NEWS

Microsoft Announces General Availability of WSL Containers

Published:

Microsoft announced the general availability (GA) of WSL containers on September 29, 2026, marking a significant milestone in positioning Windows as a primary platform for building, running, and managing Linux workloads. Developers can access the feature immediately by running wsl --update in their terminal or by downloading the latest release from GitHub.

Native CLI and API Access for Container Management

The GA release introduces direct tools for building, running, and deploying Linux containers on Windows without requiring separate third-party runtimes. Developers can utilize the dedicated CLI tool wslc.exe or its alias container.exe to execute familiar container commands. In addition, the WSL containers API enables native Windows applications to launch and manage Linux containers programmatically, streamlining local AI workflows and cloud-native testing.

Key capabilities introduced or refined with this release include:

  • Container lifecycle commands such as wslc container restart and archive-based file transfer via wslc container cp
  • Observability features including wslc system info and live activity streaming with wslc events
  • Network management commands (wslc network connect/disconnect) supporting custom driver options
  • Health checks, custom mount configurations (--mount), and configurable stop timeouts (--stop-timeout)
  • Configurable storage locations to assign container data to specific host drives

Enterprise Governance via Intune and Defender Integration

To facilitate deployment across corporate environments, Microsoft expanded enterprise management and security controls for WSL containers.

The existing Microsoft Defender for Endpoint (MDE) plugin for WSL now inspects container operations. MDE correlates process, file, and network telemetry originating inside WSL containers with the Windows host, enabling security teams to monitor and investigate anomalous behavior within their unified security consoles.

Through Microsoft Intune, system administrators can enforce organizational compliance via two primary controls:

  • Access Control: Centrally enable or disable the WSL containers feature across managed devices.
  • Registry Allow Lists: Restrict container image downloads exclusively to approved, compliant registries.

Ecosystem Integrations and Future Roadmap

WSL containers is integrating into popular development tools across the ecosystem. Support is available for Visual Studio Code dev containers using wslc as the underlying runtime, .NET Aspire, the VS Code Container Extension, the Lazywslc terminal interface, and the WSL Container Desktop WinUI 3 dashboard.

Microsoft outlined ongoing investments in core platform infrastructure. The current release delivers up to 2x faster cross-OS file access speeds when reading Windows files from Linux, alongside a new “consomme” network mode designed to improve connectivity across complex network setups. Next on the roadmap, the team is actively developing native Docker Compose support to allow developers to run wsl compose up with existing compose.yaml files without modification.