Skip to content

Bypass default encryption policy when expanding sandbox vhdx#2572

Merged
anmaxvl merged 1 commit into
microsoft:mainfrom
PlayEveryWare:bypass_vhd_encryption_policy
Jun 12, 2026
Merged

Bypass default encryption policy when expanding sandbox vhdx#2572
anmaxvl merged 1 commit into
microsoft:mainfrom
PlayEveryWare:bypass_vhd_encryption_policy

Conversation

@mendsley

@mendsley mendsley commented Dec 9, 2025

Copy link
Copy Markdown
Contributor

This fixes the following error when running on machines with a policy to enforce bitlocker encryption on fixed drives

failed to create scratch layer: failed to expand sandbox vhdx size to #### bytes: FSCTL_EXTEND_VOLUME \\?\Volume{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}: The media is write protected.

Fixed: #2464

@thaJeztah

Copy link
Copy Markdown
Contributor

@ambarve PTAL if you have time; this may resolve an issue with Docker that people ran into.

@tpr-biometric

Copy link
Copy Markdown

It would be really helpful for us if this PR was merged so we use Windows containers with BitLocker.

@anmaxvl

anmaxvl commented Jun 11, 2026

Copy link
Copy Markdown
Contributor

@mendsley, can you rebase, please? CI got stuck it seems.

This fixes the following error when running on machines with a policy to
enforce bitlocker encryption on fixed drives

```
failed to create scratch layer: failed to expand sandbox vhdx size to #### bytes: FSCTL_EXTEND_VOLUME \\?\Volume{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx}: The media is write protected.
```

Fixed: microsoft#2464
Signed-off-by: Matthew Endsley <mendsley@gmail.com>
@mendsley mendsley force-pushed the bypass_vhd_encryption_policy branch from 9d0b60e to 8545bcb Compare June 11, 2026 20:29
@mendsley

Copy link
Copy Markdown
Contributor Author

@anmaxvl this has been rebased onto main

@anmaxvl anmaxvl merged commit dfcacee into microsoft:main Jun 12, 2026
19 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Containers Fail To Start When Fixed Drive Bitlocker Is Enforced

4 participants