Nice work. Some feedback is attached.

For example, the build-option survey is not trying to solve an equation but test for combinations of build-options that break the build when combined together.

In D58700#1347628, @dteske wrote:

On the proposed commit messages, I think Robert (@fuz) will agree, I think we would put:

Reviewed by: dteske, fuz
Approved by: dteske (mentor), fuz (mentor)

Or if Robert wants, co-mentor.

Looking good here.

I'm relieved, I never managed to find time to get one.

In D58699#1347230, @kfv wrote:

@fuz: I don't have access to the doc repository. Am I expected to handle this myself, or do we need a doc committer to take care of it on our behalf?

Commit message looks workable.

Please post the commit message you plan to use so I can then give approval for commit.

In D58688#1346727, @kib wrote:

In D58688#1346717, @inquire_JohnEricson.me wrote:

@fuz You may be interested in https://github.com/catern/rsyscall, which I referenced in my original 2022 freebsd-arch email linked in the patch description. It adopts the same philosophy.

We have ptrace({PT_SC_REMOTE). Allowing remote syscalls as a generic facility without attaching to the target as debugger is IMO not acceptable.

In D58688#1346727, @kib wrote:

In D58688#1346717, @inquire_JohnEricson.me wrote:

@fuz You may be interested in https://github.com/catern/rsyscall, which I referenced in my original 2022 freebsd-arch email linked in the patch description. It adopts the same philosophy.

We have ptrace({PT_SC_REMOTE). Allowing remote syscalls as a generic facility without attaching to the target as debugger is IMO not acceptable.

It sounds like this could perhaps be simplified by having a pdsyscall system call that executes a system call on the given process descriptor. Then all manipulations on the zygote process just become normal system calls carried out through pdsyscall and activating a process image becomes a call to execve() or similar through pdsyscall. In particular this avoids having to add new stuff every time we come up with something new that we want to set up before sending off the new process.

Looks reasonable.