Skip to content

Commit 2d446e2

Browse files
update WSL Linux kernel version requirement (#24525)
<!--Delete sections as needed --> ## Description <!-- Tell us what you did and why --> ## Related issues or tickets https://docker.slack.com/archives/C03SR28ANP4/p1774388364841409?thread_ts=1774375828.284229&cid=C03SR28ANP4 <!-- Related issues, pull requests, or Jira tickets --> ## Reviews <!-- Notes for reviewers here --> <!-- List applicable reviews (optionally @tag reviewers) --> - [x] Technical review - [x] Editorial review - [ ] Product review
1 parent b7b9c67 commit 2d446e2

3 files changed

Lines changed: 4 additions & 1 deletion

File tree

content/manuals/desktop/features/wsl/best-practices.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ This page covers recommendations when running Docker Desktop on Windows using WS
1414

1515
Always use the latest version of WSL.
1616

17-
At a minimum you must use WSL version 2.1.5, otherwise Docker Desktop may not work as expected. Testing, development, and documentation is based on the newest kernel versions. Older versions of WSL can cause:
17+
At a minimum you must use WSL version 2.1.5, otherwise Docker Desktop may not work as expected. Additionally, if you intend to use Enhanced Container Isolation, ensure you’re using WSL version 2.6 or later. This is required because ECI depends on a Linux kernel version of at least 6.3.0, and WSL 2.6+ bundles Linux kernel version 6.6. Testing, development, and documentation is based on the newest kernel versions. Older versions of WSL can cause:
1818
- Docker Desktop to hang periodically or when upgrading
1919
- Deployment via SCCM to fail
2020
- The `vmmem.exe` to consume all memory

content/manuals/desktop/setup/install/windows-install.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,7 @@ _For checksums, see [Release notes](/manuals/desktop/release-notes.md)_
4848
{{< tab name="WSL 2 backend, x86_64" >}}
4949

5050
- WSL version 2.1.5 or later. To check your version, see [WSL: Verification and setup](#wsl-verification-and-setup)
51+
- If you intend to use Enhanced Container Isolation, ensure you’re using WSL version 2.6 or later. This is required because ECI depends on a Linux kernel version of at least 6.3.0, and WSL 2.6+ bundles Linux kernel version 6.6.
5152
- Windows 10 64-bit: Enterprise, Pro, or Education version 22H2 (build 19045).
5253
- Windows 11 64-bit: Enterprise, Pro, or Education version 23H2 (build 22631) or higher.
5354
- Turn on the WSL 2 feature on Windows. For detailed instructions, refer to the

content/manuals/enterprise/security/hardened-desktop/enhanced-container-isolation/_index.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,8 @@ Enhanced Container Isolation (ECI) prevents malicious containers from compromisi
1818
- ECI strengthens container isolation and locks in security configurations created by administrators, such as [Registry Access Management policies](/manuals/enterprise/security/hardened-desktop/registry-access-management.md) and [Settings Management](../settings-management/_index.md) controls.
1919
- ECI works alongside other Docker security features like reduced Linux capabilities, seccomp, and AppArmor.
2020

21+
If you are using WSL2 backend, ensure you’re running WSL version 2.6 or later. This is required because ECI depends on a Linux kernel version of at least 6.3.0, and WSL 2.6+ includes kernel version 6.6.
22+
2123
## Who should use Enhanced Container Isolation?
2224

2325
ECI is designed for:

0 commit comments

Comments
 (0)