@Ian osquery inside docker can be used for testing. But is not ideal if you are trying to gather host data. osquery reads data from /proc etc which will not be available in the container. Even when you run it in privileged mode.