Project

General

Profile

Is it possible to recover LUKS partition from dd if=my.iso?

nona - over 1 year ago -

Hi. I recently nuked my system

dd if=myisofile.iso of=/dev/Xi bs=2M

(I stopped the command when I realised about my mistake). /dev/Xi had a LUKS partition which held an LVM group with M number of groups. The original geometry of /dev/X, is backed up. Even the geometry of the LVM group is backed up. I still have my password to open (decrypt) /dev/Xn. For simplicity, let us say that
X = sda --> /dev/sda
Xi = sda1 --> /dev/sda1

What I don't have is a freaking backup of the LUKS headers.

I am currently trying to get my data back. I don't have enough hardware to create a back-up of the unit. The idea at the moment is to try to re-encrypt Xi with the same password, but this sounds like a no-go. Something else is to try with testdisk somehow, but I don't even know how :P . Any ideas? Thank you!


Replies (4)

Is it possible to recover LUKS partition from dd if=my.iso? - bill-auger - over 1 year ago -

generally, if the encrypted filesystem occupied the entire
partition, and the beginning 2M was over-written, the remaining
encrypted bits are probably useless

RE: Is it possible to recover LUKS partition from dd if=my.iso? - nona - over 1 year ago -

Thanks, bill. I'll let you know what happened.

By the way, I got 6 copies of your post on my e-mail. Is that expected?

RE: Is it possible to recover LUKS partition from dd if=my.iso? - bill-auger - over 1 year ago -

On Mon, 31 Oct 2022 09:08:09 +0000 wrote:

By the way, I got 6 copies of your post on my e-mail. Is that expected?

no, redmine got confused - first time ive seen that happen

this reply will try again

    (1-4/4)