Skip to main content

Takumi Guard: Admin Deployment Adds WSL Support

· 2 min read
Yoshiaki Matsutomo
Yoshiaki Matsutomo
Software Engineer @ GMO Flatt Security Inc.

Takumi Guard admin deployment now supports configuring WSL (Windows Subsystem for Linux). The wrapper script for the logged-on user configures Guard on the Windows host and on all of the user's registered WSL distributions with the same organization user token.

Overview​

If your developers use WSL as a development environment, configuring Guard only on the Windows host leaves package installs inside WSL going around Guard. The wrapper script for the logged-on user in the Windows deployment examples now also configures Guard on the user's WSL distributions alongside the Windows host.

The Windows host and WSL share the same organization user token, so adding WSL does not consume additional licenses. Each environment — the Windows host and each WSL distribution — is configured independently, so a failure in one environment does not stop the others. If any environment fails, the exit code is non-zero, so your management tool can detect it.

If you don't need Guard on WSL, set $ConfigureWsl to $false at the top of the wrapper script to target only the Windows host.

Note that, due to a Windows design constraint, WSL can be configured only by the wrapper script for the logged-on user. See "Configuring Windows Subsystem for Linux (WSL)" in the guide for details.

Getting Started​

Take the wrapper script from "Configure only the logged-on user" in the Admin Deployment guide and deliver it through a method that runs the script with user privileges, such as Microsoft Intune's "Run this script using the logged on credentials" option.

If you already use admin deployment

WSL support is a wrapper-script feature. Update the wrapper script you distribute to the latest version published in the guide.

Paid Feature

This feature requires a Takumi subscription with Guard enabled. See Pricing and Billing for details.

Getting Started with Your Organization​

To use Guard's organization features (admin deployment, installation log search, etc.), you need a Takumi subscription with Guard enabled.

  1. Go to https://cloud.shisho.dev/hello/takumi and sign in
  2. Register your organization and subscribe to Takumi
  3. Navigate to Guard > Settings from the sidebar
  4. Click "Enable" to activate Guard

Once Guard is enabled, follow the Admin Deployment guide to begin setup.