Background: OEM install of Ubuntu 18.04 on a Dell Latitude. Note that this not an install of Ubuntu by the OEM, rather, Ubuntu 18.04 was installed by me using the "Install as OEM" option.
While exploring the menus the user clicked on something that upon next boot changed the OEM install into a regular install, with a username other than oem
. He was prompted with the regular install screen and filled it out to the best of his ability. In no place was there a warning that data would be lost. The system was immediately shut down and I have the drive now mounted read only on my desktop.
Now that this is converted to a regular install, how might one go about recovering the data that was in /home/oem/
? Note that extundelete
could not find anything deleted on the disk, but I do see that the custom /opt/
directory with third party applications is still intact.
I used autopsy
to scan the drive and I do see that there is a file (not a directory) called /home/oem/
but its contents do not seem useful:
https://pastebin.com/XXCiu7Bb
I have also tried opening the partition with testdisk
(Photorec tool) but also there I see the file /home/oem
but not the directory /home/oem/
which I know to have been the home directory of the OEM user. Possibly I created this file by accident in an early stage of the recovery process while it was still in the laptop, but now I have the drive mounted read only on another computer. Yes I am aware that some data may have been lost due to the drive having been mounted read-write.