Continuing the discussion from Linux Weekly News: Key Stories Ahead of This Week:
Drop uses Linux namespaces plus optional gVisor to give each “environment” its own disposable home directory with selected config mounts, letting developers run untrusted tools without ceding full access to their real $HOME.