Fedora Silverblue

Silverblue takes Fedora Workstation's GNOME desktop and rebuilds how the OS itself is managed: instead of individually updatable packages, the base system is a single read-only image (managed by rpm-ostree) that updates as one atomic unit, applied on the next reboot -- so an update either fully succeeds or the previous working image is still there to boot into. Regular applications install as Flatpaks, sandboxed by default with more limited access to the rest of the system than a traditionally packaged app would have, and command-line tools that need deeper system access run inside a 'toolbox' container rather than being installed directly onto the immutable base. This design trades some of the fine-grained flexibility of a traditional package manager for a system that's dramatically harder to break through a bad update or a misbehaving app, and easy to fully reset if something does go wrong.