Add tracebox and advanced profiling support to Perfetto workflow

Enable heap profiling, CPU profiling, and system-wide tracing via
Perfetto's tracebox tool for comprehensive performance analysis.

Changes:

- Install tracebox binary in CI Docker image from get.perfetto.dev for
  system-wide profiling capabilities

- Add workflow_dispatch inputs for perfetto-heap-profile and
  perfetto-cpu-profile to control profiling modes (CPU profiling
  enabled by default, heap profiling opt-in)

- Add SYS_PTRACE capability and disable seccomp in container options
  to enable perf_event access required for CPU profiling

- Configure perf_event_paranoid=-1 at runtime when CPU profiling is
  enabled to allow non-root access to performance counters

- Update Perfetto profiling step to conditionally wrap ctest execution
  with tracebox when heap or CPU profiling is enabled, passing
  appropriate flags (--heapprofd for heap, --cpu-freq/--cpu-idle/
  --cpu-sched for CPU)

- Fall back to SDK-only tracing when no system profiling is requested

Users can now enable heap profiling and CPU counter profiling via
workflow_dispatch inputs to capture detailed memory allocation patterns
and CPU performance metrics alongside application traces.

Author: greenc-FNAL

.github/workflows/cmake-build.yaml

@@ -26,6 +26,16 @@ on:
           Default (if empty): Run `gcc/none`
         required: false
         default: ''
+      perfetto-heap-profile:
+        description: "Enable heap profiling for Perfetto runs"
+        required: false
+        type: boolean
+        default: false
+      perfetto-cpu-profile:
+        description: "Enable CPU profiling for Perfetto runs"
+        required: false
+        type: boolean
+        default: true
   workflow_call:
     inputs:
       checkout-path:
@@ -193,6 +203,7 @@ jobs:
 
     container:
       image: ghcr.io/framework-r-d/phlex-ci:latest
+      options: --cap-add=SYS_PTRACE --security-opt seccomp=unconfined
 
     steps:
     - name: Check out code
@@ -270,17 +281,45 @@ jobs:
 
     - name: Run Perfetto profiling
       if: matrix.sanitizer == 'perfetto'
+      env:
+        PERFETTO_HEAP_PROFILE: ${{ github.event.inputs.perfetto-heap-profile || 'false' }}
+        PERFETTO_CPU_PROFILE: ${{ github.event.inputs.perfetto-cpu-profile || 'true' }}
       run: |
         . /entrypoint.sh
         cd "$GITHUB_WORKSPACE/${{ env.local_build_path }}"
 
         echo "➡️ Running tests with Perfetto profiling..."
-        echo "::group::Running ctest with Perfetto"
-        if ctest --progress --output-on-failure -j "$(nproc)"; then
-          echo "::endgroup::"
+        
+        # Set perf_event_paranoid for CPU profiling
+        if [ "$PERFETTO_CPU_PROFILE" = "true" ]; then
+          echo "Configuring perf_event_paranoid for CPU profiling"
+          echo -1 | tee /proc/sys/kernel/perf_event_paranoid 2>/dev/null || echo "Warning: Could not set perf_event_paranoid"
+        fi
+        
+        # Configure profiling based on environment
+        TRACEBOX_ARGS=""
+        if [ "$PERFETTO_HEAP_PROFILE" = "true" ]; then
+          echo "Enabling heap profiling"
+          TRACEBOX_ARGS="$TRACEBOX_ARGS --app '*' --heapprofd"
+        fi
+        if [ "$PERFETTO_CPU_PROFILE" = "true" ]; then
+          echo "Enabling CPU profiling"
+          TRACEBOX_ARGS="$TRACEBOX_ARGS --cpu-freq --cpu-idle --cpu-sched"
+        fi
+        
+        # Run tests with or without tracebox wrapper
+        if [ -n "$TRACEBOX_ARGS" ]; then
+          echo "::group::Running ctest with tracebox"
+          tracebox $TRACEBOX_ARGS -o perfetto-trace.pftrace -- ctest --progress --output-on-failure -j "$(nproc)" || TEST_RESULT=$?
+        else
+          echo "::group::Running ctest with Perfetto SDK tracing"
+          ctest --progress --output-on-failure -j "$(nproc)" || TEST_RESULT=$?
+        fi
+        
+        echo "::endgroup::"
+        if [ "${TEST_RESULT:-0}" -eq 0 ]; then
           echo "✅ Perfetto profiling completed."
         else
-          echo "::endgroup::"
           echo "::error:: Perfetto profiling failed."
           exit 1
         fi

ci/Dockerfile

@@ -286,7 +286,7 @@ CLEAN_TEMP_FILES
 RUN <<'INSTALL_PERFETTO'
 set -euo pipefail
 
-# Install Perfetto SDK
+# Install Perfetto SDK and tools
 apt-get update
 apt-get install -y --no-install-recommends \
   wget
@@ -298,6 +298,11 @@ cd /opt/perfetto
 wget -O perfetto.h https://raw.githubusercontent.com/google/perfetto/main/sdk/perfetto.h
 wget -O perfetto.cc https://raw.githubusercontent.com/google/perfetto/main/sdk/perfetto.cc
 chmod 644 perfetto.h perfetto.cc
+
+# Install tracebox for system-wide profiling
+wget -O tracebox https://get.perfetto.dev/tracebox
+chmod +x tracebox
+mv tracebox /usr/local/bin/
 INSTALL_PERFETTO
 
 ########################################################################