Recover files deleted with rsync -avz --delete

linux rsync ubuntu-11.10 ext4
Ben picture Ben · Nov 1, 2012 · Viewed 8.5k times · Source

Is it possible to recover files deleted with rsync -avz --delete? If it is, what are some suggested tools to do so?

Answer

manish picture manish · Nov 1, 2012

I am assuming you ran rsync on some unix system. If you don't have a backup of your file system, then its a long tedious process recovering deleted files from unix file system. High level steps :

  1. find partition where your file resided
  2. create image of entire partition % dd if=/partition of=partition.img .. (this assumes you have enough space to store this somewhere locally in a different partition, or you can copy it over to different system % dd if=/partition | ssh otherhost "dd of=partition.img")
  3. open the img file in hex edit (this assumes you know the contents of the files that you've lost and can identify them when you see the content.)
  4. note the byte offset and length of your file
  5. use grep -b to extract the contents of your missing file.

enjoy!

Related questions

rsync - mkstemp failed: Permission denied (13)

I have the following setup to periodically rsync files from server A to server B. Server B has the rsync daemon running with the following configuration: read only = false use chroot = false max connections = 4 syslog facility = local5 log file = /var/…

Read More
Using Rsync include and exclude options to include directory and file by pattern

I'm having problems getting my rsync syntax right and I'm wondering if my scenario can actually be handled with rsync. First, I've confirmed that rsync is working just fine between my local host and my remote host. Doing a straight …

Read More
rsync copy over only certain types of files using include option

I use the following bash script to copy only files of certain extension(in this case *.sh), however it still copies over all the files. what's wrong? from=$1 to=$2 rsync -zarv --include="*.sh" $from $to

Read More