Add a Compute Worker
Download enrollment token and controller CA.
Enroll a compute worker
A compute worker joins an existing controller using the controller Certificate Authority (CA), a worker enrollment token, and the role-specific host configuration shown by Network Fabric. STRATUM workers are designed to be zero-configuration after enrollment; the trust material is the deliberate exception because the worker must prove which controller it belongs to.
Prepare the worker as its own host. It only needs to resolve and reach the controller; the controller must be able to resolve the worker by the name used in the fabric.
Procedure
Download Worker Enrollment Token
From Network Fabric, generate or download an enrollment token that authorizes a new worker to join this controller. The token is enrollment material for the controller and is not limited to a single worker unless your operating policy rotates it after each use.
Download Controller CA
Download the controller Certificate Authority (CA) certificate so the worker can establish trust with the controller during enrollment.
Worker Host YAML And Install Commands
Use the generated worker host YAML and role-specific install commands as the source of truth for the new host. For a compute node, keep the worker role. If the same workflow is being used to prepare a storage node, ensure the host configuration uses role: storage before applying it.
Commands
Stage the generated host.yaml, controller CA, and enrollment token first. Use the exact current commands and configuration provided by your controller; the screenshot shows a representative enrollment flow.
# Commands shown by Network Fabric; run on the new worker
sudo install -d -m 0700 /etc/stratum/secure
sudo install -m 0600 stratum-enroll /etc/stratum/secure/stratum-enroll
sudo install -m 0644 stratum-ca.crt /etc/stratum/secure/controller-ca.crt
sudo install -m 0600 host.yaml /etc/stratum/host.yaml
sudo ./stratum-host start --reconcileNetwork Fabric Controller Node
Confirm that the controller is online before enrolling another host. The compute worker must resolve and connect to this controller using the same controller name or address supplied during enrollment.
Copy Enrollment Files To Compute Worker
Copy the controller CA, enrollment token, and generated host configuration to the compute worker using a protected transfer method.
Commands
Copy the controller-issued enrollment files using an approved encrypted transfer method. Replace the example host name and account; keep the token private and do not include secrets in support bundles.
# On the controller, from a folder containing the generated files
ssh admin@worker1.example.com 'mkdir -p ~/ENROLL && chmod 700 ~/ENROLL'
scp host.yaml stratum-ca.crt stratum-enroll admin@worker1.example.com:~/ENROLL/Prepare Compute Worker Host
Run the Host Manager setup on the compute worker with the compute-worker role. The worker only needs name resolution and network reachability to the controller.
Commands
Replace the example controller name and staging directory. Preserve the worker role in the controller-generated host.yaml; keep the enrollment token private.
# On the compute worker, after staging files in ENROLL/
getent hosts ctrl1.stratum.lab
sudo install -d -m 0700 /etc/stratum/secure
sudo install -m 0600 ENROLL/stratum-enroll /etc/stratum/secure/stratum-enroll
sudo install -m 0644 ENROLL/stratum-ca.crt /etc/stratum/secure/controller-ca.crt
sudo install -m 0600 ENROLL/host.yaml /etc/stratum/host.yaml
sudo ./stratum-host apply --yesStart Compute Worker
Start the compute worker after host setup and configuration complete. Watch the startup output for successful enrollment to the controller.
Commands
These checks use Docker; switch to podman for Podman hosts. Check Network Fabric for ONLINE status after successful enrollment.
# Start the enrolled compute worker
sudo ./stratum-host start
# Check container state and recent startup logs
sudo docker ps -a
sudo docker logs --tail 30 stratumCompute Worker Visible In Network Fabric
Refresh Network Fabric and confirm that the new compute worker appears ONLINE with the expected hostname and role. STRATUM automatically computes the node’s FABRIC Address; the operator does not assign it. That address is part of the Continuum’s zero-configuration virtual network, allowing the same STRATUM network fabric to span datacenters, clouds, edge sites, labs, and other platforms as one logical mesh.
The outcome you should see
The new compute host appears online in Network Fabric and can be selected as an execution target where compatible.