diff --git a/_service b/_service
index 41f7851..835e361 100644
--- a/_service
+++ b/_service
@@ -1,17 +1,14 @@
 <services>
-  <service name="tar_scm" mode="disabled">
-    <param name="url">https://github.com/opencontainers/runc.git</param>
-    <param name="scm">git</param>
-    <param name="filename">runc</param>
-    <param name="versionformat">@PARENT_TAG@+r@TAG_OFFSET@</param>
-    <param name="revision">master</param>
-    <param name="exclude">.git</param>
+  <service name="download_url" mode="disabled">
+    <param name="protocol">https</param>
+	<param name="host">github.com</param>
+	<param name="path">opencontainers/runc/releases/download/v1.0.0-rc4/runc.tar.xz</param>
+	<param name="filename">runc-1.0.0-rc4.tar.xz</param>
   </service>
-  <service name="recompress" mode="disabled">
-    <param name="file">*.tar</param>
-    <param name="compression">xz</param>
-  </service>
-  <service name="set_version" mode="disabled">
-    <param name="basename">runc</param>
+  <service name="download_url" mode="disabled">
+    <param name="protocol">https</param>
+	<param name="host">github.com</param>
+	<param name="path">opencontainers/runc/releases/download/v1.0.0-rc4/runc.tar.xz.asc</param>
+	<param name="filename">runc-1.0.0-rc4.tar.xz.asc</param>
   </service>
 </services>
diff --git a/runc-1.0.0-rc4.tar.xz b/runc-1.0.0-rc4.tar.xz
new file mode 100644
index 0000000..1016cfe
--- /dev/null
+++ b/runc-1.0.0-rc4.tar.xz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:a059c773455b723fa792fab3d82baa1e01de5b68defda70400ba3683831c7d95
+size 486220
diff --git a/runc-1.0.0-rc4.tar.xz.asc b/runc-1.0.0-rc4.tar.xz.asc
new file mode 100644
index 0000000..d9da1d1
--- /dev/null
+++ b/runc-1.0.0-rc4.tar.xz.asc
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=26mO
+-----END PGP SIGNATURE-----
diff --git a/runc-v1.0.0rc4.tar.xz b/runc-v1.0.0rc4.tar.xz
deleted file mode 100644
index be2c9c7..0000000
--- a/runc-v1.0.0rc4.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:7704aa2959591136619067f678012a77329060907ccc7b4926b4b3299985d7d1
-size 486660
diff --git a/runc.changes b/runc.changes
index 6b73fbb..6ef2713 100644
--- a/runc.changes
+++ b/runc.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Aug 17 04:39:56 UTC 2017 - asarai@suse.com
+
+- Use .tar.xz provided by upstream, as well as include the keyring to allow
+  full provenance of the source.
+
 -------------------------------------------------------------------
 Sun Aug 13 14:25:32 UTC 2017 - asarai@suse.com
 
diff --git a/runc.keyring b/runc.keyring
new file mode 100644
index 0000000..0f485e8
--- /dev/null
+++ b/runc.keyring
@@ -0,0 +1,69 @@
+pub   rsa4096 2016-06-21 [SC] [expires: 2031-06-18]
+      5F36C6C61B5460124A75F5A69E18AA267DDB8DB4
+uid           [ultimate] Aleksa Sarai <asarai@suse.com>
+uid           [ultimate] Aleksa Sarai <asarai@suse.de>
+sub   rsa4096 2016-06-21 [E] [expires: 2031-06-18]
+
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=3/jE
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/runc.spec b/runc.spec
index c2da199..1ad4451 100644
--- a/runc.spec
+++ b/runc.spec
@@ -22,7 +22,7 @@
 %define git_version %{nil}
 
 %define go_tool go
-%define _version 1.0.0rc4
+%define _version 1.0.0-rc4
 %define project github.com/opencontainers/runc
 
 # enable libseccomp for sle >= sle12sp2
@@ -45,7 +45,9 @@ Summary:        Tool for spawning and running OCI containers
 License:        Apache-2.0
 Group:          System/Management
 Url:            https://github.com/opencontainers/runc
-Source:         %{name}-v%{_version}.tar.xz
+Source0:        runc-%{_version}.tar.xz
+Source1:        runc-%{_version}.tar.xz.asc
+Source2:        runc.keyring
 BuildRequires:  fdupes
 # Make sure we require go 1.7
 BuildRequires:  go-go-md2man
@@ -84,7 +86,7 @@ BuildArch:      noarch
 Test package for runc. It contains the source code and the tests.
 
 %prep
-%setup -q -n %{name}-v%{_version}
+%setup -q -n %{name}-%{_version}
 # bsc#1053532
 %patch100 -p1