(Let’s first mention the common sense of deletion and recovery: after the file is deleted, although the content of the file is not cleared, the storage space occupied by the file has been allowed to be injected, so if you want to restore the file, you must make sure not to write data to the partition where the file is located. Mine is a virtual machine, kill the process directly, non-virtual machine can umount the partition, if it is the primary partition, directly power off. For the primary partition, use livecd to mount the hard disk read-only for safety. If it is a virtual machine, even if you want to restore the root partition, you can generate multiple hard disks by imitating the hard disk image method without livecd to achieve recovery. Add the imitation hard disk to the virtual system, so that there are two hard disks in the system. But when I tested it, I found that although it can be correctly identified as two hard disks a and b, no matter which system is started, it is loaded from one hard disk, which may be the problem of boot information.
linuxrm file recovery summary.doc)