PAL failed Unable to load loader entrypoint: -4

[pdavis39]

I am running a simple python demo that is giving me the following error after I run gramine SGX=1

sudo gramine-sgx python
Gramine is starting. Parsing TOML manifest file, this may take some time...
error: Loaded binary has more than one dependency (must be only one dependency -- the PAL binary)
error: Could not map loader entrypoint binary into memory and then relocate it
error: PAL failed Unable to load loader entrypoint: -4

The code comes from https://github.com/amiller/gramine-rsademo that I am using for a hello world to see if everyting is working.

I have modifed the Makefile and python.manifest.template to work in my environment.

I am running Ubuntu 24.4

I can't find anything to help me on this issue

[kailun-qin]

@pdavis39: Could you pls show the the dynamic sections of your LibOS ELF file (libsysdb.so) by running e.g., readelf -d?

[pdavis39]

In my python.manifest.template I call libz.so.1

---

cat python.manifest.template

Python3 manifest example

loader.entrypoint.uri = "file:{{ loader_entrypoint_uri }}"
libos.entrypoint = "file:{{ libos_entrypoint }}"
loader.log_level = "{{ log_level }}"
loader.env.LD_LIBRARY_PATH = "/lib/x86_64-linux-gnu:/usr/lib/x86_64-linux-gnu"
loader.env.RA_TYPE = "dcap"
loader.argv = ["./python3", "rsademo.py"]
sys.enable_sigterm_injection = false

fs.mounts = [
{ path = "/lib", uri = "file:{{ gramine.runtimedir() }}" },
{ path = "{{ arch_libdir }}", uri = "file:{{ arch_libdir }}" },
{ path = "/usr/{{ arch_libdir }}", uri = "file:/usr/{{ arch_libdir }}" },
{ path = "/lib/x86_64-linux-gnu", uri = "file:/lib/x86_64-linux-gnu" },
{ path = "/usr/lib/x86_64-linux-gnu", uri = "file:/usr/lib/x86_64-linux-gnu" },
{% for path in python.get_sys_path(loader_entrypoint_uri) %}
{ path = "{{ path }}", uri = "file:{{ path }}" },
{% endfor %}
{ path = "{{ libos_entrypoint }}", uri = "file:{{ libos_entrypoint }}" },
{ type = "tmpfs", path = "/tmp" }, { type = "encrypted", path = "/data/", uri = "file:enclave_data/", key_name = "_sgx_mrenclave" },
{ path = "/untrustedhost", uri = "file:untrustedhost/" },
]

sys.stack.size = "4M"
sys.enable_extra_runtime_domain_names_conf = true
sgx.debug = false
sgx.edmm_enable = true

sgx.edmm_enable = {{ 'true' if env.get('EDMM', '0') == '1' else 'false' }}

#sgx.nonpie_binary = true
sgx.enclave_size = "1G"
sgx.max_threads = 4
sgx.remote_attestation = "dcap"

sgx.trusted_files = [
"file:{{ gramine.libos }}",
"file:{{ libos_entrypoint }}",
"file:{{ gramine.runtimedir() }}/",
"file:{{ arch_libdir }}/",
"file:/usr/{{ arch_libdir }}/",
{% for path in python.get_sys_path(loader_entrypoint_uri) %}
"file:{{ path }}{{ '/' if path.is_dir() else '' }}",
{% endfor %}

"file:rsademo.py",
"file:/lib/x86_64-linux-gnu/libz.so.1",
"file:/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2",
"file:/usr/lib/x86_64-linux-gnu/libexpat.so.1",
"file:/lib/x86_64-linux-gnu/libm.so.6",
]

Untrusted files for communication with the host can go here

sgx.allowed_files = [
"file:untrustedhost",
]

---

readelf -d /lib/x86_64-linux-gnu/libz.so.1

Dynamic section at offset 0x1add0 contains 27 entries:
Tag Type Name/Value
0x0000000000000001 (NEEDED) Shared library: [libc.so.6]
0x000000000000000e (SONAME) Library soname: [libz.so.1]
0x000000000000000c (INIT) 0x2000
0x000000000000000d (FINI) 0x13c40
0x0000000000000019 (INIT_ARRAY) 0x1ac70
0x000000000000001b (INIT_ARRAYSZ) 8 (bytes)
0x000000000000001a (FINI_ARRAY) 0x1ac78
0x000000000000001c (FINI_ARRAYSZ) 8 (bytes)
0x000000006ffffef5 (GNU_HASH) 0x2f0
0x0000000000000005 (STRTAB) 0x1240
0x0000000000000006 (SYMTAB) 0x6a0
0x000000000000000a (STRSZ) 1488 (bytes)
0x000000000000000b (SYMENT) 24 (bytes)
0x0000000000000003 (PLTGOT) 0x1afe8
0x0000000000000002 (PLTRELSZ) 408 (bytes)
0x0000000000000014 (PLTREL) RELA
0x0000000000000017 (JMPREL) 0x1e68
0x0000000000000007 (RELA) 0x1b68
0x0000000000000008 (RELASZ) 768 (bytes)
0x0000000000000009 (RELAENT) 24 (bytes)
0x000000006ffffffc (VERDEF) 0x1908
0x000000006ffffffd (VERDEFNUM) 15
0x000000006ffffffe (VERNEED) 0x1b18
0x000000006fffffff (VERNEEDNUM) 1
0x000000006ffffff0 (VERSYM) 0x1810
0x000000006ffffff9 (RELACOUNT) 28
0x0000000000000000 (NULL) 0x0

[kailun-qin]

I may not have been clear earlier -- I was referring to the file you specified for loader.entrypoint.uri. What did you use for loader_entrypoint_uri? Please note that if you're working on the latest version of Gramine, you don't need to specify this option explicitly. Pls see the loader entrypoint manifest syntax for details.

[pdavis39]

rewrote my makefile and manifest.template and resolved the issue. thanks for you help