On Sun, Sep 24, 2006 at 04:45:13PM -0400, Theodore Tso wrote: > On Sun, Sep 24, 2006 at 09:00:00PM +0200, Keld Jørn Simonsen wrote: > > I have a design to improve ext3 so that one could salvage all files, > > even if you accidently reformated the partition, Available at > > http://std.dkuug.dk/keld/lazy3.txt > > This design has been reviewed by Ted. > > To be fair, reviewed != to "approve of all aspects of the design". We > exchanged e-mails for a while on the subject, yes. Yes, you did not approve the design, but you looked at it and found some things that were not implementable, and I then corrected the design. > Note that the > design has a number of holes in it --- for example, simply saying, > "don't blank the inode when deleting it" is not so trivial if you also > want to maintain ext3's consistency guarantees. So when the design > says things like "My idea is to not clear the inodes, when they are > marked as free", that's roughly equivalent to saying, "My idea is to > purify Uranium by using some really big centrifuges". It is both > simultaneously true and not useful. The hard part is all in the > engineering. :-) Yaeh, the remark "My idea is to not clear the inodes, when they are marked as free" is meant to be a general outline of the idea, and then the more practical aspects are outlined further in the paper. Which guarantees are being breached with the design? > > I also have some patches for debugfs to undelete files in ext3, > > available at http://std.dkuug.dk/keld/readme-salvage.html > > This should probably be turned into its own standalone program, since > it's far more than the scope of debugfs is intended to be. So I don't > intend to merge them into debugfs. yes, it is probably a standalone program. I also have some ideas for repairing a system with io-errors, where the inodes are intact, but my programming is driven by myself having problems to solve, and I don't have a damaged fs that I need to repair at the moment. Anyway, I find that I need a number of the capabilities of debugfs when one tries to salvage files in a damaged fs, and it would be cumbersome to swith between debugfs and a salvage program, and a waiste to implement and maintain the debugfs capabilities in a new salvation program, so maybe it is best to have the rescue capabilities built into debugfs anyway. best regards keld _______________________________________________ Ext3-users mailing list Ext3-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/ext3-users