Mount packages as read only in jails, and only add new created packages in the package directory if they are ok
Mount the ports and the options as readonly
Directly create the pkgng repositories using pkg-static from host without having to execute inside the jail while here only extract pkg-static nothing more is needed
run pkg repo on the right directory
MASTERMNT doesn't exist on 2.3.x, use JAILMNT
2.3.x does not have MASTERNAME
Build package directly on host path since packages is mounted read-only in jail path
Don't mount /var/db/ports read-only yet, it needs more work to fix testport -c
Exclude the builder name from JAILNAME
mnt is not set on 2.3.x, use JAILMNT
Merge sandboxed/atomic (per-port) packaging from trunk