ova: fix Photon 5 distro-sync failure due to alternatives/chkconfig conflict

iptables-1.8.13-2.ph5 and ebtables-2.0.11-4.ph5 now require the
alternatives package (introduced by Broadcom on April 9, 2026).

The Photon 5 minimal installation ships chkconfig which conflicts with
the new alternatives package, so it cannot be installed directly. The
fix installs alternatives via Ansible with --allowerasing before
distro-sync runs. This atomically replaces chkconfig with alternatives,
satisfying the iptables/ebtables dependency and allowing distro-sync to
complete successfully.

Validated with a live vSphere build against the testbed.

Ref: vmware/photon#1646
Made-with: Cursor

Author: knabben

images/capi/ansible/roles/setup/tasks/photon.yml

@@ -36,6 +36,11 @@
   changed_when: '"Nothing to do" not in distro.stderr'
   when: not disable_public_repos|default(false)|bool
 
+- name: Replace chkconfig with alternatives to satisfy iptables dependency
+  ansible.builtin.command: tdnf install -y alternatives --allowerasing
+  register: install_alternatives
+  changed_when: '"Nothing to do" not in install_alternatives.stderr'
+
 - name: Perform a tdnf distro-sync
   ansible.builtin.command: tdnf distro-sync -y --refresh
   register: distro