Once you have extundelete
ready, you can now start to recover the all files within a partition. This section guides you through on how to recover all the files.
The first step is to unmount the partition, leaving it to only the device node. This is because extundelete
has a nasty reputation of corrupting the entire partition after its recovery. You should not skip this step. Use lsblk
to identify your target partition.
Once done, create a temporary directory to work and change directory into it.
$ mkdir temp && cd temp
Once you're ready, you may begin the undelete process. Please do keep in mind that it can take hours to recover depending on the age, time, and disk size. The command is:
$ extundelete --restore-all <disk partition>
Example:
$ extundelete --restore-all /dev/sdb4
That's all for undelete all files in a partition.