This builds on I0fb688bfe03cd0459f6f74ca37e3e6c913b0cbcb to raise the
ulimit for locked memory on nova containers[1]. This is needed because
of [2] where the transient container nova_cell_v2_discover_hosts fails
with permission denied on ppc64le
Note: this is a limit maximum not a pre-allocation so for existing
containers and architectures the impact is expected to be a no-op.
[1] Currently nova_compute and nova_cell_v2_discover_hosts
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1709564
Change-Id: I6d68431fd3c66c9496a36d3cfa9c2efe57e2ed99
(cherry picked from commit 6ce5989e49)
1293c460e9