diff --git a/examples/docker.yml b/examples/docker.yml
index a21bb42fb..c12384970 100644
--- a/examples/docker.yml
+++ b/examples/docker.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0 console=tty0 page_poison=1"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: sysctl
     image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
diff --git a/examples/gcp.yml b/examples/gcp.yml
index 3334ab04f..9e8798351 100644
--- a/examples/gcp.yml
+++ b/examples/gcp.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0 page_poison=1"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: sysctl
     image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
diff --git a/examples/sshd.yml b/examples/sshd.yml
index f17ac49a7..9d238af3f 100644
--- a/examples/sshd.yml
+++ b/examples/sshd.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0 page_poison=1"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: sysctl
     image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
diff --git a/examples/vmware.yml b/examples/vmware.yml
index 3074ef1ca..cdaf5647d 100644
--- a/examples/vmware.yml
+++ b/examples/vmware.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=tty0 page_poison=1"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: sysctl
     image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
diff --git a/moby.yml b/moby.yml
index 9f86204da..db7992798 100644
--- a/moby.yml
+++ b/moby.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0 console=tty0 page_poison=1"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: sysctl
     image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
diff --git a/pkg/init/etc/init.d/rcS b/pkg/init/etc/init.d/rcS
index 739407bf2..7dd576c2f 100755
--- a/pkg/init/etc/init.d/rcS
+++ b/pkg/init/etc/init.d/rcS
@@ -105,4 +105,13 @@ ip link set lo up
 # for containerising dhcpcd and other containers that need writable etc
 mkdir /tmp/etc
 mv /etc/resolv.conf /tmp/etc/resolv.conf
-ln -snf /tmp/etc/resolv.conf /etc/resolv.conf
\ No newline at end of file
+ln -snf /tmp/etc/resolv.conf /etc/resolv.conf
+
+# remount rootfs as readonly
+mount -o remount,ro /
+
+# bind and remount containers and var as read-write
+mount -o bind /containers /containers
+mount -o bind /var /var
+mount -o remount,rw,relatime /containers /containers
+mount -o remount,rw,nodev,nosuid,relatime /var /var
diff --git a/test/ltp/test-ltp.yml b/test/ltp/test-ltp.yml
index 55d98172a..3eb15dcaf 100644
--- a/test/ltp/test-ltp.yml
+++ b/test/ltp/test-ltp.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: ltp
     image: "mobylinux/test-ltp-20170116:fdca2d1bb019b1d51e722e6032c82c7933d4b870"
diff --git a/test/test.yml b/test/test.yml
index 903cb96e9..cea097f53 100644
--- a/test/test.yml
+++ b/test/test.yml
@@ -1,7 +1,7 @@
 kernel:
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: binfmt
     image: "mobylinux/binfmt:bdb754f25a5d851b4f5f8d185a43dfcbb3c22d01"
diff --git a/test/virtsock/test-virtsock-server.yml b/test/virtsock/test-virtsock-server.yml
index 6961296e8..d3e6bdda4 100644
--- a/test/virtsock/test-virtsock-server.yml
+++ b/test/virtsock/test-virtsock-server.yml
@@ -5,7 +5,7 @@ kernel:
   # image: "mobylinux/kernel:4.9.14-0"
   image: "mobylinux/kernel:4.9.x"
   cmdline: "console=ttyS0 page_poison=1"
-init: "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
+init: "mobylinux/init:0b2b3811f6397c4367a4480a53837d41a8d7b3a9"
 system:
   - name: sysctl
     image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"