# Minimal GNOME workstation with the Microsoft Intune app, Microsoft Edge and
# Microsoft Defender for Endpoint, for testing Intune enrollment and Linux
# compliance policies. Local accounts only: no Kanidm, because the Intune app
# needs its own authselect profile (pam_intune) for the password checks.

metadata:
  summary: Fedora minimal GNOME workstation with Microsoft Intune and Defender

variables:
  # Opt out of the upstream fedora.yaml so we don't pull the Firefox RPM.
  distro: "fedora-intune"
  variant: "intune"

# Keep it small: no weak/optional dependencies.
recommends: false

default_target: graphical.target

ref: fedora-intune/${releasever_ref}/${basearch}/intune

include:
  - base-atomic.yaml
  - custom.yaml
  - intune.yaml
  - defender.yaml