manifest/build: pull in selinux packages implicitly

The build pipeline requires the selinux packages only if we are going to be
labelling the files in the target OS. Otherwise, skip it.

manifest/build: pull in selinux-targeted unconditionally

This is unconditionally used by the build pipeline itself, until we make that
conditional, it needs to be installed.

internal/manifest/build.go

@@ -40,11 +40,10 @@ func (p *BuildPipeline) getPackageSetChain() []rpmmd.PackageSet {
 	// TODO: break apart into individual pipelines
 	packages := []string{
 		"dnf",
+		"selinux-policy-targeted",
 		"coreutils",
 		"dosfstools",
 		"e2fsprogs",
-		"policycoreutils",
-		"selinux-policy-targeted",
 		"systemd",
 		"tar",
 		"xz",

internal/manifest/os.go

@@ -213,6 +213,10 @@ func (p *OSPipeline) getBuildPackages() []string {
 	if p.OSTree != nil {
 		packages = append(packages, "rpm-ostree")
 	}
+	if p.SElinux != "" {
+		packages = append(packages, "policycoreutils")
+		packages = append(packages, fmt.Sprintf("selinux-policy-%s", p.SElinux))
+	}
 	return packages
 }