Drop
A rootless Linux sandbox for developers, built on user namespaces with optional gVisor isolation, that confines coding agents and third-party packages without leaving your normal work environment.
Drop is a rootless Linux sandbox that isolates programs, including coding agents run with permission checks turned off and packages installed from PyPI, npm, or elsewhere, without requiring a separate container setup. Unlike Docker or Podman, it uses the host's existing Linux distribution, so already-installed programs are available inside the sandbox, and each environment gets its own hidden home directory, similar in spirit to Python's virtualenv.
It runs inside a Linux user namespace with its own process, mount, network, IPC, and cgroup namespaces, and drops user-namespace capabilities before running the sandboxed program, so that program cannot perform privileged operations such as bind mounts. A high-level configuration language controls which files, directories, and local network services the sandbox can see, with new environments sharing a base config by default.
As an option, Drop can run a sandboxed program on the gVisor user-space kernel for an additional layer of isolation from the host kernel. It requires no root privileges to use.