pkg/system: deprecate IsAbs and move internal

thaJeztah · thaJeztah · commit f8a2550a22d3 · 2025-07-12T19:51:34.000+02:00
Signed-off-by: Sebastiaan van Stijn &lt;github@gone.nl&gt;
diff --git a/builder/dockerfile/builder_windows.go b/builder/dockerfile/builder_windows.go
@@ -1,8 +1,26 @@
 package dockerfile
 
+import (
+	"os"
+	"path/filepath"
+	"strings"
+)
+
 func defaultShellForOS(os string) []string {
 	if os == "linux" {
 		return []string{"/bin/sh", "-c"}
 	}
 	return []string{"cmd", "/S", "/C"}
 }
+
+// isAbs is a platform-agnostic wrapper for filepath.IsAbs.
+//
+// On Windows, golang filepath.IsAbs does not consider a path \windows\system32
+// as absolute as it doesn't start with a drive-letter/colon combination. However,
+// in docker we need to verify things such as WORKDIR /windows/system32 in
+// a Dockerfile (which gets translated to \windows\system32 when being processed
+// by the daemon). This SHOULD be treated as absolute from a docker processing
+// perspective.
+func isAbs(path string) bool {
+	return filepath.IsAbs(path) || strings.HasPrefix(path, string(os.PathSeparator))
+}
diff --git a/builder/dockerfile/copy_windows.go b/builder/dockerfile/copy_windows.go
@@ -107,10 +107,10 @@ func normalizeDest(workingDir, requested string) (string, error) {
 
 	// Cannot handle relative where WorkingDir is not the system drive.
 	if len(workingDir) > 0 {
-		if ((len(workingDir) > 1) && !system.IsAbs(workingDir[2:])) || (len(workingDir) == 1) {
+		if ((len(workingDir) > 1) && !isAbs(workingDir[2:])) || (len(workingDir) == 1) {
 			return "", fmt.Errorf("Current WorkingDir %s is not platform consistent", workingDir)
 		}
-		if !system.IsAbs(dest) {
+		if !isAbs(dest) {
 			if string(workingDir[0]) != "C" {
 				return "", fmt.Errorf("Windows does not support relative paths when WORKDIR is not the system drive")
 			}
diff --git a/builder/dockerfile/dispatchers_windows.go b/builder/dockerfile/dispatchers_windows.go
@@ -10,7 +10,6 @@ import (
 
 	"github.com/docker/docker/api/types/container"
 	"github.com/docker/docker/internal/lazyregexp"
-	"github.com/docker/docker/pkg/system"
 	"github.com/moby/buildkit/frontend/dockerfile/instructions"
 )
 
@@ -83,7 +82,7 @@ func normalizeWorkdirWindows(current string, requested string) (string, error) {
 	//	WORKDIR C:/foo \ WORKDIR bar    --> C:\foo --> C:\foo\bar
 	//	WORKDIR C:/foo \ WORKDIR \\bar  --> C:\foo --> C:\bar
 	//	WORKDIR /foo \ WORKDIR c:/bar   --> C:\foo --> C:\bar
-	if len(current) == 0 || system.IsAbs(requested) {
+	if len(current) == 0 || isAbs(requested) {
 		if (requested[0] == os.PathSeparator) ||
 			(len(requested) > 1 && string(requested[1]) != ":") ||
 			(len(requested) == 1) {
diff --git a/daemon/container.go b/daemon/container.go
@@ -6,6 +6,7 @@ import (
 	"os"
 	"path/filepath"
 	"runtime"
+	"strings"
 	"time"
 
 	"github.com/containerd/log"
@@ -19,7 +20,6 @@ import (
 	"github.com/docker/docker/image"
 	"github.com/docker/docker/oci/caps"
 	"github.com/docker/docker/opts"
-	"github.com/docker/docker/pkg/system"
 	volumemounts "github.com/docker/docker/volume/mounts"
 	"github.com/docker/go-connections/nat"
 	"github.com/moby/sys/signal"
@@ -369,7 +369,7 @@ func translateWorkingDir(config *containertypes.Config) error {
 		return nil
 	}
 	wd := filepath.FromSlash(config.WorkingDir) // Ensure in platform semantics
-	if !system.IsAbs(wd) {
+	if !filepath.IsAbs(wd) && !strings.HasPrefix(wd, string(os.PathSeparator)) {
 		return fmt.Errorf("the working directory '%s' is invalid, it needs to be an absolute path", config.WorkingDir)
 	}
 	config.WorkingDir = filepath.Clean(wd)
diff --git a/pkg/system/filesys.go b/pkg/system/filesys.go
@@ -14,6 +14,8 @@ import (
 // a Dockerfile (which gets translated to \windows\system32 when being processed
 // by the daemon). This SHOULD be treated as absolute from a docker processing
 // perspective.
+//
+// Deprecated: this function was only used internally and will be removed in the next release.
 func IsAbs(path string) bool {
 	return filepath.IsAbs(path) || strings.HasPrefix(path, string(os.PathSeparator))
 }

Original file line number	Diff line number	Diff line change
`@@ -107,10 +107,10 @@ func normalizeDest(workingDir, requested string) (string, error) {`
`107`	`107`
`108`	`108`	`// Cannot handle relative where WorkingDir is not the system drive.`
`109`	`109`	`if len(workingDir) > 0 {`
`110`		`- if ((len(workingDir) > 1) && !system.IsAbs(workingDir[2:])) \|\| (len(workingDir) == 1) {`
	`110`	`+ if ((len(workingDir) > 1) && !isAbs(workingDir[2:])) \|\| (len(workingDir) == 1) {`
`111`	`111`	`return "", fmt.Errorf("Current WorkingDir %s is not platform consistent", workingDir)`
`112`	`112`	`}`
`113`		`- if !system.IsAbs(dest) {`
	`113`	`+ if !isAbs(dest) {`
`114`	`114`	`if string(workingDir[0]) != "C" {`
`115`	`115`	`return "", fmt.Errorf("Windows does not support relative paths when WORKDIR is not the system drive")`
`116`	`116`	`}`
Original file line number	Diff line number	Diff line change
`@@ -14,6 +14,8 @@ import (`
`14`	`14`	`// a Dockerfile (which gets translated to \windows\system32 when being processed`
`15`	`15`	`// by the daemon). This SHOULD be treated as absolute from a docker processing`
`16`	`16`	`// perspective.`
	`17`	`+//`
	`18`	`+// Deprecated: this function was only used internally and will be removed in the next release.`
`17`	`19`	`func IsAbs(path string) bool {`
`18`	`20`	`return filepath.IsAbs(path) \|\| strings.HasPrefix(path, string(os.PathSeparator))`
`19`	`21`	`}`