Show HN: Drop – a rootless Linux sandbox with gVisor support
New rootless Linux sandbox 'Drop' announced, using user namespaces and gVisor to isolate coding agents and third-party software from the host system.
A new open-source tool called Drop is announced, providing a rootless Linux sandbox environment with optional gVisor integration for isolating programs and coding agents. Drop leverages Linux user namespaces and optional gVisor kernel virtualization to contain potential damage from malicious software or supply chain attacks without requiring root access or a full container runtime like Docker. It aims to secure development workflows, particularly for AI agents and untrusted dependencies.
40