Pithead v1.0.3

[1.0.3] - 2026-06-14

Hotfix — validate the Monero payout address is a primary address, so nobody silently mines to an
address that can't be paid. The published images are unchanged from 1.0.1; the fix is in the pithead
CLI (re-download the bundle / pithead upgrade to pick it up).

Fixed

• Reject non-primary Monero wallet addresses (#250). p2pool pays out via coinbase, which cannot
  send to a subaddress (8…) or an integrated address — it needs a primary/standard address
  (4…, 95 chars), and XvB credits by the same address. Previously a subaddress passed validation, the
  stack mined, and rewards silently went nowhere. Now setup re-prompts on a bad address, apply
  hard-fails with a message that names the mistake (subaddress vs integrated vs malformed), and doctor
  flags an existing install whose payout address can't be paid.

Already running an earlier version? Run ./pithead doctor — it tells you whether your Monero payout
address is a subaddress (i.e. you've been mining unpaid). Install/upgrade: see
Getting Started and Updating the stack.

Ingredients — Pithead v1.0.3

• Version: 1.0.3
• Commit: 3f9f8e94de121e330f7a466f7a3ec65f3bc9fa6f
• Built: 2026-06-15T02:47:11Z

Published images (ghcr.io/p2pool-starter-stack, tags v1.0.3 + latest)

• ghcr.io/p2pool-starter-stack/pithead-tor:v1.0.3
  • digest: ghcr.io/p2pool-starter-stack/pithead-tor@sha256:320a4cfa741d6fff64129546e6e990e10f22e64b66a387703689b8b57a770118
• ghcr.io/p2pool-starter-stack/pithead-monero:v1.0.3
  • digest: ghcr.io/p2pool-starter-stack/pithead-monero@sha256:f2b3b1ec72eeff0d1e9c5fa0e9b0b61dc9e88fed1bedb534cc135c001cf09f6a
• ghcr.io/p2pool-starter-stack/pithead-p2pool:v1.0.3
  • digest: ghcr.io/p2pool-starter-stack/pithead-p2pool@sha256:6aca87b0d5d96e63ce3aeda7e0caf1e105b9d5f8d73829055eb5970f49c6d6eb
• ghcr.io/p2pool-starter-stack/pithead-xmrig-proxy:v1.0.3
  • digest: ghcr.io/p2pool-starter-stack/pithead-xmrig-proxy@sha256:ae62a96a04e5cd086b6556047895020f12a9b194c3aa02131bcfda45e9544396
• ghcr.io/p2pool-starter-stack/pithead-dashboard:v1.0.3
  • digest: ghcr.io/p2pool-starter-stack/pithead-dashboard@sha256:432ebb0a61f4e9975200a30ac1855a3d17a2d61e5f605f23ff5996574061da0e

Upstream component pins

• p2pool: v4.16
• monerod: v0.18.5.0
• xmrig-proxy: 6.26.0
• tor base: alpine:latest@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
• tari: quay.io/tarilabs/minotari_node:v5.3.1-mainnet@sha256:824fd6ec21d618805317d7eede374d6782906eeae17d2fc8aaad4df6205f94e0
• caddy: caddy:2.11.4@sha256:cfeb0b281bc44a5a51fecde39e9e577c60d863c0b6196e6bbdf58fd00960887f
• docker-socket-proxy: tecnativa/docker-socket-proxy:v0.4.2@sha256:1f3a6f303320723d199d2316a3e82b2e2685d86c275d5e3deeaf182573b47476