844 B
AMD GPU access role
This shared host role verifies the two configured AMD GPUs and their amdgpu
kernel driver, discovers only the DRM render nodes belonging to their PCI IDs,
and checks /dev/kfd. It grants the Production and Testing service accounts
the minimal supplementary groups required by those device nodes.
When group membership changes, the role restarts both persistent systemd user
managers so later rootless Quadlets can use GroupAdd=keep-groups. It verifies
that each service account can read and write /dev/kfd and both selected
render devices.
The role installs no ROCm userspace packages, pulls no image and starts no
container. ROCm userspace will come from the pinned llama.cpp container. A
later workload check must still prove that the container detects both GPUs as
gfx1030 and performs inference on them.