Hi, Thanks for your reply. The file system type is xfs. And I found xfsdump/xfsrestore can undo the remove. I use dd to copy the partition as one image file. How do I mount the image as read-only device? Then I can try to recover the deleted files/directory anytime. Thanks! Regards Andrew At 2020-09-16 20:36:44, "Jonathan Billings" <billings at negate.org> wrote:>On Wed, Sep 16, 2020 at 07:21:08PM +0800, qw wrote: >> I remove one directory by running rm -fr ./some-dir. How to restore >> the directory and its files in the directory? > >If you don't have backups, then you're pretty much out of luck. Don't >forget to back up any data that is important, and test your backups >regularly! > >Depending on the filesystem, there might be ways to recover it, but >the first thing you need to do is stop using the disk the files were >on. Power it off. There are some tools that you can use to recover >it, but it's not 100% effective. > >If it's very important and you are willing to spend money, there are >data recovery services that might be able to extract the data. > >-- >Jonathan Billings <billings at negate.org> >_______________________________________________ >CentOS mailing list >CentOS at centos.org >https://lists.centos.org/mailman/listinfo/centos
> Hi, > > > Thanks for your reply. The file system type is xfs. And I found > xfsdump/xfsrestore can undo the remove.Hm, are you sure you can use xfsdump/xfsrestore for this?> > > I use dd to copy the partition as one image file. How do I mount the image > as read-only device? Then I can try to recover the deleted files/directory > anytime.Mount the image with the option '-o ro' as read-only. Depending on the kind of data you removed you could use 'testdisk' or 'photorec' to recover. Make sure to only use a copied image to test. Regards, Simon
Hi,>> >> Thanks for your reply. The file system type is xfs. And I found >> xfsdump/xfsrestore can undo the remove. > >Hm, are you sure you can use xfsdump/xfsrestore for this? >xfsdump/xfsrestore can't do the recovery.>> I use dd to copy the partition as one image file. How do I mount the image >> as read-only device? Then I can try to recover the deleted files/directory >> anytime. > >Mount the image with the option '-o ro' as read-only. > >Depending on the kind of data you removed you could use 'testdisk' or >'photorec' to recover. Make sure to only use a copied image to test.Thanks for your advice. I will try the tools. I also found the article about how to create and mount image. https://midnightprogrammer.net/post/create-mount-and-unmount-img-files-in-ubuntu/ The article says, the image file created by dd should formated in ubuntu. For Centos, should I format the image file before mounting it as virtual read-only disk? Thanks! Regards andrew At 2020-09-16 21:32:49, "Simon Matter" <simon.matter at invoca.ch> wrote:>> Hi, >> >> >> Thanks for your reply. The file system type is xfs. And I found >> xfsdump/xfsrestore can undo the remove. > >Hm, are you sure you can use xfsdump/xfsrestore for this? > >> >> >> I use dd to copy the partition as one image file. How do I mount the image >> as read-only device? Then I can try to recover the deleted files/directory >> anytime. > >Mount the image with the option '-o ro' as read-only. > >Depending on the kind of data you removed you could use 'testdisk' or >'photorec' to recover. Make sure to only use a copied image to test. > >Regards, >Simon > >_______________________________________________ >CentOS mailing list >CentOS at centos.org >https://lists.centos.org/mailman/listinfo/centos