diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
index 8f292fc..c0caf39 100644
--- a/.github/workflows/bench.yml
+++ b/.github/workflows/bench.yml
@@ -19,7 +19,7 @@ env:
 jobs:
   benchmark:
     name: Performance regression check
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     steps:
       - uses: actions/checkout@v4
 
diff --git a/.github/workflows/changelog-policy.yml b/.github/workflows/changelog-policy.yml
index eb94887..91af51e 100644
--- a/.github/workflows/changelog-policy.yml
+++ b/.github/workflows/changelog-policy.yml
@@ -19,7 +19,7 @@ permissions:
 jobs:
   advisory:
     name: Advisory changelog check
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ea621e8..6afaf6e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,7 +18,7 @@ env:
 jobs:
   changes:
     name: Detect CI scope
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     outputs:
       code: ${{ steps.scope.outputs.code }}
     steps:
@@ -84,7 +84,7 @@ jobs:
 
   audit:
     name: Supply-chain audit
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     steps:
       - uses: actions/checkout@v4
         with:
@@ -147,7 +147,7 @@ jobs:
 
   build:
     name: Build release cdylib (linux)
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     needs: changes
     if: github.event_name != 'pull_request' || needs.changes.outputs.code == 'true'
     steps:
@@ -189,7 +189,7 @@ jobs:
     if: github.event_name != 'pull_request' || needs.changes.outputs.code == 'true'
     strategy:
       matrix:
-        os: [ubuntu-latest, macos-14]
+        os: [ubicloud-standard-2, macos-14]
     steps:
       - uses: actions/checkout@v4
         with:
@@ -218,11 +218,11 @@ jobs:
         run: cargo test --release --no-default-features
 
       - name: Test debug scalar-only
-        if: matrix.os == 'ubuntu-latest'
+        if: matrix.os == 'ubicloud-standard-2'
         run: cargo test --no-default-features
 
       - name: Test with test-panic feature
-        if: matrix.os == 'ubuntu-latest'
+        if: matrix.os == 'ubicloud-standard-2'
         run: cargo test --features test-panic --release
 
       - name: Install LuaJIT for package validation
@@ -251,7 +251,7 @@ jobs:
 
   lua-lint:
     name: Lua lint
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     needs: changes
     if: github.event_name != 'pull_request' || needs.changes.outputs.code == 'true'
     steps:
@@ -271,7 +271,7 @@ jobs:
 
   fuzz:
     name: Fuzz corpus replay
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     needs: changes
     if: github.event_name != 'pull_request' || needs.changes.outputs.code == 'true'
     steps:
@@ -310,7 +310,7 @@ jobs:
 
   sanitizers:
     name: Sanitizers (Rust nightly)
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     needs: changes
     if: github.event_name != 'pull_request' || needs.changes.outputs.code == 'true'
     steps:
@@ -367,7 +367,7 @@ jobs:
 
   lua:
     name: Lua integration tests (${{ matrix.runtime.name }})
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     needs: build
     strategy:
       fail-fast: false
@@ -431,7 +431,7 @@ jobs:
 
   lua-valgrind:
     name: Lua valgrind memcheck (upstream LuaJIT)
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     needs: build
     timeout-minutes: 10
     steps:
@@ -494,7 +494,7 @@ jobs:
 
   openresty:
     name: OpenResty runtime (${{ matrix.openresty.version }})
-    runs-on: ubuntu-22.04
+    runs-on: ubicloud-standard-2-ubuntu-2204
     needs: build
     permissions:
       contents: read
diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml
index 5231387..c80538f 100644
--- a/.github/workflows/fuzz.yml
+++ b/.github/workflows/fuzz.yml
@@ -22,7 +22,7 @@ env:
 jobs:
   fuzz:
     name: Timed fuzzing
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     steps:
       - uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/lua-lazy-mutation-property.yml b/.github/workflows/lua-lazy-mutation-property.yml
index 3ce9660..ffcf713 100644
--- a/.github/workflows/lua-lazy-mutation-property.yml
+++ b/.github/workflows/lua-lazy-mutation-property.yml
@@ -21,7 +21,7 @@ env:
 jobs:
   lua-mutation-property:
     name: Lazy mutation property suite
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     permissions:
       contents: read
     steps:
diff --git a/.github/workflows/lua-valgrind-full.yml b/.github/workflows/lua-valgrind-full.yml
index 69a5098..be3e98f 100644
--- a/.github/workflows/lua-valgrind-full.yml
+++ b/.github/workflows/lua-valgrind-full.yml
@@ -15,7 +15,7 @@ env:
 jobs:
   lua-valgrind-full:
     name: Full Lua valgrind memcheck
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     timeout-minutes: 120
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a26d7b3..99b5b0f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,7 +18,7 @@ permissions:
 jobs:
   release:
     name: Release
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
diff --git a/.github/workflows/supply-chain-audit.yml b/.github/workflows/supply-chain-audit.yml
index fa93f9d..339bb0c 100644
--- a/.github/workflows/supply-chain-audit.yml
+++ b/.github/workflows/supply-chain-audit.yml
@@ -15,7 +15,7 @@ concurrency:
 jobs:
   audit:
     name: Supply-chain audit
-    runs-on: ubuntu-latest
+    runs-on: ubicloud-standard-2
     steps:
       - uses: actions/checkout@v4