[PATCH v3 0/3] Automatic NFSv4 state revocation on filesystem unmount

[Chuck Lever <cel@kernel.org>]

From: Chuck Lever <chuck.lever@oracle.com>

When an NFS server exports a filesystem and clients hold NFSv4 state
(opens, locks, delegations), unmounting the underlying filesystem
fails with EBUSY. The /proc/fs/nfsd/unlock_fs interface exists for
administrators to manually revoke state before retrying the unmount,
but this approach has significant operational drawbacks.

Manual intervention breaks automation workflows. Containerized NFS
servers, orchestration systems, and unattended maintenance scripts
cannot reliably unmount exported filesystems without implementing
custom logic to detect the failure and invoke unlock_fs. System
administrators managing many exports face tedious, error-prone
procedures when decommissioning storage.

This series enables the NFS server to detect filesystem unmount
events and automatically revoke associated state. The mechanism
registers with a new SRCU notifier chain in VFS that fires during
mount teardown, after processing stuck children but before
fsnotify_vfsmount_delete(), while SB_ACTIVE is still set. When a
filesystem is unmounted, all NFSv4 opens, locks, and delegations
referencing it are revoked, async COPY operations are cancelled
with NFS4ERR_ADMIN_REVOKED sent to clients, NLM locks are released,
and cached file handles are closed.

With automatic revocation, unmount operations complete without
administrator intervention once the brief state cleanup finishes.
Clients receive immediate notification of state loss through
standard NFSv4 error codes, allowing applications to handle the
situation appropriately rather than encountering silent failures.

Based on v7.0-rc1

---

Changes since v2:
- Replace fs_pin with an SRCU umount notifier chain in VFS
- Merge the pending COPY cancellation patch
- Replace xa_cmpxchg() with xa_insert()
- Use cancel_work_sync() instead of flush_workqueue()
- Remove rcu_barrier()
- Correct misleading claims in kdoc comments and commit messages

Changes since v1:
- Explain why drop_client() is being renamed
- Finish implementing revocation on umount
- Rename pin_insert_group
- Clarified log output and code comments
- Hold nfsd_mutex while closing nfsd_files

Chuck Lever (3):
  fs: add umount notifier chain for filesystem unmount notification
  nfsd: revoke NFSv4 state when filesystem is unmounted
  nfsd: close cached files on filesystem unmount

 fs/namespace.c        |  69 ++++++++++
 fs/nfsd/Makefile      |   2 +-
 fs/nfsd/filecache.c   |  45 +++++++
 fs/nfsd/filecache.h   |   1 +
 fs/nfsd/netns.h       |   5 +
 fs/nfsd/nfs4state.c   |  29 +++++
 fs/nfsd/nfsctl.c      |  10 +-
 fs/nfsd/sb_watch.c    | 283 ++++++++++++++++++++++++++++++++++++++++++
 fs/nfsd/state.h       |   7 ++
 include/linux/mount.h |   4 +
 10 files changed, 452 insertions(+), 3 deletions(-)
 create mode 100644 fs/nfsd/sb_watch.c

-- 
2.53.0