t.Context is canceled the moment the test returns, so the docker rm / docker image rm subprocesses registered via t.Cleanup were never able to run, leaking the test image (~35MB per run).
Entire-Checkpoint: 74fd06e0aef8
