System is borked, can it be restored?

Status
This thread has been locked.

Epilepsil

Feedback score
0
Posts
3
Reactions
0
Resources
0
I was a dumbass and let a random guy SSH into my server machine runniing Ubuntu Server 18.04, and he was a jerk and sus "sudo rm -rf /*" which wiped everything from the box.

Is there a way to restore it?
 
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.

SessionTech

Supreme
Feedback score
9
Posts
161
Reactions
17
Resources
0
I was a dumbass and let a random guy SSH into my server machine runniing Ubuntu Server 18.04, and he was a jerk and sus "sudo rm -rf /*" which wiped everything from the box.

Is there a way to restore it?


Did you have any backups? If not then there is nothing that can be done other than reset the os on the system. Feel free to contact me Resolv#0001 if you need any help
 

Epilepsil

Feedback score
0
Posts
3
Reactions
0
Resources
0
Did you have any backups? If not then there is nothing that can be done other than reset the os on the system. Feel free to contact me Resolv#0001 if you need any help
I do not have any backups. I was just thinking that Windows has a "system repair" feature, I was thinking Ubuntu might have one too, but not too sure.
 

Tripps

SysAdmin | Developer
Premium
Feedback score
19
Posts
784
Reactions
313
Resources
0
I do not have any backups. I was just thinking that Windows has a "system repair" feature, I was thinking Ubuntu might have one too, but not too sure.
Only way to fix a server after that, is to truly install a secondary drive, move all files over once the second drive has an operating system and then wiping the first.
 

Annie

ApolloSMP
Supreme
Feedback score
20
Posts
682
Reactions
402
Resources
9
Only way to fix a server after that, is to truly install a secondary drive, move all files over once the second drive has an operating system and then wiping the first.
There would be no files on the main drive, it got cleared
 

Mark

System Admin
Supreme
Feedback score
16
Posts
80
Reactions
18
Resources
0
There would be no files on the main drive, it got cleared
Thats what you would think at first, its what lots of people think. However, this isn't ALWAYS true, sometimes it is sometimes not. If you're lucky, you can attempt to go into rescue mode and see if there's anything left on the drive, else.. Goodbye data, and a bad way to learn not to trust anyone with SSH. Not a good chance you can recover it though :(

If you would like me to help you get up and running again, give me a msg on discord @Mark#8901
 
Last edited:

Annie

ApolloSMP
Supreme
Feedback score
20
Posts
682
Reactions
402
Resources
9
Thats what you would think at first, its what lots of people think. However, this isn't ALWAYS true, sometimes it is sometimes not. If you're lucky, you can attempt to go into rescue mode and see if there's anything left on the drive, else.. Goodbye data, and a bad way to learn not to trust anyone with SSH. Not a good chance you can recover it though :(

If you would like me to help you get up and running again, give me a msg on discord @Mark#8901
I've seen this done on 10+ machines and never saw a single file get recovered, even after a hosting company spent $500+ and a week trying to use the linux file restoration system. The only way IMO is to send it to a drive specialist who can extract the files before they're written over
 

Tripps

SysAdmin | Developer
Premium
Feedback score
19
Posts
784
Reactions
313
Resources
0
There would be no files on the main drive, it got cleared
In all my recoveries I have done, which a good 75%-85% have been from "rm -rf /", they left enough data that I could get their entire node back up within a few hours (the sql being the hardest to recover). You may be able to recover the "/boot" if you are lucky, which a good percentage of recoveries you wouldn't be able to do.

I've seen this done on 10+ machines and never saw a single file get recovered, even after a hosting company spent $500+ and a week trying to use the linux file restoration system. The only way IMO is to send it to a drive specialist who can extract the files before they're written over
It is also a good note, that most companies when able to spend $500+ on just a restoration service should be able to fork a bit of that towards a proper backup solution, rather it be NAS drives or simple Restore files. Something as simple as that can save a company hundreds if not thousands in repair costs and lost time/data.
 

Annie

ApolloSMP
Supreme
Feedback score
20
Posts
682
Reactions
402
Resources
9
In all my recoveries I have done, which a good 75%-85% have been from "rm -rf /", they left enough data that I could get their entire node back up within a few hours (the sql being the hardest to recover). You may be able to recover the "/boot" if you are lucky, which a good percentage of recoveries you wouldn't be able to do.


It is also a good note, that most companies when able to spend $500+ on just a restoration service should be able to fork a bit of that towards a proper backup solution, rather it be NAS drives or simple Restore files. Something as simple as that can save a company hundreds if not thousands in repair costs and lost time/data.
Yeah I didn't say it's impossible but DO NOT EVER LET A NOOB DO IT. EVER! A noob can fuck it up and make it unrecoverable. If you know what you're doing then yeah you can recover the data. I also agree on the last part. Companies should be forward thinking and should pay for backup solutions. These solutions save money compared to spending money on data recovery
 

madsiv

Supreme
Feedback score
0
Posts
228
Reactions
41
Resources
0
Yeah I didn't say it's impossible but DO NOT EVER LET A NOOB DO IT. EVER! A noob can fuck it up and make it unrecoverable. If you know what you're doing then yeah you can recover the data. I also agree on the last part. Companies should be forward thinking and should pay for backup solutions. These solutions save money compared to spending money on data recovery
I agree, I've done it some times via the platforms: extundelete and photorec the last few times I've used them I got 99% files back. That isn't to say it will give you the same result

But no matter what you do. ALWAYS backup ya files. Especially if you're going to try one of these methods. :D
 

Inviss

Management / Head of Development @ AkumaMC
Supreme
Feedback score
21
Posts
734
Reactions
267
Resources
3
I was a dumbass and let a random guy SSH into my server machine runniing Ubuntu Server 18.04, and he was a jerk and sus "sudo rm -rf /*" which wiped everything from the box.

Is there a way to restore it?
I think this is a perfect example of why you need to use a qualified system admin, with good reputation and is clearly knowledgeable. Almost cried when I read "let a random guy SSH" :cry:
 

Mark

System Admin
Supreme
Feedback score
16
Posts
80
Reactions
18
Resources
0
I think this is a perfect example of why you need to use a qualified system admin, with good reputation and is clearly knowledgeable. Almost cried when I read "let a random guy SSH" :cry:
Agreed, I died inside.
 
Status
This thread has been locked.
Top