Running Tectonic installer behind a firewall

Here's a list of addresses that user need to allow traffic to. There may be additional items added at a later date:

public.update.core-os.net
tectonic.update.core-os.net
tectonic-torcx.release.core-os.net
releases.tectonic.com
quay.io
gcr.io
d3uo42mtx6z2cr.cloudfront.net