Early user p2004a reports positive experience with Drop
4 Sep 22 12:32 PM · 1d ago · 1 comment · 1 source · development 4 of 5
An active user confirms Drop addresses the convenience-versus-isolation tradeoff well but identifies remaining challenges around containerized application development and GUI application support.
“For me, it nails the convenience vs isolation aspect quite well, and I would like to get to a point where I can use it for all my development by default.”
p2004amixedbit (Jan) Drop creatorp2004a Drop early userrefibrillator Developer working on parallel solution
The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump
What people said 2 voices · verbatim
-
Glad to see this coming with gVisor support to help secure the Kernel- IMHO we should expect frontier models to find Kernel exploits.I am working on a project similar in spirit that uses microsandbox (libkrun) to run inside a tiny and fast VM. It includes other security properties that are needed for some workloads. * network allow lists *…
-
Can you explain a bit more about the boundary between the environment and my system? Is it just giving read-only access to /usr/lib?I use an alias to launch a Podman container with opencode in $PWD. It is fully ephemeral aside from the directories I map to it (usually a couple configs). XDG_HOME is local to that working dir. My only frustration is…
All 5 developments of Drop: rootless Linux sandbox for safer third-party code… →
Hacker NewsNewswires