Hacker GitHub

← All repos

wrr/drop

View on GitHub ↗ ★ 395 Go

Linux sandboxing that doesn't get in your way

10 mentions on Hacker News by 2 people: 2 stories, 8 comments · first 2026-03-24 · latest 2026-08-11

Mentions per year 10 mentions · busiest year 2026 (10)
20082026
AllStoriesComments NewestTopOldest
  1. On Linux I am using https://github.com/wrr/drop which configures bubblewrap based on a simple yaml config specific for the project path and it is enough for me. I won't use anything requiring a login.
    comment by neop1x · 2026-08-11 · in Docker Sandboxes – Disposable, isolated sandboxes for AI agents
  2. …[1] or Docker are much more convenient alternatives to user/group isolation for this purpose. [1] https://github.com/wrr/drop
    comment by neop1x · 2026-07-15 · in I tricked Claude into leaking your deepest, darkest secrets
  3. …(rootless Linux user namespaces), but with UX optimized for local development work. Take a look: https://github.com/wrr/drop Basically, you don't enter a separate container in which you install a new distro, but you run on top of your…
    comment by mixedbit · 2026-07-13 · in Grok CLI uploaded the whole home directory to GCS
  4. …to hide sensitive files from AI agents while keeping the files they need accessible. Check it out: https://github.com/wrr/drop
    comment by mixedbit · 2026-06-28 · in A way to exclude sensitive files issue still open for OpenAI Codex
  5. I made a sandbox to productively work with agents while restricting files they can read and write: https://github.com/wrr/drop
    comment by mixedbit · 2026-06-08 · in Ask HN: What are tools you have made for yourself since the advent of AI?
  6. I'm working on a sandbox for Linux terminal work with UX similar to Python virtualenv: https://github.com/wrr/drop
    comment by mixedbit · 2026-04-13 · in Ask HN: What Are You Working On? (April 2026)
  7. Check also https://github.com/wrr/drop which is a higher-level tool than bwrap. It allows you to make such isolated sandboxes with minimal configuration.
    comment by mixedbit · 2026-03-31 · in Axios compromised on NPM – Malicious versions drop remote access trojan
  8. …on a sandboxing tool similarly based on an idea to point the user home dir to a separate location ( https://github.com/wrr/drop ). While I experimented with using overlayfs to isolate changes to the filesystem and it worked well as a…
    comment by mixedbit · 2026-03-28 · in Go hard on agents, not on your filesystem