{"slug": "drop", "name": "Drop", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 6, "commenters": 7, "warners": 0, "score": 5.949, "rising": 4.67, "first": "2025-11-20", "latest": "2026-09-22", "why": "I started using Drop a few weeks ago, and I've been very happy with it so far", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 6, "neutral": 1, "compare": 0, "warn": 0}, "spark": [1, 0, 0, 0, 0, 0, 0, 0, 0, 1, 4, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I started using Drop a few weeks ago, and I've been very happy with it so far", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/wrr/drop", "official_url": "https://github.com/wrr/drop", "pricing": "", "aliases": ["Drop", "drop"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 796882384, "item_id": 49805149, "url": "https://news.ycombinator.com/item?id=49805149", "by": "XJ6w9dTdM", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "Drop appears to do a few similar things, and it seems to fit well with how I use such systems", "excerpt": "As everyone mention, there are a lot of implementations of this idea, and not only for agent workflows. My own approach has the following features, hopefully that gets stolen into an actual softawre package at some point: - Generate bwrap options (for use in bwrap or gVisor) rather than build the sandbox itself. I wont't trust a random sandbox. - UDS based automatic HTTP proxy with popup or allowlist and reverse prox", "context": "has own bwrap-based sandbox approach", "use_case": "sandboxing agent workflows", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796850336, "item_id": 49803146, "url": "https://news.ycombinator.com/item?id=49803146", "by": "p2004a", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "I started using Drop a few weeks ago, and I've been very happy with it so far", "excerpt": "Thank you for building it! I started using Drop a few weeks ago, and I've been very happy with it so far (thanks again for quickly fixing a few issues I've reported :)!). For me, it nails the convenience vs isolation aspect quite well, and I would like to get to a point where I can use it for all my development by default. The main challenges that I still have, which none of the solutions I've found so far resolve, a", "context": "", "use_case": "Rootless Linux sandbox", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796839986, "item_id": 49802499, "url": "https://news.ycombinator.com/item?id=49802499", "by": "saghm", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "I'm definitely going to try this out and see how well it works for me.", "excerpt": "This is super interesting to me. I've slowly been working on something similar (https://gitlab.com/saghm/tartarus) because my ideal sandboxing is \"prevent writing to anything outside this dir but still allow reading to most things so that I don't have to manually copy things into a container/VM\". I approached it by trying to figure out how to build up a bubblewrap based on a config that gave the properties I wanted, ", "context": "", "use_case": "Linux sandbox", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796832464, "item_id": 49802029, "url": "https://news.ycombinator.com/item?id=49802029", "by": "yu3zhou4", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "Looks like something critical to gain adoption these days, security-wise", "excerpt": "Gratulacje Jan! Looks like something critical to gain adoption these days, security-wise. For others who also wonder how it works, I find this docs page a bit more informative than the landing page https://droprun.sh/docs/sandbox-overview/", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 788166960, "item_id": 49260435, "url": "https://news.ycombinator.com/item?id=49260435", "by": "neop1x", "date": "2026-08-11", "version": null, "stance": "recommend", "quote": "which configures bubblewrap based on a simple yaml config specific for the project path and it is enough for me", "excerpt": "On Linux I am using https://github.com/wrr/drop which configures bubblewrap based on a simple yaml config specific for the project path and it is enough for me. I won't use anything requiring a login.", "context": "", "use_case": "sandboxing project paths", "switched_from": "", "story": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents"}]}], "caveats": [], "who": [{"by": "XJ6w9dTdM", "context": "has own bwrap-based sandbox approach", "url": "https://news.ycombinator.com/item?id=49805149", "date": "2026-09-22"}], "tags": [], "use_cases": ["sandboxing agent workflows", "rootless linux sandbox", "linux sandbox", "sandboxing project paths", "sandboxing tool"], "compared": [{"slug": "bwrap", "name": "bwrap", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "podman", "name": "Podman", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "bubblewrap", "name": "bubblewrap", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [{"id": 796909872, "item_id": 49806867, "url": "https://news.ycombinator.com/item?id=49806867", "by": "gregwebs", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "The tool inherited this feature from the prior implementation and its something I am still exploring.", "excerpt": "You definitely want to do that. I have a Github App that I use for my AI agents, and that has its own associated restricted credential. There are going to be cases where you want to white list an org or a repo for read access that is not under your control and Github filtering will be a simple way to do that. Github can be a source of hostile code, prompt injections, and exfiltration- you may want to lock down using ", "context": "", "use_case": "rootless sandbox for AI agents", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796875184, "item_id": 49804699, "url": "https://news.ycombinator.com/item?id=49804699", "by": "mixedbit", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "environments are explicit (`drop ls` lists them) and can be removed with `drop rm`", "excerpt": "This table shows which dirs are exposed from your system: https://droprun.sh/docs/sandbox-overview/#filesystem-layout Compared to your setup: * /usr is from your host, so you don't need to maintain a separate image to have programs that you already have installed. * username, hostname, your current directory and home dir paths are preserved in the sandbox (within a Podman container a home dir is /root) * environment ", "context": "", "use_case": "rootless Linux sandbox", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 782299472, "item_id": 48893717, "url": "https://news.ycombinator.com/item?id=48893717", "by": "mixedbit", "date": "2026-07-13", "version": null, "stance": "recommend", "quote": "I work on a sandbox which has similar isolation level to Podman", "excerpt": "I work on a sandbox which has similar isolation level to Podman (rootless Linux user namespaces), but with UX optimized for local development work. Take a look: https://github.com/wrr/drop Basically, you don't enter a separate container in which you install a new distro, but you run on top of your current distro. You have environment specific home dirs which isolate your original home, but can have some files, such a", "context": "", "use_case": "Local dev sandbox", "switched_from": "", "story": "Grok uploaded my user directory to xAI's servers"}, {"id": 779316752, "item_id": 48707297, "url": "https://news.ycombinator.com/item?id=48707297", "by": "mixedbit", "date": "2026-06-28", "version": null, "stance": "recommend", "quote": "I work on a Linux sandbox that makes it easy to hide sensitive files from AI agents while keeping the files they need accessible.", "excerpt": "I work on a Linux sandbox that makes it easy to hide sensitive files from AI agents while keeping the files they need accessible. Check it out: https://github.com/wrr/drop", "context": "", "use_case": "hide sensitive files from AI agents", "switched_from": "", "story": "A way to exclude sensitive files issue still open for OpenAI Codex"}, {"id": 775209296, "item_id": 48450581, "url": "https://news.ycombinator.com/item?id=48450581", "by": "mixedbit", "date": "2026-06-08", "version": null, "stance": "recommend", "quote": "I made a sandbox to productively work with agents while restricting files they can read and write", "excerpt": "I made a sandbox to productively work with agents while restricting files they can read and write: https://github.com/wrr/drop", "context": "", "use_case": "sandbox for coding agents", "switched_from": "", "story": "Ask HN: What are tools you have made for yourself since the advent of AI"}, {"id": 763973376, "item_id": 47748336, "url": "https://news.ycombinator.com/item?id=47748336", "by": "mixedbit", "date": "2026-04-12", "version": null, "stance": "recommend", "quote": "I'm working on a sandbox for Linux terminal work with UX similar to Python virtualenv", "excerpt": "I'm working on a sandbox for Linux terminal work with UX similar to Python virtualenv: https://github.com/wrr/drop", "context": "", "use_case": "Virtualenv-like terminal sandbox", "switched_from": "", "story": "Ask HN: What Are You Working On? (April 2026)"}], "threads": [{"url": "https://news.ycombinator.com/item?id=49801329", "title": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support", "mentions": 7}, {"url": "https://news.ycombinator.com/item?id=49239751", "title": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48892512", "title": "Grok uploaded my user directory to xAI's servers", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48706714", "title": "A way to exclude sensitive files issue still open for OpenAI Codex", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48449187", "title": "Ask HN: What are tools you have made for yourself since the advent of AI", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=47741527", "title": "Ask HN: What Are You Working On? (April 2026)", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {"recommend": 4, "neutral": 1}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 796882384, "item_id": 49805149, "url": "https://news.ycombinator.com/item?id=49805149", "by": "XJ6w9dTdM", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "Drop appears to do a few similar things, and it seems to fit well with how I use such systems", "excerpt": "As everyone mention, there are a lot of implementations of this idea, and not only for agent workflows. My own approach has the following features, hopefully that gets stolen into an actual softawre package at some point: - Generate bwrap options (for use in bwrap or gVisor) rather than build the sandbox itself. I wont't trust a random sandbox. - UDS based automatic HTTP proxy with popup or allowlist and reverse prox", "context": "has own bwrap-based sandbox approach", "use_case": "sandboxing agent workflows", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796874002, "item_id": 49804625, "url": "https://news.ycombinator.com/item?id=49804625", "by": "nign", "date": "2026-09-22", "version": null, "stance": "neutral", "quote": "This section of the docs might be helpful for you", "excerpt": "This section of the docs might be helpful for you https://droprun.sh/docs/sandbox-overview/#filesystem-layout", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796850336, "item_id": 49803146, "url": "https://news.ycombinator.com/item?id=49803146", "by": "p2004a", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "I started using Drop a few weeks ago, and I've been very happy with it so far", "excerpt": "Thank you for building it! I started using Drop a few weeks ago, and I've been very happy with it so far (thanks again for quickly fixing a few issues I've reported :)!). For me, it nails the convenience vs isolation aspect quite well, and I would like to get to a point where I can use it for all my development by default. The main challenges that I still have, which none of the solutions I've found so far resolve, a", "context": "", "use_case": "Rootless Linux sandbox", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796839986, "item_id": 49802499, "url": "https://news.ycombinator.com/item?id=49802499", "by": "saghm", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "I'm definitely going to try this out and see how well it works for me.", "excerpt": "This is super interesting to me. I've slowly been working on something similar (https://gitlab.com/saghm/tartarus) because my ideal sandboxing is \"prevent writing to anything outside this dir but still allow reading to most things so that I don't have to manually copy things into a container/VM\". I approached it by trying to figure out how to build up a bubblewrap based on a config that gave the properties I wanted, ", "context": "", "use_case": "Linux sandbox", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 796832464, "item_id": 49802029, "url": "https://news.ycombinator.com/item?id=49802029", "by": "yu3zhou4", "date": "2026-09-22", "version": null, "stance": "recommend", "quote": "Looks like something critical to gain adoption these days, security-wise", "excerpt": "Gratulacje Jan! Looks like something critical to gain adoption these days, security-wise. For others who also wonder how it works, I find this docs page a bit more informative than the landing page https://droprun.sh/docs/sandbox-overview/", "context": "", "use_case": "", "switched_from": "", "story": "Show HN: Drop \u2013 A rootless Linux sandbox with gVisor support"}, {"id": 788166960, "item_id": 49260435, "url": "https://news.ycombinator.com/item?id=49260435", "by": "neop1x", "date": "2026-08-11", "version": null, "stance": "recommend", "quote": "which configures bubblewrap based on a simple yaml config specific for the project path and it is enough for me", "excerpt": "On Linux I am using https://github.com/wrr/drop which configures bubblewrap based on a simple yaml config specific for the project path and it is enough for me. I won't use anything requiring a login.", "context": "", "use_case": "sandboxing project paths", "switched_from": "", "story": "Docker Sandboxes \u2013 Disposable, isolated sandboxes for AI agents"}, {"id": 761337585, "item_id": 47583599, "url": "https://news.ycombinator.com/item?id=47583599", "by": "mixedbit", "date": "2026-03-30", "version": null, "stance": "recommend", "quote": "Check also https://github.com/wrr/drop which is a higher-level tool than bwrap.", "excerpt": "Check also https://github.com/wrr/drop which is a higher-level tool than bwrap. It allows you to make such isolated sandboxes with minimal configuration.", "context": "", "use_case": "Sandboxing tool", "switched_from": "", "story": "Axios Compromised on NPM \u2013 Malicious Versions Drop Remote Access Trojan"}, {"id": 736028384, "item_id": 46001774, "url": "https://news.ycombinator.com/item?id=46001774", "by": "sellmesoap", "date": "2025-11-20", "version": null, "stance": "recommend", "quote": "", "excerpt": "What about b.o.b.? https://bob.osau.re/", "context": "", "use_case": "", "switched_from": "", "story": "Android and iPhone users can now share files, starting with the Pixel 10"}]}