Re: ext4 undeletion question

["Michael B. Trausch" <mbt@zest.trausch.us>]

[-- Attachment #1: Type: text/plain, Size: 1337 bytes --]

On Tue, 28 Apr 2009 12:11:06 -0400
Theodore Tso <tytso@mit.edu> wrote:
> There is the program "ext3grep" which will look for older versions of
> the directory and inode table blocks in the journal.  This can work,
> but unfortunately I don't think it's been extended to understand about
> the ext4 extent data structure.

Eh.  Thanks for the mention... gave it a shot, but it seems to fail
nearly immediately:

Tuesday, 2009-Apr-28 at 13:21:41 - mbt@zest - Linux v2.6.29.1
Ubuntu Jaunty:[0-9/10014-0]:undel> sudo ext3grep --restore-all /dev/zestvg/home-retain-undelete
Running ext3grep version 0.10.1
WARNING: I don't know what EXT3_FEATURE_COMPAT_EXT_ATTR is.
ext3grep: ext3grep.cc:119: void run_program(): Assertion `be2le(journal_super_block.s_header.h_magic) == 0xc03b3998U' failed.
zsh: abort      sudo ext3grep --restore-all /dev/zestvg/home-retain-undelete

I guess that means it won't work on an ext4 fs.  :-)

I did create a snapshot of it using LVM (durr, I didn't think of that
before) so the FS is preserved as it was... I just don't know how to go
about digging through it to get the directory that I deleted out.
Hopefully I can figure that out before terribly long, as I am stuck
until I do...

	--- Mike

-- 
Don't fix bugs later; fix them now.
                            --- Steve Maguire

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 197 bytes --]