When using OSTree, you can build images using regular packages installed with apt, and then deploy them atomically while allowing to rollback the update if necessary. Alternatively you can choose to use Flatpak to deploy applications.