LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 02-21-2023, 11:08 PM   #1
sofasurfer
Member
 
Registered: Oct 2003
Posts: 252

Rep: Reputation: 20
OOPS! Can I retrieve a snapshot deleted from back-in-time backup tool?


I deleted the wrong snapshot from back-in-time backup. Is there a way to retrieve it?
 
Old 02-21-2023, 11:41 PM   #2
Brains
Senior Member
 
Registered: Apr 2009
Distribution: All OS except Apple
Posts: 1,591

Rep: Reputation: 389Reputation: 389Reputation: 389Reputation: 389
Depends on the file system type the snapshot was stored on.

If it was ext4...delete is delete. But likely still exists if you haven't done any big writes to the drive.

You can try photorec which is part of testdisk to scour the partition for files by type, or data carvers like foremost that will grab everything but the names, files found are typically named by the offset sector of the drive where it starts or something. Since you have other snapshots you should be able to figure out it's size (more or less), might be easy to figure out which file it would be if found. Sleuthkit is a forensics tool, might be able to get list of files by size, haven't used it in a long time.


Typically it's best to do this from a live CD in read only mode and send results to another physical drive for best performance.
 
Old 02-24-2023, 04:05 AM   #3
remmilou
Member
 
Registered: Mar 2010
Location: Amsterdam
Distribution: MX Linux (21)/ XFCE
Posts: 212

Rep: Reputation: 69
Quote:
Originally Posted by sofasurfer View Post
I deleted the wrong snapshot from back-in-time backup. Is there a way to retrieve it?
If your FS was EXT(3 or 4), I would suggest to try R-Linux (https://www.r-studio.com/free-linux-recovery/) It's not open source, but it is free. The free version works only on EXT FS.
This gives you a very good chance to recreate the whole directory and all the file names. Although I normally prefer Photorec, this might be the rare occasion wher R-Linux gives you better usable results.
Very easy GUI.
Do not install on the disk you want to carve of course...!
 
Old 02-24-2023, 06:45 AM   #4
syg00
LQ Veteran
 
Registered: Aug 2003
Location: Australia
Distribution: Lots ...
Posts: 21,130

Rep: Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121Reputation: 4121
Quote:
Originally Posted by sofasurfer View Post
I deleted the wrong snapshot from back-in-time backup. Is there a way to retrieve it?
No.

It reportedly uses hardlinks for (so called) backups. Once they're gone, they're gone. New files (in the backup) may be retrievable as per above, but that is all. Why do you care ?. What is potentially missing that you care about ?.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
BIT (back-in-time) backup snapshot removal sofasurfer Linux - Software 0 10-12-2021 05:44 AM
[SOLVED] snapshot what is a good snapshot app or whatever it takes BW-userx Linux - Hardware 2 06-18-2019 05:54 PM
[SOLVED] How to use the Backup Tool to backup only files that have been modified, remove deleted and added files scottm7 Linux - Newbie 3 04-17-2017 11:07 AM
How to take a Snapshot of a KVM at Location A and Restore that Snapshot at Location B LinuxRSA Linux - Virtualization and Cloud 4 06-22-2016 11:59 AM
Oops... I Accidentally Deleted 1.3TB of Data -- Hoping I Can Get It Back bassmadrigal Slackware 9 05-05-2012 06:39 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 03:23 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration