docker run --read-only --tmpfs /tmp

docker run --read-only --tmpfs /tmp

read_only

https://docs.linuxserver.io/misc/read-only/#why

containerSecurityContext in K8s

Docker security

K8s security context, containerSecurityContext, podSecurityContext, readOnlyRootFilesystem

• read_only, readOnlyRootFilesystem
• readOnlyRootFilesystem, emptyDir, read_only, --read-only