If you are not fussy about the container format you could use the "libewf"
(http://sourceforge.net/projects/libewf/) set of tools to do what you want.
"ewf" refers to the Expert Witness Compression format which is used extensively
in the digital forensic field. It's basically a compressed container with
additional metadata built into the format. There are about 9 compression levels
to choose from!
"sudo apt-get install ewf-tools libewf-dev" should get you a working set of
tools. The two you will need to look at are "ewfacquire" and "ewfmount". There
are man pages for all of the tools.
Stu
________________________________
From: Mark Rogers <m...@quarella.co.uk>
To: peterboro@mailman.lug.org.uk
Sent: Thursday, 17 May 2012, 17:40
Subject: Re: [Peterboro] Mounting disk images
On 17/05/12 14:24, Stuart Bird wrote:
> I can't see any reason that this would not work on a mount command such as:
> #gzip -cd image.dd.gz | mount -t <fs-type> <options> /mnt/image
I'm pretty sure this won't work, and I found this which agrees:
http://www.linuxquestions.org/questions/linux-general-1/mounting-from-stdin-423358
The problem is that mount doesn't read a file that way :-(
I can of-course use the same process to re-image my sd card:
gzip -cd image.dd.gz | sudo dd of=/dev/mysdcard
or (possibly simpler but equivalent anyway):
zcat image.dd.gz | sudo dd of=/dev/mysdcard
(where "mysdcard" would be "sdb" but as that command would wipe whatever drive
was in /dev/sdb I didn't want it written out in a way that was too easy for
someone to copy+paste without understanding the implications....)
My thought was that it's quite possible to mount a compressed filesystem in
some contexts, I just need to find out how to do it!
> To get the volume (you can't mount at disk level, only volume unless you use
> an enhanced loopback device) you may have to pre-calculate your partition
> offsets before you compress then add it into the mount command using the "-o"
> switch. Sleuthkit's "mmls" command should give you the partition offsets.
That should be useful, thanks.
-- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450
Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER
_______________________________________________
Peterboro mailing list
Peterboro@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/peterboro
_______________________________________________
Peterboro mailing list
Peterboro@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/peterboro
