Hi Ard, Real time kernels usually disable efi runtime for latency issues, but for some use cases, e.g. when Secure Boot is used kexec needs to get the UEFI keys to verify the kernel signatures with kexec_file_load syscall. Do you have suggestions on how to make both work? Is it possible to have something like CONFIG_EFI_DISABLE_RUNTIME_LATE so the runtime can be disabled after init phase or a runtime switch in sysctl? Thanks Dave
