ecryptfs: Recovering Private Files After .ecryptfs File Deleted
by GrovesP from LinuxQuestions.org on (#5SRCK)
Leveraging Linux Mint 20.2 (Ubuntu/5.4.0-86 x86_64) with an older copy of an encrypted drive available via USB. Managed to get the encrypted drive mounted and the volume decrypted. However, when attempting to remount the 'private,' home directory, both the '.ecryptfs' and '.Private' files were deleted. All the passphrases are available.
Now, when attempting to mount the private home directory. The two deleted files are causing an error: "Encrypted file is not setup correctly." Obviously, I wasn't able to recover the files. (TestDisk) None of the other encrypted archives were touched, but still the error without the index. Hoping that '.Private,' isn't required for reconstruction.
Is there a way to rebuild the index (assumption about .ecryptfs) with only the archives, themselves? Any way to recover the private directory or should I just wipe the drive?
Now, when attempting to mount the private home directory. The two deleted files are causing an error: "Encrypted file is not setup correctly." Obviously, I wasn't able to recover the files. (TestDisk) None of the other encrypted archives were touched, but still the error without the index. Hoping that '.Private,' isn't required for reconstruction.
Is there a way to rebuild the index (assumption about .ecryptfs) with only the archives, themselves? Any way to recover the private directory or should I just wipe the drive?