diff --git a/test/packetdrill/defs.bzl b/test/packetdrill/defs.bzl
index a6cbcc376..fac3f642e 100644
--- a/test/packetdrill/defs.bzl
+++ b/test/packetdrill/defs.bzl
@@ -39,7 +39,7 @@ _packetdrill_test = rule(
     attrs = {
         "_test_runner": attr.label(
             executable = True,
-            cfg = "host",
+            cfg = "exec",
             allow_files = True,
             default = "packetdrill_test.sh",
         ),
diff --git a/tools/go_fieldenum/defs.bzl b/tools/go_fieldenum/defs.bzl
index 0cd2679ca..a7dba2795 100644
--- a/tools/go_fieldenum/defs.bzl
+++ b/tools/go_fieldenum/defs.bzl
@@ -24,6 +24,6 @@ go_fieldenum = rule(
         "srcs": attr.label_list(doc = "input source files", mandatory = True, allow_files = True),
         "package": attr.string(doc = "the package for the generated source file", mandatory = True),
         "out": attr.output(doc = "output file", mandatory = True),
-        "_tool": attr.label(executable = True, cfg = "host", default = Label("//tools/go_fieldenum:fieldenum")),
+        "_tool": attr.label(executable = True, cfg = "exec", default = Label("//tools/go_fieldenum:fieldenum")),
     },
 )
diff --git a/tools/go_generics/defs.bzl b/tools/go_generics/defs.bzl
index 0515a2c50..2443673d0 100644
--- a/tools/go_generics/defs.bzl
+++ b/tools/go_generics/defs.bzl
@@ -51,7 +51,7 @@ go_template = rule(
         "opt_types": attr.string_list(doc = "the list of generic types in the template that can but aren't required to be specified"),
         "consts": attr.string_list(doc = "the list of constants in the template that are required to be specified"),
         "opt_consts": attr.string_list(doc = "the list of constants in the template that can but aren't required to be specified"),
-        "_tool": attr.label(executable = True, cfg = "host", default = Label("//tools/go_generics/go_merge")),
+        "_tool": attr.label(executable = True, cfg = "exec", default = Label("//tools/go_generics/go_merge")),
     },
 )
 
@@ -124,6 +124,6 @@ go_template_instance = rule(
         "anon": attr.bool(doc = "whether anoymous fields should be processed", mandatory = False, default = False),
         "package": attr.string(doc = "the package for the generated source file", mandatory = False),
         "out": attr.output(doc = "output file", mandatory = True),
-        "_tool": attr.label(executable = True, cfg = "host", default = Label("//tools/go_generics")),
+        "_tool": attr.label(executable = True, cfg = "exec", default = Label("//tools/go_generics")),
     },
 )
diff --git a/tools/go_marshal/defs.bzl b/tools/go_marshal/defs.bzl
index 9f620cb76..c9088f826 100644
--- a/tools/go_marshal/defs.bzl
+++ b/tools/go_marshal/defs.bzl
@@ -45,7 +45,7 @@ go_marshal = rule(
         "imports": attr.string_list(mandatory = False),
         "package": attr.string(mandatory = True),
         "debug": attr.bool(doc = "enable debugging output from the go_marshal tool"),
-        "_tool": attr.label(executable = True, cfg = "host", default = Label("//tools/go_marshal:go_marshal")),
+        "_tool": attr.label(executable = True, cfg = "exec", default = Label("//tools/go_marshal:go_marshal")),
     },
     outputs = {
         "lib": "%{name}_unsafe.go",
diff --git a/tools/go_stateify/defs.bzl b/tools/go_stateify/defs.bzl
index 6a5e666f0..950f21090 100644
--- a/tools/go_stateify/defs.bzl
+++ b/tools/go_stateify/defs.bzl
@@ -52,7 +52,7 @@ for statified types.
         ),
         "_tool": attr.label(
             executable = True,
-            cfg = "host",
+            cfg = "exec",
             default = Label("//tools/go_stateify:stateify"),
         ),
         "_statepkg": attr.string(default = "gvisor.dev/gvisor/pkg/state"),
diff --git a/tools/nogo/defs.bzl b/tools/nogo/defs.bzl
index bae41e2d6..4073d975b 100644
--- a/tools/nogo/defs.bzl
+++ b/tools/nogo/defs.bzl
@@ -117,7 +117,7 @@ nogo_stdlib = go_rule(
     attrs = {
         "_nogo": attr.label(
             default = "//tools/nogo:nogo",
-            cfg = "host",
+            cfg = "exec",
         ),
         "_target": attr.label(
             default = "//tools/nogo:target",
@@ -125,7 +125,7 @@ nogo_stdlib = go_rule(
         ),
         "_nogo_full": attr.label(
             default = "//tools/nogo:full",
-            cfg = "host",
+            cfg = "exec",
         ),
     },
 )
@@ -327,7 +327,7 @@ nogo_aspect = go_rule(
     attrs = {
         "_nogo": attr.label(
             default = "//tools/nogo:nogo",
-            cfg = "host",
+            cfg = "exec",
         ),
         "_target": attr.label(
             default = "//tools/nogo:target",
@@ -413,7 +413,7 @@ nogo_test = rule(
         ),
         "_nogo": attr.label(
             default = "//tools/nogo:nogo",
-            cfg = "host",
+            cfg = "exec",
         ),
         "_target": attr.label(
             default = "//tools/nogo:target",
@@ -495,7 +495,7 @@ nogo_facts = go_rule(
         ),
         "_nogo": attr.label(
             default = "//tools/nogo:nogo",
-            cfg = "host",
+            cfg = "exec",
         ),
         # See _nogo_aspect, above.
         "_nogo_stdlib": attr.label(
diff --git a/tools/yamltest/defs.bzl b/tools/yamltest/defs.bzl
index 04469d815..ed062802f 100644
--- a/tools/yamltest/defs.bzl
+++ b/tools/yamltest/defs.bzl
@@ -39,7 +39,7 @@ yaml_test = rule(
         ),
         "_tool": attr.label(
             executable = True,
-            cfg = "host",
+            cfg = "exec",
             default = Label("//tools/yamltest:yamltest"),
         ),
     },