the osquery docker tables are cool, but seem to be designed to provide the same set of information that the docker command line would provide by talking to the docker socket.