From e88eb65a4400b3d3b5f43bc765b9dc79ce1edb18 Mon Sep 17 00:00:00 2001
From: reyesj2 <94730068+reyesj2@users.noreply.github.com>
Date: Wed, 1 Jul 2026 10:29:05 -0500
Subject: [PATCH] keep old packages for rollback ability

---
 salt/manager/tools/sbin/soup | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/salt/manager/tools/sbin/soup b/salt/manager/tools/sbin/soup
index 92d89f5e6..b84c38087 100755
--- a/salt/manager/tools/sbin/soup
+++ b/salt/manager/tools/sbin/soup
@@ -244,8 +244,7 @@ check_airgap() {
       is_airgap=0
       UPDATE_DIR=/tmp/soagupdate/SecurityOnion
       AGDOCKER=/tmp/soagupdate/docker
-      AGREPO=/tmp/soagupdate/minimal/Packages
-      AGUEKREPO=/tmp/soagupdate/uek/Packages
+      AGREPO=/tmp/soagupdate/minimal/Packages      AGUEKREPO=/tmp/soagupdate/uek/Packages
   else
       is_airgap=1
   fi
@@ -1008,9 +1007,9 @@ update_airgap_rules() {
 update_airgap_repos() {
   # Update the files in the repo
   echo "Syncing new updates to /nsm/repo & /nsm/kernelrepo"
-  # using --delete to replicate so-repo-sync behavior of keeping only latest packages in local repo
-  rsync -a --delete "$AGREPO"/ /nsm/repo/
-  rsync -a --delete "$AGUEKREPO"/ /nsm/kernelrepo/
+  # Airgap soup copies new files into the local repo, but doesn't remove old packages. Retaining the ability to rollback package updates
+  rsync -a "$AGREPO"/ /nsm/repo/
+  rsync -a "$AGUEKREPO"/ /nsm/kernelrepo/
 
   dnf -y install yum-utils createrepo_c