sgan81 / apfs-fuse

FUSE driver for APFS (Apple File System)
GNU General Public License v2.0
1.79k stars 164 forks source link

`Found more recent xid` error #107

Open vladipus opened 5 years ago

vladipus commented 5 years ago

sudo ./apfs-fuse /dev/sda new-primary -o allow_other -d 255 Device /dev/sda opened. Size is 500107862016 Found valid GPT partition table. Looking for APFS partition. Found more recent xid 224680 than superblock 0 contained (224678). Failed to load checkpoint map Unable to load container.

What's the problem here?

jivanpal commented 5 years ago

Sounds like the APFS container was improperly unmounted last time. Block zero should contain the most recent superblock, but in your case, it doesn't (a more recent superblock was found in the checkpoint descriptor area). I'm not aware if the tools found in this repo allow looking more closely at what's going on, but if you want to get a closer look, I'm developing an inspection/forensics toolset for APFS that should allow you to do that.

sgan81 commented 4 years ago

The superblock at position 0 is not always written, that's why on mount you have to search for the most recent superblock in the checkpoint area. Thus, this message is not really an error.