Make bind-mounts in Docker example read-only
@@ -127,9 +127,9 @@ options and bind-mounts:
```bash
docker run -d -p 9100:9100 \
- -v "/proc:/host/proc" \
- -v "/sys:/host/sys" \
- -v "/:/rootfs" \
+ -v "/proc:/host/proc:ro" \
+ -v "/sys:/host/sys:ro" \
+ -v "/:/rootfs:ro" \
--net="host" \
quay.io/prometheus/node-exporter \
-collector.procfs /host/proc \
