strace
cannot handle ptrace correctly
shournal: https://github.com/tycho-kirchner/shournal
hard to use, and failed to trace file read
tracefile: https://gitlab.com/ole.tange/tangetools/-/blob/master/tracefile/tracefile
usable, but cannot trace child process
we need to trace child process only