logoalt Hacker News

JoshTripletttoday at 2:38 PM1 replyview on HN

So, the primary advantage of this over bubblewrap is the insulation layer between the program and kernel syscalls?


Replies

mixedbittoday at 2:52 PM

Bubblewrap is a low level tool, it describes itself as a sandbox building block, rather than a high-level sandbox intended to be used directly (for example, Flatpak uses bubblewrap as its building block). Drop in contrast is high-level, designed to be used directly in day-to-day work without the need to assemble the low-level details of the sandbox.