tinkerbell sandbox with selfsigned certs

This is against:
commit 10331dd8603d1113188c24c16ff2a7d7f8163f28 (HEAD -> main, origin/main, origin/HEAD)

diff --git deploy/compose/.env deploy/compose/.env
index 3ee4f7c..1b6c262 100644
--- deploy/compose/.env
+++ deploy/compose/.env
@@ -1,9 +1,9 @@
 OSIE_DOWNLOAD_URLS=https://github.com/tinkerbell/hook/releases/download/5.10.57/hook_x86_64.tar.gz,https://github.com/tinkerbell/hook/releases/download/5.10.57/hook_aarch64.tar.gz

-BOOTS_SERVER_IMAGE=quay.io/tinkerbell/boots:sha-36f12f81
+BOOTS_SERVER_IMAGE=quay.io/tinkerbell/boots:sha-de2d7810
 HEGEL_SERVER_IMAGE=quay.io/tinkerbell/hegel:sha-89cb9dc8
-TINK_CLI_IMAGE=quay.io/tinkerbell/tink-cli:sha-e053ada6
-TINK_SERVER_IMAGE=quay.io/tinkerbell/tink:sha-3743d31e
+TINK_CLI_IMAGE=quay.io/tinkerbell/tink-cli:sha-453f0fda
+TINK_SERVER_IMAGE=quay.io/tinkerbell/tink:sha-453f0fda

 TINKERBELL_HARDWARE_MANIFEST=/manifests/hardware/hardware.json
 TINKERBELL_TEMPLATE_MANIFEST=/manifests/template/ubuntu.yaml
 diff --git deploy/compose/docker-compose.yml deploy/compose/docker-compose.yml
index 2cdcaee..0ca4ac0 100644
--- deploy/compose/docker-compose.yml
+++ deploy/compose/docker-compose.yml
@@ -2,7 +2,7 @@ services:
   ##### Actual services first #####
   boots:
     image: ${BOOTS_SERVER_IMAGE}
-    command: -dhcp-addr 0.0.0.0:67 -tftp-addr $TINKERBELL_HOST_IP:69 -http-addr $TINKERBELL_HOST_IP:80 -log-level DEBUG
+    command: -dhcp-addr 0.0.0.0:67 -ipxe-tftp-addr $TINKERBELL_HOST_IP:69 -http-addr $TINKERBELL_HOST_IP:80 -log-level DEBUG
     network_mode: host
     environment:
       API_AUTH_TOKEN: ${PACKET_API_AUTH_TOKEN:-ignored}
diff --git deploy/compose/sync-images-to-local-registry/registry_images.txt deploy/compose/sync-images-to-local-registry/registry_images.txt
index 0a8fccc..fe28e38 100644
--- deploy/compose/sync-images-to-local-registry/registry_images.txt
+++ deploy/compose/sync-images-to-local-registry/registry_images.txt
@@ -1,6 +1,7 @@
-quay.io/tinkerbell/tink-worker:latest tinkerbell/tink-worker:latest
-quay.io/tinkerbell/tink-worker:latest tink-worker:latest
-quay.io/tinkerbell/tink-worker:latest tinkerbell/tink-worker:sha-5e1f0fd8
+quay.io/tinkerbell/tink-worker:sha-453f0fda tinkerbell/tink-worker:latest
+quay.io/tinkerbell/tink-worker:sha-453f0fda tink-worker:latest
+quay.io/tinkerbell/tink-worker:sha-453f0fda tinkerbell/tink-worker:sha-453f0fda
+quay.io/tinkerbell/tink-worker:sha-453f0fda tinkerbell/tink-worker:sha-5e1f0fd8
 quay.io/tinkerbell-actions/image2disk:v1.0.0 image2disk:v1.0.0
 quay.io/tinkerbell-actions/cexec:v1.0.0 cexec:v1.0.0
 quay.io/tinkerbell-actions/writefile:v1.0.0 writefile:v1.0.0