|
1 | | -# What is safetensors ? |
| 1 | +# Load safetensors |
2 | 2 |
|
3 | | -[safetensors](https://github.com/huggingface/safetensors) is a different format |
4 | | -from the classic `.bin` which uses Pytorch which uses pickle. It contains the |
5 | | -exact same data, which is just the model weights (or tensors). |
| 3 | +[safetensors](https://github.com/huggingface/safetensors) is a safe and fast file format for storing and loading tensors. Typically, PyTorch model weights are saved or *pickled* into a `.bin` file with Python's [`pickle`](https://docs.python.org/3/library/pickle.html) utility. However, `pickle` is not secure and pickled files may contain malicious code that can be executed. safetensors is a secure alternative to `pickle`, making it ideal for sharing model weights. |
6 | 4 |
|
7 | | -Pickle is notoriously unsafe which allow any malicious file to execute arbitrary code. |
8 | | -The hub itself tries to prevent issues from it, but it's not a silver bullet. |
| 5 | +This guide will show you how you load `.safetensor` files, and how to convert Stable Diffusion model weights stored in other formats to `.safetensor`. Before you start, make sure you have safetensors installed: |
9 | 6 |
|
10 | | -`safetensors` first and foremost goal is to make loading machine learning models *safe* |
11 | | -in the sense that no takeover of your computer can be done. |
12 | | - |
13 | | -Hence the name. |
14 | | - |
15 | | -# Why use safetensors ? |
16 | | - |
17 | | -**Safety** can be one reason, if you're attempting to use a not well known model and |
18 | | -you're not sure about the source of the file. |
19 | | - |
20 | | -And a secondary reason, is **the speed of loading**. Safetensors can load models much faster |
21 | | -than regular pickle files. If you spend a lot of times switching models, this can be |
22 | | -a huge timesave. |
23 | | - |
24 | | -Numbers taken AMD EPYC 7742 64-Core Processor |
| 7 | +```bash |
| 8 | +!pip install safetensors |
25 | 9 | ``` |
26 | | -from diffusers import StableDiffusionPipeline |
27 | 10 |
|
28 | | -pipe = StableDiffusionPipeline.from_pretrained("stabilityai/stable-diffusion-2-1") |
| 11 | +If you look at the [`runwayml/stable-diffusion-v1-5`](https://huggingface.co/runwayml/stable-diffusion-v1-5/tree/main) repository, you'll see weights inside the `text_encoder`, `unet` and `vae` subfolders are stored in the `.safetensors` format. By default, 🤗 Diffusers automatically loads these `.safetensors` files from their subfolders if they're available in the model repository. |
29 | 12 |
|
30 | | -# Loaded in safetensors 0:00:02.033658 |
31 | | -# Loaded in Pytorch 0:00:02.663379 |
32 | | -``` |
| 13 | +For more explicit control, you can optionally set `use_safetensors=True` (if `safetensors` is not installed, you'll get an error message asking you to install it): |
33 | 14 |
|
34 | | -This is for the entire loading time, the actual weights loading time to load 500MB: |
| 15 | +```py |
| 16 | +from diffusers import DiffusionPipeline |
35 | 17 |
|
36 | | -``` |
37 | | -Safetensors: 3.4873ms |
38 | | -PyTorch: 172.7537ms |
| 18 | +pipeline = DiffusionPipeline.from_pretrained("runwayml/stable-diffusion-v1-5", use_safetensors=True) |
39 | 19 | ``` |
40 | 20 |
|
41 | | -Performance in general is a tricky business, and there are a few things to understand: |
| 21 | +However, model weights are not necessarily stored in separate subfolders like in the example above. Sometimes, all the weights are stored in a single `.safetensors` file. In this case, if the weights are Stable Diffusion weights, you can load the file directly with the [`~diffusers.loaders.FromCkptMixin.from_ckpt`] method: |
42 | 22 |
|
43 | | -- If you're using the model for the first time from the hub, you will have to download the weights. |
44 | | - That's extremely likely to be much slower than any loading method, therefore you will not see any difference |
45 | | -- If you're loading the model for the first time (let's say after a reboot) then your machine will have to |
46 | | - actually read the disk. It's likely to be as slow in both cases. Again the speed difference may not be as visible (this depends on hardware and the actual model). |
47 | | -- The best performance benefit is when the model was already loaded previously on your computer and you're switching from one model to another. Your OS, is trying really hard not to read from disk, since this is slow, so it will keep the files around in RAM, making it loading again much faster. Since safetensors is doing zero-copy of the tensors, reloading will be faster than pytorch since it has at least once extra copy to do. |
| 23 | +```py |
| 24 | +from diffusers import StableDiffusionPipeline |
48 | 25 |
|
49 | | -# How to use safetensors ? |
| 26 | +pipeline = StableDiffusionPipeline.from_ckpt( |
| 27 | + "https://huggingface.co/WarriorMama777/OrangeMixs/blob/main/Models/AbyssOrangeMix/AbyssOrangeMix.safetensors" |
| 28 | +) |
| 29 | +``` |
50 | 30 |
|
51 | | -If you have `safetensors` installed, and all the weights are available in `safetensors` format, \ |
52 | | -then by default it will use that instead of the pytorch weights. |
| 31 | +## Convert to safetensors |
53 | 32 |
|
54 | | -If you are really paranoid about this, the ultimate weapon would be disabling `torch.load`: |
55 | | -```python |
56 | | -import torch |
| 33 | +Not all weights on the Hub are available in the `.safetensors` format, and you may encounter weights stored as `.bin`. In this case, use the Space below to convert the weights to `.safetensors`. The Convert Space downloads the pickled weights, converts them, and opens a Pull Request to upload the newly converted `.safetensors` file on the Hub. This way, if there is any malicious code contained in the pickled files, they're uploaded to the Hub - which has a [security scanner](https://huggingface.co/docs/hub/security-pickle#hubs-security-scanner) to detect unsafe files and suspicious pickle imports - instead of your computer. |
57 | 34 |
|
| 35 | +<iframe |
| 36 | + src="https://safetensors-convert.hf.space" |
| 37 | + frameborder="0" |
| 38 | + width="850" |
| 39 | + height="450" |
| 40 | +></iframe> |
58 | 41 |
|
59 | | -def _raise(): |
60 | | - raise RuntimeError("I don't want to use pickle") |
| 42 | +You can use the model with the new `.safetensors` weights by specifying the reference to the Pull Request in the `revision` parameter (you can also test it in this [Check PR](https://huggingface.co/spaces/diffusers/check_pr) Space on the Hub), for example `refs/pr/22`: |
61 | 43 |
|
| 44 | +```py |
| 45 | +from diffusers import DiffusionPipeline |
62 | 46 |
|
63 | | -torch.load = lambda *args, **kwargs: _raise() |
| 47 | +pipeline = DiffusionPipeline.from_pretrained("stabilityai/stable-diffusion-2-1", revision="refs/pr/22") |
64 | 48 | ``` |
65 | 49 |
|
66 | | -# I want to use model X but it doesn't have safetensors weights. |
| 50 | +## Why use safetensors? |
67 | 51 |
|
68 | | -Just go to this [space](https://huggingface.co/spaces/diffusers/convert). |
69 | | -This will create a new PR with the weights, let's say `refs/pr/22`. |
| 52 | +There are several reasons for using safetensors: |
70 | 53 |
|
71 | | -This space will download the pickled version, convert it, and upload it on the hub as a PR. |
72 | | -If anything bad is contained in the file, it's Huggingface hub that will get issues, not your own computer. |
73 | | -And we're equipped with dealing with it. |
| 54 | +- Safety is the number one reason for using safetensors. As open-source and model distribution grows, it is important to be able to trust the model weights you downloaded don't contain any malicious code. The current size of the header in safetensors prevents parsing extremely large JSON files. |
| 55 | +- Loading speed between switching models is another reason to use safetensors, which performs zero-copy of the tensors. It is especially fast compared to `pickle` if you're loading the weights to CPU (the default case), and just as fast if not faster when directly loading the weights to GPU. You'll only notice the performance difference if the model is already loaded, and not if you're downloading the weights or loading the model for the first time. |
74 | 56 |
|
75 | | -Then in order to use the model, even before the branch gets accepted by the original author you can do: |
| 57 | + The time it takes to load the entire pipeline: |
76 | 58 |
|
77 | | -```python |
78 | | -from diffusers import DiffusionPipeline |
| 59 | + ```py |
| 60 | + from diffusers import StableDiffusionPipeline |
79 | 61 |
|
80 | | -pipe = DiffusionPipeline.from_pretrained("stabilityai/stable-diffusion-2-1", revision="refs/pr/22") |
81 | | -``` |
| 62 | + pipeline = StableDiffusionPipeline.from_pretrained("stabilityai/stable-diffusion-2-1") |
| 63 | + "Loaded in safetensors 0:00:02.033658" |
| 64 | + "Loaded in PyTorch 0:00:02.663379" |
| 65 | + ``` |
82 | 66 |
|
83 | | -or you can test it directly online with this [space](https://huggingface.co/spaces/diffusers/check_pr). |
| 67 | + But the actual time it takes to load 500MB of the model weights is only: |
84 | 68 |
|
85 | | -And that's it ! |
| 69 | + ```bash |
| 70 | + safetensors: 3.4873ms |
| 71 | + PyTorch: 172.7537ms |
| 72 | + ``` |
86 | 73 |
|
87 | | -Anything unclear, concerns, or found a bugs ? [Open an issue](https://github.com/huggingface/diffusers/issues/new/choose) |
| 74 | +- Lazy loading is also supported in safetensors, which is useful in distributed settings to only load some of the tensors. This format allowed the [BLOOM](https://huggingface.co/bigscience/bloom) model to be loaded in 45 seconds on 8 GPUs instead of 10 minutes with regular PyTorch weights. |
0 commit comments