busybox should be moved to local packages file instead of being hardcoded in chroot-script

[adrelanos]

busybox had some security vulnerabilities. I didn't check how severe these were or how to exploit there. However, busybox doesn't seem to be a a critically required dependency for a fully functional image. At least if using dracut.

So lets move it from being hardcoded in chroot-script to the local packages files.

Happy to send a PR. Seems to be a trivial change.

Waiting with the PR until #236 is merged otherwise there would be a merge conflict.

[zeha]

@mika I think nowadays klibc-utils should be okay enough? Do we want to keep busybox for initramfs?

[mika]

Hm good point, I think the actual tools like cryptsetup which rely on busybox in initramfs stage have busybox as dependency anyways, so let's give this a try. :)

(Sorry for the delay, Q4 madness)