</div><div>NMS Projects Expert,=C2=A0<sp= an style=3D"font-size:12.8px">FreeBSD SysAdmin Expert</span></div><div>Aste= risk Expert</div></div></div></div></div> --0000000000006eafca05dcc6cf36--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAEW%2Bogbc3DQV=jY-EG6T44tLe1iGZFM%2B1pX2jm3Yy1EROGHygQ>