Serialization
huggingface_hub
provides helpers to save and load ML model weights in a standardized way. This part of the library is still under development and will be improved in future releases. The goal is to harmonize how weights are saved and loaded across the Hub, both to remove code duplication across libraries and to establish consistent conventions.
DDUF file format
DDUF is a file format designed for diffusion models. It allows saving all the information to run a model in a single file. This work is inspired by the GGUF format. huggingface_hub
provides helpers to save and load DDUF files, ensuring the file format is respected.
This is a very early version of the parser. The API and implementation can evolve in the near future.
The parser currently does very little validation. For more details about the file format, check out https://github.com/huggingface/huggingface.js/tree/main/packages/dduf.
How to write a DDUF file?
Here is how to export a folder containing different parts of a diffusion model using export_folder_as_dduf():
# Export a folder as a DDUF file
>>> from huggingface_hub import export_folder_as_dduf
>>> export_folder_as_dduf("FLUX.1-dev.dduf", folder_path="path/to/FLUX.1-dev")
For more flexibility, you can use export_entries_as_dduf() and pass a list of files to include in the final DDUF file:
# Export specific files from the local disk.
>>> from huggingface_hub import export_entries_as_dduf
>>> export_entries_as_dduf(
... dduf_path="stable-diffusion-v1-4-FP16.dduf",
... entries=[ # List entries to add to the DDUF file (here, only FP16 weights)
... ("model_index.json", "path/to/model_index.json"),
... ("vae/config.json", "path/to/vae/config.json"),
... ("vae/diffusion_pytorch_model.fp16.safetensors", "path/to/vae/diffusion_pytorch_model.fp16.safetensors"),
... ("text_encoder/config.json", "path/to/text_encoder/config.json"),
... ("text_encoder/model.fp16.safetensors", "path/to/text_encoder/model.fp16.safetensors"),
... # ... add more entries here
... ]
... )
The entries
parameter also supports passing an iterable of paths or bytes. This can prove useful if you have a loaded model and want to serialize it directly into a DDUF file instead of having to serialize each component to disk first and then as a DDUF file. Here is an example of how a StableDiffusionPipeline
can be serialized as DDUF:
# Export state_dicts one by one from a loaded pipeline
>>> from diffusers import DiffusionPipeline
>>> from typing import Generator, Tuple
>>> import safetensors.torch
>>> from huggingface_hub import export_entries_as_dduf
>>> pipe = DiffusionPipeline.from_pretrained("CompVis/stable-diffusion-v1-4")
... # ... do some work with the pipeline
>>> def as_entries(pipe: DiffusionPipeline) -> Generator[Tuple[str, bytes], None, None]:
... # Build a generator that yields the entries to add to the DDUF file.
... # The first element of the tuple is the filename in the DDUF archive (must use UNIX separator!). The second element is the content of the file.
... # Entries will be evaluated lazily when the DDUF file is created (only 1 entry is loaded in memory at a time)
... yield "vae/config.json", pipe.vae.to_json_string().encode()
... yield "vae/diffusion_pytorch_model.safetensors", safetensors.torch.save(pipe.vae.state_dict())
... yield "text_encoder/config.json", pipe.text_encoder.config.to_json_string().encode()
... yield "text_encoder/model.safetensors", safetensors.torch.save(pipe.text_encoder.state_dict())
... # ... add more entries here
>>> export_entries_as_dduf(dduf_path="stable-diffusion-v1-4.dduf", entries=as_entries(pipe))
Note: in practice, diffusers
provides a method to directly serialize a pipeline in a DDUF file. The snippet above is only meant as an example.
How to read a DDUF file?
>>> import json
>>> import safetensors.torch
>>> from huggingface_hub import read_dduf_file
# Read DDUF metadata
>>> dduf_entries = read_dduf_file("FLUX.1-dev.dduf")
# Returns a mapping filename <> DDUFEntry
>>> dduf_entries["model_index.json"]
DDUFEntry(filename='model_index.json', offset=66, length=587)
# Load model index as JSON
>>> json.loads(dduf_entries["model_index.json"].read_text())
{'_class_name': 'FluxPipeline', '_diffusers_version': '0.32.0.dev0', '_name_or_path': 'black-forest-labs/FLUX.1-dev', 'scheduler': ['diffusers', 'FlowMatchEulerDiscreteScheduler'], 'text_encoder': ['transformers', 'CLIPTextModel'], 'text_encoder_2': ['transformers', 'T5EncoderModel'], 'tokenizer': ['transformers', 'CLIPTokenizer'], 'tokenizer_2': ['transformers', 'T5TokenizerFast'], 'transformer': ['diffusers', 'FluxTransformer2DModel'], 'vae': ['diffusers', 'AutoencoderKL']}
# Load VAE weights using safetensors
>>> with dduf_entries["vae/diffusion_pytorch_model.safetensors"].as_mmap() as mm:
... state_dict = safetensors.torch.load(mm)
Helpers
huggingface_hub.export_entries_as_dduf
< source >( dduf_path: typing.Union[str, os.PathLike] entries: typing.Iterable[typing.Tuple[str, typing.Union[str, pathlib.Path, bytes]]] )
Parameters
- dduf_path (
str
oros.PathLike
) — The path to the DDUF file to write. - entries (
Iterable[Tuple[str, Union[str, Path, bytes]]]
) — An iterable of entries to write in the DDUF file. Each entry is a tuple with the filename and the content. The filename should be the path to the file in the DDUF archive. The content can be a string or a pathlib.Path representing a path to a file on the local disk or directly the content as bytes.
Raises
- —
DDUFExportError
: If anything goes wrong during the export (e.g. invalid entry name, missing ‘model_index.json’, etc.).
- —
Write a DDUF file from an iterable of entries.
This is a lower-level helper than export_folder_as_dduf() that allows more flexibility when serializing data. In particular, you don’t need to save the data on disk before exporting it in the DDUF file.
Example:
# Export specific files from the local disk.
>>> from huggingface_hub import export_entries_as_dduf
>>> export_entries_as_dduf(
... dduf_path="stable-diffusion-v1-4-FP16.dduf",
... entries=[ # List entries to add to the DDUF file (here, only FP16 weights)
... ("model_index.json", "path/to/model_index.json"),
... ("vae/config.json", "path/to/vae/config.json"),
... ("vae/diffusion_pytorch_model.fp16.safetensors", "path/to/vae/diffusion_pytorch_model.fp16.safetensors"),
... ("text_encoder/config.json", "path/to/text_encoder/config.json"),
... ("text_encoder/model.fp16.safetensors", "path/to/text_encoder/model.fp16.safetensors"),
... # ... add more entries here
... ]
... )
# Export state_dicts one by one from a loaded pipeline
>>> from diffusers import DiffusionPipeline
>>> from typing import Generator, Tuple
>>> import safetensors.torch
>>> from huggingface_hub import export_entries_as_dduf
>>> pipe = DiffusionPipeline.from_pretrained("CompVis/stable-diffusion-v1-4")
... # ... do some work with the pipeline
>>> def as_entries(pipe: DiffusionPipeline) -> Generator[Tuple[str, bytes], None, None]:
... # Build an generator that yields the entries to add to the DDUF file.
... # The first element of the tuple is the filename in the DDUF archive (must use UNIX separator!). The second element is the content of the file.
... # Entries will be evaluated lazily when the DDUF file is created (only 1 entry is loaded in memory at a time)
... yield "vae/config.json", pipe.vae.to_json_string().encode()
... yield "vae/diffusion_pytorch_model.safetensors", safetensors.torch.save(pipe.vae.state_dict())
... yield "text_encoder/config.json", pipe.text_encoder.config.to_json_string().encode()
... yield "text_encoder/model.safetensors", safetensors.torch.save(pipe.text_encoder.state_dict())
... # ... add more entries here
>>> export_entries_as_dduf(dduf_path="stable-diffusion-v1-4.dduf", entries=as_entries(pipe))
huggingface_hub.export_folder_as_dduf
< source >( dduf_path: typing.Union[str, os.PathLike] folder_path: typing.Union[str, os.PathLike] )
Export a folder as a DDUF file.
AUses export_entries_as_dduf() under the hood.
huggingface_hub.read_dduf_file
< source >( dduf_path: typing.Union[os.PathLike, str] ) → Dict[str, DDUFEntry]
Parameters
Returns
Dict[str, DDUFEntry]
A dictionary of DDUFEntry indexed by filename.
Raises
- —
DDUFCorruptedFileError
: If the DDUF file is corrupted (i.e. doesn’t follow the DDUF format).
- —
Read a DDUF file and return a dictionary of entries.
Only the metadata is read, the data is not loaded in memory.
Example:
>>> import json
>>> import safetensors.torch
>>> from huggingface_hub import read_dduf_file
# Read DDUF metadata
>>> dduf_entries = read_dduf_file("FLUX.1-dev.dduf")
# Returns a mapping filename <> DDUFEntry
>>> dduf_entries["model_index.json"]
DDUFEntry(filename='model_index.json', offset=66, length=587)
# Load model index as JSON
>>> json.loads(dduf_entries["model_index.json"].read_text())
{'_class_name': 'FluxPipeline', '_diffusers_version': '0.32.0.dev0', '_name_or_path': 'black-forest-labs/FLUX.1-dev', ...
# Load VAE weights using safetensors
>>> with dduf_entries["vae/diffusion_pytorch_model.safetensors"].as_mmap() as mm:
... state_dict = safetensors.torch.load(mm)
class huggingface_hub.DDUFEntry
< source >( filename: str length: int offset: int dduf_path: Path )
Object representing a file entry in a DDUF file.
See read_dduf_file() for how to read a DDUF file.
Open the file as a memory-mapped file.
Useful to load safetensors directly from the file.
Read the file as text.
Useful for ‘.txt’ and ‘.json’ entries.
Errors
Base exception for errors related to the DDUF format.
Exception thrown when the DDUF file is corrupted.
Base exception for errors during DDUF export.
Exception thrown when the entry name is invalid.
Saving tensors
The main helper of the serialization
module takes a torch nn.Module
as input and saves it to disk. It handles the logic to save shared tensors (see safetensors explanation) as well as logic to split the state dictionary into shards, using split_torch_state_dict_into_shards() under the hood. At the moment, only torch
framework is supported.
If you want to save a state dictionary (e.g. a mapping between layer names and related tensors) instead of a nn.Module
, you can use save_torch_state_dict() which provides the same features. This is useful for example if you want to apply custom logic to the state dict before saving it.
save_torch_model
huggingface_hub.save_torch_model
< source >( model: torch.nn.Module save_directory: typing.Union[str, pathlib.Path] filename_pattern: typing.Optional[str] = None force_contiguous: bool = True max_shard_size: typing.Union[int, str] = '5GB' metadata: typing.Optional[typing.Dict[str, str]] = None safe_serialization: bool = True is_main_process: bool = True shared_tensors_to_discard: typing.Optional[typing.List[str]] = None )
Parameters
- model (
torch.nn.Module
) — The model to save on disk. - save_directory (
str
orPath
) — The directory in which the model will be saved. - filename_pattern (
str
, optional) — The pattern to generate the files names in which the model will be saved. Pattern must be a string that can be formatted withfilename_pattern.format(suffix=...)
and must contain the keywordsuffix
Defaults to"model{suffix}.safetensors"
orpytorch_model{suffix}.bin
depending onsafe_serialization
parameter. - force_contiguous (
boolean
, optional) — Forcing the state_dict to be saved as contiguous tensors. This has no effect on the correctness of the model, but it could potentially change performance if the layout of the tensor was chosen specifically for that reason. Defaults toTrue
. - max_shard_size (
int
orstr
, optional) — The maximum size of each shard, in bytes. Defaults to 5GB. - metadata (
Dict[str, str]
, optional) — Extra information to save along with the model. Some metadata will be added for each dropped tensors. This information will not be enough to recover the entire shared structure but might help understanding things. - safe_serialization (
bool
, optional) — Whether to save as safetensors, which is the default behavior. IfFalse
, the shards are saved as pickle. Safe serialization is recommended for security reasons. Saving as pickle is deprecated and will be removed in a future version. - is_main_process (
bool
, optional) — Whether the process calling this is the main process or not. Useful when in distributed training like TPUs and need to call this function from all processes. In this case, setis_main_process=True
only on the main process to avoid race conditions. Defaults to True. - shared_tensors_to_discard (
List[str]
, optional) — List of tensor names to drop when saving shared tensors. If not provided and shared tensors are detected, it will drop the first name alphabetically.
Saves a given torch model to disk, handling sharding and shared tensors issues.
See also save_torch_state_dict() to save a state dict with more flexibility.
For more information about tensor sharing, check out this guide.
The model state dictionary is split into shards so that each shard is smaller than a given size. The shards are
saved in the save_directory
with the given filename_pattern
. If the model is too big to fit in a single shard,
an index file is saved in the save_directory
to indicate where each tensor is saved. This helper uses
split_torch_state_dict_into_shards() under the hood. If safe_serialization
is True
, the shards are saved as
safetensors (the default). Otherwise, the shards are saved as pickle.
Before saving the model, the save_directory
is cleaned from any previous shard files.
If one of the model’s tensor is bigger than max_shard_size
, it will end up in its own shard which will have a
size greater than max_shard_size
.
If your model is a transformers.PreTrainedModel
, you should pass model._tied_weights_keys
as shared_tensors_to_discard
to properly handle shared tensors saving. This ensures the correct duplicate tensors are discarded during saving.
Example:
>>> from huggingface_hub import save_torch_model
>>> model = ... # A PyTorch model
# Save state dict to "path/to/folder". The model will be split into shards of 5GB each and saved as safetensors.
>>> save_torch_model(model, "path/to/folder")
# Load model back
>>> from huggingface_hub import load_torch_model # TODO
>>> load_torch_model(model, "path/to/folder")
>>>
save_torch_state_dict
huggingface_hub.save_torch_state_dict
< source >( state_dict: typing.Dict[str, ForwardRef('torch.Tensor')] save_directory: typing.Union[str, pathlib.Path] filename_pattern: typing.Optional[str] = None force_contiguous: bool = True max_shard_size: typing.Union[int, str] = '5GB' metadata: typing.Optional[typing.Dict[str, str]] = None safe_serialization: bool = True is_main_process: bool = True shared_tensors_to_discard: typing.Optional[typing.List[str]] = None )
Parameters
- state_dict (
Dict[str, torch.Tensor]
) — The state dictionary to save. - save_directory (
str
orPath
) — The directory in which the model will be saved. - filename_pattern (
str
, optional) — The pattern to generate the files names in which the model will be saved. Pattern must be a string that can be formatted withfilename_pattern.format(suffix=...)
and must contain the keywordsuffix
Defaults to"model{suffix}.safetensors"
orpytorch_model{suffix}.bin
depending onsafe_serialization
parameter. - force_contiguous (
boolean
, optional) — Forcing the state_dict to be saved as contiguous tensors. This has no effect on the correctness of the model, but it could potentially change performance if the layout of the tensor was chosen specifically for that reason. Defaults toTrue
. - max_shard_size (
int
orstr
, optional) — The maximum size of each shard, in bytes. Defaults to 5GB. - metadata (
Dict[str, str]
, optional) — Extra information to save along with the model. Some metadata will be added for each dropped tensors. This information will not be enough to recover the entire shared structure but might help understanding things. - safe_serialization (
bool
, optional) — Whether to save as safetensors, which is the default behavior. IfFalse
, the shards are saved as pickle. Safe serialization is recommended for security reasons. Saving as pickle is deprecated and will be removed in a future version. - is_main_process (
bool
, optional) — Whether the process calling this is the main process or not. Useful when in distributed training like TPUs and need to call this function from all processes. In this case, setis_main_process=True
only on the main process to avoid race conditions. Defaults to True. - shared_tensors_to_discard (
List[str]
, optional) — List of tensor names to drop when saving shared tensors. If not provided and shared tensors are detected, it will drop the first name alphabetically.
Save a model state dictionary to the disk, handling sharding and shared tensors issues.
See also save_torch_model() to directly save a PyTorch model.
For more information about tensor sharing, check out this guide.
The model state dictionary is split into shards so that each shard is smaller than a given size. The shards are
saved in the save_directory
with the given filename_pattern
. If the model is too big to fit in a single shard,
an index file is saved in the save_directory
to indicate where each tensor is saved. This helper uses
split_torch_state_dict_into_shards() under the hood. If safe_serialization
is True
, the shards are saved as
safetensors (the default). Otherwise, the shards are saved as pickle.
Before saving the model, the save_directory
is cleaned from any previous shard files.
If one of the model’s tensor is bigger than max_shard_size
, it will end up in its own shard which will have a
size greater than max_shard_size
.
If your model is a transformers.PreTrainedModel
, you should pass model._tied_weights_keys
as shared_tensors_to_discard
to properly handle shared tensors saving. This ensures the correct duplicate tensors are discarded during saving.
Example:
>>> from huggingface_hub import save_torch_state_dict
>>> model = ... # A PyTorch model
# Save state dict to "path/to/folder". The model will be split into shards of 5GB each and saved as safetensors.
>>> state_dict = model_to_save.state_dict()
>>> save_torch_state_dict(state_dict, "path/to/folder")
The serialization
module also contains low-level helpers to split a state dictionary into several shards, while creating a proper index in the process. These helpers are available for torch
and tensorflow
tensors and are designed to be easily extended to any other ML frameworks.
split_tf_state_dict_into_shards
huggingface_hub.split_tf_state_dict_into_shards
< source >( state_dict: typing.Dict[str, ForwardRef('tf.Tensor')] filename_pattern: str = 'tf_model{suffix}.h5' max_shard_size: typing.Union[int, str] = '5GB' ) → StateDictSplit
Parameters
- state_dict (
Dict[str, Tensor]
) — The state dictionary to save. - filename_pattern (
str
, optional) — The pattern to generate the files names in which the model will be saved. Pattern must be a string that can be formatted withfilename_pattern.format(suffix=...)
and must contain the keywordsuffix
Defaults to"tf_model{suffix}.h5"
. - max_shard_size (
int
orstr
, optional) — The maximum size of each shard, in bytes. Defaults to 5GB.
Returns
StateDictSplit
A StateDictSplit
object containing the shards and the index to retrieve them.
Split a model state dictionary in shards so that each shard is smaller than a given size.
The shards are determined by iterating through the state_dict
in the order of its keys. There is no optimization
made to make each shard as close as possible to the maximum size passed. For example, if the limit is 10GB and we
have tensors of sizes [6GB, 6GB, 2GB, 6GB, 2GB, 2GB] they will get sharded as [6GB], [6+2GB], [6+2+2GB] and not
[6+2+2GB], [6+2GB], [6GB].
If one of the model’s tensor is bigger than max_shard_size
, it will end up in its own shard which will have a
size greater than max_shard_size
.
split_torch_state_dict_into_shards
huggingface_hub.split_torch_state_dict_into_shards
< source >( state_dict: typing.Dict[str, ForwardRef('torch.Tensor')] filename_pattern: str = 'model{suffix}.safetensors' max_shard_size: typing.Union[int, str] = '5GB' ) → StateDictSplit
Parameters
- state_dict (
Dict[str, torch.Tensor]
) — The state dictionary to save. - filename_pattern (
str
, optional) — The pattern to generate the files names in which the model will be saved. Pattern must be a string that can be formatted withfilename_pattern.format(suffix=...)
and must contain the keywordsuffix
Defaults to"model{suffix}.safetensors"
. - max_shard_size (
int
orstr
, optional) — The maximum size of each shard, in bytes. Defaults to 5GB.
Returns
StateDictSplit
A StateDictSplit
object containing the shards and the index to retrieve them.
Split a model state dictionary in shards so that each shard is smaller than a given size.
The shards are determined by iterating through the state_dict
in the order of its keys. There is no optimization
made to make each shard as close as possible to the maximum size passed. For example, if the limit is 10GB and we
have tensors of sizes [6GB, 6GB, 2GB, 6GB, 2GB, 2GB] they will get sharded as [6GB], [6+2GB], [6+2+2GB] and not
[6+2+2GB], [6+2GB], [6GB].
To save a model state dictionary to the disk, see save_torch_state_dict(). This helper uses
split_torch_state_dict_into_shards
under the hood.
If one of the model’s tensor is bigger than max_shard_size
, it will end up in its own shard which will have a
size greater than max_shard_size
.
Example:
>>> import json
>>> import os
>>> from safetensors.torch import save_file as safe_save_file
>>> from huggingface_hub import split_torch_state_dict_into_shards
>>> def save_state_dict(state_dict: Dict[str, torch.Tensor], save_directory: str):
... state_dict_split = split_torch_state_dict_into_shards(state_dict)
... for filename, tensors in state_dict_split.filename_to_tensors.items():
... shard = {tensor: state_dict[tensor] for tensor in tensors}
... safe_save_file(
... shard,
... os.path.join(save_directory, filename),
... metadata={"format": "pt"},
... )
... if state_dict_split.is_sharded:
... index = {
... "metadata": state_dict_split.metadata,
... "weight_map": state_dict_split.tensor_to_filename,
... }
... with open(os.path.join(save_directory, "model.safetensors.index.json"), "w") as f:
... f.write(json.dumps(index, indent=2))
split_state_dict_into_shards_factory
This is the underlying factory from which each framework-specific helper is derived. In practice, you are not expected to use this factory directly except if you need to adapt it to a framework that is not yet supported. If that is the case, please let us know by opening a new issue on the huggingface_hub
repo.
huggingface_hub.split_state_dict_into_shards_factory
< source >( state_dict: typing.Dict[str, ~TensorT] get_storage_size: typing.Callable[[~TensorT], int] filename_pattern: str get_storage_id: typing.Callable[[~TensorT], typing.Optional[typing.Any]] = <function <lambda> at 0x7fd9b25ae170> max_shard_size: typing.Union[int, str] = '5GB' ) → StateDictSplit
Parameters
- state_dict (
Dict[str, Tensor]
) — The state dictionary to save. - get_storage_size (
Callable[[Tensor], int]
) — A function that returns the size of a tensor when saved on disk in bytes. - get_storage_id (
Callable[[Tensor], Optional[Any]]
, optional) — A function that returns a unique identifier to a tensor storage. Multiple different tensors can share the same underlying storage. This identifier is guaranteed to be unique and constant for this tensor’s storage during its lifetime. Two tensor storages with non-overlapping lifetimes may have the same id. - filename_pattern (
str
, optional) — The pattern to generate the files names in which the model will be saved. Pattern must be a string that can be formatted withfilename_pattern.format(suffix=...)
and must contain the keywordsuffix
- max_shard_size (
int
orstr
, optional) — The maximum size of each shard, in bytes. Defaults to 5GB.
Returns
StateDictSplit
A StateDictSplit
object containing the shards and the index to retrieve them.
Split a model state dictionary in shards so that each shard is smaller than a given size.
The shards are determined by iterating through the state_dict
in the order of its keys. There is no optimization
made to make each shard as close as possible to the maximum size passed. For example, if the limit is 10GB and we
have tensors of sizes [6GB, 6GB, 2GB, 6GB, 2GB, 2GB] they will get sharded as [6GB], [6+2GB], [6+2+2GB] and not
[6+2+2GB], [6+2GB], [6GB].
If one of the model’s tensor is bigger than max_shard_size
, it will end up in its own shard which will have a
size greater than max_shard_size
.
Loading tensors
The loading helpers support both single-file and sharded checkpoints in either safetensors or pickle format. load_torch_model() takes a nn.Module
and a checkpoint path (either a single file or a directory) as input and load the weights into the model.
load_torch_model
huggingface_hub.load_torch_model
< source >( model: torch.nn.Module checkpoint_path: typing.Union[str, os.PathLike] strict: bool = False safe: bool = True weights_only: bool = False map_location: typing.Union[str, ForwardRef('torch.device'), NoneType] = None mmap: bool = False filename_pattern: typing.Optional[str] = None ) → NamedTuple
Parameters
- model (
torch.nn.Module
) — The model in which to load the checkpoint. - checkpoint_path (
str
oros.PathLike
) — Path to either the checkpoint file or directory containing the checkpoint(s). - strict (
bool
, optional, defaults toFalse
) — Whether to strictly enforce that the keys in the model state dict match the keys in the checkpoint. - safe (
bool
, optional, defaults toTrue
) — Ifsafe
is True, the safetensors files will be loaded. Ifsafe
is False, the function will first attempt to load safetensors files if they are available, otherwise it will fall back to loading pickle files.filename_pattern
parameter takes precedence oversafe
parameter. - weights_only (
bool
, optional, defaults toFalse
) — If True, only loads the model weights without optimizer states and other metadata. Only supported in PyTorch >= 1.13. - map_location (
str
ortorch.device
, optional) — Atorch.device
object, string or a dict specifying how to remap storage locations. It indicates the location where all tensors should be loaded. - mmap (
bool
, optional, defaults toFalse
) — Whether to use memory-mapped file loading. Memory mapping can improve loading performance for large models in PyTorch >= 2.1.0 with zipfile-based checkpoints. - filename_pattern (
str
, optional) — The pattern to look for the index file. Pattern must be a string that can be formatted withfilename_pattern.format(suffix=...)
and must contain the keywordsuffix
Defaults to"model{suffix}.safetensors"
.
Returns
NamedTuple
A named tuple with missing_keys
and unexpected_keys
fields.
missing_keys
is a list of str containing the missing keys, i.e. keys that are in the model but not in the checkpoint.unexpected_keys
is a list of str containing the unexpected keys, i.e. keys that are in the checkpoint but not in the model.
Raises
FileNotFoundError
or ImportError
or ValueError
FileNotFoundError
— If the checkpoint file or directory does not exist.ImportError
— If safetensors or torch is not installed when trying to load a .safetensors file or a PyTorch checkpoint respectively.ValueError
— If the checkpoint path is invalid or if the checkpoint format cannot be determined.
Load a checkpoint into a model, handling both sharded and non-sharded checkpoints.
load_state_dict_from_file
huggingface_hub.load_state_dict_from_file
< source >( checkpoint_file: typing.Union[str, os.PathLike] map_location: typing.Union[str, ForwardRef('torch.device'), NoneType] = None weights_only: bool = False mmap: bool = False ) → Union[Dict[str, "torch.Tensor"], Any]
Parameters
- checkpoint_file (
str
oros.PathLike
) — Path to the checkpoint file to load. Can be either a safetensors or pickle (.bin
) checkpoint. - map_location (
str
ortorch.device
, optional) — Atorch.device
object, string or a dict specifying how to remap storage locations. It indicates the location where all tensors should be loaded. - weights_only (
bool
, optional, defaults toFalse
) — If True, only loads the model weights without optimizer states and other metadata. Only supported for pickle (.bin
) checkpoints with PyTorch >= 1.13. Has no effect when loading safetensors files. - mmap (
bool
, optional, defaults toFalse
) — Whether to use memory-mapped file loading. Memory mapping can improve loading performance for large models in PyTorch >= 2.1.0 with zipfile-based checkpoints. Has no effect when loading safetensors files, as thesafetensors
library uses memory mapping by default.
Returns
Union[Dict[str, "torch.Tensor"], Any]
The loaded checkpoint.
- For safetensors files: always returns a dictionary mapping parameter names to tensors.
- For pickle files: returns any Python object that was pickled (commonly a state dict, but could be an entire model, optimizer state, or any other Python object).
Raises
FileNotFoundError
or ImportError
or OSError
or ValueError
FileNotFoundError
— If the checkpoint file does not exist.ImportError
— If safetensors or torch is not installed when trying to load a .safetensors file or a PyTorch checkpoint respectively.OSError
— If the checkpoint file format is invalid or if git-lfs files are not properly downloaded.ValueError
— If the checkpoint file path is empty or invalid.
Loads a checkpoint file, handling both safetensors and pickle checkpoint formats.
Example:
>>> from huggingface_hub import load_state_dict_from_file
# Load a PyTorch checkpoint
>>> state_dict = load_state_dict_from_file("path/to/model.bin", map_location="cpu")
>>> model.load_state_dict(state_dict)
# Load a safetensors checkpoint
>>> state_dict = load_state_dict_from_file("path/to/model.safetensors")
>>> model.load_state_dict(state_dict)
Tensors helpers
get_torch_storage_id
Return unique identifier to a tensor storage.
Multiple different tensors can share the same underlying storage. This identifier is guaranteed to be unique and constant for this tensor’s storage during its lifetime. Two tensor storages with non-overlapping lifetimes may have the same id. In the case of meta tensors, we return None since we can’t tell if they share the same storage.