True Stories of Knoppix Rescues 335
Omniscientist writes "We've all been there: Our system is on the edge of death and we need to either fix it or retrieve important data that still remains hidden away in its dying clutches. LinuxDevCenter has a funny article on a heroic tale of a sysadmin relying on Knoppix to save the day. I for one, always make a boot disk in case of problems, but Knoppix can turn a bad day into a good one for just about anyone. Perhaps every administrator should have a Knoppix CD on reserve."
Offtopic (Score:4, Insightful)
Well... (Score:4, Funny)
Aw, fuck it.
Re:Well... (Score:5, Funny)
Re:Well... (Score:3, Insightful)
Re:Well... (Score:2)
Rookies.
Virtual to Virtual migration (Score:2, Funny)
Re:Virtual to Virtual migration (Score:3, Informative)
tar -cf - . | if cd
Now, if
The obviousness (Score:5, Funny)
I suppose the moral of this story is to be careful when you play around with the dd command and your MBR.
DOY!
DD and boot records? (Score:2)
Re:DD and boot records? (Score:4, Informative)
Oddly enought, I found out the answer to that last night (and I wasn't even asking about that particular problem):
dd if=/dev/hda of=hda.mbr bs=512 count=1
Got that from this [seul.org] site. So take their word for it, not mine.
Re:DD and boot records? (Score:2, Informative)
Re:DD and boot records? (Score:2)
Re:The obviousness (Score:3, Interesting)
I messed up my MBR once, back when I was dual-booting Linux and WinNT. Had to type the hex in manually (I found it in a book) before converting it to binary and dd'ing it back onto the disk. I was surprised myself when that worked. Since then I've always kept a copy of it on hand, Just In Case...
Re: (Score:2)
I use it on crapped on WIndows boxes too.. (Score:5, Informative)
Re:I use it on crapped on WIndows boxes too.. (Score:5, Informative)
Aside, I use Linux bootables (Gentoo mostly) for checking the life of my HDs. I run a Gentoo machine (installed near 3 year ago). hda has seen a LOT (even before I put Gentoo on it - it was an MDK drive after it was a Win* drive). I've noticed SMARTd telling me latley that his life may be running short these days, but, after a e2fsck, it's fine.
It's only a 10G drive (I have 4 others, much larger, in this box), but he needs to be replaced soon.
Aside, I've saved a LOT of Win* Servers / laptops / desktops with "Live CD's".
Re:I use it on crapped on WIndows boxes too.. (Score:4, Informative)
I've noticed SMARTd telling me latley that his life may be running short these days, but, after a e2fsck, it's fine. /me shrugs. I still need to replace him regardless.
Er, yes.
SMART handles stuff such as "this drive takes several tries before reading the right data" or "this drive has remapped a lot of bad clusters lately". Its much more than filesystem integrety checking, and even if fsck is fixing your problems now, you might want to see why smart is pestering you.
More Info [wikipedia.org]
Re:I use it on crapped on WIndows boxes too.. (Score:2, Informative)
Re:I use it on crapped on WIndows boxes too.. (Score:3, Interesting)
I don't know what procedures you may have tried but if you suspect hard drive failure then the best thing do is use something like dd_recover to copy off as much of the partition as possible and then use filesystem repair tools on a copy of that. Of course, this presumes you have twice as much free storage space as the afflicted
what a coincedence (Score:5, Funny)
Re:what a coincedence (Score:3, Insightful)
Re:what a coincedence (Score:2)
3.8? (Score:3, Informative)
Re:what a coincedence (Score:2)
Damn Small Linux (Score:5, Informative)
Re:Damn Small Linux (Score:3, Interesting)
I've used Knoppix to recover data from a WinXP box with locked-down security--my fiancee's OS bit it when she installed XP SP2 and the files were restricted to her account, so I put a spare HD in her machine and copied over all of her data using Knoppix (which conveniently ignores Windows security settings). Then we did a full reinstall from scratch--no data loss at all.
PLD RescueCD (Score:3, Informative)
INSERT (Score:5, Informative)
If you're going to suggest a Knoppix-STD alternative, why not name one that's intended for data recovery and system restoration...
The only recovery disks that I've found worth using are a custom gentoo based live-cd and INSERT
Knoppix-STD or some other live disk is good for imaging and file recovery, but lacks real utility... like editing a windows 2000 registry, or doing vfat/ntfs hacking
Go Ahead, try INSERT [inside-security.de] (and yes, i know it's Knoppix Based)
Better alternatives (Score:2)
Based off DSL but nicer in terms of included programs is Feather Linux. It's 14mb more, but unless you're putting it on an actual business card cd it's well worth it for the extra apps.
And for an in between option where the business card distros don't quite have enough, try SLAX. Can do more or less anything that knoppix can, but only includes one program for any one job.
Re:Damn Small Linux (Score:3, Interesting)
----------------
There is a very handy little tool called the Metropipe Virtual Privacy Machine [metropipe.net] that fits nicely on a 128MB USB drive. You pop it into a computer that is booted into Windows and can bring up a virtual machine running a tiny version of Linux, complete with GUI, web, email, etc. There is even a tool included that opens up an encrypted tunnel to Metropipe, bypassing any proxy servers
I once saved the day with Knoppix (Score:5, Interesting)
Re:I once saved the day with Knoppix (Score:5, Interesting)
cut a long story short... how the heck do you install a USB key drive onto a win98 system that has no internet connection and the driver files are only to be found on the USB drive that win98 recognises as new hardware, but won't actually scan it for the drivers as it hasn't allocated it a drive letter yet... well, Knoppix saved the day and allowed me to get the drivers copied off to a fresh directory on her hard drive so that win98 could then find them...
She now wants me to set it up dual boot for her as she was mightily impressed with how far Linux has come in the few years since she last played with it (Mandrake 7.2)
DSL was Re:I once saved the day with Knoppix (Score:2)
Boot it.
At this point you can just wipe the drive and install linux
Or you can mount the dos drive and copy the files over.
I have a PC with the ability to boot USB and DSL is awesome. http://www.damnsmalllinux.org/ [damnsmalllinux.org]
You can also put it on a micro CD or business card CD.
URL:http://www.damnsmalllinux.org/cd.html:
HOWTO: Recovering the root Password (Score:5, Interesting)
After NOT agreeing to the vendor's plan and showing him the door, the MB asked me if I could "crack into it" (yes, he actually used the right term). So... Knoppix to the rescue!
The following procedure worked well:
* 'mount' the HDD's main partition, rw
* From a shell prompt, enter 'su -' (in Knoppix this just drops you in, with no p/w required)
* Change the root passwd
* Make a backup copy of HDD's
* Copy the line for the root user in the Knoppix
* Paste it into the HDD's
* Profit.
Also noted that there were no users created (the vendor had been logging into Gnome as root to do everything). So added an user account with sudo 'ALL=(ALL) ALL' rights, etc., etc.
It was a strange way to find a new customer
One More Important Thing (Score:4, Interesting)
(i.e. When you go to mount the HDD from Knoppix, it looks like a bunch of garbage and Knoppix refuses to mount it).
Re:HOWTO: Recovering the root Password (Score:5, Insightful)
I agree, but... (Score:2, Insightful)
Re:I agree, but... (system design) (Score:3, Informative)
i use
i even take it one level further now by putting anything i need (especially development tools/kits)
Re:I agree, but... (system design) (Score:3, Interesting)
Better yet, don't put anything valuable on the same computer that boots/manages the operating system...
Sounds to me like you're using vmware for no good reason. You could, quite easily, install all your programs (and libraries, and header
Re:I agree, but... (Score:2)
Knoppix to the rescue (Score:2, Insightful)
In addition, being a security engineer, I always have a copy of Auditor and a Knoppix STD "in case of emergency." Hey, you never know when you will be called on to...er, penetrate.
My toolbox (Score:3)
STUX, a live cd with pretty much everything, but very "heavy", only for 256mb+ machines
Knoppix STD, primarily because it's still the best for working wireless cards. Also some mp3s on the cd to listen to, and some fiddling with mkisofs means that from non-nix OSes it looks like that's all that's on the cd
SLAX, plus a few modules. I like modularness and I really really lik
Re:Knoppix to the rescue - Use those AOL mailers! (Score:2)
As soon as someone tells me they use AOL I stop listening.
Other distros work, too (Score:5, Informative)
No Backups? (Score:3, Funny)
Some "battle-hardened" sysadmin (who apparently doesn't to do regular backups... hmm...) salvages a few systems with Knoppix, and it's front-page news?
Must be a real slow news day.
Knoppix - a lifesaver (Score:3, Informative)
I've also used Toms root boot disk - which is linux based but much smaller (designed to fit on a floppy).
Recently, I've been using Kanotix distro which was derived/inspired by Knoppix. Its debian sid based and includes many more drivers built in - my laptop wireless works out of the box with Kanotix and the ndiswrapper. It includes 'captive-ntfs' which lets me mount NTFS as writeable (important when modifying those registry hives). Kanotix website is in both German and English. I wont link to it since I haven't asked permission.
Re:Knoppix - a lifesaver (Score:2)
Seriously, grow some cojones and a brain, and realize that they might WANT you to link [kanotix.com] to them.
Re:Knoppix - a lifesaver (Score:3, Insightful)
Dude, it's called being nice. It can be rude to link to a site and let them be slashdotted without asking them if their servers can handle it. We aren't talking about an site designed for high bandwidth; they offload their ISO downloads to a few mirrors and bittorrent. In additio
Re:Knoppix - a lifesaver (Score:3, Interesting)
What would be killer is if there were a Linux-based program that would scan a Windows file system for viruses and remove them, for those times that you don't have a hidden copy of the system.
Knoppix website (Score:3, Informative)
I recommend downloading it via bit torrent here [uni-kl.de].
Mepis may be a better choice (Score:2, Interesting)
Re:Mepis may be a better choice (Score:2, Funny)
"Computer, vee eye slash etc slash lye low"
"escape down down down colon a
Hero of the day? (Score:2)
Knoppix used to save WIn98 (Score:3, Interesting)
She's gotten a new laptop since then, one which runs WinXP. But she's now a Firefox fanatic; she even asked for a Firefox T-shirt for Christmas. I'm so proud. Now if only she'd let me dual-boot her machine.
Re:Knoppix used to save WIn98 (Score:2)
I used Knoppix for backing up the Windows 98 disk of my parents, but I'm not sure if the same routine will work with XP (think Alternate Data Streams etc.). Does anyone know? I'm not particularly fond of imaging programs...
Re:Knoppix used to save WIn98 (Score:2, Interesting)
Re:Knoppix used to save WIn98 (Score:3, Insightful)
This weekend she asked me to toast the NT partition alltogether (once we replace her fried power supply). I'm sooo proud of her!
For your sister, ask her for permission to set aside about 5GB f
Re:Knoppix as an anti-viral tool (Score:2)
I'm starting to ask people for p
yea but (Score:2)
KNoppix- lifesaver for 615s (Score:2)
So I have a Knoppix live cd that has XGalaga on it; MAN is that fun! Now I look forward to the reboots!
My dead drive (Score:5, Interesting)
I built a brand new system and took that drive out and put it into another XP system as a slave....no problems at all. Then we had a power failure. I have 9 computers in my house, many with several drives, every system was fine, with the exception of that one drive. XP decided that this drive was no longer formatted.
I took my lumps from the wife and began to look into data recovery. I tried SalvageNTFS [salvagentfs.com], ScroungeNTFS [memberwebs.com] and a demo [ontrack.com] from OnTrack. I forget the actual status that each tool reported but suffice it to say that none of them were successful and I just moved on. I did keep the drive though. A few weeks ago I stuffed it into what is to be a new webserver and put in a knoppix live cd. *poof* got everything back...every photo was recovered.
Can't explain it, but I'm keeping a Knoppix CD in my box of tricks from now on.
Re:My dead drive (Score:2)
I had a 160GB slave drive that I had only had for 5 months. After a reboot (which I don't do often at all, running Mandrake 10.0) the drive was mounted read only. WTF? Unmount it, try to remount it. Uh-oh. Can't remount it. Reboot, sector errors. Crap. Fiddle, fiddle. Boot Knoppix. Nothing worked. Bad sectors on the drive. Fdisk couldn't read it, it kept getting worse and worse. FUBAR. I finally got the RMA from newegg and hopefully will have a new d
Re:My dead drive (Score:2)
Repeating what he said...
"I built a brand new system and took that drive out and put it into another XP system as a slave....no problems at all."
That's not quite the same thing a "brand new system doesn't like drive". It quit recognizing it after a power failure. I've had drives mysteriously decide to quit working after a reboot/outage like that before myself.
subject (Score:2)
I have a stack of CDs, USB drives and pseudo mirror over the net.
One Alternative: BertPE (Score:2)
I decided to just grab my personal files off (one rule I have is to put all my personal stuff in c:\data\ ) To make a long story short, Bart's Preinstalled Environment (BartPE) bootable live windows CD/DVD [nu2.nu], at the recommendation of Enkidu on alt.os.linux, turned out to be a better b
...and an excellent O'Reilly book on Knoppix (Score:2)
NOTE: I am not the author nor do I work for O'Reilly Publishing. Anyone who says otherwise is going to find out what I learned from the O'Really series.
What "Knoppix Hacks" Didn't Include (Score:3, Interesting)
The trick is, after you rsync the /cdrom directory to the master directory (see the book), cd to master/boot/isolinux and edit the isolinux.cfg file. Put your favorite cheat in the first APPEND line.
This worked for Knoppix 3.4 and up. Don't know about earlier versions.
Early one morning . . . (Score:5, Funny)
I was coiming into work early Monday morning knowing I had to reinstall everything on the secondary email server that went down on Sunday. I thought I would be the only one in, but Suzie from accounting had come in early too.
I always loved her emails when she needed some help. They were cheerful and she had clearly always researched the problem she was haveing rather than the normal "it just doesn't work".
She came up and told me when she booted up the system it wouldn't get past the initial Windows boot screen. She was wearing a tight baby blue collared shirt with a short black skirt. No stockings and black high heals. She leaned low and as I was looking at her black bra said in a slow sexy voice - "Can you fix it?"
That's when I pulled out my Knoppix . .
Re:Early one morning . . . (Score:2, Funny)
no and then !!
Documentation (Score:2)
System Rescue (Score:3, Interesting)
Saved a friend a lot of trouble with Knoppix (Score:2)
I said that we might as well take a shot at booting Knoppix and see what worked, or if data could be recovered from the HD (not sure if he ever really reformatted or not).
Well, even Knoppix wouldn't boot! At first... after some fiddling we maan
My Knoppix horror story.. (Score:2)
I used Qparted on Knoppix to resize some partions on two different dual systems.. nothing would boot after that.. Non of the 'tricks' to recover the MRB and anything else would work..
I was able to, at the very least, backup my data via Knoppix.. but then I had to completely WIPE the HDs clean and restall everything.
This is a known problem with Qparted.. I guess.. but it is not very well documented that this a huge problem.
Just this morning (Score:3, Insightful)
*Somehow* my machine got deleted off of an AD domain so I coulnd't log on. Everything's been running so smooth with this machine - no, seriously - that no one, me included, knew the local admin password.
Knoppix to the rescue, 13 reboots later, I'm back in and the new admin password is 'asdf'.... I mean... it's really long and... un-crackable....
My story (Score:2)
I launched myself out, CD still in hand, trying to catch her from a 7 story drop - and lo and behold if both my wifes and my cats lives weren't saved because of the strength length and durability of a Knoppix CD.
After everything was said and done, we tried the (amazingly unscratched!) CD out in my wifes computer (she wanted to thank
Big Knoppix fan but for rescue... (Score:2)
Here's my story (Score:2)
About four or five months back, I used Knoppix to rebuild the boot record for my main HD when it got totally horked, allowing me to copy about five years worth of personal files and data to a backup drive temporarily while I reinstalled WinXP.
(*sigh*)
The best rescue CD (Score:2)
Granted, that's not always practical. As someone who has to admin and backup a system with a 1.25TB RAID array, I know that all too well. SDLT? Daily SATA hard disk snapshots? Even
My solution - periodic off-site hard disk backups plus DDS-4 dailies. If I can go to LTO dailies soon, I'll be happy.
When I
PEbuilder is what ive been using. (Score:3, Informative)
It's easy to customize with plugins that you can create, download, and add. The UBCD for Windows [ubcd4win.com] is a must have for pebuilder and makes it a real powerful tool. from browsing to e-mail, web browsing, disk recovery and lots more. I basicially used one of these CD's as my PC's OS while I was waiting for Dell to send me a new hard drive when the one in my machine at work crashed.
Ultimate Boot Disc (Score:2)
Two stories and some preaching (Score:2)
Live CD's are lifesavers in that
More Shameless Plugging (Score:3, Informative)
People are using knoppix for this all the time; I can tell by the amount of email I deal with on the subject.
Re:Why is this a story? (Score:5, Insightful)
Re:Why is this a story? (Score:2)
I presume parent is some godlike person who never makes a mistake.
Re:Why is this a story? (Score:5, Funny)
Re:Why is this a story? (Score:2)
Sure, I make mistakes, as everyone else. But I try to make the mistakes on a test machine instead of a production server.
RTFM (Score:5, Informative)
Really, if you wanna flame him, you'd be safer pointing out that this is just some guy dicking around on his home machine and managing to not scrag his mp3 collection thanks to the wonder of Knoppix.
Re:RTFM (Score:2)
In any case, I was replying to your reply to grandparent post [slashdot.org]
Re:Why is this a story? (Score:2)
Re:Why is this a story? (Score:2)
Re:Why is this a story? (Score:3, Insightful)
Knoppix is good for fixing the problem, regardless of whether the problem was caused by an ID10T error or an OS crash.
Re:Why is this a story? (Score:3, Informative)
"The first and only time I experimented with out-of-spec IDE cables was on my main workstation."
And he had a reason for out of spec cables: he couldn't reach the connector on the motherboard.
For not reading GRUB parameters, well, there's just no excuse for that.
Re:Why is this a story? (Score:3, Informative)
One other thing.... avoid doing dangerous admin commands when highly stressed or tired. I once deleted an entire directory I didn't intend to because I forgot the directory was hardlinked to another location.
As a result, 10 Virtual Servers, including a domain controller, suddenly blinked off. I had bl
Re:Why is this a story? (Score:2)
Re:Why is this a story? (Score:2)
Isn't that another term for DRM.
Re:Knoppix to the rescue (Score:2)
For Windows system it's best to use a good cleaner [sourceforge.net] ;-)
Re:Downloads? (Score:2)
Helps if you visit the Knoppix web page of the subject in question and take even a brief look around. (VTFWP - I lay claim to a new acronym!)
http://www.knopper.net/knoppix-mirrors/index-en
Re:Downloads? (Score:2)
Some cautions:
Not all mirrors have the current version (3.7), some only seem to have 3.6.
Get the version with EN in the name for the English version, the version with DE in the name for the German version.
Some mirrors are much slower than others, some may not be available at all.
Download and check the md5 sum. I have seem a lot of problems with corruption of Knoppix downloads from FTP and HTTP sites, if you can't be bothered to check the md5 sum
Re:Slackware is also useful (Score:2)
Re:Not always the best tool for the job (Score:3, Informative)
As an exmaple: http://www.oreilly.com/catalog/knoppixhks/chapter