diff --git a/global/overlay/etc/puppet/manifests/cosmos-site.pp b/global/overlay/etc/puppet/manifests/cosmos-site.pp
index 12f4df24..61a714ba 100644
--- a/global/overlay/etc/puppet/manifests/cosmos-site.pp
+++ b/global/overlay/etc/puppet/manifests/cosmos-site.pp
@@ -913,6 +913,28 @@ class nrpe {
   sunet::nagios::nrpe_command {'check_needrestart':
       command_line => "sudo /usr/sbin/needrestart -p -l"
   }
+  exec { "create_${name}_service_dir":
+    command => '/bin/mkdir -p /etc/systemd/system/nagios-nrpe-server.service.d/',
+    unless  => '/usr/bin/test -d /etc/systemd/system/nagios-nrpe-server.service.d/',
+  }
+  exec { "${name}_daemon_reload":
+    command     => 'systemctl daemon-reload',
+    refreshonly => true,
+  }
+
+  $str = "# Some NRPE checks will get fishy results when using a PrivateTmp.
+# E.g check_apt: https://askubuntu.com/questions/1415415/check-apt-issue-with-nagios
+[Service]
+PrivateTmp=false"
+
+  file {
+    '/etc/systemd/system/nagios-nrpe-server.service.d/privatetmp.conf':
+      ensure  => file,
+      mode    => '0444',
+      content => $str,
+      require => [Exec["create_${name}_service_dir"], Package[$nrpe_service]],
+      notify  =>  [Exec["${name}_daemon_reload"],Service[$nrpe_service]],
+  }
 }
 
 class redis_cluster_node {