Show HN: Drop – a rootless Linux sandbox with gVisor support

Linux sandboxing that doesn't get in your way Isolate programs and coding agents without leaving your familiar work environment Install Drop

Isolate coding agents Run agents with --dangerously-skip-permissions and let Drop enforce permissions at the OS level. A hallucinated rm -rf ~ doesn't touch your actual home dir. A prompt injection targeting ~/.ssh finds nothing. A connection to services running on localhost is rejected.

Isolate third-party programs Install programs from PyPI, npm or any other source without giving them full access to your user account. If an installed program is malicious or compromised in a supply chain attack, the damage is contained within the sandbox.

Disposable, isolated environments Inspired by Python's virtualenv, Drop lets you create and enter easily disposable environments. Each environment has its own home directory while the original home is hidden.