diff --git a/requirements.in b/requirements.in
index a6739d250..281d3d8f6 100644
--- a/requirements.in
+++ b/requirements.in
@@ -14,3 +14,4 @@ koji
 PyGObject
 reflink
 urllib3 < 2.0
+setuptools<=70.3.0
diff --git a/requirements.txt b/requirements.txt
index 00793827d..cbefbcee8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,7 +2,7 @@
 # This file is autogenerated by pip-compile with Python 3.8
 # by the following command:
 #
-#    pip-compile --output-file=requirements.txt requirements.in
+#    pip-compile --allow-unsafe --output-file=requirements.txt requirements.in
 #
 attrs==21.2.0
     # via jsonschema
@@ -196,4 +196,7 @@ zipp==3.16.2
     # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
-# setuptools
+setuptools==70.3.0
+    # via
+    #   -r requirements.in
+    #   opentelemetry-instrumentation