I've gotten great mileage out of a ttyd-based container that runs bash with nix. Ttyd exposes the shell over web endpoint.

I can just drop it into the environment and pull in tools that I need using nix.