diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index ea37ea24c2..afc1e13f8c 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -57,6 +57,8 @@ jobs:
             arch: amd64
           - os: openbsd
             arch: amd64
+          - os: netbsd
+            arch: amd64
           - os: windows
             arch: amd64
     steps:
diff --git a/app/vmauth/main.go b/app/vmauth/main.go
index 82a9909624..c369c9f330 100644
--- a/app/vmauth/main.go
+++ b/app/vmauth/main.go
@@ -97,6 +97,7 @@ func main() {
 	buildinfo.Init()
 	logger.Init()
 
+	// TODO: remove before merge
 	if *dryRun {
 		if len(*authConfigPath) == 0 {
 			logger.Fatalf("missing required `-auth.config` command-line flag")