In theory it is but that would increase the image size by like 200MB. I'm not sure that is desirable for production :-) I assume ebtables can be moved easily to kernel-default-base but if that is not sufficient anyways and we end up moving more and more stuff, resp need to add more packages to the image I wonder whether it wouldn't be easier to offer a 2nd image for developers?