# Minimal GNOME workstation where users sign in with their Entra ID account
# (Himmelblau), with Microsoft Edge and Microsoft Defender for Endpoint.
# Himmelblau joins the device to Entra ID at the first sign-in and, with
# apply_policy, enrolls it in Intune and reports compliance itself, so the
# Microsoft Intune app (fedora-intune) is not included.

metadata:
  summary: Fedora minimal GNOME workstation with Entra ID sign-in (Himmelblau)

variables:
  # Opt out of the upstream fedora.yaml so we don't pull the Firefox RPM.
  distro: "fedora-intune-himmelblau"
  variant: "intune-himmelblau"

# Keep it small: no weak/optional dependencies.
recommends: false

default_target: graphical.target

ref: fedora-intune-himmelblau/${releasever_ref}/${basearch}/intune-himmelblau

# /opt as a plain directory; see fedora-intune/manifest.yaml.
opt-usrlocal: root

repos:
  - himmelblau
  - microsoft-rhel10
  - microsoft-edge

include:
  - base-atomic.yaml
  # Shared with fedora-intune (images/shared).
  - workstation.yaml
  - microsoft-edge.yaml
  - defender.yaml
  # Entra ID sign-in and Intune.
  - himmelblau.yaml