Friday, March 14, 2008

How do I recover(undelete) a file I have accidentally removed on my Linux server?

The only recommended way to recover files that have been deleted, will be torestore from your most recent backup. Unfortunately, the default file systemfor most new linux installs(ext3), does not lend itself to easily undeleting files.

This is what one of the developers of ext3, Andreas Dilger, said about it:

In order to ensure that ext3 can safely resume an unlink after a crash, it actuallyzeros out the block pointers in the inode, whereas ext2 just marks these blocks asunused in the block bitmaps and marks the inode as "deleted" and leaves the block pointers alone.

Your only hope is to "grep" for parts of your files that have been deleted and hope for the best.

No comments: