If we untar the template cache while messing with usernames/groupnames/uids/gids, things can go very wrong. So better leave permissions alone as they are in tarball. Patch here: http://git.altlinux.org/people/mike/packages/?p=vzctl.git;a=commitdiff;h=f028f1cd6db1158bd22cce206557d9446252fe03
$ git grep numeric-owner scripts/vps-create.in: local TAR_OPT="--numeric-owner" Isn't it enough?
Ah, commit 58cdfb09cd70c37a14df14d34ad8b0c8e155c9f2 was quite post-4.0 (Oct 2009). Stumbled upon this with vzctl-3.0.18-alt1 -- as the backport is not very likely, let's invalidate this.