diff --git a/tox.ini b/tox.ini
index b99d9b8f3..3521c078e 100644
--- a/tox.ini
+++ b/tox.ini
@@ -17,6 +17,7 @@ deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/2023.1}
   -r{toxinidir}/requirements.txt
   -r{toxinidir}/test-requirements.txt
+  setuptools>=64.0.0,<82.0.0 # MIT
 commands = stestr run {posargs}
 passenv =
     http_proxy
@@ -79,6 +80,7 @@ deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/2023.1}
   -r{toxinidir}/requirements.txt
   -r{toxinidir}/doc/requirements.txt
+  setuptools>=64.0.0,<82.0.0 # MIT
 commands =
   sphinx-build -b html doc/source doc/build/html
 
@@ -95,6 +97,7 @@ commands =
 deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/2023.1}
   -r{toxinidir}/doc/requirements.txt
+  setuptools>=64.0.0,<82.0.0 # MIT
 commands = sphinx-build -a -E -W -d releasenotes/build/doctrees -b html releasenotes/source releasenotes/build/html
 
 [flake8]
@@ -133,6 +136,7 @@ commands =
 deps =
   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/2023.1}
   -r{toxinidir}/test-requirements.txt
+  setuptools>=64.0.0,<82.0.0 # MIT
 commands = bandit -r ironic_python_agent -x tests -n5 -ll -c tools/bandit.yml
 
 [testenv:examples]