rootfs: make sure the roofs is mounted ro

Change-Id: I0fdb43ae575dbea5d656f4c3c031509a3b34648d