diff --git a/krb5.spec b/krb5.spec
index 5e13c23b5de2744251e07152985b126f55004663..c81173eb5033327f40dccbf89a12483e772937e9 100644
--- a/krb5.spec
+++ b/krb5.spec
@@ -1,3 +1,4 @@
+%define anolis_release .0.1
 %global WITH_DIRSRV 1
 
 # Set this so that find-lang.sh will recognize the .po files.
@@ -18,7 +19,7 @@ Summary: The Kerberos network authentication system
 Name: krb5
 Version: 1.18.2
 # for prerelease, should be e.g., 0.% {prerelease}.1% { ?dist } (without spaces)
-Release: 14%{?dist}
+Release: 14%{anolis_release}%{?dist}
 
 # lookaside-cached sources; two downloads and a build artifact
 Source0: https://web.mit.edu/kerberos/dist/krb5/1.18/krb5-%{version}%{prerelease}.tar.gz
@@ -267,6 +268,14 @@ Kerberos is a network authentication system. The libkadm5 package
 contains only the libkadm5clnt and libkadm5serv shared objects. This
 interface is not considered stable.
 
+%package doc
+Summary: Documents for %{name}
+BuildArch: noarch
+Requires: %{name} = %{version}-%{release}
+
+%description doc
+Doc pages for %{name}.
+
 %prep
 %autosetup -S git -n %{name}-%{version}%{prerelease} -a 3
 ln NOTICE LICENSE
@@ -622,7 +631,6 @@ exit 0
 %{_sbindir}/kdb5_ldap_util
 
 %files libs -f %{gettext_domain}.lang
-%doc README NOTICE
 %{!?_licensedir:%global license %%doc}
 %license LICENSE
 %docdir %{_mandir}
@@ -695,7 +703,13 @@ exit 0
 %{_libdir}/libkadm5clnt_mit.so.*
 %{_libdir}/libkadm5srv_mit.so.*
 
+%files doc
+%doc README NOTICE
+
 %changelog
+* Tue Jul 19 2022 Bo Ren <rb01097748@alibaba-inc.com> - 1.18.2-14.0.1
+- Add doc sub package
+
 * Wed Aug 25 2021 Robbie Harwood <rharwood@redhat.com> - 1.18.2-14
 - Fix KDC null deref on TGS inner body null server (CVE-2021-37750)
 - Resolves: #1997601