Most Linux systems uses systemd as init and service manager nowadays. You can use systemd to start your services, so that they are automatically restarted if they crash, and automatically started when the system boots. You can even do this as a regular user, without root access (then the service will run with permissions of your user), and have it automatically started when the system boots without you having to login.

You can publish a Java or Kotlin library built with Gradle on Maven Central like this. First setup your Gradle build to produce a valid bundle for Maven Central. Include the Maven Publish Plugin in your build. Setup building of Javadoc and Source archives using Dokka. Set the required POM metadata in Gradle like this. See here for a complete working example. Now you can run gradle publish to create the Maven bundle in the mavenPublish directory (which you probably want to include in .

AppArmor is a good way to sandbox programs on a Linux system, but it has some limitations. In particular, it requires you to define a static profile for each program, and changing profiles requires root access. This can be impractical for ad-hoc usages, and in particular if you want to give the program access to a particular directory (such as the current directory). These gaps can be filled with bubblewrap.