https://image.pushauction.com/0/0/f392f ... d9a832.jpg
https://www.asus.com/us/Laptops/ASUS-Ze ... fications/
It had three partitions, ext4 (/), swap and ext4 (/home) which were deleted with gparted. Then the system stopped running. The disk has also out-of-the-box Ubuntu encryption on the home partition and there was nothing left from the original Windows 8 with which it was shipped from the factory. However, the system has UEFI/EFI? probably an LVM and that encrpytion too. Which doesn't make it easier.
In an older version of Ubuntu, I needed to enter a passphrase in the boot process in a screen looking like this: http://www.linuxbsdos.com/wp-content/up ... 00x311.png
In order to avoid any risk, I made copies of the disk using lubuntu live image 17.10 to external hard disks (non-SSD) that were connected via USB:
1)
Code: Select all
dd bs=64K conv=noerror,sync status=progress if=/dev/sda of=/dev/sdb
Code: Select all
ddrescue -f -d -r3 /dev/sda /dev/sdb /root/blah.log
Code: Select all
ddrescue -f -d -r3 --reverse /dev/sda /dev/sdb /root/blahr.log
I am a bit hesitant to run TestDisk on the original disk itself, at the moment. Therefore, I am running TestDisk on the disk with the copy that was made with ddrescue --reverse ( 3) ) and am running some deep analysis at the moment. The two NTFS partitions on which I am doing deep analysis are 20 GB in size and don't look much like my home partition which I am trying to find. So, I have some questions.
a) Is this approach via copies even possible?
b) If yes, what is the best approach if I would work with a copy? (At the moment I use 3) ) Would it be much easier to run TestDisk on the original disk?
c) Which analysis should I start? "Intel/PC" or "EFI GPT partition map (Mac i386, some x86_64...)"?