diff --git a/apps/miner/monerod.yaml b/apps/miner/monerod.yaml
index fe7e0b4..5c9a7d8 100644
--- a/apps/miner/monerod.yaml
+++ b/apps/miner/monerod.yaml
@@ -26,7 +26,8 @@ spec:
             - "--pruned-blockchain"
             - "--sync-pruned-blocks"
             - "--rpc-bind-ip=0.0.0.0"
-            - "--rpc-restricted-bind-port=18081"
+            - "--rpc-bind-port=18081"
+            - "--restricted-rpc"
             - "--confirm-external-bind"
             - "--non-interactive"
             - "--data-dir=/home/monero/.bitmonero"
diff --git a/apps/miner/xmrig-monero-solo.yaml b/apps/miner/xmrig-monero-solo.yaml
index 6405309..67fef89 100644
--- a/apps/miner/xmrig-monero-solo.yaml
+++ b/apps/miner/xmrig-monero-solo.yaml
@@ -1,3 +1,5 @@
+# siehe xmrig-monero.yaml - xmrig/xmrig:latest ist verwaist (2017, kein RandomX/--daemon
+# Support). Offizielles Release wird per initContainer geladen.
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -14,9 +16,24 @@ spec:
         app: xmrig-monero-solo
     spec:
       priorityClassName: low-priority
+      initContainers:
+        - name: fetch-xmrig
+          image: curlimages/curl:latest
+          command:
+            - "sh"
+            - "-c"
+            - |
+              curl -fsSL -o /shared/xmrig.tar.gz \
+                https://github.com/xmrig/xmrig/releases/download/v6.26.0/xmrig-6.26.0-linux-static-x64.tar.gz
+              tar -xzf /shared/xmrig.tar.gz -C /shared --strip-components=1
+              chmod +x /shared/xmrig
+          volumeMounts:
+            - name: shared
+              mountPath: /shared
       containers:
         - name: xmrig
-          image: xmrig/xmrig:latest
+          image: alpine:latest
+          command: ["/shared/xmrig"]
           args:
             - "--daemon"
             - "-o"
@@ -27,6 +44,9 @@ spec:
             - "k8s-solo-lottery"
             - "--daemon-poll-interval=1000"
             - "--randomx-mode=light"
+          volumeMounts:
+            - name: shared
+              mountPath: /shared
           resources:
             requests:
               cpu: "500m"
@@ -34,3 +54,6 @@ spec:
             limits:
               cpu: "1"
               memory: "512Mi"
+      volumes:
+        - name: shared
+          emptyDir: {}
diff --git a/apps/miner/xmrig-monero.yaml b/apps/miner/xmrig-monero.yaml
index f90bc6d..6cb8aa7 100644
--- a/apps/miner/xmrig-monero.yaml
+++ b/apps/miner/xmrig-monero.yaml
@@ -1,3 +1,6 @@
+# xmrig/xmrig:latest auf Docker Hub ist verwaist (einziger Tag, Stand 2017, XMRig 2.4.2,
+# kein RandomX-Support). Stattdessen laedt ein initContainer das offizielle statische
+# Release direkt von github.com/xmrig/xmrig - verifizierte Quelle, aktuelle Version.
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -14,9 +17,24 @@ spec:
         app: xmrig-monero
     spec:
       priorityClassName: low-priority
+      initContainers:
+        - name: fetch-xmrig
+          image: curlimages/curl:latest
+          command:
+            - "sh"
+            - "-c"
+            - |
+              curl -fsSL -o /shared/xmrig.tar.gz \
+                https://github.com/xmrig/xmrig/releases/download/v6.26.0/xmrig-6.26.0-linux-static-x64.tar.gz
+              tar -xzf /shared/xmrig.tar.gz -C /shared --strip-components=1
+              chmod +x /shared/xmrig
+          volumeMounts:
+            - name: shared
+              mountPath: /shared
       containers:
         - name: xmrig
-          image: xmrig/xmrig:latest
+          image: alpine:latest
+          command: ["/shared/xmrig"]
           args:
             - "-o"
             - "pool.supportxmr.com:443"
@@ -26,6 +44,9 @@ spec:
             - "k8s-lottery"
             - "--tls"
             - "--randomx-mode=light"
+          volumeMounts:
+            - name: shared
+              mountPath: /shared
           resources:
             requests:
               cpu: "500m"
@@ -33,3 +54,6 @@ spec:
             limits:
               cpu: "1"
               memory: "512Mi"
+      volumes:
+        - name: shared
+          emptyDir: {}