We use passive/active partitions, very similar to how CoreOS does OS updates on their servers.