live wire
▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat▸PLATFORM · Clang 23 bytecode interpreter cuts allocations and expands constant-expression supportRed Hat Developer▸PLATFORM · RHEL becomes first-party on OCI; OpenShift subscriptions reach Oracle MarketplaceRed Hat▸AI · vLLM-Omni merges native MOSS-Image serving with parallelism and offloadvLLM▸AI · vLLM adds System One endpoint for Decision 3.0 multimodal routing models (Oct. 15)vLLM▸SECURITY · Red Hat rates OpenShift AI 3.4.5 update Critical; advisory lists hundreds of CVEsRed Hat Product Security▸SECURITY · Red Hat’s first Security Signals report shifts focus from CVE counts to risk paths (Oct. 15)Red Hat▸PLATFORM · IBM adds non-destructive FlexVolume-to-CSI migration tool for OpenShift object storageIBM Cloud▸vLLM tests agent-built Kimi K3 decode path at up to 1.9× speedup; PR remains openvLLM▸AI · LeaderWorkerSet 1.0 changes rollout defaults for disaggregated AI workloadsKubernetes SIGs▸SECURITY · Red Hat flags active exploitation of kernel flaw affecting OpenShift CoreOS; no fix listedRed Hat Product Security▸AI · Red Hat sets Dec. 9 showcase for AI 3.6 agent governance and model servicesRed Hat▸vLLM 0.32.0 drops Python 3.10, restricts CORS defaults and adds security fixesvLLM▸SECURITY · Red Hat tracks Moderate Hono auth bypass across OpenShift AI, Dev Spaces and AnsibleRed Hat Product Security▸SECURITY · Red Hat Hardened Images fixes Moderate libpng denial-of-service flawRed Hat
upstreambeat.ai
guidePLATFORM

Paicku turns a Buildpacks image build into a Node.js integration test

The command-line tool and library wrap Pack, choose Podman or Docker, run the resulting image and expose cleanup controls to test code.

Buildpacks image test flow from source to running container and cleanup.
Side by side: what changed
By The News Desk· Oct 7, 2026the quick take — two AI hosts go live when you do

A new Red Hat Developer walkthrough shows how Paicku can move Cloud Native Buildpacks from a separate packaging step into a JavaScript integration test.

Paicku is both a command-line tool and a Node.js library. It wraps the Buildpacks pack command, downloads and configures the Pack CLI, detects an available Podman or Docker runtime and exposes the build-and-run sequence to application code.

That makes the project most useful where a team wants to test the container artifact it intends to ship rather than only exercising source code on the host.

Build an image without wiring Pack by hand

The walkthrough requires Node.js 20 or later plus Podman or Docker. From the command line, npx paicku build accepts an application path and an optional image name. If no builder is supplied, Paicku defaults to docker.io/paketobuildpacks/builder-ubi8-base, which uses Red Hat Universal Base Image.

Paicku configures Pack before each build and can select a runtime explicitly with --container-runtime. The resulting OCI image can then run normally under Podman or Docker.

The wrapper does not limit Buildpacks to JavaScript. Red Hat’s example uses both a Node.js application and a Java Maven sample; the builder determines which application languages the workflow can handle.

Put the image lifecycle inside the test

The more distinctive path uses Paicku as a development dependency. Test code creates a Paicku client, calls build() with a source path and builder, starts a container from the returned image object, sends an HTTP request to its exposed port and stops the container during cleanup.

Red Hat’s sample uses the built-in node:test runner and asserts that the packaged application returns HTTP 200. A finally block stops the container even when the assertion or request fails. If the image build itself fails, Paicku returns a PaickuError.

For CI systems, this collapses several setup tasks into one test-facing API: installing Pack, selecting Podman or Docker, creating the image, starting it, finding its URL and removing the runtime instance.

What to evaluate before adopting it

Teams should still choose their builder deliberately for production work instead of relying silently on the default. They should also budget for image-build latency: the example test reported a run of roughly 109 seconds, far longer than a typical unit test.

The practical fit is therefore an integration or pre-release stage where validating the actual Buildpacks output is worth the extra time. Paicku’s contribution is not a new image format or builder. It is a smaller JavaScript control surface around Pack and the container runtime, making the packaged artifact accessible to ordinary Node.js test code.

sources

Filed by The News Desk. Corrections: desk@upstreambeat.ai · Our standards →

comments · 0

    Comments are moderated before they appear. Your email is used once to confirm it is you — never shown, never sold. Corrections and questions get an answer from the desk when we have one.

    more from the desk