diff --git a/.ci/assets/ci_constraints.txt b/.ci/assets/ci_constraints.txt
index e3e22649cd9..c9198f19a70 100644
--- a/.ci/assets/ci_constraints.txt
+++ b/.ci/assets/ci_constraints.txt
@@ -15,3 +15,5 @@ azure-storage-blob!=12.28.*
 # Apparently does not work with current azurite.
 
 
+pycares<5
+# older aiodns versions don't pin pycares UB, and are broken by pycares>=5
diff --git a/.github/workflows/scripts/script.sh b/.github/workflows/scripts/script.sh
index f5cd920d35e..65ad9995e02 100755
--- a/.github/workflows/scripts/script.sh
+++ b/.github/workflows/scripts/script.sh
@@ -175,7 +175,7 @@ then
   pip install -r test_requirements.txt
   pytest -v tests -m "pulpcore or pulp_file or pulp_certguard"
 else
-  PULP_CA_BUNDLE="/usr/local/share/ca-certificates/pulp_webserver.crt" make livetest
+  PULP_CA_BUNDLE="/usr/local/share/ca-certificates/pulp_webserver.crt" make livetest PYTEST_MARK="live and (pulpcore or pulp_file or pulp_certguard)"
 fi
 popd