General :: Recover Data From Encrypted Partition (created By EXT3 Ubuntu 10.04)?
Oct 11, 2010
I am facing a serious problem.I installed UBUNTU 10.04 and encrypted it during installation. I accidentally erased some of the necessary files from root folder. now the the OS is NOT booting.luckily i still have the encryption key i have some important documents in that drive (desktop folder).
PS: I have tried to run Live Ubuntu it shows the Root, but it does not enter any of the folder.
View 14 Replies
ADVERTISEMENT
Dec 30, 2009
A HP Netserver LP2000r, with original SCSI controller and HP NetRaid-2M controller, 3x 36GB Ultra3 HDD in RAID5, Debian (sarge/etch), has crashed after 992 days without reboot. From all that I can see, a hardware failure, most likely with the memory. The HP Diagnostic tools cannot find any problem, but everytime I boot into Knoppix, I get between 2minutes and 2 hours of runtime, and then either a kernel oops or just a complete and sudden halt.
Well, the box has earned its money. However, there is some data on the drives that I need to recover (yes, I have beaten myself up properly about not backing up that data, don't even go there !). There are three partitions: sda1 is /, sda2 is swap and sda3 is a LVM volume with 3 logical volumes on it. As far as I can tell, the hardware defect must have been creeping in and has made a total mess of the inodes in all these partitions.
After booting into Knoppix, I can restore the volumes using pvscan, vgscan, lvscan, vgcfgrestore and vgchange. If I try and mount them: mayhem. So I try and check them, using fsck.ext3. All sorts of interesting nonsense, such as a completely empty inode 11 (the first inode) and then obviously from there on all else is pointless. I tried using debugfs, but the information on what to do with it is somewhat spurious.
P.S.: Tomorrow I will go and get myself a 16GB Flash Drive and then hopefully I will be able to dump the partitions one by one onto that drive and transfer the images onto a different computer for analysis and data recovery.
View 1 Replies
View Related
Apr 25, 2009
I wanted to upgrade from Intrepid to Jaunty. I opted for a format/reinstall as I figured upgrading usually sucks. To save my important data, I resized my partition (partition A), formatted the empty space with ext3 (now partition B), and moved the necessary files from partition A to partition B. Then I went through the install process and installed Jaunty on partition A, telling the installer to NOT format partition B. It gave a warning about the installer deleting system folders (var, usr, etc) but I figured it didn't apply. I was wrong.
So now partition B is "empty." I know it didn't format it, but I need to get those files off of there. I have created an image of partition B using ddrescue, but I don't know where to go from there. I tried using foremost, but it won't recover things like my virtual machines and completely nukes the original file structure I had. And I've tried mounting it (using sudo mount -t ext3 -o loop /home/user/recovery.img /mnt), but that doesn't seem to work. The mount command completes successfully, but nothing shows up in the folder I mounted it to.
View 1 Replies
View Related
Jan 26, 2011
By mistake I formatted an ext3 partition on my external hard-drive. Now it has turned into a vfat filesystem. Is their any chance of recovering the lost data?
View 4 Replies
View Related
Jun 20, 2009
I have accidentally removed vmware virtual disk, my host operating system is RHEL5.2 with ext3 file system, i have used photorec, magicresue and foremost but still no luck to recover the vmdk file. i have seen in foremost configuration file that there are some predefined files (ex- doc, pdf, jpg, avi, zip, etc),
1. is there any way to add vmdk file extension on that configuration file?
2. if yes how can i do ?
3. by adding vmdk on configuration file, can i specifically use recover option for vmdk?
View 2 Replies
View Related
Jun 14, 2011
so, after long time of succesfull use of kubuntu, i encountered a 1st major disaster yesterday while using kphotoalbum. It has somehow frozen my machine in so mighty way, that it apparently corrupted a directory with majority of my pictures , which now appears to be empty .My home lies on a separate partition, its encrypted aand using btrfs and I am using kubuntu 10.10. So, could anyone give me some clues how to unencrypt my home partition, that i could obtain an image of partition or whatever else usable for photorec to check for pictures?
View 5 Replies
View Related
Dec 1, 2010
Recently I was forced to hard reset my computer a couple of times (mostly out of frustration) and due to my idiocy i was confronted with the standard Kernel Panic message at bootup. I tried running an fsck from live cd which corrected a bunch of errors but to no avail (as far as getting rid of the Kernel Panic msg). I then tried to mount the filesystem by accessing it from live cd (and later even installed ubuntu on a small leftover partition to get rid of the annoying live cd lag) but it says that I don't have access to my home or root folder. Mounting from command line gave the same issue.
So now to the question. Is there a general procedure to access data in my corrupt filesystem if it is encrypted?
View 7 Replies
View Related
Aug 27, 2009
Well i have an 20GB HDD (/dev/sdb) formated with ext4 and has very important files on it .All of sudden something went wrong and the 20GB partition has been lost . Now how do i have to recover that partition and primarily recover those files . Gparted shows no partition on it but unpartitioned space .
View 1 Replies
View Related
Feb 21, 2011
following problem. A friend phoned me in despair. Her Ubuntu didn't start any more - ASUS-Laptop switched on stops at a ramfs-prompt.
I started Puppy-Linux from DVD-Drive. Worked fine. But puppy can't mount her /dev/sda1 partition either. At least you can see that the partition is still there. Fsck stops with an error. May be the initial problem is a sort of bad hardware by which bad bytes were written to the hard drive. Hard drive and/or memory could be replaced but not the data.
View 7 Replies
View Related
Aug 5, 2011
These following ext3 partitions contain identical data. As we can see, the larger the partition size, the more space is required for the same files:
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/loop11 3965777 561064 3199964 15% [...]
/dev/loop19 573029 543843 29186 95% [...]
[code]....
View 2 Replies
View Related
Jan 3, 2010
i want to know how can i recover deleted files in ext3 partition manually(not using any tools)?? probably using the 'grep' command. if someone know pls tell me...
(i have recoverd deleted files in an ext2 partition with debugfs and dump . but dumping doesnt work for ext3)
View 4 Replies
View Related
Apr 26, 2010
While setting up my laptop on a new hard drive (a bad mobo caused writes which pretty much rendered teh old hdd unusable) I was asked if I wanted to encrypt my home partition.
I've been wanting this for several years - even going as far as trying to get a copy of CheckPoint. That's waht my organization uses on all Wintendo laptops and is required.
In any case, I said "yes" and am happily using my laptop with an encrypted home partition. I'm assuming based on this - [URL] - that it is using EncryptFS as the scheme.
if I were to misplace my laptop, how easy would it be for a forensics team to retrieve my data. Let's assume I have a fairly strong passphrase, such as BisZumBitterenEnd3. [URL]
View 5 Replies
View Related
May 3, 2010
I had some major problems after the recent Ubuntu upgrade and had to boot from a live cd. I have a separate /home partition, but it was encrypted using the default install encryption in the 9.10 install cd. How can I get to my files so I can back them up?
I have tried this but it did not work: http://ubuntuforums.org/showthread.php?t=1337693
View 9 Replies
View Related
Feb 10, 2011
I am using CentOS 5.5.I suppose this is an oft repeated question. I accidentally deleted, using rm command, 2 wmv files. The files were in a single ext3 1Tb drive, with just 1 partition --- the ext3 one. Each file is 600 - 800mb. The 1Tb drive has only about 20Gb data.Immediately after deleting the files i unmounted the drive (/dev/sdc1). Thereafter i searched the the net and came to know of the recovery tools foremost and photorec. I have installed both of them. I am currently running both of them as root --- foremost is just showing a lot of * signs on the terminal and photorec has managed to find some txt and png files --- but no wmv.For foremost i used: /usr/sbin/foremost -t wmv -i /dev/sdc1For photorec i followed some instructions available on the web.
In the meantime, based on some post on the net i ran debugfs as root, then cd into the directory where the files were deleted. Then on typing ls -d i managed to get the inodes of the 2 deleted files and the names of the deleted files are also correct. The instructions on the net http://www.theavidcoder.com/?p=3 tell me to run fsstat and dls both of which i am unable to find in /bin, /usr/bin, /usr/sbin and /sbin. So i am unable to proceed further.
View 5 Replies
View Related
Jan 10, 2010
I have an external 3.5" USB 250Gb HDD which is showing symptoms of hardware problems (repeated /var/log/messages errors of "reset high speed USB device using ehci_hcd"). This was originally plugged in to my NSLU2 running Debian Etch. I have just installed Ubuntu Desktop 9.10 to a spare Pentium-3M laptop and was hoping to copy the contents of this HDD to a fresh drive. However, I cannot mount it even read-only; mount -o ro /dev/sde3 /mnt/disk fails, and the /var/log/messages error is "recovery required on readonly filesystem", "write access unavailable, cannot proceed". I cannot understand why mounting a disk read-only should require write access. Following advice I googled elsewhere, I tried running mke2fs -n /dev/sde3 to try to list the alternative superblocks - but once again I got the error that the device was read-only. How can I go about accessing the data on this disk?
View 11 Replies
View Related
Jan 29, 2010
Well the title says it all. Royal screw-up! I accidentally formatted two Windows partitions inside a Pointsec encrypted hard drive using gparted from a liveCD (in USB). Is there a way to recreate these partitions? If not the whole partition, at least be able to recover everything inside My Documents.I ran TestDisk and it will not see any of the two partitions that existed in the drive.
View 1 Replies
View Related
Dec 11, 2009
I usually repartition a disk by backing up, deleting the partitions, formatting them and repartition. I just did a 200 gig backup (so i am safe) and i want to join 2 (ext3) partition together, sdb1 (data4) and sdb5 (data5) into one big partition. Is there a way to do it without scraping the data in sdb5 (data5). It would save me from rewriting the data back to that new partition (200 gig is time consuming).
View 1 Replies
View Related
Feb 16, 2010
Original disk:
XP NTFS primary
Linux / ext4 logical
Linux /home ext4 logical
Win 7 NTFS logical
NTFS data logical
swap space
NTFS recovery partition
I tried to install linux, as there was a problem with XP overwriting grub, I chose write grub to /dev/sda8 (which is where the linux install was appearing earlier).
I guess this borked the filesystem somehow. Now the NTFS data partition and the swap space are appearing as one free space.
Well actually before that some linux live CDs (including gparted were seeing the entire drive as unpartitioned). I had to go into XP and delete the /ext4 partitions.
Is there any way for me to recover the NTFS data partition ?
View 4 Replies
View Related
May 26, 2010
because what i was looking for was complicated, i am going to edit post
I have laptop with ubuntu on it. I have one ext3 partition with ~220GB.
I want to delete ubuntu and create two ntfs partitions (50+170GB) so i can install windows 7 later.
how to do that using GParted Live CD?
View 6 Replies
View Related
Jan 16, 2011
Well, my laptop slid off my couch and crashed down onto hardwood floor. The hard drive is shot. I was using grub and had both ubuntu 10.10 and windows 7 on it. Can't load either OS.
What options do I have for trying to recover data off the ubuntu partition? I tried loading livecd...for some reason, it won't work. Does livecd require a working harddisk?
View 9 Replies
View Related
Jul 6, 2010
I installed windows 7 over an existing xp partition and windows 7 made a 100 mb partition as some sort of windows swap space thing. This basically made my ubuntu partition unreadable, even with gparted. How to recover this data?
View 5 Replies
View Related
Dec 8, 2010
I unknowingly formatted my whole 160GB hard disk to ext4 file system from Fat while installing Ubuntu. Now my hard disk has only one ext4 partition. recover my old data.
View 2 Replies
View Related
May 22, 2011
I deleted an old ubuntu partition, I reinstalled Ubuntu but is there any software for Ubuntu or any other Linux operating systems that can recover my data?
View 2 Replies
View Related
Jul 20, 2011
I recently suffered a hard disk failure, meaning I had to replace the faulty device. After attempting to mount the old faulty hard drive using and external caddy, I got the following message... Unable to mount 144 GB Filesystem Error mounting: mount: wrong fs type, bad option, bad superblock on /dev/sdb5, missing codepage or helper program, or other error In some cases useful info is found in syslog - try dmesg | tail or so
I'd like to attempt to recover what I can from my /home directory but unfortunately I use encryption (although I do actually know my pass phrase). What procedures and software can I use to try and recover data from this drive?
View 5 Replies
View Related
Feb 25, 2010
I have recently recovered from an HDD failure on my Drobo. One of the disks died and corrupted the entire array (which is not supposed to happen). I have since managed to copy the data off onto smaller disks and after replacing the failed drive, have copied everything back.
Now that im up and running again, i was wondering how this situation would play out on encrypted disks, or in the case of a drobo a large encrypted partition (as you cannot encrypt the entire array).
Would i still be able to recover the data if i were to encrypt it? It is a 4.2TB array, and i assume that I would need to copy the data in its entirety to recover it, so using multiple smaller disks would be out of the question right?
View 5 Replies
View Related
Jul 17, 2010
Around six months ago (last time I reinstalled Ubuntu 9.10), on a whim I decided to check that option to "encrypt [my] home directory". I wanted to see what it was like. Mistake. Since then, I've been unable to figure out how to access the data in my home directory using any method besides booting the computer (usb drive, rip-out-and-stick-it-in-an-enclosure, etc.). Specifically, I find that shell script sitting there that tells you to run it in order to see your files, but it gives some kind of error. I also still have the code Ubuntu tells you to write down in order to decrypt your files.
Fast forward to this past week. I brought in the laptop to Best Buy for repairs to the hinge (the hinge! Ace Hardware could fix this problem! But I wanted to make full use of the service plan.), and I got a phone call a few days later, saying that it hit Best Buy's "No Lemon" policy. They were going to keep my computer and give me in-store credit toward a new one. Of course, I refused to pay ~$70 for them to back up my data for me; what could possibly happen to it when they were fixing a hardware problem?
Anyways, I pleaded with them for my hard drive back, and they said that they could ship the hard drive back to the store so I could get my data off of it. I'm planning on going in there with my external backup hard drive and an external enclosure and doing it myself at the counter (If they charge $70 to back up a Windows partition, how much more will they charge for an encrypted Linux one?). I don't want to embarrass myself by standing around and not being able to get into my own data.
View 7 Replies
View Related
Jul 4, 2009
I need to mount a bsd/386 partition on my hard drive to recover data. I am running the latest CentOS 5.3, downloaded and installed in the last week.My searches have turned up a mount command, that does not work.
[root@new-host-2 ~]# mount -t ufs -o fstype=444bsd /dev/sda3 /mnt/bsd
mount: unknown filesystem type 'ufs'
[root@new-host-2 ~]# mount /dev/sda3 /mnt/bsd
[code]...
So, is there a patch to get mount -t ufs working?is there a patch to get bsd/386 filesystem type? have not build a kernel before, so I would like to avoid that, but I will attempt it if I have no other options.
View 9 Replies
View Related
Jan 12, 2010
I have 8.04 running mdadm raid 1. I selected the wrong drive in gparted and managed to hose my partition tables.
View 7 Replies
View Related
Aug 18, 2009
is there a way to recover data from a hd partition type fat32...cause ...cause right now it shows up as unallocated space..earlier i tried installing windows in a unused partition located just above this partition....i need to recover the data real soon...
View 1 Replies
View Related
Mar 27, 2009
I was putting the cover back on my Antec p180b, and I guess it got stuck and gave it a hard bump (pretty much broke the cover). As a result, one of my hard drives, a Seagate Barracuda ST3750640AS, got messed up or something. All the other hard drives are fine. It's in an LVM with another hard drive, so now I can't boot up into my computer. So I booted into the installation CD:
Code:
# find /dev/sd[a-c][1-3]
/dev/sda1
/dev/sda2
[code]....
This led me to believe the partition was messed up. So I ran cfdisk, and it said something about a missing partition table or something. Additionally, instead of showing the single partition on it, it displays, from my recollection, Pri*Log. To my knowledge, this is the only problem with the hard drive. So now I need to either somehow create or restore the partition table without overwriting the data. Or get a new hard drive, and some how recover the data (LVM, partitions, and all).
View 4 Replies
View Related