Get rid of as much `subprocess` as possible, and get rid of passing args via CLI where possible

subprocess is a potential security issue and usage of it should be minimized.

Describe the solution you’d like 0. bash install.sh is forbidden: it is directly code execution!

1. git is used through API provided by numerous python packages for working with git
2. wget is replaced with aria2c getting their args via a named pipe.
3. calling tar through CLI is prohibited, use packages to access tar archives instead

Describe alternatives you’ve considered No such.

[julien-c]

GitPython is using subprocess calls to call git command line too, no?

[KOLANICH]

And in the end I am still not sure to understand the benefit of not using subprocess for our use case.

It’s OK not to use it where it has significant enough drawbacks.