Not ideal, but you could give it internet access, install all the apps you want, and then isolate it again (remove it from the docker non-internal network or whatever).

As long as the apps you install don't need to make web requests on their own, they'll work fine.