diff --git a/osbuild/buildroot.py b/osbuild/buildroot.py
index cd422b56..5834c712 100644
--- a/osbuild/buildroot.py
+++ b/osbuild/buildroot.py
@@ -177,7 +177,7 @@ class BuildRoot(contextlib.AbstractContextManager):
 
         # Setup API file-systems.
         mounts += ["--proc", "/proc"]
-        mounts += ["--bind", "/sys", "/sys"]
+        mounts += ["--ro-bind", "/sys", "/sys"]
         mounts += ["--ro-bind-try", "/sys/fs/selinux", "/sys/fs/selinux"]
 
         # There was a bug in mke2fs (fixed in versionv 1.45.7) where mkfs.ext4