diff --git a/.github/workflows/foreign.yml b/.github/workflows/foreign.yml
new file mode 100644
index 000000000..6f971ef80
--- /dev/null
+++ b/.github/workflows/foreign.yml
@@ -0,0 +1,82 @@
+name: foreign
+on: [push, pull_request]
+permissions:
+  # BOLD WARNING: do not add permissions, this workflow executes remote code
+  contents: read
+env:
+  FORCE_COLOR: 1
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+jobs:
+  freebsd:
+    name: freebsd
+    timeout-minutes: 20
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: vmactions/freebsd-vm@v1
+        with:
+          prepare: pkg install -y nginx python311 py311-pip py311-tox py311-sqlite3
+          usesh: true
+          copyback: false
+          # not a typo: "openssl --version" != "openssl version"
+          run: |
+            uname -a \
+            && python3.11 --version \
+            && python3.11 -m tox --version \
+            && openssl version \
+            && pkg info nginx \
+            && python3.11 -m tox -e run-module \
+            && python3.11 -m tox -e run-entrypoint \
+            && python3.11 -m tox -e py
+
+  openbsd:
+    name: openbsd
+    timeout-minutes: 20
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: vmactions/openbsd-vm@v1
+        with:
+          prepare: pkg_add python py3-pip py3-tox py3-sqlite3 nginx
+          usesh: true
+          copyback: false
+          run: |
+            uname -a \
+            && python3 --version \
+            && python3 -m tox --version \
+            && openssl version \
+            && pkg_info nginx \
+            && python3 -m tox -e run-module \
+            && python3 -m tox -e run-entrypoint \
+            && python3 -m tox -e py
+
+  illumos:
+    name: illumos
+    timeout-minutes: 20
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: true
+    steps:
+      - uses: actions/checkout@v4
+      - uses: vmactions/omnios-vm@v1
+        with:
+          prepare: pkg install pip-311 python-311 sqlite-3 nginx
+          usesh: true
+          copyback: false
+          run: |
+            cat /etc/release \
+            && uname -a \
+            && python3 --version \
+            && python3 -m tox --version \
+            && openssl version \
+            && pkg_info nginx \
+            && python3 -m pip install tox \
+            && python3 -m tox -e run-module \
+            && python3 -m tox -e run-entrypoint \
+            && python3 -m tox -e py
diff --git a/tests/test_nginx.py b/tests/test_nginx.py
index 69742edb7..088cd4692 100644
--- a/tests/test_nginx.py
+++ b/tests/test_nginx.py
@@ -17,7 +17,6 @@
 from pathlib import Path
 from tempfile import TemporaryDirectory
 from typing import TYPE_CHECKING
-from filelock import FileLock
 
 import pytest
 
@@ -300,9 +299,9 @@ def dummy_ssl_cert(tmp_path_factory):
     key = base_tmp_dir / "dummy.key"
     print(crt, key)
     # generate once, reuse for all tests
-    with FileLock("%s.lock" % crt):
-        if not crt.is_file():
-            generate_dummy_ssl_cert(crt, key)
+    # with FileLock("%s.lock" % crt):
+    if not crt.is_file():
+        generate_dummy_ssl_cert(crt, key)
     return crt, key