From 8d00238acad263392a6c3b06dd25a98b0e2e74eb Mon Sep 17 00:00:00 2001
From: tetrahedras <tetrahedrass>
Date: Sun, 5 Jan 2020 11:03:57 +0100
Subject: [PATCH] add file

---
 docs/system/vm-image.md | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 docs/system/vm-image.md

diff --git a/docs/system/vm-image.md b/docs/system/vm-image.md
new file mode 100644
index 0000000..5289135
--- /dev/null
+++ b/docs/system/vm-image.md
@@ -0,0 +1,26 @@
+# Mount a VM's private storage in another VM
+
+Useful for data recovery. As per [this Reddit post](https://www.reddit.com/r/Qubes/comments/chgb3h/is_it_possible_to_access_files_inside_a_vm/f8ur03m/):
+
+```
+[dom0] sudo lvcreate --size 1G --snapshot --name tempsnap /dev/mapper/qubes_dom0-vm--untrusted--private
+
+
+[dom0] readlink /dev/mapper/qubes_dom0-tempsnap
+
+
+[dom0] qvm-start --hddisk dom0:/dev/[from previous command] viewervm
+
+(Attaching to a running viewervm was not possible)
+
+
+[viewervm] mkdir -v /tmp/stuff
+
+
+[viewervm] sudo mount /dev/xvdi /tmp/stuff
+```
+If the original VM has more than one partition, have to pick the right one, such as xvdi1 or xvdi2, etcetera.
+
+Could be unmounted, but no commands or options we tried allowed to detach the viewervm until it was stopped. (qvm-block still seems bugged)
+
+Couldn't lvremove until the machine was restarted.