2

I was trying to recover some deleted files form my CentOS 7 VM which is live. but I am getting the below error. while entering the command debugfs -w /dev/mapper/centos-root

debugfs 1.42.9 (28-Dec-2013) /dev/mapper/centos-root: Bad magic number in super-block while opening filesystem

Is there any way to recover the deleted date.

Improve this question

1 Answer 1

Reset to default
2

Centos7 might have XFS as root partition instead of ext4, so debugfs won't work. Note that recovery chances are pretty slim if you haven't unmounted filesystem as soon as possible or made a dd(1) image of it to other place.

Your best bet would be to try TestDisk and PhotoRec (recovers more than just photos, though): http://www.cgsecurity.org/wiki/TestDisk

Or you could go the manual route if you remember part of file contents by grepping the disk image (would only work for text file you remember), like so:

http://linuxwebdev.blogspot.hr/2005/06/xfs-undelete-howto-how-to-undelete.html?m=1

Note in any case you'll waste a lot of time, and usually might be able to recover only parts of data or damaged data. If it is more than few files, the effort required might be very uneconomical.

Improve this answer
2
  • You are right I am having a XFS for /boot, is there a way to change XFS to ext4 for /boot. if yes then I can ask a new question. Commented Aug 16, 2016 at 2:13
  • @Mongrel safest way is probably to boot to rescue disk, backup files to another partition/disk, refomat as ext4 and restore data. Although there may be easier ways, see serverfault.com/questions/146123/… - note however that doing that doing that (either coversion or backup/restore) will mostly destroy your chances of recovering lost data. Commented Aug 16, 2016 at 8:31

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.