I think CoreOS solves a number of these problems. It's no walk in the park to set up but it's a really nice stack.