Ubuntu :: How Do I Recover Data From Corrupt Encrypted Filesystem
Dec 1, 2010
Recently I was forced to hard reset my computer a couple of times (mostly out of frustration) and due to my idiocy i was confronted with the standard Kernel Panic message at bootup. I tried running an fsck from live cd which corrected a bunch of errors but to no avail (as far as getting rid of the Kernel Panic msg). I then tried to mount the filesystem by accessing it from live cd (and later even installed ubuntu on a small leftover partition to get rid of the annoying live cd lag) but it says that I don't have access to my home or root folder. Mounting from command line gave the same issue.
So now to the question. Is there a general procedure to access data in my corrupt filesystem if it is encrypted?
View 7 Replies
ADVERTISEMENT
Feb 25, 2010
I have recently recovered from an HDD failure on my Drobo. One of the disks died and corrupted the entire array (which is not supposed to happen). I have since managed to copy the data off onto smaller disks and after replacing the failed drive, have copied everything back.
Now that im up and running again, i was wondering how this situation would play out on encrypted disks, or in the case of a drobo a large encrypted partition (as you cannot encrypt the entire array).
Would i still be able to recover the data if i were to encrypt it? It is a 4.2TB array, and i assume that I would need to copy the data in its entirety to recover it, so using multiple smaller disks would be out of the question right?
View 5 Replies
View Related
Jun 14, 2011
so, after long time of succesfull use of kubuntu, i encountered a 1st major disaster yesterday while using kphotoalbum. It has somehow frozen my machine in so mighty way, that it apparently corrupted a directory with majority of my pictures , which now appears to be empty .My home lies on a separate partition, its encrypted aand using btrfs and I am using kubuntu 10.10. So, could anyone give me some clues how to unencrypt my home partition, that i could obtain an image of partition or whatever else usable for photorec to check for pictures?
View 5 Replies
View Related
Oct 11, 2010
I am facing a serious problem.I installed UBUNTU 10.04 and encrypted it during installation. I accidentally erased some of the necessary files from root folder. now the the OS is NOT booting.luckily i still have the encryption key i have some important documents in that drive (desktop folder).
PS: I have tried to run Live Ubuntu it shows the Root, but it does not enter any of the folder.
View 14 Replies
View Related
Sep 1, 2010
120 GB HDD. All ext4. Wanted to partition it into 60 gig ntfs, and 60 gig ext4 for dual install. Booted up the LiveCD. Clicked on the partition to modify. Selected /windows as mount point. Change took place. Now, my disk shows up as 57 GB FAT (almost all of which is free) and 60 GB of unallocated space. Any way to recover it? I'm sue the data is in the 60 GB of unallocated space. While I have a back up of some of the data, I'm going to be losing quite a bit if I can't recover this...
View 1 Replies
View Related
Aug 5, 2011
On my drive I had 2 partitions for an Ubuntu 9.04 (swap, /) and one partition for Windows. I figured out that I should upgrade my Ubuntu, so I deleted the "/" partition and in its place created 2 new partitions (/, /home) .
After installing the latest Ubuntu 11.04, I realised that although I had backuped everything I needed in a 2nd disk and I could access those folders and their data from my Ubuntu 9.04, both my Windows and the 11.04 can locate neither the folders nor the data now. I have no idea why this happened (perhaps some issue with the mounting?) I have tried the trial version of Stellar Phoenix linux data recovery tool, but it cannot locate the old partitions.
View 2 Replies
View Related
Feb 16, 2010
Original disk:
XP NTFS primary
Linux / ext4 logical
Linux /home ext4 logical
Win 7 NTFS logical
NTFS data logical
swap space
NTFS recovery partition
I tried to install linux, as there was a problem with XP overwriting grub, I chose write grub to /dev/sda8 (which is where the linux install was appearing earlier).
I guess this borked the filesystem somehow. Now the NTFS data partition and the swap space are appearing as one free space.
Well actually before that some linux live CDs (including gparted were seeing the entire drive as unpartitioned). I had to go into XP and delete the /ext4 partitions.
Is there any way for me to recover the NTFS data partition ?
View 4 Replies
View Related
Jan 4, 2010
I have an Acer Aspire One running NBR 9.10. A few days ago it "went wonky", wouldn't boot and would just seem to start and then shut off before getting to the logon screen. I managed to boot from a USB stick and run check and fix in Gparted. It found a slew of errors in the file system. Unfortunately, it still won't boot, now it just hangs. I assume some of boot files were damaged.
Now I have two problems:
1. Is there a way to repair the damage? Or just wipe the disk and start over?
2. I need to get my e-mail off of the hard drive. I can mount the drive after booting from a USB stick, but the thunderbird directory is locked. Is there a way around this?
View 2 Replies
View Related
Apr 16, 2010
am having issues with a corrupted ext4 filesystem. My machine has run flawlessly for weeks, then all of a sudden I am getting messages that I can't access various directories, and on reboot fsck dumps to a command line. So far I have been able to fix the problem by manually running fsck. However, this is the second time that I have run into this problem; the previous time I ended up throwing out my hard drive and doing a clean install.I am running a clean install of Karmic Koala, software RAID, 4 Gb RAM, two 500 Gb Western Digital SATA drives, with an Intel E7200 2.53 Ghz dual core processor.Among other applications, I run VMware 7.0 for the occasional task for which I need a Windows program.
View 1 Replies
View Related
Jan 8, 2010
I had an interesting problem with my workstation this morning. When I booted the system I got a message that the sda1 filesystem was corrupt. I ran fsck on all the unmounted filesystems and found them to be clean. I then booted from the F12 live CD and checked the file systems again using 'Disk Utility' - everything appeared to be clean. However I still couldn't boot the system. I eventually reinstalled F12 from the Live CD.
Seems to be a bit strange as all the checks I ran showed the file system to be OK.
View 2 Replies
View Related
Apr 5, 2009
today I upgraded (yum update) one of my Dell Poweredge Server from 5.2 to 5.3. After rebooting the system first seems to start normal but then the following Error Messages appear:
Apr 5 14:28:26 srv_1 kernel: I/O error in filesystem ("dm-0") meta-data dev dm-0 block 0x668000008 ("xfs_trans_read_buf") error 5 buf count 4096
Apr 5 14:28:26 srv_1 kernel: attempt to access beyond end of device
Apr 5 14:28:26 srv_1 kernel: dm-0: rw=0, want=27514634256, limitfs]
[code]....
Booting with a rescue disk and doing a xfs_repair solves the file system Problems but moved a lot of files ( at least /usr/bin and /usr/lib completly) to "lost+found"... I tried the update with a spare 5.2 Server (different Hardware), and ended up with exactly the
same effect and error message. Both systems are running XFS as root File system on an LVM Disk.
View 3 Replies
View Related
Nov 22, 2010
Dummy me let root run out of space because I didn't know to use logrotate. I was able to compress the system logs but not before the damage was done me thinks; now the computer is unbootable. I booted from a LiveCD and got my old partitions mounted under /media/oldroot to try and recover files; however, I forgot that I had encrypted my home. I found [URL] and was following it; however, I seem to run into a bunch of path issues after I chroot.
The chroot command returns:
bash: groups: command not found
The su command returns:
-su: cut: command not found
-su: getent: command not found
-su: expr: command not found
-su: groups: command not found
Finally, the ecryptfs-mount-private command returns:
-su: ecryptfs-mount-private: command not found
I have separate partitons for /, /home, /tmp, /usr, and /usr/local and bothered to mount the first 2. (If only I had been ambitious enough to create a /var). I was running Ubuntu 10.10.
View 1 Replies
View Related
Apr 26, 2010
While setting up my laptop on a new hard drive (a bad mobo caused writes which pretty much rendered teh old hdd unusable) I was asked if I wanted to encrypt my home partition.
I've been wanting this for several years - even going as far as trying to get a copy of CheckPoint. That's waht my organization uses on all Wintendo laptops and is required.
In any case, I said "yes" and am happily using my laptop with an encrypted home partition. I'm assuming based on this - [URL] - that it is using EncryptFS as the scheme.
if I were to misplace my laptop, how easy would it be for a forensics team to retrieve my data. Let's assume I have a fairly strong passphrase, such as BisZumBitterenEnd3. [URL]
View 5 Replies
View Related
May 3, 2010
I had some major problems after the recent Ubuntu upgrade and had to boot from a live cd. I have a separate /home partition, but it was encrypted using the default install encryption in the 9.10 install cd. How can I get to my files so I can back them up?
I have tried this but it did not work: http://ubuntuforums.org/showthread.php?t=1337693
View 9 Replies
View Related
May 16, 2011
I upgraded from ubuntu 9.10 to 11.04. During installation (Natty) I chosen the option to encrypt the home folder. After a day the system crashed. It was showing that disk is having health problems. If I boot from live cd then i cant access the home folder. When I tried to mount the home folder, it says "Reading directory: input/output error"
Because I used Karmic without problem I reinstalled the Karmic, then I can mount the home folder, but cant access it as it was encrypted.Now Karmic is installed. I tried to boot from Live CD of Natty and tried to mount /home folder, it says some super-block issues.How to access the files in the home folder?
View 4 Replies
View Related
Apr 27, 2011
I am currently downloading 44Gig of video files and I noticed that Transmission is reporting that I have downloaded 40.5Gigs already with +50MB corrupt.How do I correct the 50MB worth of corrupt data?
View 2 Replies
View Related
Jan 29, 2010
Well the title says it all. Royal screw-up! I accidentally formatted two Windows partitions inside a Pointsec encrypted hard drive using gparted from a liveCD (in USB). Is there a way to recreate these partitions? If not the whole partition, at least be able to recover everything inside My Documents.I ran TestDisk and it will not see any of the two partitions that existed in the drive.
View 1 Replies
View Related
Nov 26, 2010
I logged in to Recover Mode ("Drop to root shell prompt") this morning to do something. Naturally, I wanted access to my encrypted home folder.
The README file says to run ecryptfs-mount-private. However, that command returns an error:
"ERROR: Encrypted private directory is not setup properly."
This cannot be correct, because if I log in normally, I get my home folder without any problem.
How can I access my encrypted home folder when I boot via Recover Mode?
View 2 Replies
View Related
Oct 26, 2009
basically the situation I'm in is someone mistakenly expanded an NAS without unmounting the drive on the server. This corrupted the superblock and its apparent that all the backups are no good. The drive in question was expanded from about 800gigs to 1.8TBs, its done via an NAS.
At this point I'm most concerned about getting the files off the drive, I can deal with resetting the file system but I really need those files. This happened within a week of me joining this group so I'm kind of doing damage control here, backups were not taken of this particular drive.
View 1 Replies
View Related
Mar 29, 2010
I have heard of a linux based data recovery for hard drives (corrupt) its bootable and once loaded and booted it will scan for drives and show there contents and let you pick and choose which ones you would like to back up/ save to a disk so you can wipe a drive and keep your info but I cannot remember the name of it.
View 5 Replies
View Related
Oct 17, 2010
so I just installed Ubuntu 10.10 a couple of days ago and used my whole hard drive.Thing is, I decided that although I loved Ubuntu, I stll want to have dual-boot for some cases.. But now that the disks filesystem is not NTFS, Windows cannot regognise the disk as installable and cannot convert the filesystem. Gosh, Windows is a piece of junk, but I still need them for some occasions.
View 1 Replies
View Related
Jan 20, 2010
I have a external HDD with eSATA and USB connectors available. I want to use this HDD to store my backups. The HDD should be encrypted (my main system is as well).
So here is what I did so far:
1) I used the following code to create the encrypted LUKS partition with EXT3 Filesystem:
Code:
cryptsetup -c aes-xts-plain -s 512 luksFormat /dev/sdb1
cryptsetup luksOpen /dev/sdb1 luks
mkfs.ext3 /dev/mapper/luks
The system always hang when I executed the "mkfs.ext3..." command, so I switched the HDD from eSATA to USB and then it worked fine.
2) When I switched on the ext. HDD the first time, the drive was recognized automatically and Nautilus asked for the password. I typed it in as checked the checkbox to remember the password in the future. For the backup I use a nice script that I found in another forum, where I can define a mountpoint and then the script will check for previous backups and only make a incremental backup based of the latest version. The script also mounts the drive automatically. In order to always have the same mountpoint, I want to make an entry in the /etc/fstab using the UUID of the ext. HDD.
Whatever I tried, it doesn't work. What am I doing wrong? Here is my current /etc/fstab
Code:
# <file system> <mount point> <type> <options> <dump> <pass>
proc /proc proc defaults 0 0
# / was on /dev/mapper/ubuntu-root during installation
UUID=2ea47421-73ce-4c66-9606-8a1db81ae640 / ext3 relatime,errors=remount-ro 0 1
# /boot was on /dev/sda1 during installation
UUID=dbdeb793-1d4e-43ea-8986-7b37fdbc9674 /boot ext3 relatime 0 2
# /home was on /dev/mapper/ubuntu-home during installation
UUID=42702091-83e6-43eb-aad1-108f43eedf9d /home ext3 relatime 0 2
# swap was on /dev/mapper/ubuntu-swap during installation
UUID=e225bcf9-908b-4226-a963-6b02ee658df1 none swap sw 0 0
/dev/scd0 /media/cdrom0 udf,iso9660 user,noauto,exec,utf8 0 0
# Eintrag wegen iPhone
none /proc/bus/usb usbfs devgid=125,devmode=666,nodev,nosuid,noexec 0 0
# external HDD
UUID=913977f7-8fa6-416f-af79-b5f913b68f53 /media/backup-hdd ext3 noauto,users 0 0
I made the "none /proc/bus/usb..." entry because it was recommended to ensure correct behaviour of the iPhone. Not sure if I need it though.
I created the mountpoint with this command:
Code:
sudo mkdir /media/backup-hdd
Now it seems the mountpoints owner is not root - strange right?
Code:
2 4 drwxr-xr-x 3 michael michael 4096 2010-01-15 02:45 backup-hdd
How should I mount this drive correctly? It will be automounted as every USB device, but that should not be the case. I want the script to mount and unmount the drive.
View 2 Replies
View Related
Mar 4, 2010
I have a Hard Drive that has a corrupted file system and i have tried the usual MS Windows fixes, chkdsk and a number of recovery tools inc Dos recovery tools and failed.
The Drive is an MS Windows drive with an NTFS file system.
chkdsk scans and after several hours fixing numerous problems eventually gives up and fails to complete.
The directory "My Documents" contains several GB of data and displays that this is true. When trying to access the directory, access is denied because its corrupt. Using Windows and Dos recovery tools i can view the contents of the directory sometimes! but cannot copy out any of the data, the applications return messages saying no can do basically.
I would like to try to use Linux to recover the data.
Problem number one is i have never tried to add a hard drive to an existing Linux system before, how do i go about adding a new drive?
The 2nd problem is, is there a Linux application that i can use to attempt to repair and recover the corrupt data on this drive or more specifically in the "My Documents" directory.
View 7 Replies
View Related
Nov 13, 2010
Yesterday I ran an extremely dangerous command by mistake:
Acctually I intended to dump the iso to a usb disk. Soon I found the "of" is incorrect, but 1 second has passed...
Since everything happens in 1 second, only MBR and /dev/sda1 has been affected. The filesystem of sda1 is ext3.
So, can I get any luck trying to recover data from the broken partition?
View 10 Replies
View Related
Nov 30, 2010
i got stuck while booting my LINUX box.it looks likes filesystem(EXT3) currept.recover the filesystem or the altrnative to it. I have IMP data in my machine
View 1 Replies
View Related
Mar 2, 2010
I have an encrypted filesystem that I've decided I don't want encrypted anymore. Seems the easiest way to do this is simply reformat the filesystem, but I can't. If I try to do it in YaST2 I get either system error code -3005 (unknown) or -3008 (apparently in use). When I try to do it from the command line I get:
Code:
frylock:/home/joel # umount /dev/sdb5
umount: /dev/sdb5: not mounted
frylock:/home/joel # mkfs -t ext4 /dev/sdb5
mke2fs 1.41.9 (22-Aug-2009)
/dev/sdb5 is apparently in use by the system; will not make a filesystem here!
frylock:/home/joel #
It's unmounted, I don't know how to make it any less in use than that.I can't delete the partition because it's not the last logical partition in the extended partition.
View 9 Replies
View Related
Oct 16, 2015
My laptop setup is:
sda1: W7
sda2: FAT16
sda3: /boot
sda4: encrypted LVM with debian (everything besides /boot)
now I've re-installed W7 so grub was overwritten. I've tried the procedure which worked for me previously:booting with the netinst usb in rescue mode, choosing a root partition to mount, using grub-install to reinstall the grub:
Code: Select allmount /dev/sda3 /boot
grub-install /dev/sda
Now I'm on Jessie (stable), and this time this fails, and I am able to mount only sda3.grub-install doesn't exit so I'm assuming it has been replaced by `grub-installer'. also '/boot' doesnt exist so I created it manually.
Code: Select allmount /dev/sda3 /boot
grub-installer /dev/sda
The latter fails with
Code: Select all/dev/sda/proc not a directory
View 6 Replies
View Related
Nov 27, 2010
I've created encryption systems on servers, but nearly always I have stored the password somewhere on the machine itself. The file is always 0600 to the relevant user, but a systematic analysis of my system could easily find the scripts that invoke decryption and discover the password. (The most blatant example of this is mounting SMB shares with the "-o credential_file" option where both the username and password are plain-text. In the cases where I've used this, the security of the share hasn't particularly mattered.)
Soon I might be faced with storing "patient health information" (PHI in the healthcare world) whose privacy is heavily regulated by the provisions of the US law called HIPAA. I've been thinking about creating an encrypted partition to hold the PHI, but I need a highly fault-tolerant method for obtaining the key from a different machine than tha server itself. At first, I thought about running a script using scp and shared keys to copy the key from the remote, use it to decrypt the partition, then erase it. I'd like to be able to do this with a pipe; otherwise I'll write the key in a non-persistent location like /dev/shm.
I need more than one machine to make this work to ensure I can obtain the key when needed (like at boot). One solution is to place copies of the key on multiple servers and try each of them until I find it. A more elegant solution would place the key in a DNS TXT record. I suspect I could use LDAP for this as well, but OpenLDAP and I have never really been on speaking terms. So does this make sense? I presume I can write a bash script to do all this at boot. Most of what will be stored in this partition is the PostgreSQL database in /var/lib/pgsql and perhaps some other files.
My understanding of encrypted file systems is that they are only encrypted when unmounted. When mounted they must be as visible to the operating system as an unencrypted partition. I suppose you could apply encryption to every single disk transaction, but that would require knowing the key all the time, and would seem to add a lot of overhead.
View 1 Replies
View Related
Mar 1, 2010
How can I corrupt oracle data block manually using dd command from Linux?
View 2 Replies
View Related
May 4, 2010
Suppose I have a good backup of the / root filesystem. How do I recover the / root area? Suppose I have modified the root filesystem, perhaps I do an update some of the packages and regret it, and I want to get back to the system at the time of the backup. How do most linux people recover the root area of a system from a backup?
1) I wondered if I might put a System Rescue CD in and boot off it?
2) And then NFS mount the directory containing the backup? -In my case, I have made a good backup using rsync, to a directory elsewhere on the network.
3) And then, still booted off the System Rescue CD, mount the partition that contains the / root area in question?
4) Would I then clear or empty or delete the contents from the / root partition?
5) And then copy across all the files from the backup into the / root partition?
I ask these questions because of the (very nice) way linux OS is built entirely from packages... Am I being too complicated? (By comparison, I can see it is easy to recover user data.)If, instead, I simply recovered the backup straight onto the updated root filesystem, I wonder what it would look like if I then tried to verify it with "rpm -Va", for example? Surely, all the packages would fail the verification, because it would think it has a later version of each package from the update, but the actual files would have been overwritten by the earlier version from the backup?
View 14 Replies
View Related
