{
 "slug": "trino",
 "name": "Trino",
 "tagline": "Distributed SQL query engine for federated analytics across data sources",
 "category": "database",
 "use_cases": [
  "federated-queries",
  "data-lake",
  "sql-analytics"
 ],
 "aliases": [
  "prestosql"
 ],
 "status": "live",
 "upstream": {
  "vendor": "Trino Software Foundation",
  "url": "https://trino.io",
  "license": "Apache-2.0",
  "license_url": "https://github.com/trinodb/trino/blob/master/LICENSE"
 },
 "image": {
  "os": "Ubuntu 24.04 LTS",
  "cis_level": 1,
  "ports": [
   443
  ],
  "artifacts": [
   "/etc/lynxroute/sbom.json",
   "/etc/lynxroute/cis-report.html",
   "/usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
  ]
 },
 "clouds": {
  "aws": {
   "status": "live",
   "version": "484",
   "last_build": "2026-10-25",
   "entity_id": "prod-qyo7a5pu7qj2u",
   "ami_alias": "/aws/service/marketplace/prod-qyo7a5pu7qj2u/latest",
   "listing_url": "https://aws.amazon.com/marketplace/pp/prodview-gef53cnyp6fbu",
   "recommended_instance_type": "m6i.xlarge",
   "price_usd_per_hour": 0.05,
   "free_trial_days": 5,
   "unit": "instance-hour"
  },
  "azure": {
   "status": "live",
   "version": "483",
   "last_build": "2026-07-22",
   "offer_id": "trino",
   "plan_id": "payg-gen2",
   "image_urn": "lynxroute:trino:payg-gen2:latest",
   "listing_url": "https://azuremarketplace.microsoft.com/en-us/marketplace/apps/lynxroute.trino?tab=Overview",
   "recommended_vm_size": "Standard_D4s_v3",
   "price_usd_per_vcpu_hour": 0.028,
   "unit": "vcpu-hour"
  },
  "alicloud": {
   "status": "not_offered"
  }
 },
 "urls": {
  "page": "https://lynxroute.com/products/trino/",
  "json": "https://lynxroute.com/products/trino/product.json"
 },
 "release_notes": [
  {
   "version": "484",
   "title": "Trino 484",
   "notes": "* Trino updated 483 -> 484. Apache-2.0 unchanged; Java 25 runtime unchanged\n* Breaking for SQL clients: JSON functions now keep numeric types, decimal scale, member order and duplicate keys, JSON_SERIALIZE is a reserved keyword, and user-name case is preserved in GRANT, REVOKE and CREATE SCHEMA\n* Breaking for added catalogs: the Hive connector now defaults to PARQUET (set hive.storage-format=ORC to keep the old default), and Cassandra 4.0 or later is required\n* New: CLI OAuth 2.0 client credentials authentication, worker thread snapshots and query text line numbers in the Web UI\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-10-25"
   }
  },
  {
   "version": "483",
   "title": "Trino v483",
   "notes": "* Re-release of Trino 483. The application version is unchanged; this build refreshes the underlying operating system image\n* Certbot pre-installed - enable HTTPS with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base, picking up every operating-system security update published since the previous build\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-07-22"
   }
  },
  {
   "version": "483",
   "title": "Trino 483",
   "notes": "* Trino 483 - fast distributed SQL query engine for federated analytics (version bump from 482; bug fixes and connector improvements)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-09-04",
    "azure": "2026-07-22"
   }
  },
  {
   "version": "482",
   "title": "Trino 482",
   "notes": "* Trino 482 - fast distributed SQL query engine for federated analytics (version bump from 481; bug fixes and connector improvements)\n* Certbot pre-installed - enable a trusted HTTPS certificate with one command: sudo certbot --nginx -d yourdomain.com\n* Rebuilt on the latest CIS Level 1 hardened Ubuntu 24.04 LTS base\n",
   "source": "backfill-aws-listing",
   "live": {
    "aws": "2026-06-26",
    "azure": "2026-07-11"
   }
  },
  {
   "version": "481",
   "title": "Trino 481",
   "notes": "* Trino 481 on Ubuntu 24.04 LTS (single-node coordinator + worker, Java 25)\n* CIS Level 1 hardening applied (ansible-lockdown/UBUNTU24-CIS)\n* CVE-scanned before every release\n* Admin password generated at first boot; file-based password authentication for CLI/JDBC/BI clients\n* TLS terminated at nginx (port 443); Trino query port bound behind the firewall\n* JVM heap and query memory auto-sized to the instance; unique internal shared secret per instance\n* Bundled tpch and memory connectors; 40+ connectors available\n* UFW firewall pre-configured (ports 22, 443 only)\n* fail2ban, auditd, AppArmor pre-configured\n* SBOM (CycloneDX 1.6) at /etc/lynxroute/sbom.json\n* CIS Conformance Report (OpenSCAP) at /etc/lynxroute/cis-report.html\n* IMDSv2 enforced\n",
   "source": "backfill-aws-api",
   "live": {
    "aws": "2026-06-10"
   }
  }
 ],
 "release_history": [
  {
   "version": "484",
   "aws": "2026-10-25"
  },
  {
   "version": "483",
   "aws": "2026-09-04",
   "azure": "2026-07-22"
  },
  {
   "version": "482",
   "aws": "2026-06-26",
   "azure": "2026-07-11"
  },
  {
   "version": "481",
   "aws": "2026-06-10"
  }
 ],
 "deploy": {
  "aws_cli": "# subscribe once on the AWS Marketplace listing, then:\naws ec2 run-instances \\\n  --image-id resolve:ssm:/aws/service/marketplace/prod-qyo7a5pu7qj2u/latest \\\n  --instance-type m6i.xlarge --key-name my-key --security-group-ids sg-xxxxxxxx",
  "azure_cli": "# accept the plan terms once, then:\naz vm image terms accept --publisher lynxroute --offer trino --plan payg-gen2\naz vm create -g my-rg -n trino --size Standard_D4s_v3 \\\n  --image lynxroute:trino:payg-gen2:latest --admin-username azureuser --generate-ssh-keys"
 },
 "description": {
  "what_is": "Trino is a fast, distributed SQL query engine for federated analytics, maintained by the Trino Software Foundation (the upstream of the project formerly known as PrestoSQL). It runs as a single Java 25 JVM that acts as both coordinator and worker, so one node is a complete cluster. Trino speaks ANSI SQL with a cost-based optimizer and executes queries in parallel across pluggable connectors, letting you join data that lives in object storage, relational databases, data lakes and streams - all in a single query, without copying or ETL. The full distribution ships 40+ connectors (S3, PostgreSQL, MySQL, Iceberg, Delta Lake, Hive, Kafka, ClickHouse, and more). Trino is stateless: it stores no data of its own and queries external sources directly. This image bundles the tpch (benchmark) and memory connectors so you can validate it immediately. Apache-2.0 license, no vendor lock-in.",
  "image_adds": "Security hardening:\n* Admin password generated uniquely at first boot, written to /root/trino-credentials.txt (mode 600)\n* File-based password authentication so CLI, JDBC and BI clients log in over TLS\n* TLS terminated at nginx on port 443; Trino's HTTP port (8080) is bound behind the firewall, never exposed\n* A unique internal cluster shared secret generated per instance at first boot\n* JVM heap and query memory limits auto-sized to the instance RAM (no OOM on first launch)\n* UFW firewall pre-configured (only ports 22 and 443 open)\n* CVE scan - every image is scanned for vulnerabilities before release\n\nOS hardening (CIS Level 1):\n* CIS Ubuntu 24.04 LTS Level 1 benchmark applied via ansible-lockdown\n* auditd, fail2ban, AppArmor, SSH key-only, kernel hardening, IMDSv2 enforced\n\nCompliance artifacts:\n* SBOM - CycloneDX 1.6 at /etc/lynxroute/sbom.json\n* CIS Conformance Report at /etc/lynxroute/cis-report.html\n* CIS Tailored Profile at /usr/share/doc/lynxroute/CIS_TAILORED_PROFILE.md"
 },
 "generated_at": "2026-10-31T09:36:34Z"
}