mount root read-only
ignore miniroot