Undelete
Added by Tom Paine about 1 month ago
User just deleted a directory and 2 files in the directory via a SMB share and the most recent snapshot is two days ago.
Is there any way at all of recovering the last day's data? I'd be willing to pay.
Replies
RE: Undelete - Added by Linda Kateley about 1 month ago
I really don't think so. when you do a remove it does only remove the metadata, but the retrieving of the blocks is a master craft. There might be some zfs guru's out there.. but..it would be hugely costly(1000's to maybe 10's of thousands). you might want to ask out at zfs-discuss@opensolaris.org.
zdb would be the tool you would use.
are you using nexenta core or nexentastor?
RE: Undelete - Added by Tom Paine about 1 month ago
I was afraid of that - it's a raid-Z3 configuration on NexentaStor.
The data is worth about $500.
RE: Undelete - Added by Linda Kateley about 1 month ago
if your a power user, you might want to try and look at zdb a little..
the only advice i can give you is to change your snaps to daily :) or half day. snapshots aren't costly.
RE: Undelete - Added by Tom Paine about 1 month ago
After some not very fruitful searches and asking around I eventually had to admit defeat.
Might be an idea to suggest user sets up frequent snaps in the config wizard.
Refs:
- Pretty much the only detailed page on zdb I could find, and it says that without a file's DVA and size already recorded before deletion, you're out of luck.
- Last ditch attempt - asked question on serverfault.
RE: Undelete - Added by N B 19 days ago
There is a program called Recuva that runs under Windows, not sure whether there is a Linux derivative, whether you could run this under wine to recover your data or not...I don't know.