In some distributions, the /tmp directory is private for nginx.

[jim3ma]

Hi @songchenwen,
Currently, the webroot uses /tmp directory to write challenge, but in some distributions, like CentOS 7, the nginx uses private /tmp (in nginx.service systemd unit file).
I think we need change challenge directory to /var.