This shared host role verifies the two configured AMD GPUs and their amdgpu kernel driver, discovers only the DRM render nodes belonging to their PCI IDs, and checks /dev/kfd. It grants the Production and Testing service accounts the minimal supplementary groups required by those device nodes.

When group membership changes, the role restarts both persistent systemd user managers so later rootless Quadlets can use GroupAdd=keep-groups. It verifies that each service account can read and write /dev/kfd and both selected render devices.

The role installs no ROCm userspace packages, pulls no image and starts no container. ROCm userspace will come from the pinned llama.cpp container. A later workload check must still prove that the container detects both GPUs as gfx1030 and performs inference on them.