[a-dub]

using two partitions in this way on embedded devices has been a trope for a very long time. service/warranty calls are expensive!

usually there are three. system a and system b which are updated and flipped and some sort of emergency recovery that either has a factory image or a very light rom that phones home for a new image.

[TechBro8615]

It sounds like Blue/Green deployments.

[_e]

For the curious... An overview of the Blue/Green deployment model:

https://www.redhat.com/en/topics/devops/what-is-blue-green-d...

[a-dub]

sorta. but i think that blue/green deployments are typically monitored by some central control that will halt and reverse a whole fleet deployment, where typically embedded devices run that state machine locally. (after flashing the unused partition, if it fails to boot, fail back to the old one and disable the update).