Investigate using Hermit as an alternative to Docker and custom strace

[pgoodman]

https://github.com/facebookexperimental/hermit

[pgoodman]

It uses https://github.com/facebookexperimental/reverie to intercept syscalls.

[tnytown]

Seems like Hermit may not support AArch64 yet (?), although removing the Docker dependency will be nice.

At minimum, we might be able to replace our hacked-together strace with a Reverie implementation.

[ESultanik]

As of November, 2024, we no longer use a custom strace; we now use vanilla strace. It would be nice to abandon Docker, but what Docker gives us is the ability to…

1. Start with a clean slate operating system with zero packages installed so we can resolve all dependencies, regardless of which dependencies are already installed on the host system;
2. Install and uninstall packages at will without polluting the host system's environment;
3. (Theoretically) do the package resolution search in parallel, since we could have multiple Docker containers running at the same time with different package configurations; and
4. Snapshot package installation state for quick backtracking.

Would Hermit give us the same?