Linux software RAID recovery

An inactive mdadm array needs member-state analysis before any forced assembly or rebuild.

Linux software RAID records array identity and member history in md metadata. After a power loss, disk dropout, migration, or controller event, an array may appear inactive, degraded, or unable to assemble even though useful data remains on its members.

Understand the symptom

The newest-looking member is not automatically the correct source.

WHY

What is happening

mdadm compares array UUIDs, roles, metadata versions, event counters, and device states when assembling an array. A stale member may contain older but internally consistent data, while a recent member may have participated in an incomplete reshape or rebuild. Correct recovery depends on the failure timeline, RAID level, chunk layout, bitmap, and filesystem above the array.

What you may see

Symptoms that change the recovery path.

01

Array appears inactive

The md device exists but is not running or does not expose the expected filesystem.

02

Not enough devices to start

The active member count is below the level required for normal assembly.

03

Members show different event counts

Some disks stopped receiving writes earlier than others or were attached during different states.

04

Reshape or recovery was interrupted

Layout or parity may be partially transformed across the member set.

Protect the source

Actions that can make the situation worse.

01

--create writes fresh metadata

Recreating an array can replace roles, UUIDs, offsets, and other assembly evidence.

02

--force can choose stale data

Starting with the wrong members may write parity or filesystem changes over the best source.

03

Automatic resync changes every member

A resync is not a data-recovery scan; it can propagate an incorrect state across disks.

Do this now

Safe steps before evaluation.

01

Stop md services and writes

Prevent automatic assembly, mounts, LVM activation, containers, and applications from changing the set.

02

Collect metadata read-only

Record mdadm examine output, UUIDs, roles, event counts, offsets, chunk size, bitmap, and array state.

03

Label physical order

Keep bay positions, serial numbers, controller connections, removed disks, and replacements documented.

04

Preserve reshape context

Save mdadm.conf, logs, kernel messages, backup files, and the exact commands already attempted.

NEPFOSYS process

How a data-first evaluation proceeds.

01

Member and timeline review

NEPFOSYS correlates superblocks, counters, RAID geometry, disk health, and the incident sequence.

02

Independent acquisition

Readable members are imaged before any array-level assembly or filesystem repair.

03

Read-only virtual assembly

Candidate member sets are tested away from the originals and validated against priority data.

A clear next step

Preserve the original device before another repair or recovery attempt.

Start a case with the exact symptoms, incident timeline, prior attempts, encryption details, and the files that matter most. NEPFOSYS will route the case to the appropriate DFW intake or nationwide mail-in path.

Start with a case review

Questions, answered

What customers ask before starting.

Can I run mdadm --assemble --force?

Only after the member history is understood and protected copies exist. Force assembly can activate a stale or incomplete set and permit writes.

Should I replace a missing disk and rebuild?

Not when the data is the priority and member state is uncertain. A rebuild writes broadly and may use the wrong source.

What information matters most?

Array UUID, RAID level, member roles, event counters, metadata version, chunk size, offsets, bitmap state, and the failure timeline all influence reconstruction.

DFW local · Nationwide mail-in

Protect the device. Start with the facts.

Start my recovery case