A Case of Accidentally Deleted Data on a Linux Server

Case:
The customer company has a RHEL system, which is deleted by an important directory because of misunderstanding. This RHEL is stored as a RAID of 15 SAS disks and uses the LVM+EXT3 file system.

Solution:
After careful inquiries and analysis, we found that some data recovery feasibility.Immediately began to analyze RAID, reorganize RAID, and immediately mirror. After the mirror was completed, he started to analyze the EXT3 file system. After analyzing the EXT3 file system, it was found that a large number of I nodes that were deleted had been covered.can not fix.Give up the first plan, start the second solution, and let customers provide some samples. The files to be recovered are not large. From a few K to a few m, collect file features combined with the storage characteristics of the EXT3 file system, and start writing recovery procedures on the spot on the spot.Because the time is too tight, there is very little time for writing procedures. After recovery algorithm conception and multiple tests, the program has the function of maximizing recovery. Since then, scanning recovery has been started. After multiple hours of scanning, 500 has been restored.The documents required by multiple customers are normalized by the customer to verify that the vast majority of the documents are normal and the files are recovered very well. The customer is very satisfied.