I know you can build a Debian system with debootstrap. Using debootstrap it should be possible to create a custom image. The main partition could be read only with separate mounts for anything that need to be read write.
Using containers it should be possible to create a filesystem image. I think the tricky part it testing the image and then updating the existing partition. Maybe some custom ostree tool could do the trick. If not there is always rsync and btrfs snapshots.
cerement@slrpnk.net1·15 days ago- Alpine Linux: Immutable root with atomic upgrades (wiki article, not an official how-to)
- Alpine Linux: Alpine Local Backup (lbu) (run everything in memory)