Forrest logo
back to the extundelete tool

extundelete:tldr:58ed3

extundelete: Restore a file from a path relative to root (Do not start the path with `/`).
$ extundelete ${-dev-sdXN} --restore-file ${filename}
try on your machine

The command "extundelete" is a program used to recover deleted files from an ext3 or ext4 file system. Here's a breakdown of the provided command:

  • "${-dev-sdXN}" is a placeholder for the device that contains the file system you want to recover the file from. You need to replace this placeholder with the actual device path. For example, if you want to recover a file from the /dev/sdb1 partition, you would replace "${-dev-sdXN}" with "/dev/sdb1".

  • "--restore-file" is an option that specifies that you want to restore a specific file. You need to replace "${filename}" with the actual name and path of the file you want to recover. For example, if you want to recover a file called "important.txt" located in the /home/user/Documents directory, you would replace "${filename}" with "/home/user/Documents/important.txt".

So, when you replace the placeholders, the command should look something like this:

extundelete /dev/sdb1 --restore-file /home/user/Documents/important.txt

This command instructs the "extundelete" program to scan the /dev/sdb1 device and attempt to recover the file "important.txt" located in the /home/user/Documents directory.

This explanation was created by an AI. In most cases those are correct. But please always be careful and never run a command you are not sure if it is safe.
back to the extundelete tool