Re: [sleuthkit-users] recombine raid images with loopback?

[Aaron S. <aa...@se...>]

I've recombined Linux raids with varying degrees of success. It's
certainly one of the big reasons I use Linux's software raid -- most
hardware raids just don't give you even a glimmer of hope here.

An important detail is to use the appropriate options to stop the md
system from automatically resyncing your raid; if you get the options
wrong the first time and then it tries to resync, it's all over.

A lot of info out there is way out of date. Lots of work MD has taken
place in the 2.6 kernel. This page looks fairly recent:

http://software.cfht.hawaii.edu/linuxpc/RAID_recovery.html

Aaron

On Tue, 2006-01-31 at 12:49 -0500, Brian Carrier wrote:
> I have tried to recreate RAIDs before using loopback and the RAID  
> support in the Linux kernel (similar to your raiddev example), but I  
> was unsuccessful.  I don't remember the details anymore because I'm  
> in the middle of a move and all of my stuff is packed up.  But, it  
> may work in newer versions of the kernel.
> 
> brian
> 
> 
> 
> On Jan 29, 2006, at 10:46 PM, J B wrote:
> 
> > Suppose you have a raid of 8 9GIG disks.
> > You have imaged each disk using dd so that you have diskimg0 ...  
> > diskimg7
> >
> > What's the best way to mount this group of images in software so  
> > that you
> > can then operate on it using TSK?  I assume it involves mounting a  
> > loopback
> > device..
> >
> > it's seems like you'd want to use /dev/loopX in raiddev per disk
> >
> > but I'm not sure that:
> > mount -ro /evidence/diskimg0 /whocareswhere -t whatevertype -o  
> > loop=/dev/loop0, blocksize= (CHUNKSIZE?)
> > would be appropriate.  Seems like you're mounting the image  
> > unneccesarily leaving the mounted stub at /whocareswhere when all  
> > you really want is to tie loop0 to the image...
> >
> > raiddev /dev/md0
> >        raid-level      linear
> >        nr-raid-disks   2
> >        chunk-size      32
> >        persistent-superblock 1
> >        device          /dev/loop0
> >        raid-disk       0
> >        device          /dev/loop1
> >        raid-disk       1
> >
> >
> > Just curious,
> >
> > -Jessop
> >