ociindex: allow readonly access #5251

Job	Run time
govulncheck	1m 9s
prepare	4s
binaries (darwin/amd64)	1m 18s
binaries (darwin/arm64)	1m 19s
binaries (linux/amd64)	2m 1s
binaries (linux/arm/v7)	1m 58s
binaries (linux/arm64)	1m 57s
binaries (linux/s390x)	1m 56s
binaries (linux/ppc64le)	1m 56s
binaries (linux/riscv64)	2m 10s
binaries (windows/amd64)	1m 39s
binaries (windows/arm64)	1m 47s
test / prepare	1m 57s
test / run (containerd, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	7m 32s
test / run (containerd-rootless, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integr...	9m 35s
test / run (containerd-1.6, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	7m 32s
test / run (containerd-snapshotter-stargz, ./client ./cmd/buildctl ./worker/containerd ./solver ./fronte...	8m 28s
test / run (oci, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	5m 7s
test / run (oci-rootless, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, integration)	5m 4s
test / run (oci-rootless-slirp4netns-detachnetns, ./client ./cmd/buildctl ./worker/containerd ./solver ....	5m 33s
test / run (oci-snapshotter-stargz, ./client ./cmd/buildctl ./worker/containerd ./solver ./frontend, int...	5m 36s
test / run (./..., 1, integration gateway)	4m 10s
test / run (./client, containerd, nydus, integration)	7m 27s
test / run (./client, oci, nydus, integration)	5m 54s
test / run (./..., nydus, 1, integration)	4m 43s
image	8m 53s
image (rootless)	8m 48s
release	7s
scout	0s
	1h 55m 40s

Provide feedback