use os.tmpdir with fallback to `tmp/`