A Docker with Pandoc, with extra everything, including pandoc-crossref.
pandoc-crossref
Mount the directory with the source you want to build, for example the current working directory:
docker run -it --rm -v ./:/data my-pandoc:latest
The run your Pandoc build commands from within the container.