diff --git a/.zuul.yaml b/.zuul.yaml
index b0bf91be71..16e5fd2e2d 100644
--- a/.zuul.yaml
+++ b/.zuul.yaml
@@ -527,7 +527,7 @@
     name: swift-tox-lower-constraints
     parent: openstack-tox-lower-constraints
     # This seems defensible for a l-c job
-    nodeset: ubuntu-bionic
+    nodeset: ubuntu-jammy
     vars:
       bindep_profile: test py27
       python_version: 2.7
diff --git a/tox.ini b/tox.ini
index 86f81ee283..8cc365749c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -1,6 +1,11 @@
 [tox]
 envlist = py37,py27,pep8
 minversion = 3.18.0
+requires =
+  # required to support py27/py36 envs
+  virtualenv<20.22
+  # project-wide requirement; see .zuul.yaml
+  tox<4
 
 [pytest]
 addopts = --verbose