Documentation

How Drop works, what is isolated, filesystem layout, limitations

Install Drop from release binaries or build from source

Create, enter and remove Drop environments

Configure which files, env vars and localhost services the sandbox can access

Optionally use the gVisor user-space kernel as an extra isolation layer

Variables Drop reads and sets

A walkthrough demonstrating the key commands and concepts