1. We are more on OCI images? Assuming source available, run nix build and docker load of result.

2. Even if kernel.org or GitHub.com will be blocked, it likely than not it already was cached by nixos org cache or community cache or cachix or by your CI or by you workstation.