I'm working on a Linux mint virtualbox image hosted on Windows 10 where I accidentally deleted the /etc/share
directory and subdirectories.
Now my Image can't boot and I have sensitive data that I want to recover.
How can I do so?
I'm working on a Linux mint virtualbox image hosted on Windows 10 where I accidentally deleted the /etc/share
directory and subdirectories.
Now my Image can't boot and I have sensitive data that I want to recover.
How can I do so?
First - switch the VM off and don't turn it off.
If you made a backup or taken a snapshot of the VM's image just use it to restore the VM. Create a new Linux VM with the new disk, and use the copied image os the additional one from which you will be recovering data. Don't ever try to recover deleted files/folders to the same drive or even use it as a drive from which the system boots up. Here are some general tips of what to do and what do not when you loose the data.
Otherwise it's very hard to recover any data from that image - it all depends whether you made some other changes afterward or just switched the VM off (which would be the best option). If you made some changes (wrote some data to the disk after deleting /etc/share
then you can still try to recover it but if you have the data stored in some other locations - don't waste your time.
I' won't be copying the exact process from other pages but here are some usefull links; the tool that's mostly used in such cases is called testdisk
.