This is what I do for an IR camera project.

Set up everything how I like it, set root read-only and mount tmpfs in various areas such as /var/log etc..