Detecting OS shouldn't be a problem. Usually there is some info under /etc. I think osquery already does some of this (either in provision scripts or code)