The files and directory deleted with the command of rm are not put in the garbage or recycle bin . The recovery of files deleted by the “rm -rf” command is not easy but possible.
Where is deleted file by “rm -rf”.
Files and directories deleted with the “rm -rf” command are not moved or stored in another location. This means they are deleted completely and not stored in the Linux file system. But their data is not deleted from the hard drive .
How to Recover Using extundelete
The extundelete is a very practical and popular tool. It can be used to recover files and directories deleted. We can choose the directory we want to restore with its files and directory. The –restore-directory is used to specify a specific path . We should also provide the partition to the extundelete command. In the following example . As undelete is a low-level administrator operation .
$ sudo extundelete /dev/sda1 --restore-directory /home/aa/data
We can restore a specific file by using the –restore-file option below.
$ sudo extundelete /dev/sda1 --restore-file /home/aa/users.txt