Description of problem:

During Wallaby, we added support for creating instances with vDPA network devices. However, due to how this was implemented by QEMU/libvirt, it was necessary for users to enable the real-time policy ('hw:cpu_realtime=yes') to enable locked memory. Users shouldn't need to set this mostly unrelated set of tweaks to simply use vDPA. This could be resolved either by libvirt, which could increase the memlock limit via prlimit(2) as it does for VFIO devices, or nova could provide a way for users to request locked memory and only locked memory. This RFE tracks testing of the chosen solution along with any potential work needed in nova along the way.