diff --git a/nixos/tests/boot-stage2.nix b/nixos/tests/boot-stage2.nix
index 90f0ac01207c..c2bec97e4376 100644
--- a/nixos/tests/boot-stage2.nix
+++ b/nixos/tests/boot-stage2.nix
@@ -66,6 +66,10 @@ import ./make-test-python.nix (
       machine.wait_for_unit("multi-user.target")
       machine.succeed("test /etc/post-boot-ran")
       machine.fail("touch /nix/store/should-not-work");
+
+      for opt in ["ro", "nosuid", "nodev"]:
+        with subtest(f"testing store mount option: {opt}"):
+          machine.succeed(f'[[ "$(findmnt --direction backward --first-only --noheadings --output OPTIONS /nix/store)" =~ (^|,){opt}(,|$) ]]')
     '';
 
     meta.maintainers = with pkgs.lib.maintainers; [ numinit ];