- Added "Mask service" option to all 4 stages (Running, Enabled, Disabled, Abnormal) in the Systemd Services menu
- Removed the redundant "Running, Enabled, Disabled..." color legend bar from the top of the Systemd screen

- Implement and integrate cgroup attachment to ensure processes entering containers are correctly placed in the host's cgroup hierarchy for D-Bus/logind functionality and refine container-specific cgroup path creation

- Completely re-wrote the sparse image installer and hardened the image integrity verifying process before mounting the created rootfs.img

undefined
Changelog
- fix container restart bug: implement restart marker and early mount detection
- fix: sync and sleep 200ms after repairing the rootfs image AND before mounting the image

Changelog
- Improve rootfs mount and unmount resilience on older kernels like Kernel 4.14 by adding retry logic for image mounting and extra sync calls during unmounting

Added custom DNS servers support in the container configuration menu

terminal: upgrade terminal proxy from select to epoll for better performance
mount: harden unmount_rootfs_img with retries and settle time
android: refactor iptables configuration logic into a clean loop
core: harden PID validation and implement shared OS-release parsing
core: implement dynamic container list allocation and use shared OS-release parsing
network: implement multi-DNS support and update CLI options
fix: ensure host-side resource cleanup on container boot failure in rootfs.img mode

- Change the SELinux context of rootfs.img to `u:object_r:vold_data_file:s0` after formatting to avoid mounting errors in the sparse image installer
- Update the boot noscript to auto-detect all `.img` files under /data/local/Droidspaces/Containers and set their SELinux context to `u:object_r:vold_data_file:s0`

- If the host is Android and rootfs.img mode is used, set the SELinux context of rootfs.img to `u:object_r:vold_data_file:s0` before mounting to prevent mounting issues