diff --git a/test/age-passphrase/docker-compose.yml b/test/age-passphrase/docker-compose.yml
index b47ac72..8b19d77 100644
--- a/test/age-passphrase/docker-compose.yml
+++ b/test/age-passphrase/docker-compose.yml
@@ -11,7 +11,7 @@ services:
     volumes:
       - ${LOCAL_DIR:-./local}:/archive
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/age-publickey/docker-compose.yml b/test/age-publickey/docker-compose.yml
index 0e30d09..f182a98 100644
--- a/test/age-publickey/docker-compose.yml
+++ b/test/age-publickey/docker-compose.yml
@@ -11,7 +11,7 @@ services:
     volumes:
       - ${LOCAL_DIR:-./local}:/archive
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/azure/docker-compose.yml b/test/azure/docker-compose.yml
index ab64d36..dae0a9c 100644
--- a/test/azure/docker-compose.yml
+++ b/test/azure/docker-compose.yml
@@ -42,7 +42,7 @@ services:
       BACKUP_PRUNING_PREFIX: test
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/certs/docker-compose.yml b/test/certs/docker-compose.yml
index aa0db37..53afbc7 100644
--- a/test/certs/docker-compose.yml
+++ b/test/certs/docker-compose.yml
@@ -30,7 +30,7 @@ services:
       BACKUP_PRUNING_LEEWAY: 5s
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${CERT_DIR:-.}/rootCA.crt:/root/minio-rootCA.crt
 
   offen:
diff --git a/test/cli/run.sh b/test/cli/run.sh
index a7f5d6e..7b7c2f7 100755
--- a/test/cli/run.sh
+++ b/test/cli/run.sh
@@ -37,7 +37,7 @@ docker run --rm -q \
   --network test_network \
   -v app_data:/backup/app_data \
   -v empty_data:/backup/empty_data \
-  -v /var/run/docker.sock:/var/run/docker.sock \
+  -v /var/run/docker.sock:/var/run/docker.sock:ro \
   --env AWS_ACCESS_KEY_ID=test \
   --env AWS_SECRET_ACCESS_KEY=GMusLtUmILge2by+z890kQ \
   --env AWS_ENDPOINT=minio:9000 \
diff --git a/test/collision/docker-compose.yml b/test/collision/docker-compose.yml
index d2a80dc..adf0420 100644
--- a/test/collision/docker-compose.yml
+++ b/test/collision/docker-compose.yml
@@ -9,7 +9,7 @@ services:
     volumes:
       - offen_data:/backup/offen_data:ro
       - ${LOCAL_DIR:-./local}:/archive
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/commands/docker-compose.yml b/test/commands/docker-compose.yml
index fada867..0020db0 100644
--- a/test/commands/docker-compose.yml
+++ b/test/commands/docker-compose.yml
@@ -42,7 +42,7 @@ services:
     volumes:
       - ${LOCAL_DIR:-./local}:/archive
       - app_data:/backup/data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
 volumes:
   app_data:
diff --git a/test/confd/docker-compose.yml b/test/confd/docker-compose.yml
index 76b2b2a..082f8c4 100644
--- a/test/confd/docker-compose.yml
+++ b/test/confd/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       - ./01backup.env:/etc/dockervolumebackup/conf.d/01backup.env
       - ./02backup.env:/etc/dockervolumebackup/conf.d/02backup.env
       - ./03never.env:/etc/dockervolumebackup/conf.d/03never.env
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/dropbox/docker-compose.yml b/test/dropbox/docker-compose.yml
index 77df75e..a7e602f 100644
--- a/test/dropbox/docker-compose.yml
+++ b/test/dropbox/docker-compose.yml
@@ -42,7 +42,7 @@ services:
       DROPBOX_CONCURRENCY_LEVEL: 6
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/extend/docker-compose.yml b/test/extend/docker-compose.yml
index 4834e49..fc7a9ff 100644
--- a/test/extend/docker-compose.yml
+++ b/test/extend/docker-compose.yml
@@ -11,7 +11,7 @@ services:
     volumes:
       - ${LOCAL_DIR:-local}:/local
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/gpg-asym/docker-compose.yml b/test/gpg-asym/docker-compose.yml
index 097d030..32a88a2 100644
--- a/test/gpg-asym/docker-compose.yml
+++ b/test/gpg-asym/docker-compose.yml
@@ -12,7 +12,7 @@ services:
       - ${KEY_DIR:-.}/public_key.asc:/keys/public_key.asc
       - ${LOCAL_DIR:-./local}:/archive
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/gpg/docker-compose.yml b/test/gpg/docker-compose.yml
index 2c4880d..3584205 100644
--- a/test/gpg/docker-compose.yml
+++ b/test/gpg/docker-compose.yml
@@ -11,7 +11,7 @@ services:
     volumes:
       - ${LOCAL_DIR:-./local}:/archive
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/local/docker-compose.yml b/test/local/docker-compose.yml
index 9a5f2cd..8a0e630 100644
--- a/test/local/docker-compose.yml
+++ b/test/local/docker-compose.yml
@@ -13,7 +13,7 @@ services:
       BACKUP_PRUNING_PREFIX: test
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${LOCAL_DIR:-./local}:/archive
 
   offen:
diff --git a/test/lock/docker-compose.yml b/test/lock/docker-compose.yml
index 5d6d34c..f7b8afa 100644
--- a/test/lock/docker-compose.yml
+++ b/test/lock/docker-compose.yml
@@ -7,7 +7,7 @@ services:
       BACKUP_RETENTION_DAYS: '7'
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${LOCAL_DIR:-./local}:/archive
 
   offen:
diff --git a/test/pgzip/run.sh b/test/pgzip/run.sh
index ff6075e..df8b065 100755
--- a/test/pgzip/run.sh
+++ b/test/pgzip/run.sh
@@ -23,7 +23,7 @@ docker run --rm -q \
   --network test_network \
   -v app_data:/backup/app_data \
   -v $LOCAL_DIR:/archive \
-  -v /var/run/docker.sock:/var/run/docker.sock \
+  -v /var/run/docker.sock:/var/run/docker.sock:ro \
   --env BACKUP_COMPRESSION=gz \
   --env GZIP_PARALLELISM=0 \
   --env BACKUP_FILENAME='test.{{ .Extension }}' \
diff --git a/test/proxy/docker-compose.swarm.yml b/test/proxy/docker-compose.swarm.yml
index 841cd1f..8ef44f3 100644
--- a/test/proxy/docker-compose.swarm.yml
+++ b/test/proxy/docker-compose.swarm.yml
@@ -22,7 +22,7 @@ services:
       TASKS: ${ALLOW_TASKS:-1}
       NODES: ${ALLOW_NODES:-1}
     volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   pg:
     image: postgres:14-alpine
diff --git a/test/proxy/docker-compose.yml b/test/proxy/docker-compose.yml
index 5b64528..91059c9 100644
--- a/test/proxy/docker-compose.yml
+++ b/test/proxy/docker-compose.yml
@@ -19,7 +19,7 @@ services:
       CONTAINERS: ${ALLOW_CONTAINERS:-1}
       POST: ${ALLOW_POST:-1}
     volumes:
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   pg:
     image: postgres:14-alpine
diff --git a/test/pruning/docker-compose.yml b/test/pruning/docker-compose.yml
index 08e7809..72e54ff 100644
--- a/test/pruning/docker-compose.yml
+++ b/test/pruning/docker-compose.yml
@@ -32,7 +32,7 @@ services:
       BACKUP_SKIP_BACKENDS_FROM_PRUNE: 's3'
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${LOCAL_DIR:-./local}:/archive
 
   offen:
diff --git a/test/s3/docker-compose.yml b/test/s3/docker-compose.yml
index 1b8bbac..af0d7ec 100644
--- a/test/s3/docker-compose.yml
+++ b/test/s3/docker-compose.yml
@@ -30,7 +30,7 @@ services:
       BACKUP_PRUNING_PREFIX: test
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/secrets/docker-compose.yml b/test/secrets/docker-compose.yml
index c1d237d..45eb110 100644
--- a/test/secrets/docker-compose.yml
+++ b/test/secrets/docker-compose.yml
@@ -35,7 +35,7 @@ services:
       BACKUP_PRUNING_LEEWAY: 5s
     volumes:
       - pg_data:/backup/pg_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
     secrets:
       - minio_root_user
       - minio_root_password
diff --git a/test/services/docker-compose.yml b/test/services/docker-compose.yml
index a4e1cd4..f7f61f8 100644
--- a/test/services/docker-compose.yml
+++ b/test/services/docker-compose.yml
@@ -29,7 +29,7 @@ services:
       BACKUP_PRUNING_LEEWAY: 5s
     volumes:
       - pg_data:/backup/pg_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/ssh/docker-compose.yml b/test/ssh/docker-compose.yml
index e31a7d0..97a9780 100644
--- a/test/ssh/docker-compose.yml
+++ b/test/ssh/docker-compose.yml
@@ -30,7 +30,7 @@ services:
     volumes:
       - ${KEY_DIR:-.}/id_rsa:/root/.ssh/id_rsa
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/swarm/docker-compose.yml b/test/swarm/docker-compose.yml
index 4a2b888..c5f7a28 100644
--- a/test/swarm/docker-compose.yml
+++ b/test/swarm/docker-compose.yml
@@ -35,7 +35,7 @@ services:
       BACKUP_PRUNING_LEEWAY: 5s
     volumes:
       - pg_data:/backup/pg_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/tar/docker-compose.yml b/test/tar/docker-compose.yml
index a3f7aa7..c2ff8c7 100644
--- a/test/tar/docker-compose.yml
+++ b/test/tar/docker-compose.yml
@@ -7,7 +7,7 @@ services:
       BACKUP_COMPRESSION: none
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${LOCAL_DIR:-./local}:/archive
 
   offen:
diff --git a/test/user/docker-compose.yml b/test/user/docker-compose.yml
index a27b983..93cb44b 100644
--- a/test/user/docker-compose.yml
+++ b/test/user/docker-compose.yml
@@ -20,7 +20,7 @@ services:
     volumes:
       - ${LOCAL_DIR:-./local}:/archive
       - app_data:/backup/data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
 volumes:
   app_data:
diff --git a/test/webdav/docker-compose.yml b/test/webdav/docker-compose.yml
index 69eb0a8..90e6c09 100644
--- a/test/webdav/docker-compose.yml
+++ b/test/webdav/docker-compose.yml
@@ -28,7 +28,7 @@ services:
       WEBDAV_PASSWORD: test
     volumes:
       - app_data:/backup/app_data:ro
-      - /var/run/docker.sock:/var/run/docker.sock
+      - /var/run/docker.sock:/var/run/docker.sock:ro
 
   offen:
     image: offen/offen:latest
diff --git a/test/zstd/run.sh b/test/zstd/run.sh
index 775e76e..a519f2d 100755
--- a/test/zstd/run.sh
+++ b/test/zstd/run.sh
@@ -23,7 +23,7 @@ docker run --rm -q \
   --network test_network \
   -v app_data:/backup/app_data \
   -v $LOCAL_DIR:/archive \
-  -v /var/run/docker.sock:/var/run/docker.sock \
+  -v /var/run/docker.sock:/var/run/docker.sock:ro \
   --env BACKUP_COMPRESSION=zst \
   --env BACKUP_FILENAME='test.{{ .Extension }}' \
   --entrypoint backup \