My network is not to be trusted.
Isolated segments might be.
This particular app is horrendously sensitive.
Vendor claims is it my evil network confusing it.
So I've setup an OpenBSD bridge/firewall to isolate it out.
Only vendor allowed equipment on it, except some very limited external file transfer to particular system.
I sure as hell don't want to introduce another system in the mix, and I certainly don't want to depend on it being 100% available.
And I'm going to minimize all external dependencies wherever possible.

I've got Debian install on bare metal to application fully functional in about 30 minutes at this point, with about 2 minutes of interaction. Well documented, with the documentation tested, so help desk person can do it. I can clone the disk over the network in about 5. And we are looking into flash disk devices to deploy it so we have no moving parts.