Reading thoroughly quick installation documentation, it says "It is recommended to use a separate partition for container's private directories (by default /vz/private/<veid>)". As much as I searched the net, I have not found anything about it.

implementation. Now things had changed. I have received directives in my job to have each container in separated filesystems insulated from the rest of containers.