Installing intune-portal on Fedora 42

Ask Fedora
, ,
1

The IT department of my current employer requires to install intune-portal from Microsoft.
This intune-portal officially supports Ubuntu 24.04, 22.04, 20.04 and RHEL 8, 9.

I’m trying to install it according to Get the Microsoft Intune app for Linux | Microsoft Learn with several trivial adoptions. For example to install their repo I just downloaded https://packages.microsoft.com/config/rhel/9/prod.repo and copied it into /etc/yum.repos.d/ms-rhel9-prod.repo.

When I try to install intune-portal it complains that it can’t find the java-11-openjdk dependency. The java-11-openjdk package was available up to the previous Fedora 41 but now it’s not officially available in Fedora 42 repos. Is it still available in some Copr or any other alternative repository?

$ sudo dnf install intune-portal
Updating and loading repositories:
Repositories loaded.
Failed to resolve the transaction:
Problem: conflicting requests
  - package intune-portal-1.2311.1-1.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - package intune-portal-1.2312.10-3.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - package intune-portal-1.2401.19-3.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - package intune-portal-1.2405.9-1.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - package intune-portal-1.2405.17-1.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - package intune-portal-1.2411.12-1.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - package intune-portal-1.2503.10-1.el9.x86_64 from packages-microsoft-com-prod requires microsoft-identity-broker, but none of the providers can be installed
  - nothing provides java-11-openjdk needed by microsoft-identity-broker-1.6.0-1.x86_64 from packages-microsoft-com-prod
  - nothing provides java-11-openjdk needed by microsoft-identity-broker-1.7.0-1.x86_64 from packages-microsoft-com-prod
  - nothing provides java-11-openjdk needed by microsoft-identity-broker-2.0.0-1.x86_64 from packages-microsoft-com-prod
  - nothing provides java-11-openjdk needed by microsoft-identity-broker-2.0.1-1.x86_64 from packages-microsoft-com-prod
You can try to add to command line:
  --skip-broken to skip uninstallable packages
4

You might be able to get the f41 version and try installing that.

FYI maintaining the java openjdk became a huge problem and the decision was made to drop fedora packaging of it.

More info in this topic Old Java LTS versions unavailable on F42

Edi: And I think the way to get openjdk.

5

Do they want to install that on your personal laptop?

I would personally advise against it, as intune is integrated somewhat deeply into the system.

Instead, I recommend running them in a virtual machine (you can use Ubuntu, which is officially supported). If you’re willing to do some tinkering, you could also use Distrobox with minimal overhead (see [Discussion] Trying to understand why intune-portal doesn't work inside of distrobox · Issue #625 · 89luca89/distrobox · GitHub).

Additionally, refer to What info can your organization see when you enroll your device? | Microsoft Learn for the best-case scenario of what they can access on your device.

1 Like
6

This is my work laptop. I use it personally but it’s owned by the employer.

7

You might be able to get the f41 version and try installing that.

Will it work in future versions of Fedora as well?

8

I’m not knowledgeable on the details sorry.

9

Are there any alternatives to the intune that employer could accept even in theory?

10

Unlikely. It is not officially supported by Microsoft on Fedora.

11

This was a pain to fix on fedora atomic.

rpm-ostree has a releasever flag but apparently it does nothing and it’s not even listed in the man page. So I had to manually download and install the rpm packages for java-11-openjdk and its dependency java-11-openjdk-headless. This is not optimal because those packages are never gonna receive updates and will inevitably stop working sometime in the future.

Hopefully microsoft can update the dependency from java-11-openjdk to a more supported version

12

I am using intune-portal on Fedora.

I used it on Fedora 41, after that on Fedora 42 and now I updated to Fedora 43 and used it there.

You need to install temurin-11-jdk and link to the path required by the intune service.

[[ ! -e /usr/lib/jvm/jre-11-openjdk ]] && [[ -e /usr/lib/jvm/temurin-11-jdk ]] && ln -s temurin-11-jdk /usr/lib/jvm/jre-11-openjdk
13

I would STRONGLY advice against directly editing stuff inside /usr/lib. It would be much better, as shown in this github issue, to edit the microsoft-identity-device-broker.service so that it points to the correct java home exposed by temurin-11-jdk

14

You are abolutely right.

15

I’ve been trying to make it work using temurin, but none of the two approaches have worked. I gotta revert to the openjdk package from f41