‹ BackHN Continuity

Thread

Show HN: Drop – A rootless Linux sandbox with gVisor support

193 points · 63 comments · mixedbit

  1. JoshTriplett · · focus · HN ↗
    So, the primary advantage of this over bubblewrap is the insulation layer between the program and kernel syscalls?
    1. mixedbit · · focus · HN ↗
      Bubblewrap is a low level tool, it describes itself as a sandbox building block, rather than a high-level sandbox intended to be used directly (for example, Flatpak uses bubblewrap as its building block). Drop in contrast is high-level, designed to be used directly in day-to-day work without the need to assemble the low-level details of the sandbox.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.