Create a new UKI addon systemd.volatile=overlay. This is extremely useful for images that are dm-verity protected, and there are units like cloud-init that write to disk.

If we don't care about persistent changes (and for example in CoCo we don't), this is a very good alternative to keep the disk dm-verity protected but at the same time read-write.