[CI] Add a container for release builds (#19289)

Our public releases should satisfy these requirements -
https://vfxplatform.com Among them - glibc 2.28. The best way to achieve
it - is to use ASWF images, which already have the required env.

I've created a container based on aswf/ci-base:2025.1. The original
image already contains CUDA SDK, but not ROCm. So I've additionally
installed it using
https://rocm.docs.amd.com/projects/install-on-linux/en/latest/install/quick-start.html
for RHEL 8.10.

Author: KornevNikita

devops/containers/release_build.Dockerfile

@@ -0,0 +1,27 @@
+FROM docker.io/aswf/ci-base:2025.1
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+USER root
+
+COPY scripts/create-sycl-user.sh /user-setup.sh
+RUN /user-setup.sh
+
+# Install ROCm (for RHEL 8.10), see:
+# https://rocm.docs.amd.com/projects/install-on-linux/en/latest/install/quick-start.html
+RUN dnf -y install https://repo.radeon.com/amdgpu-install/6.4.1/rhel/8.10/amdgpu-install-6.4.60401-1.el8.noarch.rpm && \
+    wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm && \
+    rpm -e epel-release && \
+    rpm -ivh epel-release-latest-8.noarch.rpm && \
+    dnf install dnf-plugin-config-manager && \
+    crb enable && \
+    dnf -y install python3-setuptools python3-wheel && \
+    usermod -a -G render,video sycl && \
+    dnf -y install rocm && \
+    dnf clean all && rm -rf /var/cache/dnf
+
+COPY scripts/docker_entrypoint.sh /docker_entrypoint.sh
+
+USER sycl
+
+ENTRYPOINT ["/docker_entrypoint.sh"]

devops/scripts/create-sycl-user.sh

@@ -13,7 +13,10 @@ USER_ID=1001
 groupadd -g $USER_ID $USER_NAME && useradd $USER_NAME -u $USER_ID -g $USER_ID -m -s /bin/bash
 # Add user to video/irc groups so that it can access GPU
 usermod -aG video $USER_NAME
-usermod -aG irc $USER_NAME
+# check if the irc group exists
+if grep -q '^irc:' /etc/group; then
+  usermod -aG irc $USER_NAME
+fi
 
 # group 109 is required for user to access PVC card.
 groupadd -f -g 109 render