EMILUA(3em)

💅 EMILUA — the manual page, but make it make sense 🎀

okay so real talk, this is EMILUA(3em) — that's the Emilua reference section 3em, bestie, and yes we're doing the whole page. no skimming. i gotchu 🫶

✨ NAME ✨

Emilua — it's a Lua execution engine. that's the whole name section. short, sweet, iconic, periodt. 👑

✨ SYNOPSIS ✨

the vibe check, in code, exactly as written:

local system = require "system"
system.seccomp_set_mode_filter(bpf_fprogram: byte_span)

so you pull in system, then you call system.seccomp_set_mode_filter with one arg, bpf_fprogram, which is a byte_span. that's it. that's the shape of it. 💖

✨ DESCRIPTION ✨

okay so here's what's actually going down: this function sets the secure computing — seccomp — mode for the calling process, and the whole point is to limit the available system calls. like, you're literally handing the kernel a bouncer with a guest list. 🔥

and here's the detail you cannot miss, ngl: SECCOMP_FILTER_FLAG_TSYNC is always used. always always. it's not an option you pass, it's not a flag you toggle, it's just what this function does. no cap. 🫶

⚠️ Note (read this one, fr fr): only the master VM is allowed to use this function. like, if you're not the master VM, this is not your moment. it's giving "sorry bestie, VIP only". 💀

🦋 a lil sign-off 🦋

this little masterpiece is from Emilua 0.12.1-nixpkgs1, and the date on it is 1980-01-01 (yes, really, that's the date, iconic of it honestly 🎀). that's the whole page — EMILUA(3em), rendered exactly like this, and you ate it up. mwah. 💜✨