You can mount the base filesystem read only in the container as of 1.10, with tmpfs mounts for where you need ephemeral mutation.