feat(jumpserver): move to v5, building KoKo, Lina and Luna from source

JumpServer v5 only ships Docker images: KoKo, Lina and Luna no longer
publish prebuilt release assets, Lion is gone (KoKo now drives guacd
itself) and the Luna release is the desktop client. Build the three
from source at the core's tag, with Go, Zig/Ghostty, usql and
k8s-bundle versions read from KoKo's own build files.

Review follow-ups: guacd comes from the latest apache/guacamole-server
tag, the bootstrap token is generated inside the core config step,
nginx_enable_site replaces the hand-rolled enable/restart, and the
sizing note is dropped from the JSON.

Author: opastorello

ct/jumpserver.sh

@@ -15,7 +15,7 @@ var_disk="${var_disk:-50}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
-#var_arm64="${var_arm64:-no}" # unset = ask the user; koko/lion ship arm64 binaries and guacd builds fine on arm64, but the combined stack has not actually been run on arm64
+#var_arm64="${var_arm64:-no}" # unset = ask the user; every component builds from source with arm64-capable toolchains, but the stack has only been run on amd64
 
 header_info "$APP"
 variables
@@ -32,20 +32,34 @@ function update_script() {
     exit
   fi
 
-  if check_for_gh_release "jumpserver" "jumpserver/jumpserver" "" "" "v4."; then
+  if check_for_gh_tag "guacd" "apache/guacamole-server"; then
+    msg_info "Stopping guacd"
+    systemctl stop guacd
+    msg_ok "Stopped guacd"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_tag "guacd" "apache/guacamole-server"
+
+    msg_info "Building guacd"
+    cd /opt/guacd
+    $STD autoreconf -fi
+    $STD ./configure --with-systemd-dir=/etc/systemd/system --disable-guacenc
+    $STD make -j"$(nproc)"
+    $STD make install
+    $STD ldconfig
+    systemctl daemon-reload
+    systemctl start guacd
+    msg_ok "Built guacd"
+  fi
+
+  if check_for_gh_release "jumpserver" "jumpserver/jumpserver" "" "" "v5."; then
     msg_info "Stopping Services"
-    systemctl stop jumpserver koko lion
+    systemctl stop jumpserver koko
     msg_ok "Stopped Services"
 
-    create_backup /opt/jumpserver/config.yml /opt/jumpserver/data/media /opt/koko/config.yml /opt/lion/config.yml
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jumpserver" "jumpserver/jumpserver" "tarball" "latest" "" "" "v4."
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "koko" "jumpserver/koko" "prebuild" "latest" "/opt/koko" "koko-v4.*-linux-$(arch_resolve amd64 arm64).tar.gz" "v4."
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "lion" "jumpserver/lion-release" "prebuild" "latest" "/opt/lion" "lion-v*-linux-$(arch_resolve amd64 arm64).tar.gz"
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "lina" "jumpserver/lina" "prebuild" "latest" "/opt/lina" "lina-v4.*.tar.gz" "v4."
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "luna" "jumpserver/luna" "prebuild" "latest" "/opt/luna" "luna-v4.*.tar.gz" "v4."
+    create_backup /opt/jumpserver/config.yml /opt/jumpserver/data /opt/koko/config.yml /opt/koko/data
 
-    restore_backup
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "jumpserver" "jumpserver/jumpserver" "tarball" "latest" "" "" "v5."
+    JMS_TAG="v$(<~/.jumpserver)"
 
     msg_info "Updating Python Environment"
     cd /opt/jumpserver
@@ -61,10 +75,71 @@ function update_script() {
       fi
       sleep 15
     done
+    cd /opt/jumpserver/apps
+    $STD ../.venv/bin/python3 manage.py compilemessages
     msg_ok "Updated Python Environment"
 
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_tag "koko" "jumpserver/koko" "$JMS_TAG"
+
+    GHOSTTY_COMMIT=$(grep -oP 'libghostty-vt:ghostty-\K[0-9a-f]+' /opt/koko/Dockerfile-base)
+    ZIG_VERSION=$(grep -oP 'libghostty-vt:ghostty-[0-9a-f]+-zig-\K[0-9.]+' /opt/koko/Dockerfile-base)
+    USQL_VERSION=$(grep -oP 'ARG USQL_VERSION=\K\S+' /opt/koko/Dockerfile-base)
+    K8S_BUNDLE_VERSION=$(grep -oP 'ARG K8S_BUNDLE_VERSION=\K\S+' /opt/koko/Dockerfile-base)
+    GO_VERSION=$(grep -oP '^go \K\S+' /opt/koko/go.mod) setup_go
+
+    if [[ "$(cat ~/.libghostty-vt 2>/dev/null)" != "$GHOSTTY_COMMIT" ]]; then
+      fetch_and_deploy_from_url "https://ziglang.org/download/${ZIG_VERSION}/zig-$(arch_resolve x86_64 aarch64)-linux-${ZIG_VERSION}.tar.xz" "/opt/zig"
+      fetch_and_deploy_from_url "https://github.com/ghostty-org/ghostty/archive/${GHOSTTY_COMMIT}.tar.gz" "/opt/ghostty"
+
+      msg_info "Building libghostty-vt"
+      rm -rf /opt/libghostty-vt
+      cd /opt/ghostty
+      $STD /opt/zig/zig build -Demit-lib-vt -Doptimize=ReleaseFast -Dcpu=baseline --prefix /opt/libghostty-vt
+      rm -rf /opt/ghostty /opt/zig ~/.cache/zig
+      echo "$GHOSTTY_COMMIT" >~/.libghostty-vt
+      msg_ok "Built libghostty-vt"
+    fi
+
+    msg_info "Building KoKo"
+    cd /opt/koko
+    export PKG_CONFIG_PATH=/opt/libghostty-vt/share/pkgconfig
+    $STD make build VERSION="$JMS_TAG"
+    mv build/koko koko
+    rm -rf build
+    msg_ok "Built KoKo"
+
+    fetch_and_deploy_gh_release "usql" "jumpserver-dev/usql" "prebuild" "$USQL_VERSION" "/opt/usql" "usql-*-linux-$(arch_resolve amd64 arm64).tar.gz"
+    fetch_and_deploy_gh_release "k8s-bundle" "jumpserver-dev/k8s-bundle" "binary" "$K8S_BUNDLE_VERSION" "" "k8s-bundle_$(arch_resolve amd64 arm64).deb"
+
+    restore_backup
+
+    NODE_VERSION="24" NODE_MODULE="corepack" setup_nodejs
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_tag "lina" "jumpserver/lina" "$JMS_TAG" "/opt/lina-src"
+
+    msg_info "Building Lina"
+    cd /opt/lina-src
+    $STD yarn install --immutable
+    $STD yarn build:prod
+    rm -rf /opt/lina
+    mv lina /opt/lina
+    rm -rf /opt/lina-src
+    msg_ok "Built Lina"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_tag "luna" "jumpserver/luna" "$JMS_TAG" "/opt/luna-src"
+
+    msg_info "Building Luna"
+    cd /opt/luna-src
+    export ELECTRON_SKIP_BINARY_DOWNLOAD=1 PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD=1 HUSKY=0
+    $STD pnpm --filter jumpserver-web... install --frozen-lockfile --config.node-linker=isolated
+    $STD pnpm --config.node-linker=isolated --filter jumpserver-web web:generate
+    rm -rf /opt/luna
+    mv .output/public /opt/luna
+    rm -rf /opt/luna-src
+    msg_ok "Built Luna"
+
     msg_info "Starting Services"
-    systemctl start jumpserver koko lion
+    systemctl start jumpserver koko
     msg_ok "Started Services"
     msg_ok "Updated successfully!"
   fi