alt Hacker NewsI’m really curious to see what the answer for MDM and Group Policy is on Linux. The SSO part is mostly figured out, but the reason places use Windows is often manageability.
Is there anyone doing MDM or policy enforcement on Linux other than Google Workspace + chromebooks?
Replies
yearolinuxdsktp • today at 1:16 PM
Osquery https://codeberg.org/DAWO/DAWO-Core/issues/92 via https://sextantfleet.org/ looks to be what they are using (run by main contributor)… all “policy” is via NixOS… how tenable that will be we will see, but the landing page is heavy on compliance with audits
It's Nix so you just push the new generation to the device. It's probably the easiest possible way to do device management. It's also generally like two lines of extra config to wrap a block into a container if you want to hide some of the underlying OS tools completely, which I've never tried with a full desktop environment but I'd assume should basically just work if you pass a couple things like GPU?