From e74b74298173ad96ac10b83d7bb09352b4940019 Mon Sep 17 00:00:00 2001
From: MickLesk <mickey.leskowitz@gmail.com>
Date: Wed, 1 Jul 2026 21:56:18 +0200
Subject: [PATCH] Stirling-PDF: patch libicudata execstack flag for LXC
 container compatibility

---
 ct/stirling-pdf.sh              | 4 ++++
 install/stirling-pdf-install.sh | 7 ++++++-
 2 files changed, 10 insertions(+), 1 deletion(-)

diff --git a/ct/stirling-pdf.sh b/ct/stirling-pdf.sh
index d037c2c14..267bdaf85 100644
--- a/ct/stirling-pdf.sh
+++ b/ct/stirling-pdf.sh
@@ -38,6 +38,10 @@ function update_script() {
     PYTHON_VERSION="3.12" setup_uv
     JAVA_VERSION="25" setup_java
 
+    msg_info "Patching Native Libraries for LXC Compatibility"
+    find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \;
+    msg_ok "Patched Native Libraries"
+
     msg_info "Stopping Services"
     systemctl stop stirlingpdf libreoffice-listener unoserver
     msg_ok "Stopped Services"
diff --git a/install/stirling-pdf-install.sh b/install/stirling-pdf-install.sh
index 41d6d56d3..f953e997b 100644
--- a/install/stirling-pdf-install.sh
+++ b/install/stirling-pdf-install.sh
@@ -27,7 +27,8 @@ $STD apt install -y \
   fonts-urw-base35 \
   qpdf \
   poppler-utils \
-  jbig2
+  jbig2 \
+  patchelf
 msg_ok "Installed Dependencies"
 
 PYTHON_VERSION="3.12" setup_uv
@@ -115,6 +116,10 @@ EOF
 fi
 msg_ok "Created Environment Variables"
 
+msg_info "Patching Native Libraries for LXC Compatibility"
+find /usr/lib -name "libicudata.so.*" -exec patchelf --clear-execstack {} \;
+msg_ok "Patched Native Libraries"
+
 msg_info "Refreshing Font Cache"
 $STD fc-cache -fv
 msg_ok "Font Cache Updated"