From 396f26d4bb4fdcc6dc2bc44bb6c3bbfbd9c7ff4e Mon Sep 17 00:00:00 2001
From: Kacper Wolkiewicz <kacper.wolkiewicz@reef.pl>
Date: Wed, 5 Aug 2026 13:09:11 +0200
Subject: [PATCH] fix: replace unmaintained watchtower with nicholas-fedor fork

The original containrrr/watchtower was archived in December 2025 and its
Docker API client (v1.25) is rejected by modern Docker engines, breaking
automatic updates. The nicholas-fedor/watchtower fork is actively
maintained, supports current Docker API versions and is a drop-in
replacement - it keeps the com.centurylinklabs.watchtower.* labels and
all the flags we use.

Impacts: miner, miner-runner, validator, validator-runner
---
 install_miner.sh                          | 2 +-
 install_validator.sh                      | 2 +-
 miner/envs/runner/README.md               | 2 +-
 miner/envs/runner/data/docker-compose.yml | 2 +-
 validator/envs/runner/README.md           | 2 +-
 5 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/install_miner.sh b/install_miner.sh
index a0b8be019..c75ed2106 100755
--- a/install_miner.sh
+++ b/install_miner.sh
@@ -147,7 +147,7 @@ services:
       - "com.centurylinklabs.watchtower.enable=true"
 
   watchtower:
-    image: containrrr/watchtower:latest
+    image: nickfedor/watchtower:1.20.3
     restart: unless-stopped
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
diff --git a/install_validator.sh b/install_validator.sh
index d3e28a790..0cf23ddac 100755
--- a/install_validator.sh
+++ b/install_validator.sh
@@ -117,7 +117,7 @@ services:
       - "com.centurylinklabs.watchtower.enable=true"
 
   watchtower:
-    image: containrrr/watchtower:latest
+    image: nickfedor/watchtower:1.20.3
     restart: unless-stopped
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
diff --git a/miner/envs/runner/README.md b/miner/envs/runner/README.md
index 9c2e3cf2c..a22df1047 100644
--- a/miner/envs/runner/README.md
+++ b/miner/envs/runner/README.md
@@ -48,7 +48,7 @@ services:
       - "com.centurylinklabs.watchtower.enable=true"
 
   watchtower:
-    image: containrrr/watchtower:latest
+    image: nickfedor/watchtower:1.20.3
     restart: unless-stopped
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
diff --git a/miner/envs/runner/data/docker-compose.yml b/miner/envs/runner/data/docker-compose.yml
index 3db6ffae3..273e9b174 100644
--- a/miner/envs/runner/data/docker-compose.yml
+++ b/miner/envs/runner/data/docker-compose.yml
@@ -144,7 +144,7 @@ services:
       "--threshold", "${DOCKER_STORAGE_THRESHOLD:-50 GB}",
       "--keep", "^redis:8.2-alpine",
       "--keep", "^postgres:14.0-alpine",
-      "--keep", "^containrrr/watchtower",
+      "--keep", "^nickfedor/watchtower",
       "--keep", "^stephanmisc/docuum:0.23.1",
       "--keep", "^backenddevelopersltd/compute-horde-miner-runner:v0-latest",
       "--keep", "^backenddevelopersltd/${MINER_IMAGE_REPO}:v0-(latest|preprod)",
diff --git a/validator/envs/runner/README.md b/validator/envs/runner/README.md
index 0749bb3c3..8390aeb0f 100644
--- a/validator/envs/runner/README.md
+++ b/validator/envs/runner/README.md
@@ -32,7 +32,7 @@ services:
       - "com.centurylinklabs.watchtower.enable=true"
 
   watchtower:
-    image: containrrr/watchtower:latest
+    image: nickfedor/watchtower:1.20.3
     restart: unless-stopped
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock