ci: test on OpenBSD with vmactions

Run the mutt-wizard test suite inside an OpenBSD 7.x VM. Also make the
group/world-readable check portable: stat(1) uses -c on GNU and -f on BSD,
so read the mode from ls(1) instead.

Author: daviduhden

.github/workflows/openbsd.yml

@@ -0,0 +1,37 @@
+name: OpenBSD
+
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Test on OpenBSD
+        uses: vmactions/openbsd-vm@v1
+        with:
+          # Newest OpenBSD 7.x; the action defaults to 7.9.
+          release: "7"
+          sync: rsync
+          copyback: false
+          prepare: |
+            uname -a
+          run: |
+            set -eu
+
+            echo "== environment =="
+            uname -a
+            id
+            make --version 2>&1 | head -n 1 || true
+
+            echo "== test suite =="
+            make test

tests/run_tests.sh

@@ -286,7 +286,15 @@ expect "header cache directory created" test -d "$H1/.cache/mutt-wizard/user_exa
 expect "notmuch config created" test -f "$H1/.notmuch-config"
 expect "imapnotify config created" test -f "$H1/.config/imapnotify/user@example.com.yaml"
 expect "urlview config created" test -f "$H1/.urlview"
-expect "config files are not group/world readable" sh -c 'stat -c "%a" "$1" | grep -qE "^[67]00$"' x "$MUTTRC"
+# Portable permission check: stat(1) flags differ between GNU (-c) and
+# BSD (-f), so inspect the mode field from ls(1) instead.
+expect "config files are not group/world readable" sh -c '
+	mode=$(ls -l "$1" | cut -c1-10)
+	case "$mode" in
+	-rw------- | -rwx------) exit 0 ;;
+	*) exit 1 ;;
+	esac
+' x "$MUTTRC"
 
 mw "$H1" -l >"$TMP/cap.out" 2>/dev/null
 expect "mw lists the added account" grep -q user@example.com "$TMP/cap.out"