Additional validation for container volumes and ports.
Support ro mode for volumes

Signed-off-by: Daniel Nephin <dnephin@gmail.com>