Symptoms
Container migration fails with the following messages in the criu dump log
(03.301569) Warn (criu/net.c:683): net: GRE tunnel device venet0 not supported natively
(03.301579) Error (criu/net.c:572): net: Unsupported link 2 (type 778 kind gre)
or
(00.591169) Error (criu/net.c:492): Unsupported link 2 (type 778 kind gre)
(00.606514) Error (criu/namespaces.c:1173): Namespaces dumping finished with error 65280
(00.622356) Error (criu/cr-dump.c:2005): Dumping FAILED.
and the same errors occur for the suspend\restore operation.
Cause
Suspend and resume are not supported with GRE devices inside of the container.
If the container is configured to use GRE (the "ipgre" feature is enabled for the container), neither live migration nor suspend/resume will work for such container.
Resolution
If the container does not need GRE, disable the feature:
# prlctl set --features ipgre:off