Well,

If you really wanted to run a container without root,

You can get help from the upcoming run-at-boot feature baked into the init.

Then,

You can ssh into the container IP if it's NAT or localhost:22 to get a container shell.

This is the secure way of accessing the container without root.

For clarification, Droidspaces supports two daemon modes:

1. Run the daemon via Magisk/Apatch/KernelSU modules' native post-fs-data.sh. By enabling the toggle in the app, you activate the logic in the post-fs-data.sh of the Droidspaces Magisk module to run the daemon on boot.

For 99% of users, this solves all issues with Magisk and Apatch. No modifications to your vendor.img are needed.

2. Run the daemon via Android's native init.rc:

- This mode is the most privileged and completely independent of Magisk/Apatch/KernelSU. It even works without any root solutions.
- The daemon is unkillable. If something kills it, init will automatically respawn it.
- Run-at-boot containers are unkillable as well. If droidspacesd gets killed, once init restarts it, run-at-boot will also restart all killed containers.

I don't think Android will ever kill the daemon, but even if it does, all edge cases are covered—thanks to my overthinking 🗿

Notes: If the native init daemon is enabled, the app's toggle will be automatically enabled. The post-fs-data.sh script will auto-detect if the native init.rc daemon is running, so no collisions will happen if it is.

Everything is backward compatible. You don't even need to worry about daemons if everything is already working for you 🗿

Nothing bad will happen; the binary still supports running everything natively, with or without a daemon 🗣

There are three different logics baked into the same binary:

- Daemon
- Client for the daemon
- Native execution if no daemon is running

In the latest CI build, we are moving from the magisk SELinux domain in Magisk/Apatch to our own droidspacesd domain to maintain compatibility with daemon mode in post-fs-data.sh

That means even if the binary is run under Magisk’s SELinux domain, we re-execute ourselves to run under our own SELinux domain, completely bypassing magisk domain restrictions.

We also have over ~200 lines of custom SELinux rules, specifically written for magiskpolicy, which we inject via post-fs-data.sh :)

https://github.com/ravindu644/Droidspaces-OSS/blob/main/Android/app/src/main/assets/boot-module/etc/droidspaces.te

TL;DR: we have our own permissive SELinux domain, completely independent from Magisk/APatch/KernelSU domains, giving us more freedom.

Also, all processes spawn under our droidspacesd domain. Even systemd inherits our permissive domain, meaning no denials can occur.

TL;DR: you can use Droidspaces in SELinux enforcing mode with 0 issues when using the boot-module daemon mode. No need to wire up an init.rc service.

This is the build:
https://github.com/ravindu644/Droidspaces-OSS/actions/runs/23706897589/artifacts/6165166335

According to my testing across 3 phones, everything seems normal for me.

But I suggest you guys test it and report if there are any issues. Especially, I recommend testers to drop a bug report even if there are no issues present, so I can cover all the edge cases.

Here's how:

1. Install
2. Enable daemon mode from settings
3. Reboot the device
4. Generate the bug report and drop it in the chat.

Get the latest updates as soon as they’re pushed to my GitHub!

@DroidspacesCI

Easy Termux-X11 with Droidspaces!

Requirements:

Container: sudo apt install mesa-utils
Termux: pkg install x11-repo && pkg install termux-x11

Steps:

01. Open Droidspaces, go to the container configuration menu, enable Termux-X11, and set the DISPLAY=:0 environment variable, then save the configuration.

02. Start the container.

03. Open the Termux app and type termux-x11 :0.

Now, any tool that requires a GUI can communicate with Termux-X11 for rendering, and the output will be displayed in the Termux-X11 app :)

Notes: :0 is the display number.

@Droidspaces

cooking a tarball builder, specifically optimized for android :)

Documentation update:

Added native init.rc integration for Developers: https://github.com/ravindu644/Droidspaces-OSS/tree/main/init

Added 3 ways of using GPU Acceleration in Android, as well as documented about GPU Acceleration in Linux:

https://github.com/ravindu644/Droidspaces-OSS/blob/main/Documentation/GPU-Acceleration.md

I'm taking a temporary break from all my development work.

I'll release v5.9.0 today.

You won't hear from me on Telegram anymore. Any project-related questions should be directed to the admins in the discussion group.

I'll be back in a few months.

Droidspaces v5.9.0 has been released..! 🥳

In this release,

we introduced a daemon, that supports two daemon modes: Native init.rc (lowest-level integration with auto-spawn/unkillable persistence) and Userspace Daemon (app-togglable, starts via post-fs-data.sh, no image modification required). Both modes bypass root-domain seccomp blocks to ensure stable container lifecycles.

Thanks to daemon mode, Magisk/APatch users can now use DroidSpaces without any issues!

Also fixed a lot of issues related to the Android app, including the built-in terminal, container configuration menu, etc.

Full changelog and release: https://github.com/ravindu644/Droidspaces-OSS/releases/tag/v5.9.0

Note: I'm actually taking a break from this. I'm planning to wipe out my entire development rig tonight. The app is stable now. Will continue cooking after some time. Peace.. :)

https://github.com/ravindu644/Droidspaces-OSS/discussions/27

@Droidspaces x @ravindu ❤️