Since we are trying to build a system that is mostly read-only we will start with the easiest step, mounting /usr read-only. Open up /etc/fstab and make sure the line mounting /usr looks like this:
/dev/wd0e /usr ffs ro,nodev 1 2
We essentially changed rw to ro. We'll be adding more to this file later.