We just used an openvz environment in one of our deployments. My system administrator is using a combination of puppet and yum (using the hardware node as the main repository for the ovz containers) to facilitate updates and other simultaneous maintenance tasks.