Set up Trino Knox

You need to manually create the required directories and add the service.xml and rewrite.xml files at the specified paths. The content for these files are available at the provided link.

/var/lib/knox/data-3.2.3.6-2/services/trinoui/365/rewrite.xml

An additional setup step involves importing the required certificates into the following truststores:

  1. Import the Knox certificate into JDK-23’s truststore on the hostname mentioned in the above topology.

  2. Import the Trino coordinator’s certificate into Knox’s truststore on the Knox host.

keytool -import -alias trino-coordinator -file /tmp/trino-coordinator.crt -keystore /var/lib/knox/data-3.2.3.3-2/security/keystores/gateway.jks

  1. Import the Knox certificate to the default JDK-11 or JDK-8 truststore (cacerts).

keytool -importcert -alias knox -file knox.pem -keystore /usr/lib/jvm/java-11-openjdk-11.0.25.0.9-2.el8.x86_64/lib/security/cacerts -storepass changeit -noprompt

  1. Import the Trino coordinator's certificate into Knox's JDK 11 or JDK 8 truststore (cacerts) on the host running Knox.

keytool -importcert -alias trino-coordinator -file /tmp/trino-coordinator.crt -keystore /usr/lib/jvm/java-11-openjdk-11.0.25.0.9-2.el8.x86_64/lib/security/cacerts -storetype PKCS12 -storepass changeit -noprompt


  Last updated on Apr 29, 2026
Next to read:
Trino Supported Connectors
null
On This Page
Set up Trino Knox