Hi Guys, I am in serious strife and I could really use some advice. Scenario: 2 x 120Gb HDD hda1 - reiserfs SuSE 10.1 \ hda2 - reiserfs SuSE 10.1 \home hda3 - FAT32 (No Windows - just common storage) hdb1 - swap hdb2 - reiserfs SuSE 9.3 I wanted to check out 10.1, so I wiped the original Windows partition on hda and installed the default 10.1 options on hda1 & 2. After reading the many negative postings here and my own disappointment, I was about to ditch 10.1 in the too hard basket when I stumbled on Ralph Ellis's post about the "packagemanagement-update-test" fix. So I thought "What the heck" I've got nothing to loose and "bingo" it worked. My previous stuffing around had left me with a fairly crappy user configuration, so I created a dummy user, switched to root and attempted to deleted my original 10.1 user account, with delete user data checked :_(( What I forgotten was that I had copied some of my 9.3 home stuff over to my 10.1 home directory and I now have 2 completely empty partitions (namely hda2 - FAT32 and hdb2 reiserfs). I am not that bothered about the 9.3 stuff that was on hdb2 (anything of importance was backed up), but there were a few really important things on the FAT32 partition that I would, if possible, like to recover. Although I have never used (or needed) it before, I am aware that there is recovery software out there. Can anyone here suggest or recommend a package (open source or commercial, I don't care) that might help get me out of this predicament. Thanks in advance. Dave
On Wednesday 31 May 2006 07:17, David Barton wrote:
Although I have never used (or needed) it before, I am aware that there is recovery software out there. Can anyone here suggest or recommend a package (open source or commercial, I don't care) that might help get me out of this predicament.
Hi Dave, One possibility: I think 'mc' can recover 'deleted' files in certain situations. Open a shell, type 'mc' and navigate to the partition containing the data. Just take care not to write anything to that partition until you've got what you want off of it. regards, Carl
On Wednesday 31 May 2006 07:29, Carl Hartung wrote:
One possibility: I think 'mc' can recover 'deleted' files in certain situations. Open a shell, type 'mc' and navigate to the partition containing the data. Just take care not to write anything to that partition until you've got what you want off of it.
Addendum: From my notes, it looks like 'mc' can undelete files on ext2/ext3 filesystems. I don't know about fat32. But there *are* recovery tools available. Check out this link: http://www.porcupine.org/forensics/tct.html regards, Carl
On Wed, 2006-05-31 at 07:38 -0400, Carl Hartung wrote:
On Wednesday 31 May 2006 07:29, Carl Hartung wrote:
One possibility: I think 'mc' can recover 'deleted' files in certain situations. Open a shell, type 'mc' and navigate to the partition containing the data. Just take care not to write anything to that partition until you've got what you want off of it.
Addendum:
From my notes, it looks like 'mc' can undelete files on ext2/ext3 filesystems. I don't know about fat32. But there *are* recovery tools available. Check out this link:
http://www.porcupine.org/forensics/tct.html
regards,
Carl
Thanks for the pointer Carl. At first glance, it looks like it may be a bit beyond my skills, but I will check it out in more detail. Regards Dave
Apologies to Carl for sending this direct, instead of to the list. On Wed, 2006-05-31 at 07:29 -0400, Carl Hartung wrote:
On Wednesday 31 May 2006 07:17, David Barton wrote:
Although I have never used (or needed) it before, I am aware that there is recovery software out there. Can anyone here suggest or recommend a package (open source or commercial, I don't care) that might help get me out of this predicament.
Hi Dave,
One possibility: I think 'mc' can recover 'deleted' files in certain situations. Open a shell, type 'mc' and navigate to the partition containing the data. Just take care not to write anything to that partition until you've got what you want off of it.
regards,
Carl
Thanks Carl, but it appears that 'mc' can only do this with ext2fs and I need to recover from fat32 & reiser. No I am not going write to either of those 2 partitions. In fact I am not going to touch that box until I am ready to attempt some kind of recovery, or reformat :_( the whole flaming thing. Regards Dave
On Wednesday 31 May 2006 14:01, Dave Barton wrote:
Apologies to Carl for sending this direct, instead of to the list.
On Wed, 2006-05-31 at 07:29 -0400, Carl Hartung wrote:
On Wednesday 31 May 2006 07:17, David Barton wrote:
Although I have never used (or needed) it before, I am aware that there is recovery software out there. Can anyone here suggest or recommend a package (open source or commercial, I don't care) that might help get me out of this predicament.
One possibility: I think 'mc' can recover 'deleted' files in certain situations. Open a shell, type 'mc' and navigate to the partition containing the data. Just take care not to write anything to that partition until you've got what you want off of it.
Thanks Carl, but it appears that 'mc' can only do this with ext2fs and I need to recover from fat32 & reiser. No I am not going write to either of those 2 partitions. In fact I am not going to touch that box until I am ready to attempt some kind of recovery, or reformat :_( the whole flaming thing.
Recovery from FAT32 *is* possible. I did that once for my sister. Her ex-boyfriend trashed her HD; fornutately the nitwit did a quick format on W98 or so, and I was able to recover most of the files. The proggy was: GetDataBack for FAT 2.20 (there's an NTFS version too) http://www.runtime.org/ Alas it runs on XP. Maybe superfluous: * remove your HD if possible until you are ready, or do not use the partition in question. * make a backup of the HD, or the partition *first*, e.g.: dd if=/dev/hda of=hda.img or dd if=/dev/hda21 of=hda21.img * operate on the HD *or* on the copy, so you can restore from the other if needed. Cheers, Leen
On Wed, 2006-05-31 at 15:33 +0200, Leendert Meyer wrote:
On Wednesday 31 May 2006 14:01, Dave Barton wrote:
Apologies to Carl for sending this direct, instead of to the list.
On Wed, 2006-05-31 at 07:29 -0400, Carl Hartung wrote:
On Wednesday 31 May 2006 07:17, David Barton wrote:
Although I have never used (or needed) it before, I am aware that there is recovery software out there. Can anyone here suggest or recommend a package (open source or commercial, I don't care) that might help get me out of this predicament.
One possibility: I think 'mc' can recover 'deleted' files in certain situations. Open a shell, type 'mc' and navigate to the partition containing the data. Just take care not to write anything to that partition until you've got what you want off of it.
Thanks Carl, but it appears that 'mc' can only do this with ext2fs and I need to recover from fat32 & reiser. No I am not going write to either of those 2 partitions. In fact I am not going to touch that box until I am ready to attempt some kind of recovery, or reformat :_( the whole flaming thing.
Thanks Leendert,
Recovery from FAT32 *is* possible. I did that once for my sister. Her ex-boyfriend trashed her HD; fornutately the nitwit did a quick format on W98 or so, and I was able to recover most of the files.
The proggy was:
GetDataBack for FAT 2.20 (there's an NTFS version too)
Alas it runs on XP.
I purchased a licence for GetDataBack for FAT V3.03. Unfortunately, it's recovery algorithm was too efficient, because it found lots of bits and pieces from an old W2K installation previously installed on the partition, but only a few of the files I really wanted to recover. I bought R-Undelete (about a third of the price of GetDataBack) and I have now recovered 100% of all the deleted files i wanted from the FAT32 partition.
Maybe superfluous: * remove your HD if possible until you are ready, or do not use the partition in question. * make a backup of the HD, or the partition *first*, e.g.: dd if=/dev/hda of=hda.img or dd if=/dev/hda21 of=hda21.img * operate on the HD *or* on the copy, so you can restore from the other if needed.
I am about to take a shot at recovering files from one of the reiser partitions on the same disk. For this I am going to follow your tip about using dd to make a backup image. I understand how to create the image, but could you (or someone) tell me how to restore from the image if it should be necessary. Thanks in advance. Dave -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Friday 09 June 2006 02:12, Dave Barton wrote:
* make a backup of the HD, or the partition *first*, e.g.: dd if=/dev/hda of=hda.img or dd if=/dev/hda21 of=hda21.img
I am about to take a shot at recovering files from one of the reiser partitions on the same disk. For this I am going to follow your tip about using dd to make a backup image. I understand how to create the image, but could you (or someone) tell me how to restore from the image if it should be necessary.
'if' means in-file, 'of' means out-file. Just swap the filenames: dd of=/dev/hda if=hda.img or dd of=/dev/hda21 if=hda21.img Works only if you write it to the disk where it came from. 'dd --help' and 'man dd' might also be usefull. ;P Cheers, Leen -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2006-06-09 at 09:41 +0200, Leendert Meyer wrote:
about using dd to make a backup image. I understand how to create the image, but could you (or someone) tell me how to restore from the image if it should be necessary.
'if' means in-file, 'of' means out-file. Just swap the filenames:
dd of=/dev/hda if=hda.img or dd of=/dev/hda21 if=hda21.img
Works only if you write it to the disk where it came from.
Otherwise, just make a standard file copy of everything in the partition. Or a compressed one. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFEiV90tTMYHG2NR9URAnhxAJ920zyqtjcvxK15XEjFMmUcne5kNgCggnWl k8+9iT3pSfjlY2Ls1rJWljs= =Y99S -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Fri, 2006-06-09 at 13:45 +0200, Carlos E. R. wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
The Friday 2006-06-09 at 09:41 +0200, Leendert Meyer wrote:
about using dd to make a backup image. I understand how to create the image, but could you (or someone) tell me how to restore from the image if it should be necessary.
'if' means in-file, 'of' means out-file. Just swap the filenames:
dd of=/dev/hda if=hda.img or dd of=/dev/hda21 if=hda21.img
Works only if you write it to the disk where it came from.
Thanks Leen, man dd does not give much insight how this works and like most man files is only really useful if you are already have a reasonable understanding of how the command works. As it turned out I can now delete the .img file, because I have successfully recovered the deleted data from the original partition. Again, many thanks for the pointers.
Otherwise, just make a standard file copy of everything in the partition. Or a compressed one.
Thanks for the suggestion Carlos, but I think you missed the earlier parts of this thread. A standard file copy was not possible, because the dd .img file was a backup of a partition where all the files had been deleted. Regards Dave -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2006-06-09 at 22:22 +1000, Dave Barton wrote: ...
Thanks for the suggestion Carlos, but I think you missed the earlier parts of this thread. A standard file copy was not possible, because the dd .img file was a backup of a partition where all the files had been deleted.
No, but I forgot why you had made the image O:-) - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFEiYM8tTMYHG2NR9URAhXxAKCPDYqArd7VPlRfE0p5XNG4M4qayACfRTbo ruyfLe9SS1rQM9spzV89J/I= =LEtj -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
Attempting to add AppArmor for a program running on SuSE 10.0/X86_64 Purchased, boxed set) generates the following error message. "The version of AppArmor that you are running does not allow the creation of this profile. Please contact Novell sales for upgrade options for AppArmor." Unfortunately sales@novell.com bounces, local Novell sales rep is not answering email, and I can find nothing about this message other than the vague instruction to contact Novell for "upgrade options". Does anyone know what is going on? Is the version of AppArmor indeed so crippled that it will not generate profiles? Norm Mackey -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
On Friday 09 June 2006 16:01, Norm Mackey wrote:
Attempting to add AppArmor for a program running on SuSE 10.0/X86_64 Purchased, boxed set) generates the following error message.
Hi Norm, The announcement from earlier this year on SLE: On Tuesday 10 January 2006 12:36, Andreas Jaeger wrote:
FYI: Novell has put AppArmor today into the open. AppArmor is an application security tool designed to provide a highly secure yet easy to use security framework for your applications, for further details check:
http://www.opensuse.org/Apparmor
The next update of FACTORY will contain the AppArmore packages - as well as 10.1 Beta1 which will be released next week,
Andreas
IOW, the version supplied with 10.0 was restricted but the version shipping with 10.1 is not. hth & regards, Carl -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Friday 2006-06-09 at 16:33 -0400, Carl Hartung wrote:
IOW, the version supplied with 10.0 was restricted but the version shipping with 10.1 is not.
The version for 10.0 was opened last month. Crispin Cowan (Novell) published a "darix.pem" file for that, and it is probable a YOU update fixing it was posted: they were thinking on how to do it. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFEigDRtTMYHG2NR9URAkgHAJ92e+bXpAW9c1EDTBMC3Umhfcf1QgCcC1sT BB2QVRXSsbJQ01NfYv54VSg= =S/Dy -----END PGP SIGNATURE----- -- Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The Wednesday 2006-05-31 at 22:01 +1000, Dave Barton wrote:
Thanks Carl, but it appears that 'mc' can only do this with ext2fs and I
Correct. Posibly also ext3.
need to recover from fat32 & reiser. No I am not going write to either of those 2 partitions. In fact I am not going to touch that box until I am ready to attempt some kind of recovery, or reformat :_( the whole flaming thing.
The reiserfs you may consider a loss; but you might consider asking at http://www.namesys.com/ for paid suport (they are the reiserfs developpers). Or googling, perhaps. (no mention in their FAQ of the word "delete" or "erase". There are hits on their mail list, but for reiser4; an answer posted there by Hans Reiser sends to the support page). As for FAT32, yes, it is doable, and easy enough: there must be hundreds of utilities out there, share/pay/freeware. Even MsDos has an undelete/unformat somewhere. In the past I have used Norton Utilities and PCTools (central point software) with good results; those results are more reliable if the disk wasn't fragmented, or/and if you run one of those gadgets to help in this situations, by maintaining snapshots of the system areas of the disk, for instance. Notice that unformat is also doable (for HDs) and different. - -- Cheers, Carlos Robinson -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Made with pgp4pine 1.76 iD8DBQFEfaUFtTMYHG2NR9URAvxKAJ0UouPnC/7892TtSNm+jzJMzLYvDgCfTdz+ 8ZitKvKOEi4iXvUVuyh6U2A= =KHbo -----END PGP SIGNATURE-----
participants (6)
-
Carl Hartung
-
Carlos E. R.
-
Dave Barton
-
David Barton
-
Leendert Meyer
-
Norm Mackey