-> % sudo chroot /
[1] 93188 killed sudo chroot /
-> % sudo dmesg | grep AMFI
[1281783.098834]: AMFI: hook..execve() hardened runtime not allowed in chrootAMFI: hook..execve() killing pid 93189: not allowed in chroot
The hardened runtime is enforced for all executables bundled as part of macOS. As such, chroot isn’t usable anymore for running a macOS CLI environment.
Things will work if you disable SIP: https://developer.apple.com/documentation/security/disabling_and_enabling_system_integrity_protection