Closed joerg-wille closed 3 years ago
Thx for the detailed report, this makes it very easy to follow the steps you've taken.
This is is the issue:
libfsapfs_object_map_btree_get_sub_node: invalid object type: 0x40000002.
libfsapfs_object_map_btree_get_entry_by_identifier: unable to retrieve B-tree sub node from block: 810507.
libfsapfs_object_map_btree_get_descriptor_by_object_identifier: unable to retrieve entry from B-tree.
libfsapfs_internal_volume_get_file_system_btree: unable to retrieve object map descriptor for file system root object identifier: 1028.
libfsapfs_volume_get_file_entry_by_utf8_path: unable to determine file system B-tree.
mount_file_system_get_file_entry_by_path: unable to retrieve file entry
mount_handle_get_file_entry_by_path: unable to retrieve file entry.
mount_fuse_getattr: unable to retrieve value for: /.
libfsapfs is seeing a file system block/object (0x40000002) where it would expect to get an object map block/object (0x0000000b) type. Also see https://github.com/libyal/libfsapfs/blob/master/documentation/Apple%20File%20System%20(APFS).asciidoc#44-object-types
As I read from other issues, I also tried out "iBoysoft Data Recovery". This tool can read all files of the "Macintosh HD". So I have good hopes, that the drive is not corrupt.
I'm not familiar with the inner workings of this tool, but judging from the name it is focused on recovery so it might use additional recovery methods.
Thanks Joachim,
libfsapfs is seeing a file system block/object (0x40000002) where it would expect to get an object map block/object (0x0000000b) type.
So, what is the problem? Is libfsapfs's expectation wrong or is the block object type wrong on my disk? And, for the latter, could I - theoretically - use an Hex Editor and change this block object type on disk to get libfsapfs to mount my drive and if possible, would you suggest doing so? Also, I have no idea how to use a disk editor for an encrypted volume, I am trying 010 Editor with a template for APFS.
What would you think, it is possible to access the Macintosh HD for copying the data files using libfsapfs?
Thanks
So, what is the problem? Is libfsapfs's expectation wrong or is the block object type wrong on my disk?
Is possible the library is still experimental and not every edge case is supported.
Without the actual APFS container and its history hard for me to tell. Based on this issue tracker it appears not uncommon for APFS to get corrupted. So the file system corruption hypothesis would be more likely I would say.
Can you open this file system with the native Mac OS APFS implementation?
libfsapfs_btree_node_read_object_data: object checksum : 0x785443db36a215d1
libfsapfs_btree_node_read_object_data: object identifier : 810507
libfsapfs_btree_node_read_object_data: object transaction identifier : 1030670
libfsapfs_btree_node_read_object_data: object type : 0x40000002
libfsapfs_btree_node_read_object_data: object subtype : 0x0000000b
Also, I have no idea how to use a disk editor for an encrypted volume, I am trying 010 Editor with a template for APFS.
That might be more complicated than you want.
Another possible work-around is to remove the safeguard from libfsapfs in your local copy.
No additional input regarding issue, unable to fix without complete information. Closing
My current system is macOS Mojave 10.14.6 and I want to mount an external USB drive created with macOS High Sierra 10.13. This USB drive is the original 500GB SSD from my MacBookPro which I replaced and put in an external enclosure. Accessing this drive worked for some time, but for some unknown reasons, the "Macintosh HD" is not mountable any more.
I did following steps:
If I try to
ls -al
in the "drive" I get:ls: .: Device not configured
In the debug.log file, I see:
libfsapfs_container_superblock_read_data: unknown30
Is this the problem? And is there anything I can do to solve this?
(As I read from other issues, I also tried out "iBoysoft Data Recovery". This tool can read all files of the "Macintosh HD". So I have good hopes, that the drive is not corrupt.)