Yosemite Upgrade broke bootcamp partition

Question

idrivevideo Author

Level 1

0 points

Yosemite Upgrade broke bootcamp partition

Guidos-MacBook-Air:~ Guido$ diskutil list

/dev/disk0

#: TYPE NAME SIZE IDENTIFIER

0: GUID_partition_scheme *121.3 GB disk0

1: EFI EFI 209.7 MB disk0s1

2: Apple_CoreStorage 85.0 GB disk0s2

3: Apple_Boot Recovery HD 650.0 MB disk0s3

4: Microsoft Basic Data 20.1 GB disk0s4

/dev/disk1

#: TYPE NAME SIZE IDENTIFIER

0: Apple_HFS Macintosh HD *84.6 GB disk1

Logical Volume on disk0s2

948AB503-78BD-4568-A9A9-3010F2854D67

Unlocked Encrypted

Guidos-MacBook-Air:~ Guido$ diskutil cs list

CoreStorage logical volume groups (1 found)

|

+-- Logical Volume Group 25B9905F-C591-422E-93DE-4176AFF7A4E4

=========================================================

Name: Macintosh HD

Status: Online

Size: 84999999488 B (85.0 GB)

Free Space: 6623232 B (6.6 MB)

|

+-< Physical Volume 9C1C1B3A-BE9F-49F5-A18C-223152F45FE8

| ----------------------------------------------------

| Index: 0

| Disk: disk0s2

| Status: Online

| Size: 84999999488 B (85.0 GB)

|

+-> Logical Volume Family D0A03664-59A9-4522-AA5D-0FF8BB3B3E07

----------------------------------------------------------

Encryption Status: Unlocked

Encryption Type: AES-XTS

Conversion Status: Complete

Conversion Direction: -none-

Has Encrypted Extents: Yes

Fully Secure: Yes

Passphrase Required: Yes

|

+-> Logical Volume 948AB503-78BD-4568-A9A9-3010F2854D67

---------------------------------------------------

Disk: disk1

Status: Online

Size (Total): 84641054720 B (84.6 GB)

Conversion Progress: -none-

Revertible: Yes (unlock and decryption required)

LV Name: Macintosh HD

Volume Name: Macintosh HD

Content Hint: Apple_HFS

Guidos-MacBook-Air:~ Guido$ sudo gpt -vv -r show /dev/disk0

WARNING: Improper use of the sudo command could lead to data loss

or the deletion of important system files. Please double-check your

typing when using sudo. Type "man sudo" for more information.

To proceed, enter your password, or type Ctrl-C to abort.

Password:

gpt show: /dev/disk0: mediasize=121332826112; sectorsize=512; blocks=236978176

gpt show: /dev/disk0: Suspicious MBR at sector 0

gpt show: /dev/disk0: Pri GPT at sector 1

gpt show: /dev/disk0: Sec GPT at sector 236978175

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 166015624 2 GPT part - 53746F72-6167-11AA-AA11-00306543ECAC

166425264 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

167694800 29959728

197654528 39321600 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

236976128 2015

236978143 32 Sec GPT table

236978175 1 Sec GPT header

Guidos-MacBook-Air:~ Guido$ sudo fdisk /dev/disk0

Disk: /dev/disk0 geometry: 14751/255/63 [236978176 sectors]

Signature: 0xAA55

Starting Ending

#: id cyl hd sec - cyl hd sec [ start - size]

------------------------------------------------------------------------

1: EE 1023 254 63 - 1023 254 63 [ 1 - 409639] <Unknown ID>

2: AC 1023 254 63 - 1023 254 63 [ 409640 - 166015624] <Unknown ID>

3: AB 1023 254 63 - 1023 254 63 [ 166425264 - 1269536] Darwin Boot

4: 0C 1023 254 63 - 1023 254 63 [ 197654528 - 39321600] Win95 FAT32L

MacBook Air, OS X Yosemite (10.10.1)

Posted on May 3, 2015 3:15 PM

Reply

Answer 1

Loner T

Level 9

59,471 points

May 3, 2015 4:03 PM in response to idrivevideo

Can you look at Bootcamp partition missing after yosemite installation as references, and download Testdisk and GPT Fdisk and start a scan with Testdisk?

The Testdisk initial UI can be seen https://imgur.com/a/PjmnK.

Reply

Answer 2

idrivevideo Author

Level 1

0 points

May 4, 2015 1:56 PM in response to Loner T

Thank you for following up on my post Loner T!

I run Testdisk, I arrived up to the point below after "Analyse", but I do not know how to continue further:

TestDisk 7.0, Data Recovery Utility, April 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 121 GB / 113 GiB - 236978176 sectors (RO)

Current partition structure:

Partition Start End Size in sectors

1 P EFI System 40 409639 409600 [EFI System Partitio

2 P Unknown 409640 166425263 166015624 [Macintosh HD]

3 P Mac Boot 166425264 167694799 1269536 [Recovery HD]

No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker

4 P MS Data 197654528 236976127 39321600 [BOOTCAMP]

P=Primary D=Deleted

>[Quick Search] [ Backup ]

Try to locate partition

Reply

Answer 3

Loner T

Level 9

59,471 points

May 4, 2015 2:24 PM in response to idrivevideo

Select quick search. Did you look at the imgur.com link I posted?

Reply

Answer 4

idrivevideo Author

Level 1

0 points

May 4, 2015 2:41 PM in response to Loner T

Yes I checked but I think right that step was missing, well at least I could not see in the webpage you sent the screenshot posted you previously.

After Quick search and selecting Mac HFS partition, I get the following:

TestDisk 7.0, Data Recovery Utility, April 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

Disk /dev/rdisk0 - 121 GB / 113 GiB - 236978176 sectors (RO)

Partition Start End Size in sectors

P EFI System 40 409639 409600 [EFI]

D Mac HFS 409640 165700135 165290496

D MS Data 98416648 167696384 69279737

D Mac HFS 166425264 167694799 1269536

D MS Data 167696384 236976120 69279737

>D MS Data 197654528 236976127 39321600

D Mac HFS 235708600 236978135 1269536

Structure: Ok. Use Up/Down Arrow keys to select partition.

Use Left/Right Arrow keys to CHANGE partition characteristics:

P=Primary D=Deleted

Keys A: add partition, L: load backup, T: change type, P: list files,

Enter: to continue

NTFS found using backup sector, blocksize=4096, 20 GB / 18 GiB

Reply

Answer 5

Loner T

Level 9

59,471 points

May 4, 2015 5:18 PM in response to idrivevideo

Can you scroll up to

D MS Data 167696384 236976120 69279737

and use 'P' to list files?

It should look similar to the following. You should check other MS Data entries using 'P'. Do not use left/right cursor keys on this screen.

Reply

Answer 6

idrivevideo Author

Level 1

0 points

May 5, 2015 12:56 AM in response to Loner T

here the screenshots of file listed for all MS DATA entries. Actually for the other two MS DATA entries I do not get anything : can't open filesystem seems damaged, see below.

MS Data 167696384 236976120 69279737

Directory /

>dr-xr-xr-x 0 0 0 24-Nov-2014 08:53 .

dr-xr-xr-x 0 0 0 24-Nov-2014 08:53 ..

dr-xr-xr-x 0 0 0 25-Sep-2014 22:25 $Recycle.Bin

dr-xr-xr-x 0 0 0 26-Sep-2014 08:19 Boot

dr-xr-xr-x 0 0 0 17-Nov-2014 21:01 Intel

dr-xr-xr-x 0 0 0 14-Jul-2009 05:20 PerfLogs

dr-xr-xr-x 0 0 0 12-Apr-2011 10:28 Program Files

dr-xr-xr-x 0 0 0 17-Nov-2014 21:01 Program Files (x86)

dr-xr-xr-x 0 0 0 24-Nov-2014 07:48 ProgramData

dr-xr-xr-x 0 0 0 25-Sep-2014 22:25 Recovery

dr-xr-xr-x 0 0 0 24-Nov-2014 09:15 System Volume Information

dr-xr-xr-x 0 0 0 25-Sep-2014 22:25 Users

dr-xr-xr-x 0 0 0 27-Sep-2014 00:57 Windows

-r--r--r-- 0 0 8192 26-Sep-2014 08:19 BOOTSECT.BAK

-r--r--r-- 0 0 383786 21-Nov-2010 04:23 bootmgr

-r--r--r-- 0 0 3151024128 20-Dec-2014 21:51 hiberfil.sys

-r--r--r-- 0 0 4201365504 24-Nov-2014 08:59 pagefile.sys

MS Data 98416648 167696384 69279737

Can't open filesystem. Filesystem seems damaged.

MS Data 197654528 236976127 39321600

Can't open filesystem. Filesystem seems damaged.

Reply

Answer 7

Loner T

Level 9

59,471 points

May 5, 2015 4:59 AM in response to idrivevideo

Here is a table with your values

GPT 3 Start

GPT 3 Size

GPT 3 End

NTFS Start

Sector Offset

NTFS Size

NTFS End

Sector Offset (MB)

166425264

1269536

167694800

167696384

1584

69279737

236976120

1

Leave your Testdisk display and start a new Terminal Window. You need to use the following steps.

If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8.

Rebuild GPT4 using start/end offsets

Sudo gdisk /dev/rdisk0
P (print the full list of parts)
D (delete)
4 (part 4)
N (new part)
4 (part 4)
167696384 - Start offset in bytes (start point for Bootcamp part)
+69279737 - Size offset (as opposed to End offset)
0700 (Windows part type)
P (print list of all parts just to see what changes will be made)
W (Write the new GPT)
Y (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s4.

Rebuild MBR to match the new GPT information thus resetting the Hybrid MBR. Use defaults for other questions (like partition codes). The only values that need modifications are the Boot flags and step 10. Accept all other defaults that Gdisk offers.

Sudo gdisk /dev/disk0
P (Print list of parts)
R (Recover)
H (chooses Hybrid)
O (print current Hybrid MBR)
Partitions numbers to be hybridized: 2 3 4
Y (Good for GRUB question)
N (part 2 boot flag)
N (part 3 boot flag)
Y (part 4 boot flag make NTFS bootable partition)
O (print current Hybrid MBR)
W (Write the new MBR)
Y (Yes! write the new MBR)
Reboot

Here is sample Q&A for this section. Please notice the Press Enter/Return.

Place EFI GPT (0xEE) partition first in MBR (good for GRUB)? (Y/N): Y

Creating entry for GPT partition #2 (MBR partition #2)

Enter an MBR hex code (default AF): Press Enter/Return

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #3 (MBR partition #3)

Enter an MBR hex code (default AB): Press Enter/Return

Set the bootable flag? (Y/N): N

Creating entry for GPT partition #4 (MBR partition #4)

Enter an MBR hex code (default 07): Press Enter/Return

Set the bootable flag? (Y/N): Y

Test 1 - Does Bootcamp Volume show up in Finder?

Test 2 - Can you see files in Bootcamp Volume?

Test 3 - Can you select Bootcamp in System Preferences -> Startup Disk?

Test 4 - If Test 3 is successful, select Bootcamp and Click Restart.

Reply

Answer 8

idrivevideo Author

Level 1

0 points

May 6, 2015 12:20 AM in response to Loner T

I do not exactly what I did but your suggestions, Loner T, solved my problem!!

I got back the partition with Windows installed!

THANK YOU VERY MUCH FOR THE HELP!

Reply

Answer 9

Loner T

Level 9

59,471 points

May 6, 2015 3:20 AM in response to idrivevideo

Very 😀 to see it working.

Please backup your OS X and Windows installations to separate external disks, and use these for future recovery as a base line.

Reply

Answer 10

idrivevideo Author

Level 1

0 points

May 12, 2015 2:33 PM in response to Loner T

Everything worked fine until today, I could boot into Windows 7 and Mac at start up with the option key. Now when I boot I do not see the Mac volume anymore but only the Windows volume. When I start the MacBook in removers mode the "disk0s2" partition loods unmounted grey and cannot be repaired.

Reply

Answer 11

Loner T

Level 9

59,471 points

May 12, 2015 2:36 PM in response to idrivevideo

Have you applied in OSX Updates? Post the output of the four commands.

Reply

Answer 12

idrivevideo Author

Level 1

0 points

May 12, 2015 3:18 PM in response to idrivevideo

Yes I guess I have applied some updates but now I am not sure which ones. Which outputs? I cannot acces the MAc volume. I can only access it with cmd+r in recovery mode ( and not in removers mode as I wrote in my previous post).

Reply

Answer 13

Loner T

Level 9

59,471 points

May 12, 2015 3:37 PM in response to idrivevideo

Can you post the output of the following commands from Recovery console?

diskutil list

diskutil cs list

gpt -vv -r show /dev/disk0

You may need to take photographs to post them on this discussion. You can use Safari, but you will have to switch between Terminal and Safari.

Reply

Answer 14

idrivevideo Author

Level 1

0 points

May 12, 2015 4:24 PM in response to Loner T

Reply

Answer 15

Loner T

Level 9

59,471 points

May 12, 2015 5:04 PM in response to idrivevideo

Your GPT is corrupt for some strange reason. This is from the first page of this thread. You now have a JHFS+ volume, which is not CS volume any more.

gpt show: /dev/disk0: Sec GPT at sector 236978175

start size index contents

0 1 MBR

1 1 Pri GPT header

2 32 Pri GPT table

34 6

40 409600 1 GPT part - C12A7328-F81F-11D2-BA4B-00A0C93EC93B

409640 166015624 2 GPT part - 53746F72-6167-11AA-AA11-00306543ECAC

166425264 1269536 3 GPT part - 426F6F74-0000-11AA-AA11-00306543ECAC

167694800 29959728

197654528 39321600 4 GPT part - EBD0A0A2-B9E5-4433-87C0-68B6B72699C7

236976128 2015

236978143 32 Sec GPT table

236978175 1 Sec GPT header

This does not match what you currently have as you can see and compare.

In Recovery console, are you allowed to repair the disk? Please back up Windows first to an external disk.

Reply