Any Linux distro with immutability that is customizable at first boot?

Is there any Linux distro that allows for say a customized app selection at first boot, but allows you to lock the drive to be read only?

Like if I want to install a bunch of crypto related apps, and then lock it down for all future boots....

I thought tails was what I was looking for, but it seems the persistence folders and apps require the drive to be not fully read only (tried using a kanguru lockable flash drive).