diff --git a/.github/matrix-jvm-tests.json b/.github/matrix-jvm-tests.json
index 4f2654e282c37..b0b4a49043dc1 100644
--- a/.github/matrix-jvm-tests.json
+++ b/.github/matrix-jvm-tests.json
@@ -3,7 +3,7 @@
   "java-version": 17,
   "maven_args": "$JVM_TEST_MAVEN_ARGS",
   "maven_opts": "-Xmx2g -XX:MaxMetaspaceSize=1g",
-  "os-name": "ubuntu-latest"
+  "os-name": "ubuntu-22.04"
 }
 , {
   "name": "21",
@@ -11,7 +11,7 @@
   "java-version-gradle": 20,
   "maven_args": "$JVM_TEST_MAVEN_ARGS",
   "maven_opts": "-Xmx3g -XX:MaxMetaspaceSize=1g",
-  "os-name": "ubuntu-latest"
+  "os-name": "ubuntu-22.04"
 }
 , {
   "name": "17 Windows",
diff --git a/.github/native-tests.json b/.github/native-tests.json
index 87547f9ca469d..8be0182b08018 100644
--- a/.github/native-tests.json
+++ b/.github/native-tests.json
@@ -4,133 +4,133 @@
             "category": "Main",
             "timeout": 45,
             "test-modules": "main",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data1",
             "timeout": 95,
             "test-modules": "jpa-h2, jpa-h2-embedded, jpa-mariadb, jpa-mssql, jpa-derby, jpa-without-entity, hibernate-orm-tenancy/datasource, hibernate-orm-tenancy/connection-resolver, hibernate-orm-tenancy/connection-resolver-legacy-qualifiers",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data2",
             "timeout": 70,
             "test-modules": "jpa, jpa-mapping-xml/legacy-app, jpa-mapping-xml/modern-app, jpa-mysql, jpa-db2, jpa-oracle",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data3",
             "timeout": 75,
             "test-modules": "flyway, hibernate-orm-panache, hibernate-orm-panache-kotlin, hibernate-orm-envers, liquibase, liquibase-mongodb",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data4",
             "timeout": 60,
             "test-modules": "mongodb-client, mongodb-devservices, mongodb-panache, mongodb-rest-data-panache, mongodb-panache-kotlin, redis-client, hibernate-orm-rest-data-panache",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data5",
             "timeout": 70,
             "test-modules": "jpa-postgresql, jpa-postgresql-withxml, narayana-stm, narayana-jta, reactive-pg-client, hibernate-reactive-postgresql, hibernate-orm-tenancy/schema",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data6",
             "timeout": 105,
             "test-modules": "elasticsearch-rest-client, elasticsearch-java-client, hibernate-search-orm-elasticsearch, hibernate-search-orm-elasticsearch-tenancy, hibernate-search-orm-opensearch, hibernate-search-orm-elasticsearch-outbox-polling, hibernate-search-standalone-elasticsearch, hibernate-search-standalone-opensearch",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Data7",
             "timeout": 85,
             "test-modules": "reactive-oracle-client, reactive-mysql-client, reactive-db2-client, hibernate-reactive-db2, hibernate-reactive-mariadb, hibernate-reactive-mysql, hibernate-reactive-mysql-agroal-flyway, hibernate-reactive-panache, hibernate-reactive-panache-kotlin",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Amazon",
             "timeout": 80,
             "test-modules": "amazon-lambda, amazon-lambda-http, amazon-lambda-rest-funqy, amazon-lambda-rest-servlet, amazon-lambda-rest-reactive-routes, amazon-lambda-rest-resteasy-reactive",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Messaging1",
             "timeout": 115,
             "test-modules": "kafka, kafka-ssl, kafka-sasl, kafka-avro-apicurio2, kafka-json-schema-apicurio2, kafka-snappy, kafka-streams, reactive-messaging-kafka, kafka-oauth-keycloak",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Messaging2",
             "timeout": 80,
             "test-modules": "reactive-messaging-amqp, reactive-messaging-rabbitmq, reactive-messaging-rabbitmq-dyn, reactive-messaging-pulsar",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Security1",
             "timeout": 65,
             "test-modules": "elytron-security-oauth2, elytron-security, elytron-security-jdbc, elytron-undertow, elytron-security-ldap, bouncycastle, bouncycastle-jsse, bouncycastle-fips",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Security2",
             "timeout": 75,
             "test-modules": "oidc, oidc-code-flow, oidc-tenancy, oidc-client, oidc-client-reactive, oidc-token-propagation, oidc-wiremock, oidc-client-wiremock, oidc-wiremock-providers",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Security3",
             "timeout": 55,
             "test-modules": "keycloak-authorization, smallrye-jwt-token-propagation, security-webauthn",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Cache",
             "timeout": 75,
             "test-modules": "infinispan-cache-jpa, infinispan-client, cache, redis-cache, infinispan-cache",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "HTTP",
             "timeout": 130,
             "test-modules": "elytron-resteasy, resteasy-jackson, elytron-resteasy-reactive, resteasy-mutiny, resteasy-reactive-kotlin/standard, vertx, vertx-http, vertx-web, vertx-http-compressors/all, vertx-http-compressors/some, vertx-web-jackson, vertx-graphql, virtual-http, rest-client, rest-client-reactive, rest-client-reactive-stork, rest-client-reactive-multipart, websockets, websockets-next, management-interface, management-interface-auth, mutiny-native-jctools",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Misc1",
             "timeout": 70,
             "test-modules": "maven, jackson, jsonb, kotlin-serialization, rest-client-reactive-kotlin-serialization, quartz, qute, logging-min-level-unset, logging-min-level-set, simple with space",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Misc2",
             "timeout": 75,
             "test-modules": "hibernate-validator, test-extension/tests, logging-gelf, mailer, native-config-profile, locales/all, locales/some, locales/default",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Misc3",
             "timeout": 80,
             "test-modules": "kubernetes-client, openshift-client, kubernetes-service-binding-jdbc, smallrye-config, smallrye-graphql, smallrye-graphql-client, smallrye-graphql-client-keycloak, smallrye-metrics",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Misc4",
             "timeout": 130,
             "test-modules": "picocli-native, gradle, micrometer-mp-metrics, micrometer-prometheus, logging-json, jaxp, jaxb, observability-lgtm, opentelemetry, opentelemetry-jdbc-instrumentation, opentelemetry-mongodb-client-instrumentation, opentelemetry-redis-instrumentation, web-dependency-locator",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Spring",
             "timeout": 60,
             "test-modules": "spring-di, spring-web, spring-data-jpa, spring-boot-properties, spring-cloud-config-client, spring-data-rest",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "gRPC",
             "timeout": 80,
             "test-modules": "grpc-health, grpc-interceptors, grpc-mutual-auth, grpc-plain-text-gzip, grpc-plain-text-mutiny, grpc-proto-v2, grpc-streaming, grpc-tls, grpc-tls-p12, grpc-test-random-port",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Windows support",
@@ -142,13 +142,13 @@
             "category": "DevTools Integration Tests",
             "timeout": 75,
             "test-modules": "devtools-registry-client",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "AWT, ImageIO and Java2D, Packaging .so files",
             "timeout": 40,
             "test-modules": "awt, no-awt, awt-packaging",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         }
     ]
 }
diff --git a/.github/virtual-threads-tests.json b/.github/virtual-threads-tests.json
index a17c515aeeb5b..aafb4242d6bee 100644
--- a/.github/virtual-threads-tests.json
+++ b/.github/virtual-threads-tests.json
@@ -4,19 +4,19 @@
             "category": "Main",
             "timeout": 50,
             "test-modules": "virtual-threads-disabled, grpc-virtual-threads, mailer-virtual-threads, redis-virtual-threads, rest-client-reactive-virtual-threads, resteasy-reactive-virtual-threads, vertx-event-bus-virtual-threads, scheduler-virtual-threads, quartz-virtual-threads",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Messaging",
             "timeout": 45,
             "test-modules": "amqp-virtual-threads, jms-virtual-threads, kafka-virtual-threads",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         },
         {
             "category": "Security",
             "timeout": 20,
             "test-modules": "security-webauthn-virtual-threads",
-            "os-name": "ubuntu-latest"
+            "os-name": "ubuntu-22.04"
         }
     ]
 }
diff --git a/.github/workflows/ci-actions-incremental.yml b/.github/workflows/ci-actions-incremental.yml
index 463b858b3e82b..e6b2da300498e 100644
--- a/.github/workflows/ci-actions-incremental.yml
+++ b/.github/workflows/ci-actions-incremental.yml
@@ -69,7 +69,7 @@ jobs:
   # For more details, see
   # https://github.community/t/pull-request-attribute-empty-in-workflow-run-event-object-for-pr-from-forked-repo/154682
   attach-pr-number:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: Attach pull request number
     if: github.event_name == 'pull_request'
     steps:
@@ -84,7 +84,7 @@ jobs:
           retention-days: 1
   ci-sanity-check:
     name: "CI Sanity Check"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     # Skip main in forks
     if: "github.repository == 'quarkusio/quarkus' || !endsWith(github.ref, '/main')"
     steps:
@@ -92,7 +92,7 @@ jobs:
         run: sleep 30
   build-jdk17:
     name: "Initial JDK 17 Build"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     # Skip main in forks
     # Skip draft PRs, rerun as soon as its removed
     if: "(github.repository == 'quarkusio/quarkus' || !endsWith(github.ref, '/main')) && ( \
@@ -266,7 +266,7 @@ jobs:
 
   calculate-test-jobs:
     name: Calculate Test Jobs
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     # Skip main in forks
     if: "github.repository == 'quarkusio/quarkus' || !endsWith(github.ref, '/main')"
     needs: build-jdk17
@@ -500,7 +500,7 @@ jobs:
           - {
             name: "17",
             java-version: 17,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
           - {
             name: "17 Windows",
@@ -607,7 +607,7 @@ jobs:
           - {
             name: "17",
             java-version: 17,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
           - {
             name: "17 Windows",
@@ -694,12 +694,12 @@ jobs:
           - {
             name: "17",
             java-version: 17,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
           - {
             name: "21",
             java-version: 21,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
           - {
             name: "17 Windows",
@@ -790,12 +790,12 @@ jobs:
           - {
             name: "17",
             java-version: 17,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
           - {
             name: "21",
             java-version: 21,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
           - {
             name: "17 Windows",
@@ -886,7 +886,7 @@ jobs:
           - {
             name: "17",
             java-version: 17,
-            os-name: "ubuntu-latest"
+            os-name: "ubuntu-22.04"
           }
     steps:
       - name: Gradle Enterprise environment
@@ -1047,7 +1047,7 @@ jobs:
     needs: [build-jdk17, calculate-test-jobs]
     # Skip main in forks
     if: "needs.calculate-test-jobs.outputs.run_tcks == 'true' && (github.repository == 'quarkusio/quarkus' || !endsWith(github.ref, '/main'))"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     timeout-minutes: 150
     steps:
       - name: Gradle Enterprise environment
@@ -1259,7 +1259,7 @@ jobs:
     if: ${{ always() && github.repository == 'quarkusio/quarkus' && endsWith(github.ref, '/main') && github.event_name != 'pull_request' && needs.native-tests.result != 'skipped' && needs.native-tests.result != 'cancelled' }}
     needs:
       - native-tests
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/download-artifact@v4
         with:
@@ -1314,7 +1314,7 @@ jobs:
           done
 
   build-report:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: Build report
     needs: [build-jdk17,jvm-tests,maven-tests,gradle-tests,devtools-tests,kubernetes-tests,quickstarts-tests,tcks-test,native-tests,virtual-thread-native-tests]
     if: always()
diff --git a/.github/workflows/ci-istio.yml b/.github/workflows/ci-istio.yml
index ed3970535fbcf..f3e7b53e43376 100644
--- a/.github/workflows/ci-istio.yml
+++ b/.github/workflows/ci-istio.yml
@@ -12,7 +12,7 @@ env:
 jobs:
   cache:
     name: Build and save artifacts
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     steps:
       - uses: actions/checkout@v4
@@ -35,7 +35,7 @@ jobs:
   kubernetes:
     name: Istio + Kubernetes Integration Tests
     needs: cache
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     strategy:
       fail-fast: false
diff --git a/.github/workflows/ci-kubernetes.yml b/.github/workflows/ci-kubernetes.yml
index 6229c70502d7e..5ad74a16b6052 100644
--- a/.github/workflows/ci-kubernetes.yml
+++ b/.github/workflows/ci-kubernetes.yml
@@ -12,7 +12,7 @@ env:
 jobs:
   cache:
     name: Build and save artifacts
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     steps:
       - uses: actions/checkout@v4
@@ -35,7 +35,7 @@ jobs:
   kubernetes:
     name: Kubernetes Integration Tests
     needs: cache
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     strategy:
       fail-fast: false
@@ -91,7 +91,7 @@ jobs:
   knative:
     name: Knative Integration Tests
     needs: cache
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: "github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'"
     strategy:
       fail-fast: false
diff --git a/.github/workflows/ci-sanity-check.yml b/.github/workflows/ci-sanity-check.yml
index 8eef1aa51fdcf..dcbaa7a8a6f46 100644
--- a/.github/workflows/ci-sanity-check.yml
+++ b/.github/workflows/ci-sanity-check.yml
@@ -34,7 +34,7 @@ on:
 jobs:
   ci-sanity-check:
     name: "CI Sanity Check"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: github.repository == 'quarkusio/quarkus'
     steps:
       - name: Build
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 4e2897e0d4f35..7e5362aad6fd7 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -13,7 +13,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: github.repository == 'quarkusio/quarkus'
 
     strategy:
diff --git a/.github/workflows/deploy-snapshots.yml b/.github/workflows/deploy-snapshots.yml
index ec7208945c1a9..3ac93f94d3c13 100644
--- a/.github/workflows/deploy-snapshots.yml
+++ b/.github/workflows/deploy-snapshots.yml
@@ -10,7 +10,7 @@ env:
 jobs:
   build-and-deploy:
     name: "Build and deploy"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: github.repository == 'quarkusio/quarkus'
     env:
       MAVEN_OPTS: -Xmx2048m -XX:MaxMetaspaceSize=1000m
diff --git a/.github/workflows/develocity-publish-build-scans.yml b/.github/workflows/develocity-publish-build-scans.yml
index 5b622e3f161dd..c087294a01643 100644
--- a/.github/workflows/develocity-publish-build-scans.yml
+++ b/.github/workflows/develocity-publish-build-scans.yml
@@ -12,7 +12,7 @@ defaults:
 jobs:
   publish-build-scans:
     if: github.repository == 'quarkusio/quarkus' && github.event.workflow_run.event == 'pull_request' && github.event.workflow_run.conclusion != 'cancelled'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     permissions:
       actions: write
       pull-requests: write
diff --git a/.github/workflows/doc-build.yml b/.github/workflows/doc-build.yml
index 137e9b99695e7..addd3bd939f21 100644
--- a/.github/workflows/doc-build.yml
+++ b/.github/workflows/doc-build.yml
@@ -41,14 +41,14 @@ concurrency:
 jobs:
   ci-sanity-check:
     name: "CI Sanity Check"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Build
         run: sleep 30
   build-doc:
     name: "Documentation Build"
     timeout-minutes: 60
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     # Skip main in forks
     if: "github.repository == 'quarkusio/quarkus' || !endsWith(github.ref, '/main')"
     steps:
diff --git a/.github/workflows/epicissues.yml b/.github/workflows/epicissues.yml
index 4db00454aa164..7fdd83d349688 100644
--- a/.github/workflows/epicissues.yml
+++ b/.github/workflows/epicissues.yml
@@ -10,7 +10,7 @@ concurrency:
 jobs:
   autolabel:
     if: github.repository == 'quarkusio/quarkus'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: auto label
     steps:
 #      - name: Debug Action
diff --git a/.github/workflows/jakarta-rewrite.yml.disabled b/.github/workflows/jakarta-rewrite.yml.disabled
index 7f946fe358357..1b01f8ff1221a 100644
--- a/.github/workflows/jakarta-rewrite.yml.disabled
+++ b/.github/workflows/jakarta-rewrite.yml.disabled
@@ -7,7 +7,7 @@ on:
     - cron: '0 22 * * 1-6'
 jobs:
   rewrite:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: Rewrite to Jakarta
     if: github.repository == 'quarkusio/quarkus' || github.event_name == 'workflow_dispatch'
     env:
diff --git a/.github/workflows/jdk-early-access-build.yml b/.github/workflows/jdk-early-access-build.yml
index a00ab3707d3f2..6995df5c7b924 100644
--- a/.github/workflows/jdk-early-access-build.yml
+++ b/.github/workflows/jdk-early-access-build.yml
@@ -28,7 +28,7 @@ env:
 jobs:
   linux-jvm-test:
     name: JVM Tests - Early Access JDK ${{ matrix.version }} Build - ${{ matrix.dist }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     strategy:
       fail-fast: false
       # This is complex because we want to use a different matrix when using workflow_dispatch.
diff --git a/.github/workflows/native-it-selected-graalvm.yml b/.github/workflows/native-it-selected-graalvm.yml
index 38d77b3354ea9..568c89679bca3 100644
--- a/.github/workflows/native-it-selected-graalvm.yml
+++ b/.github/workflows/native-it-selected-graalvm.yml
@@ -48,7 +48,7 @@ defaults:
 jobs:
   build-jdk17:
     name: "Initial JDK 17 Build - ${{ inputs.BRANCH }}"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     outputs:
       gib_args: ${{ steps.get-gib-args.outputs.gib_args }}
       gib_impacted: ${{ steps.get-gib-impacted.outputs.impacted_modules }}
@@ -186,7 +186,7 @@ jobs:
 
   calculate-test-jobs:
     name: Calculate Test Jobs
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     needs: build-jdk17
     env:
       GIB_IMPACTED_MODULES: ${{ needs.build-jdk17.outputs.gib_impacted }}
@@ -402,7 +402,7 @@ jobs:
           retention-days: 7
 
   build-report:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: Build report - ${{inputs.NATIVE_COMPILER}} ${{inputs.NATIVE_COMPILER_VERSION}} - ${{inputs.BRANCH}}
     needs: [build-jdk17,native-tests,virtual-thread-native-tests]
     if: always()
diff --git a/.github/workflows/owasp-check.yml b/.github/workflows/owasp-check.yml
index deaf8f8c4fa50..f872f2a60add0 100644
--- a/.github/workflows/owasp-check.yml
+++ b/.github/workflows/owasp-check.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   owasp:
     name: OWASP Dependency Check Report
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: github.repository == 'quarkusio/quarkus'
 
     strategy:
diff --git a/.github/workflows/podman-build.yml b/.github/workflows/podman-build.yml
index 8460ae9443afb..22df0d9f9e01e 100644
--- a/.github/workflows/podman-build.yml
+++ b/.github/workflows/podman-build.yml
@@ -20,7 +20,7 @@ env:
 jobs:
   build-all-the-things:
     name: "JDK 17 Build"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     env:
       MAVEN_OPTS: "-Xmx2g -XX:MaxMetaspaceSize=1g"
     # Skip main in forks
diff --git a/.github/workflows/preview-teardown.yml b/.github/workflows/preview-teardown.yml
index 4b36ebfc30b89..bd8f2e3cb71a5 100644
--- a/.github/workflows/preview-teardown.yml
+++ b/.github/workflows/preview-teardown.yml
@@ -9,7 +9,7 @@ on:
 
 jobs:
   preview-teardown:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Teardown surge preview
         id: deploy
diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml
index 4272c55f44f1c..c66ba4a15a769 100644
--- a/.github/workflows/preview.yml
+++ b/.github/workflows/preview.yml
@@ -12,7 +12,7 @@ defaults:
 
 jobs:
   preview:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     permissions:
       actions: read
       issues: write
diff --git a/.github/workflows/publish-3.0.yml.disabled b/.github/workflows/publish-3.0.yml.disabled
index 4562aeb98aeea..0c7cb344ecbff 100644
--- a/.github/workflows/publish-3.0.yml.disabled
+++ b/.github/workflows/publish-3.0.yml.disabled
@@ -8,7 +8,7 @@ on:
         required: true
 jobs:
   rewrite:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     name: Rewrite to Jakarta
     env:
       MAVEN_OPTS: -Xmx3g -XX:MaxMetaspaceSize=1g
diff --git a/.github/workflows/quarkus-github-bot-lint.yml b/.github/workflows/quarkus-github-bot-lint.yml
index 7a01f94ebce98..9fe356ca022ee 100644
--- a/.github/workflows/quarkus-github-bot-lint.yml
+++ b/.github/workflows/quarkus-github-bot-lint.yml
@@ -11,7 +11,7 @@ on:
 jobs:
   lint:
     name: "quarkus-github-bot.yml validation"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
       - name: install yamllint
diff --git a/.github/workflows/release-build.yml b/.github/workflows/release-build.yml
index c7ebbe6f2f743..9efcdbb1af20c 100644
--- a/.github/workflows/release-build.yml
+++ b/.github/workflows/release-build.yml
@@ -8,7 +8,7 @@ env:
 jobs:
   build:
     name: "Prepare release"
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     if: github.repository == 'quarkusio/quarkus'
     env:
       MAVEN_OPTS: -Xmx2560m
diff --git a/.github/workflows/sonarcloud.yml b/.github/workflows/sonarcloud.yml
index 68d328b6fbc96..4fa167d446cea 100644
--- a/.github/workflows/sonarcloud.yml
+++ b/.github/workflows/sonarcloud.yml
@@ -6,7 +6,7 @@ on:
 jobs:
   build:
     name: Build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/vale.yml b/.github/workflows/vale.yml
index 1aab0e904723a..0204f4c7dc84e 100644
--- a/.github/workflows/vale.yml
+++ b/.github/workflows/vale.yml
@@ -13,7 +13,7 @@ concurrency:
 jobs:
   vale:
     name: Linting with Vale
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     permissions:
       actions: read
       checks: read