Hacker News new | ask | show | jobs
by rnhmjoj 2606 days ago
If you are using ext4 there is extundelete that simplifies the process, it requires to remount the filesystem read-only, though.

  mount -o remount,ro /dev/sda1
  extundelete --restore-all --after $(date -d "-1 hours" +%s) /dev/sda1
  find /RECOVERED_FILES -name accidentally_deleted_file 
  mount -o remount,rw /dev/sda1