diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c8f4b5dcc67..a1b2ddbf51b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -349,7 +349,9 @@ jobs:
       - uses: dtolnay/rust-toolchain@nightly
         with:
           components: rust-src
-      - uses: taiki-e/install-action@cargo-careful
+      # FIXME: workaround https://github.com/RalfJung/cargo-careful/issues/36
+      # - uses: taiki-e/install-action@cargo-careful
+      - run: cargo install cargo-careful
       - run: python -m pip install --upgrade pip && pip install nox
       - run: nox -s test-rust -- careful skip-full
     env:
diff --git a/noxfile.py b/noxfile.py
index 0267531cb7d..7f012ce2fc5 100644
--- a/noxfile.py
+++ b/noxfile.py
@@ -869,6 +869,8 @@ def _run_cargo_test(
 ) -> None:
     command = ["cargo"]
     if "careful" in session.posargs:
+        # do explicit setup so failures in setup can be seen
+        _run_cargo(session, "careful", "setup")
         command.append("careful")
     command.extend(("test", "--no-fail-fast"))
     if "release" in session.posargs:
diff --git a/pytests/noxfile.py b/pytests/noxfile.py
index af2eb0d3a75..f5a332c7a3c 100644
--- a/pytests/noxfile.py
+++ b/pytests/noxfile.py
@@ -12,12 +12,15 @@ def test(session: nox.Session):
 
     def try_install_binary(package: str, constraint: str):
         try:
-            session.install(f"--only-binary={package}", f"{package}{constraint}")
+            session.install("--only-binary=:all:", f"{package}{constraint}")
         except CommandFailed:
             # No binary wheel available on this platform
             pass
 
     try_install_binary("numpy", ">=1.16")
+    # https://github.com/zopefoundation/zope.interface/issues/316
+    # - is a dependency of gevent
+    try_install_binary("zope.interface", "<7")
     try_install_binary("gevent", ">=22.10.2")
     ignored_paths = []
     if sys.version_info < (3, 10):