Undelete file from MDADM RAID5 with XFS filesystem

Using TestDisk to undelete files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
bruraschi
Posts: 2
Joined: 27 Aug 2017, 10:12

Undelete file from MDADM RAID5 with XFS filesystem

#1 Post by bruraschi »

I've 3x3TB in RAID5 in XFS filesystem built with mdadm over Opensuse Leap 42. This array is shared over the network like a NAS. I accidentally deleted all file in that shared folder. Now all it's empty. I immediately unmounted the array, so no write operation was performet further. But now is the problem:

How can undelete those files? All files were only *.ISO containing dvd-video images.

Which level of restore could I reach? I want back the filename and files without corruption. Is possible?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Undelete file from MDADM RAID5 with XFS filesystem

#2 Post by cgrenier »

AFAIK it's not possible to recover the data with the original filenames.
PhotoRec can be used to recover the iso files (disable the other filetypes and be careful to store the files somewhere else), but if the original files were fragmented, recovered files will be corrupted.

bruraschi
Posts: 2
Joined: 27 Aug 2017, 10:12

Re: Undelete file from MDADM RAID5 with XFS filesystem

#3 Post by bruraschi »

Ok, it's better that I renounce the recovery and redo the ripping from scratch, and setting samba permission to 1777 "Sticky bit" or a more strictly "create mask".

Locked