Summary

PR #147 (upstream release-0.297-edge10 merge) accidentally overwrote presto-native-execution/scripts/dockerfiles/prestissimo-runtime.dockerfile, removing the ca-certificates package installation that was added in PR #55.

Impact

Without ca-certificates, the Prestissimo worker cannot verify TLS certificates when accessing presigned S3 URLs. S3 queries fail silently — they report success with no error or warning logs, but return zero rows.

Root Cause

The upstream merge commit (f3b5eea1) reset the Dockerfile to the upstream version, dropping the CLP-specific addition from commit b00627f0 (PR #55).

Steps to Reproduce

1. Build and run the worker image from the release-0.297-edge-10-clp-connector branch (PR chore: Integrate upstream Presto release-0.297-edge10 and adapt CLP connector. #147).
2. Run a CLP query that reads from S3.
3. Query completes with no error, but returns no rows.

Expected Fix

Re-apply the ca-certificates installation (and associated non-interactive apt/yum setup) to the final runtime stage of presto-native-execution/scripts/dockerfiles/prestissimo-runtime.dockerfile, as was done in PR #55.

References

• PR that introduced the regression: chore: Integrate upstream Presto release-0.297-edge10 and adapt CLP connector. #147
• PR that originally added ca-certificates: chore: Add ca-certificates to the worker's runtime image to support reading signed S3 URLs in the CLP connector (fixes #56). #55
• Reported by: @junhaoliao