ShaniOS maintains two separate environments. If an update - or anything - goes wrong with one environment, simply reboot and switch to the other. I am seriously impressed.

Bazzite is probably the best known, and takes an immutable approach to how the architecture is laid out. But I've been using ...