Microsoft WSL Containers Reach General Availability for Linux on Windows
Microsoft's Windows Subsystem for Linux now fully supports Linux containers, offering enhanced development workflows and management controls for IT administrators.
Microsoft has announced the general availability of WSL containers, a significant integration that allows Linux containers to run directly on Windows operating systems via the Windows Subsystem for Linux (WSL). This feature aims to streamline development processes for teams that predominantly use Windows laptops but require the flexibility and ecosystem of Linux containerization.
Administrators can now manage WSL containers through Microsoft Intune, offering granular control over their deployment. Key management options include the ability to completely disable the feature or to restrict image sources, ensuring that developers can only pull container images from approved registries. This control is designed to enforce organizational security and compliance requirements, preventing the use of potentially compromised or non-compliant container images.
The integration introduces a new command-line tool, wslc.exe, which also functions as an alias, container.exe, for users familiar with existing container commands. Furthermore, an API is provided to enable native Windows applications to interact with and run Linux containers, with local AI workloads highlighted as a prime use case. Since its public preview, Microsoft has enhanced the feature with additional commands for restarting containers, transferring files between the host and containers, checking the health of the container environment, and streaming container events in real-time.
Developer tooling has also seen integration improvements. Visual Studio Code's dev containers can now utilize wslc as their default driver, simplifying the setup and management of development environments. Additionally, the Aspire orchestration tool can recognize and treat WSL containers as a native container runtime, further embedding the technology into common development workflows.
Security monitoring is bolstered by Microsoft Defender for Endpoint, which now includes enhanced support for WSL containers. The security platform can track process, file, and network activity originating from within a container and correlate it with activity on the Windows host. This unified visibility is crucial for security analysts, eliminating the need for separate workflows to investigate incidents spanning both the host and container environments.
Microsoft claims that wslc offers up to twice the speed for accessing Windows files from Linux environments, although specific test conditions for this performance claim have not been provided. The release also introduces a new networking mode called 'consomme' specifically designed to improve container workflows. However, a notable gap remains: support for Docker Compose. Microsoft acknowledges this as a top feature request, with the goal of enabling existing compose.yaml files to run without modification in future updates.
The general availability of WSL containers marks a significant step towards bridging the gap between Windows and Linux development ecosystems. By bringing native Linux container support to Windows, Microsoft is catering to the needs of modern development teams who require the power of containers without the friction of dual-booting or complex virtual machine setups. The focus on administrative controls and security integration suggests a mature enterprise-ready solution.