Increase the default memlock to 64MiB via ``DockerNovaComputeUlimit``.

This builds on I0fb688bfe03cd0459f6f74ca37e3e6c913b0cbcb to raise the
ulimit for locked memory on nova containers[1].  This is needed because
of [2] where the transient container nova_cell_v2_discover_hosts fails
with permission denied on ppc64le

Note: this is a limit maximum not a pre-allocation so for existing
containers and architectures the impact is expected to be a no-op.

[1] Currently nova_compute and nova_cell_v2_discover_hosts
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1709564

Change-Id: I6d68431fd3c66c9496a36d3cfa9c2efe57e2ed99

deployment/nova/nova-compute-container-puppet.yaml

@@ -11,7 +11,7 @@ parameters:
     description: The container image to use for the nova_libvirt config_volume
     type: string
   DockerNovaComputeUlimit:
-    default: ['nofile=131072']
+    default: ['nofile=131072', 'memlock=67108864']
     description: ulimit for Nova Compute Container
     type: comma_delimited_list
   NovaComputeLoggingSource:

releasenotes/notes/nova-memlock-increase-066ed22764ed3ce1.yaml

@@ -0,0 +1,9 @@
+---
+fixes:
+  - |
+    Certain nova containers require more locked memory that the default limit of 16KiB.
+    Increase the default memlock to 64MiB via ``DockerNovaComputeUlimit``.
+
+    As this is only a maximum limit and not a pre-allocatiosn this will not
+    increase the memory requirements for all nova containers.  To date the only
+    container to require this is nova_cell_v2_discover_hosts which is short lived.