Stratum

A functional layer for Debian.

Small, independent modules add administration, security and automation to a standard Debian system — without replacing or forking it. Your system stays Debian; it just does more. Everything is managed from one place and built to be simple to use — that is the whole point.

Stratum is not a distribution. It is a layer.

Install in one step

Run as root on Debian 13 (trixie) or Debian 14 (forky). It adds the signed Stratum repository and installs the core:

Terminal — root@debian

apt-get update && apt-get install -y curl ca-certificates
curl -fsSL https://www.skraba.net/stratum-apt/stratum-archive-keyring.gpg -o /tmp/stratum-archive-keyring.gpg
echo "4e9b1cb45f58d955340ac93b6c8d997d900d9780d005f002ce978bab39d53647  /tmp/stratum-archive-keyring.gpg" | sha256sum -c - \
  && install -m 0644 /tmp/stratum-archive-keyring.gpg /usr/share/keyrings/stratum-archive-keyring.gpg \
  && . /etc/os-release \
  && cat > /etc/apt/sources.list.d/stratum.sources <<EOF && apt-get update && apt-get install -y stratum-core
Types: deb
URIs: https://www.skraba.net/stratum-apt/
Suites: $VERSION_CODENAME
Components: main contrib non-free
Signed-By: /usr/share/keyrings/stratum-archive-keyring.gpg
EOF

Then run stratum to open Control Desk and add the modules you want.
Manual setup, the signing key and removal are covered in the Handbook.
Packages come from the Stratum APT repository.

Modules

Install only what a machine needs — in Control Desk or with apt install <package>. Every module is explained in full, with all its commands, in the Handbook.

Module	What it does
`stratum-core`	The `stratum` command, Control Desk and the login banner. Always installed.
`stratum-software`	Debian and Stratum package sources, and automatic security upgrades.
`stratum-memory`	More usable RAM: compressed swap (zram), deduplication and ballooning.
`stratum-firewall`	A host firewall that will not lock you out.
`stratum-security`	Blocks password guessing, with optional SSH and kernel hardening.
`stratum-fileserver`	Shared folders over Samba and NFS, with users and permissions.
`stratum-database`	A MariaDB server with databases, users and automatic backups.
`stratum-wireguard`	A private WireGuard mesh that links your computers.
`stratum-ansible`	Ansible automation: managed node, pull and controller.
`stratum-watchdog`	Watches key services and restarts what fails.
`stratum-support`	Secure, recorded remote support from Stratum.
`stratum-license`	The computer's Stratum license, for support and licensed features.

New here? Install the core, run stratum, and explore. You can add or remove any module at any time.

Handbook

The complete guide — for end users, administrators and the support team: installation, Control Desk, every module with all its commands, licensing and remote support, and a full reference.

Download

Stratum Handbook (PDF, A4, 112 pages)
First edition · November 2026 · Stratum 0.51
On a Stratum computer: apt install stratum-handbook — the book is then at /root/stratum-handbook.pdf.