From 2aeb91e62fc05be4bc85040de9d8f57cabd448c5 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Tue, 5 Dec 2017 01:44:16 +0000
Subject: [PATCH] Use a per-host keydir

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/basessh/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/basessh/tasks/main.yml b/roles/basessh/tasks/main.yml
index e394d95968..ed099a6f2d 100644
--- a/roles/basessh/tasks/main.yml
+++ b/roles/basessh/tasks/main.yml
@@ -122,7 +122,7 @@
 # TODO: Get expired certificates, and add them to certs_to_sign
 
 - set_fact:
-    pubkeydir: "/tmp/sshkeysign"
+    pubkeydir: "/tmp/sshkeysign/{{inventory_hostname}}"
   tags:
   - basessh
   - sshd_cert