diff --git a/tox.ini b/tox.ini
index c4c5ed54d..fb5b2166e 100644
--- a/tox.ini
+++ b/tox.ini
@@ -7,6 +7,18 @@ sitepackages = false
 # NOTE(beisner): the 'py3' env is useful to "just give me whatever py3 is here."
 # NOTE(beisner): the 'py3x' envs are useful to use a distinct interpreter version (will fail if not found)
 ignore_basepython_conflict = true
+# NOTES:
+# * We avoid the new dependency resolver by pinning pip < 20.3, see
+#   https://github.com/pypa/pip/issues/9187
+# * Pinning dependencies requires tox >= 3.2.0, see
+#   https://tox.readthedocs.io/en/latest/config.html#conf-requires
+# * It is also necessary to pin virtualenv as a newer virtualenv would still
+#   lead to fetching the latest pip in the func* tox targets, see
+#   https://stackoverflow.com/a/38133283
+requires = pip < 20.3
+           virtualenv < 20.0
+# NOTE: https://wiki.canonical.com/engineering/OpenStack/InstallLatestToxOnOsci
+minversion = 3.2.0
 
 [testenv]
 setenv = VIRTUAL_ENV={envdir}