Skip to content

Latest commit

 

History

History
82 lines (59 loc) · 1.97 KB

README.md

File metadata and controls

82 lines (59 loc) · 1.97 KB
Raw

Example for Job-level authorization

Overview

The purpose of this example is to demonstrate following features of NVFlare,

  1. Run NVFlare in secure mode
  2. Demonstrate job-level authorization policy

System Requirements

  1. Install Python and set up a Virtual Environment,
python3 -m venv nvflare-env
source nvflare-env/bin/activate
  1. Install NVFlare
pip install nvflare
  1. The example is part of the NVFlare source code. The source code can be obtained like this,
git clone https://github.com/NVIDIA/NVFlare.git
  1. TLS requires domain names. Please add the following line in the /etc/hosts file,
127.0.0.1	server1

Setup

cd NVFlare/examples/advanced/job-level-authorization
./setup.sh

All the startup kits will be generated in this folder,

/tmp/nvflare/poc/job-level-authorization/prod_00

Note that the "workspace" folder is removed every time setup.sh is run. Please do not save customized files in this folder.

Starting NVFlare

This script will start up the server and 2 clients,

nvflare poc start

Logging with Admin Console

For example, to login as the [email protected] user:

cd /tmp/nvflare/poc/job-level-authorization/prod_00/[email protected]
./startup/fl_admin.sh

At the prompt, enter the user email [email protected]

The setup.sh has copied the jobs folder to the workspace folder. So jobs can be submitted like this, type the following command in the admin console:

submit_job ../../job1
submit_job ../../job2

Participants

Site

  • server1: NVFlare server
  • site_a: Site_a has a CustomSecurityHandler set up which does not allow the job "FL Demo Job1" to run. Any other named jobs will be able to deploy and run on site_a.
  • site_b: Site_b does not have the extra security handling codes. It allows any job to be deployed and run.

Jobs

  • job1: The job is called hello-numpy-sag. site_a will allow this job to run.
  • job2: The job is called FL Demo Job1. site_a will block this job to run.