diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..a58d2d1
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+/rpm-head-signing-1.*.tar.gz
diff --git a/rpm-head-signing.spec b/rpm-head-signing.spec
new file mode 100644
index 0000000..1561218
--- /dev/null
+++ b/rpm-head-signing.spec
@@ -0,0 +1,39 @@
+Name:          rpm-head-signing
+Version:       1.7.1
+Release:       1%{?dist}
+Summary:       A python module for signing RPM header and file digests
+License:       BSD
+URL:           https://github.com/fedora-iot/rpm-head-signing
+Source0:       %url/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
+
+BuildRequires: gcc
+BuildRequires: python3-devel
+BuildRequires: python3-setuptools
+BuildRequires: rpm-devel
+
+%description
+A small Python module (with C helper) to extract a RPM header and file
+digests and reinsert the signature and signed file digests. This is
+used for when you want to retrieve the parts to sign if you have a
+remote signing server without having to transmit the entire RPM over
+to the server.
+
+%prep
+%autosetup -p1
+
+%build
+%py3_build
+
+%install
+%py3_install
+
+%files
+%license LICENSE
+%doc README.md
+%{_bindir}/verify-rpm-ima-signatures
+%{python3_sitearch}/rpm_head_signing/
+%{python3_sitearch}/rpm_head_signing-*/
+
+%changelog
+* Tue Jun 20 2023 Peter Robinson <pbrobinson@fedoraproject.org> - 1.7.1-1
+- Initial package
diff --git a/sources b/sources
new file mode 100644
index 0000000..06ed6b4
--- /dev/null
+++ b/sources
@@ -0,0 +1 @@
+SHA512 (rpm-head-signing-1.7.1.tar.gz) = 7a3dbb53cf27ac9767ad15ae5038bafdeb568f8a3f71ef3fe86d05c531a0de147ee482772aeec9887c641df05a630ec0af3b2c1180481f492d2360109662b27c