18

I am trying to troubleshoot a system (Arch Linux) that had systemd installed.

The volume has been mounted on an Ubuntu system (14.04) that has no systemd installed.

How can I troubleshoot said systemd journal without switching the host box to systemd?

apt-get install journalctl does not work.

  • Use a version of Linux that runs systemd such as Arch, Fedora, or Ubuntu 15.04 – Panther May 2 '15 at 13:02
  • You don't need to switch to systemd, just the journalctl binary is needed ... which unfortunately is not available for 14.04 (all PPAs for it seem to be defunct). Even 14.10 would do. – muru May 2 '15 at 13:03
  • @bodhi.zaen This would be the obvious solution but not it is currently not possible. – jottr May 2 '15 at 13:03
  • 2
    A VM, or a LXC container might be simpler and safer. – muru May 2 '15 at 13:05
  • 2
    No. upgrading to 15.04 will not help: ubuntu's journalctl is not compatible with archlinux'journal file. Archlinux use lz4 compression while ubuntu use xz compression. So one can not read journal file from a system with journalctl from the other system. a simple chroot should be enough, no ? – solsTiCe May 2 '15 at 13:40
5
+100

chroot into the Arch Linux system:

cd /location/of/arch/root
chroot /location/of/arch/root /bin/bash

journalctl looks for the journal files in /var/log/journal/machine-id/. If you boot up with a rescue OS that has a different machine ID or a different root it hence won't find any data there.

Hence,

a) use journalctl --directory=/var/log/journal/<machine-id>

b) or journalctl -m

The "-m" swicth merges the journals of all directories in /var/log/journal/*, hence makes it unnecessary to figure out the machine id of the host.

Source

  • I've tested this with Ubuntu 16.04/Arch Linux, but could not get my hands on a 14.04. – daltonfury42 Dec 7 '16 at 8:08
-2

the command line partition recovery program called TestDisk should allow some manipulation to the systemd (Arch Linux) volume


this not not a full or "good" solution. but TestDisk can

  1. Rebuild a partition table, recover deleted partition
  2. Locate the ext2/ext3/ext4 Backup SuperBlock
  3. Copy files from deleted a ext2/ext3/ext4 partition.
  4. handle a non-partitioned volume
  5. Rewrite the Master boot record (MBR)

give it a try.

$ sudo apt-get install testdisk

start it

$ sudo testdisk

press Enter to create a new log & select the disk with the volume you want to manipulation

select the partition table type.
yours is Intel

from here you can

  • view files
  • Copy files

hope it helps

  • 1
    More information on how to use TestDisk would be helpful in case the link breaks in the future. – George Udosen Dec 6 '16 at 0:27
  • @George is this what you wanted? – John Dec 6 '16 at 4:06
  • That's a good start but look at the bottom of the link you would see a section called documentation there you find a step by step link try that, but note that a down vote has been done on your answer so consider the question again before updating your post. – George Udosen Dec 6 '16 at 4:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.