1. man ports: In the Using a Read-Only Ports Tree section of man ports, I believe it should read PLIST_REPOSITORY instead of PLIST_DB.
(To support the change from PLIST_DB to PLIST_REPOSITORY, please note that man bsd.port.mk says PLIST_DB is deprecated. Also, make fix-permissions won't change permission if PLIST_DB is set in /etc/mk.conf, but it does work if PLIST_REPOSITORY is set.) 2. man bsd.port.mk: in the PORTS_PRIVSEP section, where one adds these commands to doas.conf: /usr/bin/touch, /usr/sbin/pkg_add, and /usr/sbin/pkg_delete, I think an additional line is needed: permit nopass setenv { TERM } solene cmd /usr/bin/env (To support this addtion, please see these lines in /usr/ports/infrastructure/mk/bsd.port.mk: SETENV ?= /usr/bin/env -i and ===> Installing . . . @${SUDO} ${SETENV} . . .) These are in snapshots 6.5-current #19 Wed Jun 12 01:15:09 MDT 2019