diff --git a/packages/orchestrator/Makefile b/packages/orchestrator/Makefile
--- a/packages/orchestrator/Makefile
+++ b/packages/orchestrator/Makefile
@@ -146,12 +146,17 @@
 	elif command -v apt-get >/dev/null 2>&1 && command -v dpkg-deb >/dev/null 2>&1; then \
 		echo "Fetching arm64 busybox via apt..."; \
 		TMPDIR=$$(mktemp -d); \
-		apt-get download busybox-static 2>/dev/null && \
-			dpkg-deb -x busybox-static_*.deb "$$TMPDIR" && \
+		apt-get download busybox-static:arm64 2>/dev/null && \
+			dpkg-deb -x busybox-static_*_arm64.deb "$$TMPDIR" && \
+			if ! file "$$TMPDIR/bin/busybox" 2>/dev/null | grep -q 'aarch64\|ARM aarch64'; then \
+				rm -rf "$$TMPDIR" busybox-static_*.deb; \
+				echo "⚠ Downloaded busybox is not arm64 architecture"; \
+				exit 1; \
+			fi && \
 			cp "$$TMPDIR/bin/busybox" "$$BUSYBOX_TARGET" && \
 			rm -rf "$$TMPDIR" busybox-static_*.deb && \
 			echo "✓ Replaced embedded busybox with arm64 binary (from busybox-static package)" || \
-			{ rm -rf "$$TMPDIR" busybox-static_*.deb; echo "⚠ apt-get download failed"; exit 1; }; \
+			{ rm -rf "$$TMPDIR" busybox-static_*.deb; echo "⚠ apt-get download failed (arm64 architecture may not be configured)"; exit 1; }; \
 	else \
 		echo "⚠ ARM64 busybox required but no method available to fetch it."; \
 		echo "  Options:"; \

diff --git a/packages/orchestrator/pkg/sandbox/fc/config.go b/packages/orchestrator/pkg/sandbox/fc/config.go
--- a/packages/orchestrator/pkg/sandbox/fc/config.go
+++ b/packages/orchestrator/pkg/sandbox/fc/config.go
@@ -13,6 +13,13 @@
 
 	FirecrackerBinaryName = "firecracker"
 
+	// SeccompFilterName is the name of the custom seccomp filter BPF file.
+	// On aarch64, the default Firecracker seccomp filter does not include the
+	// userfaultfd syscall (nr 282), which is required for UFFD-based snapshot
+	// restore. A custom filter that adds userfaultfd can be placed at:
+	//   {FirecrackerVersionsDir}/{version}/[{arch}/]seccomp-filter.bpf
+	SeccompFilterName = "seccomp-filter.bpf"
+
 	envsDisk     = "/mnt/disks/fc-envs/v1"
 	buildDirName = "builds"
 
@@ -55,6 +62,25 @@
 	return filepath.Join(config.FirecrackerVersionsDir, t.FirecrackerVersion, FirecrackerBinaryName)
 }
 
+// SeccompFilterPath returns the path to a custom seccomp filter BPF file if it exists.
+// Returns empty string if no custom filter is found. The custom filter should include
+// the userfaultfd syscall for UFFD-based snapshot restore on aarch64.
+func (t Config) SeccompFilterPath(config cfg.BuilderConfig) string {
+	// Check arch-prefixed path first ({version}/{arch}/seccomp-filter.bpf)
+	archPath := filepath.Join(config.FirecrackerVersionsDir, t.FirecrackerVersion, utils.TargetArch(), SeccompFilterName)
+	if _, err := os.Stat(archPath); err == nil {
+		return archPath
+	}
+
+	// Fall back to legacy flat path ({version}/seccomp-filter.bpf)
+	flatPath := filepath.Join(config.FirecrackerVersionsDir, t.FirecrackerVersion, SeccompFilterName)
+	if _, err := os.Stat(flatPath); err == nil {
+		return flatPath
+	}
+
+	return ""
+}
+
 type RootfsPaths struct {
 	TemplateVersion uint64
 	TemplateID      string

diff --git a/packages/orchestrator/pkg/sandbox/fc/config_test.go b/packages/orchestrator/pkg/sandbox/fc/config_test.go
--- a/packages/orchestrator/pkg/sandbox/fc/config_test.go
+++ b/packages/orchestrator/pkg/sandbox/fc/config_test.go
@@ -111,3 +111,69 @@
 	// Should prefer the arch-prefixed path
 	assert.Equal(t, filepath.Join(dir, "vmlinux-6.1.102", arch, "vmlinux.bin"), result)
 }
+
+func TestSeccompFilterPath_ArchPrefixed(t *testing.T) {
+	t.Parallel()
+	dir := t.TempDir()
+	arch := utils.TargetArch()
+
+	// Create the arch-prefixed seccomp filter
+	archDir := filepath.Join(dir, "v1.12.0", arch)
+	require.NoError(t, os.MkdirAll(archDir, 0o755))
+	require.NoError(t, os.WriteFile(filepath.Join(archDir, "seccomp-filter.bpf"), []byte("bpf"), 0o644))
+
+	config := cfg.BuilderConfig{FirecrackerVersionsDir: dir}
+	fc := Config{FirecrackerVersion: "v1.12.0"}
+
+	result := fc.SeccompFilterPath(config)
+
+	assert.Equal(t, filepath.Join(dir, "v1.12.0", arch, "seccomp-filter.bpf"), result)
+}
+
+func TestSeccompFilterPath_LegacyFallback(t *testing.T) {
+	t.Parallel()
+	dir := t.TempDir()
+
+	// Only create the legacy flat seccomp filter
+	require.NoError(t, os.MkdirAll(filepath.Join(dir, "v1.12.0"), 0o755))
+	require.NoError(t, os.WriteFile(filepath.Join(dir, "v1.12.0", "seccomp-filter.bpf"), []byte("bpf"), 0o644))
+
+	config := cfg.BuilderConfig{FirecrackerVersionsDir: dir}
+	fc := Config{FirecrackerVersion: "v1.12.0"}
+
+	result := fc.SeccompFilterPath(config)
+
+	assert.Equal(t, filepath.Join(dir, "v1.12.0", "seccomp-filter.bpf"), result)
+}
+
+func TestSeccompFilterPath_NoneExists(t *testing.T) {
+	t.Parallel()
+	dir := t.TempDir()
+
+	// No seccomp filter — should return empty string
+	config := cfg.BuilderConfig{FirecrackerVersionsDir: dir}
+	fc := Config{FirecrackerVersion: "v1.12.0"}
+
+	result := fc.SeccompFilterPath(config)
+
+	assert.Equal(t, "", result)
+}
+
+func TestSeccompFilterPath_PrefersArchOverLegacy(t *testing.T) {
+	t.Parallel()
+	dir := t.TempDir()
+	arch := utils.TargetArch()
+
+	// Create BOTH arch-prefixed and legacy flat seccomp filters
+	require.NoError(t, os.MkdirAll(filepath.Join(dir, "v1.12.0", arch), 0o755))
+	require.NoError(t, os.WriteFile(filepath.Join(dir, "v1.12.0", arch, "seccomp-filter.bpf"), []byte("arch-bpf"), 0o644))
+	require.NoError(t, os.WriteFile(filepath.Join(dir, "v1.12.0", "seccomp-filter.bpf"), []byte("legacy-bpf"), 0o644))
+
+	config := cfg.BuilderConfig{FirecrackerVersionsDir: dir}
+	fc := Config{FirecrackerVersion: "v1.12.0"}
+
+	result := fc.SeccompFilterPath(config)
+
+	// Should prefer the arch-prefixed path
+	assert.Equal(t, filepath.Join(dir, "v1.12.0", arch, "seccomp-filter.bpf"), result)
+}

diff --git a/packages/orchestrator/pkg/sandbox/fc/script_builder.go b/packages/orchestrator/pkg/sandbox/fc/script_builder.go
--- a/packages/orchestrator/pkg/sandbox/fc/script_builder.go
+++ b/packages/orchestrator/pkg/sandbox/fc/script_builder.go
@@ -87,13 +87,20 @@
 	rootfsPaths RootfsPaths,
 	namespaceID string,
 ) startScriptArgs {
-	// On ARM64, disable seccomp to allow userfaultfd syscall for snapshot restore.
-	// The upstream Firecracker seccomp filter for aarch64 does not include the
-	// userfaultfd syscall (nr 282), causing snapshot loading to fail with
-	// "Failed to UFFD object: System error".
+	// On ARM64, we need to handle seccomp specially because the upstream Firecracker
+	// seccomp filter for aarch64 does not include the userfaultfd syscall (nr 282),
+	// which is required for UFFD-based snapshot restore.
+	//
+	// If a custom seccomp filter is available (seccomp-filter.bpf), use it via
+	// --seccomp-filter. This custom filter should be the default aarch64 filter
+	// with userfaultfd added. If no custom filter exists, fall back to --no-seccomp.
 	var extraArgs string
 	if runtime.GOARCH == "arm64" {
-		extraArgs = " --no-seccomp"
+		if filterPath := versions.SeccompFilterPath(sb.builderConfig); filterPath != "" {
+			extraArgs = " --seccomp-filter " + filterPath
+		} else {
+			extraArgs = " --no-seccomp"
+		}
 	}
 
 	return startScriptArgs{