45 results for test containers (8.808 seconds)

pure-effect.org
Show HN: Pure Effect – Reproduce production bugs on your laptop without a DBhttps://pure-effect.orgHi HN,I think it's safe to say that the majority of developers don't give a second thought to writing code with I/O tangled in business logic. It's all too common to see code like: const user = findUser(email); if (!user) await saveUser(user);Now, you may ask: what's the big deal? When we write code like this, two things happen:1. It gets harder to debug production bugs. Unless you have the exact same database and remote API services to connect to, you may fail to reproduce the bug.2. You have to use mocks and fakes in your tests, or use test containers, which only help somewhat, and they are slow!To solve these issues, I built Pure Effect, a tiny TypeScript/JavaScript effect library. The core idea is simple: if a function performs I/O, it isn't pure. But if it returns a description of the I/O it wants to perform, it is. So instead of await findUser(email), you return a Command object that says, "I would like to call this function, and when it finishes, here's what to do next." Your bu
Jun 21, 2026 5:36 PM
bing.com
Alcohol warning labels haven’t changed since 1988, but new designs could push drinkers to imbibe lesshttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d773a3d0747608facdfe9b4188f10&url=https%3A%2F%2Fwww.earth.com%2Flifestyle%2Falcohol-warning-labels-havent-changed-since-1988-but-new-designs-could-push-drinkers-to-imbibe-less%2F&c=6851438189005287180&mkt=en-usThe warning on U.S. alcohol containers hasn't changed in almost 30 years. Researchers tested eight replacements, and the ones naming cancer worked best.
Aug 23, 2026 12:11 AM
github.com
Show HN: Zroar – Serialized Roaring Bitmaps in Zighttps://github.com/manishrjain/zroarzroar is a ground-up implementation of Roaring Bitmaps data structure in Zig. zroar stores both the keys and (array, bitmap) containers in a single flat byte buffer, making the in-memory representation equal to the on-disk or over-the-network representation, eliminating the serialization/deserialization step entirely.The design was originally aimed at systems which keep their posting lists on disk, but zroar performs faster than CRoaring even for purely in-memory ops, due to CPU cache locality.Against CRoaring 5.0's benchmarking suite (ported to Zig), zroar is faster in 339 out of 360 tests, being 2x-9x faster (geometric mean), and up to 600x faster on serialize/deserialize.zroar avoids complex mechanism (like adaptive radix trees), uses Zig native SIMD ops and is simpler. The main logic is written in ~2000 lines of code, while CRoaring's 64-bit bitmap codebase is over 17000 LOC.Not yet: By choice, zroar doesn't support run containers, and is 64-bit only.There are more details in the G
Aug 21, 2026 8:18 PM
news.google.com
9 Best Food Storage Containers of 2026, Lab-Tested and Reviewed - Consumer Reportshttps://news.google.com/rss/articles/CBMirwFBVV95cUxNVXZhb0tha3BZVDRrSzl0SVl6MjBwcU5MUDhFc2ZwQnVnYzZlWmNtN2U3SGdfYWJDUG03M2Q5MUJ2Nkt6SGhFeHl2eGJJZGhfYWFiZ05ZY2FXaVkzZ1U3blYweWNkVC1qRnZsWHF6b09tRktfV1FlZWdVNzBXcnlJbzlhU2tpN2NHRndNcmg2VXBWeUpjRUpUcTExSTF4OWw4NmtYVVQwdXJ5aWpQa3BF?oc=59 Best Food Storage Containers of 2026, Lab-Tested and Reviewed Consumer Reports
Jul 14, 2026 7:00 AM
github.com
Show HN: TS Package to Convert Final Cut, Premiere, Resolve and OpenTimelineIOhttps://github.com/ChatOctopus/timelineA small TypeScript library that imports and exports FCPXML, FCP7/xmeml, and OTIO, plus a CLI.You can use it for reading, writing, and converting video-editing timelines with frame-accurate timing.e.g: npx @chatoctopus/timeline convert edit.fcpxml --to otioFeatures:- Format conversion - Import/parse/Export - Give it clip paths (+ optional trims); it probes them with FFprobe and assembles a timeline - Programmatic timeline constructionCaveats: it moves the structure of an edit (cuts, clips, timing, media) but not effects, color, titles, or audio mixing. Transitions only survive into OTIO (they flatten to cuts in FCPXML/xmeml), and on the Final Cut side, it reads Resolve-style asset-clip timelines rather than FCP's compound/multicam/title containers.Contributions: Looking for some real-world test files of FCP, Premiere, and Resolve to find and fix any remaining bugs.
Jun 24, 2026 1:01 PM
ray-hosting.com
Show HN: Ray Hosting – Topology-aware game server orchestrator made from scratchhttps://ray-hosting.com/en-USHey HN, I have built a game server orchestrator from scratch, As a solo-dev it took me 3+ years and almost 10 hours daily to finally complete it since i started in the beginning of 2023. Im 26 years old now!.The complexity and stuff i had to research to complete this project i couldnt have imagined them even in my dreams, but hey, here it is, my greatest professional achievement until now.Down below I will try to break down just some of the core and most important features of my game server orchestrator.1. CORE PINNING & CCD CACHE ALIGNMENTI had to research and understand CPU cache layouts. I found out that if my game containers, which utilize docker run, span across different core complex dies (CCDs) or share SMT sibling threads with a busy neighbor, L3 cache thrashing ruins single-core tick efficiency.Then what I did is that I pinned all non game-server processes strictly on core 0 and its SMT sibling core 12 using GRUB:I disabled the 1000Hz timer interrupts to prevent context switch
Jun 14, 2026 8:03 PM
news.google.com
Use Windows Sandbox and containers to test untrusted apps safely - Windows Centralhttps://news.google.com/rss/articles/CBMitwFBVV95cUxONkNUWnNIaVZwOUYyN0J6dHREa0htYmk4YUdGMnJEVWk1UnRoS0h0WXg5eGlRMVU1TEswaFh1MENLbEhFMEhYbUMwQVRUV0hsZjliQWExaVJBRkNUYURZMHVCU1NxSjFxd0lvdmRaZDF3SEFJbkhhSnh4Qy1NUmJzMkdjeWNyd2FHZmdDaEkxcnp0ZmZyODdERjdha2xPWDYyS0U0WVBtVG1KeW5sZ1llVEcyX2tXTUU?oc=5Use Windows Sandbox and containers to test untrusted apps safely Windows Central
Jun 4, 2026 7:13 PM
tobypenner.com
Show HN: Wikigraph – an interactive visualization of all of English Wikipediahttps://tobypenner.com/wikigraph/Hi! This is a visualization I've always wanted but never quite found. It's a navigable map of the Wikipedia link graph structure, with search and shortest-path finding.Offline, I parsed the May 2026 English Wikipedia full-text dump into a directed graph, used cuGraph on a GPU to run PageRank, Leiden clustering, and ForceAtlas2 for the layout. I did some post processing to get rid of lingering overlapping nodes and rendered a tiled map of raster base images (using Skia) and JSON metadata. Tiles are bundled into PMTiles. The frontend is Deck.gl.Everything is hosted on Cloudflare. Search and shortest-path are served by a Rust backend in CF Containers which uses Tantivy and bidirectional BFS.Happy to answer any questions!
Jun 2, 2026 2:11 PM
news.ycombinator.com
Dirty Frag: a kernel zero-day vs. container and microVM sandboxeshttps://news.ycombinator.com/item?id=48304227On May 7, Hyunwoo Kim (V4bel) disclosed Dirty Frag — two Linux kernel vulnerabilities (CVE-2026-43284 and CVE-2026-43500) that give unprivileged users deterministic root on most Linux distributions shipped since 2017. Microsoft confirmed active exploitation the next day.We build declaw.ai — sandboxing infrastructure for AI agents, on Firecracker microVMs. We run untrusted code we don't write and can't predict, so when Dirty Frag dropped our first question was: does our isolation boundary hold? We tested it on a deliberately unpatched kernel. It held. Here's why.The exploit is a page-cache write primitive: it tricks the kernel into overwriting the in-memory contents of any file (/usr/bin/su, /etc/passwd) and gives root. Fully deterministic, no race.Why it matters for multi-tenant platforms: the page cache is shared across the whole machine. Containers share the host kernel, and namespace isolation, seccomp, and dropped capabilities are all enforced by that kernel. A kernel exploit doesn
May 28, 2026 3:43 AM
github.com
Show HN: Ant – A from-scratch JavaScript runtime in 9 MBhttps://github.com/themackabu/antHey HN! I have been working on Ant for a while now, would love to share around now.What is Ant? It's my JavaScript runtime, built from scratch over many hours of work. Much effort has gone into keeping the binary size small, around 9MB at the moment (6.5 MB with -Os). On my M4 Pro, the hono coldstart bench (examples/npm/hono/bench-coldstart.js) lands around 5ms, about 2.4x faster than bun, and 5.8x faster than node.To keep things small, the engine ("Ant Silver") is hand-written, not a wrapper around V8/JSC/SpiderMonkey. The JIT is still a work in progress but it uses a fork of MIR as the backend.Ant currently targets the WinterTC Minimum Common API, while also passing 100% the javascript-zoo compat-table tests, and is sitting around 64% on test262.Why did I build Ant? Well, I wanted a runtime small enough to ship with CLI's and small Docker containers without having to drag along 50 to 100mb of just runtime. Ant in its current state is performant enough in some cases to compete with v8
May 9, 2026 2:31 AM
codeberg.org
Show HN: Konform Browser v140.9.0-100https://codeberg.org/konform-browser/source/releases/tag/140.9.0.100Konform Browser v140.9.0-100 has been released.Before we get started: I guess it needs to be said these days that everything here is 100% by carbon-based life-form.Aside from the latest security fixes from upstream Firefox ESR, Konform Browser now also has:- Rehauled Security Settings with convenient global configuration for WASM, JIT, WebRTC, WebGPU, Geolocation, DOM Push- Security Settings now also expose UI for enabling First-Party Isolation (same behavior as Tor Browser) and tweaking Enhanced Tracking Protection- Spoofing of Navigator.sendBeacon- Profile Import feature now supports importing profiles from Firefox and compatible browsers (FF ESR, Floorp, IronFox, LibreWolf, Midori, Palemoon, Waterfox, Zen Browser)- Built-in depropped Multi-Account Containers[0] allows configuring per-container proxies and makes container tabs part of core browser experience.- Privacy improvements and defense-in-depth[1]- Various bugfixes and improvements- Local-only ML/"AI" functionality more robust
Mar 24, 2026 10:10 PM
news.ycombinator.com
Show HN: Testing SQL logic without a real databasehttps://news.ycombinator.com/item?id=47189319Show HN: Testing SQL logic without a real databaseOver the years I kept fighting the same problem when testing repository code:real database tests are slowDocker/TestContainers add friction and startup timemocks don’t validate SQL behaviorSQLite introduces dialect differencesintegration tests are too late for fast feedbackSo I built an in-memory SQL engine focused on validating SQL behavior during unit tests.It plugs into IDbConnection, allowing repository code (Dapper or raw SQL) to run unchanged.What it doesemulates SQL dialect behaviorvalidates constraints and query logicsupports multiple providers (MySQL, SQL Server, PostgreSQL, Oracle, SQLite, DB2)simulates version-specific behaviorprovides execution metrics and plan insightsruns entirely in memory (no infrastructure)The goal is not to replace integration tests.It’s to catch SQL logic issues earlier and keep tests fast, deterministic, and portable.Why not SQLite in-memory?SQLite is great, but testing against it means testing SQLit
Feb 28, 2026 2:23 AM
github.com
Show HN: Airut – Sandboxed Claude Code sessions over emailhttps://github.com/airutorg/airutI built Airut to solve the friction I hit while switching to an agent-first workflow.With the latest models and a solid CLAUDE.md, I could reliably go from prompt to PR using Claude Code with --dangerously-skip-permissions. But that left me with two problems:1. Safety: Running permissive mode on my host machine felt reckless. I needed real sandboxing — not just a container, but network isolation too.2. Session management: I needed a way to run multiple long-running Claude Code sessions without juggling terminals.I realized the ideal interaction model matches email: asynchronous, threaded, long-form. So I built a service that runs headless Claude Code inside rootless Podman containers, mapping email threads to agent sessions.The security model goes beyond container isolation. All network traffic routes through an mitmproxy instance that enforces a per-repo allowlist — the agent can only reach pre-approved hosts. Credentials use a masked secrets system where containers get surrogate toke
Feb 9, 2026 5:04 PM
github.com
Show HN: Supabase Testcontainers for Rusthttps://github.com/j7nw4r/supabase_testcontainersI utilize Supabase as the basis for many of the applications that I create. I find it valuable to pursue a test driven development strategy for both my organic coding as well as my AI assisted coding. This makes me lean on Testcontainers often. While there are Testcontainers available for many of the foundational building block services we all use, there was not one for Supabase (at least in Rust). So I created one. Hope this helps someone out there. Thanks.Full disclosure I also use AI to assist me in doing this in a timely manner. If you find any issues or broken code, please submit an issue. I've added tests, but sometimes things fall through the cracks. Thank you.
Nov 30, 2025 3:06 PM
news.ycombinator.com
Ask HN: How common is banning Docker?https://news.ycombinator.com/item?id=45926181I was doing some client work recently at a bank, where most of their engineering is offshored one of the big offshore companies.The offshore team had to access everything via virtual desktops, and one of the restrictions was no virtualisation within the virtual desktop - so tooling like Docker was banned.I was really surprsied to see modern JVM development going on, without access to things like TestContainers, LocalStack, or Docker at all.To compound matters, they had a single shared dev env, (for cost reasons), so the team were constantly breaking each others stuff.How common is this? Also, curious what kinds of workarounds people are using?
Nov 14, 2025 12:36 PM
github.com
Show HN: Fast Isolated Postgres DB for Spring Boot Integration Testshttps://github.com/misirio/dbsandboxerI build a small Spring Boot library that makes Postgres-backed integration tests both fast and fully isolated.How it works:At test-suite start-up it creates a single PostgreSQL template database.For every JUnit test it runs CREATE DATABASE … TEMPLATE … to clone that template - about 50 ms per sandbox.It plugs right into Spring Boot, Testcontainers, Flyway, and Liquibase.If you use text fixtures you can mess with it freely, and never worry about affecting other tests.I introduced this approach after hitting serious test-isolation problems on a large enterprise project. The approach worked greatly and the integration tests grow to past 4 000 tests without any slowdown or cleanup scripts.I added an example project setup including test fixtures here: https://github.com/misirio/dbsandboxer/tree/main/examples/sp...I would love to hear your feedback and how you solve this problem in your projects.
Sep 11, 2025 6:17 PM