diff --git a/cmd/tailscaled/depaware.txt b/cmd/tailscaled/depaware.txt
index 9916604e1..33b6d3db7 100644
--- a/cmd/tailscaled/depaware.txt
+++ b/cmd/tailscaled/depaware.txt
@@ -221,7 +221,7 @@ tailscale.com/cmd/tailscaled dependencies: (generated by github.com/tailscale/de
         debug/elf                                                    from rsc.io/goversion/version
         debug/macho                                                  from rsc.io/goversion/version
         debug/pe                                                     from rsc.io/goversion/version
-        embed                                                        from tailscale.com/net/dns
+   L    embed                                                        from tailscale.com/net/dns
         encoding                                                     from encoding/json+
         encoding/asn1                                                from crypto/x509+
         encoding/base64                                              from encoding/json+
diff --git a/net/dns/debian_resolvconf.go b/net/dns/debian_resolvconf.go
index f29220c37..78debd3cd 100644
--- a/net/dns/debian_resolvconf.go
+++ b/net/dns/debian_resolvconf.go
@@ -2,6 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
+// +build linux freebsd openbsd
+
 package dns
 
 import (
diff --git a/net/dns/direct.go b/net/dns/direct.go
index 6e66349a3..d38236589 100644
--- a/net/dns/direct.go
+++ b/net/dns/direct.go
@@ -2,6 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
+// +build linux freebsd openbsd
+
 package dns
 
 import (
diff --git a/net/dns/openresolv.go b/net/dns/openresolv.go
index 88d0872fb..602f20557 100644
--- a/net/dns/openresolv.go
+++ b/net/dns/openresolv.go
@@ -2,6 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
+// +build linux freebsd openbsd
+
 package dns
 
 import (
diff --git a/net/dns/resolvconf.go b/net/dns/resolvconf.go
index 2cd468697..524385784 100644
--- a/net/dns/resolvconf.go
+++ b/net/dns/resolvconf.go
@@ -2,6 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
+// +build linux freebsd openbsd
+
 package dns
 
 import (
diff --git a/wgengine/router/router_test.go b/wgengine/router/router_test.go
index 4ce1a6e7b..91d82d88a 100644
--- a/wgengine/router/router_test.go
+++ b/wgengine/router/router_test.go
@@ -2,6 +2,8 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
+// +build linux windows
+
 package router
 
 import "inet.af/netaddr"