podman/docs/source/markdown/options/read-only.md

310 B

--read-only

Mount the container's root filesystem as read-only.

By default a container will have its root filesystem writable allowing processes to write files anywhere. By specifying the --read-only flag, the container will have its root filesystem mounted as read-only prohibiting any writes.