Linux Logical Volume Manager (LVM) - Revision history

Joachim Metz: /* Also see */

2012-09-14T10:06:00Z

‎Also see

2012-09-14T10:04:12Z

2012-08-02T07:22:23Z

2012-08-02T07:20:50Z

2012-07-31T08:33:04Z

2012-07-31T08:05:48Z

2012-07-31T08:04:07Z

2012-07-31T08:01:59Z

2012-07-31T07:59:31Z

2012-07-31T07:52:09Z

@@ Line 79: / Line 79: @@
 == Also see ==
-* [[:Category:File Systems|File Systems]]
+* [[:Category:File Systems | File Systems]]
 == External Links ==

@@ Line 1: / Line 1: @@
 {{expand}}
-The [[Linux]] Logical Volume Manager, is commonly abreviated to LVM. Although LVM can used for other [http://en.wikipedia.org/wiki/Logical_Volume_Management Logical Volume Management] variants as well.
+The [[Linux]] Logical Volume Manager, is commonly abbreviated to LVM. Although LVM can used for other [http://en.wikipedia.org/wiki/Logical_Volume_Management Logical Volume Management] variants as well.
 Not all forensic tools have support for Linux Logical Volume Manager (LVM) volumes, but most modern Linux distributions do.

← Older revision		Revision as of 07:22, 2 August 2012
Line 36:		Line 36:

	Where $VOLUMEGROUP is the corresponding name of the volume group		Where $VOLUMEGROUP is the corresponding name of the volume group
		+
		+	The individual volume devices are now available in:
		+	<pre>
		+	/dev/mapper/$VOLUMEGROUP-$VOLUMENAME
		+	</pre>

	== Mounting an LVM from a device ==		== Mounting an LVM from a device ==

@@ Line 66: / Line 66: @@
 </pre>
-These now can be inspected with e.g. a tool like the [[Sleuthkit]] or loop-back mounted.
+These now can be analyzed with e.g. a tool like the [[Sleuthkit]] or loop-back mounted.
 To read-only loop-back mount an individual volume:

← Older revision		Revision as of 08:33, 31 July 2012
Line 36:		Line 36:

	Where $VOLUMEGROUP is the corresponding name of the volume group		Where $VOLUMEGROUP is the corresponding name of the volume group
		+
		+	== Mounting an LVM from a device ==
		+
		+	To list the Volume Groups (VG) run:
		+	<pre>
		+	pvs
		+	</pre>
		+
		+	To list information about a Volume Group (VG) run:
		+	<pre>
		+	lvdisplay $VOLUMEGROUP
		+	</pre>
		+
		+	The field "LV Name" provides the volume name
		+
		+	To make the volume group known to the system
		+	<pre>
		+	vgexport $VOLUMEGROUP
		+	</pre>
		+
		+	And active the volumes in the volume group
		+	<pre>
		+	vgchange -a y $VOLUMEGROUP
		+	</pre>
		+
		+	The individual volume devices are now available in:
		+	<pre>
		+	/dev/mapper/$VOLUMEGROUP-$VOLUMENAME
		+	</pre>
		+
		+	These now can be inspected with e.g. a tool like the [[Sleuthkit]] or loop-back mounted.
		+
		+	To read-only loop-back mount an individual volume:
		+	<pre>
		+	mount -o ro /dev/mapper/$VOLUMEGROUP-$VOLUMENAME filesystem/
		+	</pre>

	== Also see ==		== Also see ==

@@ Line 38: / Line 38: @@
 == Also see ==
-* [[:Catergory:File Systems|File Systems]]
+* [[:Category:File Systems|File Systems]]
 == External Links ==
@@ Line 44: / Line 44: @@
 * [http://www.datadisk.co.uk/html_docs/redhat/rh_lvm.htm RedHat - LVM cheatsheet]
-[[Catergory:Volume Systems]]
+[[Category:Volume Systems]]

@@ Line 36: / Line 36: @@
 Where $VOLUMEGROUP is the corresponding name of the volume group
 == External Links ==
 * [http://en.wikipedia.org/wiki/Logical_Volume_Manager_%28Linux%29 Wikipedia article on Logical Volume Manager]
 * [http://www.datadisk.co.uk/html_docs/redhat/rh_lvm.htm RedHat - LVM cheatsheet]

@@ Line 2: / Line 2: @@
 The [[Linux]] Logical Volume Manager, is commonly abreviated to LVM. Although LVM can used for other [http://en.wikipedia.org/wiki/Logical_Volume_Management Logical Volume Management] variants as well.
 == Mounting an LVM from an image ==
@@ Line 11: / Line 13: @@
 Note that the offset is in bytes.
-If you need to write to the image, e.g. for recovery, use [[xmount]] to write to a [[shadow file]] (or cachefile in xmount terminology).
+If you need to write to the image, e.g. for recovery, use [[xmount]] to write the changes to a [[shadow file]] (or cachefile in xmount terminology).
 <pre>
 sudo xmount --in dd --cache sda.shadow sda.raw image/