machine-id needs to remain in /etc but generate it when missing. The current state of a read-only machine-id across all instances is kinda broken so lets not replicate that part :)