NixOS Atomic Upgrades: How Generations Enable Safe Rollbacks
NixOS builds each system version as an immutable closure in the Nix store; switching updates symlinks atomically, and the --rollback flag lets you return to a prior generation when a change fails.