We want to stop systemd from being added to docker images, because of rpm requiring systemctl.

[Chris Adams]

Once upon a time, Reindl Harald <h.reindl at thelounge.net> said:
> defense in depth means limit the attack surface as much as you can

No, because "as much as you can" is turn the system off and bury it in
concrete (with an armed guard).

The goal is "as much as practical".  Trying to remove things that are
needed is not practical.

Spending a whole bunch of effort to allow you to remove systemd (again,
just the files, it isn't running) seems excessive.  There are some basic
things that RPMs expect; installing a service expects that the service
management tools are present.

-- 
Chris Adams <linux at cmadams.net>