The pool

The display is the one part of a slot nothing here can rebuild: if it has gone, the supervisor tears the whole pool down rather than restarting one slot. unknown means the probe could not tell, which is not the same as down.

A held slot is somebody's experiment and is claiming nothing — which is the difference between an idle slot and a missing one.

The strike count is not on this page. A slot that dies is relaunched in place by the render parent, and after five short-lived deaths in a row the parent exits and the supervisor rebuilds the pool — but that count lives in the parent's own memory and nothing writes it down, so it is read from killbeat-canonical's journal. What is here instead is the shape that count is made of: a slot whose display answers while its jobs keep coming back non-zero.

The panes are view-only, and that is enforced by x11vnc -viewonly rather than by this page: input into a filming engine would change the capture.

The panes come through this page — /vnc/K/ here, tunnelled to that slot's noVNC on loopback, so they share this origin and an admin's session is what opens them. The units' own ports are not behind this sign-in: each slot still serves itself on 692K to anything that can reach this box, and the wall on 6920 does the same. What keeps those private is the LAN and systemctl stop killbeat-vnc.target.

A proxy that serves the panes itself takes them over. Set KILLBEAT_CURATE_VNC_BASE to the base under which slot K's pane is <base>/K/pane.html and the wall loads them from there instead of from here.