For bootonly updates, switching to the inactive root partition is incorrect.
This doesn’t work on the Raspberry Pi yet (due to missing kexec_file_load), but I tested it in qemu.