Anaconda pulls in a number of packages to deal with storage, and bootloaders, and etc., conditionally. That's fine. It also always installs firewalld and authconfig. It would be better for transparency if these were instead explicit in @core in the comps file.

Bill Nottingham tells me that anaconda uses these in %post, so they really need to be there. Not disagreeing, just trying to reduce the level of apparent "magic". (So, putting them in @core would be changed at the same time.)