nvflare.private.fed.utils.fed_utils module
- authorize_build_component(config_dict, config_ctx, node, fl_ctx: FLContext, event_handlers) str[source]
- execute_command_directly(args: List[str]) str[source]
Execute a command directly, without using shell
- extract_participants(participants_list)[source]
Extract participant site names from deploy_map forms.
- Supported forms include:
[“server”, “site-1”]
[“@ALL”]
{“targets”: [“server”, “site-1”]}
{“sites”: [“server”, “site-1”]}
[{“sites”: [“site-1”]}, “site-2”]
[{“targets”: [“site-1”]}, “site-2”]
- get_job_launcher(job_meta: dict, fl_ctx: FLContext) JobLauncherSpec[source]
- require_signed_jobs(workspace: Workspace) bool[source]
Return True if the server requires all submitted jobs to carry __nvfl_sig.json.
Centralized and distributed provisioning use the same verification model: the job carries the submitter certificate, and that certificate must chain to the server’s rootCA.pem. Operators can set
require_signed_jobs: falsein fed_server.json to allow unsigned job folders without restarting the server (hot-reload).Default: True when rootCA.pem is present (any PKI deployment); False otherwise. Explicit “require_signed_jobs” key in fed_server.json overrides the inferred default.
- security_init(secure_train: bool, site_org: str, workspace: Workspace, app_validator: AppValidator, site_type: str)[source]
To check the security content if running in security mode.
- Parameters:
secure_train (bool) – if run in secure mode or not.
site_org – organization of the site
workspace – the workspace object.
app_validator – app validator for application validation
site_type (str) – server or client. fed_client.json or fed_server.json
- security_init_for_job(secure_train: bool, workspace: Workspace, site_type: str, job_id: str)[source]
Initialize security processing for a job process (SJ or CJ).
- Parameters:
secure_train (bool) – if run in secure mode or not.
workspace – the workspace object.
site_type (str) – server or client. fed_client.json or fed_server.json