Set up Trino Knox

With ODP v3.2.3.3-2, you need to manually create the required directories and add the service.xml and rewrite.xml files at the specified paths. The content for these files are available at the provided link.

/var/lib/knox/data-3.2.3.3-2/services/trinoui/365/rewrite.xml

An additional setup step involves importing the required certificates into the following truststores:

1. Import the Knox certificate into JDK-23’s truststore on hostname mentioned in the above topology.
2. Import the Trino coordinator’s certificate into Knox’s truststore on the Knox host.

keytool -import -alias trino-coordinator  -file /tmp/trino-coordinator.crt -keystore /var/lib/knox/data-3.2.3.3-2/security/keystores/gateway.jks

3. Import the Knox certificate to the default JDK-11 or JDK-8 truststore (cacerts).

keytool -importcert   -alias knox   -file knox.pem   -keystore /usr/lib/jvm/java-11-openjdk-11.0.25.0.9-2.el8.x86_64/lib/security/cacerts -storepass changeit   -noprompt

4. Import the Trino coordinator's certificate into Knox's JDK 11 or JDK 8 truststore (cacerts) on the host running Knox.

keytool -importcert   -alias trino-coordinator   -file /tmp/trino-coordinator.crt   -keystore /usr/lib/jvm/java-11-openjdk-11.0.25.0.9-2.el8.x86_64/lib/security/cacerts   -storetype PKCS12   -storepass changeit   -noprompt