diff --git a/net/dns/debian_resolvconf.go b/net/dns/debian_resolvconf.go
index 3ffc796e0..63fd80c12 100644
--- a/net/dns/debian_resolvconf.go
+++ b/net/dns/debian_resolvconf.go
@@ -1,7 +1,7 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
-//go:build linux || freebsd || openbsd
+//go:build (linux && !android) || freebsd || openbsd
 
 package dns
 
diff --git a/net/dns/direct.go b/net/dns/direct.go
index aaff18fcb..f23723d9a 100644
--- a/net/dns/direct.go
+++ b/net/dns/direct.go
@@ -1,6 +1,8 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
+//go:build !android && !ios
+
 package dns
 
 import (
diff --git a/net/dns/direct_linux.go b/net/dns/direct_linux.go
index 8dccc5bfb..0558f0f51 100644
--- a/net/dns/direct_linux.go
+++ b/net/dns/direct_linux.go
@@ -1,6 +1,8 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
+//go:build linux && !android
+
 package dns
 
 import (
diff --git a/net/dns/direct_notlinux.go b/net/dns/direct_notlinux.go
index c221ca1be..a73a35e5e 100644
--- a/net/dns/direct_notlinux.go
+++ b/net/dns/direct_notlinux.go
@@ -1,7 +1,7 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
-//go:build !linux
+//go:build !linux && !android && !ios
 
 package dns
 
diff --git a/net/dns/manager_default.go b/net/dns/manager_default.go
index e14454e76..dbe985cac 100644
--- a/net/dns/manager_default.go
+++ b/net/dns/manager_default.go
@@ -1,7 +1,7 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
-//go:build !linux && !freebsd && !openbsd && !windows && !darwin && !illumos && !solaris && !plan9
+//go:build (!linux || android) && !freebsd && !openbsd && !windows && !darwin && !illumos && !solaris && !plan9
 
 package dns
 
diff --git a/net/dns/manager_linux.go b/net/dns/manager_linux.go
index 3ba3022b6..6bd368f50 100644
--- a/net/dns/manager_linux.go
+++ b/net/dns/manager_linux.go
@@ -1,6 +1,8 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
+//go:build linux && !android
+
 package dns
 
 import (
diff --git a/net/dns/nm.go b/net/dns/nm.go
index ef07a90d8..97557e33a 100644
--- a/net/dns/nm.go
+++ b/net/dns/nm.go
@@ -1,7 +1,7 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
-//go:build linux
+//go:build linux && !android
 
 package dns
 
diff --git a/net/dns/openresolv.go b/net/dns/openresolv.go
index 0b5c87a3b..c9562b6a9 100644
--- a/net/dns/openresolv.go
+++ b/net/dns/openresolv.go
@@ -1,7 +1,7 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
-//go:build linux || freebsd || openbsd
+//go:build (linux && !android) || freebsd || openbsd
 
 package dns
 
diff --git a/net/dns/resolved.go b/net/dns/resolved.go
index 1a7c86041..4f58f3f9c 100644
--- a/net/dns/resolved.go
+++ b/net/dns/resolved.go
@@ -1,7 +1,7 @@
 // Copyright (c) Tailscale Inc & AUTHORS
 // SPDX-License-Identifier: BSD-3-Clause
 
-//go:build linux
+//go:build linux && !android
 
 package dns
 
diff --git a/tsnet/depaware.txt b/tsnet/depaware.txt
index dd90f66e3..9f0956ea0 100644
--- a/tsnet/depaware.txt
+++ b/tsnet/depaware.txt
@@ -103,7 +103,7 @@ tailscale.com/tsnet dependencies: (generated by github.com/tailscale/depaware)
         github.com/go-json-experiment/json/jsontext                  from github.com/go-json-experiment/json+
    W 💣 github.com/go-ole/go-ole                                     from github.com/go-ole/go-ole/oleutil+
    W 💣 github.com/go-ole/go-ole/oleutil                             from tailscale.com/wgengine/winnet
-  LA 💣 github.com/godbus/dbus/v5                                    from tailscale.com/net/dns
+   L 💣 github.com/godbus/dbus/v5                                    from tailscale.com/net/dns
         github.com/golang/groupcache/lru                             from tailscale.com/net/dnscache
         github.com/google/btree                                      from gvisor.dev/gvisor/pkg/tcpip/header+
    L    github.com/google/nftables                                   from tailscale.com/util/linuxfw
@@ -116,8 +116,8 @@ tailscale.com/tsnet dependencies: (generated by github.com/tailscale/depaware)
  LDW    github.com/gorilla/csrf                                      from tailscale.com/client/web
  LDW    github.com/gorilla/securecookie                              from github.com/gorilla/csrf
         github.com/hdevalence/ed25519consensus                       from tailscale.com/clientupdate/distsign+
-  LA 💣 github.com/illarion/gonotify/v3                              from tailscale.com/net/dns
-  LA    github.com/illarion/gonotify/v3/syscallf                     from github.com/illarion/gonotify/v3
+   L 💣 github.com/illarion/gonotify/v3                              from tailscale.com/net/dns
+   L    github.com/illarion/gonotify/v3/syscallf                     from github.com/illarion/gonotify/v3
    L    github.com/jmespath/go-jmespath                              from github.com/aws/aws-sdk-go-v2/service/ssm
    L 💣 github.com/jsimonetti/rtnetlink                              from tailscale.com/net/netmon
    L    github.com/jsimonetti/rtnetlink/internal/unix                from github.com/jsimonetti/rtnetlink