Availability and pricing

Cloud	Version	Software price	Last build
AWS Marketplace EC2 AMI · all commercial regions	484	$0.05/hr Recommended instance: m6i.xlarge · 5-day free trial	2026-10-25	Listing ↗
Azure Marketplace VM image · plan payg-gen2 · Gen2	483	$0.028/vCPU/hr Recommended VM: Standard_D4s_v3	2026-07-22	Listing ↗

Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.

Image facts

Base OS	Ubuntu 24.04 LTS
Hardening	CIS Level 1, Ubuntu 24.04 LTS (tailored)
License	Apache-2.0
Upstream	Trino Software Foundation
Machine-readable	product.json · catalog.json

What is Trino

Trino is a fast, distributed SQL query engine for federated analytics, maintained by the Trino Software Foundation (the upstream of the project formerly known as PrestoSQL). It runs as a single Java 25 JVM that acts as both coordinator and worker, so one node is a complete cluster. Trino speaks ANSI SQL with a cost-based optimizer and executes queries in parallel across pluggable connectors, letting you join data that lives in object storage, relational databases, data lakes and streams - all in a single query, without copying or ETL. The full distribution ships 40+ connectors (S3, PostgreSQL, MySQL, Iceberg, Delta Lake, Hive, Kafka, ClickHouse, and more). Trino is stateless: it stores no data of its own and queries external sources directly. This image bundles the tpch (benchmark) and memory connectors so you can validate it immediately. Apache-2.0 license, no vendor lock-in.

What the Lynxroute image adds

Security hardening:

Admin password generated uniquely at first boot, written to /root/trino-credentials.txt (mode 600)
File-based password authentication so CLI, JDBC and BI clients log in over TLS
TLS terminated at nginx on port 443; Trino's HTTP port (8080) is bound behind the firewall, never exposed
A unique internal cluster shared secret generated per instance at first boot
JVM heap and query memory limits auto-sized to the instance RAM (no OOM on first launch)
UFW firewall pre-configured (only ports 22 and 443 open)
CVE scan - every image is scanned for vulnerabilities before release

OS hardening (CIS Level 1):

CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown
auditd, fail2ban, AppArmor, SSH key-only, kernel hardening, IMDSv2 enforced

Compliance artifacts:

SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json
CIS Conformance Report at /etc/lynxroute/cis-report.html
CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md

Deploy

Launch in one command

Credentials are generated at first boot and written to /root/trino-credentials.txt.

AWS CLIAzure CLI

# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
  --image-id resolve:ssm:/aws/service/marketplace/prod-qyo7a5pu7qj2u/latest \
  --instance-type m6i.xlarge --key-name my-key --security-group-ids sg-xxxxxxxx

# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer trino --plan payg-gen2
az vm create -g my-rg -n trino --size Standard_D4s_v3 \
  --image lynxroute:trino:payg-gen2:latest --admin-username azureuser --generate-ssh-keys

Release notes

Latest release

The most recent release with notes; the full release history is in product.json.

Trino 484

AWS · 2026-10-25

Trino updated 483 -> 484. Apache-2.0 unchanged; Java 25 runtime unchanged
Breaking for SQL clients: JSON functions now keep numeric types, decimal scale, member order and duplicate keys, JSON_SERIALIZE is a reserved keyword, and user-name case is preserved in GRANT, REVOKE and CREATE SCHEMA
Breaking for added catalogs: the Hive connector now defaults to PARQUET (set hive.storage-format=ORC to keep the old default), and Cassandra 4.0 or later is required
New: CLI OAuth 2.0 client credentials authentication, worker thread snapshots and query text line numbers in the Web UI
Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com
Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base