terraform-provider-docker/testdata/resources/docker_container/testAccDockerContainerReadOnlyConfig.tf

resource "docker_image" "foo" {
  name         = "busybox:latest"
  keep_locally = true
}
resource "docker_container" "foo" {
  name      = "tf-test"
  image     = docker_image.foo.image_id
  command   = ["/bin/sleep", "15"]
  read_only = true
}