[sleuthkit-users] recombine raid images with loopback?

[J B <je...@ad...>]

Suppose you have a raid of 8 9GIG disks.
You have imaged each disk using dd so that you have diskimg0 ... diskimg7

What's the best way to mount this group of images in software so that you
can then operate on it using TSK?  I assume it involves mounting a loopback
device..

it's seems like you'd want to use /dev/loopX in raiddev per disk

but I'm not sure that:
mount -ro /evidence/diskimg0 /whocareswhere -t whatevertype -o 
loop=/dev/loop0, blocksize= (CHUNKSIZE?)
would be appropriate.  Seems like you're mounting the image unneccesarily 
leaving the mounted stub at /whocareswhere when all you really want is to 
tie loop0 to the image...

raiddev /dev/md0
        raid-level      linear
        nr-raid-disks   2
        chunk-size      32
        persistent-superblock 1
        device          /dev/loop0
        raid-disk       0
        device          /dev/loop1
        raid-disk       1


Just curious,

-Jessop