Show HN: Drop – A rootless Linux sandbox with gVisor support

**Drop** 是一款旨在提供安全、隔离环境的工具，用于运行编程智能体（coding agents）和不受信任的第三方程序，无需配置复杂的容器。与 Docker 不同，Drop 直接使用你现有的 Linux 发行版，使你安装的所有软件都能在沙盒环境中立即使用。主要特性包括： * **增强安全性：** 通过创建一次性主目录并利用 Linux 命名空间（namespaces），Drop 可以防止恶意代码（如 `rm -rf ~`）或未经授权的网络访问触及你的实际文件或凭据。 * **无根执行（Rootless）：** 它完全在无需 root 权限的情况下运行，并剥离了相关功能以防止未经授权的系统操作。 * **灵活配置：** 高级的 TOML 接口允许你精确定义哪些文件、目录和网络服务暴露给沙盒。 * **内核隔离：** 为进一步提高安全性，Drop 提供了可选的 gVisor 集成，通过提供用户空间内核来缓解主机内核漏洞风险。本质上，Drop 允许你在熟悉的工作流程中安全地执行高风险代码或可疑软件包，确保任何潜在的危害都被严格限制在沙盒内。

Isolate programs and coding agents without leaving your familiar work environment

Install Drop

Use cases

Isolate coding agents
Run agents with --dangerously-skip-permissions and let Drop enforce permissions at the OS level. A hallucinated rm -rf ~ doesn’t touch your actual home dir. A prompt injection targeting ~/.ssh finds nothing. A connection to services running on localhost is rejected.
Isolate third-party programs
Install programs from PyPI, npm or any other source without giving them full access to your user account. If an installed program is malicious or compromised in a supply chain attack, the damage is contained within the sandbox.

How it works

Disposable, isolated environments
Inspired by Python’s virtualenv, Drop lets you create and enter easily disposable environments. Each environment has its own home directory while the original home is hidden.
Your existing distribution
Unlike Docker/Podman, Drop uses your existing distribution, so there is no container setup work: every program you’ve already installed is available in the sandbox.
Flexible config language
High-level TOML config lets you specify which files, dirs and local network services should be exposed to the sandbox. By default, all Drop environments share a base config, so you can configure Drop once and then create new environments without any configuration work.
Rootless
Drop doesn’t require root to run. It runs within a Linux user namespace, with its own process, mount, network, IPC and cgroup namespaces. Drop drops all the user namespace capabilities before executing a sandboxed program, so the program cannot do privileged operations within the user namespace, like bind mounts.
gVisor integration
As an option, Drop supports running programs on the gVisor user-space kernel. This is an additional isolation layer that prevents programs from accessing the host kernel directly, significantly reducing the potential to exploit kernel vulnerabilities.