add READONLY var to internal docker run