- create the user to sign keys and make a key for that user
- download or create rpms and sign them
- move the rpms into the correct directories
- create a comps.xml file to describe the package groups provided by the repository (optional)
- run createrepo
making your own repo, a comps.xml a group, using yum groupinstall make your own packages. sign them, key signing. about making packages in an appendix using yum, automatic for workstations, you control the repos.