ReadonlyRoot - Debian Wiki

You can use a filesystem without a journal for /, because you don't write there and you don't need the journal. This can be an ext4, too, hence you can take advantage of the improvements of ext4. Create the filesystem with mke2fs -t ext4 -O ^has_journal /dev/sda1 or remove the journal with tune2fs -O ^has_journal /dev/sda1. Special files in /etc You have to take care for some files in /etc. These

[kbkbkbkb1]

Debian で read only root file system 構築