Handy commands:

• lsblk – Lists all attached drives, including partitions
  Ex:

  lsblk

• udevadm – Gives detailed information about a drive
  Ex:

  udevadm info --query=all --name=/dev/sd<X> | grep ID_SERIAL_SHORT

Handy Commands:

• Checking a drive's SMART attributes:
  • GUI:
  1. Install gnome-disk-utility (If not already installed)
     

     apt-get install gnome-disk-utility

  2. Run:

     gnome-disks

  3. Select your drive and then select the menu button in the top-right corner:
     
     
  • Command Line:
    1. Install smartmontools

       apt-get install smartmontools

    2. Overall health report:

       smartctl -H /dev/sd<X>

    3. Detailed SMART information:

       smartctl -i /dev/sd<X>

• Running SMART tests (non-destructive to data)
  • GUI:

    gnome-disks

    
    Open “SMART Data & Self-Tests”, click “Start Self-Test”, and select a test to run.

  • Command Line:

    smartctl --test=short /dev/sd<X>

    
    

    smartctl --test=long /dev/sd<X>

• Thoroughly Testing Drive Media (CAUTION: DESTRUCTIVE TO DATA)
  

  badblocks -vws /dev/sd<X>

If the hardware is suspect, then the first thing to do is get a byte-for-byte copy of the drive's contents into a disk image file. The less time spent using possibly faulty hardware the better.

ddrescue -A -f /dev/sd<X> broken.img

This copy will remain unchanged while we work. Make a copy of this file, and only alter the copy. This way, if anything goes awry then we can go back to square one without having to rely on possibly faulty hardware again.

cp broken.img work.img

Use testdisk to search for and repair disk partitions.

testdisk work.img

Using testdisk involves using the arrow, escape, and enter keys.

1. Confirm that you want to use the disk image work.img, click “Proceed”
   
   
2. Select the disk image partition table type. Ex: Intel
   
   
3. Click: Analyse
   
   
4. Click: Quick Search
   
   
5. Click: Enter to continue
   
   
6. Click: Deeper Search
   
   
7. Click: Enter to continue
   
   
8. Click: Write
   
   
9. Click: Y
   
   
10. Click: OK (You do not need to reboot)
    
    
11. Click: Quit
    
    
12. Click: Quit
    
    

Use photorec to recover deleted files.

mkdir RECOVERY RECOVERY/DELETED RECOVERY/RECOVERED

photorec work.img

1. Confirm that you want to use the disk image work.img, click “Proceed”
   
   
2. Select partition, click: Search
   
   
3. Select the filesystem type
   
   
4. Select directory to save recovered files.
   1. Select: RECOVERY
      
      
   2. Select: DELETED
      
      
   3. Press: C
      
      
5. photorec will process for a while. When finished, select: Quit
   
   
6. Select: Quit
   
   
7. Select: Quit
   
   

Files that the filesystem thinks have been deleted are now stored in RECOVERY/DELETED/. Filenames are most likely trashed, so the only way to identify a file is to open it up.

Recover other files:

1. Find a list of partitions:
   

fdisk -lu work.img 
Disk work.img: 1.9 GiB, 2055208960 bytes, 4014080 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disklabel type: dos
Disk identifier: 0x00000000

Device     Boot Start     End Sectors  Size Id Type
work.img1          63 4014079 4014017  1.9G  5 Extended
work.img5         496 4014079 4013584  1.9G  6 FAT16