Let's assume I have a KVM-based virtual machine. There is a volume that contains the operating system and the data.
I know it is possible to access from host at least READ-ONLY the filesystem which is on guest.
If it is possible to access the guest FS in RW mode, then could I somehow detect that the filesystem was mounted?
The filesystem is ext4, is it storing any information about how and when it was mounted?