fix dockerfile for debian trixie

Dockerfile

@@ -2,11 +2,16 @@ FROM python:3.10-slim
 
 WORKDIR /app
 
-# Install system dependencies including execstack
+# Install system dependencies
+# Note: libgl1 replaces libgl1-mesa-glx in newer Debian
+# prelink contains execstack in some distros, but we'll use a different approach
 RUN apt-get update && apt-get install -y \
-    libgl1-mesa-glx \
+    libgl1 \
     libglib2.0-0 \
-    execstack \
+    libsm6 \
+    libxrender1 \
+    libxext6 \
+    binutils \
     && rm -rf /var/lib/apt/lists/*
 
 # Copy requirements first for better caching
@@ -15,8 +20,11 @@ COPY requirements.txt .
 # Install Python dependencies
 RUN pip install --no-cache-dir -r requirements.txt
 
-# Fix onnxruntime executable stack issue
-RUN find /usr/local/lib/python3.10/site-packages/onnxruntime -name "*.so" -exec execstack -c {} \; 2>/dev/null || true
+# Fix onnxruntime executable stack issue using objcopy (from binutils)
+# This clears the executable stack requirement from the shared libraries
+RUN for f in $(find /usr/local/lib/python3.10/site-packages/onnxruntime -name "*.so" 2>/dev/null); do \
+        objcopy --set-section-flags .note.GNU-stack=alloc,readonly $f 2>/dev/null || true; \
+    done
 
 # Copy application code
 COPY . .