- mounted volume is now read-only
- arguments may be passed to docker-run