This is sort-of cool, I guess, but also very much not what you would want to do? I mean, people agitate against `curl blah.xyz | sh` for a reason. And this, by any measure, is much worse. Also: 'By default iPXE does not compile in HTTPS support'
What’s the reason, exactly?
If you’re principled about only ever installing anything from vetted repos, then sure, your position is at least consistent. But my experience is that people who are appalled by pipe-to-sh are for whatever reason much less appalled by downloading random binaries or .deb files from blah.xyz and running them manually, which seems like just a more labor-intensive version of the same thing.