Drop

Drop is a rootless Linux sandbox for developers that isolates coding agents and third party programs while keeping the familiar work environment intact. Inspired by Python's virtualenv, it lets a user create and enter disposable environments, each with its own home directory while the real home directory stays hidden. A sandboxed agent that runs a destructive delete command or a prompt injection that goes looking for SSH keys finds nothing of value, and connections to services on localhost are rejected. It is built for developers who want to run AI coding agents with permission prompts turned off and let the operating system enforce the limits instead, and for anyone installing packages from PyPI, npm or other sources who wants a supply chain compromise contained. Unlike Docker or Podman, Drop uses the existing Linux distribution, so every installed program is available inside the sandbox without container setup. A high level TOML configuration defines which files, directories and local network services the sandbox can reach, and all environments share a base configuration. Drop runs inside a Linux user namespace with its own process, mount, network, IPC and cgroup namespaces, and it drops all user namespace capabilities before running a program. Optional gVisor integration adds a user space kernel for a further isolation layer. Drop is free and open source, published on GitHub under the Apache 2.0 license. There is no paid tier. The documentation includes a guided tour of sandboxing Claude. Drop runs only on Linux.