Help, I need to restore /etc

[leo_messi86]

Hello everybody.

I deleted accidentally /etc. I am trying to restore it with a Knoppix CD, which tool could it resolve me the problem

is a XFS partition.

Thanks

[Manko10]

You could try this: Linux or UNIX Recover deleted files – undelete files but since you're using an XFS file system I don't think there are any chances to get all your data back.
The only other tool which could at least restore some of your data is photorec from program package testdisk but that does almost the same as the manual solution above. With both solutions you can't recover the filenames.

If you did not reboot and had still files open in another process you also could have tried this, but, yep, you can't anymore: Linux.com :: Bring back deleted files with lsof

But be aware that it's very unlikely to be able to recover data when you already wrote some data back to disk since the deallocated inodes and harddrive blocks will be reused. Therefore you MUST restore data to another partition. Otherwise you'd make it impossible to recover more data since the new files overwrite the not already recovered blocks.

[Lakshmipathi]

First unmount the partition and try Carlo woods ext3grep. It should recover the files ,if ext3grep finds correct journal entries
HOWTO undelete removed files and directories on an ext3 file system

[coopstah13]

is ext3grep going to work on xfs partition? based on the name I'd say no, but I could be wrong

[Lakshmipathi]

is ext3grep going to work on xfs partition? based on the name I'd say no, but I could be wrong

No,you are correct ! Sorry I didn't read the post completely ext3grep works only for ext3 file system.It won't work for XFS.

I read upto this

I deleted accidentally /etc. I am trying to restore it with a Knoppix CD, which tool could it resolve me the problem

and missed the final line .

Sorry for the confusion