container-superposition 0.1.6 → 0.1.7

package/overlays/modern-cli-tools/setup.sh

@@ -1,94 +1,44 @@
 #!/bin/bash
 # Modern CLI tools setup script
+# jq, ripgrep, fd, bat are installed via cross-distro-packages devcontainer feature.
+# This script installs yq (not in standard repos), creates Debian symlinks, and configures tools.
 
 set -e
 
 echo "🚀 Setting up modern CLI tools..."
 
-# Update package list
-sudo apt-get update -qq
-
-# Install jq (JSON processor)
-echo "📦 Installing jq..."
-sudo apt-get install -y jq
-if command -v jq &> /dev/null; then
-    echo "✓ jq installed: $(jq --version)"
-else
-    echo "✗ jq installation failed"
-    exit 1
-fi
-
-# Install yq (YAML processor)
+# Install yq (YAML processor — not in standard distro repos)
 echo "📦 Installing yq..."
-YQ_VERSION="4.52.2"
+YQ_VERSION="${YQ_VERSION:-4.52.2}"
 ARCH=$(uname -m)
+case "$ARCH" in
+    x86_64)  YQ_ARCH="amd64" ;;
+    aarch64|arm64) YQ_ARCH="arm64" ;;
+    *) echo "⚠️  Unsupported architecture: $ARCH, defaulting to amd64"; YQ_ARCH="amd64" ;;
+esac
 
-# SHA256 checksums for yq v4.52.2
-if [ "$ARCH" = "x86_64" ]; then
-    YQ_ARCH="amd64"
-    YQ_CHECKSUM="a74bd266990339e0c48a2103534aef692abf99f19390d12c2b0ce6830385c459"
-elif [ "$ARCH" = "aarch64" ] || [ "$ARCH" = "arm64" ]; then
-    YQ_ARCH="arm64"
-    YQ_CHECKSUM="c82856ac30da522f50dcdd4f53065487b5a2927e9b87ff637956900986f1f7c2"
-else
-    echo "⚠️  Unsupported architecture: $ARCH, defaulting to amd64"
-    YQ_ARCH="amd64"
-    YQ_CHECKSUM="a74bd266990339e0c48a2103534aef692abf99f19390d12c2b0ce6830385c459"
-fi
-
-curl -L "https://github.com/mikefarah/yq/releases/download/v${YQ_VERSION}/yq_linux_${YQ_ARCH}" \
+curl -fsSL "https://github.com/mikefarah/yq/releases/download/v${YQ_VERSION}/yq_linux_${YQ_ARCH}" \
     -o /tmp/yq
+sudo install -m 0755 /tmp/yq /usr/local/bin/yq
+rm /tmp/yq
 
-# Verify checksum
-echo "🔐 Verifying yq checksum..."
-echo "${YQ_CHECKSUM}  /tmp/yq" | sha256sum -c - || {
-    echo "✗ yq checksum verification failed"
-    rm /tmp/yq
-    exit 1
-}
-
-sudo mv /tmp/yq /usr/local/bin/yq
-sudo chmod +x /usr/local/bin/yq
-
-if command -v yq &> /dev/null; then
+if command -v yq &>/dev/null; then
     echo "✓ yq installed: $(yq --version)"
 else
     echo "✗ yq installation failed"
     exit 1
 fi
 
-# Install ripgrep (fast grep alternative)
-echo "📦 Installing ripgrep..."
-sudo apt-get install -y ripgrep
-if command -v rg &> /dev/null; then
-    echo "✓ ripgrep installed: $(rg --version | head -n 1)"
-else
-    echo "✗ ripgrep installation failed"
-    exit 1
+# Create fd symlink — Debian installs the binary as 'fdfind'
+if command -v fdfind &>/dev/null && ! command -v fd &>/dev/null; then
+    sudo ln -sf "$(which fdfind)" /usr/local/bin/fd
+    echo "✓ fd symlink created (fdfind → fd)"
 fi
 
-# Install fd (fast find alternative)
-echo "📦 Installing fd..."
-sudo apt-get install -y fd-find
-# Create symlink for 'fd' command (package installs as 'fdfind' on Debian)
-sudo ln -sf $(which fdfind) /usr/local/bin/fd
-if command -v fd &> /dev/null; then
-    echo "✓ fd installed: $(fd --version)"
-else
-    echo "✗ fd installation failed"
-    exit 1
-fi
-
-# Install bat (better cat with syntax highlighting)
-echo "📦 Installing bat..."
-sudo apt-get install -y bat
-# Create symlink for 'bat' command (package installs as 'batcat' on Debian)
-sudo ln -sf $(which batcat) /usr/local/bin/bat
-if command -v bat &> /dev/null; then
-    echo "✓ bat installed: $(bat --version)"
-else
-    echo "✗ bat installation failed"
-    exit 1
+# Create bat symlink — Debian installs the binary as 'batcat'
+if command -v batcat &>/dev/null && ! command -v bat &>/dev/null; then
+    sudo ln -sf "$(which batcat)" /usr/local/bin/bat
+    echo "✓ bat symlink created (batcat → bat)"
 fi
 
 # Configure bat

package/overlays/mongodb/devcontainer.patch.json

@@ -1,11 +1,5 @@
 {
     "$schema": "https://raw.githubusercontent.com/devcontainers/spec/main/schemas/devContainer.base.schema.json",
-    "features": {
-        "./features/cross-distro-packages": {
-            "apt": "mongodb-mongosh",
-            "apk": "mongodb-tools"
-        }
-    },
     "customizations": {
         "vscode": {
             "extensions": ["mongodb.mongodb-vscode"]

package/overlays/mongodb/setup.sh

@@ -0,0 +1,59 @@
+#!/bin/bash
+# MongoDB setup script - Install mongosh client
+
+set -e
+
+echo "📦 Installing mongosh client..."
+
+# Source shared setup utilities
+# shellcheck source=setup-utils.sh
+source "$(dirname "${BASH_SOURCE[0]}")/setup-utils.sh"
+
+if command -v apk >/dev/null 2>&1; then
+    # Alpine Linux — `mongodb-tools` does not include mongosh on Alpine.
+    # Install mongosh from the MongoDB community package (available on Alpine 3.17+).
+    apk add --no-cache mongodb-mongosh 2>/dev/null || {
+        echo "⚠️  mongosh package not found in Alpine repos; falling back to npm install"
+        apk add --no-cache nodejs npm
+        npm install -g mongosh
+    }
+elif command -v apt-get >/dev/null 2>&1; then
+    # Debian/Ubuntu — install prerequisites first, then add the MongoDB repo.
+    # MongoDB doesn't publish a trixie/sid repo yet; fall back to bookworm.
+    CODENAME=$(. /etc/os-release && echo "${VERSION_CODENAME:-bookworm}")
+    case "$CODENAME" in
+        trixie | sid | testing) CODENAME="bookworm" ;;
+    esac
+
+    # Single lock acquisition: install prereqs, add repo, update, install mongosh.
+    # curl and gnupg must be present before add_apt_repo runs them.
+    acquire_apt_lock
+    sudo DEBIAN_FRONTEND=noninteractive TERM=dumb apt-get update -qq
+    sudo DEBIAN_FRONTEND=noninteractive TERM=dumb apt-get install -y -qq --no-install-recommends curl gnupg ca-certificates
+    release_apt_lock
+
+    add_apt_repo \
+        "https://www.mongodb.org/static/pgp/server-8.0.asc" \
+        "/usr/share/keyrings/mongodb-server.gpg" \
+        "deb [ arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server.gpg ] https://repo.mongodb.org/apt/debian ${CODENAME}/mongodb-org/8.0 main" \
+        "/etc/apt/sources.list.d/mongodb-org.list"
+
+    acquire_apt_lock
+    sudo DEBIAN_FRONTEND=noninteractive TERM=dumb apt-get update -qq
+    sudo DEBIAN_FRONTEND=noninteractive TERM=dumb apt-get install -y -qq --no-install-recommends mongodb-mongosh
+    sudo apt-get clean
+    sudo rm -rf /var/lib/apt/lists/*
+    release_apt_lock
+else
+    echo "⚠️  Unsupported package manager, skipping mongosh installation"
+    exit 0
+fi
+
+if command -v mongosh >/dev/null 2>&1; then
+    echo "✓ mongosh installed: $(mongosh --version)"
+else
+    echo "✗ mongosh installation failed"
+    exit 1
+fi
+
+echo "✓ mongodb setup complete"

package/overlays/mysql/verify.sh

@@ -21,8 +21,9 @@ fi
 echo ""
 echo "2️⃣ Checking MySQL service..."
 MYSQL_READY=false
-for i in {1..15}; do
-    if mysql -h mysql -P 3306 -u root -prootpassword -e "SELECT 1" &> /dev/null; then
+for i in {1..90}; do
+    # MYSQL_PWD avoids interactive prompt; </dev/null prevents TTY queries.
+    if MYSQL_PWD=rootpassword mysql -h mysql -P 3306 -u root -e "SELECT 1" </dev/null &>/dev/null; then
         echo "   ✅ MySQL service is ready"
         MYSQL_READY=true
         break
@@ -31,7 +32,7 @@ for i in {1..15}; do
 done
 
 if [ "$MYSQL_READY" = false ]; then
-    echo "   ❌ MySQL service not ready after 15 seconds"
+    echo "   ❌ MySQL service not ready after 90 seconds"
     exit 1
 fi
 

package/overlays/nats/.env.example

@@ -1,5 +1,5 @@
 # NATS Configuration
-NATS_VERSION=latest
+NATS_VERSION=2
 NATS_CLIENT_PORT=4222
 NATS_HTTP_PORT=8222
 NATS_CLUSTER_PORT=6222

package/overlays/nats/README.md

@@ -39,7 +39,7 @@ cp .env.example .env
 
 ```bash
 # NATS Configuration
-NATS_VERSION=latest
+NATS_VERSION=2
 NATS_CLIENT_PORT=4222
 NATS_HTTP_PORT=8222
 NATS_CLUSTER_PORT=6222

package/overlays/nats/docker-compose.yml

@@ -2,7 +2,7 @@ version: '3.8'
 
 services:
     nats:
-        image: nats:${NATS_VERSION:-latest}-alpine
+        image: nats:${NATS_VERSION:-2}-alpine
         restart: unless-stopped
         command:
             - '--jetstream'

package/overlays/ngrok/setup.sh

@@ -8,16 +8,19 @@ echo "🌐 Setting up ngrok..."
 # Install ngrok using official apt repository (provides signed packages)
 echo "📦 Installing ngrok from official repository..."
 
-# Add ngrok's GPG key and repository
-curl -sSL https://ngrok-agent.s3.amazonaws.com/ngrok.asc \
-    | sudo tee /etc/apt/trusted.gpg.d/ngrok.asc >/dev/null
+# Source shared setup utilities
+# shellcheck source=setup-utils.sh
+source "$(dirname "${BASH_SOURCE[0]}")/setup-utils.sh"
 
+# Add ngrok GPG key and repository
+# Note: ngrok uses .asc (armored) format, piped directly to trusted.gpg.d (no --dearmor needed)
+curl -fsSL https://ngrok-agent.s3.amazonaws.com/ngrok.asc \
+    | sudo tee /etc/apt/trusted.gpg.d/ngrok.asc >/dev/null
 echo "deb https://ngrok-agent.s3.amazonaws.com buster main" \
-    | sudo tee /etc/apt/sources.list.d/ngrok.list
+    | sudo tee /etc/apt/sources.list.d/ngrok.list >/dev/null
 
 # Update and install
-sudo apt-get update -qq
-sudo apt-get install -y ngrok
+apt_install ngrok
 
 # Verify installation
 if command -v ngrok &> /dev/null; then

package/overlays/nodejs/setup.sh

@@ -3,6 +3,11 @@
 
 set -e
 
+# Source shared setup utilities (provides load_nvm)
+# shellcheck source=setup-utils.sh
+source "$(dirname "${BASH_SOURCE[0]}")/setup-utils.sh"
+load_nvm
+
 # Extract overlay name from script filename (setup-<overlay>.sh -> <overlay>)
 OVERLAY_NAME=$(basename "$0" | sed 's/setup-//;s/\.sh$//')
 

package/overlays/openapi-tools/devcontainer.patch.json

@@ -5,6 +5,5 @@
             "apt": "curl",
             "apk": "curl"
         }
-    },
-    "postCreateCommand": "bash .devcontainer/scripts/setup-openapi-tools.sh"
+    }
 }

package/overlays/openapi-tools/setup.sh

@@ -3,19 +3,20 @@
 
 set -e
 
+# Source shared setup utilities (provides load_nvm)
+# shellcheck source=setup-utils.sh
+source "$(dirname "${BASH_SOURCE[0]}")/setup-utils.sh"
+load_nvm
+
 echo "🔧 Setting up OpenAPI Tools..."
 
 # Install OpenAPI tools globally via npm
 echo "📦 Installing OpenAPI tools..."
 
-# Install swagger-cli (OpenAPI validation)
-npm install -g @apidevtools/swagger-cli || echo "⚠️ swagger-cli already installed or failed"
-
-# Install spectral (OpenAPI linting)
-npm install -g @stoplight/spectral-cli || echo "⚠️ spectral already installed or failed"
-
-# Install redocly CLI (documentation and bundling)
-npm install -g @redocly/cli || echo "⚠️ redocly already installed or failed"
+# Wrap each install in run_spinner to suppress noisy deprecation warnings
+run_spinner "swagger-cli"  npm install -g @apidevtools/swagger-cli
+run_spinner "spectral"     npm install -g @stoplight/spectral-cli
+run_spinner "redocly"      npm install -g @redocly/cli
 
 # Verify installations
 echo ""

package/overlays/opencode/setup.sh

@@ -3,6 +3,11 @@
 
 set -e
 
+# Source shared setup utilities (provides load_nvm)
+# shellcheck source=setup-utils.sh
+source "$(dirname "${BASH_SOURCE[0]}")/setup-utils.sh"
+load_nvm
+
 echo "📦 Installing opencode AI coding agent..."
 
 # Install opencode-ai globally

package/overlays/otel-collector/overlay.yml

@@ -19,3 +19,5 @@ ports:
     - 8888
     - 8889
 order: 2
+imports:
+    - .shared/otel/instrumentation.env

package/overlays/otel-collector/setup.sh

@@ -5,23 +5,10 @@ set -e
 
 echo "🔧 Configuring OpenTelemetry Collector trace backend..."
 
-# Determine workspace root dynamically
-WORKSPACE_ROOT="${LOCAL_WORKSPACE_FOLDER:-$PWD}"
-
-if [ ! -d "$WORKSPACE_ROOT/.devcontainer" ]; then
-    if [ -d "/workspaces" ]; then
-        FIRST_WORKSPACE_DIR="$(find /workspaces -maxdepth 1 -mindepth 1 -type d 2>/dev/null | head -n 1)"
-        if [ -n "$FIRST_WORKSPACE_DIR" ] && [ -d "$FIRST_WORKSPACE_DIR/.devcontainer" ]; then
-            WORKSPACE_ROOT="$FIRST_WORKSPACE_DIR"
-        fi
-    fi
-fi
-
-if [ ! -d "$WORKSPACE_ROOT/.devcontainer" ] && [ -d "/workspace/.devcontainer" ]; then
-    WORKSPACE_ROOT="/workspace"
-fi
+# Resolve the .devcontainer directory relative to this script.
+DEVCONTAINER_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && cd .. && pwd)"
 
-OTEL_CONFIG="$WORKSPACE_ROOT/.devcontainer/otel-collector-config-otel-collector.yaml"
+OTEL_CONFIG="$DEVCONTAINER_DIR/otel-collector-config-otel-collector.yaml"
 
 if [ ! -f "$OTEL_CONFIG" ]; then
     echo "⚠️ OTel Collector config not found"

package/overlays/otel-demo-nodejs/verify.sh

@@ -6,19 +6,18 @@ echo "🔍 Verifying OTel Demo (Node.js) installation..."
 # Track overall success
 ALL_CHECKS_PASSED=true
 
-# Check if service is running
-if docker ps --format '{{.Names}}' | grep -q otel-demo-nodejs; then
-    echo "✓ OTel Demo (Node.js) service is running"
+# Check if HTTP health endpoint is accessible (primary health signal).
+# docker ps is informational only — not reliably accessible in all devcontainers.
+if curl -s -o /dev/null -w "%{http_code}" http://otel-demo-nodejs:8080/health 2>/dev/null | grep -q "200"; then
+    echo "✓ Demo app HTTP endpoint is accessible"
 else
-    echo "✗ OTel Demo (Node.js) service is not running"
+    echo "✗ Demo app HTTP endpoint not responding (http://otel-demo-nodejs:8080/health)"
     ALL_CHECKS_PASSED=false
 fi
 
-# Check if HTTP endpoint is accessible
-if curl -s -o /dev/null -w "%{http_code}" http://otel-demo-nodejs:8080/health 2>/dev/null | grep -q "200"; then
-    echo "✓ Demo app HTTP endpoint is accessible"
-else
-    echo "⚠️ Demo app HTTP endpoint not responding yet (may still be starting)"
+# Informational: check via docker ps if available.
+if docker ps --format '{{.Names}}' 2>/dev/null | grep -q otel-demo-nodejs; then
+    echo "✓ OTel Demo (Node.js) container visible in docker ps"
 fi
 
 # Final result

package/overlays/otel-demo-python/verify.sh

@@ -6,19 +6,25 @@ echo "🔍 Verifying OTel Demo (Python) installation..."
 # Track overall success
 ALL_CHECKS_PASSED=true
 
-# Check if service is running
-if docker ps --format '{{.Names}}' | grep -q otel-demo-python; then
-    echo "✓ OTel Demo (Python) service is running"
-else
-    echo "✗ OTel Demo (Python) service is not running"
+# Wait for demo app HTTP health endpoint (primary health signal).
+# docker ps is informational only — not reliably accessible in all devcontainers.
+APP_READY=false
+for i in {1..40}; do
+    if curl -s -o /dev/null -w "%{http_code}" http://otel-demo-python:8081/health 2>/dev/null | grep -q "200"; then
+        echo "✓ Demo app HTTP endpoint is accessible"
+        APP_READY=true
+        break
+    fi
+    sleep 3
+done
+if [ "$APP_READY" = false ]; then
+    echo "✗ Demo app HTTP endpoint not responding after 120 s (http://otel-demo-python:8081/health)"
     ALL_CHECKS_PASSED=false
 fi
 
-# Check if HTTP endpoint is accessible
-if curl -s -o /dev/null -w "%{http_code}" http://otel-demo-python:8081/health 2>/dev/null | grep -q "200"; then
-    echo "✓ Demo app HTTP endpoint is accessible"
-else
-    echo "⚠️ Demo app HTTP endpoint not responding yet (may still be starting)"
+# Informational: check via docker ps if available.
+if docker ps --format '{{.Names}}' 2>/dev/null | grep -q otel-demo-python; then
+    echo "✓ OTel Demo (Python) container visible in docker ps"
 fi
 
 # Final result

package/overlays/pandoc/README.md

@@ -6,9 +6,10 @@ Adds a complete Markdown → PDF pipeline to your devcontainer, powered by Pando
 
 - **Pandoc 3.x** — Latest release binary from GitHub (not the outdated apt version)
 - **TeX Live / XeLaTeX** — Full Unicode-capable PDF engine (`texlive-xetex`, `texlive-fonts-extra`, `texlive-latex-extra`)
-- **Quality fonts** — Carlito (body), JetBrains Mono (code), Noto Sans Symbols 2 (Unicode fallback) via system packages
+- **Quality fonts** — Carlito (body), JetBrains Mono (code), Noto Sans Symbols 2 (Unicode fallback), and Noto Color Emoji via system packages
     - Uses the `cross-distro-packages` feature with fallback package names for Carlito (`fonts-carlito|fonts-crosextra-carlito`)
 - **`diagram.lua`** — Lua filter from [pandoc-ext/diagram](https://github.com/pandoc-ext/diagram) for rendering code-block diagrams
+- **`emoji-fallback.lua`** — Built-in Lua filter that rewrites unsupported emoji and flag glyphs to plain-text placeholders for reliable XeLaTeX PDF builds
 - **Mermaid CLI (`mmdc`)** — Installed when the `nodejs` overlay is present; skipped gracefully otherwise
 - **`~/.pandoc/pandoc.yaml`** — Ready-to-use defaults file (XeLaTeX engine, font settings, table tweaks)
 - **VS Code Extensions:** Markdown All in One (`yzhang.markdown-all-in-one`), markdownlint (`DavidAnson.vscode-markdownlint`)
@@ -30,13 +31,17 @@ Markdown
 
 Font discovery is updated with `fc-cache -fv` after installation so XeLaTeX can locate the apt-installed fonts.
 
+The generated defaults also enable an emoji fallback filter for LaTeX output. The overlay now installs Noto Color Emoji as well, which may improve glyph coverage in some contexts, but the fallback filter remains enabled because XeLaTeX still is not reliable for full emoji and flag rendering. The filter converts unsupported glyphs such as `🇵🇹` to `[PT]` and generic emoji such as `😀` to `[emoji]` before XeLaTeX runs, preventing the `Unicode character ... not set up for use with LaTeX` failure.
+
+The setup script also installs a `/usr/local/bin/pandoc` wrapper that automatically applies `~/.pandoc/pandoc.yaml` unless you explicitly pass `-d` or `--defaults`. That makes plain commands like `pandoc doc.md -o doc.pdf` use the overlay defaults.
+
 ## Common Commands
 
 ### Basic PDF export
 
 ```bash
-# Use the default pandoc.yaml
-pandoc -d ~/.pandoc/pandoc.yaml document.md -o document.pdf
+# Uses the installed wrapper, which applies ~/.pandoc/pandoc.yaml automatically
+pandoc document.md -o document.pdf
 
 # Override the output font on the fly
 pandoc -d ~/.pandoc/pandoc.yaml -V mainfont="DejaVu Serif" document.md -o document.pdf
@@ -45,8 +50,7 @@ pandoc -d ~/.pandoc/pandoc.yaml -V mainfont="DejaVu Serif" document.md -o docume
 ### PDF with Mermaid diagrams (requires nodejs overlay)
 
 ```bash
-pandoc -d ~/.pandoc/pandoc.yaml \
-  --lua-filter ~/.pandoc/filters/diagram.lua \
+pandoc --lua-filter ~/.pandoc/filters/diagram.lua \
   document.md -o document.pdf
 ```
 
@@ -95,6 +99,8 @@ The setup script writes a defaults file with proven settings:
 
 ```yaml
 pdf-engine: xelatex
+filters:
+    - /home/your-user/.pandoc/filters/emoji-fallback.lua
 
 variables:
     mainfont: 'Carlito'
@@ -129,8 +135,9 @@ variables:
 toc: true
 toc-depth: 3
 number-sections: true
-lua-filter:
-    - ~/.pandoc/filters/diagram.lua
+filters:
+    - /home/your-user/.pandoc/filters/emoji-fallback.lua
+    - /home/your-user/.pandoc/filters/diagram.lua
 ```
 
 Then build with:
@@ -154,21 +161,21 @@ number-sections: true
 Uncomment in `~/.pandoc/pandoc.yaml`:
 
 ```yaml
-lua-filter:
-    - ~/.pandoc/filters/diagram.lua
+filters:
+    - /home/your-user/.pandoc/filters/emoji-fallback.lua
+    - /home/your-user/.pandoc/filters/diagram.lua
 ```
 
 ## Unicode and Emoji
 
-XeLaTeX handles Unicode well with the Noto and Carlito fonts, but emoji (🎉 🚀) require a colour emoji font (e.g. `fonts-noto-color-emoji`) which is not installed by default due to size. For documents with emoji, either:
+XeLaTeX handles normal Unicode text well with the bundled fonts. The overlay now also installs Noto Color Emoji, which can help with emoji coverage, but the failure mode in PDF builds is still usually emoji or regional-indicator flags, for example `🇵🇹`, which XeLaTeX may reject before font fallback can help.
 
-1. Replace emoji with text equivalents before generating the PDF:
+The overlay now enables `~/.pandoc/filters/emoji-fallback.lua` by default for LaTeX output. It keeps normal Unicode text intact and rewrites unsupported emoji to plain-text placeholders:
 
-    ```bash
-    sed 's/🎉/[celebration]/g; s/🚀/[rocket]/g' doc.md | pandoc -d ~/.pandoc/pandoc.yaml -o doc.pdf
-    ```
+- `🇵🇹 Porto` becomes `[PT] Porto`
+- `😀` becomes `[emoji]`
 
-2. Install `fonts-noto-color-emoji` and add `\setmainfont{Noto Color Emoji}` for the emoji font fallback in your `header-includes`.
+If you want to experiment with more native emoji rendering, keep the installed emoji font and override the default Pandoc/LaTeX settings in a project-local `pandoc.yaml`, but the placeholder filter is still the reliable default for PDF generation.
 
 ## Use Cases
 

package/overlays/pandoc/devcontainer.patch.json

@@ -2,13 +2,17 @@
     "$schema": "https://raw.githubusercontent.com/devcontainers/spec/main/schemas/devContainer.base.schema.json",
     "features": {
         "./features/cross-distro-packages": {
-            "apt": "texlive-xetex texlive-fonts-recommended texlive-fonts-extra texlive-latex-extra texlive-lang-european fonts-carlito|fonts-crosextra-carlito fonts-noto fonts-noto-extra fonts-noto-mono fonts-jetbrains-mono fontconfig perl chromium",
-            "apk": "fontconfig perl chromium"
+            "apt": "texlive-xetex texlive-fonts-recommended texlive-fonts-extra texlive-latex-extra texlive-lang-european lmodern fonts-carlito|fonts-crosextra-carlito fonts-noto fonts-noto-extra fonts-noto-mono fonts-jetbrains-mono fonts-noto-color-emoji fontconfig librsvg2-bin perl chromium",
+            "apk": "fontconfig noto-fonts-emoji|noto-emoji perl chromium"
         }
     },
     "customizations": {
         "vscode": {
             "extensions": ["yzhang.markdown-all-in-one", "DavidAnson.vscode-markdownlint"]
         }
+    },
+    "remoteEnv": {
+        "PUPPETEER_EXECUTABLE_PATH": "/usr/local/bin/chromium-no-sandbox",
+        "PUPPETEER_SKIP_DOWNLOAD": "true"
     }
 }