Try to mount /mnt/fedora_koji as read only in staging.

inventory/group_vars/koji-stg

@@ -23,5 +23,6 @@ fedmsg_certs:
   owner: root
   group: apache
 
-nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid"
+# NOTE -- staging mounts read-only
+nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid"
 sudoers: "{{ private }}/files/sudo/arm-releng-sudoers"

playbooks/groups/koji-hub.yml

@@ -52,6 +52,11 @@
     mnt_dir: '/mnt/koji'
     nfs_src_dir: 'fedora_s390/data'
     when: env == 'production' and inventory_hostname.startswith('s390')
+    # In staging, we mount fedora_koji as read only (see nfs_mount_opts)
+  - role: nfs/client
+    mnt_dir: '/mnt/fedora_koji_prod'
+    nfs_src_dir: 'fedora_koji'
+    when: env == 'staging' and inventory_hostname.startswith('koji')
   - sudo
 
   tasks: