linux恢复删除文件(慎用)

Posted on Edited on Views:

1.卸载分区，挂载只读模式

fuser -v -m /data  #查看正在使用的杀掉
umount /data   
mount -r -n -o remount /data
mount -o remount,ro /dev/partition

2.extundelete-0.2.4安装

yum install e2fsprogs-devel

./configure
make 

./extundelete /dev/sdb1 –restore-all
 ./extundelete /dev/sdb1 –restore-file /data/sh/active.awk
 ./extundelete /dev/sdb1 –restore-directory /data/s

3.恢复被删除文件

#默认恢复保存的文件夹RECOVERED_FILES

#对整个分区恢复
extundelete /dev/sda4 --restore-all
--restore-file, --restore-files, or --restore-directory