{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/11439","labels_url":"https://api.github.com/repos/docker/docker/issues/11439/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/11439/comments","events_url":"https://api.github.com/repos/docker/docker/issues/11439/events","html_url":"https://github.com/docker/docker/issues/11439","id":62360413,"number":11439,"title":"Force Read Only","user":{"login":"UserTaken","id":8722625,"avatar_url":"https://avatars.githubusercontent.com/u/8722625?v=3","gravatar_id":"","url":"https://api.github.com/users/UserTaken","html_url":"https://github.com/UserTaken","followers_url":"https://api.github.com/users/UserTaken/followers","following_url":"https://api.github.com/users/UserTaken/following{/other_user}","gists_url":"https://api.github.com/users/UserTaken/gists{/gist_id}","starred_url":"https://api.github.com/users/UserTaken/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/UserTaken/subscriptions","organizations_url":"https://api.github.com/users/UserTaken/orgs","repos_url":"https://api.github.com/users/UserTaken/repos","events_url":"https://api.github.com/users/UserTaken/events{/privacy}","received_events_url":"https://api.github.com/users/UserTaken/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-17T10:53:54Z","updated_at":"2015-03-19T02:06:41Z","closed_at":"2015-03-19T02:06:41Z","body":"The recent addition of being able to run containers as read only can be useful so it'd be great if there are ways enforce it to run as read only everytime without having to specify during `docker run/create` such as in a Dockerfile or when creating images manually."},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/83265789","html_url":"https://github.com/docker/docker/issues/11439#issuecomment-83265789","issue_url":"https://api.github.com/repos/docker/docker/issues/11439","id":83265789,"user":{"login":"cpuguy83","id":799078,"avatar_url":"https://avatars.githubusercontent.com/u/799078?v=3","gravatar_id":"","url":"https://api.github.com/users/cpuguy83","html_url":"https://github.com/cpuguy83","followers_url":"https://api.github.com/users/cpuguy83/followers","following_url":"https://api.github.com/users/cpuguy83/following{/other_user}","gists_url":"https://api.github.com/users/cpuguy83/gists{/gist_id}","starred_url":"https://api.github.com/users/cpuguy83/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cpuguy83/subscriptions","organizations_url":"https://api.github.com/users/cpuguy83/orgs","repos_url":"https://api.github.com/users/cpuguy83/repos","events_url":"https://api.github.com/users/cpuguy83/events{/privacy}","received_events_url":"https://api.github.com/users/cpuguy83/received_events","type":"User","site_admin":false},"created_at":"2015-03-19T02:06:41Z","updated_at":"2015-03-19T02:06:41Z","body":"Since read-only root fs is really a runtime configuration, we cannot force all users of a particular image to be read-only.\r\nThis would be better enforced at the in an authorization layer.\r\n\r\nClosing since I believe this is an intended design decision. "}}