gVisor

Drop is a new open-source tool for sandboxing Linux applications without root privileges, and it supports gVisor, Google's application kernel for stronger isolation. It is currently the top post on Hacker News, where users are discussing the project and its approach to running untrusted code safely on a Linux machine. The reaction so far is mixed, with the technical community weighing its usefulness against existing sandboxing options.