On: make rootfs in guest readonly

April 2008