Add --read-only for read only container rootfs Upstream-commit: 95c0f07966035ce79c6b51a2eee8c60c59fb523c Component: engine