Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
From:   Chester Lin <clin@suse.com>
To:     "rjw@rjwysocki.net" <rjw@rjwysocki.net>,
        "lenb@kernel.org" <lenb@kernel.org>,
        "gregkh@linuxfoundation.org" <gregkh@linuxfoundation.org>,
        "robert.moore@intel.com" <robert.moore@intel.com>,
        "erik.schmauss@intel.com" <erik.schmauss@intel.com>
CC:     "linux-acpi@vger.kernel.org" <linux-acpi@vger.kernel.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        Joey Lee <JLee@suse.com>,
        "mhocko@kernel.org" <mhocko@kernel.org>,
        Chester Lin <clin@suse.com>
Subject: [RFC PATCH v2 0/3] ACPI: New eject flow to remove devices cautiously
Thread-Topic: [RFC PATCH v2 0/3] ACPI: New eject flow to remove devices
 cautiously
Thread-Index: AQHVwe/eOeHpkaonVUCr6B3rboJ5kA==
Date:   Fri, 3 Jan 2020 04:40:05 +0000
Message-ID: <20200103043926.31507-1-clin@suse.com>
Accept-Language: zh-TW, en-US
Content-Language: en-US
x-ms-exchange-messagesentrepresentingtype: 1
x-mailer: git-send-email 2.24.0
x-originating-ip: [60.251.47.115]
x-ms-publictraffictype: Email
x-ms-office365-filtering-correlation-id: 99d2f4d8-26f4-41a8-e323-08d7900700fc
x-ms-traffictypediagnostic: SN1PR18MB2205:
x-ms-exchange-transport-forked: True
x-microsoft-antispam-prvs: <SN1PR18MB22052B496FDBDA55E5EE380BAD230@SN1PR18MB2205.namprd18.prod.outlook.com>
x-ms-oob-tlc-oobclassifiers: OLM:10000;
x-forefront-prvs: 0271483E06
x-forefront-antispam-report: SFV:NSPM;SFS:(10019020)(4636009)(39860400002)(366004)(396003)(346002)(136003)(376002)(199004)(189003)(43544003)(66556008)(66446008)(16526019)(64756008)(2616005)(8676002)(956004)(186003)(52116002)(66476007)(55236004)(36756003)(8936002)(478600001)(54906003)(81166006)(110136005)(6486002)(71200400001)(6506007)(69590400006)(107886003)(2906002)(1076003)(4326008)(5660300002)(66946007)(6512007)(26005)(316002)(86362001)(81156014);DIR:OUT;SFP:1102;SCL:1;SRVR:SN1PR18MB2205;H:SN1PR18MB2126.namprd18.prod.outlook.com;FPR:;SPF:None;LANG:en;PTR:InfoNoRecords;A:1;MX:1;
received-spf: None (protection.outlook.com: suse.com does not designate
 permitted sender hosts)
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: 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
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8BIT
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 99d2f4d8-26f4-41a8-e323-08d7900700fc
X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Jan 2020 04:40:05.4097
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 856b813c-16e5-49a5-85ec-6f081e13b527
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: Lv96x31+hDVpk3mhWjBw6nJ534zV+9nGHV6XXkRcxEE3bHP0WHYBwiJzbqVYMt5s
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR18MB2205
X-OriginatorOrg: suse.com
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Currently there are two ways to handle ACPI device ejection. When an eject
event happens on a container, the kernel just sends KOBJ_CHANGE to
userland and userland should handle offline operation. For other device
types, acpi_scan_try_to_offline() is called and it tries to put target
device(s) offline and then removes all nodes once they are all offline.

However we found that sometimes applications could intensively access
resources on ejectable devices therefore they could have risk if ejection
suddenly happens and removes devices without any notification. In stead
of executing the offline callbakcs directly, we want to introduce a new
approach, which sends change events to notify all target nodes beforehand
and hands over offline handling to userland so that userland can have a
chance to schedule an offline task based on current workload. The online
function to recover from failure is also changed, it follows the same
approach to send change events rather than putting devices online directly
, which means userland will also need to take care of online handling.

To ensure that eject function can work properly since normal users might
not have their own offline/online handling, we will submit a generic udev
rule to systemd upstream as default in order to deal with change events
and take [offline/online] action accordingly. But the Hot-Removing part
still remains so the hotplug function can run to it once target nodes are
all offline.

To easily monitor eject status and start over an eject process, there's a
status trace mechanism in this eject flow, which helps to count current
online devices under the ejectable target, and it can reschedule an eject
event when all nodes within the device tree have been put offline.

v2:
- device_sysfs: Add descriptions in /Document/ABI/testing/sysfs-bus-acpi
- device_sysfs: Replace the declartion with DEVICE_ATTR_RW and add cancel
  option in eject_store.
- scan: Add a retry mechanism when userspace fail to put device offline.
- scan: Add ready-to-remove state.

Chester Lin (3):
  ACPI / hotplug: Send change events for offline/online requests when
    eject is triggered
  ACPI / hotplug: Eject status trace and auto-remove approach
  ACPI / device_sysfs: Add eject_show and add a cancel option in
    eject_store

 Documentation/ABI/testing/sysfs-bus-acpi |   9 +-
 drivers/acpi/container.c                 |   2 +-
 drivers/acpi/device_sysfs.c              |  94 ++++++-
 drivers/acpi/glue.c                      | 146 +++++++++++
 drivers/acpi/internal.h                  |  34 ++-
 drivers/acpi/scan.c                      | 318 +++++++++++++++++------
 drivers/base/core.c                      |   4 +
 include/acpi/acpi_bus.h                  |   3 +-
 include/linux/acpi.h                     |   6 +
 9 files changed, 523 insertions(+), 93 deletions(-)

-- 
2.20.1