Fix missing online hook

docs/TODO.md

@@ -136,8 +136,20 @@ boot LAN.
     didn't fire the nvmf online hook, so the namespace never auto-connected and
     boot spun on `/dev/mapper/root` forever (manual `connect-all` worked, which
     is what masked it). **Fixed:** the bypass branch no longer touches the NIC;
-    `ip=dhcp` owns networking and triggers nvmf autoconnect. (The secure path
-    still addresses macsec0 itself — dracut doesn't know about that interface.)
+    `ip=dhcp` owns networking. (The secure path still addresses macsec0 itself —
+    dracut doesn't know about that interface.)
+  - **dracut's `nvmf` module never auto-connects on this distro.** Its cmdline
+    hook (`92-parse-nvmf-boot-connections.sh`) parses `rd.nvmf.discover` into
+    `/etc/nvme/discovery.conf` correctly, but `initqueue/online/` is **empty** —
+    no autoconnect hook is registered, so `nvme connect-all` is never run (no
+    attempt in dmesg) and the namespace never appears. Drivers load and
+    `/dev/nvme-fabrics` exists; only the connect trigger is missing. **Fixed:**
+    `dot1x-macsec-up.sh` (rd.dot1x=0 branch) now parses the discover address and
+    queues `nvme connect-all` on the initqueue itself (retries until the
+    namespace shows up). **⚠ The secure path has the same dependency on the
+    (absent) nvmf autoconnect** — when 802.1X is re-enabled, the macsec0 path
+    must likewise drive `connect-all` (or the network-manager port #1 must wire
+    a working autoconnect). Currently only the test path is fixed.
   - The target Rocky 9 kernel's erofs is built **without
     `CONFIG_EROFS_FS_ZIP`** — mounting a compressed image fails `erofs: lz4
     algorithm isn't enabled`, which silently blocks the root mount. **Fixed:**