diff --git a/net/dns/direct.go b/net/dns/direct.go
index 0cae70d0e..e9279d13a 100644
--- a/net/dns/direct.go
+++ b/net/dns/direct.go
@@ -27,11 +27,6 @@ import (
 	"tailscale.com/version/distro"
 )
 
-const (
-	backupConf = "/etc/resolv.pre-tailscale-backup.conf"
-	resolvConf = "/etc/resolv.conf"
-)
-
 // writeResolvConf writes DNS configuration in resolv.conf format to the given writer.
 func writeResolvConf(w io.Writer, servers []netip.Addr, domains []dnsname.FQDN) error {
 	c := &resolvconffile.Config{
diff --git a/net/dns/resolvconfpath_default.go b/net/dns/resolvconfpath_default.go
new file mode 100644
index 000000000..57e82c4c7
--- /dev/null
+++ b/net/dns/resolvconfpath_default.go
@@ -0,0 +1,11 @@
+// Copyright (c) Tailscale Inc & AUTHORS
+// SPDX-License-Identifier: BSD-3-Clause
+
+//go:build !gokrazy
+
+package dns
+
+const (
+	resolvConf = "/etc/resolv.conf"
+	backupConf = "/etc/resolv.pre-tailscale-backup.conf"
+)
diff --git a/net/dns/resolvconfpath_gokrazy.go b/net/dns/resolvconfpath_gokrazy.go
new file mode 100644
index 000000000..f0759b0e3
--- /dev/null
+++ b/net/dns/resolvconfpath_gokrazy.go
@@ -0,0 +1,11 @@
+// Copyright (c) Tailscale Inc & AUTHORS
+// SPDX-License-Identifier: BSD-3-Clause
+
+//go:build gokrazy
+
+package dns
+
+const (
+	resolvConf = "/tmp/resolv.conf"
+	backupConf = "/tmp/resolv.pre-tailscale-backup.conf"
+)