Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I accidentally deleted whole Documents folder. I want to use extundelete to recover it. As a Ubuntu virgin I spend an hour to correctly write command:

sudo extundelete /dev/sda6 --restore-directory home/ladislav/Dokumenty

ladislav@Ladislav:~$ sudo extundelete /dev/sda6 --restore-directory home/ladislav/Dokumenty
WARNING: Extended attributes are not restored.
WARNING: EXT3_FEATURE_INCOMPAT_RECOVER is set.

How can I fix this?

The partition should be unmounted to undelete any files without further data loss
If the partition is not currently mounted, this message indicates 
it was improperly unmounted, and you should run fsck before continuing.
If you decide to continue, extundelete may overwrite some of the deleted
files and make recovering those files impossible.  You should unmount the
file system and check it with fsck before using extundelete.

WHEN I TRY TO UNMOUNT IT, THE ANSWER IS BUSY...

ladislav@Ladislav:~$ sudo umount /dev/sda6
umount: /: device is busy.
        (In some cases useful info about processes that use
         the device is found by lsof(8) or fuser(1))


Would you like to continue? (y/n) 
y
Loading filesystem metadata ... 344 groups loaded.
Loading journal descriptors ... 30498 descriptors loaded.
Searching for recoverable inodes in directory home/ladislav/Dokumenty ... 
3300 recoverable inodes found.
Looking through the directory structure for deleted files ... 
3300 recoverable inodes still lost.
No files were undeleted.

What am I doing wrong?...except from not keeping backup for my data?

share|improve this question
    
what was your /dev/sda6 partition? –  Avinash Raj Dec 10 '13 at 18:02
    
hard-drive in laptop from which I am writing now (if I understood the question) –  Guy from CrossValidated Dec 10 '13 at 18:04
    
To be honest I have only slight idea what partittion is... –  Guy from CrossValidated Dec 10 '13 at 18:09
    
open gparted locate /dev/sda6 and find out its filesystem and mountpoint. –  Avinash Raj Dec 10 '13 at 18:12
    
gparted installed, command done. I see a window 1st: column /dev/sda6p1. 2nd: ext4, 3rd: 42.91 GB....nothing more –  Guy from CrossValidated Dec 10 '13 at 18:21

1 Answer 1

up vote 1 down vote accepted

You should always run data recovery operations from a live CD.

Once you deleted the files, the physical space on the hard drive is available to write more data, such as tmp files. If the data is over written you will not be able to recover.

In addition, it is usually best to work on a copy of the hard drive.

From your error message

umount: /: device is busy.

sda6 is mounted as root and you will not be able to unmount it.

If you wish to see what is using the hard drive, you can always use lsof

sudo losf /dev/sda6

See also - https://help.ubuntu.com/community/DataRecovery

share|improve this answer
    
i know,i asked the op that what was the mountpoint of /dev/sda6 he replied that there was an exclamatory mark on it. –  Avinash Raj Dec 10 '13 at 18:45
    
@AvinashRaj the error message identifies the mount point as / –  bodhi.zazen Dec 10 '13 at 19:12

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.