In Centos 6 / Windows 10 dual boot, overwritten partition by Windows bootloader

Multi tool use
Multi tool use

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












In a previous Centos 6 install, Windows 10 was installed months ago and the Centos 6 GRUB file was updated to select dual boot by disk name.



Recently, due to some kind of error in a reboot, the disk order was changed and Windows tried to boot from an array partition (which contained no OS, only data), destroying it and just leaving a 150 something Mb boot partition where there was a full disk XFS partition.



Now I have that array in this state:



GUID partition table



+150 something Mb NTFS file system (presumably the Windows boot partition that destroyed the previous partition)

+10 Tb empty space



I am sure the disk was overwritten by Windows boot and I need to restore the previous partition and access the previous data, but I'm doubting which is the best procedure in this case:



a) Should I delete the NTFS boot partition and try a full testdisk disk recovery?

b) Should I delete the NTFS boot partition and use fdisk or similar to automagically restore the previous partition?

c) Should I use low-level recovery software to try to recover as much raw data as possible since all hope of a clean restore is gone?







share|improve this question




















  • The best approach would be simply to restore from backups.
    – Andrea Lazzarotto
    Nov 7 '17 at 10:17










  • But recovery wise, in case you don't have a backup, how would you do it?
    – A. del Solar
    Nov 8 '17 at 14:27










  • A full clone of the entire drive and then you can try Testdisk and other stuff on the clone. If you screw up badly, repeat the cloning and try again. Unfortunately I have not much knowledge about XFS, but it's safe to assume that at least important data was backed up.
    – Andrea Lazzarotto
    Nov 8 '17 at 22:17










  • Thank you, I tried Testdisk but sadly no major partition was found, only small fragments that weren't recoverable. Then I tried xfs_repair first: access.redhat.com/documentation/en-us/red_hat_enterprise_linux/… And I could recover around 200 Mb files.
    – A. del Solar
    Nov 13 '17 at 13:16















up vote
0
down vote

favorite












In a previous Centos 6 install, Windows 10 was installed months ago and the Centos 6 GRUB file was updated to select dual boot by disk name.



Recently, due to some kind of error in a reboot, the disk order was changed and Windows tried to boot from an array partition (which contained no OS, only data), destroying it and just leaving a 150 something Mb boot partition where there was a full disk XFS partition.



Now I have that array in this state:



GUID partition table



+150 something Mb NTFS file system (presumably the Windows boot partition that destroyed the previous partition)

+10 Tb empty space



I am sure the disk was overwritten by Windows boot and I need to restore the previous partition and access the previous data, but I'm doubting which is the best procedure in this case:



a) Should I delete the NTFS boot partition and try a full testdisk disk recovery?

b) Should I delete the NTFS boot partition and use fdisk or similar to automagically restore the previous partition?

c) Should I use low-level recovery software to try to recover as much raw data as possible since all hope of a clean restore is gone?







share|improve this question




















  • The best approach would be simply to restore from backups.
    – Andrea Lazzarotto
    Nov 7 '17 at 10:17










  • But recovery wise, in case you don't have a backup, how would you do it?
    – A. del Solar
    Nov 8 '17 at 14:27










  • A full clone of the entire drive and then you can try Testdisk and other stuff on the clone. If you screw up badly, repeat the cloning and try again. Unfortunately I have not much knowledge about XFS, but it's safe to assume that at least important data was backed up.
    – Andrea Lazzarotto
    Nov 8 '17 at 22:17










  • Thank you, I tried Testdisk but sadly no major partition was found, only small fragments that weren't recoverable. Then I tried xfs_repair first: access.redhat.com/documentation/en-us/red_hat_enterprise_linux/… And I could recover around 200 Mb files.
    – A. del Solar
    Nov 13 '17 at 13:16













up vote
0
down vote

favorite









up vote
0
down vote

favorite











In a previous Centos 6 install, Windows 10 was installed months ago and the Centos 6 GRUB file was updated to select dual boot by disk name.



Recently, due to some kind of error in a reboot, the disk order was changed and Windows tried to boot from an array partition (which contained no OS, only data), destroying it and just leaving a 150 something Mb boot partition where there was a full disk XFS partition.



Now I have that array in this state:



GUID partition table



+150 something Mb NTFS file system (presumably the Windows boot partition that destroyed the previous partition)

+10 Tb empty space



I am sure the disk was overwritten by Windows boot and I need to restore the previous partition and access the previous data, but I'm doubting which is the best procedure in this case:



a) Should I delete the NTFS boot partition and try a full testdisk disk recovery?

b) Should I delete the NTFS boot partition and use fdisk or similar to automagically restore the previous partition?

c) Should I use low-level recovery software to try to recover as much raw data as possible since all hope of a clean restore is gone?







share|improve this question












In a previous Centos 6 install, Windows 10 was installed months ago and the Centos 6 GRUB file was updated to select dual boot by disk name.



Recently, due to some kind of error in a reboot, the disk order was changed and Windows tried to boot from an array partition (which contained no OS, only data), destroying it and just leaving a 150 something Mb boot partition where there was a full disk XFS partition.



Now I have that array in this state:



GUID partition table



+150 something Mb NTFS file system (presumably the Windows boot partition that destroyed the previous partition)

+10 Tb empty space



I am sure the disk was overwritten by Windows boot and I need to restore the previous partition and access the previous data, but I'm doubting which is the best procedure in this case:



a) Should I delete the NTFS boot partition and try a full testdisk disk recovery?

b) Should I delete the NTFS boot partition and use fdisk or similar to automagically restore the previous partition?

c) Should I use low-level recovery software to try to recover as much raw data as possible since all hope of a clean restore is gone?









share|improve this question











share|improve this question




share|improve this question










asked Nov 6 '17 at 14:12









A. del Solar

1




1











  • The best approach would be simply to restore from backups.
    – Andrea Lazzarotto
    Nov 7 '17 at 10:17










  • But recovery wise, in case you don't have a backup, how would you do it?
    – A. del Solar
    Nov 8 '17 at 14:27










  • A full clone of the entire drive and then you can try Testdisk and other stuff on the clone. If you screw up badly, repeat the cloning and try again. Unfortunately I have not much knowledge about XFS, but it's safe to assume that at least important data was backed up.
    – Andrea Lazzarotto
    Nov 8 '17 at 22:17










  • Thank you, I tried Testdisk but sadly no major partition was found, only small fragments that weren't recoverable. Then I tried xfs_repair first: access.redhat.com/documentation/en-us/red_hat_enterprise_linux/… And I could recover around 200 Mb files.
    – A. del Solar
    Nov 13 '17 at 13:16

















  • The best approach would be simply to restore from backups.
    – Andrea Lazzarotto
    Nov 7 '17 at 10:17










  • But recovery wise, in case you don't have a backup, how would you do it?
    – A. del Solar
    Nov 8 '17 at 14:27










  • A full clone of the entire drive and then you can try Testdisk and other stuff on the clone. If you screw up badly, repeat the cloning and try again. Unfortunately I have not much knowledge about XFS, but it's safe to assume that at least important data was backed up.
    – Andrea Lazzarotto
    Nov 8 '17 at 22:17










  • Thank you, I tried Testdisk but sadly no major partition was found, only small fragments that weren't recoverable. Then I tried xfs_repair first: access.redhat.com/documentation/en-us/red_hat_enterprise_linux/… And I could recover around 200 Mb files.
    – A. del Solar
    Nov 13 '17 at 13:16
















The best approach would be simply to restore from backups.
– Andrea Lazzarotto
Nov 7 '17 at 10:17




The best approach would be simply to restore from backups.
– Andrea Lazzarotto
Nov 7 '17 at 10:17












But recovery wise, in case you don't have a backup, how would you do it?
– A. del Solar
Nov 8 '17 at 14:27




But recovery wise, in case you don't have a backup, how would you do it?
– A. del Solar
Nov 8 '17 at 14:27












A full clone of the entire drive and then you can try Testdisk and other stuff on the clone. If you screw up badly, repeat the cloning and try again. Unfortunately I have not much knowledge about XFS, but it's safe to assume that at least important data was backed up.
– Andrea Lazzarotto
Nov 8 '17 at 22:17




A full clone of the entire drive and then you can try Testdisk and other stuff on the clone. If you screw up badly, repeat the cloning and try again. Unfortunately I have not much knowledge about XFS, but it's safe to assume that at least important data was backed up.
– Andrea Lazzarotto
Nov 8 '17 at 22:17












Thank you, I tried Testdisk but sadly no major partition was found, only small fragments that weren't recoverable. Then I tried xfs_repair first: access.redhat.com/documentation/en-us/red_hat_enterprise_linux/… And I could recover around 200 Mb files.
– A. del Solar
Nov 13 '17 at 13:16





Thank you, I tried Testdisk but sadly no major partition was found, only small fragments that weren't recoverable. Then I tried xfs_repair first: access.redhat.com/documentation/en-us/red_hat_enterprise_linux/… And I could recover around 200 Mb files.
– A. del Solar
Nov 13 '17 at 13:16











1 Answer
1






active

oldest

votes

















up vote
0
down vote













The best procedures to recover files in xfs appear to be:




  1. xfs_repair - Link to documentation

    Included or downloadable in several GNU/Linux distributions.



    xfs_check /dev/device --> Analyze the disk (no writing)
    xfs_repair -n --> A more in-depth analysis (no writing)



    xfs_repair --> Actual recovery (writing)




  2. testdisk - Link to documentation

    Free software included in Gparted.



    Follow the steps in the documentation link.




  3. UFS Explorer - Link to product

    Commercial proprietary software.



    Recovery with user friendly GUI, could work if 1. and 2. fail.







share|improve this answer




















    Your Answer







    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "106"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: false,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













     

    draft saved


    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f402838%2fin-centos-6-windows-10-dual-boot-overwritten-partition-by-windows-bootloader%23new-answer', 'question_page');

    );

    Post as a guest






























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    The best procedures to recover files in xfs appear to be:




    1. xfs_repair - Link to documentation

      Included or downloadable in several GNU/Linux distributions.



      xfs_check /dev/device --> Analyze the disk (no writing)
      xfs_repair -n --> A more in-depth analysis (no writing)



      xfs_repair --> Actual recovery (writing)




    2. testdisk - Link to documentation

      Free software included in Gparted.



      Follow the steps in the documentation link.




    3. UFS Explorer - Link to product

      Commercial proprietary software.



      Recovery with user friendly GUI, could work if 1. and 2. fail.







    share|improve this answer
























      up vote
      0
      down vote













      The best procedures to recover files in xfs appear to be:




      1. xfs_repair - Link to documentation

        Included or downloadable in several GNU/Linux distributions.



        xfs_check /dev/device --> Analyze the disk (no writing)
        xfs_repair -n --> A more in-depth analysis (no writing)



        xfs_repair --> Actual recovery (writing)




      2. testdisk - Link to documentation

        Free software included in Gparted.



        Follow the steps in the documentation link.




      3. UFS Explorer - Link to product

        Commercial proprietary software.



        Recovery with user friendly GUI, could work if 1. and 2. fail.







      share|improve this answer






















        up vote
        0
        down vote










        up vote
        0
        down vote









        The best procedures to recover files in xfs appear to be:




        1. xfs_repair - Link to documentation

          Included or downloadable in several GNU/Linux distributions.



          xfs_check /dev/device --> Analyze the disk (no writing)
          xfs_repair -n --> A more in-depth analysis (no writing)



          xfs_repair --> Actual recovery (writing)




        2. testdisk - Link to documentation

          Free software included in Gparted.



          Follow the steps in the documentation link.




        3. UFS Explorer - Link to product

          Commercial proprietary software.



          Recovery with user friendly GUI, could work if 1. and 2. fail.







        share|improve this answer












        The best procedures to recover files in xfs appear to be:




        1. xfs_repair - Link to documentation

          Included or downloadable in several GNU/Linux distributions.



          xfs_check /dev/device --> Analyze the disk (no writing)
          xfs_repair -n --> A more in-depth analysis (no writing)



          xfs_repair --> Actual recovery (writing)




        2. testdisk - Link to documentation

          Free software included in Gparted.



          Follow the steps in the documentation link.




        3. UFS Explorer - Link to product

          Commercial proprietary software.



          Recovery with user friendly GUI, could work if 1. and 2. fail.








        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Nov 13 '17 at 13:53









        A. del Solar

        1




        1



























             

            draft saved


            draft discarded















































             


            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f402838%2fin-centos-6-windows-10-dual-boot-overwritten-partition-by-windows-bootloader%23new-answer', 'question_page');

            );

            Post as a guest













































































            Si Jd R FmmLdBBkzHYl9mxtce27k7svU kSHGbOwvUVkIhCG G u uR4 ux,qaa1 81G5rpgbZWrl0ROmf 7MzVE Q4
            t2HM7UXpUQRi2wpS9FnY Z MX fGruCzsuOT2M8LTVC5E1 X7 W,ugKA5aAV9KpyUB4wmqcvI0 aAZd,TsEWM

            Popular posts from this blog

            How to check contact read email or not when send email to Individual?

            How many registers does an x86_64 CPU actually have?

            Displaying single band from multi-band raster using QGIS