Page 1 of 1

Undelete file from MDADM RAID5 with XFS filesystem

Posted: 27 Aug 2017, 10:26
by bruraschi
I've 3x3TB in RAID5 in XFS filesystem built with mdadm over Opensuse Leap 42. This array is shared over the network like a NAS. I accidentally deleted all file in that shared folder. Now all it's empty. I immediately unmounted the array, so no write operation was performet further. But now is the problem:

How can undelete those files? All files were only *.ISO containing dvd-video images.

Which level of restore could I reach? I want back the filename and files without corruption. Is possible?

Re: Undelete file from MDADM RAID5 with XFS filesystem

Posted: 28 Aug 2017, 05:48
by cgrenier
AFAIK it's not possible to recover the data with the original filenames.
PhotoRec can be used to recover the iso files (disable the other filetypes and be careful to store the files somewhere else), but if the original files were fragmented, recovered files will be corrupted.

Re: Undelete file from MDADM RAID5 with XFS filesystem

Posted: 28 Aug 2017, 09:47
by bruraschi
Ok, it's better that I renounce the recovery and redo the ripping from scratch, and setting samba permission to 1777 "Sticky bit" or a more strictly "create mask".