Use a static dir

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>

roles/base/tasks/sshcerts.yml

@@ -44,21 +44,24 @@
 
 # TODO: Get expired certificates, and add them to certs_to_sign
 
-- name: Create directory for storing pubkeys
+- set_fact:
-  command: "mktemp -d --suffix=sshkeysign"
+    pubkeydir: "/tmp/sshkeysign"
-  delegate_to: "batcave01.phx2.fedoraproject.org"
+  when: env == "staging"
-  run_once: true
-  register: pubkeydirout
-  when: env == "staging" and certs_to_sign != []
   tags:
   - sshd_config
   - config
   - sshd
   - base
 
-- set_fact:
+- name: Create directory for storing pubkeys
-    pubkeydir: "{{pubkeydirout.stdout}}"
+  file: path="{{pubkeydir}}"
-  when: env == "staging" and certs_to_sign != []
+        owner=root
+        group=root
+        mode=0600
+        state=directory
+  delegate_to: "batcave01.phx2.fedoraproject.org"
+  run_once: true
+  when: env == "staging"
   tags:
   - sshd_config
   - config