CentOS 5 Hardware :: Hard Disk Crash / Data Recovery In RAID1 Webhosting Server
Feb 1, 2011
We have had a hardisk crash in our RAID1 webhosting server running CentOS5 and Plesk. We first realized something was wrong when our main site didn't load but showed MySQL errors. We then found out that the system was in read-only state. Something that also happened the day before yesterday, but we could fix with a FSCK. Then the system worked well til around 18 hours later when it crashed with the same sympoms. So, we rebooted the server and wanted to do a filesystem check again. But the HDD wouldnt even load. It was gone. Unfortunatelly it was not realized that the second disk in the system was also not working any more for some time now. Fortunatelly we had our main site backed up externally though. So we could re-install a fresh box and mounted the two drives to the system. We checked the harddisk. One is practically empty (the older one), the other has almost only files in 'lost + found' but these are all "numbered", no real filenames or so.
I am student of MCS and working on final project. I am the user of windows xp. I am new in Linux. I am working on a project that titles "Hard disk data Recovery of ext2 and ext3 in linux". In windows, including dos.h and bios.h header files in program of c language I can send interrupt to bios and access most of the devices like parallel port, hard disks etc. But problem is that there is no bios.h and dos.h files in gcc. Now how can I access my hard drive using c program. How can I call int13h interrupt in linux or there is any other function in the linux to access the hard disk. In fact I want to access sectors of my hard disk using c language program. How can I do it?
I have two 80 GB IDE hard disk. I have create raid1 partition in both drive using [URL] ink. raid is working fine. But i have copy some data on one hard disk (md0) but this data is not autometically copy in second hard disk(md1). I want when data is write on one hard disk, this data autometically write in second hard disk.
After recovery from a disk crash, everything seems fine except that I have lost plasma. I have a backup. Is there a way to reload plasma from the backup? I can recover kde by reloading /home/.kde from the backup. But there is no .plasma file.
A while ago my harddrive kinda failed. I didnt notice untill I got "Grub error 17" one time when I was trying to boot my computer. The problem is not really that I couldnt log on to my computer, but rather that I have alot of important information on the computer I would hate to lose. At the time I used Ubuntu 8.04 and had reiserfs filesystem on the computer. I bought a new computer and decided to wait untill I could rescue the data before doing to much dmg to it. But I dont really remember if I tried something to fix it before I realised that it was the harddrive and bad sectors that made me get gruberror 17. Hopefully I didnt do anything.
Anyway. Now today I had some extra time, so I decided to dive in. I booted from a linux mint disk and used ddrescue to transfer all the rawdata over the network to an image file laying on an ext4 drive. Once there I used reiserfsck to try and repair the filesystem. After that i mounted the image file and tried to access the files. Thats where the probelms started. I could see the whole treestructure of the harddrive and everything seemed ok, but when i tried to open the files, none of the pictures, documents and so on could be opend, and when I tried to open stuff like MP3 files they played quite strange. Videofiles was really messy, kept changing resolution and was almost always just gray and green squares on the screen. I decided to use ddrescue and move the files from the image file and on to a clean disk. So when I was done I could mount the filesystem on the new disk, but with the same resault, so I did reiserfsck again, and when that didnt help I did a buildtree also. Still with the same resault. So I decided to investigate the data abit. Opening files at random trying to understand what had hapend. And I saw that some MP3 files (the easiest to open) was some kind of mixing between several difrent mp3 files. Some files wasnt even in the same folder, so it was probably just that the file pointer was pointing at the wrong data on the disk. I dont know how that works really, so I dont know how to go on.
So now to the question. How do I get the data back? Have I done something wrong, can I redo somethig? I still have the broken disk and can take data from it once again, but I want to wait to do that untill I really know what to do. I also still have the image file, and the disk with the copied data. I have a ubuntu 9.10 system at my disposal atm.
I'm running 10.04 LTS (64 bit) During a recent attempt at dual booting Windows 7, the Windows installer made a boot partition on the wrong drive, formatting the drive, and therefore destroying all my data.
The original partition was NTFS, and the new (unwanted partition) is NTFS.
Is there something in Linux I can do to recover the data that was there, or am I going to have to install Windows on yet another drive and use some Windows tools?
The data on this drive is extraordinarily important, containing ten years of digital photos, my source codes, and musical compositions (protools sessions etc).
I have an hp laptop with 2 hdd slots, both are sata. it came with a 320gb hdd with vista ultimate 64. i added another 320gb hard drive to my laptop and installed kubuntu on the second hard drive. Since vista was my primary hard drive, parts of grub were installed on it i.e. stage 1.5. And the rest was installed on the kubuntu hard drive. Because of that neither os would boot independently of one another.
I eventually got tired of kubuntu and in wanted to uninstall it. I formatted that disk. Now vista gave me grub errors, like I knew it would.I was going to fix the vista boot sector and mbr by running bootrec.exe off of the vista disc. But since I have an hp laptop, hp doesnt provide a recovery disc with just vista, it is an install of the factory image of the os plus software and therefore doesnt have the utilities I need to fix my problem.I ended up navigating to some sort of command line in the windows recovery environment and tried running it there, but no luck.
I tried navigating in the hp recovery environment, and accidently had vista start to reinstall itself on the drive, and actually I did that 3-4 times, each of which I stopped the recovery early on, within 30 seconds, but it had managed to mess up my partition table. I was wondering if there is some utilities in linux/ windows that will help me restore the partitions back the way they should be? I have done a data recovery with get data back for ntfs, and was pretty successful getting some stuff back, figures since the mft was screwed up.
So first of all I want to make an exact clone of the hard drive. Something like dd but just make an image file for now. Since there are no partitions on the drive I dont think I can use partimage, or drive image xml and I wonder if clonezilla will work. And I dont know how to test it without have to reload the image and wiping the drive in the process. I have imaged the drive with get data back but it does me no good cause I cannot restore that image back to the drive, or at least dont think I can.
Second I would like to see if I can recover the partition table , or mft that was over written. Here is a list of programs I can use for imaging or recovering. [URL]Third, since I have 2 320gb hard drives, one that is corrupted, and one that I took kubuntu off of and loaded vista with the recovery disks. Can I take the mbr, and partition table, or boot sector off of the working vista and move it to the broken 320 and fix it that way?
I have heard of a linux based data recovery for hard drives (corrupt) its bootable and once loaded and booted it will scan for drives and show there contents and let you pick and choose which ones you would like to back up/ save to a disk so you can wipe a drive and keep your info but I cannot remember the name of it.
The motherboard currently installed on my PC has a RAID Utility (Ctrl+I) at the startup that allow creating RAID1. But I already have a system installed with CentOS 5.4. In order to protect my data, I need RAID1. Can I add another Hard Drive now and have the data mirrored and synced onto both hard drives as if it was in RAID1 right from the beginning?
I accidentally formatted a 2TB drive of mine (big oops), but have recovered 2 of the 3 partitions using testdisk. My third partition is a LUKS encrypted partition. Testdisk managed to recover a piece of it, but it won't mount as most of it is unallocated. The partition originally occupied all space from sector 2,930,272,065 to the end of the disk -- sector 3,907,024,064. That is about 473 GBs. Currently, the partition only uses space from sector 2,930,272,065 to 2,930,288,129, about 7.84 MB.
The rest of the space is unallocated. Now what I need to do, is to expand the partition so that it occupies all the space that it used to. How would I do this? I cannot resize the partition, cause it would try to recreate the filesystem AFAIK and I don't want that, as it will fry my data. My data is not terribly important, but I would rather have it then not. I attached a screenie of kpartitionmanager. The partition in question is /dev/sdb2.
I wish openSUSE to supply a daemon, which uses the /dev/freefall to provide hard disk head crash protection. There is an example application in usr/src/linux/Documentation/hwmon/hpfall.c which might be used as a base for such a daemon and the needed modules (hp_accel and lis3lv02d) are present in kernel 2.6.31.
I have SLES10-SP3 running on an Intel SR1600URHS board with 3 hot-swap SATA disks configured using mdadm as Raid1 with hot spare. If I pull one of the active disks, all file i/o will stop for about 2.5 minutes after which it will start again and the raid array will be rebuilt using the spare disk. Is there any way I can reduce this 2.5 minutes of inactivity? I've tried setting /sys/block/sdX/device/timeout and /sys/block/sdX/device/retries to 1 for all disks, but this hasn't made any difference. The output from messages is:
12:11:56: ata2.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x2 frozen 12:11:56: ata2.00: cmd ea/00:00:00:00:00/00:00:00:00:00/a0 tag 0 cdb 0x1e data 0 12:11:56: res 40/00:03:00:00:20/00:00:00:00:00/b0 Emask 0x4 (timeout)
There is a disk 500 gb, it is broken on /boot and on /root and on /dev/sda1 and /dev/sda2. Whether prompt it is possible to redistribute a disk without loss of data namely it is necessary to make/boot and two equivalent on disk volume.
Recently I built a web server for my clients to host in house. After talking with the web developer they informed me that i needed a CentOS computer with Drupal for them to design the website. This is my first Linux install and after spending hours upon hours configuring the server with FTP, SSH, and configuring our DD-WRT router with proper port forwarding we turned it over to the web designers to start work on the website.
A month goes by and the website is almost done, at this point we go to make a full backup of the hard drive. Due to a hardware problem it fried the circuit board of the hard drive. After attempting to recover the files myself we opted to send it to a HD data recovery facility to recover the information. We have received back a DVD containing the 2GB's worth of data from the CentOS hard drive. It contained 2 folders one for each of the partitions. I can view and see all the files on my windows machine and it appears that all of the data was recovered successfully. I harbored some hope that i could simply reinstall CentOS with the same account information and then just drop the recovered files on top of the new installation and have it start working.
I then reinstalled CentOS on another hard drive in the same computer and used the same credentials for installation. After i successfully booting into CentOS i turned off the machine and connected the hard drive it to my Windows bench machine. After booting into Windows i was unable to browse the hard drive. After doing more research and installing Ext2fsd i was able to see the 2 partitions CentOS had just created, but only able to access the Boot partition. After more research i discovered the default installation of CentOS creates a Raw file type for the 2nd partition and that is why i am having issues reading it inside of Windows.
I then downloaded a copy of Knoppix to see if this would allow me to write the old files over the new ones. After booting up the CD i could only browse to the /boot drive(and im not even sure if this is Knoppix's Virtual /boot or my CentOS /boot).
My question is what would be the best steps to recovery for my scenario? Can the files be placed to the drive and have everything restored? Is the only way to recovery thru reinstalling all applications and reconfiguring from scratch? How difficult is Drupal DB to recover in this type of scenario?
We have a Wipro Net Power 8552 server on RAID 5 with Linux Advanced Server. The Databse is Oracle . Every time the reocovery is made the block corruption error gets changed. There are four hardisk in the Raid with 18 GB capacity of Quantum make. I want to make sure if any Utility is there in Linux to check the Harddisk if any Block corruption is there or Not.
When we copy a sector to a file like using dd command, the data in the file is of which format? and of which type of conversion is nesessary to see the data in read able formate. i have tryed the ASCII conversion in dd command but still the data is in un-readable format. and also tell that if i access hard disk sector's data using c language program and copy data to a file then which type of conversion should i do ?
I was dual booting Ubuntu 8.10 and Windows Vista on a Acer Aspire 5920. My laptop went for service and the company said they will give me a fresh laptop instead of the one I am using now for they cannot set it right.
When I plugged in my hard disk through an external cable onto a windows machine it detected only the data present (which is almost negligible in my case) in the vista partition. I would like to transfer all the data I have from hard disk at least the one in the Ubuntu 8.10 to my new laptop on which I plan to run Ubuntu. Can someone guide me on how to go about doing it? Also is it possible to transfer all the installed softwares so that they start running in the new laptop without any extra effort?
I'm a beginner + in debian (ie I know how to launch basic command under a shell), and I very new to configuration problem.I have a running perfectly file server for probably more than 2 years that I never touch. That's the debian problem, when it's unning, it's forever, no reboot at all.I recently bought 2 new sata drive 1TB5, that I add to my system by adding to my old system a SATA PCI board without any problem.But, one of these 3 month old drive is already dead.So I try to replace it and that's where problem started.....First I did a#mdadm --manage /dev/md1 --remove /dev/sdb1, of course without sucess because sdb is dead
#mdadm --detail /dev/md1 /dev/md1: Version : 00.90.03
Last week my server crashed. I'm trying to diagnose the cause.
This is the relevant error message in /var/log/messages:
I'm assuming that I can conclude, then, that apache/httpd was the cause of the memory leak?
Next, I've been tracking my memory usage. Using top, this is an average memory load level for my server:
I'd like to confirm if my understanding of this data is correct, because Plesk indicates that my memory usage is only 50% or less. (Though I have read a number of reports indicating that Plesk's measurements are frequently wrong.)
Top says: Of the 2,073,156K total memory, 1,982,572K (95.63%) is being used, 90,584K (4.37%) is free. Of that sum, 421,948K (20.35%) are being used as buffers. Additionally, of the 2,096,472K of Swap, 60K is used, and 887,700K (42.34%) is cached.
My questions: Is my memory actually being 95% used? Or is the buffered quantity (20.35%) not a use of physical/virtual memory? (i.e. is it disk usage?) Does the amount of cached Swap influence the percentage of physical/virtual memory being used?
In other words, who is correct? Plesk says I'm using 40-50% of my memory, whereas top says 85-95%.
I learned a couple of days ago why you should do regular backups. Left my laptop working for the day in hot weather. When I came back it had crashed. On reboot it no longer booted up. I could still access the BIOS and boot from alternative media but not from the hard drive. The laptop tried to access the hard disk for a couple of minutes (hard drive light was blinking) and then failed. I made an ubuntu live usb stick and am currently working from there, trying to access my hard drive so I could image my data on another disk before sending the laptop for repairs. All my data is on that disk including my passwords and the password for this site conveniently so I had to register a new account to post this thread.
The laptop is IBM Thinkpad X41. The hard drive is accessed during when boot options are presented, again when the live cd boots up and determines the hardware available and also when manually probing for hard disks using the script below. The hard disk however does not show up in dev. If I could get so far to get it there, I could use dd_rescue to image it away. My hope lies in that the drive still spins up and is accessed producing error messages, however indicating that the system still knows it exists. Excerpt from dmesg concerning the drive:
Is it possible to mount a 2nd hard disk without erasing the data that is already on it? If so, what command must I enter. The system recognizes that the disk is there, I just can't access the data because it hasn't been mounted.
I have 2 hard disks and all together I created 6 partion in it.On primary I installed Windows XP and REST 5 partions were having data.From Second hard disk ,I copied all the first partion data to another partions and installed Red Hat 7.It took only 3 GB all togethr for Linux Distribution.Now I need to fetch my Windows data back.I logged from the Windows XP disk and I could see the second disk through disk managemnt .But it was showing "Unhelathy".But I will not be able to retrive the data.So can Anyone give soln for this.
Not sure on what is going on here. The server is RAID1 through hardware RAID. It was running an unusual high load so I rebooted it. Now it won't boot up. I am getting these errors after the CentOS boot screen:sda: Current [descriptor]: sense key: Medium ErrorAdd.Sense: Address mark not found for data field
end_request: I/O error, dev sda, sector 3040555357 device-mapper: raid1: A read failure occurred on a mirror device. device-mapper: raid1: All sides of mirror have failed.
My primary drive is 250GB and has the root, home and var (I'd read it's good to put var on a separate partition for MythTV which I'm planning on doing) on separate partitions. I have a second 1TB drive that I'll be using to backup the 250GB drive and also host less critical data. I've created two partitions on this drive, one 250GB and the other covering the rest of the drive. I'd like to move the Videos directory out of Home on the 250GB onto the 1TB drive but can't find a definitive way of doing this. Should I just follow this guide for moving the home folder to a new partition? Next question is when performing a backup of the 250GB drive how do I make sure it's going to the 250GB partition on the 1TB drive? Can the different partitions be mounted separately?