[H-GEN] recovery of deleted files

[Robert Brockway]

On Thu, 30 Oct 1997, Martin Pool wrote:

> > I believe so, however recovering deleted files under unix-type filesystems
> > is an iffy proposition at best.  I believe there is a mini-HOWTO on how
> > desperate people can get at (what's left of) their deleted files.
> 
> Briefly, the HOWTO says:
> 
>  1) You should have made a backup!

Yep.. double yep :)
 
>  2) Shut down the machine to single user mode immediately.

One guy advocated hitting the big red button before a disk sync occurs
(meta data is flushed every 5 seconds by default).  DO NOT do this on a
multiuser machine.  Actually I totally advise against it, but on a single
user box with a piece of information _that_ important (and you have a
maximum of 5 seconds to decide) it might be an option.  Be prepared for
filesystem damage too.
 
>  3) So, you understand inodes, single, double, and triple indirect blocks,
>     right?

I have a broad understanding of the concept.  Interresting stuff, but I'm
not into poking around low level filesystem system stuff really :)

>  4) Are you feeling lucky, punk?

>  5) Recreate the blocks by hand using debugfs.

And be _very_ _very_ careful :)

In short, make backups.
Cheers,
	-Robert

--Robert Brockway. Email: robert at zen.humbug.org.au, robert at icc.net.au
                          r.brockway at mailbox.uq.edu.au, robert at plugged.net.au
                   WWW:   http://www.humbug.org.au/~robert
                   President of HUMBUG (http://www.humbug.org.au)

----------------------- HUMBUG General List --------------------------------
echo "unsubscribe general" | mail majordomo at humbug.org.au # To Unsubscribe