From 6895cac4162f19d595862f85279ba97868d03908 Mon Sep 17 00:00:00 2001
From: Valentin Lab <valentin.lab@kalysto.org>
Date: Mon, 10 Sep 2018 10:50:03 +0200
Subject: [PATCH] new: ``charm`` ressources should be read only

---
 bin/compose | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/compose b/bin/compose
index 918f47d..e11d8f7 100755
--- a/bin/compose
+++ b/bin/compose
@@ -1936,7 +1936,7 @@ _get_docker_compose_mixin_from_metadata_cached() {
                 if ! [ -e "$dest" ]; then
                     die "charm-resource: '$resource' does not exist (file: '$dest')."
                 fi
-                echo "  - $dest:$resource:rw"
+                echo "  - $dest:$resource:ro"
             done < <(echo "$metadata" | shyaml get-values-0 "charm-resources" 2>/dev/null)
                ) || return 1
         if [ "$volumes" ]; then