diff --git a/debian/.gitignore b/debian/.gitignore
new file mode 100644
index 0000000000000000000000000000000000000000..bbb2ca66234f68e3ae4c34950946bb8c6aaab7dd
--- /dev/null
+++ b/debian/.gitignore
@@ -0,0 +1,2 @@
+riseup-vpn/*
+.debhelper/*
diff --git a/debian/README b/debian/README
new file mode 100644
index 0000000000000000000000000000000000000000..7a4f67789de8e24cde1561a9ed7ec608e7676810
--- /dev/null
+++ b/debian/README
@@ -0,0 +1,7 @@
+The Debian Package riseup-vpn
+----------------------------
+
+Initial debianization of bitmask-vpn repo. This is a native package for
+riseup-vpn, branded clients will use a template based on that one.
+
+ -- Kali Kaneko <kali@leap.se> Tue, 09 Feb 2021 20:26:52 +0100
diff --git a/debian/README.Debian b/debian/README.Debian
new file mode 100644
index 0000000000000000000000000000000000000000..dead657517cd374abed2e7dacb6ad9c1d48a4c64
--- /dev/null
+++ b/debian/README.Debian
@@ -0,0 +1,6 @@
+riseup-vpn for Debian
+--------------------
+
+<possible notes regarding this package - if none, delete this file>
+
+ -- Kali Kaneko <kali@leap.se> Tue, 09 Feb 2021 20:26:52 +0100
diff --git a/debian/README.source b/debian/README.source
new file mode 100644
index 0000000000000000000000000000000000000000..12435e8ee8be04fe740b0cb04c63aa35e9807a4b
--- /dev/null
+++ b/debian/README.source
@@ -0,0 +1,10 @@
+riseup-vpn for Debian
+--------------------
+
+<this file describes information about the source package, see Debian policy
+manual section 4.14. You WILL either need to modify or delete this file>
+
+
+
+ -- Kali Kaneko <kali@leap.se> Tue, 09 Feb 2021 20:26:52 +0100
+
diff --git a/debian/changelog b/debian/changelog
new file mode 100644
index 0000000000000000000000000000000000000000..1ee2a710bf55e07d2757153835842e99031a85d2
--- /dev/null
+++ b/debian/changelog
@@ -0,0 +1,5 @@
+riseup-vpn (0.21.2) unstable; urgency=medium
+
+ * Initial Release.
+
+ -- Kali Kaneko <kali@leap.se> Tue, 09 Feb 2021 20:26:52 +0100
diff --git a/debian/control b/debian/control
new file mode 100644
index 0000000000000000000000000000000000000000..1a2266abcfd4a53dd2ef2460faeecf6f2ba42967
--- /dev/null
+++ b/debian/control
@@ -0,0 +1,18 @@
+Source: riseup-vpn
+Section: net
+Priority: extra
+Maintainer: LEAP Encryption Access Project <debian@leap.se>
+Build-Depends: debhelper-compat (= 12), golang-go (>= 2:1.9), make, pkg-config, g++
+Standards-Version: 4.4.1
+Homepage: https://0xacab.org/leap/bitmask-vpn
+#Vcs-Browser: https://0xacab.org/leap/bitmask-vpn
+#Vcs-Git: https://0xacab.org/leap/bitmask-vpn.git
+
+Package: riseup-vpn
+Architecture: any
+Enhances: openvpn
+Depends: ${shlibs:Depends}, ${misc:Depends}, openvpn, policykit-1-gnome | polkit-1-auth-agent, python3
+Description: Easy, fast, and secure VPN service from riseup.net.
+ .
+ The service does not require a user account, keep logs, or track you in any
+ way. The service is paid for entirely by donations from users.
diff --git a/debian/copyright b/debian/copyright
new file mode 100644
index 0000000000000000000000000000000000000000..9292099d63681f9d7faa9615f617ce16c373912b
--- /dev/null
+++ b/debian/copyright
@@ -0,0 +1,39 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: riseup-vpn
+Upstream-Contact: <preferred name and address to reach the upstream project>
+Source: <url://example.com>
+
+Files: *
+Copyright: <years> <put author's name and email here>
+ <years> <likewise for another author>
+License: GPL-3.0+
+
+Files: debian/*
+Copyright: 2021 Kali Kaneko <kali@leap.se>
+License: GPL-3.0+
+
+License: GPL-3.0+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ .
+ This package is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+ .
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <https://www.gnu.org/licenses/>.
+ .
+ On Debian systems, the complete text of the GNU General
+ Public License version 3 can be found in "/usr/share/common-licenses/GPL-3".
+
+# Please also look if there are files or directories which have a
+# different copyright/license attached and list them here.
+# Please avoid picking licenses with terms that are more restrictive than the
+# packaged work, as it may make Debian's contributions unacceptable upstream.
+#
+# If you need, there are some extra license texts available in two places:
+# /usr/share/debhelper/dh_make/licenses/
+# /usr/share/common-licenses/
diff --git a/debian/rules b/debian/rules
new file mode 100755
index 0000000000000000000000000000000000000000..fdc68bdc190d8aa3985703d92b322da690e4fe08
--- /dev/null
+++ b/debian/rules
@@ -0,0 +1,56 @@
+#!/usr/bin/make -f
+# See debhelper(7) (uncomment to enable)
+# output every command that modifies files on the build system.
+export DH_VERBOSE = 1
+
+export DH_OPTIONS
+export GO111MODULE=on
+export GOCACHE=/tmp/gocache
+
+export DH_GOPKG = 0xacab.org/leap/bitmask-vpn
+
+export APPNAME = riseup-vpn
+
+ifeq ($(DEB_HOST_ARCH), i386)
+ export GOARCH := 386
+else ifeq ($(DEB_HOST_ARCH), amd64)
+ export GOARCH := amd64
+else ifeq ($(DEB_HOST_ARCH), armhf)
+ export GOARCH := arm
+else ifeq ($(DEB_HOST_ARCH), arm64)
+ export GOARCH := arm64
+endif
+
+
+# see FEATURE AREAS in dpkg-buildflags(1)
+#export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+# see ENVIRONMENT in dpkg-buildflags(1)
+# package maintainers to append CFLAGS
+#export DEB_CFLAGS_MAINT_APPEND = -Wall -pedantic
+# package maintainers to append LDFLAGS
+#export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+
+
+%:
+ dh $@
+
+
+override_dh_auto_build:
+ make build
+
+override_dh_install:
+ mkdir -p $(CURDIR)/debian/${APPNAME}/usr/bin
+ mkdir -p $(CURDIR)/debian/${APPNAME}/usr/sbin
+ cp $(CURDIR)/helpers/bitmask-root $(CURDIR)/debian/${APPNAME}/usr/sbin/
+ mkdir -p $(CURDIR)/debian/${APPNAME}/usr/share/polkit-1/actions
+ cp $(CURDIR)/helpers/se.leap.bitmask.policy $(CURDIR)/debian/${APPNAME}/usr/share/polkit-1/actions
+ cp build/qt/release/${APPNAME} $(CURDIR)/debian/${APPNAME}/usr/bin/${APPNAME}
+ strip $(CURDIR)/debian/${APPNAME}/usr/bin/${APPNAME}
+ dh_install
+
+# dh_make generated override targets
+# This is example for Cmake (See https://bugs.debian.org/641051 )
+#override_dh_auto_configure:
+# dh_auto_configure -- # -DCMAKE_LIBRARY_PATH=$(DEB_HOST_MULTIARCH)
+
diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000000000000000000000000000000000000..89ae9db8f88b823b6a7eabf55e203658739da122
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (native)