Update VM for 2017

I know I'm way too late on this, but better than never.

Change-Id: I924c38873d3452c491eb7b75918d8f70e89bf8fd
diff --git a/vm/setup_code_building.sh b/vm/setup_code_building.sh
index a27b60e..cbb8fcd 100755
--- a/vm/setup_code_building.sh
+++ b/vm/setup_code_building.sh
@@ -46,6 +46,14 @@
 kernel.unprivileged_userns_clone = 1
 EOT
 
+# We need to explicitly pull in the java certificates from backports. Otherwise
+# bazel won't install properly.
+cat > /etc/apt/preferences.d/java_certificates <<EOT
+Package: ca-certificates-java
+Pin: release a=jessie-backports
+Pin-Priority: 900
+EOT
+
 # Accept the LLVM GPG key so we can install their packages.
 wget -O - http://llvm.org/apt/llvm-snapshot.gpg.key | apt-key add -