Testing
Flaky tests that pass locally but fail in CI. Tests that corrupt shared state and cause downstream failures. Debugging sessions that end with "works on my machine." These problems share a root cause: your tests are fighting over shared, mutable environments. Ephemeral test environments solve this by treating
Testing
Testcontainers starts real Docker containers in tests, replacing mocks and in-memory fakes. The basics — starting a single Postgres or Redis container — are covered in the official docs. The advanced features are what scale: multi-container networks, Docker Compose module integration, parallel test execution, custom wait strategies, and resource reuse across test
Trivy
Trivy is a fast, comprehensive open-source vulnerability scanner from Aqua Security that scans container images, filesystems, Git repositories, Kubernetes manifests, and IaC files. This guide covers local scanning, GitHub Actions integration, SBOM generation, and managing findings with .trivyignore. Key Takeaways Trivy scans more than just OS packages. It detects vulnerabilities
Testing
Coolify has emerged as the leading self-hosted alternative to platforms like Heroku and Render. It runs on your own servers — a single Hetzner VPS, a bare-metal box, or a small cluster — and gives you Heroku-style deployment workflows without the per-seat pricing or data sovereignty concerns. For teams with compliance requirements,
Testing
Every system call a container makes is an attack surface. seccomp (Secure Computing Mode) lets you define exactly which syscalls a container is allowed to make — and kill or log anything outside that list. The challenge is writing profiles that are tight enough to restrict attacker behavior but permissive enough
Testing
MailHog is an open-source local SMTP server that captures all outgoing emails and exposes them via a web UI and HTTP API. No signups, no internet connection required, and no risk of emails reaching real users. This guide covers running MailHog in Docker, asserting on captured emails via its HTTP
Chaos Engineering
Pumba is a chaos testing tool for Docker containers. It kills containers, pauses them, and injects network failures using Linux tc (traffic control) — directly on your Docker host or inside Docker Compose environments. If you run microservices locally with Docker Compose or test in Docker-based CI environments, Pumba is the
Security Testing
Trivy is an open-source vulnerability scanner that covers container images (OS packages and application dependencies), Kubernetes manifests, Terraform, Dockerfiles, and secrets. It's fast, requires no setup beyond installation, and produces structured JSON or table output. Use Trivy in CI to block builds with critical vulnerabilities before they reach
Testing
Shipping a container image without testing it is like deploying code without running tests. The image might contain known CVEs in its base layer, misconfigured file permissions, unnecessary packages that expand your attack surface, or missing dependencies that cause runtime failures. All of these are detectable before the image ever
Integration Testing
Mocking database calls in Python tests creates a false sense of security. testcontainers-python spins up real PostgreSQL, Redis, and MongoDB containers via Docker during your pytest run, giving you genuine integration coverage without managing external services. Key Takeaways testcontainers-python integrates with pytest through fixtures. Define containers in conftest.py and
Testing
Mocks lie. They model your assumptions about a dependency, not the dependency itself. When a PostgreSQL query behaves differently across versions, when a Redis EXPIRE command has subtle timing behavior, or when Kafka consumer group rebalancing breaks your processing logic — mocks won't catch it. Testcontainers will. Testcontainers is
Integration Testing
Node.js integration tests that mock PostgreSQL and Redis test your assumptions, not your code. testcontainers starts real database containers during your Jest run and tears them down after. Your tests talk to the actual services — no mocks, no drift, no surprises. Key Takeaways testcontainers/node works with Jest, Vitest,