Forums

Skip to content

Advanced search
  • Quick links
    • Unanswered topics
    • Active topics
    • Search
  • FAQ
  • Login
  • Register
  • Board index Assistance Unsupported Software
  • Search

Lvm-Partitions vanished with Luks setup

This forum covers all Gentoo-related software not officially supported by Gentoo. Ebuilds/software posted here might harm the health and stability of your system(s), and are not supported by Gentoo developers. Bugs/errors caused by ebuilds from overlays.gentoo.org are covered by this forum, too.
Post Reply
Advanced search
48 posts
  • Previous
  • 1
  • 2
Author
Message
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Tue Feb 09, 2021 10:55 pm

Manu311,

Check my arithmetic, in case I've messed up.
I was using by phone as a calculator.

If all else fails, look at /dev/mapper/censored--encrypted-root_fs with a hex editor.
Hexeditors are dangerous tools. Looking is OK. Don't change anything by accident.

The first block should be all zeros, maybe with a signature bytes at 1FE and 1FF.

Code: Select all

00000000   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000010   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000020   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000030   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000040   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000050   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000060   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000070   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000080   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000090   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000000A0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000000B0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000000C0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000000D0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000000E0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000000F0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000100   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000110   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000120   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000130   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000140   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000150   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000160   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000170   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000180   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
00000190   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000001A0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000001B0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000001C0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000001D0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000001E0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
000001F0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ................
The primary superblock follows.

If you don't have the zeros in the first block, its likely that the filesystem does not start there.
The first block is reserved for a boot loader, hence its all zeros where its not used.

If you scroll forward and you find some all zero blocks, make a note of the start address.
You can tell mount to try that by adding it to the offset= convert from hex to decimal first.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Wed Feb 10, 2021 10:07 am

NeddySeagoon,

the math looks right to me.

So I ran hexedit on the root-fs. I don't have much of an idea what I actually did, but at least I found a block of a lot of zeroes! (not at the beginning though) Maybe you can tell me what to do with those results:

Code: Select all

0249A060   73 69 6E 68  5F 73 69 6E  68 2E 68 70  70 00 00 00  8E 07 00 00  84 0F 1B 01  6F 6F 75 72  61 5F 66 6F  75 72 69 65  72 5F 69 6E  74 65 67 72  sinh_sinh.hpp...........ooura_fourier_integr
0249A08C   61 6C 73 2E  68 70 70 00  8F 07 00 00  60 0F 15 01  6E 61 69 76  65 5F 6D 6F  6E 74 65 5F  63 61 72 6C  6F 2E 68 70  70 00 00 00  90 07 00 00  als.hpp.....`...naive_monte_carlo.hpp.......
0249A0B8   1C 00 11 01  67 61 75 73  73 5F 6B 72  6F 6E 72 6F  64 2E 68 70  70 00 00 00  91 07 00 00  14 00 09 01  67 61 75 73  73 2E 68 70  70 00 00 00  ....gauss_kronrod.hpp...........gauss.hpp...
0249A0E4   92 07 00 00  10 0F 0C 01  65 78 70 5F  73 69 6E 68  2E 68 70 70  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ........exp_sinh.hpp........................
0249A110   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
I cut out a bunch of only zeroes here

Code: Select all

0249AFAC   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
0249AFD8   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  0C 00 00 DE  C0 3C B8 1D  0E 00 00 00  .....................................<......
0249B004   0C 00 01 02  2E 00 00 00  12 07 92 03  E8 0F 02 02  2E 2E 00 00  93 07 00 00  14 00 0A 01  70 6F 6C 69  63 79 2E 68  70 70 67 65  94 07 00 00  ............................policy.hppge....
0249B030   C8 0F 12 01  65 72 72 6F  72 5F 68 61  6E 64 6C 69  6E 67 2E 68  70 70 31 2E  30 2D 6E 6F  70 61 6D 2E  70 61 74 63  68 00 00 00  12 00 00 00  ....error_handling.hpp1.0-nopam.patch.......
0249B05C   9C 0F 15 01  64 69 61 6C  64 2D 31 2E  30 2D 70 6F  73 69 78 2E  70 61 74 63  68 00 00 00  13 00 00 00  7C 0F 0A 01  64 69 61 6C  64 2D 69 6E  ....diald-1.0-posix.patch.......|...diald-in
0249B088   69 74 00 00  14 00 00 00  68 0F 0A 01  64 69 61 6C  64 2E 63 6F  6E 66 00 00  15 00 00 00  54 0F 0C 01  64 69 61 6C  64 2E 66 69  6C 74 65 72  it......h...diald.conf......T...diald.filter
0249B0B4   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
more zeroes here

Code: Select all

0249CFD0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  0C 00 00 DE  ............................................
0249CFFC   7C 66 E1 5B  10 00 00 00  0C 00 01 02  2E 00 00 00  12 07 92 03  0C 00 02 02  2E 2E 00 00  14 00 00 00  DC 0F 06 02  64 65 74 61  69 6C 00 00  |f.[................................detail..
0249D028   9E 07 00 00  14 00 0B 01  77 65 69 62  75 6C 6C 2E  68 70 70 63  9F 07 00 00  44 00 0B 01  75 6E 69 66  6F 72 6D 2E  68 70 70 00  A0 07 00 00  ........weibull.hppc....D...uniform.hpp.....
0249D054   30 00 0E 01  74 72 69 61  6E 67 75 6C  61 72 2E 68  70 70 00 00  A1 07 00 00  18 00 0E 01  73 74 75 64  65 6E 74 73  5F 74 2E 68  70 70 00 00  0...triangular.hpp..........students_t.hpp..
0249D080   A2 07 00 00  84 00 0F 01  73 6B 65 77  5F 6E 6F 72  6D 61 6C 2E  68 70 70 00  A3 07 00 00  6C 00 0C 01  72 61 79 6C  65 69 67 68  2E 68 70 70  ........skew_normal.hpp.....l...rayleigh.hpp
0249D0AC   A4 07 00 00  28 00 0B 01  70 6F 69 73  73 6F 6E 2E  68 70 70 00  A5 07 00 00  14 00 0A 01  70 61 72 65  74 6F 2E 68  70 70 00 00  A6 07 00 00  ....(...poisson.hpp.........pareto.hpp......
0249D0D8   30 00 0A 01  6E 6F 72 6D  61 6C 2E 68  70 70 00 00  A7 07 00 00  1C 00 11 01  6E 6F 6E 5F  63 65 6E 74  72 61 6C 5F  74 2E 68 70  70 00 00 00  0...normal.hpp..........non_central_t.hpp...
0249D104   A8 07 00 00  1C 00 11 01  6E 6F 6E 5F  63 65 6E 74  72 61 6C 5F  66 2E 68 70  70 00 00 00  A9 07 00 00  40 00 1B 01  6E 6F 6E 5F  63 65 6E 74  ........non_central_f.hpp.......@...non_cent
0249D130   72 61 6C 5F  63 68 69 5F  73 71 75 61  72 65 64 2E  68 70 70 00  AA 07 00 00  1C 00 14 01  6E 6F 6E 5F  63 65 6E 74  72 61 6C 5F  62 65 74 61  ral_chi_squared.hpp.........non_central_beta
0249D15C   2E 68 70 70  AB 07 00 00  58 01 15 01  6E 65 67 61  74 69 76 65  5F 62 69 6E  6F 6D 69 61  6C 2E 68 70  70 00 00 00  AC 07 00 00  2C 00 0D 01  .hpp....X...negative_binomial.hpp.......,...
0249D188   6C 6F 67 6E  6F 72 6D 61  6C 2E 68 70  70 00 00 00  AD 07 00 00  14 00 0C 01  6C 6F 67 69  73 74 69 63  2E 68 70 70  AE 07 00 00  4C 00 0B 01  lognormal.hpp...........logistic.hpp....L...
0249D1B4   6C 61 70 6C  61 63 65 2E  68 70 70 00  AF 07 00 00  38 00 14 01  69 6E 76 65  72 73 65 5F  67 61 75 73  73 69 61 6E  2E 68 70 70  B0 07 00 00  laplace.hpp.....8...inverse_gaussian.hpp....
0249D1E0   1C 00 11 01  69 6E 76 65  72 73 65 5F  67 61 6D 6D  61 2E 68 70  70 00 00 00  B1 07 00 00  20 00 17 01  69 6E 76 65  72 73 65 5F  63 68 69 5F  ....inverse_gamma.hpp....... ...inverse_chi_
0249D20C   73 71 75 61  72 65 64 2E  68 70 70 00  B2 07 00 00  A0 00 12 01  68 79 70 65  72 67 65 6F  6D 65 74 72  69 63 2E 68  70 70 00 00  B3 07 00 00  squared.hpp.........hypergeometric.hpp......
0249D238   1C 00 14 01  68 79 70 65  72 65 78 70  6F 6E 65 6E  74 69 61 6C  2E 68 70 70  B4 07 00 00  68 00 09 01  67 61 6D 6D  61 2E 68 70  70 00 00 00  ....hyperexponential.hpp....h...gamma.hpp...
0249D264   B5 07 00 00  18 00 0D 01  67 65 6F 6D  65 74 72 69  63 2E 68 70  70 00 00 00  B6 07 00 00  10 00 07 01  66 77 64 2E  68 70 70 00  B7 07 00 00  ........geometric.hpp...........fwd.hpp.....
0249D290   2C 00 0C 01  66 69 73 68  65 72 5F 66  2E 68 70 70  B8 07 00 00  18 00 0E 01  66 69 6E 64  5F 73 63 61  6C 65 2E 68  70 70 00 00  B9 07 00 00  ,...fisher_f.hpp........find_scale.hpp......
0249D2BC   3C 0D 11 01  66 69 6E 64  5F 6C 6F 63  61 74 69 6F  6E 2E 68 70  70 00 00 00  BA 07 00 00  20 0D 11 01  65 78 74 72  65 6D 65 5F  76 61 6C 75  <...find_location.hpp....... ...extreme_valu
0249D2E8   65 2E 68 70  70 00 00 00  BB 07 00 00  18 00 0F 01  65 78 70 6F  6E 65 6E 74  69 61 6C 2E  68 70 70 00  BC 07 00 00  A0 00 2E 01  65 6D 70 69  e.hpp...........exponential.hpp.........empi
0249D314   72 69 63 61  6C 5F 63 75  6D 75 6C 61  74 69 76 65  5F 64 69 73  74 72 69 62  75 74 69 6F  6E 5F 66 75  6E 63 74 69  6F 6E 2E 68  70 70 00 00  rical_cumulative_distribution_function.hpp..
0249D340   BD 07 00 00  18 00 0E 01  63 6F 6D 70  6C 65 6D 65  6E 74 2E 68  70 70 00 00  BE 07 00 00  18 00 0F 01  63 68 69 5F  73 71 75 61  72 65 64 2E  ........complement.hpp..........chi_squared.
0249D36C   68 70 70 00  BF 07 00 00  38 00 0A 01  63 61 75 63  68 79 2E 68  70 70 00 00  C0 07 00 00  24 00 0C 01  62 69 6E 6F  6D 69 61 6C  2E 68 70 70  hpp.....8...cauchy.hpp......$...binomial.hpp
0249D398   C1 07 00 00  10 00 08 01  62 65 74 61  2E 68 70 70  C2 07 00 00  4C 0C 0D 01  62 65 72 6E  6F 75 6C 6C  69 2E 68 70  70 00 00 00  C3 07 00 00  ........beta.hpp....L...bernoulli.hpp.......
0249D3C4   34 0C 0B 01  61 72 63 73  69 6E 65 2E  68 70 70 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  4...arcsine.hpp.............................
0249D3F0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
and more zeroes

Code: Select all

0249DFCC   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
0249DFF8   0C 00 00 DE  DC 9F 41 1D  11 00 00 00  0C 00 01 02  2E 00 00 00  12 07 92 03  E8 0F 02 02  2E 2E 00 00  C4 07 00 00  20 00 15 01  6C 61 6E 63  ......A............................. ...lanc
0249E024   7A 6F 73 5F  73 6D 6F 6F  74 68 69 6E  67 2E 68 70  70 74 79 2D  C5 07 00 00  34 00 15 01  66 69 6E 69  74 65 5F 64  69 66 66 65  72 65 6E 63  zos_smoothing.hppty-....4...finite_differenc
0249E050   65 2E 68 70  70 69 6C 65  C6 07 00 00  14 00 0C 01  61 75 74 6F  64 69 66 66  2E 68 70 70  C7 07 00 00  88 0F 12 01  61 75 74 6F  64 69 66 66  e.hppile........autodiff.hpp........autodiff
0249E07C   5F 63 70 70  31 31 2E 68  70 70 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  _cpp11.hpp..................................
Well this goes on for a while, but I hope this is enough :oops:
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Wed Feb 10, 2021 10:57 am

Manu311,

That's encouraging. That there are text strings, shows its not random, which is how it would look if it were still encrypted.

Code: Select all

error_handling.hpp1.0-nopam.patch
looks like a directory entry.
Possibly in /etc/portage/patches/<category>/<package> or in your distfiles.

A a disk block is 0x200 bytes long. A filesystem block is 0x1000 bytes. so only range of zeros starting on a filesystem block boundary is of interest.

Right now, the SSD in my main system has decided to do internal operations, so it won't boot.
I'm posting this from a Pi4. I don't have many tools here so I will not be able to do much more until I'm back on my main system.

Do you have a spare external drive that you can make another ext4 filesystem on exactly the same size as your root fs?
The idea is to get the backup superblock list.that mke2fs spits out of fs create time, then try all the alternate fs superblocks in mount -o ro,sb=
The sb= parameter is in blocks of 1k. The Backup Superblock list is in filesystem blocks, that's 1k, 2k or 4k. It will be 4k for you so all the numbers in the backup superblock list need to be multiplied by 4.

I think I have space here but its on my main PC, which is sulking :(
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Wed Feb 10, 2021 11:06 am

NeddySeagoon,

I have ordered an external drive (for backups! - finally), but it will probably arrive the day after tomorrow, so right now I don't have a drive which can hold 1TB :-(.
I guess I have to wait for my saviors ssd to finish it's internal operations :lol: .

Btw thanks for all that help!
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Wed Feb 10, 2021 6:32 pm

Manu311,

I cheated by making an empty sparse file. That's a file that takes up almost zero space on disk until data is saved.. Then made an ext4 filessytem inside the empty file, so its still almost empty. I don't have 1TB free either.
Heres how it went ,,, 937992M is the size of your root logical volume.

Code: Select all

NeddySeagoon_Static /home/roy/downloads # dd if=/dev/zero of=sparse_file bs=1 count=0 seek=937992M
0+0 records in
0+0 records out
0 bytes copied, 8.3274e-05 s, 0.0 kB/s
NeddySeagoon_Static /home/roy/downloads # ls -l sparse_file
-rw-r--r-- 1 root root 983555899392 Feb 10 18:21 sparse_file
NeddySeagoon_Static /home/roy/downloads # mkfs -t ext4 /home/roy/downloads/sparse_file 
mke2fs 1.46.0 (29-Jan-2020)
Discarding device blocks: done                            
Creating filesystem with 240125952 4k blocks and 60039168 inodes
Filesystem UUID: 3e002c9d-8e86-4e8b-b08e-95e308453c5c
Superblock backups stored on blocks: 
	32768, 98304, 163840, 229376, 294912, 819200, 884736, 1605632, 2654208, 
	4096000, 7962624, 11239424, 20480000, 23887872, 71663616, 78675968, 
	102400000, 214990848

Allocating group tables: done                            
Writing inode tables: done                            
Creating journal (262144 blocks): done
Writing superblocks and filesystem accounting information: done     
The important number are the Superblock backups stored on blocks: ... Don't forget to multiply by 4. Thus 32768, becomes sb=131072, which you have already tried.

For amusement value only

Code: Select all

NeddySeagoon_Static /home/roy/downloads # du -h sparse_file 
1.1G	sparse_file
NeddySeagoon_Static /home/roy/downloads # ls -lh sparse_file
-rw-r--r-- 1 root root 917G Feb 10 18:23 sparse_file
So its 1.1G on disk but can hold 917G of data. Rather like the Tardis, its bigger on the inside than on the outside. :)
The file grows as data is added. Its just an empty ext4 file system now.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Wed Feb 10, 2021 6:43 pm

I tried all those superblocks:

Code: Select all

for i in 131072 393216 655360 917504 1179648 3276800 3538944 6422528 10616832 16384000 31850496 44957696 81920000 95551488 286654464 314703872 409600000 859963392; do  mount -o ro,offset=40112578560,sb=$i /dev/mapper/censored-crypt /mnt/gentoo/ && break; done
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Wed Feb 10, 2021 6:49 pm

Manu311,

Lets check the offset= by calculating from the start of the drive. That will take a while. Its 7:00 PM here. Maybe not tonight my time.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Wed Feb 10, 2021 7:34 pm

Manu311,

I'm missing a simple step here.

Code: Select all

mount -o ro,sb=<list_you tried_already> /dev/censored-encrypted/root_fs /mnt/gentoo 
That avoids the use of offset= and trusts the lvm metadata.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Wed Feb 10, 2021 7:46 pm

Same problem:

Code: Select all

livecd ~ # for i in 131072 393216 655360 917504 1179648 3276800 3538944 6422528 10616832 16384000 31850496 44957696 81920000 95551488 286654464 314703872 409600000 859963392; do echo $i; mount -o ro,sb=$i -v /dev/mapper/censored--encrypted-root_fs /mnt/gentoo/ && break; done
131072
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
393216
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
655360
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
917504
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
1179648
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
3276800
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
3538944
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
6422528
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
10616832
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
16384000
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
31850496
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
44957696
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
81920000
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
95551488
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
286654464
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
314703872
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
409600000
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
859963392
mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/mapper/censored--encrypted-root_fs, missing codepage or helper program, or other error.
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Wed Feb 10, 2021 9:12 pm

Manu311,

It was worth a try.

What does

Code: Select all

pvs -o pe_start
vgs -o mda_free
show for you.

I have

Code: Select all

pvs -o pe_start
Password: 
  WARNING: Failed to connect to lvmetad. Falling back to device scanning.
  1st PE 
  192.00k
    1.00m
as I have two Physical Volumes.
Its worrying that the older one shows 192.00k and the newer one 1.00m. That means that the defaults for pvcreate have changed over the years as the 1.00m is the newer one.
It that's happened to you, the larger metadata size now overlaps the start of your encrypted swap. The Physical Extents for for logical volumes are in a different location, according to the metadata,

This may have destroyed your swap, as its first after the metadata. You root will still be intact as its further down the physical volume but the pointers in the metadata don't point to it any more, so mounts that use dev/mapper/censored--encrypted-root_fs fail. We just need to find it and it should mount.

The last datum that we know is in the right place is /dev/mapper/censored--encrypted. The LUKS container.
Then there is the LVM header, either 192.00k or 1MB. Swap follows 9564*4MiB Extents. Then the root fs.
Swap is 40114323456B long.
1MB is 1048576B
192k is 196608B

They are all integer multiples of 4ki, which is good.

root is at 40114323456+1048576 or at 40114323456+196608
40115372032 which I hope is the offset we have already tried but its not ...

Its

Code: Select all

mount -o,ro,offset=40115372032 /dev/mapper/censored--encrypted /mnt/gentoo
Then you can work in all the sb= too, sb=0 is inferred.

I'll let you repeat for the offset=40114323456+196608 if you need to.

Do check the logic and arithmetic.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Wed Feb 10, 2021 9:23 pm

I'll omit all the outputs from my for-loop since they are all the same.

Code: Select all

mount: /mnt/gentoo: wrong fs type, bad option, bad superblock on /dev/loop1, missing codepage or helper program, or other error.
I ran:

Code: Select all

for i in 131072 393216 655360 917504 1179648 3276800 3538944 6422528 10616832 16384000 31850496 44957696 81920000 95551488 286654464 314703872 409600000 859963392; do echo $i; mount -o ro,offset=40114520064,sb=$i -v /dev/mapper/censored--encrypted-root_fs /mnt/gentoo/ && break; done
for i in 131072 393216 655360 917504 1179648 3276800 3538944 6422528 10616832 16384000 31850496 44957696 81920000 95551488 286654464 314703872 409600000 859963392; do echo $i; mount -o ro,offset=40115372032,sb=$i -v /dev/mapper/censored--encrypted-root_fs /mnt/gentoo/ && break; done
and

Code: Select all

livecd ~ # pvs -o pe_start
  1st PE 
    1.00m
livecd ~ # vgs -o mda_free
  VMdaFree 
         0 
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Wed Feb 10, 2021 11:14 pm

Manu311,

Code: Select all

livecd ~ # vgs -o mda_free
  VMdaFree
         0 
That's odd you only have 2 logical volumes.

I need to think about things.

The text SWAPSPACE2 should appear at address 00000FF6 in your swap. That's at the end of the first 4k block. It looks like

Code: Select all

00000FF0   00 00 00 00  00 00 53 57  41 50 53 50  41 43 45 32  ......SWAPSPACE2
in hexedit.

If its there, it should be no further than 0x100FF6 bytes from the start of /dev/mapper/censored--encrypted.
Ctrl-S: search forward
Tab: toggle hex/ascii
will let you search, if hexedit gets access to the decrypted space.

If you find it, what address does it appear at?
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Thu Feb 11, 2021 8:57 am

I found the swapspace-string (inside of censored-crypt):

Code: Select all

E181BDB4   00 00 00 00  00 00 20 00  3D 0A 05 00  00 00 00 00  F6 7F 00 00  00 00 00 00  51 00 00 00  00 00 00 00  00 00 00 00  53 57 41 50  2D 53 50 41  ...... .=...............Q...........SWAP-SPA
E181BDE0   43 45 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  CE..........................................
E181BE0C   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181BE38   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  4C 69 6E 75  78 20 6F 6C  64 20 73 77  ................................Linux old sw
E181BE64   61 70 20 66  69 6C 65 2C  20 33 32 6B  20 70 61 67  65 20 73 69  7A 65 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ap file, 32k page size......................
E181BE90   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181BEBC   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181BEE8   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181BF14   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 20 00  3D 0A 05 00  00 00 00 00  F6 FF 00 00  .............................. .=...........
E181BF40   00 00 00 00  52 00 00 00  00 00 00 00  00 00 00 00  53 57 41 50  2D 53 50 41  43 45 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ....R...........SWAP-SPACE..................
E181BF6C   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181BF98   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181BFC4   00 00 00 00  00 00 00 00  00 00 00 00  4C 69 6E 75  78 20 6F 6C  64 20 73 77  61 70 20 66  69 6C 65 2C  20 36 34 6B  20 70 61 67  65 20 73 69  ............Linux old swap file, 64k page si
E181BFF0   7A 65 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ze..........................................
E181C01C   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181C048   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181C074   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181C0A0   00 00 00 00  00 00 00 00  00 00 20 00  3D 0A 05 00  00 00 00 00  F6 0F 00 00  00 00 00 00  65 00 00 00  00 00 00 00  00 00 00 00  53 57 41 50  .......... .=...............e...........SWAP
E181C0CC   53 50 41 43  45 32 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  SPACE2......................................
E181C0F8   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E181C124   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  4C 69 6E 75  78 20 73 77  ....................................Linux sw
E181C150   61 70 20 66  69 6C 65 2C  20 34 6B 20  70 61 67 65  20 73 69 7A  65 2C 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ap file, 4k page size,......................
E181C17C   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
I found it a couple of more times shortly after that
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Thu Feb 11, 2021 9:21 am

Manu311,

That's a long way down censored-crypt and it is not exactly at the end of a 4kiB block, so its not a swap space signature.
If that's the only occurrence in the whole of censored-crypt, then your swap space is gone, if the lvm2 metadata is correct.
We are looking for SWAPSPACE2 that starts at *FF6 and ends at *FFF
Its written at the end of the first 4kiB block in swap.

If that were found, we know where swap starts and that limits the possibilities for where the root fs can be.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Thu Feb 11, 2021 9:32 am

I just noticed hexedit cuts of the position after 8 digits . But it had 10 digits, it searched for quite some time.
I'll search for it again and look for an occurrence that's aligned.

Btw the only place that could have had a different swappartition/-file could be a virtualbox-image. A while ago I tried to replicate a problem on some other distribution. I haven't manually put a swapfile or partition into it, but it might have created a swapfile on its own.
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Thu Feb 11, 2021 9:50 am

Manu311,

Unless you run mkswap, or some installer does, you don't have any swap space.
Looking at the decrypted raw data, without the filesystem layer, we see all the content of the free space too.

With rotating rust, that all the space freed by deleting files. With SSDs its more complex.
It depends on the discard mechanism and if the discard option is used in fstab or if fstrim is run.
Even then, it depends on when the SSD actually does the erase of discarded blocks.
The crypto layer makes it more complex still.

With cryto and discard, there are big holes of zero bytes in the underlying (locked) space. That gives away the data locations.
If discard is not used, SSD and crypto is very slow to write, as an erase cycle is forced before the write.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Thu Feb 11, 2021 9:53 am

Since I installed those other distributions with an installer, that's what might have happened ;-).

Here are the offsets of SWAPSPACE2 I found so far:
61E181C0C8
61E181C3B8
61E181C6A8
61E181C998
61E181CC88
61E181CF89
61E181D3E0
61E181D848
61E181DCB0
61E181E118

They all look wrong
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Thu Feb 11, 2021 9:56 am

Manu311,

They are :(
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Thu Feb 11, 2021 10:19 am

searching finished - it hasn't found any other occurrences
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Thu Feb 11, 2021 11:39 am

Manu311,

Even if we relax the 4kiB alignment to 266B then the *FF6 becomes *F6.
There are hits that satisfy even that requirement. That means your swap signature has gone.

If your lvm metadata was originally 192.00kiB and its now 1.00MiB, the swap signature would now be inside the lvm metadata area.
It might even have been overwritten because of that.

As the swap signature is gone, we can't use it to try to locate the root-fs.

We know that your root-fs is ext4. Lets see if hexedit can find the root directory of the root filesystem.
We know that the root directory contains

Code: Select all

$ ls /
bin   dev  home  lib64       mnt  proc  run   sys  usr
boot  etc  lib   lost+found  opt  root  sbin  tmp  var
Can you find the text lost+found in /dev/mapper/censored--encrypted ?
Extra points for finding an occurrence that has the other directory names close by.
That would tell where the / directory is. We can then use that to find the filesystem start.
I don't know exactly have but the root directory is the first user data after a chunk of metadata.
I have your filesystem metadata structure in a sparse file, so I can search that.

If we can't find your root directory, the filesystem is probably damaged beyond recovery as a filesystem.
Then it comes down to how much time do you want to spend with forensics tools, trying to find some your data.

-- Edit --

I get

Code: Select all

02494000   02 00 00 00  0C 00 01 02  2E 00 00 00  02 00 00 00  ................
02494010   0C 00 02 02  2E 2E 00 00  0B 00 00 00  DC 0F 0A 02  ................
02494020   6C 6F 73 74  2B 66 6F 75  6E 64 00 00  00 00 00 00  lost+found......
So the root directory is at 0x02494000 from the filesystem start.

If you decode the hex values, you will find the two fake entries . and ..
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Thu Feb 11, 2021 12:51 pm

Unbelievable how often "lost+found" is contained inside of scripts .... (obviously I left those out)
After a lot of searching I finally found a few non-script-occurrences, but none that had other directory-names nearby :-(

Code: Select all

Offsets all  start with 62:

60A1E51C   20 D0 BF D1  80 D0 B8 D0  B7 D0 B2 D0  B5 D1 81 D1  82 D0 B8 20  D0 B4 D0 BE  20 D0 B2 D1  82 D1 80 D0  B0 D1 82 D0  B8 20 D1 86  D1 96 D0 BB   .................. .... ............ ......
60A1E548   D1 96 D1 81  D0 BD D0 BE  D1 81 D1 82  D1 96 0A D1  84 D0 B0 D0  B9 D0 BB D0  BE D0 B2 D0  BE D1 97 20  D1 81 D0 B8  D1 81 D1 82  D0 B5 D0 BC  ............................... ............
60A1E574   D0 B8 2E 0A  00 D0 9A D0  BB D0 BE D0  BD D1 83 D0  B2 D0 B0 D1  82 D0 B8 20  D0 B1 D0 BB  D0 BE D0 BA  D0 B8 20 D0  BA D1 80 D0  B0 D1 82 D0  ....................... .......... .........
60A1E5A0   BD D0 BE D0  B3 D0 BE 20  D0 B2 D0 B8  D0 BA D0 BE  D1 80 D0 B8  D1 81 D1 82  D0 B0 D0 BD  D0 BD D1 8F  00 D0 A0 D0  BE D0 B7 D0  BC D1 96 D1  ....... ....................................
60A1E5CC   80 20 D0 BA  D0 BB D0 B0  D1 81 D1 82  D0 B5 D1 80  D0 B0 3D 25  75 20 28 D0  B6 D1 83 D1  80 D0 BD D0  B0 D0 BB 3D  25 75 29 0A  00 D0 97 E2  . ................=%u (............=%u).....
60A1E5F8   80 99 D1 94  D0 B4 D0 BD  D0 B0 D1 82  D0 B8 20 D0  B7 20 2F 6C  6F 73 74 2B  66 6F 75 6E  64 00 D0 9F  D1 80 D0 BE  D0 B4 D0 BE  D0 B2 D0 B6  .............. .. /lost+found...............
60A1E624   D0 B8 D1 82  D0 B8 00 D0  9F D0 B5 D1  80 D0 B5 D1  82 D0 B2 D0  BE D1 80 D1  8E D1 94 D0  BC D0 BE 20  D1 84 D0 B0  D0 B9 D0 BB  D0 BE D0 B2  ............................... ............
60A1E650   D1 83 20 D1  81 D0 B8 D1  81 D1 82 D0  B5 D0 BC D1  83 20 D0 BD  D0 B0 20 33  32 2D D0 B1  D1 96 D1 82  D0 BE D0 B2  D1 83 2E 0A  00 D0 9F D0  .. .............. .... 32-..................
60A1E67C   B5 D1 80 D0  B5 D1 82 D0  B2 D0 BE D1  80 D1 8E D1  94 D0 BC D0  BE 20 D1 84  D0 B0 D0 B9  D0 BB D0 BE  D0 B2 D1 83  20 D1 81 D0  B8 D1 81 D1  ..................... .............. .......
60A1E6A8   82 D0 B5 D0  BC D1 83 20  D0 BD D0 B0  20 36 34 2D  D0 B1 D1 96  D1 82 D0 BE  D0 B2 D1 83  2E 0A 00 D0  A1 D0 BA D0  BE D0 BF D1  96 D0 B9 D0  ....... .... 64-............................
60A1E6D4   BE D0 B2 D0  B0 D0 BD D0  BE 20 25 6C  6C 75 20 2F  20 25 6C 6C  75 20 D0 B1  D0 BB D0 BE  D0 BA D1 96  D0 B2 20 28  25 64 25 25  29 20 D1 83  ......... %llu / %llu ............ (%d%%) ..

60A322E8   20 D1 87 D0  B0 D1 81 20  D0 BF D0 B5  D1 80 D0 B5  D0 B2 D1 96  D1 80 D0 BA  D0 B8 20 D0  B1 D0 BB D0  BE D0 BA D1  83 20 4D 4D  50 00 D0 BF   ...... .................. .......... MMP...
60A32314   D1 96 D0 B4  20 D1 87 D0  B0 D1 81 20  D0 BF D0 B5  D1 80 D0 B5  D0 B2 D1 96  D1 80 D0 BA  D0 B8 20 D0  B6 D1 83 D1  80 D0 BD D0  B0 D0 BB D1  .... ...... .................. .............
60A32340   83 20 25 73  00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  81 D0 BF D0  BE D1 80 D0  BE D0 B6 D0  BD D0 B5 D0  BD D0 BD D1  8F 20 69 6E  . %s....... ...... ...................... in
60A3236C   6F 64 65 20  D0 B6 D1 83  D1 80 D0 BD  D0 B0 D0 BB  D1 83 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D0 B7 D0  B0 D0 BA D1  80 D0 B8 D1  ode ..................... ...... ...........
60A32398   82 D1 82 D1  8F 20 69 6E  6F 64 65 20  25 75 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D1 81 D0  BF D1 80 D0  BE D0 B1 D0  B8 20 D1 81  ..... inode %u....... ...... ............ ..
60A323C4   D1 82 D0 B2  D0 BE D1 80  D0 B8 D1 82  D0 B8 20 2F  6C 6F 73 74  2B 66 6F 75  6E 64 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D1 81 D0  .............. /lost+found....... ...... ...
60A323F0   BF D1 80 D0  BE D0 B1 D0  B8 20 D1 81  D1 82 D0 B2  D0 BE D1 80  D0 B5 D0 BD  D0 BD D1 8F  20 D0 BA D0  B0 D1 82 D0  B0 D0 BB D0  BE D0 B3 D1  ......... .................. ...............
60A3241C   83 20 C2 AB  25 73 C2 BB  00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  81 D0 BF D1  80 D0 BE D0  B1 D0 B8 20  D1 81 D1 82  D0 B2 D0 BE  . ..%s......... ...... ............ ........
60A32448   D1 80 D0 B5  D0 BD D0 BD  D1 8F 20 D0  B2 D0 B5 D0  BB D0 B8 D0  BA D0 BE D0  B3 D0 BE 20  D1 84 D0 B0  D0 B9 D0 BB  D0 B0 20 25  6C 75 00 D0  .......... ................ .......... %lu..
60A32474   BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D1 81 D0  BF D1 80 D0  BE D0 B1 D0  B8 20 D1 81  D1 82 D0 B2  D0 BE D1 80  D0 B5 D0 BD  D0 BD D1 8F  ..... ...... ............ ..................
60A324A0   20 D1 81 D0  BF D0 B8 D1  81 D0 BA D1  83 20 D0 BF  D0 BE D0 BC  D0 B8 D0 BB  D0 BA D0 BE  D0 B2 D0 B8  D1 85 20 D0  B1 D0 BB D0  BE D0 BA D1   ............ .................... .........
60A324CC   96 D0 B2 20  D1 83 20 D0  BF D0 B0 D0  BC E2 80 99  D1 8F D1 82  D1 96 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D1 81 D0  BF D1 80 D0  ... .. ...................... ...... .......
60A324F8   BE D0 B1 D0  B8 20 D1 81  D1 82 D0 B2  D0 BE D1 80  D0 B5 D0 BD  D0 BD D1 8F  20 69 6E 6F  64 65 20 C2  AB 25 73 C2  BB 00 D0 BF  D1 96 D0 B4  ..... .................. inode ..%s.........
60A32524   20 D1 87 D0  B0 D1 81 20  D1 81 D1 82  D0 B2 D0 BE  D1 80 D0 B5  D0 BD D0 BD  D1 8F 20 D0  BA D0 BE D1  80 D0 B5 D0  BD D0 B5 D0  B2 D0 BE D0   ...... .................. .................
60A32550   B3 D0 BE 20  D0 BA D0 B0  D1 82 D0 B0  D0 BB D0 BE  D0 B3 D1 83  00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  81 D0 BF D1  80 D0 BE D0  ... ....................... ...... .........
60A3257C   B1 D0 B8 20  D1 81 D1 82  D0 B2 D0 BE  D1 80 D0 B5  D0 BD D0 BD  D1 8F 20 D1  81 D0 BF D0  B5 D1 86 D1  96 D0 B0 D0  BB D1 8C D0  BD D0 BE D0  ... .................. .....................
60A325A8   B3 D0 BE 20  D1 84 D0 B0  D0 B9 D0 BB  D0 B0 20 C2  AB 25 73 C2  BB 00 D0 BF  D1 96 D0 B4  20 D1 87 D0  B0 D1 81 20  D1 81 D0 BF  D1 80 D0 BE  ... .......... ..%s......... ...... ........
60A325D4   D0 B1 D0 B8  20 D1 81 D1  82 D0 B2 D0  BE D1 80 D0  B5 D0 BD D0  BD D1 8F 20  D1 81 D0 B8  D0 BC D0 B2  D0 BE D0 BB  D1 96 D1 87  D0 BD D0 BE  .... .................. ....................
60A32600   D0 B3 D0 BE  20 D0 BF D0  BE D1 81 D0  B8 D0 BB D0  B0 D0 BD D0  BD D1 8F 20  C2 AB 25 73  C2 BB 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  .... .................. ..%s......... ......
60A3262C   20 D1 81 D0  BF D1 80 D0  BE D0 B1 D0  B8 20 D0 B2  D0 B8 D0 B7  D0 BD D0 B0  D1 87 D0 B8  D1 82 D0 B8  2C 20 D1 87  D0 B8 20 D0  B7 D0 BC D0   ............ .................., .... .....
60A32658   BE D0 BD D1  82 D0 BE D0  B2 D0 B0 D0  BD D0 BE 20  25 73 2E 00  D0 BF D1 96  D0 B4 20 D1  87 D0 B0 D1  81 20 D0 B2  D0 B8 D0 BA  D0 BE D0 BD  ............... %s........ ...... ..........
60A32684   D0 B0 D0 BD  D0 BD D1 8F  20 D1 81 D0  BA D0 B0 D0  BD D1 83 D0  B2 D0 B0 D0  BD D0 BD D1  8F 20 69 6E  6F 64 65 00  D0 BF D1 96  D0 B4 20 D1  ........ .................... inode....... .
60A326B0   87 D0 B0 D1  81 20 D1 80  D0 BE D0 B7  D0 B3 D0 BE  D1 80 D1 82  D0 B0 D0 BD  D0 BD D1 8F  20 2F 6C 6F  73 74 2B 66  6F 75 6E 64  00 D0 BF D1  ..... ...................... /lost+found....
60A326DC   96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  80 D0 BE D0  B7 D0 B3 D0  BE D1 80 D1  82 D0 B0 D0  BD D0 BD D1  8F 20 D0 BA  D0 B0 D1 82  D0 B0 D0 BB  ... ...... ...................... ..........
60A32708   D0 BE D0 B3  D1 83 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D1 81 D0  BF D1 80 D0  BE D0 B1 D0  B8 20 D0 BE  D1 82 D1 80  D0 B8 D0 BC  ............. ...... ............ ..........
60A32734   D0 B0 D0 BD  D0 BD D1 8F  20 D0 B1 D0  BB D0 BE D0  BA D1 83 20  25 6C 6C 75  2E 00 D0 BF  D1 96 D0 B4  20 D1 87 D0  B0 D1 81 20  D1 81 D0 BF  ........ .......... %llu........ ...... ....
60A32760   D1 80 D0 BE  D0 B1 D0 B8  20 D0 BE D1  82 D1 80 D0  B8 D0 BC D0  B0 D1 82 D0  B8 20 D1 81  D1 83 D0 BF  D0 B5 D1 80  D0 B1 D0 BB  D0 BE D0 BA  ........ ................ ..................
60A3278C   00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D0  B2 D0 B8 D0  B2 D1 96 D0  BB D1 8C D0  BD D0 B5 D0  BD D0 BD D1  8F 20 D1 84  D0 B0 D0 B9  ....... ...... ...................... ......
60A327B8   D0 BB D0 B0  20 74 64 62  20 64 69 72  5F 69 6E 66  6F 00 D0 BF  D1 96 D0 B4  20 D1 87 D0  B0 D1 81 20  D0 BE D1 82  D1 80 D0 B8  D0 BC D0 B0  .... tdb dir_info....... ...... ............
60A327E4   D0 BD D0 BD  D1 8F 20 D0  BD D0 B0 D1  81 D1 82 D1  83 D0 BF D0  BD D0 BE D0  B3 D0 BE 20  69 6E 6F 64  65 00 D0 BF  D1 96 D0 B4  20 D1 87 D0  ...... .................... inode....... ...
60A32810   B0 D1 81 20  D0 BE D1 82  D1 80 D0 B8  D0 BC D0 B0  D0 BD D0 BD  D1 8F 20 D1  81 D1 82 D0  B0 D1 82 D0  B8 D1 81 D1  82 D0 B8 D1  87 D0 BD D0  ... .................. .....................
60A3283C   B8 D1 85 20  D0 B4 D0 B0  D0 BD D0 B8  D1 85 20 D1  89 D0 BE D0  B4 D0 BE 20  25 73 00 D0  BF D1 96 D0  B4 20 D1 87  D0 B0 D1 81  20 D1 85 D0  ... .......... ........ %s....... ...... ...
60A32868   B5 D1 88 D1  83 D0 B2 D0  B0 D0 BD D0  BD D1 8F 20  D0 B7 D0 B0  D0 BF D0 B8  D1 81 D1 83  20 D0 B7 20  65 5F 76 61  6C 75 65 5F  69 6E 75 6D  ............... ............ .. e_value_inum
60A32894   20 3D 20 25  75 00 D0 BF  D1 96 D0 B4  20 D1 87 D0  B0 D1 81 20  D1 81 D0 BF  D1 80 D0 BE  D0 B1 D0 B8  20 D1 96 D0  BD D1 96 D1  86 D1 96 D0   = %u....... ...... ............ ...........
60A328C0   B0 D0 BB D1  96 D0 B7 D1  83 D0 B2 D0  B0 D1 82 D0  B8 20 65 78  74 32 5F 71  63 6F 77 32  5F 69 6D 61  67 65 00 D0  BF D1 96 D0  B4 20 D1 87  ................. ext2_qcow2_image....... ..
60A328EC   D0 B0 D1 81  20 D1 81 D0  BF D1 80 D0  BE D0 B1 D0  B8 20 D1 96  D0 BD D1 96  D1 86 D1 96  D0 B0 D0 BB  D1 96 D0 B7  D0 B0 D1 86  D1 96 D1 97  .... ............ ..........................
60A32918   20 D1 81 D1  83 D0 BF D0  B5 D1 80 D0  B1 D0 BB D0  BE D0 BA D1  83 20 D0 B6  D1 83 D1 80  D0 BD D0 B0  D0 BB D1 83  00 D0 BF D1  96 D0 B4 20   .................... .....................
60A32944   D1 87 D0 B0  D1 81 20 D1  81 D0 BF D1  80 D0 BE D0  B1 D0 B8 20  D1 96 D0 BD  D1 96 D1 86  D1 96 D0 B0  D0 BB D1 96  D0 B7 D0 B0  D1 86 D1 96  ...... ............ ........................
60A32970   D1 97 20 D0  BA D0 BE D0  BD D1 82 D0  B5 D0 BA D1  81 D1 82 D1  83 20 D0 BA  D0 B2 D0 BE  D1 82 D0 B8  00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  .. .................. ................. ....
60A3299C   D1 81 20 D1  81 D0 BF D1  80 D0 BE D0  B1 D0 B8 20  D1 96 D0 BD  D1 96 D1 86  D1 96 D0 B0  D0 BB D1 96  D0 B7 D0 B0  D1 86 D1 96  D1 97 20 D0  .. ............ .......................... .
60A329C8   BA D0 BE D0  BD D1 82 D0  B5 D0 BA D1  81 D1 82 D1  83 20 D0 BA  D0 B2 D0 BE  D1 82 D0 B8  20 D1 83 20  D0 B1 D1 96  D0 B1 D0 BB  D1 96 D0 BE  ................. .......... .. ............
60A329F4   D1 82 D0 B5  D1 86 D1 96  20 D0 BF D1  96 D0 B4 D1  82 D1 80 D0  B8 D0 BC D0  BA D0 B8 00  D0 BF D1 96  D0 B4 20 D1  87 D0 B0 D1  81 20 D1 96  ........ ......................... ...... ..
60A32A20   D1 82 D0 B5  D1 80 D0 B0  D1 82 D0 B8  D0 B2 D0 BD  D0 BE D1 97  20 D0 BE D0  B1 D1 80 D0  BE D0 B1 D0  BA D0 B8 20  69 6E 6F 64  65 20 25 75  .................... .............. inode %u
60A32A4C   00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  81 D0 BF D1  80 D0 BE D0  B1 D0 B8 20  D0 BA D0 BE  D0 BC D0 BF  D0 BE D0 BD  D1 83 D0 B2  ....... ...... ............ ................
60A32A78   D0 B0 D0 BD  D0 BD D1 8F  20 C2 AB 25  73 C2 BB 00  D0 BF D1 96  D0 B4 20 D1  87 D0 B0 D1  81 20 D1 81  D1 82 D0 B2  D0 BE D1 80  D0 B5 D0 BD  ........ ..%s......... ...... ..............
60A32AA4   D0 BD D1 8F  20 D1 81 D0  BF D0 B8 D1  81 D0 BA D1  83 20 D0 B0  D1 82 D1 80  D0 B8 D0 B1  D1 83 D1 82  D1 96 D0 B2  20 C2 AB 25  73 C2 BB 00  .... ............ .................. ..%s...
60A32AD0   D0 BF D1 96  D0 B4 20 D1  87 D0 B0 D1  81 20 D0 BF  D0 BE D1 88  D1 83 D0 BA  D1 83 20 C2  AB 25 73 C2  BB 00 D0 BF  D1 96 D0 B4  20 D1 87 D0  ...... ...... ............ ..%s......... ...
60A32AFC   B0 D1 81 20  D0 BF D0 BE  D1 88 D1 83  D0 BA D1 83  20 2F 6C 6F  73 74 2B 66  6F 75 6E 64  00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  ... ............ /lost+found....... ...... .
60A32B28   81 D0 BF D1  80 D0 BE D0  B1 D0 B8 20  D0 B2 D0 B8  D0 BA D0 BE  D0 BD D0 B0  D1 82 D0 B8  20 6C 73 74  61 74 20 D0  B4 D0 BB D1  8F 20 C2 AB  ........... ................ lstat ...... ..
60A32B54   25 73 C2 BB  00 D0 BF D1  96 D0 B4 20  D1 87 D0 B0  D1 81 20 D1  81 D0 BF D1  80 D0 BE D0  B1 D0 B8 20  D1 81 D1 82  D0 B2 D0 BE  D1 80 D0 B5  %s......... ...... ............ ............

60EDB2D4   E6 B8 85 E9  99 A4 00 E6  B8 85 E9 99  A4 40 6A 00  E6 B8 85 E9  99 A4 48 54  72 65 65 E7  B4 A2 E5 BC  95 00 E6 B8  85 E9 99 A4  69 6E 6F 64  .............@j.......HTree.............inod
60EDB300   65 00 E6 AD  A3 E5 9C A8  E6 B8 85 E9  99 A4 00 E7  A7 BB E9 99  A4 E4 B8 8D  E8 A2 AB E6  94 AF E6 8C  81 E7 9A 84  E6 96 87 E4  BB B6 E7 B3  e...........................................
60EDB32C   BB E7 BB 9F  E7 89 B9 E6  80 A7 E2 80  9C 25 73 E2  80 9D E3 80  82 0A 00 E6  B8 85 E9 99  A4 E5 BC B9  E6 80 A7 E7  BB 84 E6 A0  87 E5 BF 97  .............%s.............................
60EDB358   E5 B0 86 E4  BC 9A E5 AF  BC E8 87 B4  E6 96 87 E4  BB B6 E7 B3  BB E7 BB 9F  E5 87 BA E7  8E B0 E5 89  8D E5 90 8E  E4 B8 8D E4  B8 80 E8 87  ............................................
60EDB384   B4 E7 9A 84  E6 83 85 E5  86 B5 E3 80  82 0A 00 E5  85 8B E9 9A  86 E9 87 8D  E5 8F A0 E5  9D 97 00 E7  B0 87 E5 A4  A7 E5 B0 8F  3D 25 75 EF  ........................................=%u.
60EDB3B0   BC 88 6C 6F  67 3D 25 75  EF BC 89 0A  00 E8 BF 9E  E6 8E A5 E5  88 B0 20 2F  6C 6F 73 74  2B 66 6F 75  6E 64 00 E7  BB A7 E7 BB  AD 00 E5 B0  ..log=%u.............. /lost+found..........
60EDB3DC   86 E6 96 87  E4 BB B6 E7  B3 BB E7 BB  9F E8 BD AC  E6 8D A2 E4  B8 BA 20 33  32 20 E4 BD  8D E3 80 82  0A 00 E5 B0  86 E6 96 87  E4 BB B6 E7  ...................... 32 ..................
60EDB408   B3 BB E7 BB  9F E8 BD AC  E6 8D A2 E4  B8 BA 20 36  34 20 E4 BD  8D E3 80 82  0A 00 E5 B7  B2 E5 A4 8D  E5 88 B6 20  25 6C 6C 75  20 2F 20 25  .............. 64 ................. %llu / %
60EDB434   6C 6C 75 20  E5 9D 97 EF  BC 88 25 64  25 25 EF BC  89 EF BC 8C  E7 94 A8 E6  97 B6 20 25  73 20 00 E6  AD A3 E5 9C  A8 E6 8B B7  E8 B4 9D 20  llu ......%d%%............ %s .............
60EDB460   00 E5 B0 86  E6 96 87 E4  BB B6 E5 A4  8D E5 88 B6  E5 88 B0 E8  AE BE E5 A4  87 EF BC 9A  00 E6 8D 9F  E5 9D 8F E7  9A 84 E7 9B  AE E5 BD 95  ............................................
60EDB48C   E5 9D 97 20  25 6C 6C 75  EF BC 9A 6E  61 6D 65 5F  6C 65 6E EF  BC 88 25 64  EF BC 89 E9  94 99 E8 AF  AF 0A 00 E6  8D 9F E5 9D  8F E7 9A 84  ... %llu...name_len...%d....................
60EDB4B8   E7 9B AE E5  BD 95 E5 9D  97 20 25 6C  6C 75 EF BC  9A 72 65 63  5F 6C 65 6E  EF BC 88 25  64 EF BC 89  E9 94 99 E8  AF AF 0A 00  65 78 74 65  ......... %llu...rec_len...%d...........exte

60EE37B0   E9 85 8D E7  BC 93 E5 86  B2 E5 8C BA  E6 97 B6 00  E4 B8 BA 63  68 65 63 6B  5F 62 75 66  E5 88 86 E9  85 8D E5 86  85 E5 AD 98  E6 97 B6 00  ...................check_buf................
60EE37DC   E4 B8 BA 65  78 74 32 5F  71 63 6F 77  32 5F 69 6D  61 67 65 E5  88 86 E9 85  8D E5 86 85  E5 AD 98 E6  97 B6 00 E5  88 86 E9 85  8D 20 66 73  ...ext2_qcow2_image...................... fs
60EE3808   5F 66 65 61  74 75 72 65  20 E5 AD 97  E7 AC A6 E4  B8 B2 E6 97  B6 00 E5 88  86 E9 85 8D  20 69 6E 6F  64 65 E2 80  9C 25 73 E2  80 9D E6 97  _feature ................... inode...%s.....
60EE3834   B6 00 E5 88  86 E9 85 8D  6C 31 E8 A1  A8 E6 97 B6  00 E5 88 86  E9 85 8D 6C  32 E8 A1 A8  E6 97 B6 00  E5 88 86 E9  85 8D E5 86  85 E5 AD 98  ........l1.............l2...................
60EE3860   E6 97 B6 00  E5 86 99 E5  85 A5 E5 8A  A0 E6 89 B0  E5 9D 97 E4  BD 8D E5 9B  BE E6 97 B6  00 E8 BF AD  E4 BB A3 E5  9D 8F E5 9D  97 E5 88 97  ............................................
60EE388C   E8 A1 A8 E6  97 B6 00 E6  94 B9 E5 8F  98 E7 9B AE  E5 BD 95 E6  97 B6 00 E6  94 B9 E5 8F  98 E5 B7 A5  E4 BD 9C E7  9B AE E5 BD  95 E4 B8 BA  ............................................
60EE38B8   E2 80 9C 25  73 E2 80 9D  E6 97 B6 00  E6 A3 80 E6  B5 8B 20 4D  4D 50 20 E5  9D 97 E6 97  B6 00 E6 A3  80 E6 9F A5  20 25 73 20  E7 9A 84 E6  ...%s............. MMP ............. %s ....
60EE38E4   97 A5 E5 BF  97 E6 97 B6  00 E8 AF BB  E5 8F 96 E5  9D 8F E5 9D  97 69 6E 6F  64 65 E6 97  B6 00 E5 85  B3 E9 97 AD  20 69 6E 6F  64 65 20 25  .....................inode.......... inode %
60EE3910   75 20 E6 97  B6 00 E5 88  9B E5 BB BA  2F 6C 6F 73  74 2B 66 6F  75 6E 64 E7  9B AE E5 BD  95 E6 97 B6  00 E5 88 9B  E5 BB BA E7  9B AE E5 BD  u ........../lost+found.....................
60EE393C   95 E2 80 9C  25 73 E2 80  9D E6 97 B6  00 E5 88 9B  E5 BB BA E5  A4 A7 E6 96  87 E4 BB B6  20 25 6C 75  20 E6 97 B6  00 E5 9C A8  E5 86 85 E5  ....%s...................... %lu ...........
60EE3968   AD 98 E4 B8  AD E5 88 9B  E5 BB BA E5  9D 8F E5 9D  97 E5 88 97  E8 A1 A8 E6  97 B6 00 E5  88 9B E5 BB  BA 20 69 6E  6F 64 65 20  E2 80 9C 25  ................................. inode ...%
60EE3994   73 E2 80 9D  E6 97 B6 00  E5 88 9B E5  BB BA E6 A0  B9 E7 9B AE  E5 BD 95 E6  97 B6 00 E5  88 9B E5 BB  BA E7 89 B9  E6 AE 8A E6  96 87 E4 BB  s...........................................
60EE39C0   B6 E2 80 9C  25 73 E2 80  9D E6 97 B6  00 E5 88 9B  E5 BB BA E7  AC A6 E5 8F  B7 E9 93 BE  E6 8E A5 E2  80 9C 25 73  E2 80 9D E6  97 B6 00 E7  ....%s............................%s........
60EE39EC   A1 AE E5 AE  9A 20 25 73  20 E6 98 AF  E5 90 A6 E5  B7 B2 E6 8C  82 E8 BD BD  E6 97 B6 00  E8 BF 9B E8  A1 8C 69 6E  6F 64 65 E6  89 AB E6 8F  ..... %s .........................inode.....
60EE3A18   8F E6 97 B6  00 E6 89 A9  E5 85 85 2F  6C 6F 73 74  2B 66 6F 75  6E 64 E7 9B  AE E5 BD 95  E6 97 B6 00  E6 89 A9 E5  85 85 E7 9B  AE E5 BD 95  .........../lost+found......................
60EE3A44   E6 97 B6 00  E8 8E B7 E5  8F 96 E5 9D  97 20 25 6C  6C 75 20 E6  97 B6 E3 80  82 00 E8 8E  B7 E5 8F 96  E8 B6 85 E7  BA A7 E5 9D  97 E6 97 B6  ............. %llu .........................
60EE3A70   00 E8 8E B7  E5 8F 96 E4  B8 8B E4 B8  80 E4 B8 AA  69 6E 6F 64  65 E6 97 B6  00 E8 8E B7  E5 8F 96 25  73 E7 9A 84  73 74 61 74  E4 BF A1 E6  ................inode..........%s...stat....
60EE3A9C   81 AF E6 97  B6 E5 87 BA  E9 94 99 E3  80 82 00 E5  88 9D E5 A7  8B E5 8C 96  65 78 74 32  5F 71 63 6F  77 32 5F 69  6D 61 67 65  E6 97 B6 00  ........................ext2_qcow2_image....
60EE3AC8   E5 88 9D E5  A7 8B E5 8C  96 E6 97 A5  E5 BF 97 E8  B6 85 E7 BA  A7 E5 9D 97  E6 97 B6 00  E5 88 9D E5  A7 8B E5 8C  96 E9 85 8D  E9 A2 9D E4  ............................................
60EE3AF4   B8 8A E4 B8  8B E6 96 87  E6 97 B6 00  E5 88 9D E5  A7 8B E5 8C  96 E6 94 AF  E6 8C 81 E5  BA 93 E4 B8  AD E7 9A 84  E5 BC 95 E7  94 A8 E4 B8  ............................................
60EE3B20   8A E4 B8 8B  E6 96 87 E6  97 B6 00 E8  8E B7 E5 8F  96 E9 81 8D  E5 8E 86 69  6E 6F 64 65  20 25 75 20  E6 97 B6 00  E9 93 BE E6  8E A5 E2 80  .......................inode %u ............
60EE3B4C   9C 25 73 E2  80 9D E6 97  B6 00 E5 B0  9D E8 AF 95  E5 88 97 E5  87 BA E2 80  9C 25 73 E2  80 9D E7 9A  84 E5 B1 9E  E6 80 A7 E6  97 B6 00 E6  .%s......................%s.................
60EE3B78   9F A5 E6 89  BE E2 80 9C  25 73 E2 80  9D E6 97 B6  00 E6 9F A5  E6 89 BE 2F  6C 6F 73 74  2B 66 6F 75  6E 64 E7 9B  AE E5 BD 95  E6 97 B6 00  ........%s............./lost+found..........
60EE3BA4   E5 AF B9 E2  80 9C 25 73  E2 80 9D E8  BF 9B E8 A1  8C 6C 73 74  61 74 E8 B0  83 E7 94 A8  E6 97 B6 00  E5 88 9B E5  BB BA E7 9B  AE E5 BD 95  ......%s.........lstat......................
60EE3BD0   E2 80 9C 25  73 E2 80 9D  E6 97 B6 00  E5 B0 86 E5  9D 8F E5 9D  97 E6 A0 87  E8 AE B0 E4  B8 BA E5 B7  B2 E4 BD BF  E7 94 A8 E7  9A 84 00 E6  ...%s.......................................
60EE3BFC   89 93 E5 BC  80 E2 80 9C  25 73 E2 80  9D E5 B9 B6  E6 8B B7 E8  B4 9D E6 97  B6 00 E6 89  93 E5 BC 80  25 73 E6 97  B6 00 E6 89  93 E5 BC 80  ........%s......................%s..........
60EE3C28   E5 B9 B6 E5  88 B7 E6 96  B0 20 25 73  20 E6 97 B6  00 E6 89 93  E5 BC 80 E2  80 9C 25 73  E2 80 9D E6  97 B6 00 E6  89 93 E5 BC  80 E8 AE BE  ......... %s .............%s................
Top
NeddySeagoon
Administrator
Administrator
User avatar
Posts: 56100
Joined: Sat Jul 05, 2003 9:37 am
Location: 56N 3W

  • Quote

Post by NeddySeagoon » Thu Feb 11, 2021 2:37 pm

Manu311,

All those lost+found are preceded by a / so they are not directory entries.

You should of found the whole fragment I posted, which is the directory entries

Code: Select all

.
..
lost+found
which are created by

Code: Select all

mke2fs -t ext4 ... 
befrle any user data is added to the filesystem.
That means that the root directory of the root fs is gone, so its not possible that mount can work.

The next step, if you want to take it, is to use forensics tools to try to recover a few files.
Its a long slow process and you don't know if any data you want is still there either.
It may well be faster to recreate the missing data.

Before you even start with forensics tools, make an image of the original and work on the image.
You will want an undo and that's it.
We don't know if whatever damaged your data issued trim commands along the way. If so, whatever is left can vanish at any time when the SSD does its garbage collection.

I've never used any of the forensics tools, so I can't help much more.

Is your /home directory still there?
home would have been in the root directory so that's gone. Your /home/manu311 would have appeared in the top level home directory as manu311 or whatever your normal user name is.
The

Code: Select all

.
..
files for this directory and parent directory. Hmm ... There will be pointers there to where the root directory was.

Likewise you can search for /etc. As its Gentoo, it will contain a revdep-rebuild entry.
Decoding the directory entries isn't too bad, but the data space need not be in one fragment ... and the metadata is probably damaged, so it may not help.
Even forensics tools won't fix that. You need a lot of luck as well as a lot of time.

photorec may be worth a try.
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Top
Manu311
Tux's lil' helper
Tux's lil' helper
Posts: 128
Joined: Wed Nov 17, 2010 11:54 am

  • Quote

Post by Manu311 » Thu Feb 11, 2021 3:00 pm

I have searched for a couple of file names in the meantime, but I couldn't find a single filename in my home directories :-(.
I'll search for revdep-rebuild and try photorec - I guess that's all I can do :cry:
Maybe I'm lucky and get at least some of my files back.

If you get any other ideas of what could work, I'll probably not setup the system again before monday (simply because I don't have much time)
Recreating the data is probably more time consuming if it's a couple of days worth of programming ;-)

And of course I found the revdep-rebuild script, just not it's filename (0x53...):

Code: Select all

E030DF4C   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E030DF78   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E030DFA4   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E030DFD0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
E030DFFC   00 00 00 00  23 21 2F 62  69 6E 2F 62  61 73 68 0A  23 20 43 6F  70 79 72 69  67 68 74 20  31 39 39 39  2D 32 30 31  30 20 47 65  6E 74 6F 6F  ....#!/bin/bash.# Copyright 1999-2010 Gentoo
E030E028   20 46 6F 75  6E 64 61 74  69 6F 6E 0A  0A 23 20 72  65 76 64 65  70 2D 72 65  62 75 69 6C  64 3A 20 52  65 76 65 72  73 65 20 64  65 70 65 6E   Foundation..# revdep-rebuild: Reverse depen
E030E054   64 65 6E 63  79 20 72 65  62 75 69 6C  64 65 72 2E  0A 23 20 4F  72 69 67 69  6E 61 6C 20  41 75 74 68  6F 72 3A 20  53 74 61 6E  69 73 6C 61  dency rebuilder..# Original Author: Stanisla
E030E080   76 20 42 72  61 62 65 63  0A 23 20 52  65 77 72 69  74 65 20 41  75 74 68 6F  72 3A 20 4D  69 63 68 61  65 6C 20 41  2E 20 53 6D  69 74 68 0A  v Brabec.# Rewrite Author: Michael A. Smith.
E030E0AC   23 20 43 75  72 72 65 6E  74 20 4D 61  69 6E 74 61  69 6E 65 72  3A 20 50 61  75 6C 20 56  61 72 6E 65  72 20 3C 66  75 7A 7A 79  72 61 79 40  # Current Maintainer: Paul Varner <fuzzyray@
E030E0D8   67 65 6E 74  6F 6F 2E 6F  72 67 3E 0A  0A 23 20 54  4F 44 4F 3A  0A 23 20 2D  20 55 73 65  20 6D 6F 72  65 20 2F 65  74 63 2F 69  6E 69 74 2E  gentoo.org>..# TODO:.# - Use more /etc/init.
E030E104   64 2F 66 75  6E 63 74 69  6F 6E 73 2E  73 68 0A 23  20 2D 20 54  72 79 20 74  6F 20 72 65  64 75 63 65  20 74 68 65  20 6E 75 6D  62 65 72 20  d/functions.sh.# - Try to reduce the number
E030E130   6F 66 20 67  6C 6F 62 61  6C 20 76 61  72 73 0A 0A  23 23 0A 23  20 47 6C 6F  62 61 6C 20  56 61 72 69  61 62 6C 65  73 3A 0A 0A  23 20 4D 75  of global vars..##.# Global Variables:..# Mu
E030E15C   73 74 2D 62  65 2D 62 6C  61 6E 6B 3A  0A 75 6E 73  65 74 20 47  52 45 50 5F  4F 50 54 49  4F 4E 53 0A  0A 23 20 52  65 61 64 6F  6E 6C 79 20  st-be-blank:.unset GREP_OPTIONS..# Readonly
E030E188   76 61 72 69  61 62 6C 65  73 3A 0A 64  65 63 6C 61  72 65 20 2D  72 20 41 50  50 5F 4E 41  4D 45 3D 22  72 65 76 64  65 70 2D 72  65 62 75 69  variables:.declare -r APP_NAME="revdep-rebui
E030E1B4   6C 64 22 20  23 20 23 20  54 68 65 20  6E 61 6D 65  20 6F 66 20  74 68 69 73  20 61 70 70  6C 69 63 61  74 69 6F 6E  0A 64 65 63  6C 61 72 65  ld" # # The name of this application.declare
-- edit

I've found this - I have no idea what it is, but it contains revdep-rebuild and couple of other commands, so it might as well be a directory in some form (0x60...):

Code: Select all

D912A9D8   10 00 06 01  70 72 69 6E  74 66 36 12  46 02 5E 01  24 00 19 01  73 68 61 73  75 6D 2D 36  2E 32 30 2E  30 2D 70 65  72 6C 2D 35  2E 33 30 2E  ....printf6.F.^.$...shasum-6.20.0-perl-5.30.
D912AA04   33 03 0C 00  51 02 5E 01  0C 00 02 01  78 7A B9 17  53 02 5E 01  14 00 09 07  70 6F 64 73  65 6C 65 63  74 01 10 00  55 02 5E 01  0C 00 01 01  3...Q.^.....xz..S.^.....podselect...U.^.....
D912AA30   5B 71 7D 19  58 02 5E 01  0C 00 04 01  68 32 78 73  59 02 5E 01  10 00 07 01  73 6C 61 62  74 6F 70 00  5A 02 5E 01  0C 00 04 01  66 69 6C 65  [q}.X.^.....h2xsY.^.....slabtop.Z.^.....file
D912AA5C   5D 02 5E 01  14 00 0C 01  73 63 72 69  70 74 72 65  70 6C 61 79  5F 02 5E 01  14 00 0A 01  6D 73 67 75  6E 74 79 70  6F 74 21 1F  63 02 5E 01  ].^.....scriptreplay_.^.....msguntypot!.c.^.
D912AA88   14 00 0C 01  69 6E 73 74  61 6C 6C 2D  69 6E 66 6F  6A 02 5E 01  0C 00 03 01  63 6D 70 22  6B 02 5E 01  10 00 08 01  32 74 6F 33  2D 33 2E 38  ....install-infoj.^.....cmp"k.^.....2to3-3.8
D912AAB4   6C 02 5E 01  14 00 09 07  69 6E 66 6F  74 6F 63 61  70 00 10 00  6F 02 5E 01  10 00 08 01  75 6E 65 78  70 61 6E 64  78 02 5E 01  10 00 07 07  l.^.....infotocap...o.^.....unexpandx.^.....
D912AAE0   6C 7A 65 67  72 65 70 00  7C 02 5E 01  0C 00 04 01  74 70 75 74  7E 02 5E 01  10 00 08 01  75 74 6D 70  64 75 6D 70  83 02 5E 01  14 00 0C 01  lzegrep.|.^.....tput~.^.....utmpdump..^.....
D912AB0C   67 70 67 72  74 2D 63 6F  6E 66 69 67  85 02 5E 01  14 00 0A 01  67 65 74 74  65 78 74 2E  73 68 4B 2A  8C 02 5E 01  14 00 09 01  6C 6F 63 61  gpgrt-config..^.....gettext.shK*..^.....loca
D912AB38   6C 65 64 65  66 01 10 00  98 02 5E 01  14 00 0C 01  62 7A 69 70  32 72 65 63  6F 76 65 72  9A 02 5E 01  10 00 07 01  6D 73 67 75  6E 69 71 2C  ledef.....^.....bzip2recover..^.....msguniq,
D912AB64   9B 02 5E 01  10 00 05 07  62 7A 63 6D  70 6F A0 2C  9F 02 5E 01  10 00 06 01  62 7A 6D 6F  72 65 40 2D  A1 02 5E 01  10 00 07 01  64 75 6D 70  ..^.....bzcmpo.,..^.....bzmore@-..^.....dump
D912AB90   65 6C 66 2D  A2 02 5E 01  18 00 10 01  69 6E 74 6C  74 6F 6F 6C  2D 65 78 74  72 61 63 74  A4 02 5E 01  20 00 16 07  78 38 36 5F  36 34 2D 70  elf-..^.....intltool-extract..^. ...x86_64-p
D912ABBC   63 2D 6C 69  6E 75 78 2D  67 6E 75 2D  61 72 CD 31  A5 02 5E 01  10 00 06 01  62 61 73 65  36 34 58 33  A8 02 5E 01  10 00 08 01  70 72 69 6E  c-linux-gnu-ar.1..^.....base64X3..^.....prin
D912ABE8   74 65 6E 76  B9 02 5E 01  24 00 1B 01  70 6F 64 32  6D 61 6E 2D  34 2E 31 31  30 2E 30 2D  70 65 72 6C  2D 35 2E 33  30 2E 33 00  BC 02 5E 01  tenv..^.$...pod2man-4.110.0-perl-5.30.3...^.
D912AC14   10 00 05 01  78 61 72 67  73 00 14 00  BD 02 5E 01  18 00 0D 01  6E 65 74 74  6C 65 2D 70  62 6B 64 66  32 00 10 00  C2 02 5E 01  0C 00 04 01  ....xargs.....^.....nettle-pbkdf2.....^.....
D912AC40   67 72 6F 67  C8 02 5E 01  2C 00 24 01  78 38 36 5F  36 34 2D 70  63 2D 6C 69  6E 75 78 2D  67 6E 75 2D  6C 69 62 67  63 72 79 70  74 2D 63 6F  grog..^.,.$.x86_64-pc-linux-gnu-libgcrypt-co
D912AC6C   6E 66 69 67  C9 02 5E 01  10 00 06 01  62 7A 67 72  65 70 10 00  D1 02 5E 01  10 00 06 01  67 72 6F 74  74 79 0C 00  D8 02 5E 01  10 00 07 01  nfig..^.....bzgrep....^.....grotty....^.....
D912AC98   6D 73 67 63  6F 6D 6D 00  DD 02 5E 01  14 00 0A 07  70 65 72 6C  35 2E 33 30  2E 33 32 49  DF 02 5E 01  0C 00 02 01  70 72 10 00  E0 02 5E 01  msgcomm...^.....perl5.30.32I..^.....pr....^.
D912ACC4   14 00 09 01  73 68 61 32  35 36 73 75  6D 79 8A 4A  E8 02 5E 01  10 00 08 01  6D 73 67 75  6E 66 6D 74  EE 02 5E 01  10 00 05 01  63 68 6F 6F  ....sha256sumy.J..^.....msgunfmt..^.....choo
D912ACF0   6D E6 A9 4B  45 1F AC 01  1C 00 11 01  72 65 76 64  65 70 2D 72  65 62 75 69  6C 64 2E 73  68 00 14 00  7A 3C 5E 01  10 00 08 07  65 6B 65 79  m..KE.......revdep-rebuild.sh...z<^.....ekey
D912AD1C   77 6F 72 64  7B 3C 5E 01  10 00 06 07  69 6D 6C 61  74 65 14 00  7C 3C 5E 01  14 00 0B 07  65 63 6C 65  61 6E 2D 64  69 73 74 51  7D 3C 5E 01  word{<^.....imlate..|<^.....eclean-distQ}<^.
D912AD48   18 00 0E 07  72 65 76 64  65 70 2D 72  65 62 75 69  6C 64 35 53  7E 3C 5E 01  10 00 07 07  65 6E 61 6C  79 7A 65 53  78 21 AC 01  10 00 06 01  ....revdep-rebuild5S~<^.....enalyzeSx!......
D912AD74   61 72 67 6F  6E 32 96 55  90 3C 5E 01  18 00 0D 07  65 64 6F 6E  72 32 35 36  2D 68 61 73  68 1B 7B 56  91 3C 5E 01  14 00 09 07  67 6F 73 74  argon2.U.<^.....edonr256-hash.{V.<^.....gost
D912ADA0   2D 68 61 73  68 01 10 00  92 3C 5E 01  14 00 0A 07  74 69 67 65  72 2D 68 61  73 68 8A 5C  79 21 AC 01  10 00 06 01  62 73 64 74  61 72 9F 5D  -hash....<^.....tiger-hash.\y!......bsdtar.]
D912ADCC   5E 00 DE 01  14 00 0B 01  61 73 63 69  69 64 6F 63  2E 70 79 00  CC 1C AC 01  1C 00 11 01  67 72 75 62  2D 6D 6B 73  74 61 6E 64  61 6C 6F 6E  ^.......asciidoc.py.........grub-mkstandalon
D912ADF8   65 15 66 60  CF 1C AC 01  14 00 0B 01  67 72 75 62  2D 66 73 74  65 73 74 00  C7 1C AC 01  E4 01 0E 01  67 72 75 62  2D 6D 6B 72  65 6C 70 61  e.f`........grub-fstest.........grub-mkrelpa
D912AE24   74 68 10 00  26 3E 89 61  A7 03 28 00  FE 45 44 62  64 00 10 00  04 AB 4D 62  EE 00 10 00  E6 CC 95 62  43 00 0C 00  54 F4 9D 62  C7 01 14 00  th..&>.a..(..EDbd.....Mb.......bC...T..b....
D912AE50   B2 16 E5 62  D9 01 10 00  C8 6E 7D 63  91 00 10 00  B8 87 DE 64  FC 01 0C 00  98 82 2B 65  FD 02 10 00  D8 DE 6F 65  78 03 14 00  64 E9 B4 65  ...b.....n}c.......d......+e......oex...d..e
D912AE7C   ED 02 14 00  A4 AC EC 65  99 00 10 00  D2 D1 61 66  DE 02 0C 00  12 EE D3 66  DB 02 0C 00  C4 A3 87 67  4E 02 10 00  CA 17 E1 67  88 01 10 00  .......e......af.......f.......gN......g....
D912AEA8   26 30 64 68  49 02 14 00  48 50 BF 68  7D 03 10 00  6E 3F C2 69  8F 01 10 00  76 3F FD 69  6A 03 10 00  22 C6 1A 6A  52 03 10 00  32 B9 50 6B  &0dhI...HP.h}...n?.i....v?.ij..."..jR...2.Pk
Also some config files (0x61...):

Code: Select all

592D6F44   F3 00 10 00  24 CB 71 73  C4 03 18 00  AE A9 49 74  A8 01 1C 00  0C 78 56 74  27 01 18 00  B8 98 A4 75  89 02 14 00  F8 86 DE 76  BC 02 10 00  ....$.qs......It.....xVt'......u.......v....
592D6F70   E2 B6 05 78  A6 00 14 00  2A 28 CE 78  5C 02 1C 00  3C 4B F7 79  C0 02 14 00  AA 96 D3 7A  CE 02 1C 00  F4 1B 46 7B  97 01 10 00  2E F2 AA 7B  ...x....*(.x\...<K.y.......z......F{.......{
592D6F9C   47 03 1C 00  CA C4 CE 7B  1F 00 14 00  28 4B A1 7D  E9 03 14 00  C8 54 AA 7D  F4 03 24 00  D2 9F FE 7D  92 02 18 00  F2 B7 4E 7E  F7 02 18 00  G......{....(K.}.....T.}..$....}......N~....
592D6FC8   AE 4A 76 7E  5D 03 18 00  38 61 32 7F  2D 01 18 00  0A 21 58 7F  DC 01 10 00  C4 D8 1A 80  6E 00 14 00  82 A2 35 80  DC 00 10 00  9C EF 0D 81  .Jv~]...8a2.-....!X.........n.....5.........
592D6FF4   00 00 00 00  0C 00 00 DE  11 F4 77 28  F2 22 60 01  0C 00 01 02  2E 00 00 00  4C 0D 5E 01  0C 00 02 02  2E 2E 00 00  F3 22 60 01  1C 00 11 01  ..........w(."`.........L.^.........."`.....
592D7020   73 79 73 2D  6C 69 62 73  2D 70 61 6D  2E 63 6F 6E  66 00 00 00  F4 22 60 01  14 00 0B 01  6D 61 6E 2D  64 62 2E 63  6F 6E 66 00  F5 22 60 01  sys-libs-pam.conf...."`.....man-db.conf.."`.
592D704C   1C 00 13 01  70 6F 72 74  61 67 65 2D  63 63 61 63  68 65 2E 63  6F 6E 66 00  BF 20 AC 01  1C 00 13 01  72 65 76 64  65 70 2D 72  65 62 75 69  ....portage-ccache.conf.. ......revdep-rebui
592D7078   6C 64 2E 63  6F 6E 66 00  F5 0A AE 01  14 00 09 01  6C 76 6D 32  2E 63 6F 6E  66 00 00 00  33 21 AC 01  60 0F 0F 01  63 72 79 70  74 73 65 74  ld.conf.........lvm2.conf...3!..`...cryptset
592D70A4   75 70 2E 63  6F 6E 66 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  up.conf.....................................
and (0x61)

Code: Select all

592D9FBC   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
592D9FE8   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  0C 00 00 DE  12 C4 74 06  FE 22 60 01  0C 00 01 02  2E 00 00 00  F6 22 60 01  0C 00 02 02  ......................t.."`.........."`.....
592DA014   2E 2E 00 00  FF 22 60 01  14 00 0A 01  65 6E 76 2D  75 70 64 61  74 65 00 00  00 23 60 01  14 00 0A 01  72 65 67 65  6E 77 6F 72  6C 64 00 00  ....."`.....env-update...#`.....regenworld..
592DA040   01 23 60 01  14 00 0A 01  67 6C 73 61  2D 63 68 65  63 6B 00 00  02 23 60 01  10 00 07 07  70 79 74 68  6F 6E 33 00  03 23 60 01  14 00 0B 01  .#`.....glsa-check...#`.....python3..#`.....
592DA06C   66 69 78 70  61 63 6B 61  67 65 73 00  04 23 60 01  10 00 05 01  6D 65 73 6F  6E 00 00 00  05 23 60 01  10 00 06 01  65 6D 61 69  6E 74 00 00  fixpackages..#`.....meson....#`.....emaint..
592DA098   06 23 60 01  10 00 05 07  70 79 64 6F  63 00 00 00  07 23 60 01  14 00 0C 01  61 72 63 68  69 76 65 2D  63 6F 6E 66  08 23 60 01  0C 00 04 07  .#`.....pydoc....#`.....archive-conf.#`.....
592DA0C4   32 74 6F 33  09 23 60 01  10 00 06 01  67 65 6D 61  74 6F 00 00  0A 23 60 01  14 00 0B 01  65 6D 69 72  72 6F 72 64  69 73 74 00  0B 23 60 01  2to3.#`.....gemato...#`.....emirrordist..#`.
592DA0F0   10 00 08 01  71 75 69 63  6B 70 6B 67  0C 23 60 01  10 00 06 01  65 6D 65 72  67 65 00 00  0D 23 60 01  18 00 0D 07  70 79 74 68  6F 6E 2D 63  ....quickpkg.#`.....emerge...#`.....python-c
592DA11C   6F 6E 66 69  67 00 00 00  0E 23 60 01  18 00 0D 01  64 69 73 70  61 74 63 68  2D 63 6F 6E  66 00 00 00  0F 23 60 01  14 00 0C 01  65 61 73 79  onfig....#`.....dispatch-conf....#`.....easy
592DA148   5F 69 6E 73  74 61 6C 6C  10 23 60 01  10 00 08 01  70 6F 72 74  61 67 65 71  11 23 60 01  10 00 06 07  70 79 74 68  6F 6E 00 00  12 23 60 01  _install.#`.....portageq.#`.....python...#`.
592DA174   10 00 06 07  70 79 76 65  6E 76 00 00  13 23 60 01  18 00 0E 01  70 79 74 68  6F 6E 33 2D  63 6F 6E 66  69 67 00 00  14 23 60 01  14 00 09 01  ....pyvenv...#`.....python3-config...#`.....
592DA1A0   65 67 65 6E  63 61 63 68  65 00 00 00  15 23 60 01  14 00 0A 01  63 68 61 72  64 65 74 65  63 74 00 00  16 23 60 01  10 00 06 01  65 62 75 69  egencache....#`.....chardetect...#`.....ebui
592DA1CC   6C 64 00 00  BD 20 AC 01  10 00 06 01  65 63 6C 65  61 6E 00 00  BC 20 AC 01  10 00 07 01  65 73 68 6F  77 6B 77 00  BB 20 AC 01  10 00 08 01  ld... ......eclean... ......eshowkw.. ......
592DA1F8   65 6B 65 79  77 6F 72 64  BA 20 AC 01  10 00 06 01  69 6D 6C 61  74 65 00 00  B9 20 AC 01  14 00 0B 01  65 63 6C 65  61 6E 2D 64  69 73 74 00  ekeyword. ......imlate... ......eclean-dist.
592DA224   B8 20 AC 01  18 00 0E 01  72 65 76 64  65 70 2D 72  65 62 75 69  6C 64 00 00  B7 20 AC 01  10 00 07 01  65 6E 61 6C  79 7A 65 00  B6 20 AC 01  . ......revdep-rebuild... ......enalyze.. ..
592DA250   10 00 06 01  65 71 75 65  72 79 00 00  B5 20 AC 01  10 00 08 01  65 70 6B 67  69 6E 66 6F  B4 20 AC 01  88 0D 0A 01  65 63 6C 65  61 6E 2D 70  ....equery... ......epkginfo. ......eclean-p
(0x62....)

Code: Select all

59299A88   1E 15 64 01  14 00 0C 01  72 65 6E 61  6D 65 2E 31  2E 62 7A 32  21 15 64 01  18 00 0D 01  70 65 72 6C  71 6E 78 2E  31 2E 62 7A  32 00 00 00  ..d.....rename.1.bz2!.d.....perlqnx.1.bz2...
59299AB4   26 15 64 01  24 00 1C 07  73 73 6C 2D  6F 70 65 6E  73 73 6C 2D  65 63 70 61  72 61 6D 2E  31 73 73 6C  2E 62 7A 32  30 15 64 01  1C 00 13 01  &.d.$...ssl-openssl-ecparam.1ssl.bz20.d.....
59299AE0   73 73 6C 2D  65 72 72 73  74 72 2E 31  73 73 6C 2E  62 7A 32 C8  31 15 64 01  14 00 0B 01  6C 73 69 70  63 2E 31 2E  62 7A 32 00  37 15 64 01  ssl-errstr.1ssl.bz2.1.d.....lsipc.1.bz2.7.d.
59299B0C   28 00 1E 07  73 73 6C 2D  6F 70 65 6E  73 73 6C 2D  70 6B 65 79  70 61 72 61  6D 2E 31 73  73 6C 2E 62  7A 32 1C 00  3D 15 64 01  24 00 1B 07  (...ssl-openssl-pkeyparam.1ssl.bz2..=.d.$...
59299B38   73 73 6C 2D  6F 70 65 6E  73 73 6C 2D  72 73 61 75  74 6C 2E 31  73 73 6C 2E  62 7A 32 CD  42 15 64 01  18 00 10 01  6C 69 62 74  6F 6F 6C 69  ssl-openssl-rsautl.1ssl.bz2.B.d.....libtooli
59299B64   7A 65 2E 31  2E 62 7A 32  43 15 64 01  14 00 09 01  64 69 72 2E  31 2E 62 7A  32 03 18 00  47 15 64 01  18 00 0F 01  70 79 74 68  6F 6E 32 2E  ze.1.bz2C.d.....dir.1.bz2...G.d.....python2.
59299B90   37 2E 31 2E  62 7A 32 00  4C 15 64 01  18 00 10 01  69 6E 66 6F  74 6F 63 61  70 2E 31 6D  2E 62 7A 32  D5 1D AC 01  1C 00 14 01  72 65 76 64  7.1.bz2.L.d.....infotocap.1m.bz2........revd
59299BBC   65 70 2D 72  65 62 75 69  6C 64 2E 31  2E 62 7A 32  DF 1A C0 01  14 00 0C 01  65 66 69 76  61 72 2E 31  2E 62 7A 32  73 45 64 01  18 00 0E 07  ep-rebuild.1.bz2........efivar.1.bz2sEd.....
59299BE8   74 74 68 2D  68 61 73 68  2E 31 2E 62  7A 32 1C 00  74 45 64 01  1C 00 11 07  6D 61 67 6E  65 74 2D 6C  69 6E 6B 2E  31 2E 62 7A  32 B2 A5 D5  tth-hash.1.bz2..tEd.....magnet-link.1.bz2...
59299C14   23 1D AC 01  14 00 0C 01  62 73 64 74  61 72 2E 31  2E 62 7A 32  98 1C AC 01  CC 03 12 01  67 72 75 62  2D 6D 6B 69  6D 61 67 65  2E 31 2E 62  #.......bsdtar.1.bz2........grub-mkimage.1.b
59299C40   7A 32 80 D9  B2 02 18 00  2A 64 89 D9  2B 03 14 00  EC CF 33 DA  BC 03 24 00  D6 8F F3 DA  8A 00 14 00  F8 72 39 DB  8F 00 18 00  E4 6E 71 DB  z2......*d..+.....3...$..........r9......nq.
(0x74)

Code: Select all

5922EFB4   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
5922EFE0   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  0C 00 00 DE  CB 53 FB 4B  4D 1C AC 01  0C 00 01 02  2E 00 00 00  .............................S.KM...........
5922F00C   01 00 AC 01  0C 00 02 02  2E 2E 00 00  4E 1C AC 01  14 00 09 02  64 69 73 74  66 69 6C 65  73 00 00 00  4F 1C AC 01  0C 00 03 02  65 64 62 00  ............N.......distfiles...O.......edb.
5922F038   5A 1C AC 01  10 00 07 02  62 69 6E 70  6B 67 73 00  5B 1C AC 01  10 00 08 02  6C 64 63 6F  6E 66 69 67  5D 1C AC 01  10 00 05 01  2E 6B 65 65  Z.......binpkgs.[.......ldconfig]........kee
5922F064   70 00 00 00  5E 1C AC 01  0C 00 03 02  6D 61 6E 00  FE 1D AC 01  80 0F 0E 02  72 65 76 64  65 70 2D 72  65 62 75 69  6C 64 00 00  00 00 00 00  p...^.......man.........revdep-rebuild......
5922F090   00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  00 00 00 00  ............................................
-- edit 2:
photorec saved 200 GB of files which definitely isn't everything that has been stored, but a lot. Now I just have to search through 300k files to find my source code - should be fun :x .

-- edit 3:
Since I kinda backuped everything that I can, I'm trying around stuff now and found that testdisk actually finds swap partitions, but no ext4:

Code: Select all

     Partition                  Start        End    Size in sectors

   P Linux LVM2                     0 1999359999 1999360000
   P Linux SWAP            1849726448 1850773599    1047152
   P Linux SWAP            1849726456 1849987887     261432
   P Linux SWAP            1849787888 1850835039    1047152
   P Linux SWAP            1849787896 1850049327     261432
   P Linux SWAP            1849800176 1850847327    1047152
   P Linux SWAP            1849800184 1850061615     261432
Top
Post Reply

48 posts
  • Previous
  • 1
  • 2

Return to “Unsupported Software”

Jump to
  • Assistance
  • ↳   News & Announcements
  • ↳   Frequently Asked Questions
  • ↳   Installing Gentoo
  • ↳   Multimedia
  • ↳   Desktop Environments
  • ↳   Networking & Security
  • ↳   Kernel & Hardware
  • ↳   Portage & Programming
  • ↳   Gamers & Players
  • ↳   Other Things Gentoo
  • ↳   Unsupported Software
  • Discussion & Documentation
  • ↳   Documentation, Tips & Tricks
  • ↳   Gentoo Chat
  • ↳   Gentoo Forums Feedback
  • ↳   Duplicate Threads
  • International Gentoo Users
  • ↳   中文 (Chinese)
  • ↳   Dutch
  • ↳   Finnish
  • ↳   French
  • ↳   Deutsches Forum (German)
  • ↳   Diskussionsforum
  • ↳   Deutsche Dokumentation
  • ↳   Greek
  • ↳   Forum italiano (Italian)
  • ↳   Forum di discussione italiano
  • ↳   Risorse italiane (documentazione e tools)
  • ↳   Polskie forum (Polish)
  • ↳   Instalacja i sprzęt
  • ↳   Polish OTW
  • ↳   Portuguese
  • ↳   Documentação, Ferramentas e Dicas
  • ↳   Russian
  • ↳   Scandinavian
  • ↳   Spanish
  • ↳   Other Languages
  • Architectures & Platforms
  • ↳   Gentoo on ARM
  • ↳   Gentoo on PPC
  • ↳   Gentoo on Sparc
  • ↳   Gentoo on Alternative Architectures
  • ↳   Gentoo on AMD64
  • ↳   Gentoo for Mac OS X (Portage for Mac OS X)
  • Board index
  • All times are UTC
  • Delete cookies

© 2001–2026 Gentoo Foundation, Inc.

Powered by phpBB® Forum Software © phpBB Limited

Privacy Policy

 

 

magic