‹ BackHN Continuity

Thread

Show HN: Drop – A rootless Linux sandbox with gVisor support

193 points · 63 comments · mixedbit

  1. zoobab · · focus · HN ↗
    Have you ever tried to use proot?

    It does not use process namespaces, and can run on Android (on Termux with proot-distro).

    1. mixedbit · · focus · HN ↗
      No, I haven't tried it, thanks for the pointer. It looks like something that could be used by Drop instead of Linux namespaces. I didn't yet encounter any obvious limitation of the namespaces (other that some distros, like Ubuntu, are keeping programs' access to the user namespace creation behind AppArmor allowlist, which makes the Drop installation more involved).
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.