WHAT IT DOES

What does it do?

Drop creates disposable isolated environments within an existing Linux distribution without separate container setup. Users specify which files, directories, and local services to expose in TOML and can optionally use the gVisor user-space kernel as an additional isolation layer. Each environment gets its own home directory, while the original home directory is hidden.

KEY FEATURES

Key features

• Restrict coding agents’ access to files and local services at the operating-system level
• Create disposable sandboxes with separate home directories
• Use the existing Linux distribution and installed programs
• Configure exposed files, directories, and local network services with TOML
• Run in Linux namespaces without root privileges
• Optionally use the gVisor user-space kernel