fix(various): strip debuginfo on release [backport 2.0] (#7321)

Backport e4f5744 from #7258 to 2.0.

We originally added this in #6517, but then I idiotically removed it
during a merge conflict in a followup PR. Without this fix, our release
size has swollen to ~40M. Accordingly, also backporting.

## Checklist

- [X] Change(s) are motivated and described in the PR description.
- [X] Testing strategy is described if automated tests are not included
in the PR.
- [X] Risk is outlined (performance impact, potential for breakage,
maintainability, etc).
- [X] Change is maintainable (easy to change, telemetry, documentation).
- [X] [Library release note
guidelines](https://ddtrace.readthedocs.io/en/stable/releasenotes.html)
are followed. If no release note is required, add label
`changelog/no-changelog`.
- [X] Documentation is included (in-code, generated user docs, [public
corp docs](https://github.com/DataDog/documentation/)).
- [X] Backport labels are set (if
[applicable](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting))

## Reviewer Checklist

- [X] Title is accurate.
- [X] No unnecessary changes are introduced.
- [X] Description motivates each change.
- [X] Avoids breaking
[API](https://ddtrace.readthedocs.io/en/stable/versioning.html#interfaces)
changes unless absolutely necessary.
- [X] Testing strategy adequately addresses listed risk(s).
- [X] Change is maintainable (easy to change, telemetry, documentation).
- [X] Release note makes sense to a user of the library.
- [X] Reviewer has explicitly acknowledged and discussed the performance
implications of this PR as reported in the benchmarks PR comment.
- [X] Backport labels are set in a manner that is consistent with the
[release branch maintenance
policy](https://ddtrace.readthedocs.io/en/latest/contributing.html#backporting)
- [X] If this PR touches code that signs or publishes builds or
packages, or handles credentials of any kind, I've requested a review
from `@DataDog/security-design-and-guidance`.
- [X] This PR doesn't touch any of that.

Co-authored-by: David Sanchez <[email protected]>

Author: github-actions[bot]

setup.py

@@ -3,6 +3,7 @@
 import platform
 import re
 import shutil
+import subprocess
 import sys
 import tarfile
 
@@ -296,6 +297,10 @@ def run(self):
 
 
 class CMakeBuild(build_ext):
+    @staticmethod
+    def strip_symbols(so_file):
+        subprocess.check_output(["strip", "-g", so_file])
+
     def build_extension(self, ext):
         tmp_iast_file_path = os.path.abspath(self.get_ext_fullpath(ext.name))
         tmp_iast_path = os.path.join(os.path.dirname(tmp_iast_file_path))
@@ -367,6 +372,12 @@ def build_extension(self, ext):
                     shutil.copy(iast_artifact, tmp_iast_file_path)
         else:
             build_ext.build_extension(self, ext)
+            if CURRENT_OS == "Linux" and not DEBUG_COMPILE:
+                for ext in self.extensions:
+                    try:
+                        self.strip_symbols(self.get_ext_fullpath(ext.name))
+                    except Exception:
+                        pass
 
 
 long_description = """
@@ -482,7 +493,7 @@ def get_ddup_ext():
                         ],
                         include_dirs=LibDatadogDownload.get_include_dirs(),
                         extra_objects=LibDatadogDownload.get_extra_objects(),
-                        extra_compile_args=["-std=c++17"],
+                        extra_compile_args=["-std=c++17", "-flto"],
                         language="c++",
                     )
                 ],