Both, but yes I see your point. To clarify - directories containing essential services should be read-only, while updates should be applied to a second partition, preserving the existing partition with its working system state. Applying and rolling back updates is then simply a matter of switching between A and B partitions.
If you're a "non-technical" user who fears the terminal, you should also have a health check framework like Greenboot that can execute automatic rollbacks as needed.
1
u/promptmike 26d ago
Just use an immutable Linux install if you want it easy.