You can use environment.etc to manage a file in /etc: https://search.nixos.org/options?show=environment.etc.

Kubernetes and docker both use containerd, which in turn uses runc which is what the vulnerability is in.

I keep my keys on a Yubikey. I’ve not really had a need to use the GPG portion of this on Android, but it works fine on Linux and MacOS.

I used this guide: https://github.com/drduh/YubiKey-Guide

They would show for others on your instance, but not for people on other instances, so each instance will have a separate downvote counter.