use cross-platform tmpdir()