Is it possible to mount /foo from the root filesystem as read-only and not propagate changes into a docker container? For example if /foo contains bar, I create a container,