centos误删文件如何恢复文件数据

您所在的位置：网站首页 › xfs误删文件恢复 › centos误删文件如何恢复文件数据

centos误删文件如何恢复文件数据

2024-03-21 07:59| 来源: 网络整理| 查看: 265

「这是我参与11月更文挑战的第4天，活动详情查看：2021最后一次更文挑战」

@TOC

前言

提示：这里主要介绍centos误删文件如何恢复文件数据的情况，视频以xfs为例，博文会讲解xfs和ext4分区类型。

提示：以下是本篇文章正文内容，下面案例可供参考

一、查看分区类型

我们创建的centos对应的每个分区都有不同类型，可以通过以下命令进行查看，不同的分区类型恢复的命令也不相同，本文以xfs分区为例，作为演示，附带视频讲解。

df -T

xfs分区在这里插入图片描述 ext4分区

二、使用centos7软件恢复工具extundelete作为文件恢复 1.安装extundelete

下载依赖包：

yum install e2fsprogs-devel e2fsprogs e2fsprogs-libs 2.上传extundelete安装包到自定义目录下面

百度网盘链接：pan.baidu.com/s/1UNS3TJxm… 提取码：d9sb

这里我是去到/usr/local目录下面创建了一个software的目录，将安装包通过WinSCP上传上去了

3.解压安装包

在/usr/local/software目录下解压安装包

tar -jxvf extundelete-0.2.4.tar.bz2 4.进到解压后的安装包目录下面执行命令 yum -y install gcc yum -y install gcc-c++ cd extundelete-0.2.4 ./configure make make install which extundelete 5.创建data目录和deletefile文件 cd / mkdir /data cd /data touch deletefile 6.（xfs分区的）

备份命令

xfsdump -f /tmp/dump_data /data -> dump_data -> media0

出现这个xfsdump: Dump Status: SUCCESS说明备份成功了

6.（ext4分区的）

查看删除目录

/usr/local/bin/extundelete --inode 2 /dev/sda2 NOTICE: Extended attributes are not restored. WARNING: EXT3_FEATURE_INCOMPAT_RECOVER is set. The partition should be unmounted to undelete any files without further data loss. If the partition is not currently mounted, this message indicates it was improperly unmounted, and you should run fsck before continuing. If you decide to continue, extundelete may overwrite some of the deleted files and make recovering those files impossible. You should unmount the file system and check it with fsck before using extundelete. Would you like to continue? (y/n) y Loading filesystem metadata ... 285 groups loaded. Group: 0 Contents of inode 2: 0000 | 6d 41 00 00 00 10 00 00 e2 b2 6a 61 66 b2 6a 61 | mA........jaf.ja 0010 | 66 b2 6a 61 00 00 00 00 00 00 13 00 08 00 00 00 | f.ja............ 0020 | 00 00 08 00 22 00 00 00 0a f3 01 00 04 00 00 00 | ...."........... 0030 | 00 00 00 00 00 00 00 00 01 00 00 00 26 24 00 00 | ............&$.. 0040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0050 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0060 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0070 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0080 | 1c 00 00 00 d0 7f eb 7d d0 7f eb 7d 00 53 f7 34 | .......}...}.S.4 0090 | a2 be 68 61 00 00 00 00 00 00 00 00 00 00 02 ea | ..ha............ 00a0 | 07 06 44 00 00 00 00 00 1c 00 00 00 00 00 00 00 | ..D............. 00b0 | 73 65 6c 69 6e 75 78 00 00 00 00 00 00 00 00 00 | selinux......... 00c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 00d0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 00e0 | 00 00 00 00 73 79 73 74 65 6d 5f 75 3a 6f 62 6a | ....system_u:obj 00f0 | 65 63 74 5f 72 3a 72 6f 6f 74 5f 74 3a 73 30 00 | ect_r:root_t:s0. Inode is Allocated File mode: 16749 Low 16 bits of Owner Uid: 0 Size in bytes: 4096 Access time: 1634382562 Creation time: 1634382438 Modification time: 1634382438 Deletion Time: 0 Low 16 bits of Group Id: 0 Links count: 19 Blocks count: 8 File flags: 524288 File version (for NFS): 0 File ACL: 0 Directory ACL: 0 Fragment address: 0 Direct blocks: 127754, 4, 0, 0, 1, 9254, 0, 0, 0, 0, 0, 0 Indirect block: 0 Double indirect block: 0 Triple indirect block: 0 File name | Inode number | Deleted status . 2 .. 2 lost+found 11 boot 2097153 dev 1179649 proc 1835009 run 1966081 sys 131073 etc 1310721 root 1441793 tmp 262145 var 393217 data 1048577 usr 1572865 bin 17 sbin 16 lib 13 lib64 15 home 524289 media 1703937 mnt 655361 opt 786433 srv 917505

可以找到data 1048577

/usr/local/bin/extundelete --inode 1048577 /dev/sda2 NOTICE: Extended attributes are not restored. WARNING: EXT3_FEATURE_INCOMPAT_RECOVER is set. The partition should be unmounted to undelete any files without further data loss. If the partition is not currently mounted, this message indicates it was improperly unmounted, and you should run fsck before continuing. If you decide to continue, extundelete may overwrite some of the deleted files and make recovering those files impossible. You should unmount the file system and check it with fsck before using extundelete. Would you like to continue? (y/n) y Loading filesystem metadata ... 285 groups loaded. Group: 128 Contents of inode 1048577: 0000 | ed 41 00 00 00 10 00 00 98 b3 6a 61 88 b3 6a 61 | .A........ja..ja 0010 | 88 b3 6a 61 00 00 00 00 00 00 03 00 08 00 00 00 | ..ja............ 0020 | 00 00 08 00 06 00 00 00 0a f3 01 00 04 00 00 00 | ................ 0030 | 00 00 00 00 00 00 00 00 01 00 00 00 20 20 40 00 | ............ @. 0040 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0050 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0060 | 00 00 00 00 00 1c 85 44 00 00 00 00 00 00 00 00 | .......D........ 0070 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ................ 0080 | 1c 00 00 00 00 08 6b d0 00 08 6b d0 14 06 2c a7 | ......k...k...,. 0090 | 66 b2 6a 61 d0 76 ae 7d 00 00 00 00 00 00 02 ea | f.ja.v.}........ 00a0 | 07 06 3c 00 00 00 00 00 23 00 00 00 00 00 00 00 | ..

【本文地址】

centos误删文件如何恢复文件数据

centos误删文件如何恢复文件数据

今日新闻

推荐新闻