lost+found recovery

markooffoo · 07-15-2004, 11:40 AM

I've just lost about 6GB of production data. The system failed to boot (root partition failed mounting) so i ran e2fsck -y on it. Many errors messages later, I mounted the fs only to see no structure left at all. All the data appears to be in "lost+found".

Is it possible to automatically recover everything? Is there a better place where I should be asking this question?

Thank you,
Mark

free_ouyo · 07-15-2004, 12:15 PM

Hi,

Here some explanations about lost+found :
http://www.tldp.org/LDP/Linux-Filesy...lostfound.html

If you have some problems recovering the data's in the lost+found, you can try e2salvage that you can find at :
http://e2salvage.sourceforge.net/
http://www.sleuthkit.org/

If you need to recover specific files (jpeg, mp3, ...) you can try some recover tools :
http://foremost.sourceforge.net/
http://jbj.rapanden.dk/magicrescue/

If you have enough free space on a partition, I recommend you to backup (dd) the partition you need to recover.

I hope this will help you.

Free_ouyo

markooffoo · 07-15-2004, 12:25 PM

Thanks for the reply.

However, since SO much data is lost I really can't afford to manually recover each file. Does anybody know how to automate lost+found recovery. And a more important question... any idea why e2fsck would stick my whole FS in lost+found?

Thanks again,
Mark