Support recursive read-only (RRO) mounts: nerdctl run -v /foo:/bar:rro,rprivate
          #511
        
          
      
  Add this suggestion to a batch that can be applied as a single commit.
  This suggestion is invalid because no changes were made to the code.
  Suggestions cannot be applied while the pull request is closed.
  Suggestions cannot be applied while viewing a subset of changes.
  Only one suggestion per line can be applied in a batch.
  Add this suggestion to a batch that can be applied as a single commit.
  Applying suggestions on deleted lines is not supported.
  You must change the existing code in this line in order to create a valid suggestion.
  Outdated suggestions cannot be applied.
  This suggestion has been applied or marked resolved.
  Suggestions cannot be applied from pending reviews.
  Suggestions cannot be applied on multi-line comments.
  Suggestions cannot be applied while the pull request is queued to merge.
  Suggestion cannot be applied right now. Please check back later.
  
    
  
    
nerdctl run -v /foo:/bar:rroappends "rro,rprivate" (in addition to "ro") to the OCI mount option string slice.Requires:
Or:
Older version of runc just ignores "rro" option.
The "rro" option string conforms to the proposal in:
MOUNT_ATTR_RDONLY+AT_RECURSIVEutil-linux/util-linux#1501.