标签云
asm mount asm恢复 asm 恢复 bbed bootstrap$ dul In Memory kcbzib_kcrsds_1 kccpb_sanity_check_2 kfed MySQL恢复 ORA-00312 ORA-00607 ORA-00704 ORA-01110 ORA-01555 ORA-01578 ORA-08103 ORA-600 2662 ORA-600 2663 ORA-600 3020 ORA-600 4000 ORA-600 4137 ORA-600 4193 ORA-600 4194 ORA-600 16703 ORA-600 kcbzib_kcrsds_1 ORA-15042 ORA-15196 ORACLE 12C oracle dul ORACLE PATCH Oracle Recovery Tools oracle加密恢复 oracle勒索 oracle勒索恢复 oracle异常恢复 ORACLE恢复 Oracle 恢复 ORACLE数据库恢复 oracle 比特币 OSD-04016 YOUR FILES ARE ENCRYPTED 勒索恢复 比特币加密文章分类
- Others (2)
- 中间件 (2)
- WebLogic (2)
- 操作系统 (96)
- 数据库 (1,521)
- DB2 (22)
- MySQL (65)
- Oracle (1,396)
- Data Guard (43)
- EXADATA (7)
- GoldenGate (21)
- ORA-xxxxx (154)
- ORACLE 12C (72)
- ORACLE 18C (6)
- ORACLE 19C (12)
- ORACLE 21C (3)
- Oracle ASM (63)
- Oracle Bug (7)
- Oracle RAC (46)
- Oracle 安全 (6)
- Oracle 开发 (26)
- Oracle 监听 (26)
- Oracle备份恢复 (488)
- Oracle安装升级 (79)
- Oracle性能优化 (62)
- 专题索引 (5)
- 勒索恢复 (71)
- PostgreSQL (13)
- PostgreSQL恢复 (3)
- SQL Server (27)
- SQL Server恢复 (8)
- TimesTen (7)
- 达梦数据库 (2)
- 生活娱乐 (2)
- 至理名言 (11)
- 虚拟化 (2)
- VMware (2)
- 软件开发 (34)
- Asp.Net (9)
- JavaScript (12)
- PHP (2)
- 小工具 (17)
-
最近发表
- ORA-16038 ORA-00354故障处理
- unknown variable ‘default-character-set=utf8′ 处理
- ORA-600 16703故障,客户找人恢复数据库,数据库被进一步恶意破坏—ORA-00704 ORA-00922
- gpk-update-icon进程占用CPU资源100%
- 难见的oracle 9i恢复—2023年
- udev_start导致vip漂移(常见情况:rac在线加盘操作引起)
- 又一例ORA-600 kcbzpbuf_1恢复
- ORA-01172 ORA-01151 故障恢复
- 存储双活同步导致数据库异常恢复
- Control file mount id mismatch!故障处理
- Maximum of 148 enabled roles exceeded for user ZLHIS. Not loading all the roles.
- echo 0 > /proc/sys/kernel/hung_task_timeout_secs disables this message
- ORA-600 kzrini:!uprofile处理
- 数据库open报ORA-07445 kglsget错误处理
- 12.1.0.2最新patch信息—202304
- 11.2.0.4最新patch信息—202304
- 数据库启动报ORA-600 kcbgtcr_13处理
- win平台 UtilSession 失败: Prerequisite check “CheckActiveFilesAndExecutables” failed. 处理
- Oracle Recovery Tools快速恢复断电引起的无法正常启动数据库(ORA-01555,MISSING000等问题)
- login trigger导致ORA-16191问题
友情链接
分类目录归档:Solaris
Solaris rm datafile recovery—利用句柄误删除数据文件恢复
今天早上接到有客户恢复请求,他一不小心在solaris系统中使用rm -rf oradata命令把一个分区下面的所有数据文件全部删除了。现在不知道怎么办,请求我们给予支持.上去检查发现比较幸运,数据库没有crash,看来直接考虑使用句柄进行恢复
root@CNISORCLSVR # uname -a SunOS CNISORCLSVR 5.9 Generic_112233-08 sun4u sparc SUNW,Sun-Fire-880 root@CNISORCLSVR # ps -ef|grep lgwr oracle 597 1 0 Mar 05 ? 17:14 ora_lgwr_xifenfei root 28069 28043 0 18:51:17 pts/2 0:00 grep lgwr root@CNISORCLSVR # ls -ltr total 189348454 -r--r--r-- 1 oracle dba 657920 Apr 26 2002 12 c--------- 1 root sys 13, 12 Mar 27 2004 8 c--------- 1 root sys 13, 12 Mar 27 2004 10 -rw-r----- 0 oracle dba 34359730176 Nov 12 2013 291 -rw-r----- 0 oracle dba 1073750016 Nov 13 2013 293 D--------- 1 root root 0 Mar 5 19:31 11 -rw-r----- 1 oracle dba 1758 Mar 5 22:04 9 -rw-rw---- 1 oracle dba 24 Mar 5 22:04 13 s--------- 0 root root 0 Mar 8 00:45 14 -rw-r----- 1 oracle dba 1887444992 Mar 12 03:27 289 -rw-r----- 1 oracle dba 943726592 Mar 12 11:17 290 -rw-r----- 0 oracle dba 4294975488 Mar 13 00:09 292 -rw-r----- 0 oracle dba 268443648 Mar 13 01:33 288 -rw-r----- 0 oracle dba 536879104 Mar 13 01:33 279 -rw-r----- 1 oracle dba 134225920 Mar 13 01:33 278 -rw-r----- 0 oracle dba 134225920 Mar 13 01:33 269 -rw-r----- 1 oracle dba 268443648 Mar 13 01:33 267 -rw-r----- 1 oracle dba 148119552 Mar 13 01:33 266 -rw-r----- 1 oracle dba 10493952 Mar 13 01:33 265 -rw-r----- 1 oracle dba 26222592 Mar 13 01:33 264 -rw-r----- 1 oracle dba 62922752 Mar 13 01:33 263 -rw-r----- 1 oracle dba 20979712 Mar 13 01:33 262 -rw-r----- 0 oracle dba 134225920 Mar 13 01:33 287 -rw-r----- 1 oracle dba 209723392 Mar 13 01:33 285 -rw-r----- 0 oracle dba 536879104 Mar 13 01:33 283 -rw-r----- 1 oracle dba 67117056 Mar 13 01:33 282 -rw-r----- 0 oracle dba 536879104 Mar 13 01:33 281 -rw-r----- 0 oracle dba 536879104 Mar 13 01:33 280 -rw-r----- 0 oracle dba 536879104 Mar 13 01:33 276 -rw-r----- 0 oracle dba 1073750016 Mar 13 01:33 275 -rw-r----- 0 oracle dba 2214600704 Mar 13 01:33 274 -rw-r----- 0 oracle dba 134225920 Mar 13 01:33 273 -rw-r----- 0 oracle dba 536879104 Mar 13 01:33 272 c--------- 1 root sys 13, 2 Mar 13 02:00 5 c--------- 1 root sys 13, 2 Mar 13 02:00 4 c--------- 1 root sys 13, 2 Mar 13 02:00 3 c--------- 1 root sys 13, 2 Mar 13 02:00 2 c--------- 1 root sys 13, 2 Mar 13 02:00 1 c--------- 1 root sys 13, 2 Mar 13 02:00 0 --w------- 1 oracle dba 4640842 Mar 13 04:43 7 --w------- 1 oracle dba 4640842 Mar 13 04:43 6 -rw-r----- 0 oracle dba 1207967744 Mar 13 18:21 271 -rw-r----- 0 oracle dba 15929974784 Mar 13 18:39 284 -rw-r----- 0 oracle dba 134225920 Mar 13 18:45 277 -rw-r----- 0 oracle dba 2122326016 Mar 13 18:46 286 -rw-r----- 0 oracle dba 9261031424 Mar 13 18:47 270 -rw-r----- 0 oracle dba 18253619200 Mar 13 18:47 268 -rw-r----- 1 oracle dba 134225920 Mar 13 18:51 261 -rw-r----- 1 oracle dba 524296192 Mar 13 18:51 260 -rw-r----- 1 oracle dba 104858112 Mar 13 18:52 259 -rw-r----- 1 oracle dba 1941504 Mar 13 18:52 258 -rw-r----- 1 oracle dba 1941504 Mar 13 18:52 257 -rw-r----- 1 oracle dba 1941504 Mar 13 18:52 256 SQL> select file#,name from v$datafile wehre name like '/disk%'; FILE# NAME ---------- -------------------------------------------------- 9 /disk/oradata/xifenfei/xifenfei.dbf 10 /disk/oradata/xifenfei/CSSN.dbf 11 /disk/oradata/xifenfei/NCSSN.dbf 12 /disk/oradata/xifenfei/CSIC_RDS.dbf 13 /disk/oradata/xifenfei/CSIC_CSSN.dbf 14 /disk/oradata/xifenfei/CNIS_I.dbf 15 /disk/oradata/xifenfei/CNIS.dbf 16 /disk/oradata/xifenfei/TRSWCM6_CSSN.dbf 17 /disk/oradata/xifenfei/TRSWCM6_CSSN_PLUGINS.dbf 18 /disk/oradata/xifenfei/DIGIREF.dbf 20 /disk/oradata/xifenfei/TRSWCM.dbf 21 /disk/oradata/xifenfei/TRSWCM52_NSLC.dbf 22 /disk/oradata/xifenfei/TRSWCM52_PLUGINS_NSLC.dbf 24 /disk/oradata/xifenfei/TRSWCM_PLUGINS.dbf 25 /disk/oradata/xifenfei/CNIS_ALL.dbf 27 /disk/oradata/xifenfei/undotbs01.dbf 28 /disk/oradata/xifenfei/TRS_IDS02.dbf 29 /disk/oradata/xifenfei/xdb02.dbf
在solaris中比较郁闷,虽然进入了fd目录,但是无法知道哪些文件句柄是删除,哪些是正常的,因此没有办法,只能使用lsof进一步分析
root@CNISORCLSVR # pkgadd -d lsof-4.80-sol9-sparc-local The following packages are available: 1 IBMlsof lsof (sparc) 4.80 Select package(s) you wish to process (or 'all' to process all packages). (default: all) [?,??,q]: all Processing package instance <IBMlsof> from </tmp/lsof-4.80-sol9-sparc-local> lsof (sparc) 4.80 Vic Abell Using </usr/local> as the package base directory. ## Processing package information. ## Processing system information. ## Verifying disk space requirements. ## Checking for conflicts with packages already installed. The following files are already installed on the system and are being used by another package: * /usr/local/bin <attribute change only> * - conflict with a file which does not belong to any package. Do you want to install these conflicting files [y,n,?,q] y ## Checking for setuid/setgid programs. The following files are being installed with setuid and/or setgid permissions: /usr/local/bin/lsof <setgid sys> /usr/local/bin/sparcv7/lsof <setgid sys> /usr/local/bin/sparcv9/lsof <setgid sys> Do you want to install these as setuid/setgid files [y,n,?,q] y Installing lsof as <IBMlsof> ## Installing part 1 of 1. /usr/local/bin/lsof /usr/local/bin/sparcv7/lsof /usr/local/bin/sparcv9/lsof /usr/local/doc/lsof/00.README.FIRST /usr/local/doc/lsof/00CREDITS /usr/local/doc/lsof/00DCACHE /usr/local/doc/lsof/00DIALECTS /usr/local/doc/lsof/00DIST /usr/local/doc/lsof/00FAQ /usr/local/doc/lsof/00LSOF-L /usr/local/doc/lsof/00MANIFEST /usr/local/doc/lsof/00PORTING /usr/local/doc/lsof/00QUICKSTART /usr/local/doc/lsof/00README /usr/local/doc/lsof/00TEST /usr/local/doc/lsof/00XCONFIG /usr/local/doc/lsof/lsof.man /usr/local/man/man8/lsof.8 [ verifying class <none> ] Installation of <IBMlsof> was successful. root@CNISORCLSVR # ./lsof -p 597 COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME oracle 597 oracle cwd VDIR 85,5 2048 106299 /export/home/oracle/app/product/9.2.0/dbs oracle 597 oracle txt VREG 85,5 61272672 2332 /export/home/oracle/app/product/9.2.0/bin/oracle ………… oracle 597 oracle 260u VREG 85,5 524296192 106517 /export/home/oracle/oradata/xifenfei/system01.dbf oracle 597 oracle 261u VREG 85,5 134225920 106518 /export/home/oracle/oradata/xifenfei/undotbs01.dbf ………… oracle 597 oracle 268u VREG 118,70 18253619200 109 /disk (/dev/dsk/c2t600A0B800029CEFA0000036C491B270Bd0s6) oracle 597 oracle 269u VREG 118,70 134225920 110 /disk (/dev/dsk/c2t600A0B800029CEFA0000036C491B270Bd0s6) oracle 597 oracle 270u VREG 118,70 9261031424 111 /disk (/dev/dsk/c2t600A0B800029CEFA0000036C491B270Bd0s6) ………… oracle 597 oracle 293u VREG 118,70 1073750016 14 /disk (/dev/dsk/c2t600A0B800029CEFA0000036C491B270Bd0s6)
到这一步,基本上定位/disk部分是我们需要恢复的数据,从而可以定位到句柄,然后结合数据文件信息,直接使用cp命令恢复出来文件.然后数据库层面recover并且online.
cd /proc/597/fd cp 269 /disk/oradata/cnisora2/CSSN.dbf chown oracle:dba /disk/oradata/xifenfei/CSSN.dbf SQL> recover datafile 10; ORA-00283: 恢复会话因错误而取消 ORA-01124: 无法恢复数据文件 10 - 文件在使用中或在恢复中 ORA-01110: 数据文件 10: '/disk/oradata/xifenfei/CSSN.dbf' SQL> alter database datafile 10 offline; 数据库已更改。 SQL> recover datafile 10; 完成介质恢复。 SQL> alter database datafile 10 online; 数据库已更改。
至此基本上恢复完成,万幸是数据库没有crash,遇到此类问题,千万不要盲目关闭数据库.另外数据库备份重于一切