Comment # 1 on bug 1184385 from Attila Pinter

The same scenario is true for a "Container host" role as well. Firewalld should
be part of the offline installer or need an option to add online repositories
from YaST. Probably including the package to satisfy the requirements of the
feature made available in the installer is an easier way to deal with the
problem.