Microsoft has pushed WSL Containers to general availability, expanding the Windows Subsystem for Linux beyond distribution hosting into a full Linux container runtime that lives natively on Windows. The Windows Developer Blog confirmed the release on 29 September 2026, and the feature is accessible immediately by running wsl –update.
The journey to this point began at Microsoft Build 2026, where WSL Containers were first introduced, according to the Windows Command Line blog on Microsoft DevBlogs. Going from preview to generally available in a single development cycle is a fairly brisk turnaround, and the GA release arrives with a noticeably longer feature list than what shipped in preview.
What WSL Containers General Availability Actually Ships
Once updated, users get a new command-line tool, wslc.exe, plus a built-in alias, container.exe, for those who prefer more familiar container command patterns. Microsoft described the tool as allowing users to ‘directly build, run and deploy Linux containers on Windows, or use its built-in alias container.exe to run the same familiar container commands.’
Alongside the CLI sits a WSL Containers API, which lets Windows applications launch and interact with Linux containers programmatically. Microsoft framed that as ‘unlocking scenarios like running local AI workloads or using cloud-based containerized applications locally.’
The features missing from preview that now ship at GA make up a fairly practical list: restarting containers, copying files in and out, health checks, network connect and disconnect commands, real-time container events, mount support, and configurable storage locations. These are the bread-and-butter operations anyone who has used Docker or similar tooling will expect as standard, and their absence in preview was one of the more obvious friction points.
Performance is also part of the pitch. Microsoft says WSL Containers can already deliver up to 2x faster performance when accessing Windows files from Linux environments, a figure that addresses one of the longer-standing complaints about cross-OS file I/O in WSL.
Enterprise Controls and Developer Tooling
The enterprise additions are arguably the more consequential part of this release for IT teams. WSL Containers now integrates with Microsoft Defender for Endpoint, giving security teams visibility into process, file, and network activity inside containers and the ability to correlate that activity back to the Windows host. That is the kind of observability that enterprise security postures typically require before any new runtime is sanctioned for developer machines.
Microsoft Intune gets a role here too. Administrators can use it to disable WSL Containers entirely or restrict developers to pulling images only from approved container registries. ‘With container registry allow lists, administrators can define approved registries and help ensure developers only pull container images from that list, that meet organizational security and compliance requirements,’ Microsoft noted. The combination of Defender telemetry and Intune policy gives organisations meaningful levers over what actually runs on managed Windows machines.
On the developer tooling side, VS Code Dev Containers can now use wslc as their default driver. Aspire and the VS Code Containers extension both support WSL Containers as well, which means the feature slots into existing workflows rather than demanding a parallel setup.
Docker Compose Support Is on the Way
The most-requested missing capability is Docker Compose-style orchestration, and Microsoft has confirmed it is working on it. The stated aim is for wsl compose up to work with existing compose.yaml files without modification. ‘We’ve started on this and hope to share more soon,’ the company said. Microsoft is also working on WSL’s underlying networking and cross-OS file performance more broadly, so the 2x file access figure may not be the ceiling.
The next concrete moment to watch for is whenever Microsoft surfaces the compose roadmap update it has promised. Given the Build-to-GA pace of WSL Containers itself, that may not be a long wait.
