~~NOTOC~~

<WRAP centeralign>
{{stratum:logo.png?96&nolink|Stratum}}

====== Stratum ======

**A functional layer for Debian.**

Small, independent modules add administration, security and automation to a standard Debian system — without replacing or forking it. **Your system stays Debian; it just does more.** Everything is managed from one place and built to be simple to use — that is the whole point.
</WRAP>

<WRAP box round centeralign>
Stratum is **not a distribution**. It is a **layer**.
</WRAP>

===== Install in one step =====

Run as ''root'' on Debian 13 (trixie) or Debian 14 (forky). It adds the signed Stratum repository and installs the core:

<card header="Terminal — root@debian" shadow="large">
<code bash>
apt-get update && apt-get install -y curl ca-certificates
curl -fsSL https://www.skraba.net/stratum-apt/stratum-archive-keyring.gpg -o /tmp/stratum-archive-keyring.gpg
echo "4e9b1cb45f58d955340ac93b6c8d997d900d9780d005f002ce978bab39d53647  /tmp/stratum-archive-keyring.gpg" | sha256sum -c - \
  && install -m 0644 /tmp/stratum-archive-keyring.gpg /usr/share/keyrings/stratum-archive-keyring.gpg \
  && . /etc/os-release \
  && cat > /etc/apt/sources.list.d/stratum.sources <<EOF && apt-get update && apt-get install -y stratum-core
Types: deb
URIs: https://www.skraba.net/stratum-apt/
Suites: $VERSION_CODENAME
Components: main contrib non-free
Signed-By: /usr/share/keyrings/stratum-archive-keyring.gpg
EOF
</code>
</card>

Then run ''stratum'' to open **Control Desk** and add the modules you want. \\
Manual setup, the signing key and removal are covered in the [[#handbook|Handbook]]. \\
Packages come from the [[https://www.skraba.net/stratum-apt/|Stratum APT repository]].

===== Modules =====

Install only what a machine needs — in Control Desk or with ''apt install <package>''. Every module is explained in full, with all its commands, in the Handbook.

^ Module ^ What it does ^
| ''stratum-core'' | The ''stratum'' command, Control Desk and the login banner. Always installed. |
| ''stratum-software'' | Debian and Stratum package sources, and automatic security upgrades. |
| ''stratum-memory'' | More usable RAM: compressed swap (zram), deduplication and ballooning. |
| ''stratum-firewall'' | A host firewall that will not lock you out. |
| ''stratum-security'' | Blocks password guessing, with optional SSH and kernel hardening. |
| ''stratum-fileserver'' | Shared folders over Samba and NFS, with users and permissions. |
| ''stratum-database'' | A MariaDB server with databases, users and automatic backups. |
| ''stratum-wireguard'' | A private WireGuard mesh that links your computers. |
| ''stratum-ansible'' | Ansible automation: managed node, pull and controller. |
| ''stratum-watchdog'' | Watches key services and restarts what fails. |
| ''stratum-support'' | Secure, recorded remote support from Stratum. |
| ''stratum-license'' | The computer's Stratum license, for support and licensed features. |

<WRAP round tip>
New here? Install the core, run ''stratum'', and explore. You can add or remove any module at any time.
</WRAP>

===== Handbook =====

<grid cols="1fr 2fr">
<col>
<WRAP centeralign>
[[https://www.skraba.net/stratum-apt/handbook/stratum-handbook.pdf|{{stratum:stratum-handbook-cover.png?240&nolink|Stratum Handbook}}]]
</WRAP>
</col>
<col>
**The complete guide** — for end users, administrators and the support team: installation, Control Desk, every module with all its commands, licensing and remote support, and a full reference.

<card header="Download" shadow="small">
**[[https://www.skraba.net/stratum-apt/handbook/stratum-handbook.pdf|Stratum Handbook (PDF, A4, 112 pages)]]** \\
First edition · November 2026 · Stratum 0.51 \\
On a Stratum computer: ''apt install stratum-handbook'' — the book is then at ''/root/stratum-handbook.pdf''.
</card>
</col>
</grid>