GAIA binary builds are broken. Root cause analysis on the issue: https://github.com/OpenHands/benchmarks/issues/573 The nikolaik/python-nodejs runtime base image was rebuilt upstream, pulling in glibc 2.41-12+deb13u2 (Debian Trixie). This tightened NX-stack enforcement — the dynamic linker now rejects libpython3.13.so.1.0 (which has PT_GNU_STACK RWX), crashing every PyInstaller binary on startup before Python even loads. No code change on our side caused this. Two PRs with different approaches: • Pin the base image digest (https://github.com/OpenHands/software-agent-sdk/pull/2575) — one-line fix, locks us to the last working glibc. Simple but means we stop getting upstream updates until we manually bump. • Patch ELF headers in PyInstaller spec (https://github.com/OpenHands/software-agent-sdk/pull/2574) — clears the executable stack flag on bundled .so files during build. More robust against future glibc changes but more complex. Not sure what's the best solution? @modern-fireman-99755

I think Xingyao also met this one here https://github.com/OpenHands/software-agent-sdk/pull/2567#issuecomment-4128290837