If you are using VMs, I think NixOs/Guix is a good choice. Reproducible builds, Immutable OS, Immutable binaries and Dead easy rollback.
It still looks somewhat futuristic. Hopefully gets traction.