How to recover deleted file
 

i delete a file using rm -rf command

how do i recover this

with great difficulty.

i remember though there was an article about it in the linux gazette
google it.

Ouch. Is this the article in question?: http://linuxgazette.net/issue86/artime.html

There are a range of threads in these forums about recovering lost files.
In general - if this is on an ext2 fs there are "recover" utilities for your pleasure. If this is on a journalling fs like ext3 - you will have a tougher time of it. The file is all-but [tone=portentious]gorn[/tone].

The unix method is to grep through the partition for it.
http://www.linuxquestions.org/questi...t=recover+grep
http://www.linuxquestions.org/questi...d.php?t=428962
http://www.linuxquestions.org/questi...grep+partition

the linux gazette article was the unix method of grep-ing . its works sort of...

was a good few years ago though

sort-of is right. It is brilliant for anything text related or if you know your target. But a long arduous task for general file recovery... especially compressed, encrypted, or binary files. You really have to know your stuff, and it's hard to automate.

There are also a range of "forensic" distros around (another google search term) which can do better.

rm -rf is, of course, one of those commands you do not use. Data recovery is what the trash bin is for.

Some people make a trash directory for CLI use, and a script in their path called "can" or something. All "can <filename>" does is move the offending file to the trash directory. (Though you can also rig something to clear the trash directory when you logout or some other condition is met).