WSL containers are generally available on Windows

Source: Help Net Security

Author: Anamarija Pogorelec

URL: https://www.helpnetsecurity.com/2026/09/30/microsoft-wsl-containers-available/

ONE SENTENCE SUMMARY:

Microsoft’s generally available WSL containers bring Linux container workflows to Windows with Intune governance, tooling integrations, and Defender visibility, though Compose support remains missing.

MAIN POINTS:

  1. WSL containers are now generally available for running Linux containers on Windows.
  2. Installation occurs via wsl --update or Microsoft’s GitHub releases.
  3. Administrators can disable the feature or constrain image sources for security.
  4. Intune adds controls to enable/disable WSL containers on managed endpoints.
  5. Registry allow-listing restricts image pulls to approved container registries.
  6. A new CLI, wslc.exe, includes container.exe alias for familiar commands.
  7. Windows apps can invoke Linux containers through a provided API.
  8. Added functionality includes restart, file copy, environment state checks, and health checks.
  9. VS Code dev containers and Aspire integrate with WSL containers as a runtime.
  10. Defender for Endpoint correlates container process, file, and network telemetry to the Windows host.

TAKEAWAYS:

  1. Governance improves by managing WSL container availability and registries through Intune.
  2. Development teams gain container tooling parity via CLI, API, and IDE/runtime integrations.
  3. Security investigations are streamlined with Defender’s host-linked container telemetry.
  4. Performance claims cite faster Windows-file access, but lack disclosed benchmarking conditions.
  5. Compose support is the largest current limitation, with compatibility a stated goal.