it would be excellent to make the images able to run read-only, and to set up a very specific set of volumes for data #3
Description
both for security, and to be intentional about it.
different volumes for validator internal data, amman snapshots, amman config, other files to build programs etc...