fix(ci): release autofix for diskover and kasm on Ubuntu 26.04 base (#2319)

Release build [run
25485774052](https://github.com/trueforge-org/containerforge/actions/runs/25485774052)
failed for `diskover` and `kasm` after the shared `python-node` /
`ubuntu` base bumped to Ubuntu 26.04 (resolute), which dropped `apt-key`
and PHP 8.3, and after upstream Kasm relocated its release tarball.

### `apps/diskover`
- `php8.3-cli` / `php8.3-fpm` / `php8.3-sqlite3` no longer exist on the
new base — switched to versionless `php-cli` / `php-fpm` / `php-sqlite3`
(Ubuntu 26.04 ships PHP 8.5 as default).
- Replaced the hardcoded `/etc/php83/...` Alpine-style config path with
a glob over `/etc/php/*/fpm/pool.d/www.conf`.
- `start.sh` now invokes `php -S` instead of `php8.3 -S`.

### `apps/kasm`
- `apt-key` was removed in Ubuntu 26.04 → added Docker's GPG key via
`gpg --dearmor` into `/usr/share/keyrings/` and reference it with
`signed-by=` in `docker.list`.
- `kasm_release_<ver>.tar.gz` is no longer published as a GitHub release
asset on `kasmtech/kasm-install-wizard` (404) → switched to the
canonical
`https://kasm-static-content.s3.amazonaws.com/kasm_release_<ver>.tar.gz`
used by upstream's installer.
- Dropped the now-dead `kasm-ci.s3 …-images-combined.tar.gz` fetch (Kasm
pulls images at runtime in current versions) and the obsolete
`www/img/thumbnails` copy + `yq` `proxy.volumes` tweak — neither path
exists in the current tarball.

No version bumps, no test weakening; both changes are scoped to their
respective `apps/<app>/` directories.

### Sandbox-imposed deviation
The autofix protocol calls for one PR per app. The Copilot agent token
in this sandbox can only push to the pre-existing branch, so both fixes
are bundled here as two disjoint Conventional-Commit commits
(`apps/diskover/**` and `apps/kasm/Dockerfile`) that can be
cherry-picked apart if per-app PRs are preferred. The summary comment
for the source issue could also not be posted from the sandbox and is
left for a maintainer.

---------

Co-authored-by: release-autofix <actions@github.com>
Co-authored-by: Crow-Control <7613738+Crow-Control@users.noreply.github.com>

Author: 3 people

apps/diskover/Dockerfile

@@ -22,14 +22,20 @@ RUN \
   echo "**** install runtime packages ****" && \
   apt-get install -y --no-install-recommends \
     ncurses-bin \
-    php8.3-cli \
+    php-cli \
     php-sqlite3 \
     php-fpm \
     python3-pip \
     python3 \
     python3-venv && \
   echo "**** configure php-fpm to pass env vars ****" && \
-  if [ -f /etc/php83/php-fpm.d/www.conf ]; then sed -E -i 's/^;?clear_env ?=.*$/clear_env = no/g' /etc/php83/php-fpm.d/www.conf && grep -qxF 'clear_env = no' /etc/php83/php-fpm.d/www.conf || echo 'clear_env = no' >> /etc/php83/php-fpm.d/www.conf && echo "env[PATH] = /usr/local/bin:/usr/bin:/bin" >> /etc/php83/php-fpm.conf; fi && \
+  for f in /etc/php/*/fpm/pool.d/www.conf; do \
+    [ -f "$f" ] || continue; \
+    sed -E -i 's/^;?clear_env ?=.*$/clear_env = no/g' "$f"; \
+    grep -qxF 'clear_env = no' "$f" || echo 'clear_env = no' >> "$f"; \
+    fpmconf="$(dirname "$(dirname "$f")")/php-fpm.conf"; \
+    [ -f "$fpmconf" ] && echo "env[PATH] = /usr/local/bin:/usr/bin:/bin" >> "$fpmconf"; \
+  done && \
   echo "**** install diskover ****" && \
   if [ -z ${DISKOVER_RELEASE+x} ]; then \
     DISKOVER_RELEASE=$(curl -sX GET "https://api.github.com/repos/diskoverdata/diskover-community/releases" \

apps/diskover/start.sh

@@ -38,4 +38,4 @@ if [ -f "/config/diskover.cfg" ]; then
     done
 fi
 
-exec php8.3 -S 0.0.0.0:80 -t /app/diskover-web/public
+exec php -S 0.0.0.0:80 -t /app/diskover-web/public

apps/kasm/Dockerfile

@@ -16,8 +16,9 @@ ENV NVIDIA_DRIVER_CAPABILITIES="compute,graphics,video,utility"
 # Container setup
 RUN \
   echo "**** install packages ****" && \
-  curl -fsSL https://download.docker.com/linux/ubuntu/gpg | apt-key add - && \
-  echo "deb [arch=$TARGETARCH] https://download.docker.com/linux/ubuntu noble stable" > \
+  install -d -m 0755 /usr/share/keyrings && \
+  curl -fsSL https://download.docker.com/linux/ubuntu/gpg | gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg && \
+  echo "deb [arch=$TARGETARCH signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu noble stable" > \
     /etc/apt/sources.list.d/docker.list && \
   curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg \
     && curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | \
@@ -72,29 +73,17 @@ RUN \
   echo "**** add installer ****" && \
   curl -o \
     /tmp/kasm.tar.gz -L \
-    "https://github.com/kasmtech/kasm-install-wizard/releases/download/${VERSION}/kasm_release.tar.gz" && \
+    "https://kasm-static-content.s3.amazonaws.com/kasm_release_${VERSION}.tar.gz" && \
   tar xf \
     /tmp/kasm.tar.gz -C \
     / && \
   ALVERSION=$(cat /kasm_release/conf/database/seed_data/default_properties.yaml |awk '/alembic_version/ {print $2}') && \
-  curl -o \
-    /tmp/images.tar.gz -L \
-    "https://kasm-ci.s3.amazonaws.com/${VERSION}-images-combined.tar.gz" && \
-  tar xf \
-    /tmp/images.tar.gz -C \
-    / && \
   sed -i \
     '/alembic_version/s/.*/alembic_version: '${ALVERSION}'/' \
     /kasm_release/conf/database/seed_data/default_images_a* && \
   sed -i 's/-N -e -H/-N -B -e -H/g' /kasm_release/upgrade.sh && \
   echo "exit 0" > /kasm_release/install_dependencies.sh && \
-  /kasm_release/bin/utils/yq_$(uname -m) -i \
-    '.services.proxy.volumes += "/kasm_release/www/img/thumbnails:/srv/www/img/thumbnails"' \
-    /kasm_release/docker/docker-compose-all.yaml && \
   echo "**** copy assets ****" && \
-  cp \
-    /kasm_release/www/img/thumbnails/*.png /kasm_release/www/img/thumbnails/*.svg \
-    /wizard/public/img/thumbnails/ && \
   cp \
     /kasm_release/conf/database/seed_data/default_images_a* \
     /wizard/ && \