Add more tasks to read only preparation

I've now included most items on the debian ReadonlyRoot page with a few FIXME
items left in the role and a few i've skipped (like samba). I and still tossing
up what to do with suck and udev and if i should do anything at all.