The pool

The display is the one part of a slot nothing here can rebuild: if it has gone, the supervisor tears the whole pool down rather than restarting one slot. unknown means the probe could not tell, which is not the same as down.

A held slot is somebody's experiment and is claiming nothing — which is the difference between an idle slot and a missing one.

The strike count is not on this page. A slot that dies is relaunched in place by the render parent, and after five short-lived deaths in a row the parent exits and the supervisor rebuilds the pool — but that count lives in the parent's own memory and nothing writes it down, so it is read from killbeat-canonical's journal. What is here instead is the shape that count is made of: a slot whose display answers while its jobs keep coming back non-zero.

The panes are view-only, and that is enforced by x11vnc -viewonly rather than by this page: input into a filming engine would change the capture.

Those ports are not behind this sign-in. Each slot's noVNC serves itself on 692K to anything that can reach this box, and the wall on 6920 does the same. This page embeds them; it does not protect them. What keeps them private is the LAN and systemctl stop killbeat-vnc.target.

Behind a proxy, the panes need the proxy too. The VNC units bind plain http, and an https page cannot embed an http frame — so serve slot K's pane at <base>/K/pane.html through whatever terminates TLS and set KILLBEAT_CURATE_VNC_BASE to that base. Until then this page links to them rather than embedding them, and those links only work from the LAN.