step 1 into generating a readonly rootfs