scottgigawatt/privateerr repository overview

⁠Privateerr ⚓

Privateerr is a tiny Docker wrapper that packages the original, unmodified pia-foss/manual-connections⁠ scripts from Private Internet Access (PIA).

⁠Pull an image 📦

docker pull scottgigawatt/privateerr:latest

latest is the newest stable release. To test the newest successful build from main before it becomes a release, opt in to edge:

docker pull scottgigawatt/privateerr:edge

Major version zero omits the broad 0 alias. Prerelease versions keep only their own version and commit tags, never replacing movable stable aliases. Release publication accepts only v-prefixed annotated SemVer tags whose commits already belong to main.

Published tags are multi-architecture manifests for:

Docker should pull the right image for your host automatically.

Images are built from pinned Alpine digests and scanned before publishing. Dependency updates land through Renovate PRs first, so a rebuild of the same source commit does not silently drift to a new base image.

⁠Generate configuration ⚡

Most users should use the GitHub repository because it includes the Compose file, Makefile, example environment file, and mounted config directories:

git clone --recurse-submodules https://github.com/scottgigawatt/privateerr.git
cd privateerr
cp example.env .env

Set PIA_USER, PIA_PASS, and PIA_PF in the ignored .env file, then generate the files:

make run-privateerr

That writes:

⁠Pair Privateerr with Gluetun 🧭

Gluetun is a real VPN client. Privateerr generates PIA WireGuard configuration and server metadata for that client.

The simple use case is: generate wg0.conf, copy it into the VPN client you already use, and leave.

The powerful use case is: run Privateerr and Gluetun together in Docker Compose. Privateerr writes the WireGuard config plus PIA_WG_SERVER_NAME; the included Gluetun wrapper reads that server name, exports it as SERVER_NAMES, and Gluetun starts with the right PIA WireGuard server for port forwarding.

⁠Continue with the full documentation 🔗