Files
bootc-images/images/fedora-intune/manifest.yaml
T
MisthiosandClaude Opus 5.5 809bdc3bcb
Build containers / Compute changes (pull_request) Successful in 1s
Build containers / fedora-cosmic (rawhide) (pull_request) Failing after 21s
Build containers / fedora-cosmic (44) (pull_request) Failing after 28s
Build containers / fedora-remote (44) (pull_request) Failing after 28s
Build containers / fedora-intune (44) (pull_request) Failing after 25s
Build containers / Prune old releases and tags (pull_request) Skipped
fedora-intune: minimal GNOME workstation with Intune and Defender
New image for testing Microsoft Intune enrollment and Linux compliance
policies: a minimal GNOME workstation (gnome-initial-setup, Ptyxis,
Files) with the Intune app, the Microsoft identity broker, Edge and
Defender for Endpoint (mdatp) from packages.microsoft.com (RHEL 10
builds, limited to those packages with includepkgs).

No Kanidm: the Intune app installs its own authselect profile with
pam_intune for the password compliance checks. Its %post cannot select
the profile or load the SELinux module during a compose, so both are
redone in postprocess.

build.sh now copies every *.yaml of an image, so manifests can be split
into more files than manifest.yaml and custom.yaml.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-19 09:50:01 +00:00

26 lines
765 B
YAML

# Minimal GNOME workstation with the Microsoft Intune app, Microsoft Edge and
# Microsoft Defender for Endpoint, for testing Intune enrollment and Linux
# compliance policies. Local accounts only: no Kanidm, because the Intune app
# needs its own authselect profile (pam_intune) for the password checks.
metadata:
summary: Fedora minimal GNOME workstation with Microsoft Intune and Defender
variables:
# Opt out of the upstream fedora.yaml so we don't pull the Firefox RPM.
distro: "fedora-intune"
variant: "intune"
# Keep it small: no weak/optional dependencies.
recommends: false
default_target: graphical.target
ref: fedora-intune/${releasever_ref}/${basearch}/intune
include:
- base-atomic.yaml
- custom.yaml
- intune.yaml
- defender.yaml