diff --git a/centos/SPECS/389-ds-base.spec b/centos/SPECS/389-ds-base.spec
new file mode 100644
index 0000000..2cbf9b2
--- /dev/null
+++ b/centos/SPECS/389-ds-base.spec
@@ -0,0 +1,582 @@
+
+%global pkgname   dirsrv
+%global srcname   389-ds-base
+
+# Exclude i686 bit arches
+ExcludeArch: i686 
+
+# for a pre-release, define the prerel field e.g. .a1 .rc2 - comment out for official release
+# also remove the space between % and global - this space is needed because
+# fedpkg verrel stupidly ignores comment lines
+#% global prerel .rc3
+# also need the relprefix field for a pre-release e.g. .0 - also comment out for official release
+#% global relprefix 0.
+
+# If perl-Socket-2.000 or newer is available, set 0 to use_Socket6.
+%global use_Socket6 0
+
+%global use_asan 0
+%global use_rust 0
+%global use_perl 1
+%global bundle_jemalloc 1
+%if %{use_asan}
+%global bundle_jemalloc 0
+%endif
+
+%if %{bundle_jemalloc}
+%global jemalloc_name jemalloc
+%global jemalloc_ver 5.2.0
+%global __provides_exclude ^libjemalloc\\.so.*$
+%endif
+
+# Use Clang instead of GCC
+%global use_clang 0
+
+# fedora 15 and later uses tmpfiles.d
+# otherwise, comment this out
+%{!?with_tmpfiles_d: %global with_tmpfiles_d %{_sysconfdir}/tmpfiles.d}
+
+# systemd support
+%global groupname %{pkgname}.target
+
+# set PIE flag
+%global _hardened_build 1
+
+Summary:          389 Directory Server (base)
+Name:             389-ds-base
+Version:          1.4.4.9
+Release:          %{?relprefix}1%{?prerel}%{?dist}
+License:          GPLv3+
+URL:              https://www.port389.org
+Group:            System Environment/Daemons
+Conflicts:        selinux-policy-base < 3.9.8
+Conflicts:        freeipa-server < 4.0.3
+Obsoletes:        %{name} <= 1.4.0.9
+Provides:         ldif2ldbm >= 0
+
+BuildRequires:    nspr-devel
+BuildRequires:    nss-devel >= 3.34
+BuildRequires:    perl-generators
+BuildRequires:    openldap-devel
+BuildRequires:    libdb-devel
+BuildRequires:    cyrus-sasl-devel
+BuildRequires:    icu
+BuildRequires:    libicu-devel
+BuildRequires:    pcre-devel
+BuildRequires:    cracklib-devel
+%if %{use_clang}
+BuildRequires:    libatomic
+BuildRequires:    clang
+%else
+BuildRequires:    gcc
+BuildRequires:    gcc-c++
+%endif
+# The following are needed to build the snmp ldap-agent
+BuildRequires:    net-snmp-devel
+BuildRequires:    lm_sensors-devel
+BuildRequires:    bzip2-devel
+BuildRequires:    zlib-devel
+BuildRequires:    openssl-devel
+# the following is for the pam passthru auth plug-in
+BuildRequires:    pam-devel
+BuildRequires:    systemd-units
+BuildRequires:    systemd-devel
+%if %{use_asan}
+BuildRequires:    libasan
+%endif
+# If rust is enabled
+%if %{use_rust}
+BuildRequires: cargo
+BuildRequires: rust
+%endif
+BuildRequires:    pkgconfig
+BuildRequires:    pkgconfig(systemd)
+BuildRequires:    pkgconfig(krb5)
+
+# Needed to support regeneration of the autotool artifacts.
+BuildRequires:    autoconf
+BuildRequires:    automake
+BuildRequires:    libtool
+# For our documentation
+BuildRequires:    doxygen
+# For tests!
+BuildRequires:    libcmocka-devel
+BuildRequires:    libevent-devel
+# For lib389 and related components
+BuildRequires:    python%{python3_pkgversion}
+BuildRequires:    python%{python3_pkgversion}-devel
+BuildRequires:    python%{python3_pkgversion}-setuptools
+BuildRequires:    python%{python3_pkgversion}-ldap
+BuildRequires:    python%{python3_pkgversion}-six
+BuildRequires:    python%{python3_pkgversion}-pyasn1
+BuildRequires:    python%{python3_pkgversion}-pyasn1-modules
+BuildRequires:    python%{python3_pkgversion}-dateutil
+BuildRequires:    python%{python3_pkgversion}-argcomplete
+BuildRequires:    python%{python3_pkgversion}-argparse-manpage
+BuildRequires:    python%{python3_pkgversion}-libselinux
+BuildRequires:    python%{python3_pkgversion}-policycoreutils
+
+# For cockpit
+BuildRequires:    rsync
+BuildRequires:    npm
+BuildRequires:    nodejs
+
+Requires:         %{name}-libs = %{version}-%{release}
+Requires:         python%{python3_pkgversion}-lib389 = %{version}-%{release}
+
+# this is needed for using semanage from our setup scripts
+Requires:         policycoreutils-python-utils
+Requires:         /usr/sbin/semanage
+Requires:         libsemanage-python%{python3_pkgversion}
+
+Requires:         selinux-policy >= 3.14.1-29
+
+# the following are needed for some of our scripts
+Requires:         openldap-clients
+Requires:         openssl-perl
+Requires:         python%{python3_pkgversion}-ldap
+
+# this is needed to setup SSL if you are not using the
+# administration server package
+Requires:         nss-tools
+Requires:         nss >= 3.34
+
+# these are not found by the auto-dependency method
+# they are required to support the mandatory LDAP SASL mechs
+Requires:         cyrus-sasl-gssapi
+Requires:         cyrus-sasl-md5
+Requires:         cyrus-sasl-plain
+
+# this is needed for verify-db.pl
+Requires:         libdb-utils
+
+# This picks up libperl.so as a Requires, so we add this versioned one
+Requires:         perl(:MODULE_COMPAT_%(eval "`%{__perl} -V:version`"; echo $version))
+Requires:         perl-Errno >= 1.23-360
+
+# Needed by logconv.pl
+Requires:         perl-DB_File
+Requires:         perl-Archive-Tar
+
+# Needed for password dictionary checks
+Requires:         cracklib-dicts
+
+# Picks up our systemd deps.
+%{?systemd_requires}
+
+Obsoletes:        %{name} <= 1.3.5.4
+
+Source0:          https://releases.pagure.org/389-ds-base/%{name}-%{version}%{?prerel}.tar.gz
+# 389-ds-git.sh should be used to generate the source tarball from git
+Source1:          %{name}-git.sh
+Source2:          %{name}-devel.README
+%if %{bundle_jemalloc}
+Source3:          https://github.com/jemalloc/%{jemalloc_name}/releases/download/%{jemalloc_ver}/%{jemalloc_name}-%{jemalloc_ver}.tar.bz2
+%endif
+
+%description
+389 Directory Server is an LDAPv3 compliant server.  The base package includes
+the LDAP server and command line utilities for server administration.
+%if %{use_asan}
+WARNING! This build is linked to Address Sanitisation libraries. This probably
+isnt what you want. Please contact support immediately.
+Please see http://seclists.org/oss-sec/2016/q1/363 for more information.
+%endif
+
+%package          libs
+Summary:          Core libraries for 389 Directory Server
+Group:            System Environment/Daemons
+BuildRequires:    nspr-devel
+BuildRequires:    nss-devel >= 3.34
+BuildRequires:    openldap-devel
+BuildRequires:    libdb-devel
+BuildRequires:    cyrus-sasl-devel
+BuildRequires:    libicu-devel
+BuildRequires:    pcre-devel
+BuildRequires:    libtalloc-devel
+BuildRequires:    libevent-devel
+BuildRequires:    libtevent-devel
+Requires:         krb5-libs
+Requires:         libevent
+BuildRequires:    systemd-devel
+Provides:         svrcore = 4.1.4
+Conflicts:        svrcore
+Obsoletes:        svrcore <= 4.1.3
+
+%description      libs
+Core libraries for the 389 Directory Server base package.  These libraries
+are used by the main package and the -devel package.  This allows the -devel
+package to be installed with just the -libs package and without the main package.
+
+%package          devel
+Summary:          Development libraries for 389 Directory Server
+Group:            Development/Libraries
+Requires:         %{name}-libs = %{version}-%{release}
+Requires:         pkgconfig
+Requires:         nspr-devel
+Requires:         nss-devel >= 3.34
+Requires:         openldap-devel
+Requires:         libtalloc
+Requires:         libevent
+Requires:         libtevent
+Requires:         systemd-libs
+Provides:         svrcore-devel = 4.1.4
+Conflicts:        svrcore-devel
+Obsoletes:        svrcore-devel <= 4.1.3
+
+%description      devel
+Development Libraries and headers for the 389 Directory Server base package.
+
+%package          snmp
+Summary:          SNMP Agent for 389 Directory Server
+Group:            System Environment/Daemons
+Requires:         %{name} = %{version}-%{release}
+
+Obsoletes:        %{name} <= 1.4.0.0
+
+%description      snmp
+SNMP Agent for the 389 Directory Server base package.
+
+%package -n python%{python3_pkgversion}-lib389
+Summary:  A library for accessing, testing, and configuring the 389 Directory Server
+BuildArch:        noarch
+Group:            Development/Libraries
+Requires: krb5-workstation
+Requires: krb5-server
+Requires: openssl
+Requires: iproute
+Requires: python%{python3_pkgversion}
+Requires: python%{python3_pkgversion}-ldap
+Requires: python%{python3_pkgversion}-six
+Requires: python%{python3_pkgversion}-pyasn1
+Requires: python%{python3_pkgversion}-pyasn1-modules
+Requires: python%{python3_pkgversion}-dateutil
+Requires: python%{python3_pkgversion}-argcomplete
+Requires: python%{python3_pkgversion}-libselinux
+%{?python_provide:%python_provide python%{python3_pkgversion}-lib389}
+
+%description -n python%{python3_pkgversion}-lib389
+This module contains tools and libraries for accessing, testing,
+ and configuring the 389 Directory Server.
+
+%package -n cockpit-389-ds
+Summary:          Cockpit UI Plugin for configuring and administering the 389 Directory Server
+BuildArch:        noarch
+Requires:         cockpit
+Requires:         python%{python3_pkgversion}
+Requires:         python%{python3_pkgversion}-packaging
+Requires:         python%{python3_pkgversion}-lib389
+
+%description -n cockpit-389-ds
+A cockpit UI Plugin for configuring and administering the 389 Directory Server
+
+%prep
+%setup -q -n %{name}-%{version}%{?prerel}
+
+%if %{bundle_jemalloc}
+%setup -q -n %{name}-%{version}%{?prerel} -T -D -b 3
+%endif
+
+cp %{SOURCE2} README.devel
+
+%build
+
+OPENLDAP_FLAG="--with-openldap"
+%{?with_tmpfiles_d: TMPFILES_FLAG="--with-tmpfiles-d=%{with_tmpfiles_d}"}
+
+%if %{use_asan}
+ASAN_FLAGS="--enable-asan --enable-debug"
+%endif
+
+%if %{use_rust}
+RUST_FLAGS="--enable-rust"
+%endif
+
+%if !%{use_perl}
+PERL_FLAGS="--disable-perl"
+%endif
+
+%if %{use_clang}
+export CC=clang
+export CXX=clang++
+CLANG_FLAGS="--enable-clang"
+%endif
+
+%if %{bundle_jemalloc}
+# Build jemalloc
+pushd ../%{jemalloc_name}-%{jemalloc_ver}
+%configure \
+        --libdir=%{_libdir}/%{pkgname}/lib \
+        --bindir=%{_libdir}/%{pkgname}/bin
+make
+popd
+%endif
+
+# Enforce strict linking
+%define _strict_symbol_defs_build 1
+
+# Rebuild the autotool artifacts now.
+autoreconf -fiv
+
+%configure --enable-autobind --with-selinux $OPENLDAP_FLAG $TMPFILES_FLAG \
+           --with-systemd \
+           --with-systemdsystemunitdir=%{_unitdir} \
+           --with-systemdsystemconfdir=%{_sysconfdir}/systemd/system \
+           --with-systemdgroupname=%{groupname}  \
+           --libexecdir=%{_libexecdir}/%{pkgname} \
+           $ASAN_FLAGS $RUST_FLAGS $PERL_FLAGS $CLANG_FLAGS \
+           --with-openldap \
+           --enable-debug \
+           --enable-cmocka 
+
+# lib389
+pushd ./src/lib389
+%py3_build
+popd
+# argparse-manpage dynamic man pages have hardcoded man v1 in header,
+# need to change it to v8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsconf.8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsctl.8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dsidm.8
+sed -i  "1s/\"1\"/\"8\"/" %{_builddir}/%{name}-%{version}%{?prerel}/src/lib389/man/dscreate.8
+
+# Generate symbolic info for debuggers
+export XCFLAGS=$RPM_OPT_FLAGS
+
+#make %{?_smp_mflags}
+make
+
+%install
+
+mkdir -p %{buildroot}%{_datadir}/gdb/auto-load%{_sbindir}
+mkdir -p %{buildroot}%{_datadir}/cockpit
+make DESTDIR="$RPM_BUILD_ROOT" install
+
+# Cockpit branding, and directory and file list
+find %{buildroot}%{_datadir}/cockpit/389-console -type d | sed -e "s@%{buildroot}@@" | sed -e 's/^/\%dir /' > cockpit.list
+find %{buildroot}%{_datadir}/cockpit/389-console -type f | sed -e "s@%{buildroot}@@" >> cockpit.list
+
+# Copy in our docs from doxygen.
+cp -r %{_builddir}/%{name}-%{version}%{?prerel}/man/man3 $RPM_BUILD_ROOT/%{_mandir}/man3
+
+# lib389
+pushd src/lib389
+%py3_install
+popd
+
+mkdir -p $RPM_BUILD_ROOT/var/log/%{pkgname}
+mkdir -p $RPM_BUILD_ROOT/var/lib/%{pkgname}
+mkdir -p $RPM_BUILD_ROOT/var/lock/%{pkgname}
+
+# for systemd
+mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/systemd/system/%{groupname}.wants
+
+#remove libtool archives and static libs
+find %{buildroot} -type f -name "*.la" -delete
+find %{buildroot} -type f -name "*.a" -delete
+
+%if %{bundle_jemalloc}
+pushd ../%{jemalloc_name}-%{jemalloc_ver}
+make DESTDIR="$RPM_BUILD_ROOT" install_lib install_bin
+cp -pa COPYING ../%{name}-%{version}%{?prerel}/COPYING.jemalloc
+cp -pa README ../%{name}-%{version}%{?prerel}/README.jemalloc
+popd
+%endif
+
+%check
+# This checks the code, if it fails it prints why, then re-raises the fail to shortcircuit the rpm build.
+if ! make DESTDIR="$RPM_BUILD_ROOT" check; then cat ./test-suite.log && false; fi
+
+%clean
+rm -rf $RPM_BUILD_ROOT
+
+%post
+if [ -n "$DEBUGPOSTTRANS" ] ; then
+    output=$DEBUGPOSTTRANS
+    output2=${DEBUGPOSTTRANS}.upgrade
+else
+    output=/dev/null
+    output2=/dev/null
+fi
+# reload to pick up any changes to systemd files
+/bin/systemctl daemon-reload >$output 2>&1 || :
+
+# https://fedoraproject.org/wiki/Packaging:UsersAndGroups#Soft_static_allocation
+# Soft static allocation for UID and GID
+USERNAME="dirsrv"
+ALLOCATED_UID=389
+GROUPNAME="dirsrv"
+ALLOCATED_GID=389
+HOMEDIR="/usr/share/dirsrv"
+
+getent group $GROUPNAME >/dev/null || /usr/sbin/groupadd -f -g $ALLOCATED_GID -r $GROUPNAME
+if ! getent passwd $USERNAME >/dev/null ; then
+    if ! getent passwd $ALLOCATED_UID >/dev/null ; then
+      /usr/sbin/useradd -r -u $ALLOCATED_UID -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME
+    else
+      /usr/sbin/useradd -r -g $GROUPNAME -d $HOMEDIR -s /sbin/nologin -c "user for 389-ds-base" $USERNAME
+    fi
+fi
+
+# Reload our sysctl before we restart (if we can)
+sysctl --system &> $output; true
+
+%preun
+if [ $1 -eq 0 ]; then # Final removal
+    # remove instance specific service files/links
+    rm -rf %{_sysconfdir}/systemd/system/%{groupname}.wants/* > /dev/null 2>&1 || :
+fi
+
+%postun
+if [ $1 = 0 ]; then # Final removal
+    rm -rf /var/run/%{pkgname}
+fi
+
+%post snmp
+%systemd_post %{pkgname}-snmp.service
+
+%preun snmp
+%systemd_preun %{pkgname}-snmp.service %{groupname}
+
+%postun snmp
+%systemd_postun_with_restart %{pkgname}-snmp.service
+
+%files
+%if %{bundle_jemalloc}
+%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.jemalloc
+%license COPYING.jemalloc
+%else
+%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl
+%endif
+%dir %{_sysconfdir}/%{pkgname}
+%dir %{_sysconfdir}/%{pkgname}/schema
+%config(noreplace)%{_sysconfdir}/%{pkgname}/schema/*.ldif
+%dir %{_sysconfdir}/%{pkgname}/config
+%dir %{_sysconfdir}/systemd/system/%{groupname}.wants
+%config(noreplace)%{_sysconfdir}/%{pkgname}/config/slapd-collations.conf
+%config(noreplace)%{_sysconfdir}/%{pkgname}/config/certmap.conf
+%{_datadir}/%{pkgname}
+%{_datadir}/gdb/auto-load/*
+%{_unitdir}
+%{_bindir}/dbscan
+%{_mandir}/man1/dbscan.1.gz
+%{_bindir}/ds-replcheck
+%{_mandir}/man1/ds-replcheck.1.gz
+%{_bindir}/ds-logpipe.py
+%{_mandir}/man1/ds-logpipe.py.1.gz
+%{_bindir}/ldclt
+%{_mandir}/man1/ldclt.1.gz
+%{_bindir}/logconv.pl
+%{_mandir}/man1/logconv.pl.1.gz
+%{_bindir}/pwdhash
+%{_mandir}/man1/pwdhash.1.gz
+#%caps(CAP_NET_BIND_SERVICE=pe) {_sbindir}/ns-slapd
+%{_sbindir}/ns-slapd
+%{_mandir}/man8/ns-slapd.8.gz
+%{_libexecdir}/%{pkgname}/ds_systemd_ask_password_acl
+%{_mandir}/man5/99user.ldif.5.gz
+%{_mandir}/man5/certmap.conf.5.gz
+%{_mandir}/man5/slapd-collations.conf.5.gz
+%{_mandir}/man5/dirsrv.5.gz
+%{_mandir}/man5/dirsrv.systemd.5.gz
+%{_libdir}/%{pkgname}/python
+%{_sbindir}/openldap_to_ds
+%{_mandir}/man8/openldap_to_ds.8.gz
+%dir %{_libdir}/%{pkgname}/plugins
+%{_libdir}/%{pkgname}/plugins/*.so
+# This has to be hardcoded to /lib - $libdir changes between lib/lib64, but
+# sysctl.d is always in /lib.
+%{_prefix}/lib/sysctl.d/*
+%dir %{_localstatedir}/lib/%{pkgname}
+%dir %{_localstatedir}/log/%{pkgname}
+%ghost %dir %{_localstatedir}/lock/%{pkgname}
+%exclude %{_sbindir}/ldap-agent*
+%exclude %{_mandir}/man1/ldap-agent.1.gz
+%exclude %{_unitdir}/%{pkgname}-snmp.service
+%if %{bundle_jemalloc}
+%{_libdir}/%{pkgname}/lib/
+%{_libdir}/%{pkgname}/bin/
+%exclude %{_libdir}/%{pkgname}/bin/jemalloc-config
+%exclude %{_libdir}/%{pkgname}/bin/jemalloc.sh
+%exclude %{_libdir}/%{pkgname}/lib/libjemalloc.a
+%exclude %{_libdir}/%{pkgname}/lib/libjemalloc.so
+%exclude %{_libdir}/%{pkgname}/lib/libjemalloc_pic.a
+%exclude %{_libdir}/%{pkgname}/lib/pkgconfig
+%endif
+
+%files devel
+%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
+%{_mandir}/man3/*
+%{_includedir}/svrcore.h
+%{_includedir}/%{pkgname}
+%{_libdir}/libsvrcore.so
+%{_libdir}/%{pkgname}/libslapd.so
+%{_libdir}/%{pkgname}/libns-dshttpd.so
+%{_libdir}/%{pkgname}/libsds.so
+%{_libdir}/%{pkgname}/libldaputil.so
+%{_libdir}/pkgconfig/svrcore.pc
+%{_libdir}/pkgconfig/dirsrv.pc
+%{_libdir}/pkgconfig/libsds.pc
+
+%files libs
+%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
+%dir %{_libdir}/%{pkgname}
+%{_libdir}/libsvrcore.so.*
+%{_libdir}/%{pkgname}/libslapd.so.*
+%{_libdir}/%{pkgname}/libns-dshttpd-*.so
+%{_libdir}/%{pkgname}/libsds.so.*
+%{_libdir}/%{pkgname}/libldaputil.so.*
+%{_libdir}/%{pkgname}/librewriters.so*
+%if %{bundle_jemalloc}
+%{_libdir}/%{pkgname}/lib/libjemalloc.so.2
+%endif
+%if %{use_rust}
+%{_libdir}/%{pkgname}/librsds.so
+%endif
+
+%files snmp
+%doc LICENSE LICENSE.GPLv3+ LICENSE.openssl README.devel
+%config(noreplace)%{_sysconfdir}/%{pkgname}/config/ldap-agent.conf
+%{_sbindir}/ldap-agent*
+%{_mandir}/man1/ldap-agent.1.gz
+%{_unitdir}/%{pkgname}-snmp.service
+
+%files -n python%{python3_pkgversion}-lib389
+%doc LICENSE LICENSE.GPLv3+
+%{python3_sitelib}/lib389*
+%{_sbindir}/dsconf
+%{_mandir}/man8/dsconf.8.gz
+%{_sbindir}/dscreate
+%{_mandir}/man8/dscreate.8.gz
+%{_sbindir}/dsctl
+%{_mandir}/man8/dsctl.8.gz
+%{_sbindir}/dsidm
+%{_mandir}/man8/dsidm.8.gz
+%{_libexecdir}/dirsrv/dscontainer
+
+%files -n cockpit-389-ds -f cockpit.list
+%{_datarootdir}/metainfo/389-console/org.port389.cockpit_console.metainfo.xml
+%doc README.md
+
+%changelog
+* Wed Dec 9 2020 Daniel Steiner <daniel.steiner@threema.ch>
+- Update to latest version (1.4.4.9).
+
+* Tue Aug 4 2020 Daniel Steiner <daniel.steiner@threema.ch>
+- Update to latest version (1.4.4.4).
+
+* Mon Jul 6 2020 Daniel Steiner <daniel.steiner@threema.ch>
+- Update to latest version (1.4.4.3).
+
+* Thu Feb 13 2020 Daniel Steiner <daniel.steiner@threema.ch>
+- Update to latest version (1.4.2.7).
+
+* Wed Nov 27 2019 Daniel Steiner <daniel.steiner@threema.ch>
+- Update to latest version (1.4.2.4).
+
+* Tue Nov 5 2019 Daniel Steiner <daniel.steiner@threema.ch>
+- Update to latest version (1.4.2.3).
+
+* Wed Oct 2 2019 Daniel Steiner <daniel.steiner@threema.ch>
+- First build.
+