ℹ️ Overview :
- Real native Linux containers on Android with 0 virtualization overhead
- Boot time 150ms to 750ms with full systemd as PID 1, nothing else on Android comes close
- Run systemd, OpenRC, runit, s6, SysVinit, whatever init system you want, natively
- Truly unkillable. Survives 25+ days, immune to Android's battery killers and LMK
- Zero data loss even after app uninstallation, containers and daemons keep running, your data lives in /data/local/Droidspaces, independent of everything
- Starts before any user app, even before you unlock your phone while its encrypted, via native init.rc/service.d integration
- Run Docker, LXC, Podman inside Droidspaces, nested containers work natively on ALL kernels
- Real hardware access out of the box, full udev/systemd-udevd support like a real Linux PC
- Out of the box Qualcomm Turnip/Virgl GPU acceleration and Termux:X11 support, single toggle
- Arch, Alpine, Fedora, Ubuntu, Debian, OpenWRT, you name it, Droidspaces runs it
- Full namespace isolation: PID, MNT, IPC, UTS, Cgroup, completely separate from Android
- NAT/Host/None networking with port forwarding, TCP and UDP, works out of the box, no manual bridge setup
- Volatile/ephemeral containers via OverlayFS, all changes in RAM, gone on exit
- Portable rootfs.img support with loop mount, fsck, and SELinux hardening
- 0 dependencies. The entire runtime is a single ~400KB static musl binary
- Works on kernels as old as 3.10, supports aarch64, armhf, x86_64, x86 and riscv64
- Beautiful Android app to manage unlimited containers with full GUI control
- Custom bind mounts, multi-DNS, per-container cgroup hierarchies, and dozens more features

- app: implement rootfs repository browser and download manager for rootfs tarballs with custom repository support
- mount: add :ro flag support for read-only bind mounts
- post_extract_fixes: restrict dhcpcd to NAT mode and whitelist eth interfaces to prevent Android network interference
- fix: prevent Linux /dev breakage by restricting device pruning to Android environments 
- fix: add hostname sanitization and validation for container configuration menu
- fix: cancel terminal session notification upon service termination or empty session state
- seccomp: truly skip all filters when noseccomp is active 
- Android: fix icon cache poisoning and stale state after container poweroff
- fix: log: persist container logging across pivot_root isolation 
- build: fix all hardened-debug compiler warnings
- daemon: add mid-run log rotation for droidspacesd.log
- ds_dhcp: fix cross-container DHCP leaks with ifindex and direction filtering 
- mount: unify masking as self-bind+RO, drop unused shared mask-dir tmpfs
- fix: declare BootReceiver to satisfy RECEIVE_BOOT_COMPLETED permission
- build: reduce R8 obfuscation to lower AV heuristic score
- post_extract_fixes: generate and set machine-id to prevent systemd deadlocks on Fedora 44
- post_extract_fixes: remove problematic iptables service files 
- seccomp: drop mknod/mknodat device blocking