Alternatively, you can use Void Linux and most of the work is done... admittedly, no read only fs by default.