From 33602384b633410612b9dae09f1947638cecd7d3 Mon Sep 17 00:00:00 2001 From: "Patrick L. Hollis" Date: Fri, 24 Jul 2026 22:30:33 -0400 Subject: [PATCH] fix: warn about WSL impact of disabling VBS --- .../7. Security/Core Isolation (VBS)/Disable VBS.cmd | 6 ++++++ .../7. Security/Core Isolation (VBS)/Enable VBS.cmd | 2 +- .../AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1 | 2 +- src/playbook/playbook.conf | 2 +- 4 files changed, 9 insertions(+), 3 deletions(-) diff --git a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd index 5d00649c89..ea6976fbd0 100644 --- a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd +++ b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd @@ -16,6 +16,12 @@ fltmc > nul 2>&1 || ( exit /b ) +if /i not "%~1"=="/silent" ( + echo WARNING: Disabling VBS may prevent WSL2 and Docker Desktop from starting. + choice /c:yn /n /m "Continue? [Y/N] " + if errorlevel 2 exit /b +) + :: Update Registry (State and Path) reg add "HKLM\SOFTWARE\AtlasOS\Services\%settingName%" /v state /t REG_DWORD /d %stateValue% /f > nul reg add "HKLM\SOFTWARE\AtlasOS\Services\%settingName%" /v path /t REG_SZ /d "%scriptPath%" /f > nul diff --git a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd index a4d5a21e9b..be8b412e03 100644 --- a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd +++ b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd @@ -2,7 +2,7 @@ :: Change to match the setting name (e.g., Sleep, Indexing, etc.) set "settingName=VbsState" :: Change to 0 (Disabled) or 1 (Enabled/Minimal) etc -set "stateValue=0" +set "stateValue=1" set "scriptPath=%~f0" set "___args="%~f0" %*" diff --git a/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1 b/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1 index 7c5916b06e..5d7b354551 100644 --- a/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1 +++ b/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1 @@ -11,7 +11,7 @@ $kernelShadowStacks = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenar $credentialGuard = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard" if ($DisableAllVBS) { - Write-Warning "Disabling VBS features..." + Write-Warning "Disabling VBS features. This may prevent WSL2 and Docker Desktop from starting." # Memory Integrity New-ItemProperty -Path $memIntegrity -Name "Enabled" -Value 0 -PropertyType DWORD -Force # Need to be forced since Windows 11 24H2 diff --git a/src/playbook/playbook.conf b/src/playbook/playbook.conf index dce56c2269..0d25cf6e43 100644 --- a/src/playbook/playbook.conf +++ b/src/playbook/playbook.conf @@ -107,7 +107,7 @@ Atlas makes your computer snappier and more private with lots of usability impro disable-power-saving - Disable Core Isolation + Disable Core Isolation (may break WSL2/Docker) disable-core-isolation