Hide Forgot
In pyanaconda/yuminstall.py:YumBackend().selectAnacondaNeeds() there is a dependency on system-config-firewall-base which then also drags in iptables-ipv6. Minimalist kickstart installs don't need this and may have these options which are unfortunately ignored: %packages -system-config-firewall-base However, that kickstart config is unfortunately ignored and the package is installed anyways along with any unneeded dependencies it has. Workaround is to forcibly remove them in %post, but this is ugly and wastes time.
This is required to set up the firewall, so we're not going to remove the package requirement.
But in this kickstart scenario: firewall --disabled %packages -system-config-firewall-base It really doesn't need to be installed. Maybe something like this? (untested) def selectAnacondaNeeds(self): for pkg in ['authconfig', 'chkconfig']: self.selectPackage(pkg) if anaconda.firewall: self.selectPackage('system-config-firewall-base') Thanks for considering.
The thing is, we also use lokkit (included in s-c-f-b) to disable the firewall. This has the advantage of anaconda not needing to know what the default state of the firewall config as shipped. This really is a bit of a corner case, and you've already got a workaround.