intuneme provisions and manages a systemd-nspawn container running Microsoft Intune on an immutable Linux host. The container handles enrollment, compliance, and corporate resource access while making minimal changes to the host.
- Container lifecycle management (
init,start,stop,destroy,recreate) - Broker proxy for host-side single sign-on (Edge, VS Code, and other MSAL apps)
- Run MCP servers inside the container, wired to host stdio (
mcp) — for tools that must authenticate against the container's tenant - Device hotplug — YubiKey and webcam passthrough via udev rules
- GNOME Quick Settings extension for start/stop and app launch without a terminal
- Desktop shortcuts for Microsoft Edge and Intune Portal
Full documentation is at https://frostyard.github.io/intuneme/
go install github.com/frostyard/intuneme@latestAlternatively, Arch Linux users can install intuneme or intuneme-bin from the Arch User Repository (AUR):
- intuneme (build from source)
- intuneme-bin (pre-compiled binary)
See the contributing guide on the docs site.
MIT