I’m working on something similar right now, PXE or usb to load iPXE, that loads a custom Ubuntu LiveCD image which auto runs a bash script to configure a VPN, and add a software repository, which then downloads the software and runs it in Firefox in kiosk mode. No hard drive needed as it runs all in-memory.