fix: [CHK-4143] add read_only to Docker Compose

docker/docker-compose.yml

@@ -12,5 +12,11 @@ services:
       - ./.env
     ports:
       - "8080:8080"
+    read_only: true
+    volumes:
+      - type: tmpfs
+        target: /tmp
+      - type: tmpfs
+        target: /var/temp
     security_opt:
-      - no-new-privileges:true
+      - no-new-privileges:true

docker/run_docker.sh

@@ -64,10 +64,13 @@ attempt_counter=0
 max_attempts=50
 until $(curl --output /dev/null --silent --head --fail http://localhost:8080/actuator/info); do
     if [ ${attempt_counter} -eq ${max_attempts} ];then
-      echo "Max attempts reached"
+      echo -e "\n❌ Max attempts reached — dumping container logs:\n"
+      docker logs selfcare || true
+      docker ps -a
       exit 1
     fi
 
+
     printf '.'
     attempt_counter=$((attempt_counter+1))
     sleep 5