Show HN: Drop – a rootless Linux sandbox with gVisor support

Automated excerpt

A hallucinated rm -rf ~ doesn’t touch your actual home dir. By default, all Drop then create new environments without any configuration work. RootlessDrop doesn’t require root to run. Drop drops all the user namespace capabilities before operations within the user namespace, like bind mounts. gVisor integrationAs an option, Drop supports running programs on the gVisor user-space kernel.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.