Show HN: Drop – A rootless Linux sandbox with gVisor support

Category: security

Tags: sandbox, linux, gvisor, namespaces, security, rootless

Score: 7.8/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 8)

Drop is a rootless Linux sandboxing tool that creates disposable, virtualenv-like environments using namespaces and optionally gVisor. It preserves the user's existing distribution and configuration while isolating processes from sensitive files and network services, making it ideal for safely running coding agents or untrusted third-party programs without container overhead.

Target audience: developers, devops, security engineers, data scientists

Repository: https://droprun.sh/ · Go · Apache-2.0 · 389 stars

View on Hacker News