Get create/birth date from files

$ stat wakeup.txt  #get the inode

$ df -h wakeup.txt #get device name sdxy

$ sudo debugfs -R 'stat <586205>' /dev/sda1

Output:

Inode: 586205   Type: regular    Mode:  0664   Flags: 0x80000
Generation: 1277687204    Version: 0x00000000:00000001
User:  1000   Group:  1000   Size: 31
File ACL: 0    Directory ACL: 0
Links: 1   Blockcount: 8
Fragment:  Address: 0    Number: 0    Size: 0
ctime: 0x615eed87:dba39c9c  -- Thu Oct  7 09:52:23 2021
atime: 0x64231159:334e6b48  -- Tue Mar 28 13:10:01 2023
mtime: 0x615eed87:dba39c9c  -- Thu Oct  7 09:52:23 2021
crtime: 0x615eed87:dba39c9c -- Thu Oct  7 09:52:23 2021
Size of extra inode fields: 32

 

References:

[1] https://www.linuxshelltips.com/find-file-creation-date/

[2] https://www.baeldung.com/linux/get-file-creation-date