Drop – A rootless Linux sandbox with gVisor support
Sandboxes coding agents and installed packages so a bad rm -rf can't touch your real home.
Drop creates disposable, rootless sandboxes using Linux user namespaces, so an AI coding agent running with --dangerously-skip-permissions can't touch your actual home directory or find your ~/.ssh keys. Unlike Docker, it uses your existing Linux distribution instead of a separate container image, so already-installed tools are available inside the sandbox without setup. An optional gVisor layer adds a user-space kernel for programs you don't fully trust, like packages pulled from npm or PyPI.
What holds up
- +Rootless — runs in a user namespace, no root privileges required.
- +Uses your existing distro instead of a container image, so installed tools just work.
- +Optional gVisor layer blocks direct host kernel access for extra isolation.
Mind the limits
- −Linux only — no macOS or Windows support mentioned.
- −gVisor's extra kernel isolation is opt-in, not on by default.
Picked here? Add the badge
Put it on your site. It links back to this page. Free for every listed product.
<a href="https://stillworks.dev/products/p/drop-a-rootless-linux-sandbox-with-gvisor-support/"><img src="https://stillworks.dev/badge/drop-a-rootless-linux-sandbox-with-gvisor-support.svg" alt="Picked by StillWorks" width="230" height="54"></a>