runc/mount/readonly.go

// +build linux

package mount

import (
	"syscall"
)

func SetReadonly() error {
	return syscall.Mount("/", "/", "bind", syscall.MS_BIND|syscall.MS_REMOUNT|syscall.MS_RDONLY|syscall.MS_REC, "")
}