Add test command for read-only filesystem

README.md

@@ -61,6 +61,13 @@ make docker-test-no-internet
 
 Note that this won't catch Internet access that happens in your `/predict` endpoint.
 
+## Test that your container works with a read-only filesystem
+Your submission will run with a read-only filesystem. The directory `/tmp` will be writeable, but it is limited to `100MiB` of storage. You can test that your container works in this setting by using the flags `--read-only --tmpfs "/tmp"` in your `docker run` command:
+
+```bash
+make docker-test-readonly
+```
+
 
 ## What Happens When You Start the Server
 

makefile

@@ -29,6 +29,10 @@ docker-run:
 docker-test-no-internet:
 	docker run --rm -it --network none $(IMAGE)
 
+.PHONY: docker-test-readonly
+docker-test-readonly:
+	docker run --rm -it --read-only --tmpfs "/tmp" $(IMAGE)
+
 .PHONY: compile
 compile:
 	uv pip compile --python-version 3.12 --upgrade -o requirements.torch.cpu.txt.tmp requirements.torch.cpu.in