diff --git a/content/manuals/desktop/features/wsl/best-practices.md b/content/manuals/desktop/features/wsl/best-practices.md index 8c646c41ffca..d4db57121c38 100644 --- a/content/manuals/desktop/features/wsl/best-practices.md +++ b/content/manuals/desktop/features/wsl/best-practices.md @@ -14,7 +14,7 @@ This page covers recommendations when running Docker Desktop on Windows using WS Always use the latest version of WSL. -At a minimum you must use WSL version 2.1.5, otherwise Docker Desktop may not work as expected. Testing, development, and documentation is based on the newest kernel versions. Older versions of WSL can cause: +At a minimum you must use WSL version 2.1.5, otherwise Docker Desktop may not work as expected. Additionally, if you intend to use Enhanced Container Isolation, ensure you’re using WSL version 2.6 or later. This is required because ECI depends on a Linux kernel version of at least 6.3.0, and WSL 2.6+ bundles Linux kernel version 6.6. Testing, development, and documentation is based on the newest kernel versions. Older versions of WSL can cause: - Docker Desktop to hang periodically or when upgrading - Deployment via SCCM to fail - The `vmmem.exe` to consume all memory diff --git a/content/manuals/desktop/setup/install/windows-install.md b/content/manuals/desktop/setup/install/windows-install.md index 1e31f92337a5..520e43a22058 100644 --- a/content/manuals/desktop/setup/install/windows-install.md +++ b/content/manuals/desktop/setup/install/windows-install.md @@ -48,6 +48,7 @@ _For checksums, see [Release notes](/manuals/desktop/release-notes.md)_ {{< tab name="WSL 2 backend, x86_64" >}} - WSL version 2.1.5 or later. To check your version, see [WSL: Verification and setup](#wsl-verification-and-setup) +- If you intend to use Enhanced Container Isolation, ensure you’re using WSL version 2.6 or later. This is required because ECI depends on a Linux kernel version of at least 6.3.0, and WSL 2.6+ bundles Linux kernel version 6.6. - Windows 10 64-bit: Enterprise, Pro, or Education version 22H2 (build 19045). - Windows 11 64-bit: Enterprise, Pro, or Education version 23H2 (build 22631) or higher. - Turn on the WSL 2 feature on Windows. For detailed instructions, refer to the diff --git a/content/manuals/enterprise/security/hardened-desktop/enhanced-container-isolation/_index.md b/content/manuals/enterprise/security/hardened-desktop/enhanced-container-isolation/_index.md index 3f9b58e90830..2c2169621039 100644 --- a/content/manuals/enterprise/security/hardened-desktop/enhanced-container-isolation/_index.md +++ b/content/manuals/enterprise/security/hardened-desktop/enhanced-container-isolation/_index.md @@ -18,6 +18,8 @@ Enhanced Container Isolation (ECI) prevents malicious containers from compromisi - ECI strengthens container isolation and locks in security configurations created by administrators, such as [Registry Access Management policies](/manuals/enterprise/security/hardened-desktop/registry-access-management.md) and [Settings Management](../settings-management/_index.md) controls. - ECI works alongside other Docker security features like reduced Linux capabilities, seccomp, and AppArmor. +If you are using WSL2 backend, ensure you’re running WSL version 2.6 or later. This is required because ECI depends on a Linux kernel version of at least 6.3.0, and WSL 2.6+ includes kernel version 6.6. + ## Who should use Enhanced Container Isolation? ECI is designed for: