Introduction

This document describes how to install Safetensors on Kunpeng servers and verify its basic functions.

The Safetensors file header uses a simple structure where JSON is used to describe metadata, followed by a pure binary data area. This completely eliminates the logic of traditional Pickle serialization that may execute arbitrary code, thereby fundamentally blocking the security risks caused by the loading of malicious model files. With its open source ARM64 architecture compatibility, Safetensors can directly run on the openEuler operating system without code reconstruction. The loading speed can be improved by several times due to zero-copy memory mapping.