MisthiosandClaude Opus 5.5
8e6fedc05e
Build containers / Compute changes (pull_request) Successful in 8s
Build containers / fedora-cosmic (rawhide) (pull_request) Canceled after 0s
Build containers / fedora-remote (44) (pull_request) Canceled after 0s
Build containers / fedora-intune (44) (pull_request) Canceled after 0s
Build containers / fedora-cosmic (44) (pull_request) Canceled after 7m11s
Build containers / Prune old releases and tags (pull_request) Skipped
Go with Entra ID sign-in through Himmelblau for fedora-intune and drop the Microsoft Intune app (intune-portal, identity broker) variant. With a single image, the workstation, Edge and Defender manifests move back from images/shared into images/fedora-intune, and CI builds just that image again. The Microsoft repo is now limited to mdatp and Edge. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
# Minimal GNOME workstation where users sign in with their Entra ID account
|
|
# (Himmelblau), with Microsoft Edge and Microsoft Defender for Endpoint.
|
|
# Himmelblau joins the device to Entra ID at the first sign-in and, with
|
|
# apply_policy, enrolls it in Intune and reports compliance.
|
|
|
|
metadata:
|
|
summary: Fedora minimal GNOME workstation with Entra ID sign-in and Intune
|
|
|
|
variables:
|
|
# Opt out of the upstream fedora.yaml so we don't pull the Firefox RPM.
|
|
distro: "fedora-intune"
|
|
variant: "intune"
|
|
|
|
# Keep it small: no weak/optional dependencies.
|
|
recommends: false
|
|
|
|
default_target: graphical.target
|
|
|
|
ref: fedora-intune/${releasever_ref}/${basearch}/intune
|
|
|
|
# Ship /opt as a plain read-only directory instead of a symlink to /var/opt.
|
|
# Defender installs to /opt/microsoft/mdatp and keeps its state in
|
|
# /var/opt/microsoft/mdatp; with the default symlink those are the same,
|
|
# read-only directory. Needs composefs, which upstream enables. The vendor
|
|
# directories are linked into /opt by finalize.d/60-opt-links.
|
|
opt-usrlocal: root
|
|
|
|
repos:
|
|
- himmelblau
|
|
- microsoft-rhel10
|
|
- microsoft-edge
|
|
|
|
include:
|
|
- base-atomic.yaml
|
|
- custom.yaml
|
|
# Entra ID sign-in and Intune.
|
|
- himmelblau.yaml
|
|
- microsoft-edge.yaml
|
|
- defender.yaml
|