Rune agent
One-click sign-in on your LAN
Small background service on each user PC. Holds the device key, talks to Saga on your network, and enables Sign in with Rune in the browser. Not installed on the Saga server.
The Rune agent is security software: it stores a device private key and can sign in as the bound user. It should not run as root — use a normal user or the dedicated stech system account. Verify the SHA256 checksum; only download from this site.
Linux — one-line install
Run on the user's workstation (Debian, Ubuntu, RHEL, etc.). Requires curl and python3. No root required — installs to ~/.local/bin; use sudo only if you want a system-wide service in /var/lib.
curl -fsSL https://stech.strangstad.com/static/install-rune.sh | bash
With your Saga URL and tenant:
curl -fsSL https://stech.strangstad.com/static/install-rune.sh | SAGA_URL=https://saga.yourcompany.com TENANT=your-tenant bash
After install, enroll with the code from your admin:
stech-agent enroll --enrollment-code RUNE-XXXX-XXXX-XXXX
Downloads
After install
- Enroll — Your Saga admin gives you a one-time enrollment code (Control → Rune). Run stech-agent enroll --enrollment-code RUNE-…
- Bind — Saga admin links the device to a user in Control → Rune.
- Serve — Keep rune-agent running (systemd service or stech-agent serve).
- Sign in — Open login — the browser detects Rune on localhost and offers one-click sign-in.
Without the agent, users sign in with email OTP only. Each PC needs its own install.