LocalStack 1.0 | Hacker News Reader

LocalStack 1.0

localstack.cloud

115 pointskiyanwang22 comments

We use localstack for as much of our integration tests as we can, and have multiple paid licenses. When we started using it I was skeptical that it could reliably mimic all the AWS services we use, and I was right. Don’t get me wrong it’s a valiant effort and it lets us run tests much faster (and obviously cheaper) than the real thing, but those same tests need to pass on live AWS too before we have any confidence in our code.

If any of the localstack authors are reading this, thank you for your tireless efforts!

Yeah we gave up when we got to using lambda. Even if the api works it can’t scale the same way!

Well yeah. Isn't it intended for integration tests and similar usage and not for production "hyperscaling"?

exactly - it is meant to approximately work as a localized AWS environment for use during development, and for writing "unit" tests, and basic integration tests.

A full on, end-to-end testing is still required, but with localstack, you can run those once after you've completed development.

I have used LocalStack for all sorts of tinkering and local development without the fear of credit bomb on a “trial” AWS account. Highly recommended and very easy to get started with. So excited to see this growing and hitting v1.0.

Also handy for CI pipeline-hosted tests of code that targets cloud services.

Is it only me, but I'm annoyed that they don't start with "LocalStack is ABC". Do they assume only people who know what LocalStack is arrive at the page? (I agree the name is somewhat a good one though)

"LocalStack’s core emulation platform provides emulated cloud APIs, currently primarily focused on AWS cloud." is in the second paragraph of the body.

Last time I tried to use this, it wouldn’t pass dependency vulnerability scanning to bring it into the company. Obviously it’s not going into production, but it doesn’t seem a big ask to eliminate known CVEs.

They didn’t seem interested in resolving!

Thanks for the feedback! LocalStack CTO here. Very timely - we're right now in the process of upgrading all dependencies (JAR files, etc) in our Docker images to reduce the exposure for potential vulnerabilities.

The scan results of the security scanning tool we're using look promising - they're almost green already.. :) Please let us know if there's anything particular that's blocking you from bringing it into your company! Appreciated

Just scanned 1.0.1 - 26 vulns dating back to 2018.

That’s down from 35 when I raised the issue 2 years ago!

How would you like me to let you know about these?

If you could link the Github issue here, that would be great. We'll make sure to prioritize it. Thanks

Is there something like this but for azure?

That question came up in the last thread about it, and the response was "email us:" https://news.ycombinator.com/item?id=28820881

While I admire their effort to do all the clouds, I would expect the actual code overlap between emulating the AWS APIs and Azure APIs would be infinitesimal and would likely benefit from a separate localstack-azure project

Or, actually, put another way: since localstack stood on the shoulders of the absolutely incredible moto library, I would find out if there is an equivalent for Azure and start there

Azurite is good for azure storage service emulation and they respond to issues with lightning speed. Aside from storage I’m not aware of anything

Quick edit: there is a cosmosdb emulator out there for windows. Last I looked (6 months ago?) there was not a Linux version (so no docker). If you’re in windows with wsl though not bad. Azure function core tools is also excellent for local dev.

In the spirit of moto, it actually looks like quite a bit of the groundwork is available for someone to take a swing at an Azure version:

* the cli uses the python SDK: https://github.com/Azure/azure-cli/blob/azure-cli-2.38.0/src...

* which uses autorest: https://github.com/Azure/azure-sdk-for-python/tree/azure-mgm...

* of what appears to be an OpenAPI-ish spec: https://github.com/Azure/azure-rest-api-specs/tree/fda2db441...

There is a Linux version now but it doesn't cover all the APIs - only the SQL and MongoDB.

It's been frustrating as I've been wanting to develop against the Gremlin API locally, I've resorted to using TinkerGraph but it's not ideal.

I love this project but it pisses me off that they lock services behind a paywall.

You mean you hate that they have a business model?

Seems fairly healthy to me. Free to start out and you'll have to pay so you can use more.

You don't get mad when walking into a grocery store, do you? All sorts of stuff in there locked behind a paywall.

Yes I do because there are so many starving and homeless people.

I don't see how grocery store prices are related with people dying of hunger. That's going from one end of the problem to the other and doesn't help anyone when you ignore all the issues in between.

Reply on news.ycombinator.com