Installing gramine-1.7 using rpm package failed

[reclock]

os: anolisos:8

rpm -ivh gramine-1.7-1.el8.x86_64.rpm

Error: Dependency detection failed:
Python3_tomli>=1.1.0 is required by gramine-1.7-1. el8.x86_64

this is my pip install :

[root@test-6-127 ~]# pip3 list
DEPRECATION: The default format will switch to columns in the future. You can use --format=(legacy|columns) (or define a format=(legacy|columns) in your pip.conf under the [list] section) to disable this warning.
Babel (2.5.1)
cffi (1.11.5)
chardet (3.0.4)
click (8.0.4)
cryptography (3.2.1)
dbus-python (1.2.4)
decorator (4.2.1)
gpg (1.13.1)
idna (2.5)
importlib-metadata (4.8.3)
Jinja2 (2.10.1)
keentune-target (2.4.1)
libcomps (0.1.18)
MarkupSafe (0.23)
nftables (0.1)
perf (0.1)
pip (9.0.3)
ply (3.9)
protobuf (3.5.0)
pycparser (2.14)
pycurl (7.43.0.2)
pyelftools (0.27)
PyGObject (3.40.1)
PySocks (1.6.8)
python-dateutil (2.6.1)
python-linux-procfs (0.7.3)
pytz (2017.2)
pyudev (0.21.0)
PyYAML (3.12)
requests (2.20.0)
rpm (4.14.3)
selinux (2.9)
setuptools (39.2.0)
six (1.11.0)
slip (0.6.4)
slip.dbus (0.6.4)
systemd-python (234)
tomli (1.2.3)
tomli-w (0.4.0)
tomlkit (0.11.6)
tornado (6.0.2)
typing-extensions (4.1.1)
urllib3 (1.24.2)
voluptuous (0.11.7)
zipp (3.6.0)

[reclock]

[root@2c097a78697f ra-tls-mbedtls]# yum install gramine
Gramine                                                                                                                                                                    7.1 kB/s |  15 kB     00:02    
Error: 
 Problem: cannot install the best candidate for the job
  - nothing provides python3-tomli >= 1.1.0 needed by gramine-1.8-1.el8.x86_64 from gramine
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

[woju]

I've never heard of Anolis OS 8, I don't know Chinese, so I can't read it's webpage and I have no visibility into it's repositories. It's not on repology.org (https://repology.org/repositories/statistics), so I'm kinda guessing here. If it's based on RHEL 8 (or CentOS 8), then python3-tomli should be installed from "AppStream" repository, which should be enabled by default (it is on all sane RHEL 8 equivalents). Please check if AppStream repo is provided and enabled. Furthermore, you need to manually enable powertools repo (or less likely crb as it's called on RHEL9-derived distros) and then you need to install EPEL repo, as this page says: https://docs.fedoraproject.org/en-US/epel/getting-started/ (it's referenced in our instalation instructions: https://gramine.readthedocs.io/en/stable/installation.html#almalinux-and-compatible-distributions-versions-9-and-8 — I'm asking because you didn't post the full log, so I'd like to make sure).

pip3 list is irrelevant, because the error is from system's (rpm) package dependency resolution, which doesn't care about pip-installed stuff.

[woju]

Can you please provide the contents of all files in /etc/yum.repos.d/? I'd like to cross check the contents of the repositories that this distro provides.

[reclock]

@woju

[root@57cb83fc890f ra-base-tee-dev-1.8.5.1]# ll /etc/yum.repos.d/
total 56
-rw-r--r-- 1 root root  200 Jan 19  2024 AnolisOS-AppStream.repo
-rw-r--r-- 1 root root  191 Jan 19  2024 AnolisOS-BaseOS.repo
-rw-r--r-- 1 root root  182 Jan 19  2024 AnolisOS-DDE.repo
-rw-r--r-- 1 root root 1161 Jan 19  2024 AnolisOS-Debuginfo.repo
-rw-r--r-- 1 root root  191 Jan 19  2024 AnolisOS-Extras.repo
-rw-r--r-- 1 root root  221 Jan 19  2024 AnolisOS-HighAvailability.repo
-rw-r--r-- 1 root root  185 Jan 19  2024 AnolisOS-Plus.repo
-rw-r--r-- 1 root root 1091 Jan 19  2024 AnolisOS-Source.repo
-rw-r--r-- 1 root root  643 Jan 19  2024 AnolisOS-kernel-5.10.repo
-rw-r--r-- 1 root root 1680 Aug 30 20:48 epel-modular.repo
-rw-r--r-- 1 root root 1779 Aug 30 20:48 epel-testing-modular.repo
-rw-r--r-- 1 root root 1431 Aug 30 20:48 epel-testing.repo
-rw-r--r-- 1 root root 1332 Aug 30 20:48 epel.repo
-rw-r--r-- 1 root root   88 Feb 19 03:19 localsgx.repo

and

[root@57cb83fc890f yum.repos.d]# cat AnolisOS-AppStream.repo 
[AppStream]
name=AnolisOS-$releasever - AppStream
baseurl=http://mirrors.openanolis.cn/anolis/$releasever/AppStream/$basearch/os
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-ANOLIS
gpgcheck=1

[woju]

I can't find python3-tomli in http://mirrors.openanolis.cn/anolis/8.9/AppStream/x86_64/os/Packages/ nor in http://mirrors.openanolis.cn/anolis/8/AppStream/x86_64/os/Packages/ . This is a problem with your distro, it's just not compatible with .el8 (irrespective of what it's developers might say).

You have 3 options:

• Change your distribution. I'm sorry to be blunt, but I strongly suggest this solution: if distro's developers can't make sure they provide all required packages, I'd wonder what else did they miss. Unless you're in business of providing them QA, I'd just abandon them, there are plenty of other .el-compatible distros out there (like, really compatible) to choose from.
• File a bug with the distro and see that they fix it (and then see that they fix all other incompatibilities, cf. previous point).
• Get python3-tomli (and maybe other packages that might be missing from the distro) from another repository. It might be possible to change AppStream repository to one from compatible distros, e.g. Rocky Linux' one:

% docker run -it --rm rockylinux:8
Unable to find image 'rockylinux:8' locally
8: Pulling from library/rockylinux
9088cdb84e39: Pull complete 
Digest: sha256:9794037624aaa6212aeada1d28861ef5e0a935adaf93e4ef79837119f2a2d04c
Status: Downloaded newer image for rockylinux:8
[root@27017410801f /]# cat /etc/yum.repos.d/Rocky-AppStream.repo 
# Rocky-AppStream.repo
#
# The mirrorlist system uses the connecting IP address of the client and the
# update status of each mirror to pick current mirrors that are geographically
# close to the client.  You should use this for Rocky updates unless you are
# manually picking other mirrors.
#
# If the mirrorlist does not work for you, you can try the commented out
# baseurl line instead.

[appstream]
name=Rocky Linux $releasever - AppStream
mirrorlist=https://mirrors.rockylinux.org/mirrorlist?arch=$basearch&repo=AppStream-$releasever
#baseurl=http://dl.rockylinux.org/$contentdir/$releasever/AppStream/$basearch/os/
gpgcheck=1
enabled=1
countme=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-rockyofficial

But you'd be kinda on your own, because AppStream relies on packages from BaseOS repo, and if they screwed up base repo, then stuff will go wrong. Also, if you'd be taking one repo from Rocky (or AlmaLinux, or whatever you chose — we're running AlmaLinux from RPM's in Gramine CI btw), then you might as well take all of them, which amounts to just changing the distro.

[reclock]

Thank you for your answer. I plan to compile gramine using source code and install it on my system