Configure benchmark boxes to try and reduce noise

.github/workflows/bench-pr.yml

@@ -54,6 +54,8 @@ jobs:
       - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
+      - name: Setup benchmark environment
+        run: sudo bash scripts/setup-benchmark.sh
       - uses: ./.github/actions/setup-rust
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/bench.yml

@@ -56,6 +56,8 @@ jobs:
         with:
           sccache: s3
       - uses: actions/checkout@v6
+      - name: Setup benchmark environment
+        run: sudo bash scripts/setup-benchmark.sh
       - uses: ./.github/actions/setup-rust
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/ci.yml

@@ -686,6 +686,8 @@ jobs:
         with:
           sccache: s3
       - uses: actions/checkout@v6
+      - name: Setup benchmark environment
+        run: sudo bash scripts/setup-benchmark.sh
       - uses: ./.github/actions/setup-rust
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/sql-benchmarks.yml

@@ -115,6 +115,8 @@ jobs:
 
       - uses: actions/checkout@v6
         if: inputs.mode != 'pr'
+      - name: Setup benchmark environment
+        run: sudo bash scripts/setup-benchmark.sh
       - uses: ./.github/actions/setup-rust
         with:
           repo-token: ${{ secrets.GITHUB_TOKEN }}

scripts/setup-benchmark.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-FileCopyrightText: Copyright the Vortex contributors
+
+set -Eeu -o pipefail -x
+
+if [ "$EUID" -ne 0 ]; then
+    echo "Environment setup script for benchmarks should run as root."
+    exit 0
+fi
+
+# Really discourage swapping to disk
+sysctl vm.swappiness=0
+
+# Disable ASLR - https://docs.kernel.org/admin-guide/sysctl/kernel.html#randomize-va-space
+sysctl kernel.randomize_va_space=0
+
+# Reduce kernel logging to minimum
+dmesg -n 1
+
+# Disable some unused services and features
+systemctl stop apparmor ModemManager
+systemctl disable apparmor ModemManager
+
+# mask prevents them from being started by other services
+systemctl mask ModemManager
+
+# For apparmor specifically, also teardown loaded profiles
+aa-teardown