Authors a `compose.test.yaml` for tests - declares the SUT plus its real backing services as one declarative topology, wires healthcheck-driven `depends_on: condition: service_healthy` start ordering, isolates parallel CI jobs via per-job `--project-name`, gates the test step on `--wait` / `--wait-timeout` / `--exit-code-from`, and tears the stack down deterministically with `down --volumes --remove-orphans`. Use when the test environment is multi-service (app + db + cache + queue) and the topology is best expressed in YAML rather than imperative test code.
80
100%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Reach for Compose in tests when the SUT has two or more real backing
services that must see each other (app -> db -> cache -> queue), the
same topology must run locally and in CI without imperative drift, or
parallel CI jobs each need an isolated stack. For a single dependency
wired into one test, testcontainers is lighter - it lives inside the
test process with no separate docker compose up step.
compose.test.yamlCompose's default file lookup is compose.yaml or docker-compose.yaml
in the working directory or any parent (compose-cli); using
the explicit compose.test.yaml filename + -f flag keeps test
topology separate from local-dev topology.
# compose.test.yaml
name: orders-tests
services:
db:
image: postgres:15
environment:
POSTGRES_PASSWORD: test
POSTGRES_DB: orders_test
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postgres -d orders_test"]
interval: 2s
timeout: 3s
retries: 30
start_period: 5s
cache:
image: redis:7
healthcheck:
test: ["CMD", "redis-cli", "ping"]
interval: 2s
timeout: 3s
retries: 30
app:
build:
context: .
target: test
environment:
DATABASE_URL: postgres://postgres:test@db:5432/orders_test
REDIS_URL: redis://cache:6379/0
depends_on:
db:
condition: service_healthy
cache:
condition: service_healthy
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:3000/health"]
interval: 2s
timeout: 3s
retries: 30
start_period: 10s
e2e:
image: mcr.microsoft.com/playwright:v1.50.0-noble
working_dir: /work
volumes:
- .:/work
environment:
BASE_URL: http://app:3000
depends_on:
app:
condition: service_healthy
command: npx playwright testThe name: top-level key sets the project name (which Compose
normally derives from the working directory) - important for CI
isolation, see Step 4.
service_started (the depends_on default) is almost never what a
test wants. Postgres "started" doesn't mean "accepting connections".
Always pair a real dependency with a healthcheck and gate its
dependents with condition: service_healthy. The three depends_on
conditions are tabulated in references/compose-flags.md.
The healthcheck syntax per compose-services:
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost"]
interval: 1m30s
timeout: 10s
retries: 3
start_period: 40sFor tests, use shorter intervals (2s vs the 1m30s default) and more retries so the gate trips quickly when the service is up but waits long enough for cold starts.
Database migrations belong in their own service that the app
depends_on with service_completed_successfully:
services:
db:
image: postgres:15
healthcheck: { test: ["CMD-SHELL", "pg_isready"], interval: 2s, retries: 30 }
migrate:
image: orders-app:test
command: npm run db:migrate
depends_on:
db:
condition: service_healthy
environment:
DATABASE_URL: postgres://postgres:test@db:5432/orders_test
app:
image: orders-app:test
depends_on:
db: { condition: service_healthy }
migrate: { condition: service_completed_successfully }
environment:
DATABASE_URL: postgres://postgres:test@db:5432/orders_testThe chain - db healthy → migrate runs → migrate exits 0 → app starts - ensures the app never connects to an unmigrated database.
Per compose-cli, the project name controls the namespace of every resource Compose creates (containers, networks, volumes). Two parallel jobs that use the same project name fight each other.
Set the project name from a unique-per-job value:
# .github/workflows/integration.yml
jobs:
e2e:
runs-on: ubuntu-latest
strategy:
matrix:
shard: [1, 2, 3, 4]
env:
COMPOSE_PROJECT_NAME: orders-${{ github.run_id }}-${{ matrix.shard }}
steps:
- uses: actions/checkout@v5
- name: Compose up
run: docker compose -f compose.test.yaml up --build --wait --wait-timeout 180
- name: Run tests
run: docker compose -f compose.test.yaml run --rm e2e
- name: Compose down
if: always()
run: docker compose -f compose.test.yaml down --volumes --remove-orphansThe -p / --project-name resolution order is:
flag > COMPOSE_PROJECT_NAME env var > top-level name: > directory
basename. Using the env var keeps the YAML clean while overriding
the in-file name: per CI job.
"Project names must contain only lowercase letters, decimal digits, dashes, and underscores, and must begin with a lowercase letter or decimal digit." (compose-cli)
Two up flags pair for "block until everything is healthy": --wait
("Wait for services to be running|healthy. Implies detached mode.")
and --wait-timeout <seconds> ("Maximum duration in seconds to wait
for the project to be running|healthy") (compose-up). The full
flag table (--abort-on-container-exit, --abort-on-container-failure,
--exit-code-from) is in references/compose-flags.md.
Two valid CI shapes:
up --wait then run the test servicedocker compose -f compose.test.yaml up --build --wait --wait-timeout 180
docker compose -f compose.test.yaml run --rm e2e
EXIT=$?
docker compose -f compose.test.yaml down --volumes --remove-orphans
exit $EXITThe up --wait step blocks until every service is healthy or the
180s budget elapses. The run step executes the test container; its
exit code is the build verdict.
up --abort-on-container-exit --exit-code-from <test-service>docker compose -f compose.test.yaml up \
--build \
--abort-on-container-exit \
--exit-code-from e2eCompose returns the test container's exit code as its own. Cleaner
when the test runs as a Compose service rather than via run.
down stops and removes containers and networks (compose-cli).
Two flags matter for tests: --volumes / -v (remove named volumes,
else DB state persists across runs and the next run sees stale data)
and --remove-orphans (remove containers for services no longer in the
file). The full table is in references/compose-flags.md.
docker compose -f compose.test.yaml down --volumes --remove-orphansAlways run down in an if: always() step (GitHub Actions) or
trap-on-EXIT (shell) - leaked containers consume CI runner disk and
poison the next run.
When the test compose file has services that aren't always needed (seeded fixtures, a debugging admin UI, a heavyweight observability stack), gate them behind a profile:
services:
db: { image: postgres:15, healthcheck: { ... } }
pgadmin:
image: dpage/pgadmin4
profiles: [debug]
ports: ["5050:80"]
depends_on: { db: { condition: service_healthy } }Run with the profile when needed:
docker compose -f compose.test.yaml --profile debug up
# or via env:
COMPOSE_PROFILES=debug docker compose -f compose.test.yaml upPer compose-cli: "Specify a profile to enable" - multiple
profiles via repeating --profile or comma-separated
COMPOSE_PROFILES.
Common failure modes and their fixes - missing service_healthy gates,
shared project names across parallel jobs, down without --volumes,
foreground up without --abort-on-container-exit, migrations in the
app entrypoint, host bind mounts in CI, reusing the dev compose file,
and hard-coded host ports - are cataloged in
references/anti-patterns.md.
curl / pg_isready - either switch to a
slim variant or use a TCP probe via nc / wget.docker compose subcommand list, -f,
--project-name, --profile, project-name resolution rules.up flags: --wait, --wait-timeout,
--abort-on-container-exit, --exit-code-from, --build.services schema: healthcheck,
depends_on conditions (service_started / service_healthy /
service_completed_successfully).testcontainers - alternative when
the topology is one container per test, expressed in test code.