systemd-sysupdate atomically updates the host OS, container images, portable service images or other sources, based on the transfer configuration files described in sysupdate.d(5).
Most package managers already have something like this, or can be configured to work in the same way.
This is also a relatively new systemd addition. Let it settle for a while. Conservative distros like Debian Stable don't have it yet anyhow.