[CentOS] how to restore deleted directory/files

Wed Sep 16 13:32:49 UTC 2020
Simon Matter <simon.matter at invoca.ch>

> Hi,
>
>
> Thanks for your reply. The file system type is xfs. And I found
> xfsdump/xfsrestore can undo the remove.

Hm, are you sure you can use xfsdump/xfsrestore for this?

>
>
> I use dd to copy the partition as one image file. How do I mount the image
> as read-only device? Then I can try to recover the deleted files/directory
> anytime.

Mount the image with the option '-o ro' as read-only.

Depending on the kind of data you removed you could use 'testdisk' or
'photorec' to recover. Make sure to only use a copied image to test.

Regards,
Simon