- Added "Mask service" option to all 4 stages (Running, Enabled, Disabled, Abnormal) in the Systemd Services menu
- Removed the redundant "Running, Enabled, Disabled..." color legend bar from the top of the Systemd screen

- Implement and integrate cgroup attachment to ensure processes entering containers are correctly placed in the host's cgroup hierarchy for D-Bus/logind functionality and refine container-specific cgroup path creation

- Completely re-wrote the sparse image installer and hardened the image integrity verifying process before mounting the created rootfs.img

undefined
Changelog
- fix container restart bug: implement restart marker and early mount detection
- fix: sync and sleep 200ms after repairing the rootfs image AND before mounting the image

Changelog
- Improve rootfs mount and unmount resilience on older kernels like Kernel 4.14 by adding retry logic for image mounting and extra sync calls during unmounting