> Why not just bare Linux, possibly with the PREEMPT_RT patchset

That'd be a really bad idea. Linux is too complex to trust, and lacks WCET making it unsuitable for hard realtime.

There's open source options, but Linux isn't among them. I'd look at seL4 for this purpose.