一、删除文件后(进程还存在)
[root@localhostdel]#echo 'hello linux' > zhang.txt [root@localhostdel]#echo 'delete' >>zhang.txt [root@localhostdel]#cat zhang.txt hello linux delete #模拟进程占用该文件 [root@localhostdel]#cat >> zhang.txt #删除文件 [root@localhostdel]#rm -f zhang.txt #查看删除的文件 [root@localhostdel]#lsof |grep deleted cat 25558 root 1w REG 8,2 21 69197603 /del/zhang.txt (deleted) #文件恢复 [root@localhostdel]#ll /proc/25558/fd/1 l-wx------ 1 root root 64 12月 6 09:57 /proc/25558/fd/1 -> /del/zhang.txt (deleted) #开始恢复(25558是对应的进程pid号) [root@localhostdel]#cp /proc/25558/fd/1 /del/ [root@localhostdel]#cat /del/1 hello linux delete