On Sun, Jun 23, 2024 at 07:03:36PM +0000, Anon Loli wrote: > Okay, I now have a fresh big chunky encrypted drive on another machine and can > transfer the image/files from the corrupted sd3i to it, but when I tried to > run > `dd if=/dev/sd3i | ssh destination "dd of=/mnt/somewhere/ssdimage bs=1m" > or even to a regular file on the same machine, I got this: > "dd: /dev/sd3i: Device busy"
Because that partition is mounted. Since the system is potentially in an unstable state, I wouldn't try unmounting it. Either use the character device rsd3i, or the whole disc 'c' partition. Also, once the image is copied over to the destination, check that it's more or less the expected size before finally resetting the source machine or doing anything else to lose the key.
