Show HN: Drop – a rootless Linux sandbox with gVisor support
Summary
Drop is a rootless Linux sandbox with optional gVisor support designed to isolate programs and coding agents within disposable environments. It emphasizes using the host distribution without container setup, offers a high-level TOML config for exposure controls, and provides a security boost by running in user namespaces and optionally leveraging gVisor to reduce kernel attack surface.