Question

1

Recover deleted folder in encrypted home

rated 0 times [ 1] [ 0] / answers: 1 / hits: 3462 / 3 Years ago, fri, july 30, 2021, 8:12:28

I have a big problem! i accentually deleted a very imported folder in my home dir while creating a backup. I stopped the backup, shutdown the laptop, but there are still a lot of files to be backed up. So I am afraid of manipulating the encrypted home.

The home is encrypted via ecryptfs and the system Ubuntu 13.04.

I tried to use extundelete from a live usb stick. For the recovery the partition has to be unmounted but then home is encrypted and a recovery of the Document folder is not possible.

Can anybody give my an advise to to recover a folder inside the encrypted home?

The data is very imported because containing a dairy.

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

saucdisr

Add To Favorites

Follow

Total Points: 4

Total Questions: 102

Total Answers: 117

Location: Ecuador

Member since Thu, Jun 4, 2020

4 Years ago

answered 3 Years ago aciousoun · Accepted Answer

You're right in your assumption that you need to unmount the ecryptfs-encrypted file system. ecryptfs works on top of an underlying file system whereas undeletion tools like extundelete operate on ext file systems like the one you probably have underneath your ecryptfs file system.

You don't need access to the unencrypted document files to undelete them. Instead you'll undelete the encrypted files in ~/.Private or wherever your ecryptfs file system is located (not mounted).

For the actual undeletion procedure refer to other answers like:

How to recover deleted files?

Retrieve files deleted by command rm in terminal