fix(dracut) mount boot filesystem as ro so it's not dirty when it boots