Skip to content

fix(desktop): [upstream-bound] WSL backend binds the user's exposure host instead of 0.0.0.0 - #10358

Closed
Khang5687 wants to merge 1 commit into
pingdotgg:mainfrom
Khang5687:feat/wsl-bind-host
Closed

Khang5687 wants to merge 1 commit into
pingdotgg:mainfrom
Khang5687:feat/wsl-bind-host

Conversation

@Khang5687

Copy link
Copy Markdown

The WSL backend always bound 0.0.0.0 inside the distro, so "Limited to
this machine" was untrue for anyone with Tailscale or another interface
inside WSL. resolveWslStartConfig now takes the bind host from
DesktopServerExposure like the Windows primary: local-only binds
127.0.0.1 and skips the distro-IP probe (reachable via WSL2 localhost
forwarding); network-accessible keeps 0.0.0.0 plus the eth0 IP as the
renderer URL.

Relies on WSL2 localhost forwarding; unverified on a real WSL machine.

Fixes #9056
Closes Khang5687#2

(cherry picked from commit 3c3b4b51818ff4f4425af1222e0797ade9eff192)

…host instead of 0.0.0.0

The WSL backend always bound 0.0.0.0 inside the distro, so "Limited to
this machine" was untrue for anyone with Tailscale or another interface
inside WSL. resolveWslStartConfig now takes the bind host from
DesktopServerExposure like the Windows primary: local-only binds
127.0.0.1 and skips the distro-IP probe (reachable via WSL2 localhost
forwarding); network-accessible keeps 0.0.0.0 plus the eth0 IP as the
renderer URL.

Relies on WSL2 localhost forwarding; unverified on a real WSL machine.

Fixes pingdotgg#9056
Closes #2

(cherry picked from commit 3c3b4b51818ff4f4425af1222e0797ade9eff192)
@github-actions github-actions Bot added vouch:unvouched PR author is not yet trusted in the VOUCHED list. size:M 30-99 changed lines (additions + deletions). labels Sep 6, 2026
@Khang5687
Khang5687 marked this pull request as ready for review September 17, 2026 16:45

Copy link
Copy Markdown
Member

Note

This comment is posted by Julius' dot

This changes local-only WSL connections to depend on localhost forwarding, which the existing code documents as unreliable on some hosts. The PR reports no focused test results and explicitly leaves WSL reachability unverified, so it lacks verification evidence for that change. Please provide the backend-configuration test results and a check that the renderer reaches the loopback-bound backend while non-loopback access is blocked, then request reconsideration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:M 30-99 changed lines (additions + deletions). vouch:unvouched PR author is not yet trusted in the VOUCHED list.

Projects

None yet

2 participants