As far as I understand, the snapshots made by btrfs subvolume snapshot
are writable by default and are visible at a certain path under the mountpoint of your btrfs volume.
How to setup the system so that there is a gurantee during the normal operation of the system that nothing is written to the snapshot? But without making it invisible to the users (i.e., it should remain accessible for reading by any users with respect to their permissions).
(For now, I've just chmod og-rwx /.snapshots
where my snapshots are mapped to. But that doesn't fulfill the second of my wishes, and also the guarantee is not strong enough: a process with root's rights could spoil something there.)
Does one need to do some tricks with mount
to achieve this goal?
lvchange --permission r
for this purpose.