use debian bullseye and pin onnxruntime 1.16.3

Dockerfile

@@ -1,17 +1,15 @@
-FROM python:3.10-slim
+# Use an older, more compatible base image (Debian Bullseye)
+FROM python:3.10-slim-bullseye
 
 WORKDIR /app
 
 # Install system dependencies
-# Note: libgl1 replaces libgl1-mesa-glx in newer Debian
-# prelink contains execstack in some distros, but we'll use a different approach
 RUN apt-get update && apt-get install -y \
-    libgl1 \
+    libgl1-mesa-glx \
     libglib2.0-0 \
     libsm6 \
     libxrender1 \
     libxext6 \
-    binutils \
     && rm -rf /var/lib/apt/lists/*
 
 # Copy requirements first for better caching
@@ -20,12 +18,6 @@ COPY requirements.txt .
 # Install Python dependencies
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Fix onnxruntime executable stack issue using objcopy (from binutils)
-# This clears the executable stack requirement from the shared libraries
-RUN for f in $(find /usr/local/lib/python3.10/site-packages/onnxruntime -name "*.so" 2>/dev/null); do \
-        objcopy --set-section-flags .note.GNU-stack=alloc,readonly $f 2>/dev/null || true; \
-    done
-
 # Copy application code
 COPY . .
 

requirements.txt

@@ -1,6 +1,7 @@
 gradio==4.44.0
 controlnet-aux>=0.0.9
 easy-dwpose
+onnxruntime==1.16.3
 huggingface_hub<0.25.0
 pydantic==2.8.2
 torch