diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bd99ddd33..b20c67d5b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        runs-on: [ubuntu-latest, windows-2022, macos-latest]
+        runs-on: [ubuntu-20.04, windows-2022, macos-latest]
         python:
         - '3.6'
         - '3.9'
@@ -42,12 +42,12 @@ jobs:
         # We support an optional key: args, for cmake args
         include:
           # Just add a key
-          - runs-on: ubuntu-latest
+          - runs-on: ubuntu-20.04
             python: '3.6'
             args: >
               -DPYBIND11_FINDPYTHON=ON
               -DCMAKE_CXX_FLAGS="-D_=1"
-          - runs-on: ubuntu-latest
+          - runs-on: ubuntu-20.04
             python: 'pypy-3.8'
             args: >
               -DPYBIND11_FINDPYTHON=ON
@@ -194,7 +194,7 @@ jobs:
           python-debug: false
 
     name: "🐍 ${{ matrix.python-version }}${{ matrix.python-debug && '-dbg' || '' }} (deadsnakes)${{ matrix.valgrind && ' • Valgrind' || '' }} • x64"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
 
     steps:
     - uses: actions/checkout@v3
@@ -265,7 +265,7 @@ jobs:
 
   # Testing on clang using the excellent silkeh clang docker images
   clang:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     strategy:
       fail-fast: false
       matrix:
@@ -327,7 +327,7 @@ jobs:
 
   # Testing NVCC; forces sources to behave like .cu files
   cuda:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     name: "🐍 3.10 • CUDA 11.7 • Ubuntu 22.04"
     container: nvidia/cuda:11.7.0-devel-ubuntu22.04
 
@@ -394,7 +394,7 @@ jobs:
 
   # Testing on CentOS 7 + PGI compilers, which seems to require more workarounds
   centos-nvhpc7:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     name: "🐍 3 • CentOS7 / PGI 22.9 • x64"
     container: centos:7
 
@@ -443,7 +443,7 @@ jobs:
 
   # Testing on GCC using the GCC docker images (only recent images supported)
   gcc:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     strategy:
       fail-fast: false
       matrix:
@@ -593,7 +593,7 @@ jobs:
   # Testing on CentOS (manylinux uses a centos base, and this is an easy way
   # to get GCC 4.8, which is the manylinux1 compiler).
   centos:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     strategy:
       fail-fast: false
       matrix:
@@ -650,7 +650,7 @@ jobs:
   # This tests an "install" with the CMake tools
   install-classic:
     name: "🐍 3.7 • Debian • x86 •  Install"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     container: i386/debian:buster
 
     steps:
@@ -694,7 +694,7 @@ jobs:
   # basic validation check on the SDist.
   doxygen:
     name: "Documentation build test"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
 
     steps:
     - uses: actions/checkout@v3
diff --git a/.github/workflows/configure.yml b/.github/workflows/configure.yml
index 5ec0dd462..05e972c75 100644
--- a/.github/workflows/configure.yml
+++ b/.github/workflows/configure.yml
@@ -16,12 +16,12 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        runs-on: [ubuntu-latest, macos-latest, windows-latest]
+        runs-on: [ubuntu-20.04, macos-latest, windows-latest]
         arch: [x64]
         cmake: ["3.23"]
 
         include:
-        - runs-on: ubuntu-latest
+        - runs-on: ubuntu-20.04
           arch: x64
           cmake: 3.4
 
diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml
index 31d893c47..892c4d711 100644
--- a/.github/workflows/format.yml
+++ b/.github/workflows/format.yml
@@ -18,7 +18,7 @@ env:
 jobs:
   pre-commit:
     name: Format
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     steps:
     - uses: actions/checkout@v3
     - uses: actions/setup-python@v4
@@ -35,7 +35,7 @@ jobs:
     # When making changes here, please also review the "Clang-Tidy" section
     # in .github/CONTRIBUTING.md and update as needed.
     name: Clang-Tidy
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     container: silkeh/clang:13
     steps:
     - uses: actions/checkout@v3
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index 165a2fd87..e31765bd5 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -6,7 +6,7 @@ on:
 jobs:
   label:
     name: Labeler
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     steps:
 
     - uses: actions/labeler@main
diff --git a/.github/workflows/pip.yml b/.github/workflows/pip.yml
index b787187ee..78454c39d 100644
--- a/.github/workflows/pip.yml
+++ b/.github/workflows/pip.yml
@@ -42,8 +42,8 @@ jobs:
   # This runs the packaging tests and also builds and saves the packages as
   # artifacts.
   packaging:
-    name: 🐍 3.8 • 📦 & 📦 tests • ubuntu-latest
-    runs-on: ubuntu-latest
+    name: 🐍 3.8 • 📦 & 📦 tests • ubuntu-20.04
+    runs-on: ubuntu-20.04
 
     steps:
     - uses: actions/checkout@v3
@@ -85,7 +85,7 @@ jobs:
   # When a GitHub release is made, upload the artifacts to PyPI
   upload:
     name: Upload to PyPI
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     if: github.event_name == 'release' && github.event.action == 'published'
     needs: [packaging]