As far as I understand, the snapshots made by
btrfs subvolume snapshot are writable by default and are visible at a certain path under the mountpoint of your btrfs volume.
How to setup the system so that there is a gurantee during the normal operation of the system that nothing is written to the snapshot? But without making it invisible to the users (i.e., it should remain accessible for reading by any users with respect to their permissions).
(For now, I've just
chmod og-rwx /.snapshots where my snapshots are mapped to. But that doesn't fulfill the second of my wishes, and also the guarantee is not strong enough: a process with root's rights could spoil something there.)
Does one need to do some tricks with
mount to achieve this goal?