Since 17.0 profiles, berkdb isn't enabled by default anymore. Consider adding it active by default. Otherwise this can happen: # postmap /etc/postfix/virtual postmap: fatal: unsupported map type for this operation: hash
This one is invalid. Hardened seems to disable it with 17.0