Registry / data / dissect-volume

dissect-volume

library3.18pypypiunverified

A Dissect module implementing a parser for different disk volume and partition systems, e.g. LVM2, GPT, and MBR. Part of the Dissect forensic framework. Current version: 3.18, requires Python >=3.10. Release cadence follows Dissect project updates.

data devops

pip install dissect-volume

github ↗package ↗homepage ↗docs ↗

INSTALL

IMPORT

SIG · DISSECT-VOLUME

dissect-volume

datapythonv3.18

Install

1.8s avg

Import

—

Disk

18MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v3.18 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 20MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 1.8s · import 0.000s · 20MB

18MB installed

● package 18MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

VolumeSystem

✓ from dissect.volume import VolumeSystem

✗ from dissect.volume import VolumeSystem

Basic usage: open a disk image and enumerate volumes.

from dissect.volume import VolumeSystem # Open a disk image file (e.g., raw, qcow2) and parse volume system with open('disk.raw', 'rb') as fh: vs = VolumeSystem(fh) for volume in vs.volumes: print(f'Volume: {volume.name}, type: {volume.type}, size: {volume.size}')

Debug

Known issues

breakingdissect.volume 3.x drops support for Python < 3.10. Also, the internal module paths changed: e.g., `dissect.volume.volume.VolumeSystem` is now `dissect.volume.VolumeSystem`. Old imports will break.

fix

Update imports to the new top-level paths: `from dissect.volume import VolumeSystem`.

affects: >=3.0

deprecatedThe `LVM2` class constructor signature changed in 3.0; the `lvm2` parameter is replaced by `fh` (file-like object).

fix

Use `LVM2(fh=open('file', 'rb'))` instead of old `LVM2('file')`.

affects: >=3.0

gotchaVolumeSystem expects a seekable file-like object. Passing a non-seekable stream (e.g., from a network socket) will fail. Always use a file, BytesIO, or other seekable object.

fix

If you have a bytes object, wrap it in `io.BytesIO(data)` before passing to VolumeSystem.

affects: all

gotchaOn Windows, file paths need to be opened in binary mode: `open('path', 'rb')` else parsing errors may occur.

fix

Always use `'rb'` mode when opening disk images.

affects: all

Upgrade

Version history

3.18latest on PyPI · released Feb 24, 2026

Audit

Dependencies

dissect.cstructrequiredUsed for parsing binary structures

dissect.cobaltrequiredProvides logging and utility functions

Agent activity

8 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/fox-it/dissect.volume ↗

packagehttps://pypi.org/project/dissect-volume/ ↗

homepagehttps://dissect.tools ↗

docshttps://docs.dissect.tools/en/latest/projects/dissect.volume ↗