Fedora CoreOS provides atomic updates and rollbacks via OSTree deployments.
By default, the OS performs continuous auto-updates via two components:
In order to finalize an OS update, a machine needs to perform a reboot. As this is an invasive action which may cause service disruption, Zincati allows the cluster administrator to control when nodes are allowed to reboot in order to finalize updates.
The following finalization strategies are available:
immediately reboot to apply an update, as soon as it is downloaded and staged locally
use an external lock-manager to reboot a fleet of machines in a coordinated way
For further documentation on how to configure updates finalization, check Zincati documentation on updates strategy.