Re: undo rm deleteing /etc very urgent

From: d l (popgojp_at_yahoo.co.jp)
Date: 05/09/04

  • Next message: jsfedora_at_ks.clara.net: "Re: clearcase?" 
    Date: Sun, 9 May 2004 17:43:18 +0900 (JST)
To: For users of Fedora Core releases <fedora-list@redhat.com>

    To prevent overwriting those "free" sectors where /etc
    used to be, quickly dismount the parition containing /etc.
    Shutdown the machine if dismount is not possible.

    You can now either use dd to save the partition image for
    further investigation/data recovery. Or you can just plug
    that HDD to another machine, mount it as readonly and
    recover data there.

    --- Jeremy Brown <jeremy@cadre5.com> $B$+$i$N%a%C%;!<%8!'(B
    > issa rabba' wrote:
    >
    > >Dear all:
    > >
    > >Please I need help, by mistake I delete /etc
    > directory and I don't how can I
    > >undo deleting /etc, I still has connection to the
    > server, please if any one
    > >can help me....
    > >
    > >Note: I don't have backup 4 /etc direcoty
    > >
    > >
    > I'll go ahead and respond to your post with my very
    > generic and
    > unhelpful response, since you're probably on a time
    > constraint and no
    > one else seems to be answering (probably most are
    > asleep).
    >
    > My understanding is that when you delete files on
    > most Linux
    > filesystems, they aren't actually deleted, just
    > unlinked. It's possible
    > to restore some or all of these files by restoring
    > only the links (a
    > semi-trivial process, maybe). But once you start
    > writing data back to
    > the drive, there's probably little or no guarantee
    > that you won't
    > overwrite some or all of the space that /etc
    > occupied. So my first
    > suggestion would be to try to find an undelete
    > utility for whatever
    > filesystem /etc was stored on. After a quick google
    > I found this one
    > for ext2:
    >
    > http://twerner.debian.net/
    >
    > I make no claims as to whether or not this utility
    > will work. I've
    > never used it before.
    >
    > If you use reiserfs or some other filesystem, you'd
    > need to google and
    > find a different utility (assuming one exists for
    > your FS of choice).
    >
    > My other suggestion is to do what I did in the sole
    > situation where I
    > clobbered the /etc directory of a major production
    > machine (by
    > accidentally running "etc-update" on a Gentoo box I
    > was supposed to help
    > administer). And that is to grab the FC install
    > CDs, and install and
    > configure as quickly as possible as you can on an
    > alternative machine.
    > Most processes only read configuration files in /etc
    > on startup, so your
    > machine with trashed /etc might even be able to stay
    > alive while you get
    > another one together. It's not a pretty solution,
    > but it'll hopefully
    > minimize the damage done.
    >
    > Hope this helps.
    >
    > Jeremy
    >
    >
    > --
    > fedora-list mailing list
    > fedora-list@redhat.com
    > To unsubscribe:
    http://www.redhat.com/mailman/listinfo/fedora-list

    __________________________________________________
    Do You Yahoo!?
    http://bb.yahoo.co.jp/ 

    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: jsfedora_at_ks.clara.net: "Re: clearcase?"

    Relevant Pages

    • Re: Memory management on Sun Solaris
      ... Bernd Haug wrote: ... >>will not be written to swap, but are read again from the filesystem ... it removes the link to the inode from the directory. ... Overwriting is a different issue. ...
      (comp.unix.solaris)
    • Re: `Secure deletion in zfs
      ... typically by overwriting them multiple times with random junk ... Put support into the filesystem. ... delete any snapshots potentially holding blocks ... can't really do that multiple times easily). ...
      (comp.unix.solaris)
    • Re: OT: why no file copy() libc/syscall ??
      ... If you run out of space copying a file, ... >> errors while overwriting something in the middle of a file. ... Or a filesystem with snapshots, ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: reserving file space
      ... > that the space is taken from the filesystem without having to write ... blocks to the file without overwriting them, ... many file systems have support for that. ... using a generic block mapping approach. ...
      (comp.os.linux.development.system)