A way to spin up real Android environments on demand, each one fully isolated and fully inspectable.
The design
Every device is a small stack of containers: a Redroid Android instance, a dedicated mitmproxy instance, and an optional SOCKS5 proxy for upstream routing. Devices come up from a template with predictable port assignments, so a farm of them is scriptable.
The tricky bit
To inspect modern app traffic you need the interception certificate trusted at the system level, not just the user store. The mitmproxy CA is baked into the Android base image as a system certificate at build time, and each device's upstream proxy can be swapped per device without rebuilding. The result is a clean lab for app QA, automation, and traffic analysis.