restore deleted file on linuxos

Rainly2000

已于 2023-05-07 22:40:01 修改

阅读量450

点赞数

文章标签： linux 数据库服务器

于 2023-05-07 22:37:27 首次发布

本文链接：https://blog.csdn.net/lyzchengxuyuan/article/details/130549359

版权

TestDisk is a powerful data recovery tool that can be used to recover deleted files on Linux. Here’s how to use TestDisk to restore a deleted file:

Install TestDisk: You can install TestDisk on your Linux system using your distribution’s package manager. For example, on Ubuntu, you can run the command sudo apt-get install testdisk to install it.
Launch TestDisk: You can launch TestDisk from the terminal by running the command sudo testdisk. This will launch a text-based user interface.
Select the disk: Use the arrow keys to select the disk that contains the deleted file and press Enter.
Select the partition: Select the partition on which the deleted file was located and press Enter.
Choose “Advanced”: On the next screen, select “Advanced” and press Enter.
Select the file system: Select the file system used by the partition (e.g., ext4, NTFS, etc.) and press Enter.
Select the partition table type: Select the partition table type used by the disk (e.g., Intel, EFI GPT, etc.) and press Enter.
Analyze the partition: On the next screen, select “Analyse” and press Enter. This will analyze the partition and display any partitions or files that can be recovered.
Select the deleted file: Use the arrow keys to navigate to the deleted file and press the “c” key to copy it to a new location. You will be prompted to select a destination directory.
Quit TestDisk: Once the file has been recovered, you can quit TestDisk by selecting “Quit” and pressing Enter.

Note that TestDisk can recover deleted files only if the data has not been overwritten. If the file has been partially overwritten, TestDisk may not be able to recover it completely.

For example,

here’s an example of how to use TestDisk to recover a deleted file on a Linux system:

Launch TestDisk: Open a terminal and type sudo testdisk to launch TestDisk with root privileges.
Select the disk: Use the arrow keys to select the disk that contains the deleted file and press Enter.
Select the partition: Select the partition on which the deleted file was located and press Enter.
Choose “Advanced”: On the next screen, select “Advanced” and press Enter.
Select the file system: Select the file system used by the partition (e.g., ext4, NTFS, etc.) and press Enter.
Select the partition table type: Select the partition table type used by the disk (e.g., Intel, EFI GPT, etc.) and press Enter.
Analyze the partition: On the next screen, select “Analyse” and press Enter. This will analyze the partition and display any partitions or files that can be recovered.
Select the deleted file: Use the arrow keys to navigate to the deleted file and press the “c” key to copy it to a new location. You will be prompted to select a destination directory.

For example, let’s say we have a file named “important_document.txt” that was deleted from the home directory of the user “johndoe” on an ext4 file system. We want to recover this file using TestDisk.

Launch TestDisk: Open a terminal and type sudo testdisk to launch TestDisk with root privileges.
Select the disk: Select the disk that contains the home directory of the user “johndoe”.
Select the partition: Select the partition that contains the home directory of the user “johndoe”.
Choose “Advanced”: On the next screen, select “Advanced”.
Select the file system: Select “ext4”.
Select the partition table type: Select the partition table type used by the disk.
Analyze the partition: On the next screen, select “Analyse”.
Select the deleted file: Use the arrow keys to navigate to the deleted file “important_document.txt” and press the “c” key to copy it to a new location. For example, you can copy it to the Desktop directory.