TECHNICAL GUIDE
Core Concepts · CC-01

Datacenter as an OCI Application

STRATUM OCI container delivery on a hardened Platform One Iron Bank image foundation, with daily-scanned supply-chain evidence and durable runtime state.

CORE MODEL

Image versus state

The STRATUM application image is replaceable and versioned. Configuration and durable runtime data live outside that immutable application layer so an image tag can change without treating the datacenter state as disposable.

Put the datacenter inside the image before it ships. Our open-source STRATUM Container Appender packages preinstalled VM disks, templates, ISO media and approved datacenter content as new filesystem layers, ready for offline delivery or OCI-registry distribution.

DETAIL

Upgrade and rollback

An image tag identifies the application version. Upgrading or rolling back changes the application layer; it does not require rebuilding the datacenter definition by hand. Keep backup/export policy focused on durable state and packaged datacenter content, not on copying a mutable container filesystem.

SECURE SOFTWARE SUPPLY CHAIN

Iron Bank hardened container foundation

STRATUM's OCI container is built on a hardened image foundation from Platform One's Iron Bank, a centralized repository of vetted container images maintained for Department of War software delivery.

Iron Bank publishes evidence including daily vulnerability scanning, software bills of materials (SBOMs) and risk assessments for images in its repository. These artifacts make the container supply chain easier to evaluate when preparing security reviews and regulated deployment workflows.

STRATUM is delivered as a container application on your existing hardened Linux host. You retain the host OS, golden-image process and support model, while STRATUM supplies the versioned infrastructure application layer. Explore the official Platform One Iron Bank repository and its technical documentation.