diff --git a/internal/image/ostree_raw.go b/internal/image/ostree_raw.go
index 9ceea5a06..9c829e00d 100644
--- a/internal/image/ostree_raw.go
+++ b/internal/image/ostree_raw.go
@@ -26,6 +26,8 @@ type OSTreeRawImage struct {
 
 	Commit ostree.CommitSpec
 
+	SysrootReadOnly bool
+
 	Remote ostree.Remote
 	OSName string
 
@@ -58,6 +60,7 @@ func (img *OSTreeRawImage) InstantiateManifest(m *manifest.Manifest,
 	osPipeline.Locale = img.Locale
 	osPipeline.Users = img.Users
 	osPipeline.Groups = img.Groups
+	osPipeline.SysrootReadOnly = img.SysrootReadOnly
 
 	imagePipeline := manifest.NewRawOStreeImage(m, buildPipeline, img.Platform, osPipeline)
 
diff --git a/internal/manifest/commit_deployment.go b/internal/manifest/commit_deployment.go
index 405bf90ba..222b4d4a8 100644
--- a/internal/manifest/commit_deployment.go
+++ b/internal/manifest/commit_deployment.go
@@ -23,6 +23,8 @@ type OSTreeDeployment struct {
 
 	commit ostree.CommitSpec
 
+	SysrootReadOnly bool
+
 	osName string
 
 	KernelOptionsAppend []string
@@ -144,7 +146,7 @@ func (p *OSTreeDeployment) serialize() osbuild.Pipeline {
 			Repo: repoPath,
 			Config: &osbuild.OSTreeConfig{
 				Sysroot: &osbuild.SysrootOptions{
-					ReadOnly:   common.BoolToPtr(true),
+					ReadOnly:   &p.SysrootReadOnly,
 					Bootloader: "none",
 				},
 			},