piavpn-bin

MEDIUM

maintainer lobroc 29 votes scanned 2026-10-22 09:34:24.719450

View on AUR

Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:21 source_x86_64=("https://installers.privateinternetaccess.com/download/pia-linux-${_pkgver}-${build_number}.run")

PKGBUILD

1 offending line(s) highlighted

      1PACKAGER="Laurent Brock <incognito0135@protonmail.com>"
    
      2pkgname=piavpn-bin
    
      3
    
      4pkgver=3.8.0
    
      5_pkgver=3.8
    
      6build_number=08539
    
      7# https://www.privateinternetaccess.com/pages/changelog
    
      8# Switch versioning schemes for guaranteed upgrades
    
      9epoch=1
    
      10pkgrel=1
    
      11pkgdesc="Private Internet Access client"
    
      12arch=('x86_64' 'aarch64')
    
      13url="https://privateinternetaccess.com/"
    
      14license=('custom')
    
      15depends=(libxkbcommon-x11 libnl zip)
    
      16optdepends=('WIREGUARD-MODULE: to use the wireguard kernel module instead')
    
      17makedepends=(libcap)
    
      18provides=(piavpn)
    
      19conflicts=(pia-launch pia-manager pia-tools private-internet-access-vpn)
    
      20install=piavpn-bin.install
    
      21source_x86_64=("https://installers.privateinternetaccess.com/download/pia-linux-${_pkgver}-${build_number}.run")
    
      22source_aarch64=("https://installers.privateinternetaccess.com/download/pia-linux-arm64-${_pkgver}-${build_number}.run")
    
      23options=(!strip)
    
      24
    
      25sha256sums_x86_64=('a3cf2e2b50d29693ba58f0ae232e52c5785f0244a56e6ed005b684b18767399f')
    
      26sha256sums_aarch64=('612d278eaadd123f9fed7f016924e7d25a32a33273d2dbbb690faaee14a6ebb3')
    
      27
    
      28# == You need to enable and start piavpn.service. Run sudo systemctl enable --now piavpn.service ==
    
      29prepare() {
    
      30	_pia_run="pia-linux-${_pkgver}-${build_number}.run"
    
      31	if [ "$CARCH" == "aarch64" ] ;then
    
      32		_pia_run="pia-linux-arm64-${_pkgver}-${build_number}.run"
    
      33	fi
    
      34	env -i /bin/sh $_pia_run --noexec --target "${srcdir}/$pkgname-${_pkgver}-${build_number}"
    
      35}
    
      36
    
      37check() {
    
      38	grep -a 'targetdir="pia-linux' "${srcdir}/pia-linux-${_pkgver}-${build_number}.run" | cut -d'-' -f3
    
      39}
    
      40
    
      41package() {
    
      42	cd "$pkgname-$_pkgver-$build_number"
    
      43	mkdir -p $pkgdir/opt/piavpn/bin
    
      44	cp -a piafiles/* $pkgdir/opt/piavpn
    
      45	cp installfiles/*.sh $pkgdir/opt/piavpn/bin
    
      46	chmod +x $pkgdir/opt/piavpn/bin/*.sh
    
      47	setcap 'cap_net_bind_service=+ep' $pkgdir/opt/piavpn/bin/pia-unbound
    
      48	# we don't need these scripts
    
      49	rm $pkgdir/opt/piavpn/bin/install-wireguard.sh
    
      50	rm $pkgdir/opt/piavpn/bin/pia-uninstall.sh
    
      51
    
      52	mkdir -p $pkgdir/usr/share/pixmaps
    
      53	cp installfiles/app-icon.png $pkgdir/usr/share/pixmaps/piavpn.png
    
      54	mkdir -p $pkgdir/usr/share/icons/hicolor/1024x1024/apps/
    
      55	ln -s /usr/share/pixmaps/pia.png $pkgdir/usr/share/icons/hicolor/1024x1024/apps/pia.png
    
      56	mkdir -p $pkgdir/usr/share/applications
    
      57	cp installfiles/piavpn.desktop $pkgdir/usr/share/applications/piavpn.desktop
    
      58	mkdir -p $pkgdir/etc/NetworkManager/conf.d
    
      59	echo -e "[keyfile]\nunmanaged-devices=interface-name:wgpia*" > $pkgdir/etc/NetworkManager/conf.d/50-wgpia.conf
    
      60
    
      61	mkdir -p $pkgdir/usr/lib/systemd/system
    
      62	cp installfiles/piavpn.service $pkgdir/usr/lib/systemd/system/piavpn.service	
    
      63	sed -i '/^After/s/syslog.target //' $pkgdir/usr/lib/systemd/system/piavpn.service
    
      64
    
      65	mkdir -p $pkgdir/usr/share/licenses/$pkgname/
    
      66	mv $pkgdir/opt/piavpn/share/LICENSE.txt $pkgdir/usr/share/licenses/$pkgname/
    
      67
    
      68	# fix permissions: no need for executable bit
    
      69	find $pkgdir/usr -type f -exec chmod -x {} \;
    
      70
    
      71	mkdir -p $pkgdir/usr/local/bin
    
      72	ln -s ../../../opt/piavpn/bin/piactl $pkgdir/usr/local/bin/piactl
    
      73	
    
      74	# limit log to the minimum to avoid excessive flooding
    
      75	mkdir -p $pkgdir/opt/piavpn/var
    
      76	cat > $pkgdir/opt/piavpn/var/debug.txt << EOF
    
      77	
    
      78[rules]
    
      79*.debug=false
    
      80*.info=false
    
      81*.warning=false
    
      82EOF
    
      83
    
      84}
    
      85# == You need to enable and start piavpn.service. Run sudo systemctl enable --now piavpn.service ==
    
      86

Changes since previous scan

--- PKGBUILD @ 2026-06-19 19:07
+++ PKGBUILD @ 2026-10-22 09:34
@@ -1,11 +1,12 @@
 PACKAGER="Laurent Brock <incognito0135@protonmail.com>"
 pkgname=piavpn-bin
 
-pkgver=3.7.2
-build_number=08420
+pkgver=3.8.0
+_pkgver=3.8
+build_number=08539
 # https://www.privateinternetaccess.com/pages/changelog
-
-epoch=1 # Switch versioning schemes for guaranteed upgrades
+# Switch versioning schemes for guaranteed upgrades
+epoch=1
 pkgrel=1
 pkgdesc="Private Internet Access client"
 arch=('x86_64' 'aarch64')
@@ -17,27 +18,28 @@
 provides=(piavpn)
 conflicts=(pia-launch pia-manager pia-tools private-internet-access-vpn)
 install=piavpn-bin.install
-source_x86_64=("https://installers.privateinternetaccess.com/download/pia-linux-${pkgver}-${build_number}.run")
-source_aarch64=("https://installers.privateinternetaccess.com/download/pia-linux-arm64-${pkgver}-${build_number}.run")
+source_x86_64=("https://installers.privateinternetaccess.com/download/pia-linux-${_pkgver}-${build_number}.run")
+source_aarch64=("https://installers.privateinternetaccess.com/download/pia-linux-arm64-${_pkgver}-${build_number}.run")
 options=(!strip)
-sha256sums_x86_64=('08a88af04462a9e078aeef52b26bcdb56f0a9b087a0fb7606f98b7eb79bb3dd9')
-sha256sums_aarch64=('3956d1ed9b6977f24ca960e78dd60572edd435f71b2a554e5c5d00f94603eeb9')
+
+sha256sums_x86_64=('a3cf2e2b50d29693ba58f0ae232e52c5785f0244a56e6ed005b684b18767399f')
+sha256sums_aarch64=('612d278eaadd123f9fed7f016924e7d25a32a33273d2dbbb690faaee14a6ebb3')
 
 # == You need to enable and start piavpn.service. Run sudo systemctl enable --now piavpn.service ==
 prepare() {
-	_pia_run="pia-linux-${pkgver}-${build_number}.run"
+	_pia_run="pia-linux-${_pkgver}-${build_number}.run"
 	if [ "$CARCH" == "aarch64" ] ;then
-		_pia_run="pia-linux-arm64-${pkgver}-${build_number}.run"
+		_pia_run="pia-linux-arm64-${_pkgver}-${build_number}.run"
 	fi
-	env -i /bin/sh $_pia_run --noexec --target "${srcdir}/$pkgname-${pkgver}-${build_number}"
+	env -i /bin/sh $_pia_run --noexec --target "${srcdir}/$pkgname-${_pkgver}-${build_number}"
 }
 
 check() {
-	grep -a 'targetdir="pia-linux' "${srcdir}/pia-linux-${pkgver}-${build_number}.run" | cut -d'-' -f3
+	grep -a 'targetdir="pia-linux' "${srcdir}/pia-linux-${_pkgver}-${build_number}.run" | cut -d'-' -f3
 }
 
 package() {
-	cd "$pkgname-$pkgver-$build_number"
+	cd "$pkgname-$_pkgver-$build_number"
 	mkdir -p $pkgdir/opt/piavpn/bin
 	cp -a piafiles/* $pkgdir/opt/piavpn
 	cp installfiles/*.sh $pkgdir/opt/piavpn/bin

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 09:34:24	Medium	1
2026-06-19 19:07:35	Clean	2
2026-06-18 16:11:54	Medium	1