this post was submitted on 19 Jul 2024
20 points (91.7% liked)

Linux

48208 readers
719 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I have a hdd attached to my server. It's sda but has 2 partitions so sda1 @16M and sda2 @3.6T It defaulted to being in the location /media/devmon so I kept that and it worked for ages. Suddenly the data is gone. I had files located here: /media/devmon/4tb_drive/kiwix/zim and that directory is now empty. But I put the drive into a Windows box, and everything was there.

When I run mount /dev/sda2 /media/devmon/ it says:

The disk contains an unclean file system (0, 0).
Metadata kept in Windows cache, refused to mount.
Falling back to read-only mount because the NTFS partition is in an
unsafe state. Please resume and shutdown Windows fully (no hibernation
or fast restarting.)
Could not mount read-write, trying read-only

I originally formatted this drive in Windows, is that the issue? Ideally I'd use btrfs or zfs not ntfs, but here we are.


How do I get access again?

top 13 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 4 months ago (1 children)

If you really need the data on it, get another disk and make an image of the failed drive asap.

If not, skip that step.

See if testdisk can detect your partitions and read data from them.

[–] [email protected] 2 points 4 months ago (1 children)

I can see the data on windows, but not on linux

[–] [email protected] 2 points 4 months ago

It is NTFS after all, support has been flaky over the years. Are you running modern Linux NTFS drivers? If there's no other messages and chkdsk repair (on Windows) doesn't fix it I would assume the filesystem is alright and look at trying different NTFS drivers versions on Linux.

Have you verified that Windows can actually read all of the files? It may show them and not be able to read some of the files if the filesystem is corrupted.

[–] [email protected] 4 points 4 months ago (1 children)

Did you perform a full shutdown of Windows (Windows doesn't fully release the partition on a normal shutdown)?

[–] [email protected] 1 points 4 months ago
[–] [email protected] 5 points 4 months ago

@Dust0741 @linux also you should disable fast boot in windows which is similar to hibernate and cause this issue.

[–] [email protected] 0 points 4 months ago (1 children)

Read the error and do what it says? Lol

[–] [email protected] 2 points 4 months ago

i mean i did

[–] [email protected] 2 points 4 months ago (2 children)

@Dust0741 sometimes this can help -> in a linux console: ntfsfix -b -d /dev/sda1 oder ntfsfix -b -d /dev/sda2.

[–] [email protected] 2 points 4 months ago
root@skynet:~# ntfsfix -b -d /dev/sda1  
Mounting volume... NTFS signature is missing.  
FAILED  
Attempting to correct errors... NTFS signature is missing.  
FAILED  
Failed to startup volume: Invalid argument  
NTFS signature is missing.  
Trying the alternate boot sector  
Unrecoverable error  
Volume is corrupt. You should run chkdsk.  

root@skynet:~# ntfsfix -b -d /dev/sda2  
Mounting volume... OK  
Processing of $MFT and $MFTMirr completed successfully.  
Checking the alternate boot sector... OK  
NTFS volume version is 3.1.  
Going to un-mark the bad clusters ($BadClus)... No bad clusters...OK  
NTFS partition /dev/sda2 was processed successfully.

turned off windows quick start ran chkdks D: and waited...then shut down and put drive back into linux and reboot. still no


any ideas? clearly not the larger partition, which is good.

[–] [email protected] 1 points 4 months ago

I used this when my son's computer wouldn't boot after a Windows update. None of Microsoft's tools would repair the disk.

I attached it to mine and ran ntfsfix on it. Success!

[–] [email protected] 1 points 4 months ago

If you can access it on Windows, that's a good thing and all you need is a disk repair there. If you cannot access it even on Windows, you'll need file recovery (and another 4TB disk).

However, note that there is a good chance for NTFS disks to get corrupted on Linux if you unmount them without getting the notification that indicates it's safe to remove the disk.

So I really recommend you to find a temporary disk (or buy a new one) and copy everything to it and format your disk as a Linux file system of your choice and move your files to it, before you get a real headache with NTFS (talking out of experience).

Also note that, it's possible for NTFS disks become inaccessible if fastboot option is enabled for Windows on BIOS, if so disable it.

[–] [email protected] 7 points 4 months ago* (last edited 4 months ago)

I find if I have NTFS problems, throw it back on windows, do a disk repair then come back to Linux.

Also remember to fully shut down (not sleep or hibernate) windows before removing the disk so windows doesn't lock up anything

Edit: the error actually tells you the latter of what I mentioned... So back to windows you go for a shutdown before removal