The qrencode-libs package seems to have been added to the list of extra packages for the toolbox images for RHEL 8 by mistake.

It's neither required by the corresponding images for RHEL 9 nor the fedora-toolbox images. Sometimes it gets pulled in as a weak dependency of systemd on Fedora, but RHEL never had that dependency.

Plus, systemd itself is also not explicitly required. It gets pulled in if it's part of the dependency chain of some other explicitly required package.

Therefore, it will be good to remove qrencode-libs from our list to avoid being responsible for unnecessary CVEs and reduce the image size by a tiny bit.