Drop

About Drop

Drop: a rootless Linux sandbox for developers. It isolates coding agents and third-party packages while preserving your work environment.

In the maker’s words

I created Drop because I always felt uneasy installing and running third-party programs using my main user account. A single compromised dependency means a full compromise of the system. What is even worse, because I ship software from my computer, a single compromised dependency can lead to compromise of all the users of my software. Containers and VMs are one solution, but for local work, they are often detrimental to productivity. It takes effort to configure a machine with all the tools and configs needed for productive work, but a container or a VM will be stripped of all these tools. This is great for production deployments, where the aim is a reproducible system with minimal dependencies, but can get in the way of productive local work. Drop is language independent, but the workflow is inspired by Python's virtualenv. With virtualenv the environment isolation is only a convention …

Where people found it

• Hacker NewsShow HN: Drop – A rootless Linux sandbox with gVisor support193 points63 comments11 days ago