diff --git a/.drone.yml b/.drone.yml
index a5b3728..00ad9a0 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -1,8 +1,76 @@
-# test comment
-pipeline:
-  test:
-    image: alpine
+---
+kind: pipeline
+name: default
+
+steps:
+  - name: build
+    image: xoxys/rpmbuild-centos7
+    pull: always
+    environment:
+      CUPSRELEASE: "2.2.10"
     commands:
-      - echo "********"
-      - "echo 'drone: is awesome' > test2.txt"
-      - cat test2.txt
+      - wget https://github.com/apple/cups/releases/download/v$CUPSRELEASE/cups-$CUPSRELEASE-source.tar.gz
+      - mkdir ./rpms
+      - rpmbuild -ta --define "_rpmdir $(pwd)/rpms" --without libusb1 cups-$CUPSRELEASE-source.tar.gz
+    when:
+      event:
+        - push
+        - tag
+
+  - name: checksum
+    image: alpine
+    pull: always
+    commands:
+      - apk add --no-cache coreutils
+      # exclude files
+      # - sha256sum -b files/!(*.out) > CHECKSUMFILE
+      - sha256sum -b rpms/x86_64/* > sha256sum.txt
+    when:
+      event:
+        - push
+        - tag
+
+  - name: gpgsign
+    image: plugins/gpgsign:1
+    pull: always
+    settings:
+      key:
+        from_secret: gpgsign_key
+      passphrase:
+        from_secret: gpgsign_passphrase
+      detach_sign: true
+      files:
+        - rpms/x86_64/*
+    when:
+      event:
+        - push
+        - tag
+
+  - name: publish
+    image: plugins/gitea-release
+    settings:
+      base_url: https://gitea.rknet.org
+      api_key:
+        from_secret: gitea_token
+      files:
+        - rpms/x86_64/*
+        - sha256sum.txt
+      title: ${DRONE_TAG}
+    when:
+      event:
+        - tag
+
+  - name: notify
+    image: plugins/matrix
+    settings:
+      homeserver: https://matrix.rknet.org
+      roomid: MtidqQXWWAtQcByBhH:rknet.org
+      template: "Status: **{{ build.status }}**<br/> Build: [{{ repo.Owner }}/{{ repo.Name }}]({{ build.link }}) ({{ build.branch }}) by {{ build.author }}<br/> Message: {{ build.message }}"
+      username:
+        from_secret: matrix_username
+      password:
+        from_secret: matrix_password
+    when:
+      status:
+        - success
+        - failure