diff --git a/version_test.go b/version_test.go
new file mode 100644
index 000000000..9b99609f3
--- /dev/null
+++ b/version_test.go
@@ -0,0 +1,34 @@
+// Copyright (c) 2022 Tailscale Inc & AUTHORS All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package tailscaleroot
+
+import (
+	"fmt"
+	"os"
+	"regexp"
+	"strings"
+	"testing"
+)
+
+func TestDockerfileVersion(t *testing.T) {
+	goMod, err := os.ReadFile("go.mod")
+	if err != nil {
+		t.Fatal(err)
+	}
+	m := regexp.MustCompile(`(?m)^go (\d\.\d+)\r?$`).FindStringSubmatch(string(goMod))
+	if m == nil {
+		t.Fatalf("didn't find go version in go.mod")
+	}
+	goVersion := m[1]
+
+	dockerFile, err := os.ReadFile("Dockerfile")
+	if err != nil {
+		t.Fatal(err)
+	}
+	wantSub := fmt.Sprintf("FROM golang:%s-alpine AS build-env", goVersion)
+	if !strings.Contains(string(dockerFile), wantSub) {
+		t.Errorf("didn't find %q in Dockerfile", wantSub)
+	}
+}