diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..c4e315d
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+/fwupd-efi-1.0.tar.xz
diff --git a/fwupd-efi.spec b/fwupd-efi.spec
new file mode 100644
index 0000000..8304c01
--- /dev/null
+++ b/fwupd-efi.spec
@@ -0,0 +1,64 @@
+%global debug_package %{nil}
+
+Summary:   Firmware update EFI binaries
+Name:      fwupd-efi
+Version:   1.0
+Release:   1%{?dist}
+License:   LGPLv2+
+URL:       https://github.com/fwupd/fwupd-efi
+Source0:   http://people.freedesktop.org/~hughsient/releases/%{name}-%{version}.tar.xz
+
+# these are the only architectures supporting UEFI UpdateCapsule
+ExclusiveArch: x86_64 aarch64
+
+BuildRequires: gcc
+BuildRequires: meson
+BuildRequires: gnu-efi-devel
+BuildRequires: pesign
+
+%description
+fwupd is a project to allow updating device firmware, and this package provides
+the EFI binary that is used for updating using UpdateCapsule.
+
+%prep
+%autosetup -p1
+
+%build
+
+%meson \
+    -Defi_sbat_distro_id="fedora" \
+    -Defi_sbat_distro_summary="The Fedora Project" \
+    -Defi_sbat_distro_pkgname="%{name}" \
+    -Defi_sbat_distro_version="%{version}-%{release}" \
+    -Defi_sbat_distro_url="https://src.fedoraproject.org/rpms/%{name}"
+
+%meson_build
+
+%install
+%meson_install
+
+# not required yet
+rm $RPM_BUILD_ROOT%{_libdir}/pkgconfig/fwupd-efi.pc
+
+# sign fwupd.efi loader
+%ifarch x86_64
+%global efiarch x64
+%endif
+%ifarch aarch64
+%global efiarch aa64
+%endif
+%global fwup_efi_fn $RPM_BUILD_ROOT%{_libexecdir}/fwupd/efi/fwupd%{efiarch}.efi
+%pesign -s -i %{fwup_efi_fn} -o %{fwup_efi_fn}.tmp
+%define __pesign_client_cert fwupd-signer
+%pesign -s -i %{fwup_efi_fn}.tmp -o %{fwup_efi_fn}.signed
+rm -vf %{fwup_efi_fn}.tmp
+
+%files
+%doc README.md AUTHORS
+%license COPYING
+%{_libexecdir}/fwupd/efi/*.efi
+%{_libexecdir}/fwupd/efi/*.efi.signed
+
+%changelog
+* Mon Apr 26 2021 Richard Hughes <richard@hughsie.com> 1.0-1
+- Initial package version, split from the main fwupd package
diff --git a/sources b/sources
new file mode 100644
index 0000000..69083ab
--- /dev/null
+++ b/sources
@@ -0,0 +1 @@
+SHA512 (fwupd-efi-1.0.tar.xz) = 601c53c2673c5465faa858520581db34d9b1dc8ae099434ce115aa92c6ad2745f8a0e07677ddc8bed1f5f1ce2a45d099d27a1f41d6a6acdbde499fcf0bb51255