Dotaz: Jak zálohovat partition table?

[Eregon]

Zdravim, chystam se na nejake experimenty s partition table, ale protoze na disku jsou i data, ktera bych nechtel ztratit a nemam je momentalne kam jinam ulejt, chci si udelat zalohu PT.

Nejak se mi ale nezadarilo najit zadny nastroj, ktery by to udelal nejak automaticky a pak byl schopny PT taky vratit zpet, takze jedina moje zaloha ted prave je papir, na nem vypsane jednotlive particie s poznamkou o tom, ktera data na danem oddilu jsou, a s pocatecnim a koncovym cylindrem, tak jak to vypsal fdisk -l. To mi ale neprijde jako uplne cista cesta, zvlast pote, co jsem zrusil jednu partici, z tehle "zalohy" jsem ji obnovil a fdisk -l zacal hlasit "Partition 1 does not end on cylinder boundary."

Nema nekdo nejaky tip?

Odpovědi

[JPetr]

dd if=/dev/hdx of=/cesta_k_souboru bs=512 count=1, kde x je disk, u ktereho chces provest zalohu PT

[Eregon]

Oki, diky. Jeste technicka - jestli spravne chapu man stranku k dd, tak obnova PT z takhle vytvorene zalohy se udela zamenou parametru of a if. V takovem pripade se z5 na disk zapise jen ten jeden sektor a zbytek zustane nedostceny, chapu spravne?

[JPetr]

Jo, chapes to spravne

[Beda]

jen jestli mu dochazi, ze do linuxu k dd na tu partition o ktere bude zaznam v TE partition tabulce s kterou hodla experimentovat se uz nejspis nedostane...

[Eregon]

No neboj, az zas takovy retard nejsem, a muzes mluvit primo ke mne. Linux uz nejaky ten patek pouzivam, ale kdyz se zabyvam vecmi, kde jde o data, radsi si vsechno overuju. Ono je to lepsi, nez pak v blogu brecet, ze jsem o neco prisel.

[trekker.dk]

Ono je to lepsi, nez pak v blogu brecet, ze jsem o neco prisel.

Tak, tak. Třeba jako já zrovna teď.

[spectrum]

Zdravím,
tahle sranda zálohuje akorát boot sektor příslušného disku. Na zálohování partition table tu je následující:

sfdisk -d /dev/hda > part.table

Pěkný návod naleznete na http://www.linuxnetmag.com/en/issue9/m9recovery1.html a s úspěchem jsem ho již několikrát použil.

[JPetr]

No, tech prvnich 512 bytu na disku je rozdeleno na zavadeci kod (446 bytu) a dalsich 64 bytu je partition table. Jestli se pletu, tak me prosim opravte

[David Jaša]

A poslední dva bajty jsou checksum nebo něco na ten způsob.

[JPetr]

Tak, tak. Jsou 55 AA

[anonym]

Tady je část z : http://www.diydatarecovery.nl/MBRtool_manual.htm _________________________________________________________

A word about the MBR

- introduction

The Master Boot Record (or MBR) is the very first sector of a harddisk. This very important sector contains a number of things that the Operating System and the computer BIOS need to start the system. If the contents of this sector are lost or damaged you can not access the data on the harddisk. Please note that each harddisk has a MBR, so if you have 2 or more harddisks in your computer, each has it's own MBR. If multiple disks are configured as an array there is usually 1 MBR that services the entire array, placed on the 1st disk in the array (there are exceptions to this rule, but that is beyond the scope of this manual). It should be clear that the MBR is one of the most important (and, strangely enough, overlooked) sectors on your harddisk. The following explanation is mainly about using the MBR with Windows or DOS based operating systems. The MBR is somewhat different when used with Unix based systems. I will come back to this later on.

- details

The smallest addressable space on a harddisk is 512 bytes at a time. A harddisk sector is 512 bytes long, so 1 sector is the smallest addressable space on a harddisk. The MBR is 1 sector, so the MBR is 512 bytes long. These 512 bytes are divided into several parts that each have their own function in getting the computer to start. The 4 main parts of the MBR are (in the order they appear in the MBR) :

- the bootcode

- the volume bytes

- the partition table

- the signature bytes

The bootcode : this part of the MBR gets read by the computer BIOS when the computer is started. When the computer finishes it's own startup procedures (getting the disks spinning, doing some checks) and gets ready to start the operating system, the bootcode in the MBR is read first. This allows the computer to interpret the rest of the MBR.

The volume bytes : these are 4 bytes that are located after the bootcode and just before the partition table. Windows 2000 and Windows XP use these 4 bytes to identify the mountable volumes on the harddisk. If these bytes are changed or erased from the MBR, Windows 2000/XP will go through a simple hardware detection round that will re-identify all the volumes on the disk. This is done during the next Windows startup after changing the volume bytes. Driveletters assigned to volumes might change after this. This goes for simple volumes, i have at this point no information on the effect of removing the volume bytes when using dynamic volumes.

The partition table : this is a sequence of 64 bytes (4 x 16) that identify the first 4 (or less) primary partitions on a harddisk. There is space for identifying 4 partitions. Each partition-identification is made up of 16 bytes that describe a number of things about the partition, such as : where it starts, what type it is, how big it is, is it an active partition or not, etc. One of these 4 partition descriptions can be used to describe an extended partition, which itself can then contain logical drives. The logical drives are not described in the MBR. An active partition is the partition from which the Operating System is started. This must be a primary partition, and there can only be 1 primary partition active at any time. If there are for instance only 2 partitions on a harddisk, the first 32 bytes of the partition table (2 x 16) would contain the descriptions of those partitions. The other 32 bytes would contain all zeros. So deleting a partition consists of putting zeros in the chosen partition description.

The signature bytes : these are 2 bytes that are used to signify an important sector. They can be found trailing the MBR, but there are other sectors that contain these bytes as well. If they are not trailing the MBR the computer will not be able to read the MBR (because it will not be recognised as an important sector).

So, the MBR consists of :

- 440 bytes of bootcode, followed by

-   4 bytes with volume information, followed by

-   2 bytes that are (as far as i know) not used, followed by

-  64 bytes that contain the partition descriptions, followed by

-   2 bytes that "close up" the MBR

This makes a total of 512 bytes.

A word about Unix based Operating Systems : The main difference between a Unix based MBR and a Windows based MBR is the bootcode. Unix based bootcode has the ability to look for partition information outside the MBR. So it should be clear that replacing Unix bootcode with Windows bootcode could render a system unstartable.

[Dejv]

Nikoliv checksum, ale signatura.

[Dejv]

Jenze timhle si zazalohuje jen hdx[1-4].

[Beda]

Jenze se taky pta na partition table a ne na extended partition table nebo ldm (ano je tam D) signatury.

[Eregon]

Ano, ptal jsem se jen na partition table, protoze me zajimala jen partition table. Kazdopadne za vsechny KONSTRUKTIVNI tipy vsem dekuju (zalohoval jsem pres dd, ale ostatni rady se mozna jeste budou hodit).

[Feyd]

Extended partition table je taky partition table.. A kdyby vedel o co go a jak je to ulozeny, nebude se nejspis ptat..

[Eregon]

Nemyslim, ze bych nevedel, o co go, slo mi jen o to, mit vse overene predem, jak jsem psal vyse