TheRealDarkphoX
n00b
- Joined
- Mar 2, 2016
- Messages
- 29
Hey folks,
I'm working on recovering files from a lost RAID 10 partition, and am trying to do things slowly and deliberately so I don't make an unrecoverable 'oopsie.'
Background: This was a software RAID 10 built with 4x 3TB drives using IRST on an ICH10R (Intel X58) controller. I don’t know how, but when I installed a new video card in our home server/HTPC, the BIOS got reset and I lost the RAID configuration. It was file storage only, no OS. I disconnected the RAID drives, and reinstalled windows on my C: drive (I'd been wanting to do a clean install anyway, and at this point in time thought it was a windows problem. I hadn't realized the root issue yet, that the bios reset had reverted my drive from RAID to AHCI).
Dumb Question Up Front: Is there any long term danger posed to the old data by repeatedly dropping the member disks and recreating the raid via CTRL+I?
More info: I've since set the bios drive mode back to RAID and recreated the raid via CTRL+I with the same settings it originally had. I have not written to the drive, initialized it, or formatted it. Windows shows it as “unallocated” with no drive letter in disk manager. I'm using Testdisk, and have some early results finding the old partition. However, feedback from the Testdisk developer indicates I may have accidentally reconnected the disks in the wrong order, or I may have used the wrong settings when I recreated the RAID.
I'm planning to try swapping disk order first, but need to drop the member disks and recreate the raid again with the new drive order. I want to make sure I have the right understanding before beginning, though. Is there an increased risk to my data by repeatedly dropping disks/recreating the raid, or is it just the metadata at the start of the disk that gets affected? I know this is probably a very basic-level question, but I'm learning as I go and want to make sure I understand the risks before I commit.
Thanks!
Full story with screen caps and stuff: https://forum.cgsecurity.org/phpBB3/viewtopic.php?f=5&t=8095
I'm working on recovering files from a lost RAID 10 partition, and am trying to do things slowly and deliberately so I don't make an unrecoverable 'oopsie.'
Background: This was a software RAID 10 built with 4x 3TB drives using IRST on an ICH10R (Intel X58) controller. I don’t know how, but when I installed a new video card in our home server/HTPC, the BIOS got reset and I lost the RAID configuration. It was file storage only, no OS. I disconnected the RAID drives, and reinstalled windows on my C: drive (I'd been wanting to do a clean install anyway, and at this point in time thought it was a windows problem. I hadn't realized the root issue yet, that the bios reset had reverted my drive from RAID to AHCI).
Dumb Question Up Front: Is there any long term danger posed to the old data by repeatedly dropping the member disks and recreating the raid via CTRL+I?
More info: I've since set the bios drive mode back to RAID and recreated the raid via CTRL+I with the same settings it originally had. I have not written to the drive, initialized it, or formatted it. Windows shows it as “unallocated” with no drive letter in disk manager. I'm using Testdisk, and have some early results finding the old partition. However, feedback from the Testdisk developer indicates I may have accidentally reconnected the disks in the wrong order, or I may have used the wrong settings when I recreated the RAID.
I'm planning to try swapping disk order first, but need to drop the member disks and recreate the raid again with the new drive order. I want to make sure I have the right understanding before beginning, though. Is there an increased risk to my data by repeatedly dropping disks/recreating the raid, or is it just the metadata at the start of the disk that gets affected? I know this is probably a very basic-level question, but I'm learning as I go and want to make sure I understand the risks before I commit.
Thanks!
Full story with screen caps and stuff: https://forum.cgsecurity.org/phpBB3/viewtopic.php?f=5&t=8095