Page MenuHomePhabricator
Create Task
Maniphest T367818

[Trino] Investigate install, operation and maintenance, and security monitoring.
Closed, ResolvedPublic
Actions

Description

Trino recommendation is strongly for JVM v22 / Adoptium Eclipse Temurin. This is easily installed from https://packages.adoptium.net which dovetails pretty well with our existing tooling for software maintenance. This has been puppetized as base::package::temurin_22_jdk

Other dependencies need to be investigated. It looks like Trino needs Hive as its metadata store, which in turn depends on mysql/mariadb as its metadata store.

Trino itself looks pretty straightforward, see https://trino.io/docs/current/installation/deployment.html and we would additionally run Hive for the metadata store.

Tarball is available here: https://repo1.maven.org/maven2/io/trino/trino-server

Keeping up with the release cycle and changes will be a project. I haven't managed to get useful release data from the API for their github repository. The only source for release notes I have found is here https://trino.io/docs/current/release.

Related Objects
Search...

Event Timeline

Jgreen created this task.Jun 17 2024, 8:58 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 17 2024, 8:58 PM
sbassett moved this task from Incoming to Upcoming Quarter Planning Queue on the secscrum board.Jun 17 2024, 9:10 PM
Jgreen renamed this task from Investigate starburst(trino) install, operation and maintenance, and security monitoring. to Investigate Trino/Starburst install, operation and maintenance, and security monitoring..Jun 27 2024, 10:01 PM
Jgreen updated the task description. (Show Details)
Jgreen updated the task description. (Show Details)
Jgreen updated the task description. (Show Details)Jun 27 2024, 10:04 PM
sbassett removed projects: secscrum, RFS.Jul 3 2024, 5:15 PM
Jgreen updated the task description. (Show Details)Sep 19 2024, 5:39 PM
Jgreen claimed this task.Sep 25 2024, 1:08 PM
Jgreen triaged this task as Medium priority.
Jgreen added a comment.Oct 4 2024, 2:12 PM

Fetching and package building has been automated in a new FR admin tool called package_getter.

Unfortunately Trino's changelogs are hard to access in an automated way. They don't seem to use github release tagging, so what you can get from github is the git history. There is a cleaned-up changelog in their Maven repository, one large/complex webpage per release. Scraping that and bundling changes across multiple releases it into a single viewable/emailable text document would be a challenge.

So, still to-do: changelog review, and vulnerability and update tracking.

Jgreen renamed this task from Investigate Trino/Starburst install, operation and maintenance, and security monitoring. to Investigate Trino install, operation and maintenance, and security monitoring..Oct 4 2024, 2:12 PM
Jgreen added a project: fundraising-tech-ops.
Jgreen moved this task from Triage to In Progress on the fundraising-tech-ops board.
Jgreen updated the task description. (Show Details)Oct 4 2024, 5:34 PM
Jgreen updated the task description. (Show Details)Oct 4 2024, 6:11 PM
Jgreen renamed this task from Investigate Trino install, operation and maintenance, and security monitoring. to [Trino] Investigate install, operation and maintenance, and security monitoring..Oct 18 2024, 7:24 PM
Jgreen added a parent task: T377362: EPIC: Trino/MinIO/Hive-Standalone-Metaserver/Dagster/Metabase/Superset Implementation.
Irisbdc added a project: Fundraising analytics stack.Dec 18 2024, 6:56 PM
Irisbdc moved this task from Backlog to In Progress on the Fundraising analytics stack board.
Jgreen added a parent task: T392093: EPIC: Trino implementation.Apr 16 2025, 1:57 PM
Jgreen removed parent tasks: T377362: EPIC: Trino/MinIO/Hive-Standalone-Metaserver/Dagster/Metabase/Superset Implementation, Restricted Task.
Jgreen closed this task as Resolved.May 12 2025, 1:33 PM
Jgreen moved this task from In Progress to Done on the fundraising-tech-ops board.

Vulnerability and update tracking are working via package_getter daily checks. Changelog review will remain manual.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits