$ wget https://cytranet.dl.sourceforge.net/project/extundelete/extundelete/0.2.4/extundelete-0.2.4.tar.bz2

$ tar vxf extundelete-0.2.4.tar.bz2

$ cd extundelete-0.2.4/

$ ./configure

$ make && sudo make install

sandy@ubuntu:~/Desktop/xxx/extundelete-0.2.4$ extundelete

No action specified; implying --superblock.

extundelete: Missing device name.

Usage: extundelete [options] [--] device-file

Options:

  --version, -[vV]       Print version and exit successfully.

  --help,                Print this help and exit successfully.

  --superblock           Print contents of superblock in addition to the rest.

                         If no action is specified then this option is implied.

  --journal              Show content of journal.

  --after dtime          Only process entries deleted on or after 'dtime'.

  --before dtime         Only process entries deleted before 'dtime'.

Actions:

  --inode ino            Show info on inode 'ino'.

  --block blk            Show info on block 'blk'.

  --restore-inode ino[,ino,...]

                         Restore the file(s) with known inode number 'ino'.

                         The restored files are created in ./RECOVERED_FILES

                         with their inode number as extension (ie, file.12345).

  --restore-file 'path'  Will restore file 'path'. 'path' is relative to root

                         of the partition and does not start with a '/'

                         The restored file is created in the current

                         directory as 'RECOVERED_FILES/path'.

  --restore-files 'path' Will restore files which are listed in the file 'path'.

                         Each filename should be in the same format as an option

                         to --restore-file, and there should be one per line.

  --restore-directory 'path'

                         Will restore directory 'path'. 'path' is relative to the

                         root directory of the file system.  The restored

                         directory is created in the output directory as 'path'.

  --restore-all          Attempts to restore everything.

  -j journal             Reads an external journal from the named file.

  -b blocknumber         Uses the backup superblock at blocknumber when opening

                         the file system.

  -B blocksize           Uses blocksize as the block size when opening the file

                         system.  The number should be the number of bytes.

  --log 0                Make the program silent.

  --log filename         Logs all messages to filename.

--log D1=0,D2=filename   Custom control of log messages with comma-separated

   Examples below:       list of options.  Dn must be one of info, warn, or

   --log info,error      error.  Omission of the '=name' results in messages

   --log warn=0          with the specified level to be logged to the console.

   --log error=filename  If the parameter is '=0', logging for the specified

                         level will be turned off.  If the parameter is

                         '=filename', messages with that level will be written

                         to filename.

   -o directory          Save the recovered files to the named directory.

                         The restored files are created in a directory

                         named 'RECOVERED_FILES/' by default.

sandy@ubuntu:~/Desktop/xxx/extundelete-0.2.4$ sudo fdisk -l

Disk /dev/sda: 40 GiB, 42949672960 bytes, 83886080 sectors

Units: sectors of 1 * 512 = 512 bytes

Sector size (logical/physical): 512 bytes / 512 bytes

I/O size (minimum/optimal): 512 bytes / 512 bytes

Disklabel type: dos

Disk identifier: 0xe184ba74

Device     Boot    Start      End  Sectors Size Id Type

/dev/sda1  *        2048 79693823 79691776  38G 83 Linux

/dev/sda2       79695870 83884031  4188162   2G  5 Extended

/dev/sda5       79695872 83884031  4188160   2G 82 Linux swap / Solaris

sandy@ubuntu:~/Desktop/xxx/extundelete-0.2.4$

sudo extundelete /dev/sda1 --restore-all  #恢复所有数据

sandy@ubuntu:~/Desktop/xxx/extundelete-0.2.4$ ll RECOVERED_FILES/

total 3888

drwxr-xr-x   3 root  root    4096 Apr 10 18:49 home/

drwxr-xr-x 198 root  root  118784 Apr 10 18:50 lost+found/

drwxr-xr-x   6 root  root    4096 Apr 10 18:49 tmp/

drwxr-xr-x   7 root  root    4096 Apr 10 18:49 usr/

drwxr-xr-x   5 root  root    4096 Apr 10 18:49 var/

sandy@ubuntu:~/Desktop/xxx/extundelete-0.2.4$