Overview
The four ideas you need to understand how emberd actually works.
These four pages cover the moving parts behind the simple HTTP API. Read them in order for the full picture, or jump to whichever you're debugging.
Sandbox lifecycle
What create, exec, and delete actually do — step by step, with the real code paths.
The vsock control plane
The host↔guest wire protocol, the hybrid-vsock handshake, and why we don't use net.Conn in the guest.
The guest rootfs
The custom initramfs, the overlayfs root, and the initramfs-style switch_root.
Language packs
How language_pack selects a rootfs and interpreter, and how the interpreter reaches the guest.