Prevent automatic upgrade of Gerrit package

Do not automatically upgrade Gerrit if not explicitly
requested. Gerrit upgrade needs more planning and testing, the package
should not be at risk to be silently upgraded by the system admin
or automatically.

Change-Id: I1394ecd35c0b3858f1580d713e8ddcca3d2245f1
diff --git a/ubuntu/16/Dockerfile b/ubuntu/16/Dockerfile
index e270583..830e854 100644
--- a/ubuntu/16/Dockerfile
+++ b/ubuntu/16/Dockerfile
@@ -12,7 +12,7 @@
 # Install OpenJDK and Gerrit in two subsequent transactions
 # (pre-trans Gerrit script needs to have access to the Java command)
 RUN apt-get -y install openjdk-8-jdk
-RUN apt-get -y install gerrit=2.16.16-1 && rm -f /var/gerrit/logs/*
+RUN apt-get -y install gerrit=2.16.16-1 && apt-mark hold gerrit && rm -f /var/gerrit/logs/*
 
 USER gerrit
 RUN java -jar /var/gerrit/bin/gerrit.war init --batch --install-all-plugins -d /var/gerrit