Mounting

Joachim Metz edited this page Aug 28, 2018 · 4 revisions

Introduction

To mount an EWF image you can use ewfmount.

There is support for the following back-ends:

  • Dokan library
  • fuse
  • OSXFuse

To build ewfmount see Building.

Mounting

To mount an EWF image:

ewfmount image.E01 /mnt/fuse

This will expose a device file that provides the RAW storage media data contained in the EWF image.

/mnt/fuse/ewf1

If you get the error:

No sub system to mount EWF.

That means fuse was not detected when building the ewftools, check if you have fuse-dev installed and if ./configure is able to detect it. The last part of the ./configure output shows you this in an overview.

Why is /mnt/fuse not accessible as root

By default fuse prevents root access to the mount point when an EWF image is mounted. To enable this functionality first check the fuse documentation.

Make sure the fuse configuration file:

/etc/fuse.conf

Contains:

user_allow_other

Pass "allow_root" to the fuse sub system using the ewfmount -X option:

ewfmount -X allow_root image.E01 /mnt/fuse

Windows

To mount an EWF image on Windows:

ewfmount image.E01 x:

At the moment the ewfmount keeps a hold on the console.

This will expose a device file that provides the RAW storage media data contained in the EWF image.

X:\EWF1

Unmounting

You can unmount /mnt/fuse using umount:

umount /mnt/fuse

Or fusermount:

fusermount -u /mnt/fuse

Windows

At the moment terminate the process running in the console.

Troubleshooting

First of all make sure to check the output of configure. If you're seeing something like the following output configure was unable to detect an usable fuse.

Building:
   ...
   FUSE support:                                    no

On Mac OS X:

  • make sure that you only have OSXFuse installed and not another variant, like MacFuse, besides it.
  • try adding the C pre processor flags that set the fuse API version, e.g.
CPPFLAGS=-DFUSE_USE_VERSION=26 ./configure
  • if all else fails; file a support issue and attach config.log

On Ubuntu:

fusermount – failed to open /etc/fuse.conf – Permission denied

Make sure you're part of the group fuse:

sudo addgroup <username> fuse

If fusermount keeps complaining it cannot open fuse.conf:

sudo chmod o+r /etc/fuse.conf
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.
Press h to open a hovercard with more details.