make sure to keep boot/efi mountpoint directories in the read-only area as they can't be created later