The support is not yet there. Temporarily fail it properly when starting postcopy until it's supported. Fail at postcopy-start still allows the user to proceed with e.g. pure tls precopy even if postcopy-ram is set.
Signed-off-by: Peter Xu <pet...@redhat.com> --- migration/migration.c | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/migration/migration.c b/migration/migration.c index f30bad982c..95cfc483c9 100644 --- a/migration/migration.c +++ b/migration/migration.c @@ -1802,6 +1802,12 @@ void qmp_migrate_start_postcopy(Error **errp) " started"); return; } + + if (migrate_postcopy_preempt() && migrate_tls_enabled()) { + error_setg(errp, "Postcopy preemption does not support TLS yet"); + return; + } + /* * we don't error if migration has finished since that would be racy * with issuing this command. -- 2.32.0