update/security: Upgrade kernel on scaleway machines

[luhenry]

With the recent GhostWrite attack, we need to update the kernels on our RISC-V machines hosted at Scaleway. The steps are documented at https://www.scaleway.com/en/docs/bare-metal/elastic-metal/reference-content/elastic-metal-rv1-guidelines/#update-the-kernel

That kernel update will also allow to disable completely the support for vector on these machines, both for security reasons (as it's the source of the attack in question), but also because the vector instructions available on this machines implement an unratified version of the Vector spec (not 1.0.0).

cc @sxa

[Haroon-Khel]

To reiterate, in the scaleway console the Eclipse Adoptium user is not able to access the more info page of the test-rise machines to be able to boot them into rescue mode. Awaiting the required permissions

[sxa]

Upgrade process has not been successful, so we should look at reprovisioning and re-running ansible on the machines instead of upgrading the existing ones.

[Haroon-Khel]

Ive set up https://ci.adoptium.net/computer/test-rise-ubuntu2404-riscv64-1X/ as the first reprovisioned node.

root@test-rise-ubuntu2404-riscv64-1X:~# uname -r
5.10.113-scw1

Old node:

root@test-rise-ubuntu2404-riscv64-7:~# uname -r
5.10.113+

[Haroon-Khel]

The test-ubuntu2404 machines have been reinstalled. Their kernels have been upgraded to 5.10.113-scw1

[Haroon-Khel]

Closing this as the kernel upgrades have been done, all thats left is to update the inventory file https://github.com/adoptium/infrastructure/pull/3859