add exclude snapshot repo option to virtual snapshot

[sameluch]

Merge Checklist

All boxes should be checked before merging the PR (just tick any boxes which don't apply to this PR)

• The toolchain has been rebuilt successfully (or no changes were made to it)
• The toolchain/worker package manifests are up-to-date
• Any updated packages successfully build (or no packages were changed)
• Packages depending on static components modified in this PR (Golang, *-static subpackages, etc.) have had their Release tag incremented.
• Package tests (%check section) have been verified with RUN_CHECK=y for existing SPEC files, or added to new SPEC files
• All package sources are available
• cgmanifest files are up-to-date and sorted (./cgmanifest.json, ./toolkit/scripts/toolchain/cgmanifest.json, .github/workflows/cgmanifest.json)
• LICENSE-MAP files are up-to-date (./LICENSES-AND-NOTICES/SPECS/data/licenses.json, ./LICENSES-AND-NOTICES/SPECS/LICENSES-MAP.md, ./LICENSES-AND-NOTICES/SPECS/LICENSE-EXCEPTIONS.PHOTON)
• All source files have up-to-date hashes in the *.signatures.json files
• sudo make go-tidy-all and sudo make go-test-coverage pass
• Documentation has been updated to match any changes to the build system
• Ready to merge

---

Summary

What does the PR accomplish, why was it needed?
After discussing snapshot functionality slightly deeper, the ability to exclude a repo from the snapshot is desired and useful. The patch has added --excludesnapshot option for the command line of tdnf

Change Log

• Add --excludesnapshot patch to tdnf

Does this affect the toolchain?

YES

Test Methodology

• Local testing

[PawelWMS]

Is there a reason we want a separate argument for the snapshot instead of relying on the existing --disablerepo and --enablerepo? I'm worried that having two may be confusing when using the snapshot.

[sameluch]

The reason to add a snapshot exclude option is to allow for a repo containing new packages locally built to still be included when building an image, but not from upstream. This is also additional flexibility within the feature for tdnf, not just applicable to our use case for allowing local RPMs from within the toolkit.

[jslobodzian]

&& or || here?

[sameluch]

Good catch, this is actually copy paste from upstream, we can likely contribute this small fix upstream if not already present

[jslobodzian]

can we rename this to something like --snapshotexclusionrepos so that it sorts with snapshottime. And helps clarify that the snapshot exclusion applies to a repo.

Also...how big of a stretch from here to take a comma separated list of repos (I know we discussed supporting only 1)

[sameluch]

Updated to --snapshotexcluderepos to make the names come together.

I also added the ability to specify multiple repos in one go as a comma separated list in line.

[sameluch]

tested by running the following commands to check if the second repo was snapshot when using the updated tdnf:
tdnf install valgrind --snapshottime=1724119509 --snapshotexcluderepos=azurelinux-official-base
tdnf install valgrind --snapshottime=1724119509 --snapshotexcluderepos=azurelinux-official-base,azurelinux-official-base-debug