Set up Trino Knox

With ODP v3.2.3.3-2, you need to manually create the required directories and add the service.xml and rewrite.xml files at the specified paths. The content for these files are available at the provided link.

/var/lib/knox/data-3.2.3.3-2/services/trinoui/365/rewrite.xml

An additional setup step involves importing the required certificates into the following truststores:

  1. Import the Knox certificate into JDK-23’s truststore on hostname mentioned in the above topology.

  2. Import the Trino coordinator’s certificate into Knox’s truststore on the Knox host.

keytool -import -alias trino-coordinator -file /tmp/trino-coordinator.crt -keystore /var/lib/knox/data-3.2.3.3-2/security/keystores/gateway.jks

  1. Import the Knox certificate to the default JDK-11 or JDK-8 truststore (cacerts).

keytool -importcert -alias knox -file knox.pem -keystore /usr/lib/jvm/java-11-openjdk-11.0.25.0.9-2.el8.x86_64/lib/security/cacerts -storepass changeit -noprompt

  1. Import the Trino coordinator's certificate into Knox's JDK 11 or JDK 8 truststore (cacerts) on the host running Knox.

keytool -importcert -alias trino-coordinator -file /tmp/trino-coordinator.crt -keystore /usr/lib/jvm/java-11-openjdk-11.0.25.0.9-2.el8.x86_64/lib/security/cacerts -storetype PKCS12 -storepass changeit -noprompt


  Last updated on May 7, 2025
Next to read:
Trino Supported Connectors
null
On This Page
Set up Trino Knox