stage('Integration Tests') {
    options {
        lock('ci-instrument')
    }
    stages {
        stage('Setup') {
            agent {
                label 'ci-instrument'
            }
            steps {
                sh '<setup steps>'
            }
        stage('Run Tests') {
            agent {
                dockerfile {

                }
            }
            steps {
               sh 'NOT running on "ci-instrument", but it still needs to be locked"
            }
        }
        stage('Copy results') {
         ....
        }
    }
}