Skip to Content

Lion: Diving into your Recovery partition

I spent a good deal of the afternoon diving in where no sane person really wants to spend a lot of time -- in my Lion recovery partition. It's not hard to get there, and it's quite a curious place when you do. [For those commenters wondering about the use of photos rather than screenshots to illustrate this post, it's hard to take screenshots on a system where the boot volume is read-only. –Ed.]

The Recovery volume is a small slice of your hard drive that gets partitioned off during your Lion install; it's not optional, because that's actually where the OS gets installed from. You can view the contents of the Recovery volume by mounting it with the command-line diskutil tool, as John Siracusa points out; the regular Disk Utility app is thoughtful enough to keep it hidden.

To restart in recovery, reboot your computer and hold down Command-R after the chime (you can also use the traditional Option-key holddown, which will show all your bootable volumes including Recovery). Before long, the gray linen background appears and the Mac OS X Utilities window pops up.

The OS X Recovery partition includes a number of built-in utilities to handle system recovery tasks. The Utilities window allows you to

  • Restore from a Time Machine Backup
  • Reinstall OS X
  • Use Disk Utility to repair or erase your hard drives
  • Browse with Safari to get online help.

Choosing the Safari option opens a web browser that immediately takes you to a basic help page. This help page is stored locally on your recovery partition at the following link:

file:///System/Installation/CDIS/Mac%20OS%20X%20Utilities.app/Contents/Resources/English.lproj/RecoveryInformation.html

You are not limited to Apple pages, however. The reason I was able to get that link up there isn't because I wrote it down. I copied it to memory, and pointed Safari to Earthlink's web mail page and simply e-mailed it to myself. I had no problems accessing any of the (admittedly limited) pages I tested.

From there, I explored the Mac OS X Utilities > Utilities menu. Located off the main help screen and in a windows sub-menu, you can manage your firmware password, test and fix connectivity issues or access the Terminal for command-line management.

Of course, I had see what Terminal had to offer. Turns out that your entire file system mounts, if it can. You can navigate to your user folders and access any material located there. I did not try it out myself, but I imagine you could attach a USB drive of some kind and copy files over if you needed to. There is no authentication here, so it's also possibly a bit of a security hole for anyone with physical access to the system. (For those who are concerned about physical access, don't forget about FileVault and/or an Open Firmware password to keep things secure.)

The Recovery boot volume is read-only, and has a very limited set of files and features. You're actually running from the system image stored in BaseSystem.dmg, which gets mounted by the startup executables inside the com.apple.recovery.boot directory.

That doesn't mean you can't run Nethack from your recovery partition. Just make sure your install is set up to run completely on another drive -- which mine is. (Also, don't forget to re-compile it from scratch. The PPC version no longer works on Lion.)

Once you're done exploring, boot your way back to your primary partition and let your Recovery partition rest -- hopefully for a long, long, long time.



Categories

Mac OS X

I spent a good deal of the afternoon diving in where no sane person really wants to spend a lot of time -- in my Lion recovery...
 

Add a Comment

*0 / 3000 Character Maximum Comment Moderation Enabled. Your comment will appear after it is cleared by an editor.

18 Comments

Filter by:
res1233

Open Firmware doesn't exist on Intel Macs. It has been replaced with EFI (Extensible Firmware Interface).

July 24 2011 at 3:09 AM Report abuse rate up rate down Reply
Rook

Has anyone else had not had any luck accessing their recovery partition?

I've tried to boot while holding command-R and, the plain old, holding option to get to it but it just starts up full fledged Lion.

I suspect it has something to do with the fact that I resized my Snow Leopard partition to make a new spot for Lion. I also have a Boot Camp spot as well so maybe, with so much partitioning going on, it couldn't find a spot to place the recovery partition?

I want to tinker where no sane person would want to go...

July 22 2011 at 9:28 AM Report abuse rate up rate down Reply
Billy Knight

Put Lion on top of Snow Leopard on my late early 2010 MacBook Pro and everything is as it should be. Did the same with my early 2010 iMac and everything has gone very very wrong. Have got to know the utilities page very well. I have had to erase my HD over 10 times to get a successful install of Lion. Am now trying to use migration assistant to get my user account off a Time Machine backup but this isn't going too swimmingly either.

Backups people, backups!!

July 22 2011 at 2:24 AM Report abuse +1 rate up rate down Reply
1 reply to Billy Knight's comment
Aman

I have a quick question about the time machine backups. Will Lion recovery mode be able to "restore from time machine backup" that was created using snow leopard?

I've been stung with this in the past, although that was a different scenario (I was trying to restore snow leopard time machine backup using leopard! doh!).

July 22 2011 at 10:44 AM Report abuse rate up rate down Reply
Mxsix

Am I the only person who will only be satisfied by a clean install of Lion? Putting it on top of Snow Leopard just seems way too unnerving for me.

July 21 2011 at 7:59 PM Report abuse rate up rate down Reply
1 reply to Mxsix's comment
Steve Hodges

No, you're not. I downloaded the developer GM and wiped my Snow Leopard MacBook Pro.

It runs beautifully.

July 21 2011 at 10:17 PM Report abuse rate up rate down Reply
Justin

Quick question: Can you use disk utility in this mode to burn a copy of the recovery partition for installation of Lion on another machine?

July 21 2011 at 7:25 PM Report abuse rate up rate down Reply
mattinator

no security? that's what the firmware password utility is for! set a password that would need to be entered in order to boot from any drive other than the 'main'.

July 21 2011 at 6:21 PM Report abuse rate up rate down Reply
Bill K.

One more..

When using WDE, access to locked volumes can be given to any and/or mulitple local users. However, when unlocking from the non-boot volume, only the password is required (no usernames are required). In other words, the volume can be locked with multiple passwords parsed from the local user accounts and any one of them can be used to unlock the entire volume.

July 21 2011 at 5:43 PM Report abuse rate up rate down Reply
1 reply to Bill K.'s comment
Bill K.

Incidentally, the recovery partition is NOT present when using whole disk encryption with File Vault 2. The recovery partition I used was only availble from my emergency boot disk via USB or by using the DVD-ROM installer disc.

July 21 2011 at 5:46 PM Report abuse rate up rate down Reply
1 reply to Bill K.'s comment
CyBeR

It IS present. In fact, it's necessary for Filevault 2 to even work, though admittedly I haven't figured out exactly why yet.

However: I have noticed that with FV2 enabled, the recovery partition doesn't show up in the alt-booter. Or at least, it doesn't here. It does still boot fine when using cmd-R.

July 21 2011 at 8:42 PM Report abuse rate up rate down
Bill K.

A couple of additional notes:

1) Note that the password reset utility is absent. Obviously, having this password utility on the recovery partition makes it trivial for an attacker to gain full access to user files. However, the utility's GUI can be invoked by typing "resetpassword" in the Terminal. Best practice is the make use fo the firmware password or use Whole Disk Encryption option with FV2.

2) When using File Vault 2's Whole Disk Encryption (WDE) option, the recovery partition's Disk Utility (and any other Lion Boot volume) will present you with "UNLOCK" in lieu of "MOUNT" for any encrypted volumes. Oddly, repair appears only available for mounted volumes (otherwise you get an error about the volume not being a "CoreStorage" volume--even if you've already unlocked the disk). This may be a chicken-and-egg problem should the filesystem be damaged enough to cause mounting to fail.

Hope this helps!

July 21 2011 at 5:36 PM Report abuse rate up rate down Reply
Shannon Doherty

Did you take digital camera photos of your display? Why didn't you take screenshots?

July 21 2011 at 5:31 PM Report abuse rate up rate down Reply
4 replies to Shannon Doherty's comment
Buy an ad here

Tweets

© 2012 AOL Inc. All Rights Reserved.