diff --git a/Vagrantfile b/Vagrantfile
index 2d41f34bf044806e456e785051d637a771dd5525..881fafcf1f0d621c11b971c543445aa220b7689c 100644
--- a/Vagrantfile
+++ b/Vagrantfile
@@ -185,6 +185,7 @@ Vagrant.configure("2") do |config|
         "download_localhost": "False",
         "local_path_provisioner_enabled": "#{$local_path_provisioner_enabled}",
         "local_path_provisioner_claim_root": "#{$local_path_provisioner_claim_root}"
+        "ansible_ssh_user": SUPPORTED_OS[$os][:user]
       }
 
       # Only execute the Ansible provisioner once, when all the machines are up and ready.
diff --git a/roles/download/tasks/sync_container.yml b/roles/download/tasks/sync_container.yml
index 2801a6f5d4dab9e870ffb06c65c62abc43e68a3e..4af3bdcb6d54661068dd055f3f6fd2c29930a240 100644
--- a/roles/download/tasks/sync_container.yml
+++ b/roles/download/tasks/sync_container.yml
@@ -70,12 +70,30 @@
     - (ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"] or download_delegate == "localhost")
     - (container_changed or not img.stat.exists)
 
+- name: container_download | create container images directory on ansible host
+  file:
+    state: directory
+    path: "{{ fname | dirname }}"
+  delegate_to: localhost
+  delegate_facts: no
+  run_once: true
+  become: false
+  when:
+    - download.enabled
+    - download.container
+    - download_run_once
+    - ansible_os_family not in ["CoreOS", "Container Linux by CoreOS"]
+    - inventory_hostname == download_delegate
+    - download_delegate != "localhost"
+    - saved.changed
+
 - name: container_download | copy container images to ansible host
   synchronize:
     src: "{{ fname }}"
     dest: "{{ fname }}"
     use_ssh_args: "{{ has_bastion | default(false) }}"
     mode: pull
+    private_key: "{{ ansible_ssh_private_key_file }}"
   delegate_to: localhost
   delegate_facts: no
   run_once: true