change to the minimal rocky iso

http/ks.cfg

@@ -22,14 +22,15 @@ bootloader --location=mbr
 reboot
 
 %packages --excludedocs
+# Install-time set kept to what the minimal ISO's BaseOS repo reliably carries
+# (core + sshd + chrony). The diskless tooling — wpa_supplicant, tpm2-tools,
+# tpm2-tss, nvme-cli, cryptsetup, dracut-network, openssl — is installed by the
+# Packer shell provisioner from the online repos *before* the initramfs is
+# built, so the build does not depend on those packages being bundled on
+# whichever ISO variant (minimal or dvd) is used here.
 @^minimal-environment
 kernel
-dracut-network
 openssh-server
-wpa_supplicant
-tpm2-tools
-nvme-cli
-cryptsetup
 chrony
 -plymouth
 -firewalld