If this works for you: I've found that it's good practice to mount root as read-only once your software configuration is stable, and try to use tmpfs for everything.